diff --git a/CHANGELOG.md b/CHANGELOG.md index b5a4fc2b8a..186bf9411a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,13 @@ #### Changed #### Fixed #### Removed +* `post_upgrade_job.*`, and the post-upgrade job itself, has been removed. All + it's functionality has been consolidated into the `post_install_job`, which + actually runs on both post-install and post-upgrade. + + The consolidated job now runs the redpanda-operator image, which may be + controlled the same way as the additional controllers: + `statefulset.controllers.{image,repository}`. ### [5.9.5](https://github.com/redpanda-data/helm-charts/releases/tag/redpanda-5.9.5) - 2024-09-26 #### Added @@ -181,6 +188,13 @@ #### Fixed #### Removed +### [0.4.31](https://github.com/redpanda-data/helm-charts/releases/tag/operator-0.4.31) - 2024-10-7 +#### Added +#### Changed +* Bump operator version [v2.2.4-24.2.5](https://github.com/redpanda-data/redpanda-operator/releases/tag/v2.2.5-24.2.5) +#### Fixed +#### Removed + ### [0.4.30](https://github.com/redpanda-data/helm-charts/releases/tag/operator-0.4.30) - 2024-09-17 #### Added * Add RBAC rules for the operator chart so it can manage users diff --git a/charts/operator/Chart.yaml b/charts/operator/Chart.yaml index ecc7e6b4e8..f5b828cec4 100644 --- a/charts/operator/Chart.yaml +++ b/charts/operator/Chart.yaml @@ -6,11 +6,11 @@ type: application # The chart version and the app version are not the same and will not track # together. The chart version is a semver representation of changes to this # chart. -version: 0.4.30 +version: 0.4.31 # This is the default version of the operator being deployed. # ** NOTE for maintainers: please enssure the artifacthub image annotation is updated before merging -appVersion: v2.2.2-24.2.4 +appVersion: v2.2.4-24.2.5 sources: - https://github.com/redpanda-data/helm-charts @@ -34,11 +34,11 @@ annotations: url: https://helm.sh/docs/intro/install/ artifacthub.io/images: | - name: redpanda-operator - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 - name: configurator - image: docker.redpanda.com/redpandadata/configurator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/configurator:v2.2.4-24.2.5 - name: redpanda - image: docker.redpanda.com/redpandadata/redpanda:v24.2.4 + image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: kube-rbac-proxy image: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.0 artifacthub.io/crds: | diff --git a/charts/operator/README.md b/charts/operator/README.md index 5fba29f507..69843a96da 100644 --- a/charts/operator/README.md +++ b/charts/operator/README.md @@ -3,7 +3,7 @@ description: Find the default values and descriptions of settings in the Redpanda Operator Helm chart. --- -![Version: 0.4.30](https://img.shields.io/badge/Version-0.4.30-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.2-24.2.4](https://img.shields.io/badge/AppVersion-v2.2.2--24.2.4-informational?style=flat-square) +![Version: 0.4.31](https://img.shields.io/badge/Version-0.4.31-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.2.4-24.2.5](https://img.shields.io/badge/AppVersion-v2.2.4--24.2.5-informational?style=flat-square) This page describes the official Redpanda Operator Helm Chart. In particular, this page describes the contents of the chart’s [`values.yaml` file](https://github.com/redpanda-data/helm-charts/blob/main/charts/operator/values.yaml). Each of the settings is listed and described on this page, along with any default values. diff --git a/charts/operator/testdata/template-cases.golden.txtar b/charts/operator/testdata/template-cases.golden.txtar index c23b85ec63..7c168c27a9 100644 --- a/charts/operator/testdata/template-cases.golden.txtar +++ b/charts/operator/testdata/template-cases.golden.txtar @@ -14,8 +14,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: S namespace: default --- @@ -42,8 +42,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-config namespace: default --- @@ -57,8 +57,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-metrics-reader rules: - nonResourceURLs: @@ -76,8 +76,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-proxy-role rules: - apiGroups: @@ -103,8 +103,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -125,8 +125,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-election-role namespace: default rules: @@ -154,8 +154,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-pvc namespace: default rules: @@ -177,8 +177,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY namespace: default rules: @@ -682,8 +682,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-election-rolebinding namespace: default roleRef: @@ -705,8 +705,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-pvc namespace: default roleRef: @@ -728,8 +728,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY namespace: default roleRef: @@ -751,8 +751,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-metrics-service namespace: default spec: @@ -774,8 +774,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY namespace: default spec: @@ -802,7 +802,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=false - --namespace=default @@ -810,7 +810,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 873 @@ -891,8 +891,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: koBY-metrics-monitor namespace: default spec: @@ -913,8 +913,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aNfgS0 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml apiVersion: v1 @@ -1154,8 +1154,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu namespace: default --- @@ -1182,8 +1182,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-config namespace: default --- @@ -1197,8 +1197,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-metrics-reader rules: - nonResourceURLs: @@ -1216,8 +1216,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-proxy-role rules: - apiGroups: @@ -1243,8 +1243,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -1265,8 +1265,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-election-role namespace: default rules: @@ -1294,8 +1294,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-pvc namespace: default rules: @@ -1317,8 +1317,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu namespace: default rules: @@ -1822,8 +1822,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-election-rolebinding namespace: default roleRef: @@ -1845,8 +1845,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-pvc namespace: default roleRef: @@ -1868,8 +1868,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu namespace: default roleRef: @@ -1891,8 +1891,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu-metrics-service namespace: default spec: @@ -1914,8 +1914,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: EbX3hB7N - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: WSGbu namespace: default spec: @@ -2243,8 +2243,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G namespace: default --- @@ -2274,8 +2274,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-config namespace: default --- @@ -2292,8 +2292,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-metrics-reader rules: - nonResourceURLs: @@ -2314,8 +2314,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-proxy-role rules: - apiGroups: @@ -2344,8 +2344,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -2369,8 +2369,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-election-role namespace: default rules: @@ -2401,8 +2401,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-pvc namespace: default rules: @@ -2427,8 +2427,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G namespace: default rules: @@ -2935,8 +2935,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-election-rolebinding namespace: default roleRef: @@ -2961,8 +2961,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-pvc namespace: default roleRef: @@ -2987,8 +2987,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G namespace: default roleRef: @@ -3013,8 +3013,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G-metrics-service namespace: default spec: @@ -3039,8 +3039,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: HICN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Dx441G namespace: default spec: @@ -3070,7 +3070,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=false - --namespace=default @@ -3078,7 +3078,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 218 @@ -3374,8 +3374,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba namespace: default --- @@ -3402,8 +3402,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-config namespace: default --- @@ -3417,8 +3417,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-metrics-reader rules: - nonResourceURLs: @@ -3436,8 +3436,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-proxy-role rules: - apiGroups: @@ -3463,8 +3463,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -3485,8 +3485,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-election-role namespace: default rules: @@ -3514,8 +3514,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-pvc namespace: default rules: @@ -3537,8 +3537,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba namespace: default rules: @@ -4042,8 +4042,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-election-rolebinding namespace: default roleRef: @@ -4065,8 +4065,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-pvc namespace: default roleRef: @@ -4088,8 +4088,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba namespace: default roleRef: @@ -4111,8 +4111,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba-metrics-service namespace: default spec: @@ -4134,8 +4134,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kzHCtV - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rEba namespace: default spec: @@ -4170,7 +4170,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=2mS7jVj - --webhook-enabled=false - --namespace=default @@ -4181,7 +4181,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 336 @@ -4496,8 +4496,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: SpE0 namespace: default --- @@ -4525,8 +4525,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-config namespace: default --- @@ -4541,8 +4541,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-metrics-reader rules: - nonResourceURLs: @@ -4561,8 +4561,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-proxy-role rules: - apiGroups: @@ -4589,8 +4589,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -4612,8 +4612,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-election-role namespace: default rules: @@ -4642,8 +4642,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-pvc namespace: default rules: @@ -4666,8 +4666,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z namespace: default rules: @@ -5172,8 +5172,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-election-rolebinding namespace: default roleRef: @@ -5196,8 +5196,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-pvc namespace: default roleRef: @@ -5220,8 +5220,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z namespace: default roleRef: @@ -5244,8 +5244,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z-metrics-service namespace: default spec: @@ -5268,8 +5268,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BRlD - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kdh6Z namespace: default spec: @@ -5296,7 +5296,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=qylxfyVep - --webhook-enabled=false - --namespace=default @@ -5304,7 +5304,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 335 @@ -5602,8 +5602,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B namespace: default @@ -5633,8 +5633,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-config namespace: default @@ -5651,8 +5651,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-metrics-reader rules: @@ -5673,8 +5673,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-proxy-role rules: @@ -5703,8 +5703,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-proxy-role roleRef: @@ -5728,8 +5728,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-election-role namespace: default @@ -5760,8 +5760,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-pvc namespace: default @@ -5786,8 +5786,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B namespace: default @@ -6294,8 +6294,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-election-rolebinding namespace: default @@ -6320,8 +6320,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-pvc namespace: default @@ -6346,8 +6346,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B namespace: default @@ -6372,8 +6372,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B-metrics-service namespace: default @@ -6398,8 +6398,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zejbO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wU3MsxN: 4Bn0vQj name: WM7nRI7B namespace: default @@ -6752,8 +6752,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em namespace: default --- @@ -6781,8 +6781,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-config namespace: default --- @@ -6797,8 +6797,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-metrics-reader rules: - nonResourceURLs: @@ -6817,8 +6817,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-proxy-role rules: - apiGroups: @@ -6845,8 +6845,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -6868,8 +6868,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-election-role namespace: default rules: @@ -6898,8 +6898,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-pvc namespace: default rules: @@ -6922,8 +6922,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em namespace: default rules: @@ -7428,8 +7428,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-election-rolebinding namespace: default roleRef: @@ -7452,8 +7452,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-pvc namespace: default roleRef: @@ -7476,8 +7476,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em namespace: default roleRef: @@ -7500,8 +7500,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-metrics-service namespace: default spec: @@ -7524,8 +7524,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em namespace: default spec: @@ -7624,8 +7624,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Em-metrics-monitor namespace: default spec: @@ -7647,8 +7647,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: di - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml apiVersion: v1 @@ -7890,8 +7890,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QOxZ1 namespace: default --- @@ -7921,8 +7921,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 6yA-config namespace: default --- @@ -7939,8 +7939,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 6yA-metrics-service namespace: default spec: @@ -7965,8 +7965,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ij1lCfI4a - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 6yA namespace: default spec: @@ -8290,8 +8290,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: q5hs namespace: default @@ -8322,8 +8322,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-config namespace: default @@ -8341,8 +8341,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-metrics-reader rules: @@ -8364,8 +8364,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-proxy-role rules: @@ -8395,8 +8395,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-proxy-role roleRef: @@ -8421,8 +8421,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-election-role namespace: default @@ -8454,8 +8454,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-pvc namespace: default @@ -8481,8 +8481,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn namespace: default @@ -8990,8 +8990,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-election-rolebinding namespace: default @@ -9017,8 +9017,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-pvc namespace: default @@ -9044,8 +9044,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn namespace: default @@ -9071,8 +9071,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn-metrics-service namespace: default @@ -9098,8 +9098,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: GNbmN - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 u: yT9Aqc name: DBMkVbLNvvZn namespace: default @@ -9446,9 +9446,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs namespace: default --- @@ -9476,9 +9476,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-config namespace: default --- @@ -9493,9 +9493,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-metrics-reader rules: - nonResourceURLs: @@ -9514,9 +9514,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-proxy-role rules: - apiGroups: @@ -9543,9 +9543,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -9567,9 +9567,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-election-role namespace: default rules: @@ -9598,9 +9598,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-pvc namespace: default rules: @@ -9623,9 +9623,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs namespace: default rules: @@ -10130,9 +10130,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-election-rolebinding namespace: default roleRef: @@ -10155,9 +10155,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-pvc namespace: default roleRef: @@ -10180,9 +10180,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs namespace: default roleRef: @@ -10205,9 +10205,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs-metrics-service namespace: default spec: @@ -10230,9 +10230,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6n9214EY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gLlqKr: m - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: kBI8lEs namespace: default spec: @@ -10565,8 +10565,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE namespace: default --- @@ -10595,8 +10595,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-config namespace: default --- @@ -10612,8 +10612,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-metrics-reader rules: - nonResourceURLs: @@ -10633,8 +10633,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-proxy-role rules: - apiGroups: @@ -10662,8 +10662,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-rpk-bundle rules: - apiGroups: @@ -10717,8 +10717,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -10741,8 +10741,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-rpk-bundle roleRef: apiGroup: rbac.authorization.k8s.io @@ -10765,8 +10765,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-election-role namespace: default rules: @@ -10796,8 +10796,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-pvc namespace: default rules: @@ -10821,8 +10821,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE namespace: default rules: @@ -11328,8 +11328,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-election-rolebinding namespace: default roleRef: @@ -11353,8 +11353,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-pvc namespace: default roleRef: @@ -11378,8 +11378,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE namespace: default roleRef: @@ -11403,8 +11403,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE-metrics-service namespace: default spec: @@ -11428,8 +11428,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Ubj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: rcE namespace: default spec: @@ -11479,7 +11479,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=false - --namespace=default @@ -11489,7 +11489,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 107 @@ -11807,8 +11807,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07 @@ -11838,8 +11838,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-config @@ -11856,8 +11856,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-metrics-reader @@ -11878,8 +11878,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-proxy-role @@ -11908,8 +11908,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-proxy-role @@ -11933,8 +11933,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-election-role @@ -11965,8 +11965,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-pvc @@ -11991,8 +11991,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07 @@ -12499,8 +12499,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-election-rolebinding @@ -12525,8 +12525,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-pvc @@ -12551,8 +12551,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07 @@ -12577,8 +12577,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07-metrics-service @@ -12603,8 +12603,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pP - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mOxaE: dEuL w49JChsEQqA0: "3" name: 7guti07 @@ -12932,8 +12932,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI namespace: default --- @@ -12960,8 +12960,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-config namespace: default --- @@ -12975,8 +12975,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-metrics-reader rules: - nonResourceURLs: @@ -12994,8 +12994,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-proxy-role rules: - apiGroups: @@ -13021,8 +13021,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -13043,8 +13043,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-election-role namespace: default rules: @@ -13072,8 +13072,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-pvc namespace: default rules: @@ -13095,8 +13095,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI namespace: default rules: @@ -13600,8 +13600,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-election-rolebinding namespace: default roleRef: @@ -13623,8 +13623,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-pvc namespace: default roleRef: @@ -13646,8 +13646,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI namespace: default roleRef: @@ -13669,8 +13669,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI-metrics-service namespace: default spec: @@ -13692,8 +13692,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: E4UR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J5MiI namespace: default spec: @@ -14071,8 +14071,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS namespace: default --- @@ -14101,8 +14101,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-config namespace: default --- @@ -14118,8 +14118,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-metrics-reader rules: - nonResourceURLs: @@ -14139,8 +14139,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-proxy-role rules: - apiGroups: @@ -14168,8 +14168,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -14192,8 +14192,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-election-role namespace: default rules: @@ -14223,8 +14223,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-pvc namespace: default rules: @@ -14248,8 +14248,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS namespace: default rules: @@ -14755,8 +14755,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-election-rolebinding namespace: default roleRef: @@ -14780,8 +14780,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-pvc namespace: default roleRef: @@ -14805,8 +14805,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS namespace: default roleRef: @@ -14830,8 +14830,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS-metrics-service namespace: default spec: @@ -14855,8 +14855,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xALbe0A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: NofaS namespace: default spec: @@ -14884,7 +14884,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=R4X - --webhook-enabled=false - --namespace=default @@ -14892,7 +14892,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 971 @@ -15192,8 +15192,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qKT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: g5 namespace: default --- @@ -15223,8 +15223,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qKT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: o2lMoG-config namespace: default --- @@ -15241,8 +15241,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qKT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: o2lMoG-metrics-service namespace: default spec: @@ -15267,8 +15267,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qKT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: o2lMoG namespace: default spec: @@ -15686,8 +15686,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-config namespace: default --- @@ -15702,8 +15702,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-metrics-reader rules: - nonResourceURLs: @@ -15722,8 +15722,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-proxy-role rules: - apiGroups: @@ -15750,8 +15750,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -15773,8 +15773,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-election-role namespace: default rules: @@ -15803,8 +15803,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-pvc namespace: default rules: @@ -15827,8 +15827,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R namespace: default rules: @@ -16333,8 +16333,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-election-rolebinding namespace: default roleRef: @@ -16357,8 +16357,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-pvc namespace: default roleRef: @@ -16381,8 +16381,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R namespace: default roleRef: @@ -16405,8 +16405,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R-metrics-service namespace: default spec: @@ -16429,8 +16429,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: TCq - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K9R namespace: default spec: @@ -16467,7 +16467,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=ix - --webhook-enabled=false - --namespace=default @@ -16475,7 +16475,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 618 @@ -16810,8 +16810,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 pSTEUjYKreNw: j4onXF name: f0FlDsNL namespace: default @@ -16840,8 +16840,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 pSTEUjYKreNw: j4onXF name: f0FlDsNL-config namespace: default @@ -16857,8 +16857,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 pSTEUjYKreNw: j4onXF name: f0FlDsNL-metrics-service namespace: default @@ -16882,8 +16882,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 5aFk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 pSTEUjYKreNw: j4onXF name: f0FlDsNL namespace: default @@ -17329,9 +17329,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: pHzNPjb namespace: default @@ -17359,9 +17359,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-config namespace: default @@ -17376,9 +17376,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-metrics-reader rules: @@ -17397,9 +17397,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-proxy-role rules: @@ -17426,9 +17426,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-additional-controllers rules: @@ -17479,9 +17479,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-proxy-role roleRef: @@ -17503,9 +17503,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-additional-controllers roleRef: @@ -17527,9 +17527,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-election-role namespace: default @@ -17558,9 +17558,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-pvc namespace: default @@ -17583,9 +17583,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O namespace: default @@ -18090,9 +18090,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-election-rolebinding namespace: default @@ -18115,9 +18115,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-pvc namespace: default @@ -18140,9 +18140,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O namespace: default @@ -18165,9 +18165,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-metrics-service namespace: default @@ -18190,9 +18190,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O namespace: default @@ -18223,7 +18223,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=VeOah65M - --webhook-enabled=false - --namespace=default @@ -18231,7 +18231,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 691 @@ -18392,9 +18392,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw name: DX7O-metrics-monitor namespace: default @@ -18416,9 +18416,9 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NlE3orKsq9 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 bKX: d - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 m2Z8Z: wRw --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml @@ -18659,8 +18659,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh namespace: default --- @@ -18690,8 +18690,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-config namespace: default --- @@ -18708,8 +18708,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-metrics-reader rules: - nonResourceURLs: @@ -18730,8 +18730,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-proxy-role rules: - apiGroups: @@ -18760,8 +18760,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -18785,8 +18785,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-election-role namespace: default rules: @@ -18817,8 +18817,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-pvc namespace: default rules: @@ -18843,8 +18843,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh namespace: default rules: @@ -19351,8 +19351,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-election-rolebinding namespace: default roleRef: @@ -19377,8 +19377,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-pvc namespace: default roleRef: @@ -19403,8 +19403,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh namespace: default roleRef: @@ -19429,8 +19429,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-metrics-service namespace: default spec: @@ -19455,8 +19455,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh namespace: default spec: @@ -19576,8 +19576,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: x8K24mCZYsnh-metrics-monitor namespace: default spec: @@ -19598,8 +19598,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "5" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml apiVersion: v1 @@ -19839,8 +19839,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi namespace: default --- @@ -19870,8 +19870,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-config namespace: default --- @@ -19888,8 +19888,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-metrics-reader rules: - nonResourceURLs: @@ -19910,8 +19910,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-proxy-role rules: - apiGroups: @@ -19940,8 +19940,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -19965,8 +19965,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-election-role namespace: default rules: @@ -19997,8 +19997,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-pvc namespace: default rules: @@ -20023,8 +20023,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi namespace: default rules: @@ -20531,8 +20531,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-election-rolebinding namespace: default roleRef: @@ -20557,8 +20557,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-pvc namespace: default roleRef: @@ -20583,8 +20583,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi namespace: default roleRef: @@ -20609,8 +20609,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-metrics-service namespace: default spec: @@ -20635,8 +20635,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi namespace: default spec: @@ -20667,7 +20667,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=false - --namespace=default @@ -20675,7 +20675,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 448 @@ -20751,8 +20751,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: UHlKDi-metrics-monitor namespace: default spec: @@ -20773,8 +20773,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Fk - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml apiVersion: v1 @@ -21884,8 +21884,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-config namespace: default @@ -22201,8 +22201,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-metrics-reader rules: @@ -22222,8 +22222,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-proxy-role rules: @@ -22342,8 +22342,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-proxy-role roleRef: @@ -22380,8 +22380,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-election-role namespace: default @@ -22411,8 +22411,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-pvc namespace: default @@ -22436,8 +22436,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR namespace: default @@ -22964,8 +22964,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-election-rolebinding namespace: default @@ -22989,8 +22989,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-pvc namespace: default @@ -23014,8 +23014,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR namespace: default @@ -23349,8 +23349,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR-metrics-service namespace: default @@ -23853,8 +23853,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: IC6CHScZj - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ruSHmUUvOj1: h3BuiPAHIC name: wINY4HR namespace: default @@ -28496,8 +28496,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 12bwUKO namespace: default @@ -29277,8 +29277,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-config namespace: default @@ -29593,8 +29593,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-metrics-reader rules: @@ -29613,8 +29613,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-proxy-role rules: @@ -29732,8 +29732,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-proxy-role roleRef: @@ -29769,8 +29769,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-election-role namespace: default @@ -29799,8 +29799,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-pvc namespace: default @@ -29823,8 +29823,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: "5" namespace: default @@ -30350,8 +30350,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-election-rolebinding namespace: default @@ -30374,8 +30374,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-pvc namespace: default @@ -30398,8 +30398,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: "5" namespace: default @@ -30732,8 +30732,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: 5-metrics-service namespace: default @@ -31235,8 +31235,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZtDuI - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kxvj1aV: un4v2 name: "5" namespace: default @@ -35614,9 +35614,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf namespace: default --- @@ -35647,9 +35647,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-config namespace: default --- @@ -35667,9 +35667,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-metrics-reader rules: - nonResourceURLs: @@ -35691,9 +35691,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-proxy-role rules: - apiGroups: @@ -35723,9 +35723,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-rpk-bundle rules: - apiGroups: @@ -35781,9 +35781,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -35808,9 +35808,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-rpk-bundle roleRef: apiGroup: rbac.authorization.k8s.io @@ -35835,9 +35835,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-election-role namespace: default rules: @@ -35869,9 +35869,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-pvc namespace: default rules: @@ -35897,9 +35897,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf namespace: default rules: @@ -36407,9 +36407,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-election-rolebinding namespace: default roleRef: @@ -36435,9 +36435,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-pvc namespace: default roleRef: @@ -36463,9 +36463,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf namespace: default roleRef: @@ -36491,9 +36491,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf-metrics-service namespace: default spec: @@ -36519,9 +36519,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: NY - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gWL: pM - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: sFwgtf namespace: default spec: @@ -37063,8 +37063,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-config namespace: default @@ -37079,8 +37079,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-metrics-reader rules: @@ -37099,8 +37099,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-proxy-role rules: @@ -37127,8 +37127,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-additional-controllers rules: @@ -37179,8 +37179,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-proxy-role roleRef: @@ -37202,8 +37202,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-additional-controllers roleRef: @@ -37225,8 +37225,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-election-role namespace: default @@ -37255,8 +37255,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-pvc namespace: default @@ -37279,8 +37279,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi namespace: default @@ -37785,8 +37785,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-election-rolebinding namespace: default @@ -37809,8 +37809,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-pvc namespace: default @@ -37833,8 +37833,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi namespace: default @@ -37857,8 +37857,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi-metrics-service namespace: default @@ -37881,8 +37881,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4waX - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 iW8sRg: to name: bi namespace: default @@ -38128,7 +38128,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=5bwwdif - --webhook-enabled=false - --namespace=default @@ -38136,7 +38136,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 49 @@ -38581,8 +38581,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: a namespace: default --- @@ -39364,8 +39364,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-config namespace: default --- @@ -39682,8 +39682,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-metrics-reader rules: - nonResourceURLs: @@ -39704,8 +39704,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-proxy-role rules: - apiGroups: @@ -39825,8 +39825,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -39864,8 +39864,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-election-role namespace: default rules: @@ -39896,8 +39896,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-pvc namespace: default rules: @@ -39922,8 +39922,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs namespace: default rules: @@ -40451,8 +40451,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-election-rolebinding namespace: default roleRef: @@ -40477,8 +40477,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-pvc namespace: default roleRef: @@ -40503,8 +40503,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs namespace: default roleRef: @@ -40839,8 +40839,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs-metrics-service namespace: default spec: @@ -41344,8 +41344,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: YCs - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-YCs namespace: default spec: @@ -45952,8 +45952,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Gn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: sA namespace: default --- @@ -46735,8 +46735,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Gn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: VI1RU-config namespace: default --- @@ -47489,8 +47489,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Gn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: VI1RU-metrics-service namespace: default spec: @@ -47994,8 +47994,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Gn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: VI1RU namespace: default spec: @@ -52768,8 +52768,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: blB namespace: default --- @@ -53552,8 +53552,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-config namespace: default --- @@ -53871,8 +53871,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-metrics-reader rules: - nonResourceURLs: @@ -53894,8 +53894,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-proxy-role rules: - apiGroups: @@ -54016,8 +54016,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -54056,8 +54056,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-election-role namespace: default rules: @@ -54089,8 +54089,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-pvc namespace: default rules: @@ -54116,8 +54116,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "2" namespace: default rules: @@ -54646,8 +54646,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-election-rolebinding namespace: default roleRef: @@ -54673,8 +54673,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-pvc namespace: default roleRef: @@ -54700,8 +54700,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "2" namespace: default roleRef: @@ -55037,8 +55037,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-metrics-service namespace: default spec: @@ -55543,8 +55543,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "2" namespace: default spec: @@ -59528,8 +59528,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2-metrics-monitor namespace: default spec: @@ -59552,8 +59552,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: VhCMS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -60253,8 +60253,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tIa namespace: default --- @@ -61035,8 +61035,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-config namespace: default --- @@ -61352,8 +61352,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-metrics-reader rules: - nonResourceURLs: @@ -61373,8 +61373,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-proxy-role rules: - apiGroups: @@ -61493,8 +61493,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -61531,8 +61531,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-election-role namespace: default rules: @@ -61562,8 +61562,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-pvc namespace: default rules: @@ -61587,8 +61587,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO namespace: default rules: @@ -62115,8 +62115,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-election-rolebinding namespace: default roleRef: @@ -62140,8 +62140,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-pvc namespace: default roleRef: @@ -62165,8 +62165,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO namespace: default roleRef: @@ -62500,8 +62500,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-metrics-service namespace: default spec: @@ -63004,8 +63004,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO namespace: default spec: @@ -63261,7 +63261,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=dS6V2tB - --webhook-enabled=false - --namespace=default @@ -63270,7 +63270,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 231 @@ -67110,8 +67110,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: z7BRO-metrics-monitor namespace: default spec: @@ -67134,8 +67134,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Qi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -68599,8 +68599,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: na-config namespace: default --- @@ -69352,8 +69352,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: na-metrics-service namespace: default spec: @@ -69856,8 +69856,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: na namespace: default spec: @@ -73820,8 +73820,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: na-metrics-monitor namespace: default spec: @@ -73842,8 +73842,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 7Nn - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -74451,8 +74451,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-config namespace: default --- @@ -74469,8 +74469,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-metrics-reader rules: - nonResourceURLs: @@ -74491,8 +74491,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-proxy-role rules: - apiGroups: @@ -74521,8 +74521,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-rpk-bundle rules: - apiGroups: @@ -74577,8 +74577,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -74602,8 +74602,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-rpk-bundle roleRef: apiGroup: rbac.authorization.k8s.io @@ -74627,8 +74627,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-election-role namespace: default rules: @@ -74659,8 +74659,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-pvc namespace: default rules: @@ -74685,8 +74685,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D namespace: default rules: @@ -75193,8 +75193,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-election-rolebinding namespace: default roleRef: @@ -75219,8 +75219,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-pvc namespace: default roleRef: @@ -75245,8 +75245,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D namespace: default roleRef: @@ -75271,8 +75271,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D-metrics-service namespace: default spec: @@ -75297,8 +75297,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: aYT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: D namespace: default spec: @@ -75911,8 +75911,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xl0SYd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: spW namespace: default --- @@ -76693,8 +76693,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xl0SYd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: vvvAuBP-config namespace: default --- @@ -77446,8 +77446,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xl0SYd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: vvvAuBP-metrics-service namespace: default spec: @@ -77950,8 +77950,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: xl0SYd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: vvvAuBP namespace: default spec: @@ -82772,8 +82772,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Zihc6G namespace: default --- @@ -83555,8 +83555,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-config namespace: default --- @@ -83873,8 +83873,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-metrics-reader rules: - nonResourceURLs: @@ -83895,8 +83895,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-proxy-role rules: - apiGroups: @@ -83925,8 +83925,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-rpk-bundle rules: - apiGroups: @@ -83981,8 +83981,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-additional-controllers rules: - apiGroups: @@ -84126,8 +84126,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -84151,8 +84151,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-additional-controllers roleRef: apiGroup: rbac.authorization.k8s.io @@ -84176,8 +84176,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-rpk-bundle roleRef: apiGroup: rbac.authorization.k8s.io @@ -84215,8 +84215,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-election-role namespace: default rules: @@ -84247,8 +84247,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-pvc namespace: default rules: @@ -84273,8 +84273,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu namespace: default rules: @@ -84802,8 +84802,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-election-rolebinding namespace: default roleRef: @@ -84828,8 +84828,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-pvc namespace: default roleRef: @@ -84854,8 +84854,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu namespace: default roleRef: @@ -85190,8 +85190,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu-metrics-service namespace: default spec: @@ -85695,8 +85695,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: pnciO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tDyp0579ogHIu namespace: default spec: @@ -90491,8 +90491,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: TmM6fo namespace: default --- @@ -91272,8 +91272,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Wzr8UxvO-config namespace: default --- @@ -92024,8 +92024,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Wzr8UxvO-metrics-service namespace: default spec: @@ -92527,8 +92527,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Wzr8UxvO namespace: default spec: @@ -96502,8 +96502,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Wzr8UxvO-metrics-monitor namespace: default spec: @@ -96524,8 +96524,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: P6wEG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -97989,8 +97989,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-config namespace: default @@ -98307,8 +98307,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-metrics-reader rules: @@ -98329,8 +98329,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-proxy-role rules: @@ -98359,8 +98359,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-rpk-bundle rules: @@ -98506,8 +98506,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-proxy-role roleRef: @@ -98531,8 +98531,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-rpk-bundle roleRef: @@ -98570,8 +98570,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-election-role namespace: default @@ -98602,8 +98602,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-pvc namespace: default @@ -98628,8 +98628,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX namespace: default @@ -99157,8 +99157,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-election-rolebinding namespace: default @@ -99183,8 +99183,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-pvc namespace: default @@ -99209,8 +99209,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX namespace: default @@ -99545,8 +99545,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX-metrics-service namespace: default @@ -100050,8 +100050,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 9wjOhT - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 uUW: Us name: 6z0k3NX namespace: default @@ -104743,8 +104743,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6xIMZiuoly3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 in: IEvkGW7b name: ClL0jwLRjj namespace: default @@ -104775,8 +104775,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6xIMZiuoly3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 in: IEvkGW7b name: t-config namespace: default @@ -104794,8 +104794,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6xIMZiuoly3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 in: IEvkGW7b name: t-metrics-service namespace: default @@ -104821,8 +104821,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6xIMZiuoly3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 in: IEvkGW7b name: t namespace: default @@ -105211,8 +105211,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6xIMZiuoly3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 in: IEvkGW7b name: t-metrics-monitor namespace: default @@ -105235,8 +105235,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6xIMZiuoly3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 in: IEvkGW7b --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml @@ -105478,9 +105478,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: k - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dcuPV: Fy - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: 1316QiC namespace: default --- @@ -105507,9 +105507,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: k - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dcuPV: Fy - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: PW6-config namespace: default --- @@ -105523,9 +105523,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: k - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dcuPV: Fy - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: PW6-metrics-service namespace: default spec: @@ -105547,9 +105547,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: k - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dcuPV: Fy - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: PW6 namespace: default spec: @@ -106206,8 +106206,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Z4N6WbZ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: a-config namespace: default --- @@ -106223,8 +106223,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Z4N6WbZ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: a-metrics-service namespace: default spec: @@ -106248,8 +106248,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Z4N6WbZ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: a namespace: default spec: @@ -106782,8 +106782,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Z4N6WbZ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: a-metrics-monitor namespace: default spec: @@ -106804,8 +106804,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Z4N6WbZ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml apiVersion: v1 @@ -107916,8 +107916,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 2rbFmR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 miGH: N7Ko name: A8UY-config namespace: default @@ -108670,8 +108670,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 2rbFmR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 miGH: N7Ko name: A8UY-metrics-service namespace: default @@ -109175,8 +109175,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 2rbFmR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 miGH: N7Ko name: A8UY namespace: default @@ -113286,8 +113286,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 2rbFmR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 miGH: N7Ko name: A8UY-metrics-monitor namespace: default @@ -113310,8 +113310,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 2rbFmR - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 miGH: N7Ko --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml @@ -113907,8 +113907,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: dgtMSpw @@ -113937,8 +113937,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-config @@ -113954,8 +113954,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-metrics-reader @@ -113975,8 +113975,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-proxy-role @@ -114004,8 +114004,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-rpk-bundle @@ -114059,8 +114059,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-additional-controllers @@ -114112,8 +114112,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-proxy-role @@ -114136,8 +114136,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-additional-controllers @@ -114160,8 +114160,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-rpk-bundle @@ -114184,8 +114184,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-election-role @@ -114215,8 +114215,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-pvc @@ -114240,8 +114240,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE @@ -114747,8 +114747,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-election-rolebinding @@ -114772,8 +114772,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-pvc @@ -114797,8 +114797,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE @@ -114822,8 +114822,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE-metrics-service @@ -114847,8 +114847,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RYuL - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oMSwsE1: VOZ x: 4Xx1lbe name: fjEnE @@ -116323,9 +116323,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "4" - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 chNK6Zz: 5Ii - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: n9s9M-config namespace: default --- @@ -117077,9 +117077,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "4" - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 chNK6Zz: 5Ii - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: n9s9M-metrics-service namespace: default spec: @@ -117582,9 +117582,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "4" - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 chNK6Zz: 5Ii - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: n9s9M namespace: default spec: @@ -122342,9 +122342,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 c1ch6r: sk7vUnRJ - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 o7: kFLRHJ8kS name: rPim namespace: default @@ -123126,9 +123126,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 c1ch6r: sk7vUnRJ - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 o7: kFLRHJ8kS name: t08KC6rLj4Z-config namespace: default @@ -123881,9 +123881,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 c1ch6r: sk7vUnRJ - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 o7: kFLRHJ8kS name: t08KC6rLj4Z-metrics-service namespace: default @@ -124387,9 +124387,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 c1ch6r: sk7vUnRJ - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 o7: kFLRHJ8kS name: t08KC6rLj4Z namespace: default @@ -128357,9 +128357,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 c1ch6r: sk7vUnRJ - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 o7: kFLRHJ8kS name: t08KC6rLj4Z-metrics-monitor namespace: default @@ -128382,9 +128382,9 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kam5 - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 c1ch6r: sk7vUnRJ - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 o7: kFLRHJ8kS --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml @@ -128991,8 +128991,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-config namespace: default --- @@ -129007,8 +129007,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-metrics-reader rules: - nonResourceURLs: @@ -129027,8 +129027,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-proxy-role rules: - apiGroups: @@ -129055,8 +129055,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-additional-controllers rules: - apiGroups: @@ -129107,8 +129107,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -129130,8 +129130,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-additional-controllers roleRef: apiGroup: rbac.authorization.k8s.io @@ -129153,8 +129153,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-election-role namespace: default rules: @@ -129183,8 +129183,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-pvc namespace: default rules: @@ -129207,8 +129207,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA namespace: default rules: @@ -129713,8 +129713,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-election-rolebinding namespace: default roleRef: @@ -129737,8 +129737,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-pvc namespace: default roleRef: @@ -129761,8 +129761,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA namespace: default roleRef: @@ -129785,8 +129785,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-metrics-service namespace: default spec: @@ -129809,8 +129809,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA namespace: default spec: @@ -130200,8 +130200,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dLmCJ99UDA-metrics-monitor namespace: default spec: @@ -130223,8 +130223,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ATIdy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml apiVersion: v1 @@ -131334,8 +131334,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-config @@ -131652,8 +131652,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-metrics-reader @@ -131674,8 +131674,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-proxy-role @@ -131704,8 +131704,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-additional-controllers @@ -131849,8 +131849,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-proxy-role @@ -131874,8 +131874,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-additional-controllers @@ -131913,8 +131913,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-election-role @@ -131945,8 +131945,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-pvc @@ -131971,8 +131971,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf @@ -132500,8 +132500,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-election-rolebinding @@ -132526,8 +132526,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-pvc @@ -132552,8 +132552,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf @@ -132888,8 +132888,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-metrics-service @@ -133393,8 +133393,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf @@ -137614,8 +137614,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c name: I5FRf-metrics-monitor @@ -137638,8 +137638,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: A - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 vAU3IVb: K0a x: c --- @@ -138237,8 +138237,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Kha namespace: default --- @@ -138268,8 +138268,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3Xj6U-config namespace: default --- @@ -138286,8 +138286,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3Xj6U-metrics-service namespace: default spec: @@ -138312,8 +138312,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3Xj6U namespace: default spec: @@ -139010,8 +139010,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-config namespace: default --- @@ -139028,8 +139028,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-metrics-reader rules: - nonResourceURLs: @@ -139050,8 +139050,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-proxy-role rules: - apiGroups: @@ -139080,8 +139080,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-rpk-bundle rules: - apiGroups: @@ -139136,8 +139136,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -139161,8 +139161,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-rpk-bundle roleRef: apiGroup: rbac.authorization.k8s.io @@ -139186,8 +139186,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-election-role namespace: default rules: @@ -139218,8 +139218,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-pvc namespace: default rules: @@ -139244,8 +139244,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu namespace: default rules: @@ -139752,8 +139752,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-election-rolebinding namespace: default roleRef: @@ -139778,8 +139778,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-pvc namespace: default roleRef: @@ -139804,8 +139804,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu namespace: default roleRef: @@ -139830,8 +139830,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-metrics-service namespace: default spec: @@ -139856,8 +139856,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu namespace: default spec: @@ -140427,8 +140427,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Uu-metrics-monitor namespace: default spec: @@ -140451,8 +140451,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 23c - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/tests/create-topic-with-client-auth.yaml apiVersion: v1 @@ -140695,9 +140695,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WgoV - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 aqO3ub: Ai5ntG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 povH0tOlni: A name: 4X8m6P namespace: default @@ -140726,9 +140726,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WgoV - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 aqO3ub: Ai5ntG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 povH0tOlni: A name: oyGLBa-config namespace: default @@ -140744,9 +140744,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WgoV - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 aqO3ub: Ai5ntG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 povH0tOlni: A name: oyGLBa-metrics-service namespace: default @@ -140770,9 +140770,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WgoV - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 aqO3ub: Ai5ntG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 povH0tOlni: A name: oyGLBa namespace: default @@ -141599,8 +141599,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Wmx1ORHBT namespace: default --- @@ -142382,8 +142382,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kO-config namespace: default --- @@ -143136,8 +143136,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kO-metrics-service namespace: default spec: @@ -143641,8 +143641,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 0tSU - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: kO namespace: default spec: @@ -148362,8 +148362,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-config namespace: default --- @@ -148381,8 +148381,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-metrics-reader rules: - nonResourceURLs: @@ -148404,8 +148404,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-proxy-role rules: - apiGroups: @@ -148435,8 +148435,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-additional-controllers rules: - apiGroups: @@ -148490,8 +148490,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -148516,8 +148516,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-additional-controllers roleRef: apiGroup: rbac.authorization.k8s.io @@ -148542,8 +148542,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-election-role namespace: default rules: @@ -148575,8 +148575,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-pvc namespace: default rules: @@ -148602,8 +148602,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d namespace: default rules: @@ -149111,8 +149111,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-election-rolebinding namespace: default roleRef: @@ -149138,8 +149138,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-pvc namespace: default roleRef: @@ -149165,8 +149165,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d namespace: default roleRef: @@ -149192,8 +149192,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d-metrics-service namespace: default spec: @@ -149219,8 +149219,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oL1SSfzH9d namespace: default spec: @@ -149878,8 +149878,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-config namespace: default --- @@ -149896,8 +149896,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-metrics-reader rules: - nonResourceURLs: @@ -149918,8 +149918,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-proxy-role rules: - apiGroups: @@ -149948,8 +149948,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-rpk-bundle rules: - apiGroups: @@ -150004,8 +150004,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -150029,8 +150029,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-rpk-bundle roleRef: apiGroup: rbac.authorization.k8s.io @@ -150054,8 +150054,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-election-role namespace: default rules: @@ -150086,8 +150086,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-pvc namespace: default rules: @@ -150112,8 +150112,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre namespace: default rules: @@ -150620,8 +150620,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-election-rolebinding namespace: default roleRef: @@ -150646,8 +150646,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-pvc namespace: default roleRef: @@ -150672,8 +150672,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre namespace: default roleRef: @@ -150698,8 +150698,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre-metrics-service namespace: default spec: @@ -150724,8 +150724,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: icwMYEubJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: qVYvaMYre namespace: default spec: @@ -151518,9 +151518,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: tSPxL1Cf1HO9FjR namespace: default --- @@ -152300,9 +152300,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-config namespace: default --- @@ -152617,9 +152617,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-metrics-reader rules: - nonResourceURLs: @@ -152638,9 +152638,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-proxy-role rules: - apiGroups: @@ -152667,9 +152667,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-additional-controllers rules: - apiGroups: @@ -152811,9 +152811,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -152835,9 +152835,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-additional-controllers roleRef: apiGroup: rbac.authorization.k8s.io @@ -152873,9 +152873,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-election-role namespace: default rules: @@ -152904,9 +152904,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-pvc namespace: default rules: @@ -152929,9 +152929,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv namespace: default rules: @@ -153457,9 +153457,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-election-rolebinding namespace: default roleRef: @@ -153482,9 +153482,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-pvc namespace: default roleRef: @@ -153507,9 +153507,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv namespace: default roleRef: @@ -153842,9 +153842,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-metrics-service namespace: default spec: @@ -154346,9 +154346,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv namespace: default spec: @@ -158466,9 +158466,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: RxVwZrtkv-metrics-monitor namespace: default spec: @@ -158489,9 +158489,9 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DFwU - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fuVZ: gcPCqrc0l - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -159084,8 +159084,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK namespace: default --- @@ -159112,8 +159112,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-config namespace: default --- @@ -159127,8 +159127,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-metrics-reader rules: - nonResourceURLs: @@ -159146,8 +159146,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-proxy-role rules: - apiGroups: @@ -159173,8 +159173,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK rules: - apiGroups: @@ -159456,8 +159456,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -159478,8 +159478,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK roleRef: apiGroup: rbac.authorization.k8s.io @@ -159500,8 +159500,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-election-role namespace: default rules: @@ -159529,8 +159529,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-pvc namespace: default rules: @@ -159552,8 +159552,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-election-rolebinding namespace: default roleRef: @@ -159575,8 +159575,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-pvc namespace: default roleRef: @@ -159598,8 +159598,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-metrics-service namespace: default spec: @@ -159621,8 +159621,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 6iZG-webhook-service namespace: default spec: @@ -159643,8 +159643,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK namespace: default spec: @@ -159753,8 +159753,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -159778,8 +159778,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 6iZG - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: RAyK-selfsigned-issuer namespace: default spec: @@ -159981,8 +159981,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W namespace: default --- @@ -160009,8 +160009,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-config namespace: default --- @@ -160024,8 +160024,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-metrics-reader rules: - nonResourceURLs: @@ -160043,8 +160043,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-proxy-role rules: - apiGroups: @@ -160070,8 +160070,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W rules: - apiGroups: @@ -160353,8 +160353,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -160375,8 +160375,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W roleRef: apiGroup: rbac.authorization.k8s.io @@ -160397,8 +160397,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-election-role namespace: default rules: @@ -160426,8 +160426,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-pvc namespace: default rules: @@ -160449,8 +160449,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-election-rolebinding namespace: default roleRef: @@ -160472,8 +160472,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-pvc namespace: default roleRef: @@ -160495,8 +160495,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-metrics-service namespace: default spec: @@ -160518,8 +160518,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: hsmvzpSm-webhook-service namespace: default spec: @@ -160540,8 +160540,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W namespace: default spec: @@ -160665,8 +160665,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -160690,8 +160690,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hsmvzpSm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: tyx5W-selfsigned-issuer namespace: default spec: @@ -160893,8 +160893,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fEL2 namespace: default --- @@ -160921,8 +160921,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-config namespace: default --- @@ -160936,8 +160936,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-metrics-reader rules: - nonResourceURLs: @@ -160955,8 +160955,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-proxy-role rules: - apiGroups: @@ -160982,8 +160982,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS rules: - apiGroups: @@ -161265,8 +161265,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -161287,8 +161287,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS roleRef: apiGroup: rbac.authorization.k8s.io @@ -161309,8 +161309,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-election-role namespace: default rules: @@ -161338,8 +161338,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-pvc namespace: default rules: @@ -161361,8 +161361,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-election-rolebinding namespace: default roleRef: @@ -161384,8 +161384,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-pvc namespace: default roleRef: @@ -161407,8 +161407,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-metrics-service namespace: default spec: @@ -161430,8 +161430,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: njC0cLDExDA-webhook-service namespace: default spec: @@ -161452,8 +161452,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS namespace: default spec: @@ -161482,13 +161482,13 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=true command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 840 @@ -161578,8 +161578,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -161603,8 +161603,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: njC0cLDExDA - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 89IgS-selfsigned-issuer namespace: default spec: @@ -161806,8 +161806,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0 namespace: default --- @@ -161836,8 +161836,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-config namespace: default --- @@ -161853,8 +161853,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-metrics-reader rules: - nonResourceURLs: @@ -161874,8 +161874,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-proxy-role rules: - apiGroups: @@ -161903,8 +161903,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0 rules: - apiGroups: @@ -162188,8 +162188,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -162212,8 +162212,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0 roleRef: apiGroup: rbac.authorization.k8s.io @@ -162236,8 +162236,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-election-role namespace: default rules: @@ -162267,8 +162267,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-pvc namespace: default rules: @@ -162292,8 +162292,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-election-rolebinding namespace: default roleRef: @@ -162317,8 +162317,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-pvc namespace: default roleRef: @@ -162342,8 +162342,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-metrics-service namespace: default spec: @@ -162367,8 +162367,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Re-webhook-service namespace: default spec: @@ -162391,8 +162391,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0 namespace: default spec: @@ -162415,13 +162415,13 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=fLlxU - --webhook-enabled=true command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 957 @@ -162501,8 +162501,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -162528,8 +162528,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Re - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fRjXK1u0-selfsigned-issuer namespace: default spec: @@ -162733,8 +162733,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS namespace: default --- @@ -162764,8 +162764,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-config namespace: default --- @@ -162782,8 +162782,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-metrics-reader rules: - nonResourceURLs: @@ -162804,8 +162804,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-proxy-role rules: - apiGroups: @@ -162834,8 +162834,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS rules: - apiGroups: @@ -163120,8 +163120,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -163145,8 +163145,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS roleRef: apiGroup: rbac.authorization.k8s.io @@ -163170,8 +163170,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-election-role namespace: default rules: @@ -163202,8 +163202,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-pvc namespace: default rules: @@ -163228,8 +163228,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-election-rolebinding namespace: default roleRef: @@ -163254,8 +163254,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-pvc namespace: default roleRef: @@ -163280,8 +163280,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-metrics-service namespace: default spec: @@ -163306,8 +163306,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: eMNuQ-webhook-service namespace: default spec: @@ -163331,8 +163331,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS namespace: default spec: @@ -163450,8 +163450,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -163478,8 +163478,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: eMNuQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2jUS-selfsigned-issuer namespace: default spec: @@ -163681,8 +163681,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM namespace: default @@ -163710,8 +163710,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-config namespace: default @@ -163726,8 +163726,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-metrics-reader rules: @@ -163746,8 +163746,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-proxy-role rules: @@ -163774,8 +163774,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM rules: @@ -164058,8 +164058,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-proxy-role roleRef: @@ -164081,8 +164081,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM roleRef: @@ -164104,8 +164104,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-election-role namespace: default @@ -164134,8 +164134,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-pvc namespace: default @@ -164158,8 +164158,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-election-rolebinding namespace: default @@ -164182,8 +164182,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-pvc namespace: default @@ -164206,8 +164206,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-metrics-service namespace: default @@ -164230,8 +164230,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: hJkIJY5Y-webhook-service namespace: default @@ -164253,8 +164253,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM namespace: default @@ -164282,7 +164282,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=MIvY - --webhook-enabled=true - D4rks @@ -164291,7 +164291,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 214 @@ -164365,8 +164365,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: redpanda-serving-cert namespace: default @@ -164391,8 +164391,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: hJkIJY5Y - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 kP0Mu: tnINl name: WM-selfsigned-issuer namespace: default @@ -164595,8 +164595,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: X2us - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-X2us namespace: default --- @@ -164624,8 +164624,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: X2us - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-X2us-config namespace: default --- @@ -164640,8 +164640,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: X2us - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-X2us-metrics-service namespace: default spec: @@ -164664,8 +164664,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: X2us - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X2us-webhook-service namespace: default spec: @@ -164687,8 +164687,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: X2us - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-X2us namespace: default spec: @@ -164757,13 +164757,13 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=true command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 155 @@ -164858,8 +164858,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: X2us - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -164884,8 +164884,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: X2us - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-X2us-selfsigned-issuer namespace: default spec: @@ -165193,8 +165193,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: n0qMA4h57I5 namespace: default @@ -165977,8 +165977,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: pEvEye-config namespace: default @@ -166732,8 +166732,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: pEvEye-metrics-service namespace: default @@ -166759,8 +166759,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: BdJ-webhook-service namespace: default @@ -167264,8 +167264,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: pEvEye namespace: default @@ -167481,8 +167481,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: redpanda-serving-cert namespace: default @@ -167510,8 +167510,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: pEvEye-selfsigned-issuer namespace: default @@ -171194,8 +171194,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A name: pEvEye-metrics-monitor namespace: default @@ -171218,8 +171218,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: BdJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jE0q9M4zk: 1A --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml @@ -171741,8 +171741,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2PyZZ8ZNsM namespace: default --- @@ -171769,8 +171769,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-config namespace: default --- @@ -171784,8 +171784,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-metrics-reader rules: - nonResourceURLs: @@ -171803,8 +171803,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-proxy-role rules: - apiGroups: @@ -171830,8 +171830,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC rules: - apiGroups: @@ -172113,8 +172113,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -172135,8 +172135,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC roleRef: apiGroup: rbac.authorization.k8s.io @@ -172157,8 +172157,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-election-role namespace: default rules: @@ -172186,8 +172186,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-pvc namespace: default rules: @@ -172209,8 +172209,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-election-rolebinding namespace: default roleRef: @@ -172232,8 +172232,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-pvc namespace: default roleRef: @@ -172255,8 +172255,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-metrics-service namespace: default spec: @@ -172278,8 +172278,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: fgsJm-webhook-service namespace: default spec: @@ -172300,8 +172300,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC namespace: default spec: @@ -172449,8 +172449,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -172474,8 +172474,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: fgsJm - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nLM2irjC-selfsigned-issuer namespace: default spec: @@ -172679,8 +172679,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PiQzKZrHGl namespace: default --- @@ -172707,8 +172707,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-config namespace: default --- @@ -172722,8 +172722,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-metrics-reader rules: - nonResourceURLs: @@ -172741,8 +172741,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-proxy-role rules: - apiGroups: @@ -172768,8 +172768,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX rules: - apiGroups: @@ -173051,8 +173051,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -173073,8 +173073,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX roleRef: apiGroup: rbac.authorization.k8s.io @@ -173095,8 +173095,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-election-role namespace: default rules: @@ -173124,8 +173124,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-pvc namespace: default rules: @@ -173147,8 +173147,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-election-rolebinding namespace: default roleRef: @@ -173170,8 +173170,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-pvc namespace: default roleRef: @@ -173193,8 +173193,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-metrics-service namespace: default spec: @@ -173216,8 +173216,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: zUC-webhook-service namespace: default spec: @@ -173238,8 +173238,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX namespace: default spec: @@ -173268,13 +173268,13 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=true command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 941 @@ -173346,8 +173346,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -173371,8 +173371,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-selfsigned-issuer namespace: default spec: @@ -173418,8 +173418,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: X374QF3AYX-metrics-monitor namespace: default spec: @@ -173440,8 +173440,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zUC - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -173715,8 +173715,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Fzbi9OkP namespace: default --- @@ -174498,8 +174498,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-config namespace: default --- @@ -174816,8 +174816,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-metrics-reader rules: - nonResourceURLs: @@ -174838,8 +174838,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-proxy-role rules: - apiGroups: @@ -174868,8 +174868,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G rules: - apiGroups: @@ -175245,8 +175245,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -175270,8 +175270,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G roleRef: apiGroup: rbac.authorization.k8s.io @@ -175309,8 +175309,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-election-role namespace: default rules: @@ -175341,8 +175341,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-pvc namespace: default rules: @@ -175388,8 +175388,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-election-rolebinding namespace: default roleRef: @@ -175414,8 +175414,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-pvc namespace: default roleRef: @@ -175750,8 +175750,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-metrics-service namespace: default spec: @@ -175776,8 +175776,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 8V1wVzO-webhook-service namespace: default spec: @@ -176280,8 +176280,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G namespace: default spec: @@ -176607,8 +176607,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -176635,8 +176635,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8V1wVzO - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: G-selfsigned-issuer namespace: default spec: @@ -180931,8 +180931,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: Z20j25RfqSp namespace: default @@ -181713,8 +181713,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-config namespace: default @@ -182030,8 +182030,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-metrics-reader rules: @@ -182051,8 +182051,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-proxy-role rules: @@ -182080,8 +182080,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA rules: @@ -182456,8 +182456,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-proxy-role roleRef: @@ -182480,8 +182480,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA roleRef: @@ -182518,8 +182518,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-election-role namespace: default @@ -182549,8 +182549,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-pvc namespace: default @@ -182595,8 +182595,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-election-rolebinding namespace: default @@ -182620,8 +182620,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-pvc namespace: default @@ -182955,8 +182955,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-metrics-service namespace: default @@ -182980,8 +182980,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: JhtIXu-webhook-service namespace: default @@ -183483,8 +183483,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA namespace: default @@ -183637,8 +183637,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: redpanda-serving-cert namespace: default @@ -183664,8 +183664,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-selfsigned-issuer namespace: default @@ -187346,8 +187346,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI name: tDaA-metrics-monitor namespace: default @@ -187370,8 +187370,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: JhtIXu - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jcF: qXntI --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml @@ -187999,8 +187999,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG @@ -188782,8 +188782,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-config @@ -189100,8 +189100,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-metrics-reader @@ -189122,8 +189122,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-proxy-role @@ -189152,8 +189152,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG @@ -189529,8 +189529,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-proxy-role @@ -189554,8 +189554,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG @@ -189593,8 +189593,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-election-role @@ -189625,8 +189625,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-pvc @@ -189672,8 +189672,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-election-rolebinding @@ -189698,8 +189698,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-pvc @@ -190034,8 +190034,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-metrics-service @@ -190060,8 +190060,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: ZRaS-webhook-service @@ -190564,8 +190564,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG @@ -190764,13 +190764,13 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=gSJu - --webhook-enabled=true command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 801 @@ -190901,8 +190901,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: redpanda-serving-cert @@ -190929,8 +190929,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ZRaS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 j: Wmsdb uS: h6Fj name: 79ioSjMT8KG-selfsigned-issuer @@ -195134,8 +195134,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-config namespace: default @@ -195152,8 +195152,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-metrics-reader rules: @@ -195174,8 +195174,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-proxy-role rules: @@ -195204,8 +195204,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5 rules: @@ -195490,8 +195490,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-proxy-role roleRef: @@ -195515,8 +195515,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5 roleRef: @@ -195540,8 +195540,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-election-role namespace: default @@ -195572,8 +195572,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-pvc namespace: default @@ -195598,8 +195598,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-election-rolebinding namespace: default @@ -195624,8 +195624,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-pvc namespace: default @@ -195650,8 +195650,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-metrics-service namespace: default @@ -195676,8 +195676,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: ibdE3-webhook-service namespace: default @@ -195701,8 +195701,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5 namespace: default @@ -195958,8 +195958,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: redpanda-serving-cert namespace: default @@ -195986,8 +195986,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ibdE3 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 wig: gAae name: 41nucs5-selfsigned-issuer namespace: default @@ -196297,8 +196297,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Ev1EfK namespace: default --- @@ -197080,8 +197080,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-config namespace: default --- @@ -197398,8 +197398,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-metrics-reader rules: - nonResourceURLs: @@ -197420,8 +197420,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-proxy-role rules: - apiGroups: @@ -197450,8 +197450,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu rules: - apiGroups: @@ -197827,8 +197827,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -197852,8 +197852,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu roleRef: apiGroup: rbac.authorization.k8s.io @@ -197891,8 +197891,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-election-role namespace: default rules: @@ -197923,8 +197923,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-pvc namespace: default rules: @@ -197970,8 +197970,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-election-rolebinding namespace: default roleRef: @@ -197996,8 +197996,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-pvc namespace: default roleRef: @@ -198332,8 +198332,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-metrics-service namespace: default spec: @@ -198358,8 +198358,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Kcp-webhook-service namespace: default spec: @@ -198862,8 +198862,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu namespace: default spec: @@ -199086,8 +199086,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -199114,8 +199114,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Kcp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: xtpIQu-selfsigned-issuer namespace: default spec: @@ -203316,8 +203316,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "78" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 yhRLU: bn88A name: CbM6ZNJQ-config namespace: default @@ -203333,8 +203333,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "78" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 yhRLU: bn88A name: CbM6ZNJQ-metrics-service namespace: default @@ -203358,8 +203358,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "78" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 yhRLU: bn88A name: 78-webhook-service namespace: default @@ -203382,8 +203382,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "78" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 yhRLU: bn88A name: CbM6ZNJQ namespace: default @@ -203709,8 +203709,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "78" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 yhRLU: bn88A name: redpanda-serving-cert namespace: default @@ -203736,8 +203736,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "78" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 yhRLU: bn88A name: CbM6ZNJQ-selfsigned-issuer namespace: default @@ -204046,8 +204046,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 4s namespace: default --- @@ -204827,8 +204827,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oWZxG4ft6-config namespace: default --- @@ -205579,8 +205579,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oWZxG4ft6-metrics-service namespace: default spec: @@ -205603,8 +205603,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 19ztDQ-webhook-service namespace: default spec: @@ -206105,8 +206105,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oWZxG4ft6 namespace: default spec: @@ -206388,8 +206388,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -206414,8 +206414,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 19ztDQ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: oWZxG4ft6-selfsigned-issuer namespace: default spec: @@ -210616,8 +210616,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-config namespace: default --- @@ -210632,8 +210632,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-metrics-reader rules: - nonResourceURLs: @@ -210652,8 +210652,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-proxy-role rules: - apiGroups: @@ -210680,8 +210680,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN rules: - apiGroups: @@ -210964,8 +210964,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -210987,8 +210987,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN roleRef: apiGroup: rbac.authorization.k8s.io @@ -211010,8 +211010,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-election-role namespace: default rules: @@ -211040,8 +211040,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-pvc namespace: default rules: @@ -211064,8 +211064,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-election-rolebinding namespace: default roleRef: @@ -211088,8 +211088,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-pvc namespace: default roleRef: @@ -211112,8 +211112,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-metrics-service namespace: default spec: @@ -211136,8 +211136,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: axjCvWi-webhook-service namespace: default spec: @@ -211159,8 +211159,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN namespace: default spec: @@ -211532,8 +211532,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -211558,8 +211558,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axjCvWi - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: PxBN-selfsigned-issuer namespace: default spec: @@ -211775,9 +211775,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: CFnO9s-config namespace: default --- @@ -211793,9 +211793,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: CFnO9s-metrics-service namespace: default spec: @@ -211819,9 +211819,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: bNOJ-webhook-service namespace: default spec: @@ -211844,9 +211844,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: CFnO9s namespace: default spec: @@ -212253,9 +212253,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -212281,9 +212281,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: CFnO9s-selfsigned-issuer namespace: default spec: @@ -212331,9 +212331,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: CFnO9s-metrics-monitor namespace: default spec: @@ -212354,9 +212354,9 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: bNOJ - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 fYyBJj2Al: 00TYG - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -212527,8 +212527,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "N" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 9q namespace: default --- @@ -212559,8 +212559,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "N" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: zLyH-config namespace: default --- @@ -212578,8 +212578,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "N" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: zLyH-metrics-service namespace: default spec: @@ -212605,8 +212605,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "N" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: N-webhook-service namespace: default spec: @@ -212631,8 +212631,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "N" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: zLyH namespace: default spec: @@ -212915,8 +212915,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "N" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -212944,8 +212944,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "N" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: zLyH-selfsigned-issuer namespace: default spec: @@ -214017,8 +214017,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-config namespace: default --- @@ -214333,8 +214333,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-metrics-reader rules: - nonResourceURLs: @@ -214353,8 +214353,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-proxy-role rules: - apiGroups: @@ -214381,8 +214381,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ rules: - apiGroups: @@ -214756,8 +214756,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -214779,8 +214779,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ roleRef: apiGroup: rbac.authorization.k8s.io @@ -214816,8 +214816,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-election-role namespace: default rules: @@ -214846,8 +214846,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-pvc namespace: default rules: @@ -214891,8 +214891,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-election-rolebinding namespace: default roleRef: @@ -214915,8 +214915,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-pvc namespace: default roleRef: @@ -215249,8 +215249,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-metrics-service namespace: default spec: @@ -215273,8 +215273,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nUS-webhook-service namespace: default spec: @@ -215775,8 +215775,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ namespace: default spec: @@ -216381,8 +216381,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -216407,8 +216407,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-selfsigned-issuer namespace: default spec: @@ -220088,8 +220088,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: m7Z5VmKktJ-metrics-monitor namespace: default spec: @@ -220111,8 +220111,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: nUS - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -220650,8 +220650,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-config namespace: default --- @@ -220670,8 +220670,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-metrics-reader rules: - nonResourceURLs: @@ -220694,8 +220694,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-proxy-role rules: - apiGroups: @@ -220726,8 +220726,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT rules: - apiGroups: @@ -221014,8 +221014,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -221041,8 +221041,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT roleRef: apiGroup: rbac.authorization.k8s.io @@ -221068,8 +221068,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-election-role namespace: default rules: @@ -221102,8 +221102,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-pvc namespace: default rules: @@ -221130,8 +221130,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-election-rolebinding namespace: default roleRef: @@ -221158,8 +221158,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-pvc namespace: default roleRef: @@ -221186,8 +221186,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-metrics-service namespace: default spec: @@ -221214,8 +221214,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Eg0Oz-webhook-service namespace: default spec: @@ -221241,8 +221241,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT namespace: default spec: @@ -221683,8 +221683,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -221713,8 +221713,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-selfsigned-issuer namespace: default spec: @@ -221765,8 +221765,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OyOZvn5WT-metrics-monitor namespace: default spec: @@ -221790,8 +221790,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Eg0Oz - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -221974,8 +221974,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8I1Iyd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v0: 1iClRDvVO3c name: 5GoUVR7T-config namespace: default @@ -221993,8 +221993,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8I1Iyd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v0: 1iClRDvVO3c name: 5GoUVR7T-metrics-service namespace: default @@ -222020,8 +222020,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8I1Iyd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v0: 1iClRDvVO3c name: 8I1Iyd-webhook-service namespace: default @@ -222046,8 +222046,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8I1Iyd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v0: 1iClRDvVO3c name: 5GoUVR7T namespace: default @@ -222555,8 +222555,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8I1Iyd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v0: 1iClRDvVO3c name: redpanda-serving-cert namespace: default @@ -222584,8 +222584,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8I1Iyd - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v0: 1iClRDvVO3c name: 5GoUVR7T-selfsigned-issuer namespace: default @@ -222897,8 +222897,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: r8KRW4 namespace: default --- @@ -223682,8 +223682,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: IsP97jKm-config namespace: default --- @@ -224438,8 +224438,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: IsP97jKm-metrics-service namespace: default spec: @@ -224466,8 +224466,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Pt-webhook-service namespace: default spec: @@ -224972,8 +224972,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: IsP97jKm namespace: default spec: @@ -225494,8 +225494,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -225524,8 +225524,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: IsP97jKm-selfsigned-issuer namespace: default spec: @@ -229209,8 +229209,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: IsP97jKm-metrics-monitor namespace: default spec: @@ -229233,8 +229233,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Pt - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -229768,8 +229768,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dHTgQf-config namespace: default --- @@ -229784,8 +229784,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dHTgQf-metrics-service namespace: default spec: @@ -229808,8 +229808,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 4MPmeCPMB-webhook-service namespace: default spec: @@ -229831,8 +229831,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dHTgQf namespace: default spec: @@ -230325,8 +230325,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -230351,8 +230351,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 4MPmeCPMB - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: dHTgQf-selfsigned-issuer namespace: default spec: @@ -230556,8 +230556,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "567" namespace: default --- @@ -230585,8 +230585,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-config namespace: default --- @@ -230601,8 +230601,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-metrics-reader rules: - nonResourceURLs: @@ -230621,8 +230621,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-proxy-role rules: - apiGroups: @@ -230649,8 +230649,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO rules: - apiGroups: @@ -230933,8 +230933,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -230956,8 +230956,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO roleRef: apiGroup: rbac.authorization.k8s.io @@ -230979,8 +230979,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-election-role namespace: default rules: @@ -231009,8 +231009,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-pvc namespace: default rules: @@ -231033,8 +231033,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-election-rolebinding namespace: default roleRef: @@ -231057,8 +231057,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-pvc namespace: default roleRef: @@ -231081,8 +231081,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-metrics-service namespace: default spec: @@ -231105,8 +231105,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 8ZgI1VH-webhook-service namespace: default spec: @@ -231128,8 +231128,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO namespace: default spec: @@ -231540,8 +231540,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -231566,8 +231566,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 8ZgI1VH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Hjo9sbxO-selfsigned-issuer namespace: default spec: @@ -232640,8 +232640,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-config @@ -232959,8 +232959,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-metrics-reader @@ -232982,8 +232982,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-proxy-role @@ -233013,8 +233013,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N @@ -233391,8 +233391,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-proxy-role @@ -233417,8 +233417,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N @@ -233457,8 +233457,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-election-role @@ -233490,8 +233490,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-pvc @@ -233538,8 +233538,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-election-rolebinding @@ -233565,8 +233565,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-pvc @@ -233902,8 +233902,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-metrics-service @@ -233929,8 +233929,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: an-webhook-service @@ -234434,8 +234434,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N @@ -235102,8 +235102,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: redpanda-serving-cert @@ -235131,8 +235131,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: an - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 ib: 8cz mKZJ: qFJ name: 8K2N-selfsigned-issuer @@ -239324,8 +239324,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: gFdSAMIO namespace: default @@ -239355,8 +239355,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-config namespace: default @@ -239373,8 +239373,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-metrics-reader rules: @@ -239395,8 +239395,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-proxy-role rules: @@ -239425,8 +239425,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO rules: @@ -239711,8 +239711,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-proxy-role roleRef: @@ -239736,8 +239736,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO roleRef: @@ -239761,8 +239761,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-election-role namespace: default @@ -239793,8 +239793,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-pvc namespace: default @@ -239819,8 +239819,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-election-rolebinding namespace: default @@ -239845,8 +239845,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-pvc namespace: default @@ -239871,8 +239871,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-metrics-service namespace: default @@ -239897,8 +239897,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: MxF-webhook-service namespace: default @@ -239922,8 +239922,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO namespace: default @@ -240414,8 +240414,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: redpanda-serving-cert namespace: default @@ -240442,8 +240442,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MxF - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 mNkAknTCpbj0: NCMcS name: RQkbO-selfsigned-issuer namespace: default @@ -240649,8 +240649,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: K namespace: default --- @@ -240679,8 +240679,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-config namespace: default --- @@ -240696,8 +240696,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-metrics-reader rules: - nonResourceURLs: @@ -240717,8 +240717,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-proxy-role rules: - apiGroups: @@ -240746,8 +240746,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97 rules: - apiGroups: @@ -241031,8 +241031,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -241055,8 +241055,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97 roleRef: apiGroup: rbac.authorization.k8s.io @@ -241079,8 +241079,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-election-role namespace: default rules: @@ -241110,8 +241110,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-pvc namespace: default rules: @@ -241135,8 +241135,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-election-rolebinding namespace: default roleRef: @@ -241160,8 +241160,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-pvc namespace: default roleRef: @@ -241185,8 +241185,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-metrics-service namespace: default spec: @@ -241210,8 +241210,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: vYy9-webhook-service namespace: default spec: @@ -241234,8 +241234,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97 namespace: default spec: @@ -241707,8 +241707,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -241734,8 +241734,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: vYy9 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 2rNNJQv8k5j97-selfsigned-issuer namespace: default spec: @@ -242045,8 +242045,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: meK namespace: default --- @@ -242825,8 +242825,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QClq-config namespace: default --- @@ -243576,8 +243576,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QClq-metrics-service namespace: default spec: @@ -243599,8 +243599,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: lbhx-webhook-service namespace: default spec: @@ -244100,8 +244100,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QClq namespace: default spec: @@ -244634,8 +244634,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -244659,8 +244659,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QClq-selfsigned-issuer namespace: default spec: @@ -248339,8 +248339,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QClq-metrics-monitor namespace: default spec: @@ -248361,8 +248361,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: lbhx - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -248886,8 +248886,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: Wx namespace: default @@ -248919,8 +248919,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-config namespace: default @@ -248939,8 +248939,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-metrics-reader rules: @@ -248963,8 +248963,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-proxy-role rules: @@ -248995,8 +248995,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP rules: @@ -249283,8 +249283,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-proxy-role roleRef: @@ -249310,8 +249310,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP roleRef: @@ -249337,8 +249337,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-election-role namespace: default @@ -249371,8 +249371,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-pvc namespace: default @@ -249399,8 +249399,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-election-rolebinding namespace: default @@ -249427,8 +249427,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-pvc namespace: default @@ -249455,8 +249455,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-metrics-service namespace: default @@ -249483,8 +249483,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: ovez-webhook-service namespace: default @@ -249510,8 +249510,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP namespace: default @@ -249940,8 +249940,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: redpanda-serving-cert namespace: default @@ -249970,8 +249970,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-selfsigned-issuer namespace: default @@ -250022,8 +250022,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B name: xxjYziP-metrics-monitor namespace: default @@ -250047,8 +250047,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: ovez - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 zWv: hIfkuex2B --- # Source: operator/templates/validating_webhook.yaml @@ -250322,8 +250322,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 7ZTjb namespace: default --- @@ -251105,8 +251105,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-config namespace: default --- @@ -251423,8 +251423,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-metrics-reader rules: - nonResourceURLs: @@ -251445,8 +251445,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-proxy-role rules: - apiGroups: @@ -251475,8 +251475,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk rules: - apiGroups: @@ -251852,8 +251852,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -251877,8 +251877,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk roleRef: apiGroup: rbac.authorization.k8s.io @@ -251916,8 +251916,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-election-role namespace: default rules: @@ -251948,8 +251948,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-pvc namespace: default rules: @@ -251995,8 +251995,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-election-rolebinding namespace: default roleRef: @@ -252021,8 +252021,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-pvc namespace: default roleRef: @@ -252357,8 +252357,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-metrics-service namespace: default spec: @@ -252383,8 +252383,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: zsU8D-webhook-service namespace: default spec: @@ -252887,8 +252887,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk namespace: default spec: @@ -253437,8 +253437,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -253465,8 +253465,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-selfsigned-issuer namespace: default spec: @@ -257148,8 +257148,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: OZHCbAk-metrics-monitor namespace: default spec: @@ -257170,8 +257170,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: zsU8D - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -257705,8 +257705,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v: pV name: JvUUYZNAn-config namespace: default @@ -257722,8 +257722,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v: pV name: JvUUYZNAn-metrics-service namespace: default @@ -257747,8 +257747,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v: pV name: operator-webhook-service namespace: default @@ -257771,8 +257771,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v: pV name: JvUUYZNAn namespace: default @@ -258098,8 +258098,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v: pV name: redpanda-serving-cert namespace: default @@ -258125,8 +258125,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 v: pV name: JvUUYZNAn-selfsigned-issuer namespace: default @@ -259199,9 +259199,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-config namespace: default --- @@ -259516,9 +259516,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-metrics-reader rules: - nonResourceURLs: @@ -259537,9 +259537,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-proxy-role rules: - apiGroups: @@ -259566,9 +259566,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9 rules: - apiGroups: @@ -259942,9 +259942,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -259966,9 +259966,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9 roleRef: apiGroup: rbac.authorization.k8s.io @@ -260004,9 +260004,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-election-role namespace: default rules: @@ -260035,9 +260035,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-pvc namespace: default rules: @@ -260081,9 +260081,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-election-rolebinding namespace: default roleRef: @@ -260106,9 +260106,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-pvc namespace: default roleRef: @@ -260441,9 +260441,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-metrics-service namespace: default spec: @@ -260466,9 +260466,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: AD-webhook-service namespace: default spec: @@ -260969,9 +260969,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9 namespace: default spec: @@ -261547,9 +261547,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -261574,9 +261574,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: AD - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dRuotY: sUV - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: twuYH9-selfsigned-issuer namespace: default spec: @@ -265768,8 +265768,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: g namespace: default --- @@ -265797,8 +265797,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-config namespace: default --- @@ -265813,8 +265813,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-metrics-reader rules: - nonResourceURLs: @@ -265833,8 +265833,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-proxy-role rules: - apiGroups: @@ -265861,8 +265861,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn rules: - apiGroups: @@ -266145,8 +266145,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -266168,8 +266168,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn roleRef: apiGroup: rbac.authorization.k8s.io @@ -266191,8 +266191,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-election-role namespace: default rules: @@ -266221,8 +266221,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-pvc namespace: default rules: @@ -266245,8 +266245,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-election-rolebinding namespace: default roleRef: @@ -266269,8 +266269,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-pvc namespace: default roleRef: @@ -266293,8 +266293,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-metrics-service namespace: default spec: @@ -266317,8 +266317,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: MOjCBp-webhook-service namespace: default spec: @@ -266340,8 +266340,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn namespace: default spec: @@ -266823,8 +266823,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -266849,8 +266849,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-selfsigned-issuer namespace: default spec: @@ -266897,8 +266897,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Sb2hWn-metrics-monitor namespace: default spec: @@ -266920,8 +266920,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MOjCBp - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -267102,8 +267102,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-config namespace: default --- @@ -267118,8 +267118,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-metrics-reader rules: - nonResourceURLs: @@ -267138,8 +267138,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-proxy-role rules: - apiGroups: @@ -267166,8 +267166,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B rules: - apiGroups: @@ -267450,8 +267450,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -267473,8 +267473,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B roleRef: apiGroup: rbac.authorization.k8s.io @@ -267496,8 +267496,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-election-role namespace: default rules: @@ -267526,8 +267526,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-pvc namespace: default rules: @@ -267550,8 +267550,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-election-rolebinding namespace: default roleRef: @@ -267574,8 +267574,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-pvc namespace: default roleRef: @@ -267598,8 +267598,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-metrics-service namespace: default spec: @@ -267622,8 +267622,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: B-webhook-service namespace: default spec: @@ -267645,8 +267645,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B namespace: default spec: @@ -268122,8 +268122,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -268148,8 +268148,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-selfsigned-issuer namespace: default spec: @@ -268196,8 +268196,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-B-metrics-monitor namespace: default spec: @@ -268218,8 +268218,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: B - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -268389,8 +268389,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: S namespace: default --- @@ -268417,8 +268417,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QSmzerg-config namespace: default --- @@ -268432,8 +268432,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QSmzerg-metrics-service namespace: default spec: @@ -268455,8 +268455,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3SyCJ-webhook-service namespace: default spec: @@ -268477,8 +268477,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QSmzerg namespace: default spec: @@ -268841,8 +268841,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -268866,8 +268866,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QSmzerg-selfsigned-issuer namespace: default spec: @@ -268913,8 +268913,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: QSmzerg-metrics-monitor namespace: default spec: @@ -268935,8 +268935,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: 3SyCJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -269117,8 +269117,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-config @@ -269135,8 +269135,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-metrics-reader @@ -269157,8 +269157,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-proxy-role @@ -269187,8 +269187,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ @@ -269473,8 +269473,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-proxy-role @@ -269498,8 +269498,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ @@ -269523,8 +269523,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-election-role @@ -269555,8 +269555,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-pvc @@ -269581,8 +269581,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-election-rolebinding @@ -269607,8 +269607,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-pvc @@ -269633,8 +269633,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-metrics-service @@ -269659,8 +269659,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: o2-webhook-service @@ -269684,8 +269684,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ @@ -270084,8 +270084,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: redpanda-serving-cert @@ -270112,8 +270112,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: o2 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 q93: ONPg3F rZBEA7mOLYT: iFtHtFH name: nJ-selfsigned-issuer @@ -270333,8 +270333,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-config namespace: default @@ -270353,8 +270353,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-metrics-reader rules: @@ -270377,8 +270377,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-proxy-role rules: @@ -270409,8 +270409,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP rules: @@ -270697,8 +270697,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-proxy-role roleRef: @@ -270724,8 +270724,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP roleRef: @@ -270751,8 +270751,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-election-role namespace: default @@ -270785,8 +270785,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-pvc namespace: default @@ -270813,8 +270813,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-election-rolebinding namespace: default @@ -270841,8 +270841,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-pvc namespace: default @@ -270869,8 +270869,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-metrics-service namespace: default @@ -270897,8 +270897,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: WqmcFb-webhook-service namespace: default @@ -270924,8 +270924,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP namespace: default @@ -271510,8 +271510,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: redpanda-serving-cert namespace: default @@ -271540,8 +271540,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-selfsigned-issuer namespace: default @@ -271592,8 +271592,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc name: cCP-metrics-monitor namespace: default @@ -271616,8 +271616,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: WqmcFb - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 jHlVD3i0I: Hfqg8dMgdc --- # Source: operator/templates/validating_webhook.yaml @@ -271787,8 +271787,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: TxdHR namespace: default --- @@ -271815,8 +271815,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 8WTbb-config namespace: default --- @@ -271830,8 +271830,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 8WTbb-metrics-service namespace: default spec: @@ -271853,8 +271853,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: yHixING-webhook-service namespace: default spec: @@ -271875,8 +271875,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 8WTbb namespace: default spec: @@ -272332,8 +272332,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -272357,8 +272357,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 8WTbb-selfsigned-issuer namespace: default spec: @@ -272404,8 +272404,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 8WTbb-metrics-monitor namespace: default spec: @@ -272426,8 +272426,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: yHixING - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -272598,8 +272598,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: drBf namespace: default @@ -272629,8 +272629,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-config namespace: default @@ -272647,8 +272647,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-metrics-reader rules: @@ -272669,8 +272669,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-proxy-role rules: @@ -272699,8 +272699,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo rules: @@ -272985,8 +272985,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-proxy-role roleRef: @@ -273010,8 +273010,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo roleRef: @@ -273035,8 +273035,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-election-role namespace: default @@ -273067,8 +273067,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-pvc namespace: default @@ -273093,8 +273093,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-election-rolebinding namespace: default @@ -273119,8 +273119,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-pvc namespace: default @@ -273145,8 +273145,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-metrics-service namespace: default @@ -273171,8 +273171,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: L07-webhook-service namespace: default @@ -273196,8 +273196,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo namespace: default @@ -273621,8 +273621,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: redpanda-serving-cert namespace: default @@ -273649,8 +273649,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-selfsigned-issuer namespace: default @@ -273699,8 +273699,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h name: Wo-metrics-monitor namespace: default @@ -273723,8 +273723,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: L07 - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 nI2ZSs: 4AI8h --- # Source: operator/templates/validating_webhook.yaml @@ -274000,8 +274000,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: 7QeW @@ -274785,8 +274785,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-config @@ -275105,8 +275105,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-metrics-reader @@ -275129,8 +275129,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-proxy-role @@ -275161,8 +275161,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w @@ -275540,8 +275540,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-proxy-role @@ -275567,8 +275567,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w @@ -275608,8 +275608,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-election-role @@ -275642,8 +275642,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-pvc @@ -275691,8 +275691,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-election-rolebinding @@ -275719,8 +275719,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-pvc @@ -276057,8 +276057,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-metrics-service @@ -276085,8 +276085,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: MK-webhook-service @@ -276591,8 +276591,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w @@ -277181,8 +277181,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: redpanda-serving-cert @@ -277211,8 +277211,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-selfsigned-issuer @@ -280896,8 +280896,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" name: w-metrics-monitor @@ -280920,8 +280920,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MK - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 t: W wH2b: "" --- @@ -281446,9 +281446,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: LjYLOL6C namespace: default @@ -281479,9 +281479,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: f3nfwQai-config namespace: default @@ -281499,9 +281499,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: f3nfwQai-metrics-service namespace: default @@ -281527,9 +281527,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: qv3g-webhook-service namespace: default @@ -281554,9 +281554,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: f3nfwQai namespace: default @@ -282033,9 +282033,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: redpanda-serving-cert namespace: default @@ -282063,9 +282063,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: f3nfwQai-selfsigned-issuer namespace: default @@ -282115,9 +282115,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ name: f3nfwQai-metrics-monitor namespace: default @@ -282140,9 +282140,9 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: qv3g - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 gi: 9j2 - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 zb8lDT9V: olwEfoWZ --- # Source: operator/templates/validating_webhook.yaml @@ -282311,8 +282311,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: J2qRpt9 namespace: default --- @@ -282340,8 +282340,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-config namespace: default --- @@ -282356,8 +282356,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-metrics-reader rules: - nonResourceURLs: @@ -282376,8 +282376,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-proxy-role rules: - apiGroups: @@ -282404,8 +282404,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6 rules: - apiGroups: @@ -282688,8 +282688,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -282711,8 +282711,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6 roleRef: apiGroup: rbac.authorization.k8s.io @@ -282734,8 +282734,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-election-role namespace: default rules: @@ -282764,8 +282764,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-pvc namespace: default rules: @@ -282788,8 +282788,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-election-rolebinding namespace: default roleRef: @@ -282812,8 +282812,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-pvc namespace: default roleRef: @@ -282836,8 +282836,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-metrics-service namespace: default spec: @@ -282860,8 +282860,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Tlv-webhook-service namespace: default spec: @@ -282883,8 +282883,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6 namespace: default spec: @@ -283313,8 +283313,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -283339,8 +283339,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-selfsigned-issuer namespace: default spec: @@ -283387,8 +283387,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: KXsg6-metrics-monitor namespace: default spec: @@ -283409,8 +283409,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: Tlv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 --- # Source: operator/templates/validating_webhook.yaml apiVersion: admissionregistration.k8s.io/v1 @@ -284448,8 +284448,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-config @@ -284766,8 +284766,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-metrics-reader @@ -284788,8 +284788,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-proxy-role @@ -284818,8 +284818,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh @@ -285195,8 +285195,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-proxy-role @@ -285220,8 +285220,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh @@ -285259,8 +285259,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-election-role @@ -285291,8 +285291,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-pvc @@ -285338,8 +285338,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-election-rolebinding @@ -285364,8 +285364,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-pvc @@ -285700,8 +285700,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-metrics-service @@ -285726,8 +285726,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: DjMfg-webhook-service @@ -286230,8 +286230,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh @@ -286724,8 +286724,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: redpanda-serving-cert @@ -286752,8 +286752,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: DjMfg - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 oLWSEoF: Ps5P uO6upU7K: lMwbJ name: FCXrBjh-selfsigned-issuer @@ -291052,8 +291052,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "02" namespace: default --- @@ -291833,8 +291833,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-config namespace: default --- @@ -292149,8 +292149,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-metrics-reader rules: - nonResourceURLs: @@ -292169,8 +292169,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-proxy-role rules: - apiGroups: @@ -292197,8 +292197,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "02" rules: - apiGroups: @@ -292572,8 +292572,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -292595,8 +292595,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "02" roleRef: apiGroup: rbac.authorization.k8s.io @@ -292632,8 +292632,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-election-role namespace: default rules: @@ -292662,8 +292662,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-pvc namespace: default rules: @@ -292707,8 +292707,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-election-rolebinding namespace: default roleRef: @@ -292731,8 +292731,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-pvc namespace: default roleRef: @@ -293065,8 +293065,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-metrics-service namespace: default spec: @@ -293089,8 +293089,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: Y-webhook-service namespace: default spec: @@ -293591,8 +293591,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: "02" namespace: default spec: @@ -294144,8 +294144,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -294170,8 +294170,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: "Y" - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 02-selfsigned-issuer namespace: default spec: @@ -298464,8 +298464,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: nNP8R namespace: default --- @@ -299246,8 +299246,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3SkASoputZl-config namespace: default --- @@ -299999,8 +299999,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3SkASoputZl-metrics-service namespace: default spec: @@ -300024,8 +300024,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: axov6PJ-webhook-service namespace: default spec: @@ -300527,8 +300527,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3SkASoputZl namespace: default spec: @@ -301007,8 +301007,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -301034,8 +301034,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: axov6PJ - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: 3SkASoputZl-selfsigned-issuer namespace: default spec: @@ -306096,9 +306096,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-config namespace: default --- @@ -306416,9 +306416,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-metrics-reader rules: - nonResourceURLs: @@ -306440,9 +306440,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-proxy-role rules: - apiGroups: @@ -306472,9 +306472,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi rules: - apiGroups: @@ -306851,9 +306851,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -306878,9 +306878,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi roleRef: apiGroup: rbac.authorization.k8s.io @@ -306919,9 +306919,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-election-role namespace: default rules: @@ -306953,9 +306953,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-pvc namespace: default rules: @@ -307002,9 +307002,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-election-rolebinding namespace: default roleRef: @@ -307030,9 +307030,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-pvc namespace: default roleRef: @@ -307368,9 +307368,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-metrics-service namespace: default spec: @@ -307396,9 +307396,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: MkL0HtR-webhook-service namespace: default spec: @@ -307902,9 +307902,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi namespace: default spec: @@ -308421,9 +308421,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -308451,9 +308451,9 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: MkL0HtR - app.kubernetes.io/version: v2.2.2-24.2.4 + app.kubernetes.io/version: v2.2.4-24.2.5 dwmXsKZoxFp: TZf - helm.sh/chart: operator-0.4.30 + helm.sh/chart: operator-0.4.31 name: KPhNK5uNi-selfsigned-issuer namespace: default spec: @@ -312642,8 +312642,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: LH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: L namespace: default --- @@ -312671,8 +312671,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: LH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: iP-config namespace: default --- @@ -312687,8 +312687,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: LH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: iP-metrics-service namespace: default spec: @@ -312711,8 +312711,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: LH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: LH-webhook-service namespace: default spec: @@ -312734,8 +312734,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: LH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: iP namespace: default spec: @@ -313288,8 +313288,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: LH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -313314,8 +313314,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: LH - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: iP-selfsigned-issuer namespace: default spec: @@ -313624,8 +313624,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: vE4AZ namespace: default @@ -314407,8 +314407,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-config namespace: default @@ -314725,8 +314725,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-metrics-reader rules: @@ -314747,8 +314747,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-proxy-role rules: @@ -314777,8 +314777,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj rules: @@ -315154,8 +315154,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-proxy-role roleRef: @@ -315179,8 +315179,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj roleRef: @@ -315218,8 +315218,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-election-role namespace: default @@ -315250,8 +315250,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-pvc namespace: default @@ -315297,8 +315297,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-election-rolebinding namespace: default @@ -315323,8 +315323,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-pvc namespace: default @@ -315659,8 +315659,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-metrics-service namespace: default @@ -315685,8 +315685,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: RoJFv-webhook-service namespace: default @@ -316189,8 +316189,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj namespace: default @@ -316762,8 +316762,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: redpanda-serving-cert namespace: default @@ -316790,8 +316790,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-selfsigned-issuer namespace: default @@ -320473,8 +320473,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr name: 5U9oyj-metrics-monitor namespace: default @@ -320498,8 +320498,8 @@ spec: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: RoJFv - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 rnKI: dxHr --- # Source: operator/charts/kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/validatingWebhookConfiguration.yaml @@ -321021,8 +321021,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default --- @@ -321049,8 +321049,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-config namespace: default --- @@ -321064,8 +321064,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-metrics-reader rules: - nonResourceURLs: @@ -321083,8 +321083,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-proxy-role rules: - apiGroups: @@ -321110,8 +321110,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -321132,8 +321132,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-election-role namespace: default rules: @@ -321161,8 +321161,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-pvc namespace: default rules: @@ -321184,8 +321184,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default rules: @@ -321689,8 +321689,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-election-rolebinding namespace: default roleRef: @@ -321712,8 +321712,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-pvc namespace: default roleRef: @@ -321735,8 +321735,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default roleRef: @@ -321758,8 +321758,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-metrics-service namespace: default spec: @@ -321781,8 +321781,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default spec: @@ -321805,7 +321805,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=false - --namespace=default @@ -321813,7 +321813,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: httpGet: @@ -322098,8 +322098,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default --- @@ -322126,8 +322126,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-config namespace: default --- @@ -322141,8 +322141,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-metrics-reader rules: - nonResourceURLs: @@ -322160,8 +322160,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-proxy-role rules: - apiGroups: @@ -322187,8 +322187,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator rules: - apiGroups: @@ -322470,8 +322470,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -322492,8 +322492,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator roleRef: apiGroup: rbac.authorization.k8s.io @@ -322514,8 +322514,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-election-role namespace: default rules: @@ -322543,8 +322543,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-pvc namespace: default rules: @@ -322566,8 +322566,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-election-rolebinding namespace: default roleRef: @@ -322589,8 +322589,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-pvc namespace: default roleRef: @@ -322612,8 +322612,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-metrics-service namespace: default spec: @@ -322635,8 +322635,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-webhook-service namespace: default spec: @@ -322657,8 +322657,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default spec: @@ -322681,13 +322681,13 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=true command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: httpGet: @@ -322751,8 +322751,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: redpanda-serving-cert namespace: default spec: @@ -322776,8 +322776,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-selfsigned-issuer namespace: default spec: @@ -322979,8 +322979,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default --- @@ -323007,8 +323007,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-config namespace: default --- @@ -323022,8 +323022,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-metrics-reader rules: - nonResourceURLs: @@ -323041,8 +323041,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-proxy-role rules: - apiGroups: @@ -323068,8 +323068,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-proxy-role roleRef: apiGroup: rbac.authorization.k8s.io @@ -323090,8 +323090,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-election-role namespace: default rules: @@ -323119,8 +323119,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-pvc namespace: default rules: @@ -323142,8 +323142,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default rules: @@ -323647,8 +323647,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-election-rolebinding namespace: default roleRef: @@ -323670,8 +323670,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-pvc namespace: default roleRef: @@ -323693,8 +323693,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default roleRef: @@ -323716,8 +323716,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator-metrics-service namespace: default spec: @@ -323739,8 +323739,8 @@ metadata: app.kubernetes.io/instance: operator app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: operator - app.kubernetes.io/version: v2.2.2-24.2.4 - helm.sh/chart: operator-0.4.30 + app.kubernetes.io/version: v2.2.4-24.2.5 + helm.sh/chart: operator-0.4.31 name: operator namespace: default spec: @@ -323763,7 +323763,7 @@ spec: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 - --leader-elect - - --configurator-tag=v2.2.2-24.2.4 + - --configurator-tag=v2.2.4-24.2.5 - --configurator-base-image=docker.redpanda.com/redpandadata/configurator - --webhook-enabled=false - --namespace=default @@ -323771,7 +323771,7 @@ spec: command: - /manager env: [] - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.2-24.2.4 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/charts/redpanda/README.md b/charts/redpanda/README.md index d7f247f24f..ad749535f4 100644 --- a/charts/redpanda/README.md +++ b/charts/redpanda/README.md @@ -571,36 +571,6 @@ A subset of Kubernetes' PodSpec type that will be merged into the final PodSpec. {"containers":[{"env":[],"name":"post-install","securityContext":{}}],"securityContext":{}} ``` -### [post_upgrade_job.affinity](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=post_upgrade_job.affinity) - -**Default:** `{}` - -### [post_upgrade_job.enabled](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=post_upgrade_job.enabled) - -**Default:** `true` - -### [post_upgrade_job.podTemplate.annotations](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=post_upgrade_job.podTemplate.annotations) - -Additional annotations to apply to the Pods of this Job. - -**Default:** `{}` - -### [post_upgrade_job.podTemplate.labels](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=post_upgrade_job.podTemplate.labels) - -Additional labels to apply to the Pods of this Job. - -**Default:** `{}` - -### [post_upgrade_job.podTemplate.spec](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=post_upgrade_job.podTemplate.spec) - -A subset of Kubernetes' PodSpec type that will be merged into the final PodSpec. See [Merge Semantics](#merging-semantics) for details. - -**Default:** - -``` -{"containers":[{"env":[],"name":"post-upgrade","securityContext":{}}],"securityContext":{}} -``` - ### [rackAwareness](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=rackAwareness) Rack Awareness settings. For details, see the [Rack Awareness documentation](https://docs.redpanda.com/docs/manage/kubernetes/kubernetes-rack-awareness/). @@ -985,7 +955,7 @@ To create `Guaranteed` Pods for Redpanda brokers, provide both requests and limi ### [statefulset.sideCars.controllers.image.tag](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=statefulset.sideCars.controllers.image.tag) -**Default:** `"v2.1.10-23.2.18"` +**Default:** `"v2.2.4-24.2.5"` ### [statefulset.sideCars.controllers.metricsAddress](https://artifacthub.io/packages/helm/redpanda-data/redpanda?modal=values&path=statefulset.sideCars.controllers.metricsAddress) diff --git a/charts/redpanda/chart.go b/charts/redpanda/chart.go index afdb70b651..d198e09d9a 100644 --- a/charts/redpanda/chart.go +++ b/charts/redpanda/chart.go @@ -73,7 +73,6 @@ func render(dot *helmette.Dot) []kube.Object { SidecarControllersRole(dot), SidecarControllersRoleBinding(dot), StatefulSet(dot), - PostUpgrade(dot), PostInstallUpgradeJob(dot), } diff --git a/charts/redpanda/configmap.tpl.go b/charts/redpanda/configmap.tpl.go index 57846ac16b..a78e012ada 100644 --- a/charts/redpanda/configmap.tpl.go +++ b/charts/redpanda/configmap.tpl.go @@ -48,6 +48,17 @@ func RedpandaConfigMap(dot *helmette.Dot) *corev1.ConfigMap { } } +// BootstrapFile returns contents of `.bootstrap.yaml`. Keys that may be set +// via environment variables (such as tiered storage secrets) will have +// placeholders in the form of $ENVVARNAME. An init container is responsible +// for expanding said placeholders. +// +// Convention is to name envvars +// $REDPANDA_SCREAMING_CASE_CLUSTER_PROPERTY_NAME. For example, +// cloud_storage_secret_key would be $REDPANDA_CLOUD_STORAGE_SECRET_KEY. +// +// `.bootstrap.yaml` is templated and then read by both the redpanda container +// and the post install/upgrade job. func BootstrapFile(dot *helmette.Dot) string { values := helmette.Unwrap[Values](dot.Values) @@ -63,7 +74,21 @@ func BootstrapFile(dot *helmette.Dot) string { bootstrap = helmette.Merge(bootstrap, values.Config.Tunable.Translate()) bootstrap = helmette.Merge(bootstrap, values.Config.Cluster.Translate()) bootstrap = helmette.Merge(bootstrap, values.Auth.Translate(values.Auth.IsSASLEnabled())) - bootstrap = helmette.Merge(bootstrap, values.Storage.Translate()) + bootstrap = helmette.Merge(bootstrap, values.Storage.GetTieredStorageConfig().Translate(&values.Storage.Tiered.CredentialsSecretRef)) + + // If default_topic_replications is not set and we have at least 3 Brokers, + // upgrade from redpanda's default of 1 to 3 so, when possible, topics are + // HA by default. + // See also: + // - https://github.com/redpanda-data/helm-charts/issues/583 + // - https://github.com/redpanda-data/helm-charts/issues/1501 + if _, ok := values.Config.Cluster["default_topic_replications"]; !ok && values.Statefulset.Replicas >= 3 { + bootstrap["default_topic_replications"] = 3 + } + + if _, ok := values.Config.Cluster["storage_min_free_bytes"]; !ok { + bootstrap["storage_min_free_bytes"] = values.Storage.StorageMinFreeBytes() + } return helmette.ToYaml(bootstrap) } diff --git a/charts/redpanda/helpers.go b/charts/redpanda/helpers.go index 44ef451e7d..a38e935f83 100644 --- a/charts/redpanda/helpers.go +++ b/charts/redpanda/helpers.go @@ -187,7 +187,7 @@ func ClientAuthRequired(dot *helmette.Dot) bool { func DefaultMounts(dot *helmette.Dot) []corev1.VolumeMount { return append([]corev1.VolumeMount{ { - Name: "config", + Name: "base-config", MountPath: "/etc/redpanda", }, }, CommonMounts(dot)...) @@ -239,7 +239,7 @@ func CommonMounts(dot *helmette.Dot) []corev1.VolumeMount { func DefaultVolumes(dot *helmette.Dot) []corev1.Volume { return append([]corev1.Volume{ { - Name: "config", + Name: "base-config", VolumeSource: corev1.VolumeSource{ ConfigMap: &corev1.ConfigMapVolumeSource{ LocalObjectReference: corev1.LocalObjectReference{ diff --git a/charts/redpanda/post_install_upgrade_job.go b/charts/redpanda/post_install_upgrade_job.go index a8252900ac..b26e15a61c 100644 --- a/charts/redpanda/post_install_upgrade_job.go +++ b/charts/redpanda/post_install_upgrade_job.go @@ -28,6 +28,54 @@ import ( "github.com/redpanda-data/helm-charts/pkg/gotohelm/helmette" ) +// bootstrapYamlTemplater returns an initcontainer that will template +// environment variables into ${base-config}/boostrap.yaml and output it to +// ${config}/.bootstrap.yaml. +func bootstrapYamlTemplater(dot *helmette.Dot) corev1.Container { + values := helmette.Unwrap[Values](dot.Values) + + env := values.Storage.Tiered.CredentialsSecretRef.AsEnvVars(values.Storage.GetTieredStorageConfig()) + + image := fmt.Sprintf(`%s:%s`, + values.Statefulset.SideCars.Controllers.Image.Repository, + values.Statefulset.SideCars.Controllers.Image.Tag, + ) + + return corev1.Container{ + Name: "bootstrap-yaml-envsubst", + Image: image, + Command: []string{ + "/redpanda-operator", + "envsubst", + "/tmp/base-config/bootstrap.yaml", + "--output", + "/tmp/config/.bootstrap.yaml", + }, + Env: env, + Resources: corev1.ResourceRequirements{ + Limits: corev1.ResourceList{ + corev1.ResourceCPU: resource.MustParse("100m"), + corev1.ResourceMemory: resource.MustParse("25Mi"), + }, + Requests: corev1.ResourceList{ + corev1.ResourceCPU: resource.MustParse("100m"), + corev1.ResourceMemory: resource.MustParse("25Mi"), + }, + }, + SecurityContext: &corev1.SecurityContext{ + // NB: RunAsUser and RunAsGroup will be inherited from the + // PodSecurityContext of consumers. + AllowPrivilegeEscalation: ptr.To(false), + ReadOnlyRootFilesystem: ptr.To(true), + RunAsNonRoot: ptr.To(true), + }, + VolumeMounts: []corev1.VolumeMount{ + {Name: "config", MountPath: "/tmp/config/"}, + {Name: "base-config", MountPath: "/tmp/base-config/"}, + }, + } +} + func PostInstallUpgradeJob(dot *helmette.Dot) *batchv1.Job { values := helmette.Unwrap[Values](dot.Values) @@ -35,6 +83,11 @@ func PostInstallUpgradeJob(dot *helmette.Dot) *batchv1.Job { return nil } + image := fmt.Sprintf(`%s:%s`, + values.Statefulset.SideCars.Controllers.Image.Repository, + values.Statefulset.SideCars.Controllers.Image.Tag, + ) + job := &batchv1.Job{ TypeMeta: metav1.TypeMeta{ APIVersion: "batch/v1", @@ -72,95 +125,70 @@ func PostInstallUpgradeJob(dot *helmette.Dot) *batchv1.Job { ), }, Spec: corev1.PodSpec{ - NodeSelector: values.NodeSelector, - Affinity: postInstallJobAffinity(dot), - Tolerations: tolerations(dot), - RestartPolicy: corev1.RestartPolicyNever, - SecurityContext: PodSecurityContext(dot), - ImagePullSecrets: helmette.Default(nil, values.ImagePullSecrets), + NodeSelector: values.NodeSelector, + Affinity: postInstallJobAffinity(dot), + Tolerations: tolerations(dot), + RestartPolicy: corev1.RestartPolicyNever, + SecurityContext: PodSecurityContext(dot), + ImagePullSecrets: helmette.Default(nil, values.ImagePullSecrets), + InitContainers: []corev1.Container{bootstrapYamlTemplater(dot)}, + AutomountServiceAccountToken: ptr.To(false), Containers: []corev1.Container{ { - Name: PostInstallContainerName, - Image: fmt.Sprintf("%s:%s", values.Image.Repository, Tag(dot)), - Env: rpkEnvVars(dot, PostInstallUpgradeEnvironmentVariables(dot)), - Command: []string{"bash", "-c"}, - Args: []string{}, + Name: PostInstallContainerName, + Image: image, + Env: PostInstallUpgradeEnvironmentVariables(dot), + // See sync-cluster-config in the operator for exact details. Roughly, it: + // 1. Sets the redpanda license + // 2. Sets the redpanda cluster config + // 3. Restarts schema-registry (see https://github.com/redpanda-data/redpanda-operator/issues/232) + // Upon the post-install run, the clusters's + // configuration will be re-set (that is set again + // not reset) which is an unfortunate but ultimately acceptable side effect. + Command: []string{ + "/redpanda-operator", + "sync-cluster-config", + "--redpanda-yaml", "/tmp/base-config/redpanda.yaml", + "--bootstrap-yaml", "/tmp/config/.bootstrap.yaml", + }, Resources: ptr.Deref(values.PostInstallJob.Resources, corev1.ResourceRequirements{}), // Note: this is a semantic change/fix from the template, which specified the merge in the incorrect order SecurityContext: ptr.To(helmette.MergeTo[corev1.SecurityContext]( ptr.Deref(values.PostInstallJob.SecurityContext, corev1.SecurityContext{}), ContainerSecurityContext(dot), )), - VolumeMounts: DefaultMounts(dot), + VolumeMounts: append( + CommonMounts(dot), + corev1.VolumeMount{Name: "config", MountPath: "/tmp/config"}, + corev1.VolumeMount{Name: "base-config", MountPath: "/tmp/base-config"}, + ), }, }, - Volumes: DefaultVolumes(dot), + Volumes: append( + CommonVolumes(dot), + corev1.Volume{ + Name: "base-config", + VolumeSource: corev1.VolumeSource{ + ConfigMap: &corev1.ConfigMapVolumeSource{ + LocalObjectReference: corev1.LocalObjectReference{ + Name: Fullname(dot), + }, + }, + }, + }, + corev1.Volume{ + Name: "config", + VolumeSource: corev1.VolumeSource{ + EmptyDir: &corev1.EmptyDirVolumeSource{}, + }, + }, + ), ServiceAccountName: ServiceAccountName(dot), }, }), }, } - var script []string - script = append(script, - `set -e`, - ) - - if RedpandaAtLeast_22_2_0(dot) { - script = append(script, - `if [[ -n "$REDPANDA_LICENSE" ]] then`, - ` rpk cluster license set "$REDPANDA_LICENSE"`, - `fi`, - ) - } - /* ### Here be dragons ### - This block of bash configures cluster configuration settings by - pulling them from environment variables. - - This allows us to support configurations from secrets or their raw - values. - - WARNING: There is a small race condition here. `rpk cluster config import` - will reset any values that are not specified. To work around this, we first - export the the configuration. If there's a change to the configuration - while we're updating the exported config on disk, said change will be reverted. - - TODO(chrisseto): Consolidate all cluster configuration setting to this job. - */ - script = append(script, - // First: dump the existing cluster configuration. - // We need to use config import to handle conditional configurations - // (e.g. cloud_storage_enabled). Maintaining a DAG of configurations - // is not an option for the helm chart. - ``, ``, ``, ``, // TODO: just WS-alignment with the original template; drop these - `rpk cluster config export -f /tmp/cfg.yml`, - ``, ``, - - // Second: For each environment variable with the prefix RPK - // ("${!RPK_@}"), use `rpk redpanda config set` to update the exported - // config, ignoring any authentication environment variables. - - // Lots of Bash Jargon here: - // "${KEY#*RPK_}" => Strip the RPK_ prefix from KEY. - // "${config,,}" => config.toLower() - // "${!KEY}" => Dynamic variable resolution. ie: What is the value of the variable with a name equal to the value of $KEY? - - `for KEY in "${!RPK_@}"; do`, - ` if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then`, - ` config="${KEY#*RPK_}"`, - ` rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}"`, - ` fi`, - `done`, - ``, ``, - - // The updated file is then loaded via `rpk cluster config import` which - // ensures that conditional configurations (cloud_storage_enabled) - // "see" all their dependent keys. - `rpk cluster config import -f /tmp/cfg.yml`, - ``, - ) - job.Spec.Template.Spec.Containers[0].Args = append(job.Spec.Template.Spec.Containers[0].Args, helmette.Join("\n", script)) - return job } @@ -189,8 +217,6 @@ func tolerations(dot *helmette.Dot) []corev1.Toleration { // PostInstallUpgradeEnvironmentVariables returns environment variables assigned to Redpanda // container. func PostInstallUpgradeEnvironmentVariables(dot *helmette.Dot) []corev1.EnvVar { - values := helmette.Unwrap[Values](dot.Values) - envars := []corev1.EnvVar{} if license := GetLicenseLiteral(dot); license != "" { @@ -207,129 +233,8 @@ func PostInstallUpgradeEnvironmentVariables(dot *helmette.Dot) []corev1.EnvVar { }) } - if !values.Storage.IsTieredStorageEnabled() { - return envars - } - - tieredStorageConfig := values.Storage.GetTieredStorageConfig() - - ac, azureContainerExists := tieredStorageConfig["cloud_storage_azure_container"] - asa, azureStorageAccountExists := tieredStorageConfig["cloud_storage_azure_storage_account"] - if azureContainerExists && ac != nil && azureStorageAccountExists && asa != nil { - envars = append(envars, addAzureSharedKey(tieredStorageConfig, values)...) - } else { - envars = append(envars, addCloudStorageSecretKey(tieredStorageConfig, values)...) - } - - envars = append(envars, addCloudStorageAccessKey(tieredStorageConfig, values)...) - - for k, v := range tieredStorageConfig { - if k == "cloud_storage_access_key" || k == "cloud_storage_secret_key" || k == "cloud_storage_azure_shared_key" { - continue - } - - if v == nil || helmette.Empty(v) { - continue - } - - // cloud_storage_cache_size can be represented as Resource.Quantity that why value can be converted - // from value with SI suffix to bytes number. - if k == "cloud_storage_cache_size" { - envars = append(envars, corev1.EnvVar{ - Name: fmt.Sprintf("RPK_%s", helmette.Upper(k)), - Value: helmette.ToJSON(helmette.UnmarshalInto[*resource.Quantity](v).Value()), - }) - continue - } - - if str, ok := v.(string); ok { - envars = append(envars, corev1.EnvVar{ - Name: fmt.Sprintf("RPK_%s", helmette.Upper(k)), - Value: str, - }) - } else { - envars = append(envars, corev1.EnvVar{ - Name: fmt.Sprintf("RPK_%s", helmette.Upper(k)), - Value: helmette.MustToJSON(v), - }) - } - } - - return envars -} - -func addCloudStorageAccessKey(tieredStorageConfig TieredStorageConfig, values Values) []corev1.EnvVar { - if v, ok := tieredStorageConfig["cloud_storage_access_key"]; ok && v != "" { - return []corev1.EnvVar{ - { - Name: "RPK_CLOUD_STORAGE_ACCESS_KEY", - Value: v.(string), - }, - } - } else if ak := values.Storage.Tiered.CredentialsSecretRef.AccessKey; ak.IsValid() { - return []corev1.EnvVar{ - { - Name: "RPK_CLOUD_STORAGE_ACCESS_KEY", - ValueFrom: &corev1.EnvVarSource{ - SecretKeyRef: &corev1.SecretKeySelector{ - LocalObjectReference: corev1.LocalObjectReference{Name: ak.Name}, - Key: ak.Key, - }, - }, - }, - } - } - return []corev1.EnvVar{} -} - -func addCloudStorageSecretKey(tieredStorageConfig TieredStorageConfig, values Values) []corev1.EnvVar { - if v, ok := tieredStorageConfig["cloud_storage_secret_key"]; ok && v != "" { - return []corev1.EnvVar{ - { - Name: "RPK_CLOUD_STORAGE_SECRET_KEY", - Value: v.(string), - }, - } - } else if sk := values.Storage.Tiered.CredentialsSecretRef.SecretKey; sk.IsValid() { - return []corev1.EnvVar{ - { - Name: "RPK_CLOUD_STORAGE_SECRET_KEY", - ValueFrom: &corev1.EnvVarSource{ - SecretKeyRef: &corev1.SecretKeySelector{ - LocalObjectReference: corev1.LocalObjectReference{Name: sk.Name}, - Key: sk.Key, - }, - }, - }, - } - } - return []corev1.EnvVar{} -} - -func addAzureSharedKey(tieredStorageConfig TieredStorageConfig, values Values) []corev1.EnvVar { - // Preference Tiered Storage Config over credential secret reference - if v, ok := tieredStorageConfig["cloud_storage_azure_shared_key"]; ok && v != "" { - return []corev1.EnvVar{ - { - Name: "RPK_CLOUD_STORAGE_AZURE_SHARED_KEY", - Value: v.(string), - }, - } - } else if sk := values.Storage.Tiered.CredentialsSecretRef.SecretKey; sk.IsValid() { - return []corev1.EnvVar{ - { - Name: "RPK_CLOUD_STORAGE_AZURE_SHARED_KEY", - ValueFrom: &corev1.EnvVarSource{ - SecretKeyRef: &corev1.SecretKeySelector{ - LocalObjectReference: corev1.LocalObjectReference{Name: sk.Name}, - Key: sk.Key, - }, - }, - }, - } - } - - return []corev1.EnvVar{} + // include any authentication envvars as well. + return bootstrapEnvVars(dot, envars) } func GetLicenseLiteral(dot *helmette.Dot) string { diff --git a/charts/redpanda/post_install_upgrade_job_test.go b/charts/redpanda/post_install_upgrade_job_test.go index d5e412a7d4..728579b6f4 100644 --- a/charts/redpanda/post_install_upgrade_job_test.go +++ b/charts/redpanda/post_install_upgrade_job_test.go @@ -18,13 +18,13 @@ func TestPostInstallUpgradeEnvironmentVariables(t *testing.T) { }{ { "empty-result", - Values{Storage: Storage{Tiered: &Tiered{}}}, + Values{Storage: Storage{Tiered: Tiered{}}}, []corev1.EnvVar{}, }, { "only-literal-license", Values{ - Storage: Storage{Tiered: &Tiered{}}, + Storage: Storage{Tiered: Tiered{}}, Enterprise: Enterprise{License: "fake.license"}, }, []corev1.EnvVar{{Name: "REDPANDA_LICENSE", Value: "fake.license"}}, @@ -32,7 +32,7 @@ func TestPostInstallUpgradeEnvironmentVariables(t *testing.T) { { "only-deprecated-literal-license", Values{ - Storage: Storage{Tiered: &Tiered{}}, + Storage: Storage{Tiered: Tiered{}}, LicenseKey: "fake.license", }, []corev1.EnvVar{{Name: "REDPANDA_LICENSE", Value: "fake.license"}}, @@ -40,7 +40,7 @@ func TestPostInstallUpgradeEnvironmentVariables(t *testing.T) { { name: "only-secret-ref-license", values: Values{ - Storage: Storage{Tiered: &Tiered{}}, + Storage: Storage{Tiered: Tiered{}}, Enterprise: Enterprise{LicenseSecretRef: &struct { Key string `json:"key"` Name string `json:"name"` @@ -59,183 +59,37 @@ func TestPostInstallUpgradeEnvironmentVariables(t *testing.T) { { name: "only-deprecated-secret-ref-license", values: Values{ - Storage: Storage{Tiered: &Tiered{}}, + Storage: Storage{Tiered: Tiered{}}, LicenseSecretRef: &LicenseSecretRef{ SecretName: "some-secret", SecretKey: "some-key", }, }, - expectedEnvVars: []corev1.EnvVar{{Name: "REDPANDA_LICENSE", ValueFrom: &corev1.EnvVarSource{ - SecretKeyRef: &corev1.SecretKeySelector{ - LocalObjectReference: corev1.LocalObjectReference{Name: "some-secret"}, - Key: "some-key", - }, - }}}, - }, - { - name: "azure-literal-shared-key", - values: Values{ - Storage: Storage{Tiered: &Tiered{ - Config: TieredStorageConfig{ - "cloud_storage_enabled": true, - "cloud_storage_azure_shared_key": "fake-shared-key", - "cloud_storage_azure_container": "fake-azure-container", - "cloud_storage_azure_storage_account": "fake-storage-account", - }, - }}, - }, expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - {Name: "RPK_CLOUD_STORAGE_AZURE_CONTAINER", Value: "fake-azure-container"}, - {Name: "RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT", Value: "fake-storage-account"}, - {Name: "RPK_CLOUD_STORAGE_AZURE_SHARED_KEY", Value: "fake-shared-key"}, - }, - }, - { - name: "azure-shared-key-via-credential-secret-reference", - values: Values{ - Storage: Storage{Tiered: &Tiered{ - Config: TieredStorageConfig{ - "cloud_storage_enabled": true, - "cloud_storage_azure_container": "fake-azure-container", - "cloud_storage_azure_storage_account": "fake-storage-account", - }, - CredentialsSecretRef: TieredStorageCredentials{ - AccessKey: &SecretRef{}, - SecretKey: &SecretRef{ - Key: "some-key", - Name: "some-secret", + { + Name: "REDPANDA_LICENSE", + ValueFrom: &corev1.EnvVarSource{ + SecretKeyRef: &corev1.SecretKeySelector{ + LocalObjectReference: corev1.LocalObjectReference{Name: "some-secret"}, + Key: "some-key", }, }, - }}, - }, - expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - {Name: "RPK_CLOUD_STORAGE_AZURE_CONTAINER", Value: "fake-azure-container"}, - {Name: "RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT", Value: "fake-storage-account"}, - {Name: "RPK_CLOUD_STORAGE_AZURE_SHARED_KEY", ValueFrom: &corev1.EnvVarSource{ - SecretKeyRef: &corev1.SecretKeySelector{ - LocalObjectReference: corev1.LocalObjectReference{Name: "some-secret"}, - Key: "some-key", - }, - }}, + }, }, }, { - name: "azure-with-nil-values-configuration", + name: "azure-literal-shared-key", values: Values{ - Storage: Storage{Tiered: &Tiered{ + Storage: Storage{Tiered: Tiered{ Config: TieredStorageConfig{ "cloud_storage_enabled": true, "cloud_storage_azure_shared_key": "fake-shared-key", - "cloud_storage_azure_container": nil, - "cloud_storage_azure_storage_account": nil, - }, - }}, - }, - expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - }, - }, - { - name: "literal-cloud-storage-secret-key", - values: Values{ - Storage: Storage{Tiered: &Tiered{ - Config: TieredStorageConfig{ - "cloud_storage_enabled": true, - "cloud_storage_secret_key": "fake-secret-key", - "cloud_storage_access_key": "fake-access-key", - }, - }}, - }, - expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - {Name: "RPK_CLOUD_STORAGE_ACCESS_KEY", Value: "fake-access-key"}, - {Name: "RPK_CLOUD_STORAGE_SECRET_KEY", Value: "fake-secret-key"}, - }, - }, - { - name: "cloud-storage-storage-secret-key-via-credential-secret-reference", - values: Values{ - Storage: Storage{Tiered: &Tiered{ - Config: TieredStorageConfig{ - "cloud_storage_enabled": true, - }, - CredentialsSecretRef: TieredStorageCredentials{ - AccessKey: &SecretRef{ - Key: "some-key-1", - Name: "some-secret-1", - }, - SecretKey: &SecretRef{ - Key: "some-key-2", - Name: "some-secret-2", - }, - }, - }}, - }, - expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - {Name: "RPK_CLOUD_STORAGE_ACCESS_KEY", ValueFrom: &corev1.EnvVarSource{ - SecretKeyRef: &corev1.SecretKeySelector{ - LocalObjectReference: corev1.LocalObjectReference{Name: "some-secret-1"}, - Key: "some-key-1", - }, - }}, - {Name: "RPK_CLOUD_STORAGE_SECRET_KEY", ValueFrom: &corev1.EnvVarSource{ - SecretKeyRef: &corev1.SecretKeySelector{ - LocalObjectReference: corev1.LocalObjectReference{Name: "some-secret-2"}, - Key: "some-key-2", - }, - }}, - }, - }, - { - name: "multiple-types-in-tiered-storage-configuration", - values: Values{ - Storage: Storage{Tiered: &Tiered{ - Config: TieredStorageConfig{ - "cloud_storage_enabled": true, - "cloud_storage_secret_key": "fake-secret-key", - "cloud_storage_segment_max_upload_interval_sec": 1, - "cloud_storage_cache_size": "20Gi", - }, - }}, - }, - expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - {Name: "RPK_CLOUD_STORAGE_SECRET_KEY", Value: "fake-secret-key"}, - {Name: "RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC", Value: "1"}, - {Name: "RPK_CLOUD_STORAGE_CACHE_SIZE", Value: "21474836480"}, - }, - }, - { - name: "multiple-types-in-deprecated-tiered-storage-configuration", - values: Values{ - Storage: Storage{Tiered: &Tiered{}, TieredConfig: TieredStorageConfig{ - "cloud_storage_enabled": true, - "cloud_storage_secret_key": "fake-secret-key", - "cloud_storage_segment_max_upload_interval_sec": 1, - }}, - }, - expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - {Name: "RPK_CLOUD_STORAGE_SECRET_KEY", Value: "fake-secret-key"}, - {Name: "RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC", Value: "1"}, - }, - }, - { - name: "nil-tiered-storage-config-value", - values: Values{ - Storage: Storage{Tiered: &Tiered{ - Config: TieredStorageConfig{ - "cloud_storage_enabled": true, - "invalid-configuration": nil, + "cloud_storage_azure_container": "fake-azure-container", + "cloud_storage_azure_storage_account": "fake-storage-account", }, }}, }, - expectedEnvVars: []corev1.EnvVar{ - {Name: "RPK_CLOUD_STORAGE_ENABLED", Value: "true"}, - }, + expectedEnvVars: []corev1.EnvVar{}, }, } diff --git a/charts/redpanda/post_upgrade_job.go b/charts/redpanda/post_upgrade_job.go deleted file mode 100644 index 7de42a9eea..0000000000 --- a/charts/redpanda/post_upgrade_job.go +++ /dev/null @@ -1,160 +0,0 @@ -// Licensed to the Apache Software Foundation (ASF) under one or more -// contributor license agreements. See the NOTICE file distributed with -// this work for additional information regarding copyright ownership. -// The ASF licenses this file to You under the Apache License, Version 2.0 -// (the "License"); you may not use this file except in compliance with -// the License. You may obtain a copy of the License at -// -// http://www.apache.org/licenses/LICENSE-2.0 -// -// Unless required by applicable law or agreed to in writing, software -// distributed under the License is distributed on an "AS IS" BASIS, -// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -// See the License for the specific language governing permissions and -// limitations under the License. -// -// +gotohelm:filename=_post_upgrade_job.go.tpl -package redpanda - -import ( - "fmt" - - "github.com/redpanda-data/helm-charts/pkg/gotohelm/helmette" - batchv1 "k8s.io/api/batch/v1" - corev1 "k8s.io/api/core/v1" - metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" - "k8s.io/utils/ptr" -) - -func PostUpgrade(dot *helmette.Dot) *batchv1.Job { - values := helmette.Unwrap[Values](dot.Values) - - if !values.PostUpgradeJob.Enabled { - return nil - } - - labels := helmette.Default(map[string]string{}, values.PostUpgradeJob.Labels) - annotations := helmette.Default(map[string]string{}, values.PostUpgradeJob.Annotations) - - annotations = helmette.Merge(map[string]string{ - "helm.sh/hook": "post-upgrade", - "helm.sh/hook-delete-policy": "before-hook-creation", - "helm.sh/hook-weight": "-10", - }, annotations) - - return &batchv1.Job{ - TypeMeta: metav1.TypeMeta{ - APIVersion: "batch/v1", - Kind: "Job", - }, - ObjectMeta: metav1.ObjectMeta{ - Name: fmt.Sprintf("%s-post-upgrade", Name(dot)), - Namespace: dot.Release.Namespace, - Labels: helmette.Merge(FullLabels(dot), labels), - Annotations: annotations, - }, - Spec: batchv1.JobSpec{ - BackoffLimit: values.PostUpgradeJob.BackoffLimit, - Template: StrategicMergePatch(values.PostUpgradeJob.PodTemplate, corev1.PodTemplateSpec{ - ObjectMeta: metav1.ObjectMeta{ - Name: dot.Release.Name, - Labels: helmette.Merge(map[string]string{ - "app.kubernetes.io/name": Name(dot), - "app.kubernetes.io/instance": dot.Release.Name, - "app.kubernetes.io/component": fmt.Sprintf("%s-post-upgrade", helmette.Trunc(50, Name(dot))), - }, values.CommonLabels), - }, - Spec: corev1.PodSpec{ - NodeSelector: values.NodeSelector, - Affinity: helmette.MergeTo[*corev1.Affinity](values.PostUpgradeJob.Affinity, values.Affinity), - Tolerations: values.Tolerations, - RestartPolicy: corev1.RestartPolicyNever, - SecurityContext: PodSecurityContext(dot), - ServiceAccountName: ServiceAccountName(dot), - ImagePullSecrets: helmette.Default(nil, values.ImagePullSecrets), - Containers: []corev1.Container{ - { - Name: PostUpgradeContainerName, - Image: fmt.Sprintf("%s:%s", values.Image.Repository, Tag(dot)), - Command: []string{"/bin/bash", "-c"}, - Args: []string{PostUpgradeJobScript(dot)}, - Env: rpkEnvVars(dot, values.PostUpgradeJob.ExtraEnv), - EnvFrom: values.PostUpgradeJob.ExtraEnvFrom, - SecurityContext: ptr.To(helmette.MergeTo[corev1.SecurityContext]( - ptr.Deref(values.PostUpgradeJob.SecurityContext, corev1.SecurityContext{}), - ContainerSecurityContext(dot), - )), - Resources: values.PostUpgradeJob.Resources, - VolumeMounts: DefaultMounts(dot), - }, - }, - Volumes: DefaultVolumes(dot), - }, - }), - }, - } -} - -func PostUpgradeJobScript(dot *helmette.Dot) string { - values := helmette.Unwrap[Values](dot.Values) - - script := []string{`set -e`, ``} - for key, value := range values.Config.Cluster { - asInt64, isInt64 := helmette.AsIntegral[int64](value) - - if asBool, ok := value.(bool); ok && asBool { - script = append(script, fmt.Sprintf("rpk cluster config set %s %t", key, asBool)) - } else if asStr, ok := value.(string); ok && asStr != "" { - script = append(script, fmt.Sprintf("rpk cluster config set %s %s", key, asStr)) - } else if isInt64 && asInt64 > 0 { - script = append(script, fmt.Sprintf("rpk cluster config set %s %d", key, asInt64)) - } else if asSlice, ok := value.([]any); ok && len(asSlice) > 0 { - script = append(script, fmt.Sprintf(`rpk cluster config set %s "[ %s ]"`, key, helmette.Join(",", asSlice))) - } else if !helmette.Empty(value) { - script = append(script, fmt.Sprintf("rpk cluster config set %s %v", key, value)) - } - } - - // If default_topic_replications is not set and we have at least 3 Brokers, - // upgrade from redpanda's default of 1 to 3 so, when possible, topics are - // HA by default. - // See also: - // - https://github.com/redpanda-data/helm-charts/issues/583 - // - https://github.com/redpanda-data/helm-charts/issues/1501 - if _, ok := values.Config.Cluster["default_topic_replications"]; !ok && values.Statefulset.Replicas >= 3 { - script = append(script, "rpk cluster config set default_topic_replications 3") - } - - if _, ok := values.Config.Cluster["storage_min_free_bytes"]; !ok { - script = append(script, fmt.Sprintf("rpk cluster config set storage_min_free_bytes %d", values.Storage.StorageMinFreeBytes())) - } - - if RedpandaAtLeast_23_2_1(dot) { - service := values.Listeners.Admin - - caCert := "" - scheme := "http" - - if service.TLS.IsEnabled(&values.TLS) { - scheme = "https" - caCert = fmt.Sprintf("--cacert %q", service.TLS.ServerCAPath(&values.TLS)) - } - - url := fmt.Sprintf("%s://%s:%d/v1/debug/restart_service?service=schema-registry", scheme, InternalDomain(dot), int64(service.Port)) - - script = append( - script, - `if [ -d "/etc/secrets/users/" ]; then`, - ` IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print))`, - ` curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \`, - fmt.Sprintf(` %s \`, caCert), - ` -X PUT -u ${USER_NAME}:${PASSWORD} \`, - fmt.Sprintf(` %s || true`, url), - `fi`, - ) - } - - script = append(script, "") - - return helmette.Join("\n", script) -} diff --git a/charts/redpanda/secrets.go b/charts/redpanda/secrets.go index 105d5955c6..62910bf8f5 100644 --- a/charts/redpanda/secrets.go +++ b/charts/redpanda/secrets.go @@ -496,7 +496,6 @@ func SecretConfigurator(dot *helmette.Dot) *corev1.Secret { ``, `# Setup config files`, `cp /tmp/base-config/redpanda.yaml "${CONFIG}"`, - `cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml`, ) if !RedpandaAtLeast_22_3_0(dot) { configuratorSh = append(configuratorSh, diff --git a/charts/redpanda/statefulset.go b/charts/redpanda/statefulset.go index f1feb01d48..50a8ce997d 100644 --- a/charts/redpanda/statefulset.go +++ b/charts/redpanda/statefulset.go @@ -155,7 +155,7 @@ func StatefulSetVolumes(dot *helmette.Dot) []corev1.Volume { }, }, { - Name: fullname, + Name: "base-config", VolumeSource: corev1.VolumeSource{ ConfigMap: &corev1.ConfigMapVolumeSource{ LocalObjectReference: corev1.LocalObjectReference{Name: fullname}, @@ -267,7 +267,7 @@ func statefulSetVolumeTieredStorageDir(dot *helmette.Dot) *corev1.Volume { Name: "tiered-storage-dir", VolumeSource: corev1.VolumeSource{ EmptyDir: &corev1.EmptyDirVolumeSource{ - SizeLimit: values.Storage.CloudStorageCacheSize(), + SizeLimit: values.Storage.GetTieredStorageConfig().CloudStorageCacheSize(), }, }, } @@ -283,7 +283,7 @@ func StatefulSetVolumeMounts(dot *helmette.Dot) []corev1.VolumeMount { // TODO: Migrate them into this function. mounts = append(mounts, []corev1.VolumeMount{ {Name: "config", MountPath: "/etc/redpanda"}, - {Name: Fullname(dot), MountPath: "/tmp/base-config"}, + {Name: "base-config", MountPath: "/tmp/base-config"}, {Name: "lifecycle-scripts", MountPath: "/var/lifecycle"}, {Name: "datadir", MountPath: "/var/lib/redpanda/data"}, }...) @@ -315,6 +315,7 @@ func StatefulSetInitContainers(dot *helmette.Dot) []corev1.Container { containers = append(containers, *c) } containers = append(containers, *statefulSetInitContainerConfigurator(dot)) + containers = append(containers, bootstrapYamlTemplater(dot)) containers = append(containers, templateToContainers(dot, values.Statefulset.InitContainers.ExtraInitContainers)...) return containers } @@ -345,7 +346,7 @@ func statefulSetInitContainerTuning(dot *helmette.Dot) *corev1.Container { VolumeMounts: append(append(CommonMounts(dot), templateToVolumeMounts(dot, values.Statefulset.InitContainers.Tuning.ExtraVolumeMounts)...), corev1.VolumeMount{ - Name: Fullname(dot), + Name: "base-config", MountPath: "/etc/redpanda", }, ), @@ -530,7 +531,7 @@ func statefulSetInitContainerConfigurator(dot *helmette.Dot) *corev1.Container { MountPath: "/etc/redpanda", }, corev1.VolumeMount{ - Name: Fullname(dot), + Name: "base-config", MountPath: "/tmp/base-config", }, corev1.VolumeMount{ diff --git a/charts/redpanda/templates/_chart.go.tpl b/charts/redpanda/templates/_chart.go.tpl index c6f248a243..88bb1f8d22 100644 --- a/charts/redpanda/templates/_chart.go.tpl +++ b/charts/redpanda/templates/_chart.go.tpl @@ -4,7 +4,7 @@ {{- $dot := (index .a 0) -}} {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} -{{- $manifests := (list (get (fromJson (include "redpanda.NodePortService" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.PodDisruptionBudget" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.ServiceAccount" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.ServiceInternal" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.ServiceMonitor" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.SidecarControllersRole" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.SidecarControllersRoleBinding" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.StatefulSet" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.PostUpgrade" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.PostInstallUpgradeJob" (dict "a" (list $dot) ))) "r")) -}} +{{- $manifests := (list (get (fromJson (include "redpanda.NodePortService" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.PodDisruptionBudget" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.ServiceAccount" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.ServiceInternal" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.ServiceMonitor" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.SidecarControllersRole" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.SidecarControllersRoleBinding" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.StatefulSet" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.PostInstallUpgradeJob" (dict "a" (list $dot) ))) "r")) -}} {{- range $_, $obj := (get (fromJson (include "redpanda.ConfigMaps" (dict "a" (list $dot) ))) "r") -}} {{- $manifests = (concat (default (list ) $manifests) (list $obj)) -}} {{- end -}} diff --git a/charts/redpanda/templates/_configmap.go.tpl b/charts/redpanda/templates/_configmap.go.tpl index e511390321..db30becc7d 100644 --- a/charts/redpanda/templates/_configmap.go.tpl +++ b/charts/redpanda/templates/_configmap.go.tpl @@ -32,7 +32,17 @@ {{- $bootstrap = (merge (dict ) $bootstrap (get (fromJson (include "redpanda.TunableConfig.Translate" (dict "a" (list $values.config.tunable) ))) "r")) -}} {{- $bootstrap = (merge (dict ) $bootstrap (get (fromJson (include "redpanda.ClusterConfig.Translate" (dict "a" (list $values.config.cluster) ))) "r")) -}} {{- $bootstrap = (merge (dict ) $bootstrap (get (fromJson (include "redpanda.Auth.Translate" (dict "a" (list $values.auth (get (fromJson (include "redpanda.Auth.IsSASLEnabled" (dict "a" (list $values.auth) ))) "r")) ))) "r")) -}} -{{- $bootstrap = (merge (dict ) $bootstrap (get (fromJson (include "redpanda.Storage.Translate" (dict "a" (list $values.storage) ))) "r")) -}} +{{- $bootstrap = (merge (dict ) $bootstrap (get (fromJson (include "redpanda.TieredStorageConfig.Translate" (dict "a" (list (deepCopy (get (fromJson (include "redpanda.Storage.GetTieredStorageConfig" (dict "a" (list $values.storage) ))) "r")) $values.storage.tiered.credentialsSecretRef) ))) "r")) -}} +{{- $tmp_tuple_1 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $values.config.cluster "default_topic_replications" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok_1 := $tmp_tuple_1.T2 -}} +{{- if (and (not $ok_1) (ge ($values.statefulset.replicas | int) (3 | int))) -}} +{{- $_ := (set $bootstrap "default_topic_replications" (3 | int)) -}} +{{- end -}} +{{- $tmp_tuple_2 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $values.config.cluster "storage_min_free_bytes" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok_2 := $tmp_tuple_2.T2 -}} +{{- if (not $ok_2) -}} +{{- $_ := (set $bootstrap "storage_min_free_bytes" ((get (fromJson (include "redpanda.Storage.StorageMinFreeBytes" (dict "a" (list $values.storage) ))) "r") | int64)) -}} +{{- end -}} {{- $_is_returning = true -}} {{- (dict "r" (toYaml $bootstrap)) | toJson -}} {{- break -}} @@ -97,15 +107,15 @@ {{- break -}} {{- end -}} {{- $kafkaTLS := (get (fromJson (include "redpanda.rpkKafkaClientTLSConfiguration" (dict "a" (list $dot) ))) "r") -}} -{{- $tmp_tuple_1 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $kafkaTLS "ca_file" (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok_1 := $tmp_tuple_1.T2 -}} -{{- if $ok_1 -}} +{{- $tmp_tuple_3 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $kafkaTLS "ca_file" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok_3 := $tmp_tuple_3.T2 -}} +{{- if $ok_3 -}} {{- $_ := (set $kafkaTLS "ca_file" "ca.crt") -}} {{- end -}} {{- $adminTLS := (get (fromJson (include "redpanda.rpkAdminAPIClientTLSConfiguration" (dict "a" (list $dot) ))) "r") -}} -{{- $tmp_tuple_2 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $adminTLS "ca_file" (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok_2 := $tmp_tuple_2.T2 -}} -{{- if $ok_2 -}} +{{- $tmp_tuple_4 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $adminTLS "ca_file" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok_4 := $tmp_tuple_4.T2 -}} +{{- if $ok_4 -}} {{- $_ := (set $adminTLS "ca_file" "ca.crt") -}} {{- end -}} {{- $ka := (dict "brokers" $brokerList "tls" (coalesce nil) ) -}} @@ -241,14 +251,14 @@ {{- $values := $dot.Values.AsMap -}} {{- $brokerList := (get (fromJson (include "redpanda.BrokerList" (dict "a" (list $dot ($values.statefulset.replicas | int) ($values.listeners.kafka.port | int)) ))) "r") -}} {{- $adminTLS := (coalesce nil) -}} -{{- $tls_3 := (get (fromJson (include "redpanda.rpkAdminAPIClientTLSConfiguration" (dict "a" (list $dot) ))) "r") -}} -{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_3) ))) "r") | int) (0 | int)) -}} -{{- $adminTLS = $tls_3 -}} +{{- $tls_5 := (get (fromJson (include "redpanda.rpkAdminAPIClientTLSConfiguration" (dict "a" (list $dot) ))) "r") -}} +{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_5) ))) "r") | int) (0 | int)) -}} +{{- $adminTLS = $tls_5 -}} {{- end -}} {{- $brokerTLS := (coalesce nil) -}} -{{- $tls_4 := (get (fromJson (include "redpanda.rpkKafkaClientTLSConfiguration" (dict "a" (list $dot) ))) "r") -}} -{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_4) ))) "r") | int) (0 | int)) -}} -{{- $brokerTLS = $tls_4 -}} +{{- $tls_6 := (get (fromJson (include "redpanda.rpkKafkaClientTLSConfiguration" (dict "a" (list $dot) ))) "r") -}} +{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_6) ))) "r") | int) (0 | int)) -}} +{{- $brokerTLS = $tls_6 -}} {{- end -}} {{- $result := (dict "overprovisioned" (get (fromJson (include "redpanda.RedpandaResources.GetOverProvisionValue" (dict "a" (list $values.resources) ))) "r") "enable_memory_locking" (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $values.resources.memory.enable_memory_locking false) ))) "r") "additional_start_flags" (get (fromJson (include "redpanda.RedpandaAdditionalStartFlags" (dict "a" (list $dot ((get (fromJson (include "redpanda.RedpandaSMP" (dict "a" (list $dot) ))) "r") | int64)) ))) "r") "kafka_api" (dict "brokers" $brokerList "tls" $brokerTLS ) "admin_api" (dict "addresses" (get (fromJson (include "redpanda.Listeners.AdminList" (dict "a" (list $values.listeners ($values.statefulset.replicas | int) (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") (get (fromJson (include "redpanda.InternalDomain" (dict "a" (list $dot) ))) "r")) ))) "r") "tls" $adminTLS ) ) -}} {{- $result = (merge (dict ) $result (get (fromJson (include "redpanda.Tuning.Translate" (dict "a" (list $values.tuning) ))) "r")) -}} @@ -344,18 +354,18 @@ {{- $_ := (set $redpanda "kafka_api" (get (fromJson (include "redpanda.KafkaListeners.Listeners" (dict "a" (list $values.listeners.kafka $values.auth) ))) "r")) -}} {{- $_ := (set $redpanda "rpc_server" (get (fromJson (include "redpanda.rpcListeners" (dict "a" (list $dot) ))) "r")) -}} {{- $_ := (set $redpanda "admin_api_tls" (coalesce nil)) -}} -{{- $tls_5 := (get (fromJson (include "redpanda.AdminListeners.ListenersTLS" (dict "a" (list $values.listeners.admin $values.tls) ))) "r") -}} -{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_5) ))) "r") | int) (0 | int)) -}} -{{- $_ := (set $redpanda "admin_api_tls" $tls_5) -}} +{{- $tls_7 := (get (fromJson (include "redpanda.AdminListeners.ListenersTLS" (dict "a" (list $values.listeners.admin $values.tls) ))) "r") -}} +{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_7) ))) "r") | int) (0 | int)) -}} +{{- $_ := (set $redpanda "admin_api_tls" $tls_7) -}} {{- end -}} {{- $_ := (set $redpanda "kafka_api_tls" (coalesce nil)) -}} -{{- $tls_6 := (get (fromJson (include "redpanda.KafkaListeners.ListenersTLS" (dict "a" (list $values.listeners.kafka $values.tls) ))) "r") -}} -{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_6) ))) "r") | int) (0 | int)) -}} -{{- $_ := (set $redpanda "kafka_api_tls" $tls_6) -}} +{{- $tls_8 := (get (fromJson (include "redpanda.KafkaListeners.ListenersTLS" (dict "a" (list $values.listeners.kafka $values.tls) ))) "r") -}} +{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_8) ))) "r") | int) (0 | int)) -}} +{{- $_ := (set $redpanda "kafka_api_tls" $tls_8) -}} {{- end -}} -{{- $tls_7 := (get (fromJson (include "redpanda.rpcListenersTLS" (dict "a" (list $dot) ))) "r") -}} -{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_7) ))) "r") | int) (0 | int)) -}} -{{- $_ := (set $redpanda "rpc_server_tls" $tls_7) -}} +{{- $tls_9 := (get (fromJson (include "redpanda.rpcListenersTLS" (dict "a" (list $dot) ))) "r") -}} +{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_9) ))) "r") | int) (0 | int)) -}} +{{- $_ := (set $redpanda "rpc_server_tls" $tls_9) -}} {{- end -}} {{- end -}} {{- end -}} @@ -368,9 +378,9 @@ {{- $pandaProxy := (dict ) -}} {{- $_ := (set $pandaProxy "pandaproxy_api" (get (fromJson (include "redpanda.HTTPListeners.Listeners" (dict "a" (list $values.listeners.http (get (fromJson (include "redpanda.Auth.IsSASLEnabled" (dict "a" (list $values.auth) ))) "r")) ))) "r")) -}} {{- $_ := (set $pandaProxy "pandaproxy_api_tls" (coalesce nil)) -}} -{{- $tls_8 := (get (fromJson (include "redpanda.HTTPListeners.ListenersTLS" (dict "a" (list $values.listeners.http $values.tls) ))) "r") -}} -{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_8) ))) "r") | int) (0 | int)) -}} -{{- $_ := (set $pandaProxy "pandaproxy_api_tls" $tls_8) -}} +{{- $tls_10 := (get (fromJson (include "redpanda.HTTPListeners.ListenersTLS" (dict "a" (list $values.listeners.http $values.tls) ))) "r") -}} +{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_10) ))) "r") | int) (0 | int)) -}} +{{- $_ := (set $pandaProxy "pandaproxy_api_tls" $tls_10) -}} {{- end -}} {{- $_is_returning = true -}} {{- (dict "r" $pandaProxy) | toJson -}} @@ -386,9 +396,9 @@ {{- $schemaReg := (dict ) -}} {{- $_ := (set $schemaReg "schema_registry_api" (get (fromJson (include "redpanda.SchemaRegistryListeners.Listeners" (dict "a" (list $values.listeners.schemaRegistry (get (fromJson (include "redpanda.Auth.IsSASLEnabled" (dict "a" (list $values.auth) ))) "r")) ))) "r")) -}} {{- $_ := (set $schemaReg "schema_registry_api_tls" (coalesce nil)) -}} -{{- $tls_9 := (get (fromJson (include "redpanda.SchemaRegistryListeners.ListenersTLS" (dict "a" (list $values.listeners.schemaRegistry $values.tls) ))) "r") -}} -{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_9) ))) "r") | int) (0 | int)) -}} -{{- $_ := (set $schemaReg "schema_registry_api_tls" $tls_9) -}} +{{- $tls_11 := (get (fromJson (include "redpanda.SchemaRegistryListeners.ListenersTLS" (dict "a" (list $values.listeners.schemaRegistry $values.tls) ))) "r") -}} +{{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list $tls_11) ))) "r") | int) (0 | int)) -}} +{{- $_ := (set $schemaReg "schema_registry_api_tls" $tls_11) -}} {{- end -}} {{- $_is_returning = true -}} {{- (dict "r" $schemaReg) | toJson -}} diff --git a/charts/redpanda/templates/_helpers.go.tpl b/charts/redpanda/templates/_helpers.go.tpl index 3bfbcae352..11d1f05a58 100644 --- a/charts/redpanda/templates/_helpers.go.tpl +++ b/charts/redpanda/templates/_helpers.go.tpl @@ -212,7 +212,7 @@ {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} {{- $_is_returning = true -}} -{{- (dict "r" (concat (default (list ) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "config" "mountPath" "/etc/redpanda" )))) (default (list ) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r")))) | toJson -}} +{{- (dict "r" (concat (default (list ) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "base-config" "mountPath" "/etc/redpanda" )))) (default (list ) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r")))) | toJson -}} {{- break -}} {{- end -}} {{- end -}} @@ -256,7 +256,7 @@ {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} {{- $_is_returning = true -}} -{{- (dict "r" (concat (default (list ) (list (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "configMap" (mustMergeOverwrite (dict ) (mustMergeOverwrite (dict ) (dict "name" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") )) (dict )) )) (dict "name" "config" )))) (default (list ) (get (fromJson (include "redpanda.CommonVolumes" (dict "a" (list $dot) ))) "r")))) | toJson -}} +{{- (dict "r" (concat (default (list ) (list (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "configMap" (mustMergeOverwrite (dict ) (mustMergeOverwrite (dict ) (dict "name" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") )) (dict )) )) (dict "name" "base-config" )))) (default (list ) (get (fromJson (include "redpanda.CommonVolumes" (dict "a" (list $dot) ))) "r")))) | toJson -}} {{- break -}} {{- end -}} {{- end -}} diff --git a/charts/redpanda/templates/_post-install-upgrade-job.go.tpl b/charts/redpanda/templates/_post-install-upgrade-job.go.tpl index 348724b7db..a8e33659c2 100644 --- a/charts/redpanda/templates/_post-install-upgrade-job.go.tpl +++ b/charts/redpanda/templates/_post-install-upgrade-job.go.tpl @@ -1,5 +1,18 @@ {{- /* Generated from "post_install_upgrade_job.go" */ -}} +{{- define "redpanda.bootstrapYamlTemplater" -}} +{{- $dot := (index .a 0) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $values := $dot.Values.AsMap -}} +{{- $env := (get (fromJson (include "redpanda.TieredStorageCredentials.AsEnvVars" (dict "a" (list $values.storage.tiered.credentialsSecretRef (get (fromJson (include "redpanda.Storage.GetTieredStorageConfig" (dict "a" (list $values.storage) ))) "r")) ))) "r") -}} +{{- $image := (printf `%s:%s` $values.statefulset.sideCars.controllers.image.repository $values.statefulset.sideCars.controllers.image.tag) -}} +{{- $_is_returning = true -}} +{{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict ) ) (dict "name" "bootstrap-yaml-envsubst" "image" $image "command" (list "/redpanda-operator" "envsubst" "/tmp/base-config/bootstrap.yaml" "--output" "/tmp/config/.bootstrap.yaml") "env" $env "resources" (mustMergeOverwrite (dict ) (dict "limits" (dict "cpu" (get (fromJson (include "_shims.resource_MustParse" (dict "a" (list "100m") ))) "r") "memory" (get (fromJson (include "_shims.resource_MustParse" (dict "a" (list "25Mi") ))) "r") ) "requests" (dict "cpu" (get (fromJson (include "_shims.resource_MustParse" (dict "a" (list "100m") ))) "r") "memory" (get (fromJson (include "_shims.resource_MustParse" (dict "a" (list "25Mi") ))) "r") ) )) "securityContext" (mustMergeOverwrite (dict ) (dict "allowPrivilegeEscalation" false "readOnlyRootFilesystem" true "runAsNonRoot" true )) "volumeMounts" (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "config" "mountPath" "/tmp/config/" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "base-config" "mountPath" "/tmp/base-config/" ))) ))) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + {{- define "redpanda.PostInstallUpgradeJob" -}} {{- $dot := (index .a 0) -}} {{- range $_ := (list 1) -}} @@ -10,14 +23,8 @@ {{- (dict "r" (coalesce nil)) | toJson -}} {{- break -}} {{- end -}} -{{- $job := (mustMergeOverwrite (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "template" (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "containers" (coalesce nil) ) ) ) "status" (dict ) ) (mustMergeOverwrite (dict ) (dict "apiVersion" "batch/v1" "kind" "Job" )) (dict "metadata" (mustMergeOverwrite (dict "creationTimestamp" (coalesce nil) ) (dict "name" (printf "%s-configuration" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r")) "namespace" $dot.Release.Namespace "labels" (merge (dict ) (get (fromJson (include "redpanda.FullLabels" (dict "a" (list $dot) ))) "r") (default (dict ) $values.post_install_job.labels)) "annotations" (merge (dict ) (dict "helm.sh/hook" "post-install,post-upgrade" "helm.sh/hook-delete-policy" "before-hook-creation" "helm.sh/hook-weight" "-5" ) (default (dict ) $values.post_install_job.annotations)) )) "spec" (mustMergeOverwrite (dict "template" (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "containers" (coalesce nil) ) ) ) (dict "template" (get (fromJson (include "redpanda.StrategicMergePatch" (dict "a" (list $values.post_install_job.podTemplate (mustMergeOverwrite (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "containers" (coalesce nil) ) ) (dict "metadata" (mustMergeOverwrite (dict "creationTimestamp" (coalesce nil) ) (dict "generateName" (printf "%s-post-" $dot.Release.Name) "labels" (merge (dict ) (dict "app.kubernetes.io/name" (get (fromJson (include "redpanda.Name" (dict "a" (list $dot) ))) "r") "app.kubernetes.io/instance" $dot.Release.Name "app.kubernetes.io/component" (printf "%.50s-post-install" (get (fromJson (include "redpanda.Name" (dict "a" (list $dot) ))) "r")) ) (default (dict ) $values.commonLabels)) )) "spec" (mustMergeOverwrite (dict "containers" (coalesce nil) ) (dict "nodeSelector" $values.nodeSelector "affinity" (get (fromJson (include "redpanda.postInstallJobAffinity" (dict "a" (list $dot) ))) "r") "tolerations" (get (fromJson (include "redpanda.tolerations" (dict "a" (list $dot) ))) "r") "restartPolicy" "Never" "securityContext" (get (fromJson (include "redpanda.PodSecurityContext" (dict "a" (list $dot) ))) "r") "imagePullSecrets" (default (coalesce nil) $values.imagePullSecrets) "containers" (list (mustMergeOverwrite (dict "name" "" "resources" (dict ) ) (dict "name" "post-install" "image" (printf "%s:%s" $values.image.repository (get (fromJson (include "redpanda.Tag" (dict "a" (list $dot) ))) "r")) "env" (get (fromJson (include "redpanda.rpkEnvVars" (dict "a" (list $dot (get (fromJson (include "redpanda.PostInstallUpgradeEnvironmentVariables" (dict "a" (list $dot) ))) "r")) ))) "r") "command" (list "bash" "-c") "args" (list ) "resources" (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $values.post_install_job.resources (mustMergeOverwrite (dict ) (dict ))) ))) "r") "securityContext" (merge (dict ) (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $values.post_install_job.securityContext (mustMergeOverwrite (dict ) (dict ))) ))) "r") (get (fromJson (include "redpanda.ContainerSecurityContext" (dict "a" (list $dot) ))) "r")) "volumeMounts" (get (fromJson (include "redpanda.DefaultMounts" (dict "a" (list $dot) ))) "r") ))) "volumes" (get (fromJson (include "redpanda.DefaultVolumes" (dict "a" (list $dot) ))) "r") "serviceAccountName" (get (fromJson (include "redpanda.ServiceAccountName" (dict "a" (list $dot) ))) "r") )) ))) ))) "r") )) )) -}} -{{- $script := (coalesce nil) -}} -{{- $script = (concat (default (list ) $script) (list `set -e`)) -}} -{{- if (get (fromJson (include "redpanda.RedpandaAtLeast_22_2_0" (dict "a" (list $dot) ))) "r") -}} -{{- $script = (concat (default (list ) $script) (list `if [[ -n "$REDPANDA_LICENSE" ]] then` ` rpk cluster license set "$REDPANDA_LICENSE"` `fi`)) -}} -{{- end -}} -{{- $script = (concat (default (list ) $script) (list `` `` `` `` `rpk cluster config export -f /tmp/cfg.yml` `` `` `for KEY in "${!RPK_@}"; do` ` if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then` ` config="${KEY#*RPK_}"` ` rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}"` ` fi` `done` `` `` `rpk cluster config import -f /tmp/cfg.yml` ``)) -}} -{{- $_ := (set (index $job.spec.template.spec.containers (0 | int)) "args" (concat (default (list ) (index $job.spec.template.spec.containers (0 | int)).args) (list (join "\n" $script)))) -}} +{{- $image := (printf `%s:%s` $values.statefulset.sideCars.controllers.image.repository $values.statefulset.sideCars.controllers.image.tag) -}} +{{- $job := (mustMergeOverwrite (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "template" (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "containers" (coalesce nil) ) ) ) "status" (dict ) ) (mustMergeOverwrite (dict ) (dict "apiVersion" "batch/v1" "kind" "Job" )) (dict "metadata" (mustMergeOverwrite (dict "creationTimestamp" (coalesce nil) ) (dict "name" (printf "%s-configuration" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r")) "namespace" $dot.Release.Namespace "labels" (merge (dict ) (get (fromJson (include "redpanda.FullLabels" (dict "a" (list $dot) ))) "r") (default (dict ) $values.post_install_job.labels)) "annotations" (merge (dict ) (dict "helm.sh/hook" "post-install,post-upgrade" "helm.sh/hook-delete-policy" "before-hook-creation" "helm.sh/hook-weight" "-5" ) (default (dict ) $values.post_install_job.annotations)) )) "spec" (mustMergeOverwrite (dict "template" (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "containers" (coalesce nil) ) ) ) (dict "template" (get (fromJson (include "redpanda.StrategicMergePatch" (dict "a" (list $values.post_install_job.podTemplate (mustMergeOverwrite (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "containers" (coalesce nil) ) ) (dict "metadata" (mustMergeOverwrite (dict "creationTimestamp" (coalesce nil) ) (dict "generateName" (printf "%s-post-" $dot.Release.Name) "labels" (merge (dict ) (dict "app.kubernetes.io/name" (get (fromJson (include "redpanda.Name" (dict "a" (list $dot) ))) "r") "app.kubernetes.io/instance" $dot.Release.Name "app.kubernetes.io/component" (printf "%.50s-post-install" (get (fromJson (include "redpanda.Name" (dict "a" (list $dot) ))) "r")) ) (default (dict ) $values.commonLabels)) )) "spec" (mustMergeOverwrite (dict "containers" (coalesce nil) ) (dict "nodeSelector" $values.nodeSelector "affinity" (get (fromJson (include "redpanda.postInstallJobAffinity" (dict "a" (list $dot) ))) "r") "tolerations" (get (fromJson (include "redpanda.tolerations" (dict "a" (list $dot) ))) "r") "restartPolicy" "Never" "securityContext" (get (fromJson (include "redpanda.PodSecurityContext" (dict "a" (list $dot) ))) "r") "imagePullSecrets" (default (coalesce nil) $values.imagePullSecrets) "initContainers" (list (get (fromJson (include "redpanda.bootstrapYamlTemplater" (dict "a" (list $dot) ))) "r")) "automountServiceAccountToken" false "containers" (list (mustMergeOverwrite (dict "name" "" "resources" (dict ) ) (dict "name" "post-install" "image" $image "env" (get (fromJson (include "redpanda.PostInstallUpgradeEnvironmentVariables" (dict "a" (list $dot) ))) "r") "command" (list "/redpanda-operator" "sync-cluster-config" "--redpanda-yaml" "/tmp/base-config/redpanda.yaml" "--bootstrap-yaml" "/tmp/config/.bootstrap.yaml") "resources" (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $values.post_install_job.resources (mustMergeOverwrite (dict ) (dict ))) ))) "r") "securityContext" (merge (dict ) (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $values.post_install_job.securityContext (mustMergeOverwrite (dict ) (dict ))) ))) "r") (get (fromJson (include "redpanda.ContainerSecurityContext" (dict "a" (list $dot) ))) "r")) "volumeMounts" (concat (default (list ) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r")) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "config" "mountPath" "/tmp/config" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "base-config" "mountPath" "/tmp/base-config" )))) ))) "volumes" (concat (default (list ) (get (fromJson (include "redpanda.CommonVolumes" (dict "a" (list $dot) ))) "r")) (list (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "configMap" (mustMergeOverwrite (dict ) (mustMergeOverwrite (dict ) (dict "name" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") )) (dict )) )) (dict "name" "base-config" )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "emptyDir" (mustMergeOverwrite (dict ) (dict )) )) (dict "name" "config" )))) "serviceAccountName" (get (fromJson (include "redpanda.ServiceAccountName" (dict "a" (list $dot) ))) "r") )) ))) ))) "r") )) )) -}} {{- $_is_returning = true -}} {{- (dict "r" $job) | toJson -}} {{- break -}} @@ -62,7 +69,6 @@ {{- $dot := (index .a 0) -}} {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} -{{- $values := $dot.Values.AsMap -}} {{- $envars := (list ) -}} {{- $license_1 := (get (fromJson (include "redpanda.GetLicenseLiteral" (dict "a" (list $dot) ))) "r") -}} {{- $secretReference_2 := (get (fromJson (include "redpanda.GetLicenseSecretReference" (dict "a" (list $dot) ))) "r") -}} @@ -72,124 +78,8 @@ {{- $envars = (concat (default (list ) $envars) (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "REDPANDA_LICENSE" "valueFrom" (mustMergeOverwrite (dict ) (dict "secretKeyRef" $secretReference_2 )) )))) -}} {{- end -}} {{- end -}} -{{- if (not (get (fromJson (include "redpanda.Storage.IsTieredStorageEnabled" (dict "a" (list $values.storage) ))) "r")) -}} -{{- $_is_returning = true -}} -{{- (dict "r" $envars) | toJson -}} -{{- break -}} -{{- end -}} -{{- $tieredStorageConfig := (get (fromJson (include "redpanda.Storage.GetTieredStorageConfig" (dict "a" (list $values.storage) ))) "r") -}} -{{- $tmp_tuple_1 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $tieredStorageConfig "cloud_storage_azure_container" (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $azureContainerExists := $tmp_tuple_1.T2 -}} -{{- $ac := $tmp_tuple_1.T1 -}} -{{- $tmp_tuple_2 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $tieredStorageConfig "cloud_storage_azure_storage_account" (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $azureStorageAccountExists := $tmp_tuple_2.T2 -}} -{{- $asa := $tmp_tuple_2.T1 -}} -{{- if (and (and (and $azureContainerExists (ne $ac (coalesce nil))) $azureStorageAccountExists) (ne $asa (coalesce nil))) -}} -{{- $envars = (concat (default (list ) $envars) (default (list ) (get (fromJson (include "redpanda.addAzureSharedKey" (dict "a" (list $tieredStorageConfig $values) ))) "r"))) -}} -{{- else -}} -{{- $envars = (concat (default (list ) $envars) (default (list ) (get (fromJson (include "redpanda.addCloudStorageSecretKey" (dict "a" (list $tieredStorageConfig $values) ))) "r"))) -}} -{{- end -}} -{{- $envars = (concat (default (list ) $envars) (default (list ) (get (fromJson (include "redpanda.addCloudStorageAccessKey" (dict "a" (list $tieredStorageConfig $values) ))) "r"))) -}} -{{- range $k, $v := $tieredStorageConfig -}} -{{- if (or (or (eq $k "cloud_storage_access_key") (eq $k "cloud_storage_secret_key")) (eq $k "cloud_storage_azure_shared_key")) -}} -{{- continue -}} -{{- end -}} -{{- if (or (eq $v (coalesce nil)) (empty $v)) -}} -{{- continue -}} -{{- end -}} -{{- if (eq $k "cloud_storage_cache_size") -}} -{{- $envars = (concat (default (list ) $envars) (list (mustMergeOverwrite (dict "name" "" ) (dict "name" (printf "RPK_%s" (upper $k)) "value" (toJson ((get (fromJson (include "_shims.resource_Value" (dict "a" (list $v) ))) "r") | int64)) )))) -}} -{{- continue -}} -{{- end -}} -{{- $tmp_tuple_3 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "string" $v "") ))) "r")) ))) "r") -}} -{{- $ok_4 := $tmp_tuple_3.T2 -}} -{{- $str_3 := $tmp_tuple_3.T1 -}} -{{- if $ok_4 -}} -{{- $envars = (concat (default (list ) $envars) (list (mustMergeOverwrite (dict "name" "" ) (dict "name" (printf "RPK_%s" (upper $k)) "value" $str_3 )))) -}} -{{- else -}} -{{- $envars = (concat (default (list ) $envars) (list (mustMergeOverwrite (dict "name" "" ) (dict "name" (printf "RPK_%s" (upper $k)) "value" (mustToJson $v) )))) -}} -{{- end -}} -{{- end -}} -{{- if $_is_returning -}} -{{- break -}} -{{- end -}} -{{- $_is_returning = true -}} -{{- (dict "r" $envars) | toJson -}} -{{- break -}} -{{- end -}} -{{- end -}} - -{{- define "redpanda.addCloudStorageAccessKey" -}} -{{- $tieredStorageConfig := (index .a 0) -}} -{{- $values := (index .a 1) -}} -{{- range $_ := (list 1) -}} -{{- $_is_returning := false -}} -{{- $tmp_tuple_4 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $tieredStorageConfig "cloud_storage_access_key" (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok_6 := $tmp_tuple_4.T2 -}} -{{- $v_5 := $tmp_tuple_4.T1 -}} -{{- $ak_7 := $values.storage.tiered.credentialsSecretRef.accessKey -}} -{{- if (and $ok_6 (ne $v_5 "")) -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "RPK_CLOUD_STORAGE_ACCESS_KEY" "value" (get (fromJson (include "_shims.typeassertion" (dict "a" (list "string" $v_5) ))) "r") )))) | toJson -}} -{{- break -}} -{{- else -}}{{- if (get (fromJson (include "redpanda.SecretRef.IsValid" (dict "a" (list $ak_7) ))) "r") -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "RPK_CLOUD_STORAGE_ACCESS_KEY" "valueFrom" (mustMergeOverwrite (dict ) (dict "secretKeyRef" (mustMergeOverwrite (dict "key" "" ) (mustMergeOverwrite (dict ) (dict "name" $ak_7.name )) (dict "key" $ak_7.key )) )) )))) | toJson -}} -{{- break -}} -{{- end -}} -{{- end -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list )) | toJson -}} -{{- break -}} -{{- end -}} -{{- end -}} - -{{- define "redpanda.addCloudStorageSecretKey" -}} -{{- $tieredStorageConfig := (index .a 0) -}} -{{- $values := (index .a 1) -}} -{{- range $_ := (list 1) -}} -{{- $_is_returning := false -}} -{{- $tmp_tuple_5 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $tieredStorageConfig "cloud_storage_secret_key" (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok_9 := $tmp_tuple_5.T2 -}} -{{- $v_8 := $tmp_tuple_5.T1 -}} -{{- $sk_10 := $values.storage.tiered.credentialsSecretRef.secretKey -}} -{{- if (and $ok_9 (ne $v_8 "")) -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "RPK_CLOUD_STORAGE_SECRET_KEY" "value" (get (fromJson (include "_shims.typeassertion" (dict "a" (list "string" $v_8) ))) "r") )))) | toJson -}} -{{- break -}} -{{- else -}}{{- if (get (fromJson (include "redpanda.SecretRef.IsValid" (dict "a" (list $sk_10) ))) "r") -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "RPK_CLOUD_STORAGE_SECRET_KEY" "valueFrom" (mustMergeOverwrite (dict ) (dict "secretKeyRef" (mustMergeOverwrite (dict "key" "" ) (mustMergeOverwrite (dict ) (dict "name" $sk_10.name )) (dict "key" $sk_10.key )) )) )))) | toJson -}} -{{- break -}} -{{- end -}} -{{- end -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list )) | toJson -}} -{{- break -}} -{{- end -}} -{{- end -}} - -{{- define "redpanda.addAzureSharedKey" -}} -{{- $tieredStorageConfig := (index .a 0) -}} -{{- $values := (index .a 1) -}} -{{- range $_ := (list 1) -}} -{{- $_is_returning := false -}} -{{- $tmp_tuple_6 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $tieredStorageConfig "cloud_storage_azure_shared_key" (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok_12 := $tmp_tuple_6.T2 -}} -{{- $v_11 := $tmp_tuple_6.T1 -}} -{{- $sk_13 := $values.storage.tiered.credentialsSecretRef.secretKey -}} -{{- if (and $ok_12 (ne $v_11 "")) -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "RPK_CLOUD_STORAGE_AZURE_SHARED_KEY" "value" (get (fromJson (include "_shims.typeassertion" (dict "a" (list "string" $v_11) ))) "r") )))) | toJson -}} -{{- break -}} -{{- else -}}{{- if (get (fromJson (include "redpanda.SecretRef.IsValid" (dict "a" (list $sk_13) ))) "r") -}} -{{- $_is_returning = true -}} -{{- (dict "r" (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "RPK_CLOUD_STORAGE_AZURE_SHARED_KEY" "valueFrom" (mustMergeOverwrite (dict ) (dict "secretKeyRef" (mustMergeOverwrite (dict "key" "" ) (mustMergeOverwrite (dict ) (dict "name" $sk_13.name )) (dict "key" $sk_13.key )) )) )))) | toJson -}} -{{- break -}} -{{- end -}} -{{- end -}} {{- $_is_returning = true -}} -{{- (dict "r" (list )) | toJson -}} +{{- (dict "r" (get (fromJson (include "redpanda.bootstrapEnvVars" (dict "a" (list $dot $envars) ))) "r")) | toJson -}} {{- break -}} {{- end -}} {{- end -}} diff --git a/charts/redpanda/templates/_secrets.go.tpl b/charts/redpanda/templates/_secrets.go.tpl index b98f44cc2d..903c238bb0 100644 --- a/charts/redpanda/templates/_secrets.go.tpl +++ b/charts/redpanda/templates/_secrets.go.tpl @@ -211,7 +211,7 @@ echo "passed"`) -}} {{- $values := $dot.Values.AsMap -}} {{- $secret := (mustMergeOverwrite (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) ) (mustMergeOverwrite (dict ) (dict "apiVersion" "v1" "kind" "Secret" )) (dict "metadata" (mustMergeOverwrite (dict "creationTimestamp" (coalesce nil) ) (dict "name" (printf "%.51s-configurator" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r")) "namespace" $dot.Release.Namespace "labels" (get (fromJson (include "redpanda.FullLabels" (dict "a" (list $dot) ))) "r") )) "type" "Opaque" "stringData" (dict ) )) -}} {{- $configuratorSh := (list ) -}} -{{- $configuratorSh = (concat (default (list ) $configuratorSh) (list `set -xe` `SERVICE_NAME=$1` `KUBERNETES_NODE_NAME=$2` `POD_ORDINAL=${SERVICE_NAME##*-}` "BROKER_INDEX=`expr $POD_ORDINAL + 1`" `` `CONFIG=/etc/redpanda/redpanda.yaml` `` `# Setup config files` `cp /tmp/base-config/redpanda.yaml "${CONFIG}"` `cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml`)) -}} +{{- $configuratorSh = (concat (default (list ) $configuratorSh) (list `set -xe` `SERVICE_NAME=$1` `KUBERNETES_NODE_NAME=$2` `POD_ORDINAL=${SERVICE_NAME##*-}` "BROKER_INDEX=`expr $POD_ORDINAL + 1`" `` `CONFIG=/etc/redpanda/redpanda.yaml` `` `# Setup config files` `cp /tmp/base-config/redpanda.yaml "${CONFIG}"`)) -}} {{- if (not (get (fromJson (include "redpanda.RedpandaAtLeast_22_3_0" (dict "a" (list $dot) ))) "r")) -}} {{- $configuratorSh = (concat (default (list ) $configuratorSh) (list `` `# Configure bootstrap` `## Not used for Redpanda v22.3.0+` `rpk --config "${CONFIG}" redpanda config set redpanda.node_id "${POD_ORDINAL}"` `if [ "${POD_ORDINAL}" = "0" ]; then` ` rpk --config "${CONFIG}" redpanda config set redpanda.seed_servers '[]' --format yaml` `fi`)) -}} {{- end -}} diff --git a/charts/redpanda/templates/_statefulset.go.tpl b/charts/redpanda/templates/_statefulset.go.tpl index a084cb9d19..5fe974d653 100644 --- a/charts/redpanda/templates/_statefulset.go.tpl +++ b/charts/redpanda/templates/_statefulset.go.tpl @@ -87,7 +87,7 @@ {{- $fullname := (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") -}} {{- $volumes := (get (fromJson (include "redpanda.CommonVolumes" (dict "a" (list $dot) ))) "r") -}} {{- $values := $dot.Values.AsMap -}} -{{- $volumes = (concat (default (list ) $volumes) (default (list ) (list (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "secret" (mustMergeOverwrite (dict ) (dict "secretName" (printf "%.50s-sts-lifecycle" $fullname) "defaultMode" (0o775 | int) )) )) (dict "name" "lifecycle-scripts" )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "configMap" (mustMergeOverwrite (dict ) (mustMergeOverwrite (dict ) (dict "name" $fullname )) (dict )) )) (dict "name" $fullname )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "emptyDir" (mustMergeOverwrite (dict ) (dict )) )) (dict "name" "config" )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "secret" (mustMergeOverwrite (dict ) (dict "secretName" (printf "%.51s-configurator" $fullname) "defaultMode" (0o775 | int) )) )) (dict "name" (printf "%.51s-configurator" $fullname) )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "secret" (mustMergeOverwrite (dict ) (dict "secretName" (printf "%s-config-watcher" $fullname) "defaultMode" (0o775 | int) )) )) (dict "name" (printf "%s-config-watcher" $fullname) ))))) -}} +{{- $volumes = (concat (default (list ) $volumes) (default (list ) (list (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "secret" (mustMergeOverwrite (dict ) (dict "secretName" (printf "%.50s-sts-lifecycle" $fullname) "defaultMode" (0o775 | int) )) )) (dict "name" "lifecycle-scripts" )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "configMap" (mustMergeOverwrite (dict ) (mustMergeOverwrite (dict ) (dict "name" $fullname )) (dict )) )) (dict "name" "base-config" )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "emptyDir" (mustMergeOverwrite (dict ) (dict )) )) (dict "name" "config" )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "secret" (mustMergeOverwrite (dict ) (dict "secretName" (printf "%.51s-configurator" $fullname) "defaultMode" (0o775 | int) )) )) (dict "name" (printf "%.51s-configurator" $fullname) )) (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "secret" (mustMergeOverwrite (dict ) (dict "secretName" (printf "%s-config-watcher" $fullname) "defaultMode" (0o775 | int) )) )) (dict "name" (printf "%s-config-watcher" $fullname) ))))) -}} {{- if $values.statefulset.initContainers.fsValidator.enabled -}} {{- $volumes = (concat (default (list ) $volumes) (list (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "secret" (mustMergeOverwrite (dict ) (dict "secretName" (printf "%.49s-fs-validator" $fullname) "defaultMode" (0o775 | int) )) )) (dict "name" (printf "%.49s-fs-validator" $fullname) )))) -}} {{- end -}} @@ -147,7 +147,7 @@ {{- break -}} {{- end -}} {{- $_is_returning = true -}} -{{- (dict "r" (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "emptyDir" (mustMergeOverwrite (dict ) (dict "sizeLimit" (get (fromJson (include "redpanda.Storage.CloudStorageCacheSize" (dict "a" (list $values.storage) ))) "r") )) )) (dict "name" "tiered-storage-dir" ))) | toJson -}} +{{- (dict "r" (mustMergeOverwrite (dict "name" "" ) (mustMergeOverwrite (dict ) (dict "emptyDir" (mustMergeOverwrite (dict ) (dict "sizeLimit" (get (fromJson (include "redpanda.TieredStorageConfig.CloudStorageCacheSize" (dict "a" (list (deepCopy (get (fromJson (include "redpanda.Storage.GetTieredStorageConfig" (dict "a" (list $values.storage) ))) "r"))) ))) "r") )) )) (dict "name" "tiered-storage-dir" ))) | toJson -}} {{- break -}} {{- end -}} {{- end -}} @@ -158,7 +158,7 @@ {{- $_is_returning := false -}} {{- $mounts := (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r") -}} {{- $values := $dot.Values.AsMap -}} -{{- $mounts = (concat (default (list ) $mounts) (default (list ) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "config" "mountPath" "/etc/redpanda" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") "mountPath" "/tmp/base-config" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "lifecycle-scripts" "mountPath" "/var/lifecycle" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "datadir" "mountPath" "/var/lib/redpanda/data" ))))) -}} +{{- $mounts = (concat (default (list ) $mounts) (default (list ) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "config" "mountPath" "/etc/redpanda" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "base-config" "mountPath" "/tmp/base-config" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "lifecycle-scripts" "mountPath" "/var/lifecycle" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "datadir" "mountPath" "/var/lib/redpanda/data" ))))) -}} {{- if (gt ((get (fromJson (include "_shims.len" (dict "a" (list (get (fromJson (include "redpanda.Listeners.TrustStores" (dict "a" (list $values.listeners $values.tls) ))) "r")) ))) "r") | int) (0 | int)) -}} {{- $mounts = (concat (default (list ) $mounts) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "truststores" "mountPath" "/etc/truststores" "readOnly" true )))) -}} {{- end -}} @@ -191,6 +191,7 @@ {{- $containers = (concat (default (list ) $containers) (list $c_10)) -}} {{- end -}} {{- $containers = (concat (default (list ) $containers) (list (get (fromJson (include "redpanda.statefulSetInitContainerConfigurator" (dict "a" (list $dot) ))) "r"))) -}} +{{- $containers = (concat (default (list ) $containers) (list (get (fromJson (include "redpanda.bootstrapYamlTemplater" (dict "a" (list $dot) ))) "r"))) -}} {{- $containers = (concat (default (list ) $containers) (default (list ) (get (fromJson (include "redpanda.templateToContainers" (dict "a" (list $dot $values.statefulset.initContainers.extraInitContainers) ))) "r"))) -}} {{- $_is_returning = true -}} {{- (dict "r" $containers) | toJson -}} @@ -209,7 +210,7 @@ {{- break -}} {{- end -}} {{- $_is_returning = true -}} -{{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict ) ) (dict "name" "tuning" "image" (printf "%s:%s" $values.image.repository (get (fromJson (include "redpanda.Tag" (dict "a" (list $dot) ))) "r")) "command" (list `/bin/bash` `-c` `rpk redpanda tune all`) "securityContext" (mustMergeOverwrite (dict ) (dict "capabilities" (mustMergeOverwrite (dict ) (dict "add" (list `SYS_RESOURCE`) )) "privileged" true "runAsUser" ((0 | int64) | int64) "runAsGroup" ((0 | int64) | int64) )) "volumeMounts" (concat (default (list ) (concat (default (list ) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r")) (default (list ) (get (fromJson (include "redpanda.templateToVolumeMounts" (dict "a" (list $dot $values.statefulset.initContainers.tuning.extraVolumeMounts) ))) "r")))) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") "mountPath" "/etc/redpanda" )))) "resources" $values.statefulset.initContainers.tuning.resources ))) | toJson -}} +{{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict ) ) (dict "name" "tuning" "image" (printf "%s:%s" $values.image.repository (get (fromJson (include "redpanda.Tag" (dict "a" (list $dot) ))) "r")) "command" (list `/bin/bash` `-c` `rpk redpanda tune all`) "securityContext" (mustMergeOverwrite (dict ) (dict "capabilities" (mustMergeOverwrite (dict ) (dict "add" (list `SYS_RESOURCE`) )) "privileged" true "runAsUser" ((0 | int64) | int64) "runAsGroup" ((0 | int64) | int64) )) "volumeMounts" (concat (default (list ) (concat (default (list ) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r")) (default (list ) (get (fromJson (include "redpanda.templateToVolumeMounts" (dict "a" (list $dot $values.statefulset.initContainers.tuning.extraVolumeMounts) ))) "r")))) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "base-config" "mountPath" "/etc/redpanda" )))) "resources" $values.statefulset.initContainers.tuning.resources ))) | toJson -}} {{- break -}} {{- end -}} {{- end -}} @@ -311,7 +312,7 @@ {{- $_is_returning := false -}} {{- $values := $dot.Values.AsMap -}} {{- $_is_returning = true -}} -{{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict ) ) (dict "name" (printf `%.51s-configurator` (get (fromJson (include "redpanda.Name" (dict "a" (list $dot) ))) "r")) "image" (printf `%s:%s` $values.image.repository (get (fromJson (include "redpanda.Tag" (dict "a" (list $dot) ))) "r")) "command" (list `/bin/bash` `-c` `trap "exit 0" TERM; exec $CONFIGURATOR_SCRIPT "${SERVICE_NAME}" "${KUBERNETES_NODE_NAME}" & wait $!`) "env" (get (fromJson (include "redpanda.rpkEnvVars" (dict "a" (list $dot (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "CONFIGURATOR_SCRIPT" "value" "/etc/secrets/configurator/scripts/configurator.sh" )) (mustMergeOverwrite (dict "name" "" ) (dict "name" "SERVICE_NAME" "valueFrom" (mustMergeOverwrite (dict ) (dict "fieldRef" (mustMergeOverwrite (dict "fieldPath" "" ) (dict "fieldPath" "metadata.name" )) "resourceFieldRef" (coalesce nil) "configMapKeyRef" (coalesce nil) "secretKeyRef" (coalesce nil) )) )) (mustMergeOverwrite (dict "name" "" ) (dict "name" "KUBERNETES_NODE_NAME" "valueFrom" (mustMergeOverwrite (dict ) (dict "fieldRef" (mustMergeOverwrite (dict "fieldPath" "" ) (dict "fieldPath" "spec.nodeName" )) )) )) (mustMergeOverwrite (dict "name" "" ) (dict "name" "HOST_IP_ADDRESS" "valueFrom" (mustMergeOverwrite (dict ) (dict "fieldRef" (mustMergeOverwrite (dict "fieldPath" "" ) (dict "apiVersion" "v1" "fieldPath" "status.hostIP" )) )) )))) ))) "r") "securityContext" (get (fromJson (include "redpanda.ContainerSecurityContext" (dict "a" (list $dot) ))) "r") "volumeMounts" (concat (default (list ) (concat (default (list ) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r")) (default (list ) (get (fromJson (include "redpanda.templateToVolumeMounts" (dict "a" (list $dot $values.statefulset.initContainers.configurator.extraVolumeMounts) ))) "r")))) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "config" "mountPath" "/etc/redpanda" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") "mountPath" "/tmp/base-config" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" (printf `%.51s-configurator` (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r")) "mountPath" "/etc/secrets/configurator/scripts/" )))) "resources" $values.statefulset.initContainers.configurator.resources ))) | toJson -}} +{{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict ) ) (dict "name" (printf `%.51s-configurator` (get (fromJson (include "redpanda.Name" (dict "a" (list $dot) ))) "r")) "image" (printf `%s:%s` $values.image.repository (get (fromJson (include "redpanda.Tag" (dict "a" (list $dot) ))) "r")) "command" (list `/bin/bash` `-c` `trap "exit 0" TERM; exec $CONFIGURATOR_SCRIPT "${SERVICE_NAME}" "${KUBERNETES_NODE_NAME}" & wait $!`) "env" (get (fromJson (include "redpanda.rpkEnvVars" (dict "a" (list $dot (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "CONFIGURATOR_SCRIPT" "value" "/etc/secrets/configurator/scripts/configurator.sh" )) (mustMergeOverwrite (dict "name" "" ) (dict "name" "SERVICE_NAME" "valueFrom" (mustMergeOverwrite (dict ) (dict "fieldRef" (mustMergeOverwrite (dict "fieldPath" "" ) (dict "fieldPath" "metadata.name" )) "resourceFieldRef" (coalesce nil) "configMapKeyRef" (coalesce nil) "secretKeyRef" (coalesce nil) )) )) (mustMergeOverwrite (dict "name" "" ) (dict "name" "KUBERNETES_NODE_NAME" "valueFrom" (mustMergeOverwrite (dict ) (dict "fieldRef" (mustMergeOverwrite (dict "fieldPath" "" ) (dict "fieldPath" "spec.nodeName" )) )) )) (mustMergeOverwrite (dict "name" "" ) (dict "name" "HOST_IP_ADDRESS" "valueFrom" (mustMergeOverwrite (dict ) (dict "fieldRef" (mustMergeOverwrite (dict "fieldPath" "" ) (dict "apiVersion" "v1" "fieldPath" "status.hostIP" )) )) )))) ))) "r") "securityContext" (get (fromJson (include "redpanda.ContainerSecurityContext" (dict "a" (list $dot) ))) "r") "volumeMounts" (concat (default (list ) (concat (default (list ) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $dot) ))) "r")) (default (list ) (get (fromJson (include "redpanda.templateToVolumeMounts" (dict "a" (list $dot $values.statefulset.initContainers.configurator.extraVolumeMounts) ))) "r")))) (list (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "config" "mountPath" "/etc/redpanda" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" "base-config" "mountPath" "/tmp/base-config" )) (mustMergeOverwrite (dict "name" "" "mountPath" "" ) (dict "name" (printf `%.51s-configurator` (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r")) "mountPath" "/etc/secrets/configurator/scripts/" )))) "resources" $values.statefulset.initContainers.configurator.resources ))) | toJson -}} {{- break -}} {{- end -}} {{- end -}} diff --git a/charts/redpanda/templates/_values.go.tpl b/charts/redpanda/templates/_values.go.tpl index 11df8ab11e..11380b62f5 100644 --- a/charts/redpanda/templates/_values.go.tpl +++ b/charts/redpanda/templates/_values.go.tpl @@ -151,7 +151,7 @@ {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} {{- $hp := $s.tieredStorageHostPath -}} -{{- if (and (empty $hp) (ne $s.tiered (coalesce nil))) -}} +{{- if (empty $hp) -}} {{- $hp = $s.tiered.hostPath -}} {{- end -}} {{- if (empty $hp) -}} @@ -163,42 +163,24 @@ {{- end -}} {{- end -}} -{{- define "redpanda.Storage.CloudStorageCacheSize" -}} -{{- $s := (index .a 0) -}} -{{- range $_ := (list 1) -}} -{{- $_is_returning := false -}} -{{- $tmp_tuple_4 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list (get (fromJson (include "redpanda.Storage.GetTieredStorageConfig" (dict "a" (list $s) ))) "r") `cloud_storage_cache_size` (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok := $tmp_tuple_4.T2 -}} -{{- $value := $tmp_tuple_4.T1 -}} -{{- if (not $ok) -}} -{{- $_is_returning = true -}} -{{- (dict "r" (coalesce nil)) | toJson -}} -{{- break -}} -{{- end -}} -{{- $_is_returning = true -}} -{{- (dict "r" $value) | toJson -}} -{{- break -}} -{{- end -}} -{{- end -}} - {{- define "redpanda.Storage.TieredCacheDirectory" -}} {{- $s := (index .a 0) -}} {{- $dot := (index .a 1) -}} {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} {{- $values := $dot.Values.AsMap -}} -{{- $tmp_tuple_5 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "string" (index $values.config.node "cloud_storage_cache_directory") "") ))) "r")) ))) "r") -}} -{{- $ok_3 := $tmp_tuple_5.T2 -}} -{{- $dir_2 := $tmp_tuple_5.T1 -}} +{{- $tmp_tuple_4 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "string" (index $values.config.node "cloud_storage_cache_directory") "") ))) "r")) ))) "r") -}} +{{- $ok_3 := $tmp_tuple_4.T2 -}} +{{- $dir_2 := $tmp_tuple_4.T1 -}} {{- if $ok_3 -}} {{- $_is_returning = true -}} {{- (dict "r" $dir_2) | toJson -}} {{- break -}} {{- end -}} {{- $tieredConfig := (get (fromJson (include "redpanda.Storage.GetTieredStorageConfig" (dict "a" (list $values.storage) ))) "r") -}} -{{- $tmp_tuple_6 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "string" (index $tieredConfig "cloud_storage_cache_directory") "") ))) "r")) ))) "r") -}} -{{- $ok_5 := $tmp_tuple_6.T2 -}} -{{- $dir_4 := $tmp_tuple_6.T1 -}} +{{- $tmp_tuple_5 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "string" (index $tieredConfig "cloud_storage_cache_directory") "") ))) "r")) ))) "r") -}} +{{- $ok_5 := $tmp_tuple_5.T2 -}} +{{- $dir_4 := $tmp_tuple_5.T1 -}} {{- if $ok_5 -}} {{- $_is_returning = true -}} {{- (dict "r" $dir_4) | toJson -}} @@ -239,13 +221,10 @@ {{- (dict "r" $s.tieredStoragePersistentVolume.labels) | toJson -}} {{- break -}} {{- end -}} -{{- if (ne $s.tiered (coalesce nil)) -}} {{- $_is_returning = true -}} {{- (dict "r" $s.tiered.persistentVolume.labels) | toJson -}} {{- break -}} {{- end -}} -{{- $_ := (fail `storage.tiered.mountType is "persistentVolume" but storage.tiered.persistentVolume is not configured`) -}} -{{- end -}} {{- end -}} {{- define "redpanda.Storage.TieredPersistentVolumeAnnotations" -}} @@ -257,13 +236,10 @@ {{- (dict "r" $s.tieredStoragePersistentVolume.annotations) | toJson -}} {{- break -}} {{- end -}} -{{- if (ne $s.tiered (coalesce nil)) -}} {{- $_is_returning = true -}} {{- (dict "r" $s.tiered.persistentVolume.annotations) | toJson -}} {{- break -}} {{- end -}} -{{- $_ := (fail `storage.tiered.mountType is "persistentVolume" but storage.tiered.persistentVolume is not configured`) -}} -{{- end -}} {{- end -}} {{- define "redpanda.Storage.TieredPersistentVolumeStorageClass" -}} @@ -275,62 +251,10 @@ {{- (dict "r" $s.tieredStoragePersistentVolume.storageClass) | toJson -}} {{- break -}} {{- end -}} -{{- if (ne $s.tiered (coalesce nil)) -}} {{- $_is_returning = true -}} {{- (dict "r" $s.tiered.persistentVolume.storageClass) | toJson -}} {{- break -}} {{- end -}} -{{- $_ := (fail `storage.tiered.mountType is "persistentVolume" but storage.tiered.persistentVolume is not configured`) -}} -{{- end -}} -{{- end -}} - -{{- define "redpanda.Storage.Translate" -}} -{{- $s := (index .a 0) -}} -{{- range $_ := (list 1) -}} -{{- $_is_returning := false -}} -{{- $result := (dict ) -}} -{{- if (not (get (fromJson (include "redpanda.Storage.IsTieredStorageEnabled" (dict "a" (list $s) ))) "r")) -}} -{{- $_is_returning = true -}} -{{- (dict "r" $result) | toJson -}} -{{- break -}} -{{- end -}} -{{- $tieredStorageConfig := (get (fromJson (include "redpanda.Storage.GetTieredStorageConfig" (dict "a" (list $s) ))) "r") -}} -{{- range $k, $v := $tieredStorageConfig -}} -{{- if (or (eq $v (coalesce nil)) (empty $v)) -}} -{{- continue -}} -{{- end -}} -{{- if (eq $k "cloud_storage_cache_size") -}} -{{- $_ := (set $result $k (printf "%d" ((get (fromJson (include "_shims.resource_Value" (dict "a" (list $v) ))) "r") | int64))) -}} -{{- continue -}} -{{- end -}} -{{- $tmp_tuple_8 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "string" $v "") ))) "r")) ))) "r") -}} -{{- $ok_7 := $tmp_tuple_8.T2 -}} -{{- $str_6 := $tmp_tuple_8.T1 -}} -{{- $tmp_tuple_9 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "bool" $v false) ))) "r")) ))) "r") -}} -{{- $ok_9 := $tmp_tuple_9.T2 -}} -{{- $b_8 := $tmp_tuple_9.T1 -}} -{{- $tmp_tuple_10 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.asnumeric" (dict "a" (list $v) ))) "r")) ))) "r") -}} -{{- $isFloat_11 := $tmp_tuple_10.T2 -}} -{{- $f_10 := ($tmp_tuple_10.T1 | float64) -}} -{{- if $ok_7 -}} -{{- $_ := (set $result $k $str_6) -}} -{{- else -}}{{- if $ok_9 -}} -{{- $_ := (set $result $k $b_8) -}} -{{- else -}}{{- if $isFloat_11 -}} -{{- $_ := (set $result $k ($f_10 | int)) -}} -{{- else -}} -{{- $_ := (set $result $k (mustToJson $v)) -}} -{{- end -}} -{{- end -}} -{{- end -}} -{{- end -}} -{{- if $_is_returning -}} -{{- break -}} -{{- end -}} -{{- $_is_returning = true -}} -{{- (dict "r" $result) | toJson -}} -{{- break -}} -{{- end -}} {{- end -}} {{- define "redpanda.Storage.StorageMinFreeBytes" -}} @@ -356,9 +280,9 @@ {{- $result := (dict ) -}} {{- $s := (toJson $t) -}} {{- $tune := (fromJson $s) -}} -{{- $tmp_tuple_11 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list (printf "map[%s]%s" "string" "interface {}") $tune (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok := $tmp_tuple_11.T2 -}} -{{- $m := $tmp_tuple_11.T1 -}} +{{- $tmp_tuple_7 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list (printf "map[%s]%s" "string" "interface {}") $tune (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok := $tmp_tuple_7.T2 -}} +{{- $m := $tmp_tuple_7.T1 -}} {{- if (not $ok) -}} {{- $_is_returning = true -}} {{- (dict "r" (dict )) | toJson -}} @@ -481,9 +405,9 @@ {{- $seen := (dict ) -}} {{- $deduped := (coalesce nil) -}} {{- range $_, $item := $items -}} -{{- $tmp_tuple_12 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $seen $item.key (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok_12 := $tmp_tuple_12.T2 -}} -{{- if $ok_12 -}} +{{- $tmp_tuple_8 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $seen $item.key (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok_6 := $tmp_tuple_8.T2 -}} +{{- if $ok_6 -}} {{- continue -}} {{- end -}} {{- $deduped = (concat (default (list ) $deduped) (list $item)) -}} @@ -535,9 +459,9 @@ {{- $name := (index .a 1) -}} {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} -{{- $tmp_tuple_13 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $m $name (coalesce nil)) ))) "r")) ))) "r") -}} -{{- $ok := $tmp_tuple_13.T2 -}} -{{- $cert := $tmp_tuple_13.T1 -}} +{{- $tmp_tuple_9 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $m $name (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok := $tmp_tuple_9.T2 -}} +{{- $cert := $tmp_tuple_9.T1 -}} {{- if (not $ok) -}} {{- $_ := (fail (printf "Certificate %q referenced, but not found in the tls.certs map" $name)) -}} {{- end -}} @@ -881,9 +805,9 @@ {{- if $saslEnabled -}} {{- $_ := (set $internal "authentication_method" "http_basic") -}} {{- end -}} -{{- $am_13 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} -{{- if (ne $am_13 "") -}} -{{- $_ := (set $internal "authentication_method" $am_13) -}} +{{- $am_7 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} +{{- if (ne $am_7 "") -}} +{{- $_ := (set $internal "authentication_method" $am_7) -}} {{- end -}} {{- $result := (list $internal) -}} {{- range $k, $l := $l.external -}} @@ -894,9 +818,9 @@ {{- if $saslEnabled -}} {{- $_ := (set $listener "authentication_method" "http_basic") -}} {{- end -}} -{{- $am_14 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} -{{- if (ne $am_14 "") -}} -{{- $_ := (set $listener "authentication_method" $am_14) -}} +{{- $am_8 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} +{{- if (ne $am_8 "") -}} +{{- $_ := (set $listener "authentication_method" $am_8) -}} {{- end -}} {{- $result = (concat (default (list ) $result) (list $listener)) -}} {{- end -}} @@ -979,9 +903,9 @@ {{- if (get (fromJson (include "redpanda.Auth.IsSASLEnabled" (dict "a" (list $auth) ))) "r") -}} {{- $_ := (set $internal "authentication_method" "sasl") -}} {{- end -}} -{{- $am_15 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} -{{- if (ne $am_15 "") -}} -{{- $_ := (set $internal "authentication_method" $am_15) -}} +{{- $am_9 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} +{{- if (ne $am_9 "") -}} +{{- $_ := (set $internal "authentication_method" $am_9) -}} {{- end -}} {{- $kafka := (list $internal) -}} {{- range $k, $l := $l.external -}} @@ -992,9 +916,9 @@ {{- if (get (fromJson (include "redpanda.Auth.IsSASLEnabled" (dict "a" (list $auth) ))) "r") -}} {{- $_ := (set $listener "authentication_method" "sasl") -}} {{- end -}} -{{- $am_16 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} -{{- if (ne $am_16 "") -}} -{{- $_ := (set $listener "authentication_method" $am_16) -}} +{{- $am_10 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} +{{- if (ne $am_10 "") -}} +{{- $_ := (set $listener "authentication_method" $am_10) -}} {{- end -}} {{- $kafka = (concat (default (list ) $kafka) (list $listener)) -}} {{- end -}} @@ -1103,9 +1027,9 @@ {{- if $saslEnabled -}} {{- $_ := (set $internal "authentication_method" "http_basic") -}} {{- end -}} -{{- $am_17 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $sr.authenticationMethod "") ))) "r") -}} -{{- if (ne $am_17 "") -}} -{{- $_ := (set $internal "authentication_method" $am_17) -}} +{{- $am_11 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $sr.authenticationMethod "") ))) "r") -}} +{{- if (ne $am_11 "") -}} +{{- $_ := (set $internal "authentication_method" $am_11) -}} {{- end -}} {{- $result := (list $internal) -}} {{- range $k, $l := $sr.external -}} @@ -1116,9 +1040,9 @@ {{- if $saslEnabled -}} {{- $_ := (set $listener "authentication_method" "http_basic") -}} {{- end -}} -{{- $am_18 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} -{{- if (ne $am_18 "") -}} -{{- $_ := (set $listener "authentication_method" $am_18) -}} +{{- $am_12 := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $l.authenticationMethod "") ))) "r") -}} +{{- if (ne $am_12 "") -}} +{{- $_ := (set $listener "authentication_method" $am_12) -}} {{- end -}} {{- $result = (concat (default (list ) $result) (list $listener)) -}} {{- end -}} @@ -1249,9 +1173,9 @@ {{- $result := (dict ) -}} {{- range $k, $v := $c -}} {{- if (not (empty $v)) -}} -{{- $tmp_tuple_16 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.asnumeric" (dict "a" (list $v) ))) "r")) ))) "r") -}} -{{- $ok_19 := $tmp_tuple_16.T2 -}} -{{- if $ok_19 -}} +{{- $tmp_tuple_12 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.asnumeric" (dict "a" (list $v) ))) "r")) ))) "r") -}} +{{- $ok_13 := $tmp_tuple_12.T2 -}} +{{- if $ok_13 -}} {{- $_ := (set $result $k $v) -}} {{- else -}}{{- if (kindIs "bool" $v) -}} {{- $_ := (set $result $k $v) -}} @@ -1276,11 +1200,11 @@ {{- $_is_returning := false -}} {{- $result := (dict ) -}} {{- range $k, $v := $c -}} -{{- $tmp_tuple_17 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "bool" $v false) ))) "r")) ))) "r") -}} -{{- $ok_21 := $tmp_tuple_17.T2 -}} -{{- $b_20 := $tmp_tuple_17.T1 -}} -{{- if $ok_21 -}} -{{- $_ := (set $result $k $b_20) -}} +{{- $tmp_tuple_13 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.typetest" (dict "a" (list "bool" $v false) ))) "r")) ))) "r") -}} +{{- $ok_15 := $tmp_tuple_13.T2 -}} +{{- $b_14 := $tmp_tuple_13.T1 -}} +{{- if $ok_15 -}} +{{- $_ := (set $result $k $b_14) -}} {{- continue -}} {{- end -}} {{- if (not (empty $v)) -}} @@ -1296,6 +1220,16 @@ {{- end -}} {{- end -}} +{{- define "redpanda.SecretRef.AsSource" -}} +{{- $sr := (index .a 0) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $_is_returning = true -}} +{{- (dict "r" (mustMergeOverwrite (dict ) (dict "secretKeyRef" (mustMergeOverwrite (dict "key" "" ) (mustMergeOverwrite (dict ) (dict "name" $sr.name )) (dict "key" $sr.key )) ))) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + {{- define "redpanda.SecretRef.IsValid" -}} {{- $sr := (index .a 0) -}} {{- range $_ := (list 1) -}} @@ -1306,22 +1240,86 @@ {{- end -}} {{- end -}} -{{- define "redpanda.TieredStorageCredentials.IsAccessKeyReferenceValid" -}} +{{- define "redpanda.TieredStorageCredentials.AsEnvVars" -}} {{- $tsc := (index .a 0) -}} +{{- $config := (index .a 1) -}} {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} +{{- $tmp_tuple_14 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $config "cloud_storage_access_key" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $hasAccessKey := $tmp_tuple_14.T2 -}} +{{- $tmp_tuple_15 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $config "cloud_storage_secret_key" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $hasSecretKey := $tmp_tuple_15.T2 -}} +{{- $tmp_tuple_16 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $config "cloud_storage_azure_shared_key" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $hasSharedKey := $tmp_tuple_16.T2 -}} +{{- $envvars := (coalesce nil) -}} +{{- if (and (not $hasAccessKey) (get (fromJson (include "redpanda.SecretRef.IsValid" (dict "a" (list $tsc.accessKey) ))) "r")) -}} +{{- $envvars = (concat (default (list ) $envvars) (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "REDPANDA_CLOUD_STORAGE_ACCESS_KEY" "valueFrom" (get (fromJson (include "redpanda.SecretRef.AsSource" (dict "a" (list $tsc.accessKey) ))) "r") )))) -}} +{{- end -}} +{{- if (get (fromJson (include "redpanda.SecretRef.IsValid" (dict "a" (list $tsc.secretKey) ))) "r") -}} +{{- if (and (not $hasSecretKey) (not (get (fromJson (include "redpanda.TieredStorageConfig.HasAzureCanaries" (dict "a" (list (deepCopy $config)) ))) "r"))) -}} +{{- $envvars = (concat (default (list ) $envvars) (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "REDPANDA_CLOUD_STORAGE_SECRET_KEY" "valueFrom" (get (fromJson (include "redpanda.SecretRef.AsSource" (dict "a" (list $tsc.secretKey) ))) "r") )))) -}} +{{- else -}}{{- if (and (not $hasSharedKey) (get (fromJson (include "redpanda.TieredStorageConfig.HasAzureCanaries" (dict "a" (list (deepCopy $config)) ))) "r")) -}} +{{- $envvars = (concat (default (list ) $envvars) (list (mustMergeOverwrite (dict "name" "" ) (dict "name" "REDPANDA_CLOUD_STORAGE_AZURE_SHARED_KEY" "valueFrom" (get (fromJson (include "redpanda.SecretRef.AsSource" (dict "a" (list $tsc.secretKey) ))) "r") )))) -}} +{{- end -}} +{{- end -}} +{{- end -}} {{- $_is_returning = true -}} -{{- (dict "r" (and (and (ne $tsc.accessKey (coalesce nil)) (ne $tsc.accessKey.name "")) (ne $tsc.accessKey.key ""))) | toJson -}} +{{- (dict "r" $envvars) | toJson -}} {{- break -}} {{- end -}} {{- end -}} -{{- define "redpanda.TieredStorageCredentials.IsSecretKeyReferenceValid" -}} -{{- $tsc := (index .a 0) -}} +{{- define "redpanda.TieredStorageConfig.HasAzureCanaries" -}} +{{- $c := (index .a 0) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $tmp_tuple_17 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $c "cloud_storage_azure_container" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $containerExists := $tmp_tuple_17.T2 -}} +{{- $tmp_tuple_18 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $c "cloud_storage_azure_storage_account" (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $accountExists := $tmp_tuple_18.T2 -}} +{{- $_is_returning = true -}} +{{- (dict "r" (and $containerExists $accountExists)) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + +{{- define "redpanda.TieredStorageConfig.CloudStorageCacheSize" -}} +{{- $c := (index .a 0) -}} {{- range $_ := (list 1) -}} {{- $_is_returning := false -}} +{{- $tmp_tuple_19 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $c `cloud_storage_cache_size` (coalesce nil)) ))) "r")) ))) "r") -}} +{{- $ok := $tmp_tuple_19.T2 -}} +{{- $value := $tmp_tuple_19.T1 -}} +{{- if (not $ok) -}} +{{- $_is_returning = true -}} +{{- (dict "r" (coalesce nil)) | toJson -}} +{{- break -}} +{{- end -}} +{{- $_is_returning = true -}} +{{- (dict "r" $value) | toJson -}} +{{- break -}} +{{- end -}} +{{- end -}} + +{{- define "redpanda.TieredStorageConfig.Translate" -}} +{{- $c := (index .a 0) -}} +{{- $creds := (index .a 1) -}} +{{- range $_ := (list 1) -}} +{{- $_is_returning := false -}} +{{- $config := (merge (dict ) (dict ) $c) -}} +{{- range $_, $envvar := (get (fromJson (include "redpanda.TieredStorageCredentials.AsEnvVars" (dict "a" (list $creds $c) ))) "r") -}} +{{- $key := (lower (substr ((get (fromJson (include "_shims.len" (dict "a" (list "REDPANDA_") ))) "r") | int) -1 $envvar.name)) -}} +{{- $_ := (set $config $key (printf "$%s" $envvar.name)) -}} +{{- end -}} +{{- if $_is_returning -}} +{{- break -}} +{{- end -}} +{{- $size_16 := (get (fromJson (include "redpanda.TieredStorageConfig.CloudStorageCacheSize" (dict "a" (list (deepCopy $c)) ))) "r") -}} +{{- if (ne $size_16 (coalesce nil)) -}} +{{- $_ := (set $config "cloud_storage_cache_size" ((get (fromJson (include "_shims.resource_Value" (dict "a" (list $size_16) ))) "r") | int64)) -}} +{{- end -}} {{- $_is_returning = true -}} -{{- (dict "r" (and (and (ne $tsc.secretKey (coalesce nil)) (ne $tsc.secretKey.name "")) (ne $tsc.secretKey.key ""))) | toJson -}} +{{- (dict "r" $config) | toJson -}} {{- break -}} {{- end -}} {{- end -}} diff --git a/charts/redpanda/testdata/template-cases.golden.txtar b/charts/redpanda/testdata/template-cases.golden.txtar index 3beee9f5cf..1ef8c7e7ff 100644 --- a/charts/redpanda/testdata/template-cases.golden.txtar +++ b/charts/redpanda/testdata/template-cases.golden.txtar @@ -194,7 +194,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -287,7 +286,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -874,7 +878,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -921,7 +925,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -962,9 +966,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -997,7 +1026,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -1255,87 +1284,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -1362,47 +1310,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -1411,9 +1370,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -1422,6 +1378,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/02-one-node-cluster-no-tls-no-sasl-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -1623,7 +1584,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -1700,6 +1660,10 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 enable_rack_awareness: false enable_sasl: false @@ -2176,7 +2140,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -2215,7 +2179,7 @@ spec: runAsUser: 0 volumeMounts: - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -2252,9 +2216,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -2279,7 +2268,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -2344,77 +2333,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - testlabel: exercise_common_labels_template - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - testlabel: exercise_common_labels_template - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set retention_local_target_ms_default 21600000 - rpk cluster config set storage_min_free_bytes 161061273 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - http://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -2443,43 +2361,54 @@ spec: testlabel: exercise_common_labels_template spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda + - mountPath: /tmp/config name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -2490,6 +2419,8 @@ spec: volumes: - configMap: name: redpanda + name: base-config + - emptyDir: {} name: config -- testdata/TestTemplate/03-one-node-cluster-tls-no-sasl-values.yaml.yaml.golden -- --- @@ -2688,7 +2619,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -2765,6 +2695,10 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 enable_rack_awareness: false enable_sasl: false @@ -3330,7 +3264,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -3377,7 +3311,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -3418,9 +3352,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -3453,7 +3412,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -3711,86 +3670,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set storage_min_free_bytes 161061273 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -3817,47 +3696,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -3866,9 +3756,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -3877,6 +3764,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/04-one-node-cluster-no-tls-sasl-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -4194,7 +4086,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -4288,6 +4179,10 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 enable_rack_awareness: false enable_sasl: true @@ -4795,7 +4690,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -4849,7 +4744,7 @@ spec: name: users readOnly: true - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -4898,9 +4793,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -4928,7 +4848,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -4992,89 +4912,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set storage_min_free_bytes 161061273 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - http://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: - - name: RPK_PASS - valueFrom: - secretKeyRef: - key: password - name: redpanda-bootstrap-user - - name: RPK_USER - value: kubernetes-controller - - name: RPK_SASL_MECHANISM - value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/secrets/users - name: users - readOnly: true - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: users - secret: - secretName: redpanda-users ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -5101,32 +4938,15 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: RPK_PASS valueFrom: @@ -5137,19 +4957,49 @@ spec: value: kubernetes-controller - name: RPK_SASL_MECHANISM value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - name: RP_BOOTSTRAP_USER + value: $(RPK_USER):$(RPK_PASS):$(RPK_SASL_MECHANISM) + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/secrets/users name: users readOnly: true + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -5158,12 +5008,14 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: users secret: secretName: redpanda-users + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/05-one-node-cluster-tls-sasl-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -5481,7 +5333,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -5575,6 +5426,10 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 enable_rack_awareness: false enable_sasl: true @@ -6183,7 +6038,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -6245,7 +6100,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -6298,9 +6153,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -6336,7 +6216,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -6594,102 +6474,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set kafka_nodelete_topics "[ audit,consumer_offsets,_schemas,my_sample_topic ]" - rpk cluster config set storage_min_free_bytes 161061273 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: - - name: RPK_PASS - valueFrom: - secretKeyRef: - key: password - name: redpanda-bootstrap-user - - name: RPK_USER - value: kubernetes-controller - - name: RPK_SASL_MECHANISM - value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/secrets/users - name: users - readOnly: true - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert - - name: users - secret: - secretName: redpanda-users ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -6716,32 +6500,15 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: RPK_PASS valueFrom: @@ -6752,15 +6519,15 @@ spec: value: kubernetes-controller - name: RPK_SASL_MECHANISM value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - name: RP_BOOTSTRAP_USER + value: $(RPK_USER):$(RPK_PASS):$(RPK_SASL_MECHANISM) + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/secrets/users name: users readOnly: true @@ -6768,7 +6535,37 @@ spec: name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -6777,9 +6574,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -6791,6 +6585,11 @@ spec: - name: users secret: secretName: redpanda-users + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/06-rack-awareness-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -7002,7 +6801,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -7101,7 +6899,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -7786,7 +7589,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -7833,7 +7636,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -7874,9 +7677,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -7909,7 +7737,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -8167,87 +7995,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: redpanda - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -8274,47 +8021,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -8323,9 +8081,6 @@ spec: serviceAccountName: redpanda tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -8334,6 +8089,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/07-multiple-listeners-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -8530,7 +8290,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -8675,7 +8434,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -9296,7 +9060,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -9347,7 +9111,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -9390,9 +9154,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -9429,7 +9218,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -9784,93 +9573,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/cert2 - name: redpanda-cert2-cert - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-cert2-cert - secret: - defaultMode: 288 - secretName: redpanda-cert2-cert - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -9897,49 +9599,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/cert2 name: redpanda-cert2-cert - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -9948,9 +9661,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-cert2-cert secret: defaultMode: 288 @@ -9963,6 +9673,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/08-custom-podantiaffinity-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -10159,7 +9874,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -10252,7 +9966,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -10838,7 +10557,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -10885,7 +10604,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -10926,9 +10645,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -10961,7 +10705,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -11219,87 +10963,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -11326,47 +10989,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -11375,9 +11049,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -11386,6 +11057,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/09-initcontainers-resources-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -11582,7 +11258,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -11730,7 +11405,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -12317,7 +11997,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -12370,7 +12050,7 @@ spec: - mountPath: /fake/lifecycle name: test-extra-volume - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -12472,9 +12152,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config - args: - |- set -xe @@ -12516,7 +12221,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -12782,87 +12487,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -12889,47 +12513,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -12938,9 +12573,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -12949,6 +12581,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/10-external-addresses-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -13145,7 +12782,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -13238,7 +12874,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -13825,7 +13466,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -13872,7 +13513,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -13913,9 +13554,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -13948,7 +13614,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -14210,87 +13876,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -14317,47 +13902,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -14366,9 +13962,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -14377,6 +13970,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/11-update-sasl-users-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -14697,7 +14295,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -14807,7 +14404,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: true kafka_connection_rate_limit: 1000 @@ -15435,7 +15037,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -15497,7 +15099,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -15550,9 +15152,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -15588,7 +15215,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -15846,102 +15473,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: - - name: RPK_PASS - valueFrom: - secretKeyRef: - key: password - name: redpanda-bootstrap-user - - name: RPK_USER - value: kubernetes-controller - - name: RPK_SASL_MECHANISM - value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/secrets/users - name: users - readOnly: true - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert - - name: users - secret: - secretName: some-users ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -15968,32 +15499,15 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: RPK_PASS valueFrom: @@ -16004,15 +15518,15 @@ spec: value: kubernetes-controller - name: RPK_SASL_MECHANISM value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - name: RP_BOOTSTRAP_USER + value: $(RPK_USER):$(RPK_PASS):$(RPK_SASL_MECHANISM) + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/secrets/users name: users readOnly: true @@ -16020,7 +15534,37 @@ spec: name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -16029,9 +15573,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -16043,6 +15584,11 @@ spec: - name: users secret: secretName: some-users + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/12-external-cert-secrets-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -16239,7 +15785,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -16332,7 +15877,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -16919,7 +16469,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -16966,7 +16516,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -17007,9 +16557,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -17042,7 +16617,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -17205,87 +16780,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: external-tls-secret ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -17312,47 +16806,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -17361,9 +16866,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -17372,6 +16874,11 @@ spec: secret: defaultMode: 288 secretName: external-tls-secret + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/13-loadbalancer-tls-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -17568,7 +17075,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -17661,7 +17167,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -18335,7 +17846,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -18382,7 +17893,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -18423,9 +17934,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -18458,7 +17994,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -18621,87 +18157,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: external-tls-secret ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -18728,47 +18183,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -18777,9 +18243,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -18788,6 +18251,11 @@ spec: secret: defaultMode: 288 secretName: external-tls-secret + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/14-prometheus-no-tls-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -18984,7 +18452,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -19077,7 +18544,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -19568,7 +19040,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -19607,7 +19079,7 @@ spec: runAsUser: 0 volumeMounts: - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -19644,9 +19116,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -19671,7 +19168,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -19763,75 +19260,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - http://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -19858,43 +19286,54 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda + - mountPath: /tmp/config name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -19905,6 +19344,8 @@ spec: volumes: - configMap: name: redpanda + name: base-config + - emptyDir: {} name: config -- testdata/TestTemplate/15-prometheus-tls-values.yaml.yaml.golden -- --- @@ -20102,7 +19543,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -20195,7 +19635,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -20782,7 +20227,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -20829,7 +20274,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -20870,9 +20315,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -20905,7 +20375,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -21195,87 +20665,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -21302,47 +20691,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -21351,9 +20751,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -21362,6 +20759,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/16-controller-sidecar-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -21558,7 +20960,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -21651,7 +21052,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -22468,7 +21874,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -22504,7 +21910,7 @@ spec: env: - name: REDPANDA_HELM_RELEASE_NAME value: redpanda - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.1.10-23.2.18 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: redpanda-controllers resources: {} securityContext: {} @@ -22530,7 +21936,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -22571,9 +21977,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -22606,7 +22037,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -22864,87 +22295,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -22971,47 +22321,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -23020,9 +22381,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -23031,6 +22389,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/17-resources-without-unit-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -23227,7 +22590,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -23320,7 +22682,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -23910,7 +23277,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -23957,7 +23324,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -23998,9 +23365,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -24033,7 +23425,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -24291,87 +23683,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -24398,47 +23709,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -24447,9 +23769,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -24458,6 +23777,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/18-single-external-address-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -24654,7 +23978,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -24747,7 +24070,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -25334,7 +24662,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -25381,7 +24709,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -25422,9 +24750,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -25457,7 +24810,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -25719,87 +25072,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -25826,47 +25098,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -25875,9 +25158,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -25886,6 +25166,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/21-eks-tiered-storage-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -26121,7 +25406,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -26216,7 +25500,7 @@ data: audit_enabled: false cloud_storage_access_key: ${AWS_ACCESS_KEY_ID} cloud_storage_bucket: ${TEST_BUCKET} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true @@ -26225,6 +25509,7 @@ data: cloud_storage_secret_key: ${AWS_SECRET_ACCESS_KEY} cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -26827,7 +26112,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -26876,7 +26161,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -26933,9 +26218,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -26968,7 +26278,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -27229,87 +26539,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -27336,69 +26565,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_SECRET_KEY - value: ${AWS_SECRET_ACCESS_KEY} - - name: RPK_CLOUD_STORAGE_ACCESS_KEY - value: ${AWS_ACCESS_KEY_ID} - - name: RPK_CLOUD_STORAGE_BUCKET - value: ${TEST_BUCKET} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_REGION - value: ${AWS_REGION} - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -27407,9 +26627,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -27418,6 +26635,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/22-gke-tiered-storage-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -27653,7 +26875,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -27749,7 +26970,7 @@ data: cloud_storage_access_key: ${GCP_ACCESS_KEY_ID} cloud_storage_api_endpoint: storage.googleapis.com cloud_storage_bucket: ${TEST_BUCKET} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true @@ -27758,6 +26979,7 @@ data: cloud_storage_secret_key: ${GCP_SECRET_ACCESS_KEY} cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -28360,7 +27582,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -28409,7 +27631,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -28466,9 +27688,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -28501,7 +27748,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -28762,87 +28009,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -28869,71 +28035,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_SECRET_KEY - value: ${GCP_SECRET_ACCESS_KEY} - - name: RPK_CLOUD_STORAGE_ACCESS_KEY - value: ${GCP_ACCESS_KEY_ID} - - name: RPK_CLOUD_STORAGE_API_ENDPOINT - value: storage.googleapis.com - - name: RPK_CLOUD_STORAGE_BUCKET - value: ${TEST_BUCKET} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_REGION - value: US-WEST1 - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -28942,9 +28097,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -28953,6 +28105,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/23-aks-tiered-storage-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -29188,7 +28345,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -29284,13 +28440,14 @@ data: cloud_storage_azure_container: ${TEST_STORAGE_CONTAINER} cloud_storage_azure_shared_key: ${TEST_AZURE_SHARED_KEY} cloud_storage_azure_storage_account: ${TEST_STORAGE_ACCOUNT} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true cloud_storage_enabled: true cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -29893,7 +29050,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -29942,7 +29099,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -29999,9 +29156,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -30034,7 +29216,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -30296,87 +29478,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -30403,67 +29504,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_AZURE_SHARED_KEY - value: ${TEST_AZURE_SHARED_KEY} - - name: RPK_CLOUD_STORAGE_AZURE_CONTAINER - value: ${TEST_STORAGE_CONTAINER} - - name: RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT - value: ${TEST_STORAGE_ACCOUNT} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -30472,9 +29566,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -30483,6 +29574,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/23-aks-tiered-storage-without-creds-novalues.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -30679,7 +29775,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -30775,13 +29870,14 @@ data: cloud_storage_azure_container: ${TEST_STORAGE_CONTAINER} cloud_storage_azure_shared_key: ${TEST_AZURE_SHARED_KEY} cloud_storage_azure_storage_account: TestForStringThatShouldNotBeWrappedWithQuotes - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true cloud_storage_enabled: true cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -31368,7 +30464,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -31417,7 +30513,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -31474,9 +30570,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -31509,7 +30630,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -31771,87 +30892,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -31878,65 +30918,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c - env: - - name: RPK_CLOUD_STORAGE_AZURE_SHARED_KEY - value: ${TEST_AZURE_SHARED_KEY} - - name: RPK_CLOUD_STORAGE_AZURE_CONTAINER - value: ${TEST_STORAGE_CONTAINER} - - name: RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT - value: TestForStringThatShouldNotBeWrappedWithQuotes - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -31945,9 +30978,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -31956,6 +30986,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/24-eks-tiered-storage-persistent-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -32191,7 +31226,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -32286,7 +31320,7 @@ data: audit_enabled: false cloud_storage_access_key: ${AWS_ACCESS_KEY_ID} cloud_storage_bucket: ${TEST_BUCKET} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true @@ -32295,6 +31329,7 @@ data: cloud_storage_secret_key: ${AWS_SECRET_ACCESS_KEY} cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -32897,7 +31932,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -32946,7 +31981,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -33003,9 +32038,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -33038,7 +32098,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -33311,87 +32371,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -33418,69 +32397,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_SECRET_KEY - value: ${AWS_SECRET_ACCESS_KEY} - - name: RPK_CLOUD_STORAGE_ACCESS_KEY - value: ${AWS_ACCESS_KEY_ID} - - name: RPK_CLOUD_STORAGE_BUCKET - value: ${TEST_BUCKET} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_REGION - value: ${AWS_REGION} - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -33489,9 +32459,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -33500,6 +32467,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/25-gke-tiered-storage-persistent-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -33735,7 +32707,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -33831,7 +32802,7 @@ data: cloud_storage_access_key: ${GCP_ACCESS_KEY_ID} cloud_storage_api_endpoint: storage.googleapis.com cloud_storage_bucket: ${TEST_BUCKET} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true @@ -33840,6 +32811,7 @@ data: cloud_storage_secret_key: ${GCP_SECRET_ACCESS_KEY} cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -34442,7 +33414,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -34491,7 +33463,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -34548,9 +33520,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -34583,7 +33580,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -34856,87 +33853,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -34963,71 +33879,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_SECRET_KEY - value: ${GCP_SECRET_ACCESS_KEY} - - name: RPK_CLOUD_STORAGE_ACCESS_KEY - value: ${GCP_ACCESS_KEY_ID} - - name: RPK_CLOUD_STORAGE_API_ENDPOINT - value: storage.googleapis.com - - name: RPK_CLOUD_STORAGE_BUCKET - value: ${TEST_BUCKET} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_REGION - value: US-WEST1 - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -35036,9 +33941,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -35047,6 +33949,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/26-aks-tiered-storage-persistent-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -35282,7 +34189,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -35378,13 +34284,14 @@ data: cloud_storage_azure_container: ${TEST_STORAGE_CONTAINER} cloud_storage_azure_shared_key: ${TEST_AZURE_SHARED_KEY} cloud_storage_azure_storage_account: ${TEST_STORAGE_ACCOUNT} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true cloud_storage_enabled: true cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -35987,7 +34894,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -36036,7 +34943,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -36093,9 +35000,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -36128,7 +35060,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -36403,87 +35335,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -36510,67 +35361,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_AZURE_SHARED_KEY - value: ${TEST_AZURE_SHARED_KEY} - - name: RPK_CLOUD_STORAGE_AZURE_CONTAINER - value: ${TEST_STORAGE_CONTAINER} - - name: RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT - value: ${TEST_STORAGE_ACCOUNT} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -36579,9 +35423,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -36590,6 +35431,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/26-aks-tiered-storage-persistent-without-creds-novalues.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -36786,7 +35632,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -36882,13 +35727,14 @@ data: cloud_storage_azure_container: ${TEST_STORAGE_CONTAINER} cloud_storage_azure_shared_key: ${TEST_AZURE_SHARED_KEY} cloud_storage_azure_storage_account: ${TEST_STORAGE_ACCOUNT} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true cloud_storage_enabled: true cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -37475,7 +36321,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -37524,7 +36370,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -37581,9 +36427,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -37616,7 +36487,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -37891,87 +36762,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -37998,65 +36788,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c - env: - - name: RPK_CLOUD_STORAGE_AZURE_SHARED_KEY - value: ${TEST_AZURE_SHARED_KEY} - - name: RPK_CLOUD_STORAGE_AZURE_CONTAINER - value: ${TEST_STORAGE_CONTAINER} - - name: RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT - value: ${TEST_STORAGE_ACCOUNT} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -38065,9 +36848,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -38076,6 +36856,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/27-eks-tiered-storage-persistent-nameoverwrite-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -38311,7 +37096,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -38406,7 +37190,7 @@ data: audit_enabled: false cloud_storage_access_key: ${AWS_ACCESS_KEY_ID} cloud_storage_bucket: ${TEST_BUCKET} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true @@ -38415,6 +37199,7 @@ data: cloud_storage_secret_key: ${AWS_SECRET_ACCESS_KEY} cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -39017,7 +37802,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -39066,7 +37851,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -39123,9 +37908,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -39158,7 +37968,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -39431,87 +38241,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -39538,69 +38267,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_SECRET_KEY - value: ${AWS_SECRET_ACCESS_KEY} - - name: RPK_CLOUD_STORAGE_ACCESS_KEY - value: ${AWS_ACCESS_KEY_ID} - - name: RPK_CLOUD_STORAGE_BUCKET - value: ${TEST_BUCKET} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_REGION - value: ${AWS_REGION} - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -39609,9 +38329,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -39620,6 +38337,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/28-gke-tiered-storage-persistent-nameoverwrite-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -39855,7 +38577,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -39951,7 +38672,7 @@ data: cloud_storage_access_key: ${GCP_ACCESS_KEY_ID} cloud_storage_api_endpoint: storage.googleapis.com cloud_storage_bucket: ${TEST_BUCKET} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true @@ -39960,6 +38681,7 @@ data: cloud_storage_secret_key: ${GCP_SECRET_ACCESS_KEY} cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -40562,7 +39284,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -40611,7 +39333,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -40668,9 +39390,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -40703,7 +39450,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -40976,87 +39723,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -41083,71 +39749,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_SECRET_KEY - value: ${GCP_SECRET_ACCESS_KEY} - - name: RPK_CLOUD_STORAGE_ACCESS_KEY - value: ${GCP_ACCESS_KEY_ID} - - name: RPK_CLOUD_STORAGE_API_ENDPOINT - value: storage.googleapis.com - - name: RPK_CLOUD_STORAGE_BUCKET - value: ${TEST_BUCKET} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_REGION - value: US-WEST1 - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -41156,9 +39811,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -41167,6 +39819,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/29-aks-tiered-storage-persistent-nameoverwrite-with-creds-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -41402,7 +40059,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -41498,13 +40154,14 @@ data: cloud_storage_azure_container: ${TEST_STORAGE_CONTAINER} cloud_storage_azure_shared_key: ${TEST_AZURE_SHARED_KEY} cloud_storage_azure_storage_account: ${TEST_STORAGE_ACCOUNT} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true cloud_storage_enabled: true cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -42107,7 +40764,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -42156,7 +40813,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -42213,9 +40870,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -42248,7 +40930,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -42523,87 +41205,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -42630,67 +41231,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_SAMPLE_LICENSE} - - name: RPK_CLOUD_STORAGE_AZURE_SHARED_KEY - value: ${TEST_AZURE_SHARED_KEY} - - name: RPK_CLOUD_STORAGE_AZURE_CONTAINER - value: ${TEST_STORAGE_CONTAINER} - - name: RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT - value: ${TEST_STORAGE_ACCOUNT} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -42699,9 +41293,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -42710,6 +41301,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/29-aks-tiered-storage-persistent-nameoverwrite-without-creds-novalues.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -42906,7 +41502,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -43002,13 +41597,14 @@ data: cloud_storage_azure_container: ${TEST_STORAGE_CONTAINER} cloud_storage_azure_shared_key: ${TEST_AZURE_SHARED_KEY} cloud_storage_azure_storage_account: ${TEST_STORAGE_ACCOUNT} - cloud_storage_cache_size: "5368709120" + cloud_storage_cache_size: 5368709120 cloud_storage_credentials_source: config_file cloud_storage_enable_remote_read: true cloud_storage_enable_remote_write: true cloud_storage_enabled: true cloud_storage_segment_max_upload_interval_sec: 1 compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -43595,7 +42191,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -43644,7 +42240,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -43701,9 +42297,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -43736,7 +42357,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -44011,87 +42632,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -44118,65 +42658,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c - env: - - name: RPK_CLOUD_STORAGE_AZURE_SHARED_KEY - value: ${TEST_AZURE_SHARED_KEY} - - name: RPK_CLOUD_STORAGE_AZURE_CONTAINER - value: ${TEST_STORAGE_CONTAINER} - - name: RPK_CLOUD_STORAGE_AZURE_STORAGE_ACCOUNT - value: ${TEST_STORAGE_ACCOUNT} - - name: RPK_CLOUD_STORAGE_CACHE_SIZE - value: "5368709120" - - name: RPK_CLOUD_STORAGE_CREDENTIALS_SOURCE - value: config_file - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_READ - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLE_REMOTE_WRITE - value: "true" - - name: RPK_CLOUD_STORAGE_ENABLED - value: "true" - - name: RPK_CLOUD_STORAGE_SEGMENT_MAX_UPLOAD_INTERVAL_SEC - value: "1" - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml + env: [] + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -44185,9 +42718,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -44196,6 +42726,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/30-additional-flags-override-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -44392,7 +42927,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -44485,7 +43019,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -45072,7 +43611,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -45119,7 +43658,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -45160,9 +43699,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -45195,7 +43759,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -45453,87 +44017,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -45560,47 +44043,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -45609,9 +44103,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -45620,6 +44111,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/31-overwrite-statefulset-pod-labels-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -45816,7 +44312,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -45909,7 +44404,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -46497,7 +44997,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -46544,7 +45044,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -46585,9 +45085,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -46620,7 +45145,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -46878,87 +45403,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -46985,47 +45429,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -47034,9 +45489,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -47045,6 +45497,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/32-statefulset-podspec-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -47241,7 +45698,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -47334,7 +45790,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -47927,7 +46388,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -47974,7 +46435,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -48015,9 +46476,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -48050,7 +46536,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -48308,87 +46794,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -48415,47 +46820,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -48464,9 +46880,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -48475,6 +46888,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/33-advertised-ports-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -48671,7 +47089,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -48836,7 +47253,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -49431,7 +47853,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -49478,7 +47900,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -49519,9 +47941,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -49554,7 +48001,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -49812,87 +48259,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -49919,47 +48285,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -49968,9 +48345,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -49979,6 +48353,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/33-pod-selector-lables-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -50178,7 +48557,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -50271,7 +48649,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -50873,7 +49256,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -50920,7 +49303,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -50961,9 +49344,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -50999,7 +49407,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -51257,87 +49665,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -51364,47 +49691,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -51413,9 +49751,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -51424,6 +49759,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/34-security-contexts-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -51620,7 +49960,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -51713,7 +50052,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -52530,7 +50874,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -52572,7 +50916,7 @@ spec: env: - name: REDPANDA_HELM_RELEASE_NAME value: redpanda - image: docker.redpanda.com/redpandadata/redpanda-operator:v2.1.10-23.2.18 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: redpanda-controllers resources: {} securityContext: @@ -52604,7 +50948,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -52645,9 +50989,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -52680,7 +51049,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -52938,87 +51307,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 2222 - runAsUser: 1111 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 3333 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -53045,47 +51333,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 2222 runAsUser: 1111 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -53094,9 +51393,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -53105,6 +51401,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/34-statefulset-sidecars-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -53301,7 +51602,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -53449,7 +51749,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -54168,7 +52473,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -54215,7 +52520,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/sh - -c @@ -54293,9 +52598,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -54328,7 +52658,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -54590,87 +52920,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -54697,47 +52946,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -54746,9 +53006,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -54757,6 +53014,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/35-connectors-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -54953,7 +53215,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -55063,7 +53324,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -55838,7 +54104,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -55885,7 +54151,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -55926,9 +54192,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -55961,7 +54252,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -56219,87 +54510,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -56326,47 +54536,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -56375,9 +54596,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -56386,6 +54604,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/36-single-external-address-with-template-domain-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -56582,7 +54805,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -56675,7 +54897,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -57262,7 +55489,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -57309,7 +55536,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -57350,9 +55577,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -57385,7 +55637,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -57647,87 +55899,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -57754,47 +55925,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -57803,9 +55985,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -57814,6 +55993,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/37-internal-service-changed-name-and-annotations-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -58011,7 +56195,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.change-name.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -58104,7 +56287,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -58697,7 +56885,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -58744,7 +56932,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -58785,9 +56973,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -58821,7 +57034,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -59110,87 +57323,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://change-name.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -59217,47 +57349,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -59266,9 +57409,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -59277,6 +57417,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/38-post-install-upgrade-merges-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -59473,7 +57618,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -59566,7 +57710,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -60162,7 +58311,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -60209,7 +58358,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -60250,9 +58399,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -60291,7 +58465,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -60549,102 +58723,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: topology.kubernetes.io/zone - operator: In - values: - - antarctica-east1 - - antarctica-west1 - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 1000 - runAsUser: 1000 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: - - effect: NoSchedule - key: example-key - operator: Exists - - effect: NoExecute - key: example-key-2 - operator: Exists - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -60680,34 +58758,17 @@ spec: values: - arctic-east1 - arctic-west1 + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: limits: @@ -60718,13 +58779,41 @@ spec: runAsGroup: 1000 runAsUser: 2000 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -60739,9 +58828,6 @@ spec: key: example-key-2 operator: Exists volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -60750,6 +58836,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/38-post-install-upgrade-no-overrides-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -60946,7 +59037,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -61039,7 +59129,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -61635,7 +59730,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -61682,7 +59777,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -61723,9 +59818,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -61764,7 +59884,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -62022,102 +60142,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: topology.kubernetes.io/zone - operator: In - values: - - antarctica-east1 - - antarctica-west1 - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 1000 - runAsUser: 1000 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: - - effect: NoSchedule - key: example-key - operator: Exists - - effect: NoExecute - key: example-key-2 - operator: Exists - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -62153,34 +60177,17 @@ spec: values: - antarctica-east1 - antarctica-west1 + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: limits: @@ -62193,13 +60200,41 @@ spec: runAsGroup: 1000 runAsUser: 1000 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -62214,9 +60249,6 @@ spec: key: example-key-2 operator: Exists volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -62225,6 +60257,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/39-default-image-pull-secrets-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -62421,7 +60458,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -62514,7 +60550,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -63101,7 +61142,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -63150,7 +61191,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -63191,9 +61232,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -63226,7 +61292,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -63484,89 +61550,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: - - name: secret-1 - - name: secret-2 - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -63593,49 +61576,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: - name: secret-1 - name: secret-2 + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -63644,9 +61638,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -63655,6 +61646,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/40-empty-string-tls-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -63835,7 +61831,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9092}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -63874,7 +61869,12 @@ type: Opaque apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -64312,7 +62312,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -64363,7 +62363,7 @@ spec: - mountPath: /etc/tls/certs/kafka-internal-0 name: redpanda-kafka-internal-0-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -64406,9 +62406,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -64445,7 +62470,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -64797,93 +62822,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 5368709120 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - http://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.2.2 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - - mountPath: /etc/tls/certs/kafka-internal-0 - name: redpanda-kafka-internal-0-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert - - name: redpanda-kafka-internal-0-cert - secret: - defaultMode: 288 - secretName: redpanda-kafka-internal-0-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -64910,49 +62848,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.2.2 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/tls/certs/kafka-internal-0 name: redpanda-kafka-internal-0-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -64961,9 +62910,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -64976,6 +62922,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-kafka-internal-0-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/41-external-issuers-novalues.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -65172,7 +63123,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -65265,7 +63215,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -65852,7 +63807,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -65899,7 +63854,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -65940,9 +63895,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -65975,7 +63955,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -66177,87 +64157,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -66284,47 +64183,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -66333,9 +64243,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -66344,6 +64251,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/96-audit-logging-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -66699,7 +64611,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -66809,8 +64720,13 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: true + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false cluster_id: cluster-id-test compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: true kafka_connection_rate_limit: 1000 @@ -67463,7 +65379,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -67525,7 +65441,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -67578,9 +65494,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -67616,7 +65557,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -67874,102 +65815,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: - - name: RPK_PASS - valueFrom: - secretKeyRef: - key: password - name: redpanda-bootstrap-user - - name: RPK_USER - value: kubernetes-controller - - name: RPK_SASL_MECHANISM - value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/secrets/users - name: users - readOnly: true - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert - - name: users - secret: - secretName: redpanda-users ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -67996,32 +65841,15 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_LICENSE} @@ -68034,15 +65862,15 @@ spec: value: kubernetes-controller - name: RPK_SASL_MECHANISM value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - name: RP_BOOTSTRAP_USER + value: $(RPK_USER):$(RPK_PASS):$(RPK_SASL_MECHANISM) + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/secrets/users name: users readOnly: true @@ -68050,7 +65878,37 @@ spec: name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -68059,9 +65917,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -68073,6 +65928,11 @@ spec: - name: users secret: secretName: redpanda-users + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/97-license-key-values.yaml.tpl.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -68308,7 +66168,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -68401,7 +66260,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -69004,7 +66868,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -69051,7 +66915,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -69092,9 +66956,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -69127,7 +67016,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -69385,87 +67274,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -69492,49 +67300,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ${REDPANDA_LICENSE} - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -69543,9 +67362,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -69554,6 +67370,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/98-license-secret-values.yaml.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -69750,7 +67571,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -69843,7 +67663,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -70435,7 +68260,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -70482,7 +68307,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -70523,9 +68348,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -70558,7 +68408,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -70816,87 +68666,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -70923,52 +68692,63 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE valueFrom: secretKeyRef: key: license-key name: redpanda-license - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -70977,9 +68757,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -70988,6 +68765,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/99-none-existent-config-options-with-empty-values.yaml.yaml.golden -- --- # Source: redpanda/templates/poddisruptionbudget.yaml @@ -72673,7 +70455,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -72766,7 +70547,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -73354,7 +71140,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -73401,7 +71187,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -73442,9 +71228,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -73477,7 +71288,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -73735,88 +71546,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - allowPrivilegeEscalation: false - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -73843,34 +71572,17 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: @@ -73878,13 +71590,41 @@ spec: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -73893,9 +71633,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -73904,6 +71641,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/allowprivilegeescalation-regression.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -74100,7 +71842,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -74193,7 +71934,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -74781,7 +72527,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -74828,7 +72574,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -74869,9 +72615,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -74904,7 +72675,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -75162,88 +72933,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - allowPrivilegeEscalation: false - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -75270,34 +72959,17 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: @@ -75305,13 +72977,41 @@ spec: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -75320,9 +73020,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -75331,6 +73028,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/app-protocol-regression.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -75527,7 +73229,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -75620,7 +73321,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -76207,7 +73913,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -76254,7 +73960,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -76295,9 +74001,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -76330,7 +74061,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -76588,87 +74319,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -76695,47 +74345,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -76744,9 +74405,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -76755,6 +74413,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-sasl-mechanism-regression.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -77074,7 +74737,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -77184,7 +74846,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: true kafka_connection_rate_limit: 1000 @@ -77811,7 +75478,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -77873,7 +75540,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -77926,9 +75593,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -77964,7 +75656,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -78222,102 +75914,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: - - name: RPK_PASS - valueFrom: - secretKeyRef: - key: password - name: redpanda-bootstrap-user - - name: RPK_USER - value: kubernetes-controller - - name: RPK_SASL_MECHANISM - value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/secrets/users - name: users - readOnly: true - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert - - name: users - secret: - secretName: redpanda-users ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -78344,32 +75940,15 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: RPK_PASS valueFrom: @@ -78380,15 +75959,15 @@ spec: value: kubernetes-controller - name: RPK_SASL_MECHANISM value: SCRAM-SHA-256 - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + - name: RP_BOOTSTRAP_USER + value: $(RPK_USER):$(RPK_PASS):$(RPK_SASL_MECHANISM) + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/secrets/users name: users readOnly: true @@ -78396,7 +75975,37 @@ spec: name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -78405,9 +76014,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -78419,6 +76025,11 @@ spec: - name: users secret: secretName: redpanda-users + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v22.1.0-0.yaml.golden -- execution error at (redpanda/templates/entry-point.yaml:17:4): Error: The Redpanda version (22.1.0) is no longer supported To accept this risk, run the upgrade again adding `--force=true` @@ -78639,7 +76250,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -78731,7 +76341,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -79319,7 +76934,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -79366,7 +76981,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -79407,9 +77022,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -79442,7 +77082,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -79700,80 +77340,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v22.3.14 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -79800,47 +77366,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v22.3.14 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -79849,9 +77426,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -79860,6 +77434,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v22.3.14-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -80095,7 +77674,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -80187,7 +77765,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -80790,7 +78373,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -80837,7 +78420,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -80878,9 +78461,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -80913,7 +78521,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -81171,80 +78779,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v22.3.14 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -81271,49 +78805,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: docker.redpanda.com/redpandadata/redpanda:v22.3.14 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -81322,9 +78867,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -81333,6 +78875,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v22.3.14-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -81529,7 +79076,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -81627,7 +79173,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -82214,7 +79765,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -82261,7 +79812,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -82302,9 +79853,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -82337,7 +79913,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -82595,80 +80171,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v22.3.14 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -82695,47 +80197,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v22.3.14 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -82744,9 +80257,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -82755,6 +80265,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v22.4.0-0.yaml.golden -- execution error at (redpanda/templates/entry-point.yaml:17:4): Redpanda version v22.4.0 does not support TLS on the RPC port. Please upgrade. See technical service bulletin 2023-01. -- testdata/TestTemplate/default-v22.4.0-1.yaml.golden -- @@ -82963,7 +80478,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -83055,7 +80569,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -83643,7 +81162,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -83690,7 +81209,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -83731,9 +81250,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -83766,7 +81310,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -84024,80 +81568,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.2 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -84124,47 +81594,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.2 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -84173,9 +81654,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -84184,6 +81662,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.1.2-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -84419,7 +81902,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -84511,7 +81993,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -85114,7 +82601,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -85161,7 +82648,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -85202,9 +82689,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -85237,7 +82749,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -85495,80 +83007,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.2 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -85595,49 +83033,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: docker.redpanda.com/redpandadata/redpanda:v23.1.2 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -85646,9 +83095,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -85657,6 +83103,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.1.2-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -85853,7 +83304,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -85951,7 +83401,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -86538,7 +83993,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -86585,7 +84040,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -86626,9 +84081,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -86661,7 +84141,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -86919,80 +84399,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.2 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -87019,47 +84425,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.2 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -87068,9 +84485,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -87079,6 +84493,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.1.3-0.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -87275,7 +84694,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -87367,7 +84785,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -87955,7 +85378,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -88002,7 +85425,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -88043,9 +85466,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -88078,7 +85526,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -88336,80 +85784,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.3 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -88436,47 +85810,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.3 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -88485,9 +85870,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -88496,6 +85878,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.1.3-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -88731,7 +86118,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -88823,7 +86209,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -89426,7 +86817,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -89473,7 +86864,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -89514,9 +86905,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -89549,7 +86965,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -89807,80 +87223,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.3 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -89907,49 +87249,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: docker.redpanda.com/redpandadata/redpanda:v23.1.3 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -89958,9 +87311,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -89969,6 +87319,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.1.3-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -90165,7 +87520,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -90263,7 +87617,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -90850,7 +88209,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -90897,7 +88256,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -90938,9 +88297,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -90973,7 +88357,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -91231,80 +88615,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.3 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -91331,47 +88641,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.1.3 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -91380,9 +88701,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -91391,6 +88709,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.2.1-0.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -91587,7 +88910,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -91679,7 +89001,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -92267,7 +89594,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -92314,7 +89641,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -92355,9 +89682,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -92390,7 +89742,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -92648,87 +90000,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.2.1 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -92755,47 +90026,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.2.1 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -92804,9 +90086,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -92815,6 +90094,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.2.1-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -93050,7 +90334,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -93142,7 +90425,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -93745,7 +91033,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -93792,7 +91080,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -93833,9 +91121,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -93868,7 +91181,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -94126,87 +91439,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.2.1 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -94233,49 +91465,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: docker.redpanda.com/redpandadata/redpanda:v23.2.1 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -94284,9 +91527,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -94295,6 +91535,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.2.1-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -94491,7 +91736,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -94589,7 +91833,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -95176,7 +92425,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -95223,7 +92472,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -95264,9 +92513,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -95299,7 +92573,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -95557,87 +92831,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.2.1 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -95664,47 +92857,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.2.1 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -95713,9 +92917,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -95724,6 +92925,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.3.0-0.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -95920,7 +93126,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -96013,7 +93218,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -96601,7 +93811,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -96648,7 +93858,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -96689,9 +93899,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -96724,7 +93959,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -96982,87 +94217,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.3.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -97089,47 +94243,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.3.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -97138,9 +94303,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -97149,6 +94311,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.3.0-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -97384,7 +94551,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -97477,7 +94643,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -98080,7 +95251,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -98127,7 +95298,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -98168,9 +95339,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -98203,7 +95399,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -98461,87 +95657,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.3.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -98568,49 +95683,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: docker.redpanda.com/redpandadata/redpanda:v23.3.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -98619,9 +95745,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -98630,6 +95753,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v23.3.0-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -98826,7 +95954,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -98925,7 +96052,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -99512,7 +96644,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -99559,7 +96691,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -99600,9 +96732,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -99635,7 +96792,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -99893,87 +97050,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.3.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -100000,47 +97076,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v23.3.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -100049,9 +97136,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -100060,6 +97144,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v24.1.0-0.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -100256,7 +97345,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -100349,7 +97437,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -100937,7 +98030,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -100984,7 +98077,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -101025,9 +98118,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -101060,7 +98178,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -101318,87 +98436,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.1.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -101425,47 +98462,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.1.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -101474,9 +98522,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -101485,6 +98530,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v24.1.0-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -101720,7 +98770,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -101813,7 +98862,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -102416,7 +99470,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -102463,7 +99517,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -102504,9 +99558,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -102539,7 +99618,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -102797,87 +99876,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.1.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -102904,49 +99902,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: docker.redpanda.com/redpandadata/redpanda:v24.1.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -102955,9 +99964,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -102966,6 +99972,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/default-v24.1.0-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -103162,7 +100173,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -103261,7 +100271,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -103848,7 +100863,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -103895,7 +100910,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -103936,9 +100951,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -103971,7 +101011,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -104229,87 +101269,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.1.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -104336,47 +101295,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.1.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -104385,9 +101355,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -104396,6 +101363,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/disable-cert-manager-overriding-defaults.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -104592,7 +101564,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -104685,7 +101656,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -105272,7 +102248,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -105319,7 +102295,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -105360,9 +102336,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -105395,7 +102396,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -105459,87 +102460,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: some-secret - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: some-other-secret ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -105566,47 +102486,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -105615,9 +102546,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -105626,6 +102554,11 @@ spec: secret: defaultMode: 288 secretName: some-other-secret + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/disable-cert-manger-fully-specified.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -105822,7 +102755,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -105915,7 +102847,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -106484,7 +103421,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -106531,7 +103468,7 @@ spec: - mountPath: /etc/tls/certs/for-internal name: redpanda-for-internal-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -106572,9 +103509,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -106607,7 +103569,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -106671,87 +103633,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/for-external - name: redpanda-for-external-cert - - mountPath: /etc/tls/certs/for-internal - name: redpanda-for-internal-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-for-external-cert - secret: - defaultMode: 288 - secretName: some-other-secret - - name: redpanda-for-internal-cert - secret: - defaultMode: 288 - secretName: some-secret ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -106778,47 +103659,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/for-external name: redpanda-for-external-cert - mountPath: /etc/tls/certs/for-internal name: redpanda-for-internal-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -106827,9 +103719,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-for-external-cert secret: defaultMode: 288 @@ -106838,6 +103727,11 @@ spec: secret: defaultMode: 288 secretName: some-secret + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/enable-connectors.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -107034,7 +103928,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -107144,7 +104037,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -107927,7 +104825,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -107974,7 +104872,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -108015,9 +104913,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -108050,7 +104973,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -108441,87 +105364,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -108548,47 +105390,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -108597,9 +105450,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -108608,6 +105458,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/internal-trust-stores.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -108804,7 +105659,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -108923,7 +105777,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -109574,7 +106433,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -109624,7 +106483,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -109665,9 +106524,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -109700,7 +106584,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -109992,87 +106876,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -110099,47 +106902,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -110148,9 +106962,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -110159,6 +106970,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/mtls-client-regression.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -110355,7 +107171,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -110448,7 +107263,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -111046,7 +107866,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -111097,7 +107917,7 @@ spec: - mountPath: /etc/tls/certs/kafka-internal-0 name: redpanda-kafka-internal-0-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -111140,9 +107960,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -111179,7 +108024,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -111559,93 +108404,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - - mountPath: /etc/tls/certs/kafka-internal-0 - name: redpanda-kafka-internal-0-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert - - name: redpanda-kafka-internal-0-cert - secret: - defaultMode: 288 - secretName: redpanda-kafka-internal-0-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -111672,49 +108430,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/tls/certs/kafka-internal-0 name: redpanda-kafka-internal-0-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -111723,9 +108492,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -111738,6 +108504,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-kafka-internal-0-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/node-config-boolean-type-regression.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -111934,7 +108705,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -112027,7 +108797,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -112614,7 +109389,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -112661,7 +109436,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -112702,9 +109477,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -112737,7 +109537,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -112995,87 +109795,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -113102,47 +109821,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -113151,9 +109881,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -113162,6 +109889,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/service-monitor-with-tls-in-admin-api.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -113358,7 +110090,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -113451,7 +110182,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -114038,7 +110774,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -114085,7 +110821,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -114126,9 +110862,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -114161,7 +110922,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -114450,87 +111211,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -114557,47 +111237,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -114606,9 +111297,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -114617,6 +111305,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/service-monitor-without-tls-in-admin-api.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -114813,7 +111506,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -114906,7 +111598,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -115471,7 +112168,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -115518,7 +112215,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -115559,9 +112256,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -115594,7 +112316,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -115879,87 +112601,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - http://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -115986,47 +112627,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -116035,9 +112687,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -116046,6 +112695,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/somecustomrepo-v23.2.8-0.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -116242,7 +112896,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -116334,7 +112987,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -116922,7 +113580,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -116969,7 +113627,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -117010,9 +113668,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -117045,7 +113728,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -117303,87 +113986,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: somecustomrepo:v23.2.8 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -117410,47 +114012,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: somecustomrepo:v23.2.8 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -117459,9 +114072,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -117470,6 +114080,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/somecustomrepo-v23.2.8-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -117705,7 +114320,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -117797,7 +114411,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -118400,7 +115019,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -118447,7 +115066,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -118488,9 +115107,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -118523,7 +115167,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -118781,87 +115425,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: somecustomrepo:v23.2.8 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -118888,49 +115451,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: somecustomrepo:v23.2.8 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -118939,9 +115513,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -118950,6 +115521,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/somecustomrepo-v23.2.8-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -119146,7 +115722,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -119244,7 +115819,12 @@ metadata: apiVersion: v1 data: bootstrap.yaml: |- + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -119831,7 +116411,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -119878,7 +116458,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -119919,9 +116499,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -119954,7 +116559,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -120212,87 +116817,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: somecustomrepo:v23.2.8 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -120319,47 +116843,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: somecustomrepo:v23.2.8 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -120368,9 +116903,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -120379,6 +116911,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/somecustomrepo-v24.1.0-0.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -120575,7 +117112,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -120668,7 +117204,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_batch_max_bytes: 7777 @@ -121256,7 +117797,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -121303,7 +117844,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -121344,9 +117885,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -121379,7 +117945,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -121637,87 +118203,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: somecustomrepo:v24.1.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -121744,47 +118229,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: somecustomrepo:v24.1.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -121793,9 +118289,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -121804,6 +118297,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/somecustomrepo-v24.1.0-1.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -122039,7 +118537,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -122132,7 +118629,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -122735,7 +119237,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -122782,7 +119284,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -122823,9 +119325,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -122858,7 +119385,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -123116,87 +119643,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: somecustomrepo:v24.1.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -123223,49 +119669,60 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: - name: REDPANDA_LICENSE value: ATOTALLYVALIDLICENSE - image: somecustomrepo:v24.1.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -123274,9 +119731,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -123285,6 +119739,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/somecustomrepo-v24.1.0-2.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -123481,7 +119940,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -123580,7 +120038,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: true enable_sasl: false kafka_connection_rate_limit: 1000 @@ -124167,7 +120630,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -124214,7 +120677,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -124255,9 +120718,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -124290,7 +120778,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -124548,87 +121036,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: somecustomrepo:v24.1.0 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -124655,47 +121062,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: somecustomrepo:v24.1.0 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -124704,9 +121122,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -124715,6 +121130,11 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config -- testdata/TestTemplate/trust-stores-ca-enabled.yaml.golden -- --- # Source: redpanda/templates/entry-point.yaml @@ -124911,7 +121331,6 @@ stringData: # Setup config files cp /tmp/base-config/redpanda.yaml "${CONFIG}" - cp /tmp/base-config/bootstrap.yaml /etc/redpanda/.bootstrap.yaml LISTENER="{\"address\":\"${SERVICE_NAME}.redpanda.default.svc.cluster.local.\",\"name\":\"internal\",\"port\":9093}" rpk redpanda config --config "$CONFIG" set redpanda.advertised_kafka_api[0] "$LISTENER" @@ -125004,7 +121423,12 @@ apiVersion: v1 data: bootstrap.yaml: |- audit_enabled: false + cloud_storage_cache_size: 5368709120 + cloud_storage_enable_remote_read: true + cloud_storage_enable_remote_write: true + cloud_storage_enabled: false compacted_log_segment_size: 67108864 + default_topic_replications: 3 enable_rack_awareness: false enable_sasl: false kafka_connection_rate_limit: 1000 @@ -125591,7 +122015,7 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /var/lifecycle name: lifecycle-scripts - mountPath: /var/lib/redpanda/data @@ -125638,7 +122062,7 @@ spec: - mountPath: /etc/tls/certs/external name: redpanda-external-cert - mountPath: /etc/redpanda - name: redpanda + name: base-config - command: - /bin/bash - -c @@ -125679,9 +122103,34 @@ spec: - mountPath: /etc/redpanda name: config - mountPath: /tmp/base-config - name: redpanda + name: base-config - mountPath: /etc/secrets/configurator/scripts/ name: redpanda-configurator + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} priorityClassName: "" securityContext: @@ -125714,7 +122163,7 @@ spec: secretName: redpanda-sts-lifecycle - configMap: name: redpanda - name: redpanda + name: base-config - emptyDir: {} name: config - name: redpanda-configurator @@ -125972,87 +122421,6 @@ spec: # Source: redpanda/templates/entry-point.yaml apiVersion: batch/v1 kind: Job -metadata: - annotations: - helm.sh/hook: post-upgrade - helm.sh/hook-delete-policy: before-hook-creation - helm.sh/hook-weight: "-10" - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda - app.kubernetes.io/instance: redpanda - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/name: redpanda - helm.sh/chart: redpanda-5.9.5 - name: redpanda-post-upgrade - namespace: default -spec: - backoffLimit: null - template: - metadata: - annotations: {} - creationTimestamp: null - labels: - app.kubernetes.io/component: redpanda-post-upgrade - app.kubernetes.io/instance: redpanda - app.kubernetes.io/name: redpanda - name: redpanda - spec: - affinity: {} - containers: - - args: - - | - set -e - - rpk cluster config set default_topic_replications 3 - rpk cluster config set storage_min_free_bytes 1073741824 - if [ -d "/etc/secrets/users/" ]; then - IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print)) - curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \ - --cacert "/etc/tls/certs/default/ca.crt" \ - -X PUT -u ${USER_NAME}:${PASSWORD} \ - https://redpanda.default.svc.cluster.local.:9644/v1/debug/restart_service?service=schema-registry || true - fi - command: - - /bin/bash - - -c - env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 - name: post-upgrade - securityContext: - runAsGroup: 101 - runAsUser: 101 - volumeMounts: - - mountPath: /etc/redpanda - name: config - - mountPath: /etc/tls/certs/default - name: redpanda-default-cert - - mountPath: /etc/tls/certs/external - name: redpanda-external-cert - imagePullSecrets: null - nodeSelector: {} - restartPolicy: Never - securityContext: - fsGroup: 101 - fsGroupChangePolicy: OnRootMismatch - serviceAccountName: default - tolerations: [] - volumes: - - configMap: - name: redpanda - name: config - - name: redpanda-default-cert - secret: - defaultMode: 288 - secretName: redpanda-default-cert - - name: redpanda-external-cert - secret: - defaultMode: 288 - secretName: redpanda-external-cert ---- -# Source: redpanda/templates/entry-point.yaml -apiVersion: batch/v1 -kind: Job metadata: annotations: helm.sh/hook: post-install,post-upgrade @@ -126079,47 +122447,58 @@ spec: app.kubernetes.io/name: redpanda spec: affinity: {} + automountServiceAccountToken: false containers: - - args: - - | - set -e - if [[ -n "$REDPANDA_LICENSE" ]] then - rpk cluster license set "$REDPANDA_LICENSE" - fi - - - - - rpk cluster config export -f /tmp/cfg.yml - - - for KEY in "${!RPK_@}"; do - if ! [[ "$KEY" =~ ^(RPK_USER|RPK_PASS|RPK_SASL_MECHANISM)$ ]]; then - config="${KEY#*RPK_}" - rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}" - fi - done - - - rpk cluster config import -f /tmp/cfg.yml - command: - - bash - - -c + - command: + - /redpanda-operator + - sync-cluster-config + - --redpanda-yaml + - /tmp/base-config/redpanda.yaml + - --bootstrap-yaml + - /tmp/config/.bootstrap.yaml env: [] - image: docker.redpanda.com/redpandadata/redpanda:v24.2.5 + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 name: post-install resources: {} securityContext: runAsGroup: 101 runAsUser: 101 volumeMounts: - - mountPath: /etc/redpanda - name: config - mountPath: /etc/tls/certs/default name: redpanda-default-cert - mountPath: /etc/tls/certs/external name: redpanda-external-cert + - mountPath: /tmp/config + name: config + - mountPath: /tmp/base-config + name: base-config imagePullSecrets: null + initContainers: + - command: + - /redpanda-operator + - envsubst + - /tmp/base-config/bootstrap.yaml + - --output + - /tmp/config/.bootstrap.yaml + env: null + image: docker.redpanda.com/redpandadata/redpanda-operator:v2.2.4-24.2.5 + name: bootstrap-yaml-envsubst + resources: + limits: + cpu: 100m + memory: 25Mi + requests: + cpu: 100m + memory: 25Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/config/ + name: config + - mountPath: /tmp/base-config/ + name: base-config nodeSelector: {} restartPolicy: Never securityContext: @@ -126128,9 +122507,6 @@ spec: serviceAccountName: default tolerations: null volumes: - - configMap: - name: redpanda - name: config - name: redpanda-default-cert secret: defaultMode: 288 @@ -126139,3 +122515,8 @@ spec: secret: defaultMode: 288 secretName: redpanda-external-cert + - configMap: + name: redpanda + name: base-config + - emptyDir: {} + name: config diff --git a/charts/redpanda/testdata/template-cases.txtar b/charts/redpanda/testdata/template-cases.txtar index cca3e01079..50dea421c0 100644 --- a/charts/redpanda/testdata/template-cases.txtar +++ b/charts/redpanda/testdata/template-cases.txtar @@ -279,29 +279,6 @@ post_install_job: securityContext: privileged: true -# Showcase that most fields of the post_upgrade_job's PodSpec may be overridden. -# ASSERT-FIELD-EQUALS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.spec.securityContext.fsGroup}", 5678] -# ASSERT-FIELD-EQUALS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.spec.containers[*].securityContext.privileged}", false] -# ASSERT-FIELD-EQUALS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.metadata.labels.label}", "post-upgrade"] -# ASSERT-FIELD-EQUALS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.metadata.annotations.anno}", "post-upgrade"] -# ASSERT-FIELD-EQUALS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.spec.containers[*].env[?(@.name==\"HELLO\")].value}", "HELM"] -post_upgrade_job: - podTemplate: - labels: - label: post-upgrade - annotations: - anno: post-upgrade - spec: - securityContext: - fsGroup: 5678 - containers: - - name: post-upgrade - env: - - name: "HELLO" - value: "HELM" - securityContext: - privileged: false - -- app-protocol-regression -- # Regression test for admin.appProtocol # ASSERT-NO-ERROR @@ -358,7 +335,7 @@ listeners: -- explicit-default-topic-replications -- # Regression test for #1501. Respect default_topic_replicas if it's explicitly set. -# ASSERT-FIELD-CONTAINS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.spec.containers[0].args[0]}", "default_topic_replications 25"] +# ASSERT-FIELD-CONTAINS ["v1/ConfigMap", "default/redpanda", "{.data.bootstrap\\.yaml}", "default_topic_replications: 25"] statefulset: replicas: 1 @@ -369,14 +346,14 @@ config: -- implicit-default-topic-replications -- # Regression test for #1501. -# ASSERT-FIELD-CONTAINS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.spec.containers[0].args[0]}", "default_topic_replications 3"] +# ASSERT-FIELD-CONTAINS ["v1/ConfigMap", "default/redpanda", "{.data.bootstrap\\.yaml}", "default_topic_replications: 3"] statefulset: replicas: 10 -- implicit-single-broker-default-topic-replications -- # Regression test for #1501. When replicas < 3 no default value is injected. -# ASSERT-FIELD-NOT-CONTAINS ["batch/v1/Job", "default/redpanda-post-upgrade", "{.spec.template.spec.containers[0].args[0]}", "default_topic_replications"] +# ASSERT-FIELD-NOT-CONTAINS ["v1/ConfigMap", "default/redpanda", "{.data.bootstrap\\.yaml}", "default_topic_replications"] statefulset: replicas: 1 diff --git a/charts/redpanda/values.go b/charts/redpanda/values.go index b3ef14eaf0..df05d7b190 100644 --- a/charts/redpanda/values.go +++ b/charts/redpanda/values.go @@ -377,8 +377,8 @@ func (rr *RedpandaResources) GetOverProvisionValue() bool { } type Storage struct { - HostPath string `json:"hostPath" jsonschema:"required"` - Tiered *Tiered `json:"tiered" jsonschema:"required"` + HostPath string `json:"hostPath" jsonschema:"required"` + Tiered Tiered `json:"tiered" jsonschema:"required"` PersistentVolume *struct { Annotations map[string]string `json:"annotations" jsonschema:"required"` Enabled bool `json:"enabled" jsonschema:"required"` @@ -415,7 +415,7 @@ func (s *Storage) GetTieredStorageConfig() TieredStorageConfig { // was: storage-tiered-hostpath func (s *Storage) GetTieredStorageHostPath() string { hp := s.TieredStorageHostPath - if helmette.Empty(hp) && s.Tiered != nil { + if helmette.Empty(hp) { hp = s.Tiered.HostPath } if helmette.Empty(hp) { @@ -426,14 +426,6 @@ func (s *Storage) GetTieredStorageHostPath() string { return hp } -func (s *Storage) CloudStorageCacheSize() *resource.Quantity { - value, ok := s.GetTieredStorageConfig()[`cloud_storage_cache_size`] - if !ok { - return nil - } - return ptr.To(helmette.UnmarshalInto[resource.Quantity](value)) -} - // TieredCacheDirectory was: tieredStorage.cacheDirectory func (s *Storage) TieredCacheDirectory(dot *helmette.Dot) string { values := helmette.Unwrap[Values](dot.Values) @@ -473,10 +465,7 @@ func (s *Storage) TieredPersistentVolumeLabels() map[string]string { if s.TieredStoragePersistentVolume != nil { return s.TieredStoragePersistentVolume.Labels } - if s.Tiered != nil { - return s.Tiered.PersistentVolume.Labels - } - panic(`storage.tiered.mountType is "persistentVolume" but storage.tiered.persistentVolume is not configured`) + return s.Tiered.PersistentVolume.Labels } // Storage.TieredPersistentVolumeAnnotations was storage-tiered-persistentVolume.annotations @@ -485,10 +474,7 @@ func (s *Storage) TieredPersistentVolumeAnnotations() map[string]string { if s.TieredStoragePersistentVolume != nil { return s.TieredStoragePersistentVolume.Annotations } - if s.Tiered != nil { - return s.Tiered.PersistentVolume.Annotations - } - panic(`storage.tiered.mountType is "persistentVolume" but storage.tiered.persistentVolume is not configured`) + return s.Tiered.PersistentVolume.Annotations } // storage.TieredPersistentVolumeStorageClass was storage-tiered-persistentVolume.storageClass @@ -497,10 +483,7 @@ func (s *Storage) TieredPersistentVolumeStorageClass() string { if s.TieredStoragePersistentVolume != nil { return s.TieredStoragePersistentVolume.StorageClass } - if s.Tiered != nil { - return s.Tiered.PersistentVolume.StorageClass - } - panic(`storage.tiered.mountType is "persistentVolume" but storage.tiered.persistentVolume is not configured`) + return s.Tiered.PersistentVolume.StorageClass } // +gotohelm:ignore=true @@ -512,38 +495,6 @@ func (Storage) JSONSchemaExtend(schema *jsonschema.Schema) { tieredConfig.Required = []string{} } -func (s *Storage) Translate() map[string]any { - result := map[string]any{} - - if !s.IsTieredStorageEnabled() { - return result - } - - tieredStorageConfig := s.GetTieredStorageConfig() - for k, v := range tieredStorageConfig { - if v == nil || helmette.Empty(v) { - continue - } - - if k == "cloud_storage_cache_size" { - result[k] = fmt.Sprintf("%d", helmette.UnmarshalInto[*resource.Quantity](v).Value()) - continue - } - - if str, ok := v.(string); ok { - result[k] = str - } else if b, ok := v.(bool); ok { - result[k] = b - } else if f, isFloat := helmette.AsNumeric(v); isFloat { - result[k] = int(f) - } else { - result[k] = helmette.MustToJSON(v) - } - } - - return result -} - func (s *Storage) StorageMinFreeBytes() int64 { if s.PersistentVolume != nil && !s.PersistentVolume.Enabled { // Five GiB literal @@ -1763,11 +1714,21 @@ func (c *ClusterConfig) Translate() map[string]any { } type SecretRef struct { + // ConfigurationKey is never read. ConfigurationKey string `json:"configurationKey"` Key string `json:"key"` Name string `json:"name"` } +func (sr *SecretRef) AsSource() *corev1.EnvVarSource { + return &corev1.EnvVarSource{ + SecretKeyRef: &corev1.SecretKeySelector{ + LocalObjectReference: corev1.LocalObjectReference{Name: sr.Name}, + Key: sr.Key, + }, + } +} + // IsValid confirms whether EnvVarSource could be built from // SecretRef. func (sr *SecretRef) IsValid() bool { @@ -1775,27 +1736,96 @@ func (sr *SecretRef) IsValid() bool { } type TieredStorageCredentials struct { - ConfigurationKey string `json:"configurationKey" jsonschema:"deprecated"` - Key string `json:"key" jsonschema:"deprecated"` - Name string `json:"name" jsonschema:"deprecated"` - AccessKey *SecretRef `json:"accessKey"` - SecretKey *SecretRef `json:"secretKey"` -} + // ConfigurationKey string `json:"configurationKey" jsonschema:"deprecated"` + // Key string `json:"key" jsonschema:"deprecated"` + // Name string `json:"name" jsonschema:"deprecated"` + AccessKey *SecretRef `json:"accessKey"` + SecretKey *SecretRef `json:"secretKey"` +} + +func (tsc *TieredStorageCredentials) AsEnvVars(config TieredStorageConfig) []corev1.EnvVar { + // Environment variables will only respected if their corresponding keys + // are not explicitly set. This is historical behavior and is largely an + // implementation details than an explicitly choice. + _, hasAccessKey := config["cloud_storage_access_key"] + _, hasSecretKey := config["cloud_storage_secret_key"] + _, hasSharedKey := config["cloud_storage_azure_shared_key"] + + var envvars []corev1.EnvVar + + if !hasAccessKey && tsc.AccessKey.IsValid() { + envvars = append(envvars, corev1.EnvVar{ + Name: "REDPANDA_CLOUD_STORAGE_ACCESS_KEY", + ValueFrom: tsc.AccessKey.AsSource(), + }) + } -func (tsc *TieredStorageCredentials) IsAccessKeyReferenceValid() bool { - return tsc.AccessKey != nil && tsc.AccessKey.Name != "" && tsc.AccessKey.Key != "" + if tsc.SecretKey.IsValid() { + if !hasSecretKey && !config.HasAzureCanaries() { + envvars = append(envvars, corev1.EnvVar{ + Name: "REDPANDA_CLOUD_STORAGE_SECRET_KEY", + ValueFrom: tsc.SecretKey.AsSource(), + }) + } else if !hasSharedKey && config.HasAzureCanaries() { + envvars = append(envvars, corev1.EnvVar{ + Name: "REDPANDA_CLOUD_STORAGE_AZURE_SHARED_KEY", + ValueFrom: tsc.SecretKey.AsSource(), + }) + } + } + + return envvars } -func (tsc *TieredStorageCredentials) IsSecretKeyReferenceValid() bool { - return tsc.SecretKey != nil && tsc.SecretKey.Name != "" && tsc.SecretKey.Key != "" +// // +gotohelm:ignore=true +// func (TieredStorageCredentials) JSONSchemaExtend(schema *jsonschema.Schema) { +// deprecate(schema, "configurationKey", "key", "name") +// } + +type TieredStorageConfig map[string]any + +// HasAzureCanaries returns true if this configuration has keys set that would +// indicate the configuration is for a MSFT Azure environment. +// +// If true, [TieredStorageCredentials.SecretKey] should be treated as the value +// for `cloud_storage_azure_shared_key` instead of `cloud_storage_secret_key`. +func (c TieredStorageConfig) HasAzureCanaries() bool { + _, containerExists := c["cloud_storage_azure_container"] + _, accountExists := c["cloud_storage_azure_storage_account"] + return containerExists && accountExists } -// +gotohelm:ignore=true -func (TieredStorageCredentials) JSONSchemaExtend(schema *jsonschema.Schema) { - deprecate(schema, "configurationKey", "key", "name") +func (c TieredStorageConfig) CloudStorageCacheSize() *resource.Quantity { + value, ok := c[`cloud_storage_cache_size`] + if !ok { + return nil + } + return ptr.To(helmette.UnmarshalInto[resource.Quantity](value)) } -type TieredStorageConfig map[string]any +// Translate converts TieredStorageConfig into a map suitable for use in +// an unexpanded `.bootstrap.yaml`. +func (c TieredStorageConfig) Translate(creds *TieredStorageCredentials) map[string]any { + // Clone ourselves as we're making changes. + config := helmette.Merge(map[string]any{}, c) + + // For any values that can be specified as secrets and do not have explicit + // values, inject placeholders into config which will be replaced with + // `envsubst` in an initcontainer. + for _, envvar := range creds.AsEnvVars(c) { + key := helmette.Lower(envvar.Name[len("REDPANDA_"):]) + // NB: No string + string support in gotohelm. + config[key] = fmt.Sprintf("$%s", envvar.Name) + } + + // Expand cloud_storage_cache_size, if provided, as it can be specified as + // a resource.Quantity. + if size := c.CloudStorageCacheSize(); size != nil { + config["cloud_storage_cache_size"] = size.Value() + } + + return config +} // +gotohelm:ignore=true func (TieredStorageConfig) JSONSchema() *jsonschema.Schema { diff --git a/charts/redpanda/values.schema.json b/charts/redpanda/values.schema.json index b801df1cd0..5820eecba5 100644 --- a/charts/redpanda/values.schema.json +++ b/charts/redpanda/values.schema.json @@ -966,7 +966,6 @@ "tag": { "default": "Chart.appVersion", "description": "The container image tag. Use the Redpanda release version. Must be a valid semver prefixed with a 'v'.", - "pattern": "^v(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$|^$", "type": "string" } }, @@ -5080,7 +5079,6 @@ }, "tag": { "default": "Chart.appVersion", - "pattern": "^v(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$|^$", "type": "string" } }, @@ -5498,18 +5496,6 @@ }, "type": "object" }, - "configurationKey": { - "deprecated": true, - "type": "string" - }, - "key": { - "deprecated": true, - "type": "string" - }, - "name": { - "deprecated": true, - "type": "string" - }, "secretKey": { "properties": { "configurationKey": { diff --git a/charts/redpanda/values.yaml b/charts/redpanda/values.yaml index d462784093..3a9287d140 100644 --- a/charts/redpanda/values.yaml +++ b/charts/redpanda/values.yaml @@ -568,53 +568,6 @@ post_install_job: securityContext: {} env: [] -post_upgrade_job: - enabled: true - # Resource requests and limits for the post-upgrade batch job - # resources: - # requests: - # cpu: 1 - # memory: 512Mi - # limits: - # cpu: 2 - # memory: 1024Mi - # labels: {} - # annotations: {} - # Additional environment variables for the Post Upgrade Job - # extraEnv: - # - name: AWS_SECRET_ACCESS_KEY - # valueFrom: - # secretKeyRef: - # name: my-secret - # key: redpanda-aws-secret-access-key - # Additional environment variables for the Post Upgrade Job mapped from Secret or ConfigMap - # extraEnvFrom: - # - secretRef: - # name: redpanda-aws-secrets - # DEPRECATED. Please use podTemplate.securityContext - # You can set the security context as nessesary for the post-upgrade job as follows - # securityContext: - # allowPrivilegeEscalation: false - # runAsNonRoot: true - affinity: {} - # When helm upgrade is performed the post-upgrade job is scheduled before Statefulset successfully finish - # its rollout. User can extend Job default backoff limit of `6`. - # backoffLimit: - - podTemplate: - # -- Additional labels to apply to the Pods of this Job. - labels: {} - # -- Additional annotations to apply to the Pods of this Job. - annotations: {} - # -- A subset of Kubernetes' PodSpec type that will be merged into the - # final PodSpec. See [Merge Semantics](#merging-semantics) for details. - spec: - securityContext: {} - containers: - - name: post-upgrade - securityContext: {} - env: [] - statefulset: # -- Number of Redpanda brokers (Redpanda Data recommends setting this to the number of worker nodes in the cluster) replicas: 3 @@ -742,7 +695,7 @@ statefulset: # an existing node is removed. controllers: image: - tag: v2.1.10-23.2.18 + tag: v2.2.4-24.2.5 repository: docker.redpanda.com/redpandadata/redpanda-operator # You must also enable RBAC, `rbac.enabled=true`, to deploy this sidecar enabled: false diff --git a/charts/redpanda/values_partial.gen.go b/charts/redpanda/values_partial.gen.go index 76471f9c99..cbfb37c470 100644 --- a/charts/redpanda/values_partial.gen.go +++ b/charts/redpanda/values_partial.gen.go @@ -360,6 +360,21 @@ type PartialEnableable struct { Enabled *bool "json:\"enabled,omitempty\" jsonschema:\"required\"" } +type PartialTiered struct { + CredentialsSecretRef *PartialTieredStorageCredentials "json:\"credentialsSecretRef,omitempty\"" + Config PartialTieredStorageConfig "json:\"config,omitempty\"" + HostPath *string "json:\"hostPath,omitempty\"" + MountType *string "json:\"mountType,omitempty\" jsonschema:\"required,pattern=^(none|hostPath|emptyDir|persistentVolume)$\"" + PersistentVolume *struct { + Annotations map[string]string "json:\"annotations,omitempty\" jsonschema:\"required\"" + Enabled *bool "json:\"enabled,omitempty\"" + Labels map[string]string "json:\"labels,omitempty\" jsonschema:\"required\"" + NameOverwrite *string "json:\"nameOverwrite,omitempty\"" + Size *string "json:\"size,omitempty\"" + StorageClass *string "json:\"storageClass,omitempty\" jsonschema:\"required\"" + } "json:\"persistentVolume,omitempty\"" +} + type PartialTieredStorageConfig map[string]any type PartialPodTemplate struct { @@ -424,21 +439,6 @@ type PartialSASLAuth struct { BootstrapUser *PartialBootstrapUser "json:\"bootstrapUser,omitempty\"" } -type PartialTiered struct { - CredentialsSecretRef *PartialTieredStorageCredentials "json:\"credentialsSecretRef,omitempty\"" - Config PartialTieredStorageConfig "json:\"config,omitempty\"" - HostPath *string "json:\"hostPath,omitempty\"" - MountType *string "json:\"mountType,omitempty\" jsonschema:\"required,pattern=^(none|hostPath|emptyDir|persistentVolume)$\"" - PersistentVolume *struct { - Annotations map[string]string "json:\"annotations,omitempty\" jsonschema:\"required\"" - Enabled *bool "json:\"enabled,omitempty\"" - Labels map[string]string "json:\"labels,omitempty\" jsonschema:\"required\"" - NameOverwrite *string "json:\"nameOverwrite,omitempty\"" - Size *string "json:\"size,omitempty\"" - StorageClass *string "json:\"storageClass,omitempty\" jsonschema:\"required\"" - } "json:\"persistentVolume,omitempty\"" -} - type PartialInternalTLS struct { Enabled *bool "json:\"enabled,omitempty\"" Cert *string "json:\"cert,omitempty\" jsonschema:\"required\"" @@ -482,6 +482,11 @@ type PartialTLSCert struct { ClientSecretRef *corev1.LocalObjectReference "json:\"clientSecretRef,omitempty\"" } +type PartialTieredStorageCredentials struct { + AccessKey *PartialSecretRef "json:\"accessKey,omitempty\"" + SecretKey *PartialSecretRef "json:\"secretKey,omitempty\"" +} + type PartialPodSpec struct { Containers []PartialContainer "json:\"containers,omitempty\" jsonschema:\"required\"" SecurityContext *corev1.PodSecurityContext "json:\"securityContext,omitempty\"" @@ -494,14 +499,6 @@ type PartialBootstrapUser struct { Mechanism *string "json:\"mechanism,omitempty\" jsonschema:\"pattern=^(SCRAM-SHA-512|SCRAM-SHA-256)$\"" } -type PartialTieredStorageCredentials struct { - ConfigurationKey *string "json:\"configurationKey,omitempty\" jsonschema:\"deprecated\"" - Key *string "json:\"key,omitempty\" jsonschema:\"deprecated\"" - Name *string "json:\"name,omitempty\" jsonschema:\"deprecated\"" - AccessKey *PartialSecretRef "json:\"accessKey,omitempty\"" - SecretKey *PartialSecretRef "json:\"secretKey,omitempty\"" -} - type PartialExternalListeners[T any] map[string]T type PartialAdminExternal struct { @@ -552,18 +549,18 @@ type PartialTrustStore struct { SecretKeyRef *corev1.SecretKeySelector "json:\"secretKeyRef,omitempty\"" } -type PartialContainer struct { - Name *ContainerName "json:\"name,omitempty\" jsonschema:\"required\"" - SecurityContext *corev1.SecurityContext "json:\"securityContext,omitempty\"" - Env []corev1.EnvVar "json:\"env,omitempty\" jsonschema:\"required\"" -} - type PartialSecretRef struct { ConfigurationKey *string "json:\"configurationKey,omitempty\"" Key *string "json:\"key,omitempty\"" Name *string "json:\"name,omitempty\"" } +type PartialContainer struct { + Name *ContainerName "json:\"name,omitempty\" jsonschema:\"required\"" + SecurityContext *corev1.SecurityContext "json:\"securityContext,omitempty\"" + Env []corev1.EnvVar "json:\"env,omitempty\" jsonschema:\"required\"" +} + type PartialExternalTLS struct { Enabled *bool "json:\"enabled,omitempty\"" Cert *string "json:\"cert,omitempty\"" diff --git a/charts/redpanda/values_test.go b/charts/redpanda/values_test.go index 376fbaf68c..29939fa852 100644 --- a/charts/redpanda/values_test.go +++ b/charts/redpanda/values_test.go @@ -1,6 +1,7 @@ package redpanda import ( + "strings" "testing" "github.com/stretchr/testify/require" @@ -509,3 +510,102 @@ func TestListeners_TrustStoreVolumes(t *testing.T) { }) } } + +func TestTieredStorageConfigCreds(t *testing.T) { + cases := []struct { + Name string + Config TieredStorageConfig + Creds TieredStorageCredentials + Expected []corev1.EnvVar + }{ + { + Name: "azure-secrets", + Config: TieredStorageConfig{ + "cloud_storage_enabled": true, + "cloud_storage_azure_container": "fake-azure-container", + "cloud_storage_azure_storage_account": "fake-storage-account", + }, + Creds: TieredStorageCredentials{ + AccessKey: &SecretRef{}, + SecretKey: &SecretRef{ + Key: "some-key", + Name: "some-secret", + }, + }, + Expected: []corev1.EnvVar{{ + Name: "REDPANDA_CLOUD_STORAGE_AZURE_SHARED_KEY", + ValueFrom: &corev1.EnvVarSource{ + SecretKeyRef: &corev1.SecretKeySelector{ + LocalObjectReference: corev1.LocalObjectReference{Name: "some-secret"}, + Key: "some-key", + }, + }, + }}, + }, + { + Name: "standard-secrets", + Config: TieredStorageConfig{}, + Creds: TieredStorageCredentials{ + AccessKey: &SecretRef{Name: "access-secret", Key: "access-key"}, + SecretKey: &SecretRef{Name: "secret-secret", Key: "secret-key"}, + }, + Expected: []corev1.EnvVar{{ + Name: "REDPANDA_CLOUD_STORAGE_ACCESS_KEY", + ValueFrom: &corev1.EnvVarSource{ + SecretKeyRef: &corev1.SecretKeySelector{ + LocalObjectReference: corev1.LocalObjectReference{Name: "access-secret"}, + Key: "access-key", + }, + }, + }, { + Name: "REDPANDA_CLOUD_STORAGE_SECRET_KEY", + ValueFrom: &corev1.EnvVarSource{ + SecretKeyRef: &corev1.SecretKeySelector{ + LocalObjectReference: corev1.LocalObjectReference{Name: "secret-secret"}, + Key: "secret-key", + }, + }, + }}, + }, + { + Name: "explicit-precedence", + Config: TieredStorageConfig{ + "cloud_storage_access_key": "ACCESS_KEY", + "cloud_storage_azure_shared_key": "AZURE_SHARED", + "cloud_storage_azure_container": "fake-azure-container", + "cloud_storage_azure_storage_account": "fake-storage-account", + }, + Creds: TieredStorageCredentials{ + AccessKey: &SecretRef{Name: "access-secret", Key: "access-key"}, + SecretKey: &SecretRef{Name: "secret-secret", Key: "secret-key"}, + }, + }, + { + Name: "explicit-precedence-azure", + Config: TieredStorageConfig{ + "cloud_storage_access_key": "ACCESS_KEY", + "cloud_storage_secret_key": "SECRET_KEY", + }, + Creds: TieredStorageCredentials{ + AccessKey: &SecretRef{Name: "access-secret", Key: "access-key"}, + SecretKey: &SecretRef{Name: "secret-secret", Key: "secret-key"}, + }, + }, + } + + for _, tc := range cases { + t.Run(tc.Name, func(t *testing.T) { + envvars := tc.Creds.AsEnvVars(tc.Config) + clusterConfig := tc.Config.Translate(&tc.Creds) + + require.EqualValues(t, tc.Expected, envvars) + + // Assert that any envvars have corrosponding placeholders at the + // expected keys in the config. See also: [BootstrapFile]. + for _, envar := range envvars { + key := strings.ToLower(envar.Name[len("REDPANDA_"):]) + require.Equal(t, "$"+envar.Name, clusterConfig[key]) + } + }) + } +} diff --git a/charts/redpanda/values_util.go b/charts/redpanda/values_util.go index 3182df4670..40b913df62 100644 --- a/charts/redpanda/values_util.go +++ b/charts/redpanda/values_util.go @@ -23,9 +23,9 @@ func (ResourceQuantity) JSONSchema() *jsonschema.Schema { type ImageTag string -func (ImageTag) JSONSchemaExtend(schema *jsonschema.Schema) { - schema.Pattern = `^v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$|^$` -} +// func (ImageTag) JSONSchemaExtend(schema *jsonschema.Schema) { +// schema.Pattern = `^v(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$|^$` +// } type IssuerRefKind string diff --git a/pkg/lint/lint_test.go b/pkg/lint/lint_test.go index f2089e2d24..d102d4a25f 100644 --- a/pkg/lint/lint_test.go +++ b/pkg/lint/lint_test.go @@ -1,12 +1,13 @@ package lint import ( + "bytes" "fmt" "io/fs" "os" - "strings" "testing" + "github.com/redpanda-data/helm-charts/charts/redpanda" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" "sigs.k8s.io/yaml" @@ -14,6 +15,12 @@ import ( const tagURL = "https://github.com/redpanda-data/helm-charts/releases/tag/" +type ChartYAML struct { + Version string `json:"version"` + AppVersion string `json:"appVersion"` + Annotations map[string]string `json:"annotations"` +} + func TestChartYAMLVersions(t *testing.T) { chartYAMLs, err := fs.Glob(os.DirFS("../.."), "charts/*/Chart.yaml") require.NoError(t, err) @@ -37,10 +44,57 @@ func TestChartYAMLVersions(t *testing.T) { // require.True for friendlier messages. assert.Truef( t, - strings.Contains(string(changelog), releaseHeader), - "CHANGELOG.md is missing the release header for %s\nDid you forget to add it?\n%s", + bytes.Contains(changelog, []byte(releaseHeader)), + "CHANGELOG.md is missing the release header for %s %s\nDid you forget to add it?\n%s", chartName, + chartVersion, releaseHeader, ) } } + +func TestOperatorArtifactHubImages(t *testing.T) { + const operatorRepo = "docker.redpanda.com/redpandadata/redpanda-operator" + const configuratorRepo = "docker.redpanda.com/redpandadata/configurator" + + chartBytes, err := os.ReadFile("../../charts/operator/Chart.yaml") + require.NoError(t, err) + + var chart ChartYAML + require.NoError(t, yaml.Unmarshal(chartBytes, &chart)) + + assert.Contains( + t, + chart.Annotations["artifacthub.io/images"], + fmt.Sprintf("%s:%s", operatorRepo, chart.AppVersion), + "artifacthub.io/images should be in sync with .appVersion", + ) + + assert.Contains( + t, + chart.Annotations["artifacthub.io/images"], + fmt.Sprintf("%s:%s", configuratorRepo, chart.AppVersion), + "artifacthub.io/images should be in sync with .appVersion", + ) +} + +func TestRedpandaControllersTag(t *testing.T) { + chartBytes, err := os.ReadFile("../../charts/operator/Chart.yaml") + require.NoError(t, err) + + valuesYAML, err := os.ReadFile("../../charts/redpanda/values.yaml") + require.NoError(t, err) + + var chart map[string]any + require.NoError(t, yaml.Unmarshal(chartBytes, &chart)) + + var values redpanda.Values + require.NoError(t, yaml.Unmarshal(valuesYAML, &values)) + + require.Equal( + t, + chart["appVersion"].(string), + string(values.Statefulset.SideCars.Controllers.Image.Tag), + "the redpanda chart's values.yaml's controllers tag should be equal to the operator chart's appVersion", + ) +}