From 9a4d1fcf2b1e3df079cdffa00f7ad81d7d5b2374 Mon Sep 17 00:00:00 2001 From: Vedant Shrotria Date: Thu, 15 Dec 2022 20:46:42 +0530 Subject: [PATCH] Updating core components to 3.0.0-beta2 in master manifests (#3862) * Updating core components to 3.0.0-beta2 in master manifests Signed-off-by: Jonsy13 * Updating core components to 3.0.0-beta2 in master manifests Signed-off-by: Jonsy13 Signed-off-by: Jonsy13 --- .../manifests/cluster-k8s-manifest.yml | 288 +++++++++--------- .../manifests/namespace-k8s-manifest.yml | 14 +- 2 files changed, 151 insertions(+), 151 deletions(-) diff --git a/litmus-portal/manifests/cluster-k8s-manifest.yml b/litmus-portal/manifests/cluster-k8s-manifest.yml index 43cd6227e3c..48e53680c35 100644 --- a/litmus-portal/manifests/cluster-k8s-manifest.yml +++ b/litmus-portal/manifests/cluster-k8s-manifest.yml @@ -7,36 +7,36 @@ kind: ClusterRole metadata: name: argo-cr-for-litmusportal-server rules: -- apiGroups: [""] - resources: [pods, pods/exec] - verbs: [create, get, list, watch, update, patch, delete] -- apiGroups: [""] - resources: [configmaps] - verbs: [get, watch, list] -- apiGroups: [""] - resources: [persistentvolumeclaims] - verbs: [create, delete] -- apiGroups: [argoproj.io] - resources: [workflows, workflows/finalizers] - verbs: [get, list, watch, update, patch, delete, create] -- apiGroups: [argoproj.io] - resources: [workflowtemplates, workflowtemplates/finalizers, clusterworkflowtemplates, clusterworkflowtemplates/finalizers, workflowtasksets] - verbs: [get, list, watch] -- apiGroups: [argoproj.io] - resources: [workflowtaskresults] - verbs: [list, watch, deletecollection] -- apiGroups: [""] - resources: [serviceaccounts] - verbs: [get, list] -- apiGroups: [argoproj.io] - resources: [cronworkflows, cronworkflows/finalizers] - verbs: [get, list, watch, update, patch, delete] -- apiGroups: [""] - resources: [events] - verbs: [create, patch] -- apiGroups: [policy] - resources: [poddisruptionbudgets] - verbs: [create, get, delete] + - apiGroups: [""] + resources: [pods, pods/exec] + verbs: [create, get, list, watch, update, patch, delete] + - apiGroups: [""] + resources: [configmaps] + verbs: [get, watch, list] + - apiGroups: [""] + resources: [persistentvolumeclaims] + verbs: [create, delete] + - apiGroups: [argoproj.io] + resources: [workflows, workflows/finalizers] + verbs: [get, list, watch, update, patch, delete, create] + - apiGroups: [argoproj.io] + resources: [workflowtemplates, workflowtemplates/finalizers, clusterworkflowtemplates, clusterworkflowtemplates/finalizers, workflowtasksets] + verbs: [get, list, watch] + - apiGroups: [argoproj.io] + resources: [workflowtaskresults] + verbs: [list, watch, deletecollection] + - apiGroups: [""] + resources: [serviceaccounts] + verbs: [get, list] + - apiGroups: [argoproj.io] + resources: [cronworkflows, cronworkflows/finalizers] + verbs: [get, list, watch, update, patch, delete] + - apiGroups: [""] + resources: [events] + verbs: [create, patch] + - apiGroups: [policy] + resources: [poddisruptionbudgets] + verbs: [create, get, delete] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -135,96 +135,96 @@ rules: ## .. by creating the chaos-runner # for creating and monitoring the chaos-runner pods -- apiGroups: [""] - resources: [pods,events] - verbs: [create, delete, get, list, patch, update, deletecollection] + - apiGroups: [""] + resources: [pods,events] + verbs: [create, delete, get, list, patch, update, deletecollection] - # for fetching configmaps and secrets to inject into chaos-runner pod (if specified) -- apiGroups: [""] - resources: [secrets, configmaps] - verbs: [get, list] + # for fetching configmaps and secrets to inject into chaos-runner pod (if specified) + - apiGroups: [""] + resources: [secrets, configmaps] + verbs: [get, list] - # for tracking & getting logs of the pods created by chaos-runner to implement individual steps in the runner -- apiGroups: [""] - resources: [pods/log] - verbs: [get, list, watch] + # for tracking & getting logs of the pods created by chaos-runner to implement individual steps in the runner + - apiGroups: [""] + resources: [pods/log] + verbs: [get, list, watch] - # for configuring and monitor the experiment job by chaos-runner pod -- apiGroups: [batch] - resources: [jobs] - verbs: [create, list, get, delete, deletecollection] + # for configuring and monitor the experiment job by chaos-runner pod + - apiGroups: [batch] + resources: [jobs] + verbs: [create, list, get, delete, deletecollection] - # ******************************************************************** - # Permissions needed for creation and discovery of chaos experiments - # ******************************************************************** + # ******************************************************************** + # Permissions needed for creation and discovery of chaos experiments + # ******************************************************************** - # The helper pods are created by experiment to perform the actual chaos injection ... - # ... for a period of chaos duration + # The helper pods are created by experiment to perform the actual chaos injection ... + # ... for a period of chaos duration - # for creating and deleting the helper or target app pod and events by experiment -- apiGroups: [""] - resources: [pods] - verbs: [create, delete, deletecollection] + # for creating and deleting the helper or target app pod and events by experiment + - apiGroups: [""] + resources: [pods] + verbs: [create, delete, deletecollection] - # for creating and monitoring the events for chaos operations -- apiGroups: [""] - resources: [events] - verbs: [create, delete, get, list, patch, update, deletecollection] + # for creating and monitoring the events for chaos operations + - apiGroups: [""] + resources: [events] + verbs: [create, delete, get, list, patch, update, deletecollection] - # for monitoring the helper and target app pod -- apiGroups: [""] - resources: [pods] - verbs: [get, list, patch, update] + # for monitoring the helper and target app pod + - apiGroups: [""] + resources: [pods] + verbs: [get, list, patch, update] - # for creating and managing to execute comands inside target container -- apiGroups: [""] - resources: [pods/exec, pods/eviction, replicationcontrollers] - verbs: [get,list,create] + # for creating and managing to execute comands inside target container + - apiGroups: [""] + resources: [pods/exec, pods/eviction, replicationcontrollers] + verbs: [get,list,create] - # for tracking & getting logs of the pods created by experiment pod to implement individual steps in the experiment -- apiGroups: [""] - resources: [pods/log] - verbs: [get, list, watch] + # for tracking & getting logs of the pods created by experiment pod to implement individual steps in the experiment + - apiGroups: [""] + resources: [pods/log] + verbs: [get, list, watch] - # for creating and monitoring liveness services or monitoring target app services during chaos injection -- apiGroups: [""] - resources: [services] - verbs: [create, delete, get, list, delete, deletecollection] + # for creating and monitoring liveness services or monitoring target app services during chaos injection + - apiGroups: [""] + resources: [services] + verbs: [create, delete, get, list, delete, deletecollection] - # for checking the app parent resources as deployments or sts and are eligible chaos candidates -- apiGroups: [apps] - resources: [deployments, statefulsets] - verbs: [list, get, patch, update, create, delete] + # for checking the app parent resources as deployments or sts and are eligible chaos candidates + - apiGroups: [apps] + resources: [deployments, statefulsets] + verbs: [list, get, patch, update, create, delete] - # for checking the app parent resources as replicasets and are eligible chaos candidates -- apiGroups: [apps] - resources: [replicasets] - verbs: [list, get] + # for checking the app parent resources as replicasets and are eligible chaos candidates + - apiGroups: [apps] + resources: [replicasets] + verbs: [list, get] - # for checking the app parent resources as deamonsets and are eligible chaos candidates -- apiGroups: [apps] - resources: [daemonsets] - verbs: [list, get, delete] + # for checking the app parent resources as deamonsets and are eligible chaos candidates + - apiGroups: [apps] + resources: [daemonsets] + verbs: [list, get, delete] - # for checking (openshift) app parent resources if they are eligible chaos candidates -- apiGroups: [apps.openshift.io] - resources: [deploymentconfigs] - verbs: [list, get] + # for checking (openshift) app parent resources if they are eligible chaos candidates + - apiGroups: [apps.openshift.io] + resources: [deploymentconfigs] + verbs: [list, get] - # for checking (argo) app parent resources if they are eligible chaos candidates -- apiGroups: [argoproj.io] - resources: [rollouts] - verbs: [list, get] + # for checking (argo) app parent resources if they are eligible chaos candidates + - apiGroups: [argoproj.io] + resources: [rollouts] + verbs: [list, get] - # for creation, status polling and deletion of litmus chaos resources used within a chaos workflow -- apiGroups: [litmuschaos.io] - resources: [chaosengines, chaosexperiments, chaosresults] - verbs: [create, list, get, patch, update, delete] + # for creation, status polling and deletion of litmus chaos resources used within a chaos workflow + - apiGroups: [litmuschaos.io] + resources: [chaosengines, chaosexperiments, chaosresults] + verbs: [create, list, get, patch, update, delete] - # for experiment to perform node status checks and other node level operations like taint, drain in the experiment. -- apiGroups: [""] - resources: [nodes] - verbs: [patch, get, list, update] + # for experiment to perform node status checks and other node level operations like taint, drain in the experiment. + - apiGroups: [""] + resources: [nodes] + verbs: [patch, get, list, update] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -287,27 +287,27 @@ metadata: labels: name: subscriber-cr-for-litmusportal-server rules: -- apiGroups: [""] - resources: [configmaps, secrets] - verbs: [get, create, delete, update] -- apiGroups: [""] - resources: [pods/log] - verbs: [get, list, watch] -- apiGroups: [""] - resources: [pods, namespaces, nodes, services] - verbs: [get, list, watch] -- apiGroups: [litmuschaos.io] - resources: [chaosengines, chaosschedules, chaosresults] - verbs: [get, list, create, delete, update, watch] -- apiGroups: [apps.openshift.io] - resources: [deploymentconfigs] - verbs: [get, list] -- apiGroups: [apps] - resources: [deployments, daemonsets, replicasets, statefulsets] - verbs: [get, list, delete] -- apiGroups: [argoproj.io] - resources: [workflows, workflows/finalizers, workflowtemplates, workflowtemplates/finalizers, cronworkflows, cronworkflows/finalizers, clusterworkflowtemplates, clusterworkflowtemplates/finalizers, rollouts] - verbs: [get, list, create, delete, update, watch] + - apiGroups: [""] + resources: [configmaps, secrets] + verbs: [get, create, delete, update] + - apiGroups: [""] + resources: [pods/log] + verbs: [get, list, watch] + - apiGroups: [""] + resources: [pods, namespaces, nodes, services] + verbs: [get, list, watch] + - apiGroups: [litmuschaos.io] + resources: [chaosengines, chaosschedules, chaosresults] + verbs: [get, list, create, delete, update, watch] + - apiGroups: [apps.openshift.io] + resources: [deploymentconfigs] + verbs: [get, list] + - apiGroups: [apps] + resources: [deployments, daemonsets, replicasets, statefulsets] + verbs: [get, list, delete] + - apiGroups: [argoproj.io] + resources: [workflows, workflows/finalizers, workflowtemplates, workflowtemplates/finalizers, cronworkflows, cronworkflows/finalizers, clusterworkflowtemplates, clusterworkflowtemplates/finalizers, rollouts] + verbs: [get, list, create, delete, update, watch] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -328,15 +328,15 @@ kind: ClusterRole metadata: name: event-tracker-cr-for-litmusportal-server rules: -- apiGroups: [eventtracker.litmuschaos.io] - resources: [eventtrackerpolicies] - verbs: [create, delete, get, list, patch, update, watch] -- apiGroups: [eventtracker.litmuschaos.io] - resources: [eventtrackerpolicies/status] - verbs: [get, patch, update] -- apiGroups: ["", extensions, apps] - resources: [deployments, daemonsets, statefulsets, pods, configmaps, secrets] - verbs: [get, list, watch] + - apiGroups: [eventtracker.litmuschaos.io] + resources: [eventtrackerpolicies] + verbs: [create, delete, get, list, patch, update, watch] + - apiGroups: [eventtracker.litmuschaos.io] + resources: [eventtrackerpolicies/status] + verbs: [get, patch, update] + - apiGroups: ["", extensions, apps] + resources: [deployments, daemonsets, statefulsets, pods, configmaps, secrets] + verbs: [get, list, watch] --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -542,9 +542,9 @@ spec: cpu: "550m" ephemeral-storage: "1Gi" volumeMounts: - - name: nginx-config - mountPath: /etc/nginx/conf.d/default.conf - subPath: default.conf + - name: nginx-config + mountPath: /etc/nginx/conf.d/default.conf + subPath: default.conf volumes: - name: nginx-config configMap: @@ -583,7 +583,7 @@ spec: spec: initContainers: - name: wait-for-mongodb - image: litmuschaos/curl:2.14.0 + image: litmuschaos/curl:3.0.0-beta2 command: ["/bin/sh", "-c"] args: [ @@ -642,11 +642,11 @@ spec: - name: ARGO_WORKFLOW_EXECUTOR_IMAGE value: "litmuschaos/argoexec:v3.3.1" - name: LITMUS_CHAOS_OPERATOR_IMAGE - value: "litmuschaos/chaos-operator:2.14.0" + value: "litmuschaos/chaos-operator:3.0.0-beta2" - name: LITMUS_CHAOS_RUNNER_IMAGE - value: "litmuschaos/chaos-runner:2.14.0" + value: "litmuschaos/chaos-runner:3.0.0-beta2" - name: LITMUS_CHAOS_EXPORTER_IMAGE - value: "litmuschaos/chaos-exporter:2.14.0" + value: "litmuschaos/chaos-exporter:3.0.0-beta2" - name: SERVER_SERVICE_NAME value: "litmusportal-server-service" - name: AGENT_DEPLOYMENTS @@ -668,13 +668,13 @@ spec: - name: CONTAINER_RUNTIME_EXECUTOR value: "k8sapi" - name: HUB_BRANCH_NAME - value: "v2.14.x" + value: "master" - name: LITMUS_AUTH_GRPC_ENDPOINT value: "litmusportal-auth-server-service.litmus.svc.cluster.local" - name: LITMUS_AUTH_GRPC_PORT value: ":3030" - name: WORKFLOW_HELPER_IMAGE_VERSION - value: "2.14.0" + value: "3.0.0-beta2" - name: REMOTE_HUB_MAX_SIZE value: "5000000" ports: @@ -729,7 +729,7 @@ spec: automountServiceAccountToken: false initContainers: - name: wait-for-mongodb - image: litmuschaos/curl:2.14.0 + image: litmuschaos/curl:3.0.0-beta2 command: ["/bin/sh", "-c"] args: [ @@ -822,9 +822,9 @@ spec: - name: mongo image: litmuschaos/mongo:4.2.8 securityContext: -# runAsUser: 2000 + # runAsUser: 2000 allowPrivilegeEscalation: false -# runAsNonRoot: true + # runAsNonRoot: true args: ["--ipv6"] ports: - containerPort: 27017 diff --git a/litmus-portal/manifests/namespace-k8s-manifest.yml b/litmus-portal/manifests/namespace-k8s-manifest.yml index 082f3a0b5ba..e9003eb4860 100644 --- a/litmus-portal/manifests/namespace-k8s-manifest.yml +++ b/litmus-portal/manifests/namespace-k8s-manifest.yml @@ -555,7 +555,7 @@ spec: spec: initContainers: - name: wait-for-mongodb - image: litmuschaos/curl:2.14.0 + image: litmuschaos/curl:3.0.0-beta2 command: ["/bin/sh", "-c"] args: [ @@ -628,21 +628,21 @@ spec: - name: ARGO_WORKFLOW_EXECUTOR_IMAGE value: "litmuschaos/argoexec:v3.3.1" - name: LITMUS_CHAOS_OPERATOR_IMAGE - value: "litmuschaos/chaos-operator:2.14.0" + value: "litmuschaos/chaos-operator:3.0.0-beta2" - name: LITMUS_CHAOS_RUNNER_IMAGE - value: "litmuschaos/chaos-runner:2.14.0" + value: "litmuschaos/chaos-runner:3.0.0-beta2" - name: LITMUS_CHAOS_EXPORTER_IMAGE - value: "litmuschaos/chaos-exporter:2.14.0" + value: "litmuschaos/chaos-exporter:3.0.0-beta2" - name: CONTAINER_RUNTIME_EXECUTOR value: "k8sapi" - name: HUB_BRANCH_NAME - value: "v2.14.x" + value: "master" - name: LITMUS_AUTH_GRPC_ENDPOINT value: "litmusportal-auth-server-service" - name: LITMUS_AUTH_GRPC_PORT value: ":3030" - name: WORKFLOW_HELPER_IMAGE_VERSION - value: "2.14.0" + value: "3.0.0-beta2" - name: REMOTE_HUB_MAX_SIZE value: "5000000" - name: INGRESS @@ -699,7 +699,7 @@ spec: automountServiceAccountToken: false initContainers: - name: wait-for-mongodb - image: litmuschaos/curl:2.14.0 + image: litmuschaos/curl:3.0.0-beta2 command: ["/bin/sh", "-c"] args: [