Skip to content

Commit

Permalink
Reject unknown nested properties in values.yaml
Browse files Browse the repository at this point in the history
  • Loading branch information
@bastianeicher
bastianeicher committed May 17, 2023
1 parent 2e6fad4 commit af19337
Showing 1 changed file with 70 additions and 35 deletions.
105 changes: 70 additions & 35 deletions charts/generic-service/values.schema.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,8 @@
"required": [
"repository",
"tag"
]
],
"additionalProperties": false
},
"securityContext": {
"type": "object",
Expand All @@ -67,7 +68,8 @@
"readOnlyRootFilesystem": {"type": "boolean"}
}
}
}
},
"additionalProperties": false
},
"command": {
"type": "array",
Expand Down Expand Up @@ -122,23 +124,27 @@
"properties": {
"port": {"type": "string"},
"path": {"type": "string"}
}
},
"additionalProperties": true
},
"grpc": {
"type": ["object", "null"],
"properties": {
"port": {"type": "integer"}
}
},
"additionalProperties": true
},
"exec": {
"type": ["object", "null"],
"properties": {
"command": {
"type": "array",
"items": {"type": "string"}
}
},
"additionalProperties": true
}
}
},
"additionalProperties": true
}
},
"livenessProbe": {
Expand All @@ -152,13 +158,15 @@
"properties": {
"port": {"type": "string"},
"path": {"type": "string"}
}
},
"additionalProperties": true
},
"grpc": {
"type": ["object", "null"],
"properties": {
"port": {"type": "integer"}
}
},
"additionalProperties": true
},
"exec": {
"type": ["object", "null"],
Expand All @@ -167,9 +175,11 @@
"type": "array",
"items": {"type": "string"}
}
}
},
"additionalProperties": true
}
}
},
"additionalProperties": true
},
"readinessProbe": {
"type": "object",
Expand All @@ -182,13 +192,15 @@
"properties": {
"port": {"type": "string"},
"path": {"type": "string"}
}
},
"additionalProperties": true
},
"grpc": {
"type": ["object", "null"],
"properties": {
"port": {"type": "integer"}
}
},
"additionalProperties": true
},
"exec": {
"type": ["object", "null"],
Expand All @@ -197,9 +209,11 @@
"type": "array",
"items": {"type": "string"}
}
}
},
"additionalProperties": true
}
}
},
"additionalProperties": true
},
"maxShutdownSeconds": {
"type": "integer",
Expand Down Expand Up @@ -249,7 +263,8 @@
}
}
}
}
},
"additionalProperties": false
},
"rollout": {
"type": "object",
Expand Down Expand Up @@ -279,7 +294,8 @@
"analysis": {
"description": "Flagger or Argo Rollouts analysis for automatic Canary or BlueGreen promotion"
}
}
},
"additionalProperties": false
},
"replicas": {
"type": "integer",
Expand Down Expand Up @@ -339,7 +355,8 @@
"type": "object",
"description": "Scaling behavior configuration (see HorizontalPodAutoscalerBehavior)"
}
}
},
"additionalProperties": false
},
"scheduling": {
"type": "object",
Expand Down Expand Up @@ -375,7 +392,8 @@
"default": false,
"description": "Make even spread of replicas across nodes mandatory"
}
}
},
"additionalProperties": false
},
"persistence": {
"type": "object",
Expand Down Expand Up @@ -404,7 +422,8 @@
"type": "string",
"description": "The mount path for the storage inside the container"
}
}
},
"additionalProperties": false
},
"secrets": {
"type": "object",
Expand All @@ -428,7 +447,8 @@
},
"required": [
"mountPath"
]
],
"additionalProperties": false
}
},
"additionalMounts": {
Expand Down Expand Up @@ -488,7 +508,8 @@
"default": "{{ .Release.Name }}-tls",
"description": "The name of the Secret holding the TLS private key (not applicable if ingress.istio.enabled)"
}
}
},
"additionalProperties": false
},
"cors": {
"type": "object",
Expand Down Expand Up @@ -525,7 +546,8 @@
"items": {"type": "string"},
"description": "List of HTTP headers that the browsers are allowed to access"
}
}
},
"additionalProperties": false
},
"class": {
"type": "string",
Expand Down Expand Up @@ -578,7 +600,8 @@
"type": "object",
"description": "Istio retry policy (see https://istio.io/docs/reference/config/networking/virtual-service/#HTTPRetry)"
}
}
},
"additionalProperties": false
},
"extra": {
"type": "object",
Expand Down Expand Up @@ -627,11 +650,13 @@
"additionalProperties": {"type": "string"},
"description": "Additional annotations, merged with ingress.annotations (use string 'nil' to unset existing values)"
}
}
},
"additionalProperties": false
},
"description": "Additional container ports ingress traffic is routed to (not applicable if `ingress.istio.enabled`)"
}
}
},
"additionalProperties": false
},
"netpol": {
"type": "object",
Expand All @@ -651,7 +676,8 @@
"items": {"type": "object"},
"description": "Ingress network policy rules to apply"
}
}
},
"additionalProperties": false
},
"tracing": {
"type": "object",
Expand All @@ -673,7 +699,8 @@
"default": "true",
"description": "Custom value to set for tracing sidecar injection annotations"
}
}
},
"additionalProperties": false
},
"monitoring": {
"type": "object",
Expand All @@ -698,7 +725,8 @@
"default": "1m",
"description": "The interval at which monitoring data is scraped"
}
}
},
"additionalProperties": false
},
"alerting": {
"type": "object",
Expand All @@ -720,7 +748,8 @@
"type": ["integer", "null"],
"description": "The maximum allowed age of a Pod in seconds (useful to ensure regular deployments)"
}
}
},
"additionalProperties": false
},
"memory": {
"type": "object",
Expand All @@ -743,7 +772,8 @@
"minimum": 0,
"description": "Multiplied with resources.*.memory to determine minimum allowed unused memory quota in namespace"
}
}
},
"additionalProperties": false
},
"cpu": {
"type": "object",
Expand All @@ -766,7 +796,8 @@
"minimum": 0,
"description": "Multiplied with resources.*.cpu to determine minimum allowed unused CPU quota in namespace"
}
}
},
"additionalProperties": false
},
"http": {
"type": "object",
Expand Down Expand Up @@ -796,7 +827,8 @@
"default": 0,
"description": "The maximum number of HTTP 5xx responses in the sample interval"
}
}
},
"additionalProperties": false
},
"grpc": {
"type": "object",
Expand Down Expand Up @@ -832,8 +864,10 @@
"default": ["Internal", "Unimplemented"],
"description": "Which gRPC status codes are considered critical errors"
}
}
}
},
"additionalProperties": false
},
"additionalProperties": false
}
},
"sidecars": {
Expand All @@ -854,7 +888,8 @@
"items": {"type": "string"},
"description": "Cluster-wide Kubernetes RBAC Roles to assign to the service"
}
}
},
"additionalProperties": false
},
"global": {
"type": "object",
Expand Down

0 comments on commit af19337

Please sign in to comment.