added repo
This commit is contained in:
Your Name
@@ -0,0 +1,7 @@
|
||||
# so we dont include these in our chart secret
|
||||
tests/
|
||||
docs/
|
||||
tekton/
|
||||
quick-starts/
|
||||
README.md
|
||||
.git
|
||||
@@ -0,0 +1,6 @@
|
||||
dependencies:
|
||||
- name: postgresql
|
||||
repository: oci://registry-1.docker.io/bitnamicharts
|
||||
version: 12.11.2
|
||||
digest: sha256:faa09ff7a4cde372900c84484e755d04242b431ddd9d74b1622ed4cb4ea5cdc6
|
||||
generated: "2023-09-27T13:49:34.475194+05:30"
|
||||
@@ -0,0 +1,42 @@
|
||||
apiVersion: v2
|
||||
appVersion: "v1.0.0"
|
||||
name: aurva-dataplane
|
||||
description: >
|
||||
**Aurva Data Plane Helm Chart**
|
||||
|
||||
|
||||
Aurva Data Plane Helm chart provides a comprehensive and sophisticated security solution for databases, empowering organizations to fortify their data protection strategies. The chart seamlessly deploys the entire Aurva Data Plane system, encompassing essential components designed to enhance security and observability.
|
||||
|
||||
Key Components:
|
||||
|
||||
- **Aurva-Controller**: Enables efficient data discovery within cloud accounts, listing and analyzing available data sources. Advanced ML models are employed to predict data sensitivity and assess risk scores, bolstering data protection.
|
||||
|
||||
- **Aurva-eBPF**: Delivering unparalleled monitoring and observability, Aurva-eBPF meticulously tracks and analyzes database queries. Crucial details such as query sources, timestamps, and user identities are recorded, enabling rapid detection of anomalies and potential security threats.
|
||||
|
||||
- **Aurva-Proxy**: Positioned as a critical inline component, Aurva-Proxy provides granular Access Control Lists (ACL) to safeguard against real-time database abuse and malicious attacks. It seamlessly integrates with the application-database pipeline, ensuring secure and authorized data access.
|
||||
|
||||
The `values.yaml` file allows effortless customization of the deployment, empowering users to tailor security settings based on their specific requirements and compliance standards.
|
||||
|
||||
Prerequisites:
|
||||
- Kubernetes 1.16+
|
||||
- Helm 3.x
|
||||
|
||||
maintainers:
|
||||
- name: aurva
|
||||
email: contact@aurva.com
|
||||
|
||||
version: 1.0.0
|
||||
home: https://github.com/aurva-io/aurva-charts
|
||||
icon: https://framerusercontent.com/images/eXPYBNSRI82BVsmqBO69tmHVgw.svg
|
||||
keywords:
|
||||
- aurva
|
||||
- aurva-tool
|
||||
- security
|
||||
- access
|
||||
- data-visuality
|
||||
- data-plane
|
||||
- security
|
||||
- database
|
||||
dependencies:
|
||||
- name: postgresql
|
||||
condition: postgresql.enabled
|
||||
@@ -0,0 +1,136 @@
|
||||
# aurva-dataplane
|
||||
|
||||
 
|
||||
|
||||
**Aurva Data Plane Helm Chart**
|
||||
 Aurva Data Plane Helm chart provides a comprehensive and sophisticated security solution for databases, empowering organizations to fortify their data protection strategies. The chart seamlessly deploys the entire Aurva Data Plane system, encompassing essential components designed to enhance security and observability.
|
||||
Key Components:
|
||||
- **Aurva-Controller**: Enables efficient data discovery within cloud accounts, listing and analyzing available data sources. Advanced ML models are employed to predict data sensitivity and assess risk scores, bolstering data protection.
|
||||
- **Aurva-eBPF**: Delivering unparalleled monitoring and observability, Aurva-eBPF meticulously tracks and analyzes database queries. Crucial details such as query sources, timestamps, and user identities are recorded, enabling rapid detection of anomalies and potential security threats.
|
||||
- **Aurva-Proxy**: Positioned as a critical inline component, Aurva-Proxy provides granular Access Control Lists (ACL) to safeguard against real-time database abuse and malicious attacks. It seamlessly integrates with the application-database pipeline, ensuring secure and authorized data access.
|
||||
The `values.yaml` file allows effortless customization of the deployment, empowering users to tailor security settings based on their specific requirements and compliance standards.
|
||||
Prerequisites: - Kubernetes 1.16+ - Helm 3.x
|
||||
|
||||
**Homepage:** <https://github.com/aurva-io/aurva-charts>
|
||||
|
||||
## Maintainers
|
||||
|
||||
| Name | Email | Url |
|
||||
| ---- | ------ | --- |
|
||||
| aurva | <contact@aurva.com> | |
|
||||
|
||||
## Values
|
||||
|
||||
| Key | Type | Default | Description |
|
||||
|-----|------|---------|-------------|
|
||||
| aurva_analyzer.additionalLabels | object | `{}` | Additional labels for aurva-analyzer |
|
||||
| aurva_analyzer.additionalPodAnnotations | object | `{"test":"value"}` | Additional Pod Annotations added on pod created by this Deployment |
|
||||
| aurva_analyzer.affinity | string | `nil` | Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods. |
|
||||
| aurva_analyzer.annotations | object | `{"key":"test"}` | Annotations on aurva-analyzer |
|
||||
| aurva_analyzer.dnsConfig | object | `{}` | [DNS configuration] |
|
||||
| aurva_analyzer.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for application controller pods |
|
||||
| aurva_analyzer.env | list | `[]` | |
|
||||
| aurva_analyzer.envFrom | object | `{"aurva-controller":{"name":"aurva-analyzer-secrets","type":"secret"}}` | If want to mount Envs from configmap or secret |
|
||||
| aurva_analyzer.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| aurva_analyzer.image.repository | string | `"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-analyzer"` | |
|
||||
| aurva_analyzer.image.tag | string | `"407ea56"` | |
|
||||
| aurva_analyzer.imagePullSecrets | string | `""` | Secrets used to pull image |
|
||||
| aurva_analyzer.nodeSelector | string | `nil` | Select nodes to deploy which matches the following labels |
|
||||
| aurva_analyzer.podLabels | object | `{}` | Additional label added on pod which is used in Service's Label Selector |
|
||||
| aurva_analyzer.replicas | int | `1` | no of replicas for aurva analyzer |
|
||||
| aurva_analyzer.resources | object | `{"limits":{"cpu":1,"memory":"512Mi"},"requests":{"cpu":1,"memory":"256Mi"}}` | Resources to be defined for pod |
|
||||
| aurva_analyzer.secret.additionalLabels | string | `nil` | Additional Labels on secrets |
|
||||
| aurva_analyzer.secret.annotations | string | `nil` | Annotations on secrets |
|
||||
| aurva_analyzer.secret.config.COMPANY_ID | string | `"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"` | |
|
||||
| aurva_analyzer.secret.config.CONTROLLER_URL | string | `"aurva-test-aurva-controller-svc.test:9090"` | |
|
||||
| aurva_analyzer.secret.config.ENVIRONMENT | string | `"staging"` | |
|
||||
| aurva_analyzer.secret.name | string | `"aurva-analyzer-secrets"` | |
|
||||
| aurva_analyzer.serviceAccount.annotations | string | `nil` | Annotations applied to created service account |
|
||||
| aurva_analyzer.serviceAccount.create | bool | `true` | Create a service account for the aurva controller |
|
||||
| aurva_analyzer.serviceAccount.labels | object | `{}` | Labels applied to created service account |
|
||||
| aurva_analyzer.serviceAccount.name | string | `"aurva-analyzer-sa"` | Service account name |
|
||||
| aurva_analyzer.tolerations | string | `nil` | Taint tolerations for nodes |
|
||||
| aurva_collector.additionalLabels | object | `{"test":"done"}` | Additional labels for aurva-analyzer |
|
||||
| aurva_collector.additionalPodAnnotations | object | `{"test":"value"}` | Additional Pod Annotations added on pod created by this Deployment |
|
||||
| aurva_collector.affinity | string | `nil` | Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods. |
|
||||
| aurva_collector.annotations | object | `{"key":"test"}` | Annotations on aurva-analyzer |
|
||||
| aurva_collector.env | list | `[]` | |
|
||||
| aurva_collector.envFrom | object | `{"aurva-controller":{"name":"aurva-collector-secrets","type":"secret"}}` | If want to mount Envs from configmap or secret |
|
||||
| aurva_collector.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| aurva_collector.image.repository | string | `"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-collector"` | |
|
||||
| aurva_collector.image.tag | string | `"6213694"` | |
|
||||
| aurva_collector.imagePullSecrets | string | `""` | Secrets used to pull image |
|
||||
| aurva_collector.nodeSelector | string | `nil` | Select nodes to deploy which matches the following labels |
|
||||
| aurva_collector.podLabels | object | `{}` | Additional label added on pod which is used in Service's Label Selector |
|
||||
| aurva_collector.podSecurityContext | object | `{}` | |
|
||||
| aurva_collector.priorityClassName | string | `"system-node-critical"` | priorityClassName that you want to associate to daemonset pods |
|
||||
| aurva_collector.resources.limits.cpu | int | `1` | |
|
||||
| aurva_collector.resources.limits.memory | string | `"2048Mi"` | |
|
||||
| aurva_collector.resources.requests.cpu | float | `0.5` | |
|
||||
| aurva_collector.resources.requests.memory | string | `"1024Mi"` | |
|
||||
| aurva_collector.secret.additionalLabels | string | `nil` | Additional Labels on secrets |
|
||||
| aurva_collector.secret.annotations | string | `nil` | Annotations on secrets |
|
||||
| aurva_collector.secret.config.AURVA_GRPC_ANALYZER_URL | string | `"aurva-test-aurva-analyzer-svc.test:8080"` | |
|
||||
| aurva_collector.secret.config.COMPANY_ID | string | `"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"` | |
|
||||
| aurva_collector.secret.config.DEPLOYMENT_TYPE | string | `"kubernetes"` | |
|
||||
| aurva_collector.secret.config.IS_ANALYZER_URL_SECURE | string | `"true"` | |
|
||||
| aurva_collector.secret.name | string | `"aurva-collector-secrets"` | |
|
||||
| aurva_collector.securityContext.capabilities.add[0] | string | `"SYS_ADMIN"` | |
|
||||
| aurva_collector.securityContext.capabilities.add[1] | string | `"NET_RAW"` | |
|
||||
| aurva_collector.securityContext.capabilities.add[2] | string | `"NET_ADMIN"` | |
|
||||
| aurva_collector.securityContext.capabilities.add[3] | string | `"SYS_RESOURCE"` | |
|
||||
| aurva_collector.securityContext.privileged | bool | `true` | |
|
||||
| aurva_collector.serviceAccount.annotations | string | `nil` | Annotations applied to created service account |
|
||||
| aurva_collector.serviceAccount.create | bool | `true` | Create a service account for the aurva controller |
|
||||
| aurva_collector.serviceAccount.labels | object | `{}` | Labels applied to created service account |
|
||||
| aurva_collector.serviceAccount.name | string | `"aurva-controller-sa"` | Service account name |
|
||||
| aurva_collector.tolerations | string | `nil` | Taint tolerations for nodes |
|
||||
| aurva_collector.volumes[0].hostPath | string | `"/sys/kernel/debug"` | |
|
||||
| aurva_collector.volumes[0].mountPath | string | `"/sys/kernel/debug"` | |
|
||||
| aurva_collector.volumes[0].name | string | `"sys-kernal-debug"` | |
|
||||
| aurva_collector.volumes[1].hostPath | string | `"/sys/kernel/btf/vmlinux"` | |
|
||||
| aurva_collector.volumes[1].mountPath | string | `"/sys/kernel/btf/vmlinux"` | |
|
||||
| aurva_collector.volumes[1].name | string | `"sys-kernal-btf"` | |
|
||||
| aurva_controller.additionalLabels | object | `{}` | Additional labels for aurva-controller |
|
||||
| aurva_controller.additionalPodAnnotations | object | `{"test":"value"}` | Additional Pod Annotations added on pod created by this Deployment |
|
||||
| aurva_controller.affinity | string | `nil` | Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods. |
|
||||
| aurva_controller.annotations | object | `{"key":"test"}` | Annotations on aurva-controller |
|
||||
| aurva_controller.dnsConfig | object | `{}` | [DNS configuration] |
|
||||
| aurva_controller.dnsPolicy | string | `"ClusterFirst"` | Alternative DNS policy for application controller pods |
|
||||
| aurva_controller.env | list | `[]` | |
|
||||
| aurva_controller.envFrom | object | `{"aurva-controller":{"name":"aurva-controller-secrets","type":"secret"}}` | If want to mount Envs from configmap or secret |
|
||||
| aurva_controller.image.pullPolicy | string | `"IfNotPresent"` | |
|
||||
| aurva_controller.image.repository | string | `"119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-controller"` | |
|
||||
| aurva_controller.image.tag | string | `"2aaa7d4"` | |
|
||||
| aurva_controller.imagePullSecrets | string | `""` | Secrets used to pull image |
|
||||
| aurva_controller.nodeSelector | string | `nil` | Select nodes to deploy which matches the following labels |
|
||||
| aurva_controller.podLabels | object | `{}` | Additional label added on pod which is used in Service's Label Selector |
|
||||
| aurva_controller.replicas | int | `1` | no of replicas for aurva controller |
|
||||
| aurva_controller.resources | object | `{"limits":{"cpu":1,"memory":"512Mi"},"requests":{"cpu":0.5,"memory":"256Mi"}}` | Resources to be defined for pod |
|
||||
| aurva_controller.secret.additionalLabels | string | `nil` | Additional Labels on secrets |
|
||||
| aurva_controller.secret.annotations | string | `nil` | Annotations on secrets |
|
||||
| aurva_controller.secret.config.AWS_REGION | string | `"ap-south-1"` | |
|
||||
| aurva_controller.secret.config.COMMAND_URL | string | `"command.staging.aurva.io:443"` | |
|
||||
| aurva_controller.secret.config.COMPANY_ID | string | `"b9c03775-8f44-4b46-b71b-7f37dbdd3e9d"` | |
|
||||
| aurva_controller.secret.config.ENVIRONMENT | string | `"staging"` | |
|
||||
| aurva_controller.secret.config.PG_DBNAME | string | `"global"` | |
|
||||
| aurva_controller.secret.config.PG_HOST | string | `"aurva-control-plane-staging-rds.chui7blyumnd.ap-south-1.rds.amazonaws.com"` | |
|
||||
| aurva_controller.secret.config.PG_PASSWORD | string | `"Aurva123"` | |
|
||||
| aurva_controller.secret.config.PG_USERNAME | string | `"aurva"` | |
|
||||
| aurva_controller.secret.config.PROVIDER_ACCOUNT_ID | string | `"119191042565"` | |
|
||||
| aurva_controller.secret.name | string | `"aurva-controller-secrets"` | |
|
||||
| aurva_controller.serviceAccount.annotations | object | `{"eks.amazonaws.com/role-arn":"arn:aws:iam::119191042565:role/aurva-complete-chart-test"}` | Annotations applied to created service account |
|
||||
| aurva_controller.serviceAccount.create | bool | `true` | Create a service account for the aurva controller |
|
||||
| aurva_controller.serviceAccount.labels | object | `{}` | Labels applied to created service account |
|
||||
| aurva_controller.serviceAccount.name | string | `"aurva-controller-sa"` | Service account name |
|
||||
| aurva_controller.tolerations | string | `nil` | Taint tolerations for nodes |
|
||||
| global.aurva_analyzer.enabled | bool | `true` | |
|
||||
| global.aurva_collector.enabled | bool | `true` | |
|
||||
| global.aurva_controller.enabled | bool | `true` | |
|
||||
| global.aurva_pii_analyzer.enabled | bool | `false` | |
|
||||
| global.deploymentAnnotations | object | `{}` | |
|
||||
| global.priorityClassName | string | `""` | |
|
||||
| namespaceOverride | string | `"test"` | Provide a name in place of `aurva` |
|
||||
|
||||
----------------------------------------------
|
||||
Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
|
||||
Binary file not shown.
@@ -0,0 +1,217 @@
|
||||
{{/* vim: set filetype=mustache: */}}
|
||||
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
*/}}
|
||||
{{- define "application.labels" -}}
|
||||
helm.sh/chart: {{ include "application.chart" . }}
|
||||
app.kubernetes.io/version: {{ include "application.version" . | quote }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
app.kubernetes.io/part-of: {{ include "application.name" . }}
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{/*
|
||||
Create chart name and version as used by the chart label.
|
||||
*/}}
|
||||
{{- define "application.chart" -}}
|
||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{/*
|
||||
Define the name of the aurva-controller/application.
|
||||
*/}}
|
||||
{{- define "application.version" -}}
|
||||
{{ regexReplaceAll "[^a-zA-Z0-9_\\.\\-]" .Chart.Version "-" | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{/*
|
||||
Define the name of the chart/application.
|
||||
*/}}
|
||||
{{- define "application.name" -}}
|
||||
{{- default .Chart.Name .Values.applicationName | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{- define "aurva-controller.fullname" -}}
|
||||
{{- printf "%s" "aurva-controller" | trunc 52 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{/*
|
||||
Allow the release namespace to be overridden
|
||||
*/}}
|
||||
{{- define "application.namespace" -}}
|
||||
{{- default .Release.Namespace .Values.namespaceOverride -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "aurva-controller.selectorLabels" -}}
|
||||
app.kubernetes.io/app: aurva-controller
|
||||
{{- end }}
|
||||
|
||||
|
||||
|
||||
{{ include "application.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $) }}
|
||||
*/}}
|
||||
{{- define "application.tplvalues.render" -}}
|
||||
{{- if typeIs "string" .value }}
|
||||
{{- tpl .value .context }}
|
||||
{{- else }}
|
||||
{{- tpl (.value | toYaml) .context }}
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create the name of the controller service account to use
|
||||
*/}}
|
||||
{{- define "aurva-controller.controllerServiceAccountName" -}}
|
||||
{{- if .Values.aurva_controller.serviceAccount.create -}}
|
||||
{{ default (include "aurva-controller.fullname" .) .Values.aurva_controller.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.aurva_controller.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{- define "aurva-analyzer.fullname" -}}
|
||||
{{- printf "%s" "aurva-analyzer" | trunc 52 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "aurva-analyzer.selectorLabels" -}}
|
||||
app.kubernetes.io/app: aurva-analyzer
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{/*
|
||||
Create the name of the analyzer service account to use
|
||||
*/}}
|
||||
{{- define "aurva-analyzer.analyzerServiceAccountName" -}}
|
||||
{{- if .Values.aurva_analyzer.serviceAccount.create -}}
|
||||
{{ default (include "aurva-analyzer.fullname" .) .Values.aurva_analyzer.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.aurva_analyzer.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{/*
|
||||
Create the name of the collector service account to use
|
||||
*/}}
|
||||
{{- define "aurva-collector.fullname" -}}
|
||||
{{- printf "%s" "aurva-collector" | trunc 52 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "aurva-collector.selectorLabels" -}}
|
||||
app.kubernetes.io/app: aurva-collector
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create the name of the analyzer service account to use
|
||||
*/}}
|
||||
{{- define "aurva-collector.collectorServiceAccountName" -}}
|
||||
{{- if .Values.aurva_collector.serviceAccount.create -}}
|
||||
{{ default (include "aurva-collector.fullname" .) .Values.aurva_collector.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.aurva_collector.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create the name of the collector service account to use
|
||||
*/}}
|
||||
{{- define "aurva-collector.collectorserviceAccountName" -}}
|
||||
{{- if .Values.aurva_collector.serviceAccount.create -}}
|
||||
{{ default (include "aurva-collector.fullname" .) .Values.aurva_collector.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.aurva_collector.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create the name of the collector service account to use
|
||||
*/}}
|
||||
{{- define "aurva-pii-analyzer.fullname" -}}
|
||||
{{- printf "%s" "aurva-pii-analyzer" | trunc 52 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "aurva-pii-analyzer.selectorLabels" -}}
|
||||
app.kubernetes.io/app: aurva-pii-analyzer
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create the name of the pii-analyzer service account to use
|
||||
*/}}
|
||||
{{- define "aurva-pii-analyzer.piiAnalyzerServiceAccountName" -}}
|
||||
{{- if .Values.aurva_pii_analyzer.serviceAccount.create -}}
|
||||
{{ default (include "aurva-pii-analyzer.fullname" .) .Values.aurva_pii_analyzer.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.aurva_pii_analyzer.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create the name of the collector service account to use
|
||||
*/}}
|
||||
{{- define "aurva-ocr.fullname" -}}
|
||||
{{- printf "%s" "aurva-ocr" | trunc 52 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "aurva-ocr.selectorLabels" -}}
|
||||
app.kubernetes.io/app: aurva-ocr
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create the name of the ocr service account to use
|
||||
*/}}
|
||||
{{- define "aurva-ocr.ocrServiceAccountName" -}}
|
||||
{{- if .Values.aurva_ocr.serviceAccount.create -}}
|
||||
{{ default (include "aurva-ocr.fullname" .) .Values.aurva_ocr.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.aurva_ocr.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{- define "aurva-proxy.fullname" -}}
|
||||
{{- printf "%s" "aurva-proxy" | trunc 52 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "aurva-proxy.selectorLabels" -}}
|
||||
app.kubernetes.io/app: aurva-proxy
|
||||
{{- end }}
|
||||
|
||||
|
||||
{{/*
|
||||
Create the name of the controller service account to use
|
||||
*/}}
|
||||
{{- define "aurva-proxy.proxyServiceAccountName" -}}
|
||||
{{- if .Values.aurva_proxy.serviceAccount.create -}}
|
||||
{{ default (include "aurva-proxy.fullname" .) .Values.aurva_proxy.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.aurva_proxy.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_collector.enabled }}
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
namespace: {{ .Release.Namespace }}
|
||||
name: aurva-collector-clusterrole-{{ .Release.Namespace }}
|
||||
rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["pods", "services"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
- apiGroups: ["batch"]
|
||||
resources: ["jobs"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
- apiGroups: ["networking.k8s.io"]
|
||||
resources: ["ingresses"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
- apiGroups: ["networking.istio.io"]
|
||||
resources: ["virtualservices"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
{{- end }}
|
||||
@@ -0,0 +1,14 @@
|
||||
{{- if .Values.global.aurva_collector.enabled }}
|
||||
kind: ClusterRoleBinding
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: aurva-collector-clusterrolebinding-{{ .Release.Namespace }}
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: {{ .Release.Namespace}}-{{ template "aurva-collector.collectorServiceAccountName" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: aurva-collector-clusterrole-{{ .Release.Namespace }}
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
{{- end }}
|
||||
@@ -0,0 +1,98 @@
|
||||
{{- if .Values.global.aurva_collector.enabled }}
|
||||
apiVersion: apps/v1
|
||||
kind: DaemonSet
|
||||
metadata:
|
||||
name: {{ include "aurva-collector.fullname" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_collector.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_collector.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- with (mergeOverwrite (deepCopy .Values.global.deploymentAnnotations) .Values.aurva_collector.annotations) }}
|
||||
annotations:
|
||||
{{- range $key, $value := . }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
spec:
|
||||
selector:
|
||||
matchLabels:
|
||||
{{ include "aurva-collector.selectorLabels" . | indent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{ include "aurva-collector.selectorLabels" . | indent 8 }}
|
||||
{{- if .Values.aurva_collector.podLabels }}
|
||||
{{ toYaml .Values.aurva_collector.podLabels | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if or .Values.aurva_collector.additionalPodAnnotations }}
|
||||
annotations:
|
||||
{{- end }}
|
||||
{{- with .Values.aurva_collector.additionalPodAnnotations }}
|
||||
{{ toYaml . | indent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- with .Values.aurva_collector.priorityClassName | default .Values.global.priorityClassName }}
|
||||
priorityClassName: {{ . }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_collector.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{ toYaml .Values.aurva_collector.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_collector.tolerations }}
|
||||
tolerations:
|
||||
{{ toYaml .Values.aurva_collector.tolerations | indent 8 -}}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ .Release.Namespace}}-{{ include "aurva-collector.collectorserviceAccountName" . }}
|
||||
dnsPolicy: {{ .Values.aurva_collector.dnsPolicy }}
|
||||
{{- if .Values.aurva_collector.affinity }}
|
||||
affinity:
|
||||
{{ toYaml .Values.aurva_collector.affinity | indent 8 -}}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_collector.imagePullSecrets }}r̥eou
|
||||
imagePullSecrets:
|
||||
- name: {{ .Values.aurva_collector.imagePullSecrets }}
|
||||
{{- end }}
|
||||
volumes:
|
||||
{{- range $volume := .Values.aurva_collector.volumes }}
|
||||
- name: {{ $volume.name }}
|
||||
hostPath:
|
||||
path: {{ $volume.hostPath }}
|
||||
{{- end }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.aurva_collector.podSecurityContext | nindent 8 }}
|
||||
containers:
|
||||
- name: {{ template "aurva-collector.fullname" . }}
|
||||
{{- if .Values.aurva_collector.securityContext }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.aurva_collector.securityContext | nindent 12 }}
|
||||
{{- end }}
|
||||
image: "{{ .Values.aurva_collector.image.repository }}:{{ .Values.aurva_collector.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.aurva_collector.image.pullPolicy }}
|
||||
{{- if .Values.aurva_collector.envFrom }}
|
||||
envFrom:
|
||||
{{- range $value := .Values.aurva_collector.envFrom }}
|
||||
{{- if (eq .type "secret") }}
|
||||
- secretRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_collector.env }}
|
||||
env:
|
||||
{{- range $key, $value := .Values.aurva_collector.env }}
|
||||
- name: {{ include "application.tplvalues.render" ( dict "value" $key "context" $ ) }}
|
||||
{{ include "application.tplvalues.render" ( dict "value" $value "context" $ ) | indent 10 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.aurva_collector.resources | nindent 12 }}
|
||||
volumeMounts:
|
||||
{{- range $volume := .Values.aurva_collector.volumes }}
|
||||
- name: {{ $volume.name }}
|
||||
mountPath: {{ $volume.mountPath }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,23 @@
|
||||
{{- if .Values.global.aurva_collector.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: {{ .Values.aurva_collector.secret.name }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" $ | nindent 4 }}
|
||||
{{- if .Values.aurva_collector.secret.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_collector.secret.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_collector.secret.annotations }}
|
||||
annotations:
|
||||
{{ toYaml .Values.aurva_collector.secret.annotations | indent 4 }}
|
||||
{{- end }}
|
||||
data:
|
||||
CONTROLLER_URL: {{ printf "aurva-controller.%s:9090" .Release.Namespace | b64enc }}
|
||||
SKIP_NAMESPACES: {{ printf "%s,kube-system" .Release.Namespace | b64enc }}
|
||||
{{- range $key, $value := .Values.aurva_collector.secret.config }}
|
||||
{{ $key }}: {{ $value | b64enc }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_collector.enabled }}
|
||||
{{- if or .Values.aurva_collector.enabled .Values.aurva_collector.serviceAccount.create }}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ .Release.Namespace}}-{{ template "aurva-collector.collectorServiceAccountName" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
{{- if .Values.aurva_collector.serviceAccount.annotations }}
|
||||
annotations:
|
||||
{{- range $key, $value := .Values.aurva_collector.serviceAccount.annotations }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- range $key, $value := .Values.aurva_collector.serviceAccount.labels }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
+10
@@ -0,0 +1,10 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
namespace: {{ .Release.Namespace }}
|
||||
name: aurva-controller-clusterrole-{{ .Release.Namespace }}
|
||||
rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["pods"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
|
||||
+13
@@ -0,0 +1,13 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: aurva-controller-clusterrolebinding-{{ .Release.Namespace }}
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: {{ .Release.Namespace }}-{{ template "aurva-controller.controllerServiceAccountName" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: aurva-controller-clusterrole-{{ .Release.Namespace }}
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
|
||||
@@ -0,0 +1,133 @@
|
||||
{{- if .Values.global.aurva_controller.enabled }}
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_controller.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_controller.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- with (mergeOverwrite (deepCopy .Values.global.deploymentAnnotations) .Values.aurva_controller.annotations) }}
|
||||
annotations:
|
||||
{{- range $key, $value := . }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
name: {{ include "aurva-controller.fullname" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
spec:
|
||||
replicas: {{ default 4 .Values.aurva_controller.replicas }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{ include "aurva-controller.selectorLabels" . | indent 6 }}
|
||||
{{- if .Values.aurva_controller.strategy }}
|
||||
strategy:
|
||||
{{ toYaml .Values.aurva_controller.strategy | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if not (kindIs "invalid" .Values.aurva_controller.revisionHistoryLimit) }}
|
||||
revisionHistoryLimit: {{ .Values.aurva_controller.revisionHistoryLimit }}
|
||||
{{- end }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{ include "aurva-controller.selectorLabels" . | indent 8 }}
|
||||
{{- if .Values.aurva_controller.podLabels }}
|
||||
{{ toYaml .Values.aurva_controller.podLabels | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if or .Values.aurva_controller.additionalPodAnnotations }}
|
||||
annotations:
|
||||
{{- end }}
|
||||
{{- with .Values.aurva_controller.additionalPodAnnotations }}
|
||||
{{ toYaml . | indent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- with .Values.aurva_controller.priorityClassName | default .Values.global.priorityClassName }}
|
||||
priorityClassName: {{ . }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_controller.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{ toYaml .Values.aurva_controller.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_controller.tolerations }}
|
||||
tolerations:
|
||||
{{ toYaml .Values.aurva_controller.tolerations | indent 8 -}}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_controller.affinity }}
|
||||
affinity:
|
||||
{{ toYaml .Values.aurva_controller.affinity | indent 8 -}}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ .Release.Namespace }}-{{ include "aurva-controller.controllerServiceAccountName" . }}
|
||||
{{- if .Values.aurva_controller.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
- name: {{ .Values.aurva_controller.imagePullSecrets }}
|
||||
{{- end }}
|
||||
containers:
|
||||
- name: {{ template "aurva-controller.fullname" . }}
|
||||
{{- if .Values.aurva_controller.image.digest }}
|
||||
image: "{{ .Values.aurva_controller.image.repository }}@{{ .Values.aurva_controller.image.digest }}"
|
||||
{{- else if .Values.aurva_controller.image.tag }}
|
||||
image: "{{ .Values.aurva_controller.image.repository }}:{{ .Values.aurva_controller.image.tag }}"
|
||||
{{- end }}
|
||||
imagePullPolicy: {{ .Values.aurva_controller.image.pullPolicy }}
|
||||
{{- if .Values.aurva_controller.envFrom }}
|
||||
envFrom:
|
||||
{{- range $value := .Values.aurva_controller.envFrom }}
|
||||
{{- if (eq $value.type "secret") }}
|
||||
- secretRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- else if (eq $value.type "configmap") }}
|
||||
- configMapRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_controller.env }}
|
||||
env:
|
||||
{{- range $key, $value := .Values.aurva_controller.env }}
|
||||
- name: {{ include "application.tplvalues.render" ( dict "value" $key "context" $ ) }}
|
||||
{{ include "application.tplvalues.render" ( dict "value" $value "context" $ ) | indent 10 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.aurva_controller.resources | nindent 12 }}
|
||||
|
||||
{{- if .Values.global.aurva_fastdet.enabled }}
|
||||
- name: aurva-fastdet
|
||||
image: "{{ .Values.aurva_controller.aurvaFastdet.image.repository }}:{{ .Values.aurva_controller.aurvaFastdet.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.aurva_controller.aurvaFastdet.image.pullPolicy }}
|
||||
{{- if .Values.aurva_controller.aurvaFastdet.envFrom }}
|
||||
envFrom:
|
||||
{{- range $value := .Values.aurva_controller.aurvaFastdet.envFrom }}
|
||||
{{- if (eq $value.type "secret") }}
|
||||
- secretRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- else if (eq $value.type "configmap") }}
|
||||
- configMapRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_controller.aurvaFastdet.env }}
|
||||
env:
|
||||
{{- range $key, $value := .Values.aurva_controller.aurvaFastdet.env }}
|
||||
- name: {{ include "application.tplvalues.render" ( dict "value" $key "context" $ ) }}
|
||||
value: {{ include "application.tplvalues.render" ( dict "value" $value "context" $ ) | indent 10 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.aurva_controller.aurvaFastdet.resources | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- with .Values.aurva_controller.dnsConfig }}
|
||||
dnsConfig:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
dnsPolicy: {{ .Values.aurva_controller.dnsPolicy }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_controller.enabled }}
|
||||
{{- if .Values.aurva_controller.autoscaling.enabled }}
|
||||
apiVersion: autoscaling/v2
|
||||
kind: HorizontalPodAutoscaler
|
||||
metadata:
|
||||
name: {{ include "aurva-controller.fullname" . }}-hpa
|
||||
labels:
|
||||
app: {{ include "aurva-controller.fullname" . }}
|
||||
release: {{ .Release.Name }}
|
||||
spec:
|
||||
scaleTargetRef:
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
name: {{ include "aurva-controller.fullname" . }}
|
||||
minReplicas: {{ .Values.aurva_controller.autoscaling.minReplicas }}
|
||||
maxReplicas: {{ .Values.aurva_controller.autoscaling.maxReplicas }}
|
||||
metrics:
|
||||
{{- toYaml .Values.aurva_controller.autoscaling.metrics | nindent 4 }}
|
||||
{{- end}}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,22 @@
|
||||
{{- if .Values.global.aurva_controller.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: {{ .Values.aurva_controller.secret.name }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" $ | nindent 4 }}
|
||||
{{- if .Values.aurva_controller.secret.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_controller.secret.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_controller.secret.annotations }}
|
||||
annotations:
|
||||
{{ toYaml .Values.aurva_controller.secret.annotations | indent 4 }}
|
||||
{{- end }}
|
||||
data:
|
||||
PG_HOST: {{ printf "aurva-dataplane-database.%s.svc.cluster.local" .Release.Namespace | b64enc }}
|
||||
PII_ANALYZER_URL: {{ printf "aurva-pii-analyzer.%s:9090" .Release.Namespace | b64enc }}
|
||||
{{- range $key, $value := .Values.aurva_controller.secret.config }}
|
||||
{{ $key }}: {{ $value | b64enc }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,28 @@
|
||||
{{- if .Values.global.aurva_controller.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "aurva-controller.fullname" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_controller.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_controller.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_controller.annotations }}
|
||||
annotations:
|
||||
{{ include "application.tplvalues.render" ( dict "value" .Values.aurva_controller.annotations "context" $ ) | indent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
type: ClusterIP
|
||||
selector:
|
||||
{{ include "aurva-controller.selectorLabels" . | indent 4 }}
|
||||
{{- if .Values.aurva_controller.podLabels }}
|
||||
{{ toYaml .Values.aurva_controller.podLabels | indent 4 }}
|
||||
{{- end }}
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 9090
|
||||
targetPort: 8085
|
||||
name: http
|
||||
{{- end }}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_controller.enabled }}
|
||||
{{- if or .Values.aurva_controller.enabled .Values.aurva_controller.serviceAccount.create }}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ .Release.Namespace}}-{{ template "aurva-controller.controllerServiceAccountName" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
{{- if .Values.aurva_controller.serviceAccount.annotations }}
|
||||
annotations:
|
||||
{{- range $key, $value := .Values.aurva_controller.serviceAccount.annotations }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- range $key, $value := .Values.aurva_controller.serviceAccount.labels }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,97 @@
|
||||
{{- if .Values.global.aurva_ocr.enabled }}
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_ocr.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_ocr.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- with (mergeOverwrite (deepCopy .Values.global.deploymentAnnotations) .Values.aurva_ocr.annotations) }}
|
||||
annotations:
|
||||
{{- range $key, $value := . }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
name: {{ include "aurva-ocr.fullname" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
spec:
|
||||
replicas: {{ default 4 .Values.aurva_ocr.replicas }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{ include "aurva-ocr.selectorLabels" . | indent 6 }}
|
||||
{{- if .Values.aurva_ocr.strategy }}
|
||||
strategy:
|
||||
{{ toYaml .Values.aurva_ocr.strategy | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if not (kindIs "invalid" .Values.aurva_ocr.revisionHistoryLimit) }}
|
||||
revisionHistoryLimit: {{ .Values.aurva_ocr.revisionHistoryLimit }}
|
||||
{{- end }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{ include "aurva-ocr.selectorLabels" . | indent 8 }}
|
||||
{{- if .Values.aurva_ocr.podLabels }}
|
||||
{{ toYaml .Values.aurva_ocr.podLabels | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if or .Values.aurva_ocr.additionalPodAnnotations }}
|
||||
annotations:
|
||||
{{- end }}
|
||||
{{- with .Values.aurva_ocr.additionalPodAnnotations }}
|
||||
{{ toYaml . | indent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- with .Values.aurva_ocr.priorityClassName | default .Values.global.priorityClassName }}
|
||||
priorityClassName: {{ . }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_ocr.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{ toYaml .Values.aurva_ocr.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_ocr.tolerations }}
|
||||
tolerations:
|
||||
{{ toYaml .Values.aurva_ocr.tolerations | indent 8 -}}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_ocr.affinity }}
|
||||
affinity:
|
||||
{{ toYaml .Values.aurva_ocr.affinity | indent 8 -}}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ .Release.Namespace }}-{{ include "aurva-ocr.ocrServiceAccountName" . }}
|
||||
{{- if .Values.aurva_ocr.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
- name: {{ .Values.aurva_ocr.imagePullSecrets }}
|
||||
{{- end }}
|
||||
containers:
|
||||
- name: {{ template "aurva-ocr.fullname" . }}
|
||||
{{- if .Values.aurva_ocr.image.digest }}
|
||||
image: "{{ .Values.aurva_ocr.image.repository }}@{{ .Values.aurva_ocr.image.digest }}"
|
||||
{{- else if .Values.aurva_ocr.image.tag }}
|
||||
image: "{{ .Values.aurva_ocr.image.repository }}:{{ .Values.aurva_ocr.image.tag }}"
|
||||
{{- end }}
|
||||
imagePullPolicy: {{ .Values.aurva_ocr.image.pullPolicy }}
|
||||
{{- if .Values.aurva_ocr.envFrom }}
|
||||
envFrom:
|
||||
{{- range $value := .Values.aurva_ocr.envFrom }}
|
||||
{{- if (eq .type "secret") }}
|
||||
- secretRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_ocr.env }}
|
||||
env:
|
||||
{{- range $key, $value := .Values.aurva_ocr.env }}
|
||||
- name: {{ include "application.tplvalues.render" ( dict "value" $key "context" $ ) }}
|
||||
{{ include "application.tplvalues.render" ( dict "value" $value "context" $ ) | indent 10 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.aurva_ocr.resources | nindent 12 }}
|
||||
{{- with .Values.aurva_ocr.dnsConfig }}
|
||||
dnsConfig:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
dnsPolicy: {{ .Values.aurva_ocr.dnsPolicy }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,22 @@
|
||||
{{- if .Values.global.aurva_ocr.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: {{ .Values.aurva_ocr.secret.name }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" $ | nindent 4 }}
|
||||
{{- if .Values.aurva_ocr.secret.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_ocr.secret.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_ocr.secret.annotations }}
|
||||
annotations:
|
||||
{{ toYaml .Values.aurva_ocr.secret.annotations | indent 4 }}
|
||||
{{- end }}
|
||||
data:
|
||||
PG_HOST: {{ printf "aurva-dataplane-database.%s.svc.cluster.local" .Release.Namespace | b64enc }}
|
||||
CONTROLLER_URL: {{ printf "aurva-controller.%s:9090" .Release.Namespace | b64enc }}
|
||||
{{- range $key, $value := .Values.aurva_ocr.secret.config }}
|
||||
{{ $key }}: {{ $value | b64enc }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_ocr.enabled }}
|
||||
{{- if or .Values.aurva_ocr.enabled .Values.aurva_ocr.serviceAccount.create }}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ .Release.Namespace}}-{{ template "aurva-ocr.ocrServiceAccountName" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
{{- if .Values.aurva_ocr.serviceAccount.annotations }}
|
||||
annotations:
|
||||
{{- range $key, $value := .Values.aurva_ocr.serviceAccount.annotations }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- range $key, $value := .Values.aurva_ocr.serviceAccount.labels }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,97 @@
|
||||
{{- if .Values.global.aurva_pii_analyzer.enabled }}
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_pii_analyzer.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_pii_analyzer.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- with (mergeOverwrite (deepCopy .Values.global.deploymentAnnotations) .Values.aurva_pii_analyzer.annotations) }}
|
||||
annotations:
|
||||
{{- range $key, $value := . }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
name: {{ include "aurva-pii-analyzer.fullname" . }}
|
||||
namespace: {{ .Release.Namespace }}
|
||||
spec:
|
||||
replicas: {{ default 4 .Values.aurva_pii_analyzer.replicas }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{ include "aurva-pii-analyzer.selectorLabels" . | indent 6 }}
|
||||
{{- if .Values.aurva_pii_analyzer.strategy }}
|
||||
strategy:
|
||||
{{ toYaml .Values.aurva_pii_analyzer.strategy | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if not (kindIs "invalid" .Values.aurva_pii_analyzer.revisionHistoryLimit) }}
|
||||
revisionHistoryLimit: {{ .Values.aurva_pii_analyzer.revisionHistoryLimit }}
|
||||
{{- end }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{ include "aurva-pii-analyzer.selectorLabels" . | indent 8 }}
|
||||
{{- if .Values.aurva_pii_analyzer.podLabels }}
|
||||
{{ toYaml .Values.aurva_pii_analyzer.podLabels | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if or .Values.aurva_pii_analyzer.additionalPodAnnotations }}
|
||||
annotations:
|
||||
{{- end }}
|
||||
{{- with .Values.aurva_pii_analyzer.additionalPodAnnotations }}
|
||||
{{ toYaml . | indent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- with .Values.aurva_pii_analyzer.priorityClassName | default .Values.global.priorityClassName }}
|
||||
priorityClassName: {{ . }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_pii_analyzer.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{ toYaml .Values.aurva_pii_analyzer.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_pii_analyzer.tolerations }}
|
||||
tolerations:
|
||||
{{ toYaml .Values.aurva_pii_analyzer.tolerations | indent 8 -}}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_pii_analyzer.affinity }}
|
||||
affinity:
|
||||
{{ toYaml .Values.aurva_pii_analyzer.affinity | indent 8 -}}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ .Release.Namespace }}-{{ include "aurva-pii-analyzer.piiAnalyzerServiceAccountName" . }}
|
||||
{{- if .Values.aurva_pii_analyzer.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
- name: {{ .Values.aurva_pii_analyzer.imagePullSecrets }}
|
||||
{{- end }}
|
||||
containers:
|
||||
- name: {{ template "aurva-pii-analyzer.fullname" . }}
|
||||
{{- if .Values.aurva_pii_analyzer.image.digest }}
|
||||
image: "{{ .Values.aurva_pii_analyzer.image.repository }}@{{ .Values.aurva_pii_analyzer.image.digest }}"
|
||||
{{- else if .Values.aurva_pii_analyzer.image.tag }}
|
||||
image: "{{ .Values.aurva_pii_analyzer.image.repository }}:{{ .Values.aurva_pii_analyzer.image.tag }}"
|
||||
{{- end }}
|
||||
imagePullPolicy: {{ .Values.aurva_pii_analyzer.image.pullPolicy }}
|
||||
{{- if .Values.aurva_pii_analyzer.envFrom }}
|
||||
envFrom:
|
||||
{{- range $value := .Values.aurva_pii_analyzer.envFrom }}
|
||||
{{- if (eq .type "secret") }}
|
||||
- secretRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_pii_analyzer.env }}
|
||||
env:
|
||||
{{- range $key, $value := .Values.aurva_pii_analyzer.env }}
|
||||
- name: {{ include "application.tplvalues.render" ( dict "value" $key "context" $ ) }}
|
||||
{{ include "application.tplvalues.render" ( dict "value" $value "context" $ ) | indent 10 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.aurva_pii_analyzer.resources | nindent 12 }}
|
||||
{{- with .Values.aurva_pii_analyzer.dnsConfig }}
|
||||
dnsConfig:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
dnsPolicy: {{ .Values.aurva_pii_analyzer.dnsPolicy }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_pii_analyzer.enabled }}
|
||||
{{- if .Values.aurva_pii_analyzer.autoscaling.enabled }}
|
||||
apiVersion: autoscaling/v2
|
||||
kind: HorizontalPodAutoscaler
|
||||
metadata:
|
||||
name: {{ include "aurva-pii-analyzer.fullname" . }}-hpa
|
||||
labels:
|
||||
app: {{ include "aurva-pii-analyzer.fullname" . }}
|
||||
release: {{ .Release.Name }}
|
||||
spec:
|
||||
scaleTargetRef:
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
name: {{ include "aurva-pii-analyzer.fullname" . }}
|
||||
minReplicas: {{ .Values.aurva_pii_analyzer.autoscaling.minReplicas }}
|
||||
maxReplicas: {{ .Values.aurva_pii_analyzer.autoscaling.maxReplicas }}
|
||||
metrics:
|
||||
{{- toYaml .Values.aurva_pii_analyzer.autoscaling.metrics | nindent 4 }}
|
||||
{{- end}}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,22 @@
|
||||
{{- if .Values.global.aurva_pii_analyzer.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: {{ .Values.aurva_pii_analyzer.secret.name }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" $ | nindent 4 }}
|
||||
{{- if .Values.aurva_pii_analyzer.secret.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_pii_analyzer.secret.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_pii_analyzer.secret.annotations }}
|
||||
annotations:
|
||||
{{ toYaml .Values.aurva_pii_analyzer.secret.annotations | indent 4 }}
|
||||
{{- end }}
|
||||
data:
|
||||
PG_HOST: {{ printf "aurva-dataplane-database.%s.svc.cluster.local" .Release.Namespace | b64enc }}
|
||||
CONTROLLER_URL: {{ printf "aurva-controller.%s:9090" .Release.Namespace | b64enc }}
|
||||
{{- range $key, $value := .Values.aurva_pii_analyzer.secret.config }}
|
||||
{{ $key }}: {{ $value | b64enc }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,28 @@
|
||||
{{- if .Values.global.aurva_pii_analyzer.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "aurva-pii-analyzer.fullname" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_pii_analyzer.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_pii_analyzer.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_pii_analyzer.annotations }}
|
||||
annotations:
|
||||
{{ include "application.tplvalues.render" ( dict "value" .Values.aurva_pii_analyzer.annotations "context" $ ) | indent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
type: ClusterIP
|
||||
selector:
|
||||
{{ include "aurva-pii-analyzer.selectorLabels" . | indent 4 }}
|
||||
{{- if .Values.aurva_pii_analyzer.podLabels }}
|
||||
{{ toYaml .Values.aurva_pii_analyzer.podLabels | indent 4 }}
|
||||
{{- end }}
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 9090
|
||||
targetPort: 9999
|
||||
name: http
|
||||
{{- end }}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_pii_analyzer.enabled }}
|
||||
{{- if or .Values.aurva_pii_analyzer.enabled .Values.aurva_pii_analyzer.serviceAccount.create }}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ .Release.Namespace }}-{{ template "aurva-pii-analyzer.piiAnalyzerServiceAccountName" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
{{- if .Values.aurva_pii_analyzer.serviceAccount.annotations }}
|
||||
annotations:
|
||||
{{- range $key, $value := .Values.aurva_pii_analyzer.serviceAccount.annotations }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- range $key, $value := .Values.aurva_pii_analyzer.serviceAccount.labels }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,97 @@
|
||||
{{- if .Values.global.aurva_proxy.enabled }}
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_proxy.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_proxy.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- with (mergeOverwrite (deepCopy .Values.global.deploymentAnnotations) .Values.aurva_proxy.annotations) }}
|
||||
annotations:
|
||||
{{- range $key, $value := . }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
name: {{ include "aurva-proxy.fullname" . }}
|
||||
namespace: {{ .Values.namespaceOverride }}
|
||||
spec:
|
||||
replicas: {{ default 4 .Values.aurva_proxy.replicas }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{ include "aurva-proxy.selectorLabels" . | indent 6 }}
|
||||
{{- if .Values.aurva_proxy.strategy }}
|
||||
strategy:
|
||||
{{ toYaml .Values.aurva_proxy.strategy | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if not (kindIs "invalid" .Values.aurva_proxy.revisionHistoryLimit) }}
|
||||
revisionHistoryLimit: {{ .Values.aurva_proxy.revisionHistoryLimit }}
|
||||
{{- end }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{ include "aurva-proxy.selectorLabels" . | indent 8 }}
|
||||
{{- if .Values.aurva_proxy.podLabels }}
|
||||
{{ toYaml .Values.aurva_proxy.podLabels | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if or .Values.aurva_proxy.additionalPodAnnotations }}
|
||||
annotations:
|
||||
{{- end }}
|
||||
{{- with .Values.aurva_proxy.additionalPodAnnotations }}
|
||||
{{ toYaml . | indent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- with .Values.aurva_proxy.priorityClassName | default .Values.global.priorityClassName }}
|
||||
priorityClassName: {{ . }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_proxy.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{ toYaml .Values.aurva_proxy.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_proxy.tolerations }}
|
||||
tolerations:
|
||||
{{ toYaml .Values.aurva_proxy.tolerations | indent 8 -}}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_proxy.affinity }}
|
||||
affinity:
|
||||
{{ toYaml .Values.aurva_proxy.affinity | indent 8 -}}
|
||||
{{- end }}
|
||||
serviceAccountName: {{ .Release.Name }}-{{ include "aurva-proxy.proxyServiceAccountName" . }}
|
||||
{{- if .Values.aurva_proxy.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
- name: {{ .Values.aurva_proxy.imagePullSecrets }}
|
||||
{{- end }}
|
||||
containers:
|
||||
- name: {{ template "aurva-proxy.fullname" . }}
|
||||
{{- if .Values.aurva_proxy.image.digest }}
|
||||
image: "{{ .Values.aurva_proxy.image.repository }}@{{ .Values.aurva_proxy.image.digest }}"
|
||||
{{- else if .Values.aurva_proxy.image.tag }}
|
||||
image: "{{ .Values.aurva_proxy.image.repository }}:{{ .Values.aurva_proxy.image.tag }}"
|
||||
{{- end }}
|
||||
imagePullPolicy: {{ .Values.aurva_proxy.image.pullPolicy }}
|
||||
{{- if .Values.aurva_proxy.envFrom }}
|
||||
envFrom:
|
||||
{{- range $value := .Values.aurva_proxy.envFrom }}
|
||||
{{- if (eq .type "secret") }}
|
||||
- secretRef:
|
||||
{{- if .name }}
|
||||
name: {{ include "application.tplvalues.render" ( dict "value" $value.name "context" $ ) }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_proxy.env }}
|
||||
env:
|
||||
{{- range $key, $value := .Values.aurva_proxy.env }}
|
||||
- name: {{ include "application.tplvalues.render" ( dict "value" $key "context" $ ) }}
|
||||
{{ include "application.tplvalues.render" ( dict "value" $value "context" $ ) | indent 10 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.aurva_proxy.resources | nindent 12 }}
|
||||
{{- with .Values.aurva_proxy.dnsConfig }}
|
||||
dnsConfig:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
dnsPolicy: {{ .Values.aurva_proxy.dnsPolicy }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_proxy.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: {{ .Values.aurva_proxy.secret.name }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" $ | nindent 4 }}
|
||||
{{- if .Values.aurva_proxy.secret.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_proxy.secret.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
{{- if .Values.aurva_proxy.secret.annotations }}
|
||||
annotations:
|
||||
{{ toYaml .Values.aurva_proxy.secret.annotations | indent 4 }}
|
||||
{{- end }}
|
||||
data:
|
||||
{{- range $key, $value := .Values.aurva_proxy.secret.config }}
|
||||
{{ $key }}: {{ $value | b64enc }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,26 @@
|
||||
{{- if .Values.global.aurva_proxy.enabled }}
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "aurva-proxy.fullname" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- if .Values.aurva_proxy.additionalLabels }}
|
||||
{{ toYaml .Values.aurva_proxy.additionalLabels | indent 4 }}
|
||||
{{- end }}
|
||||
annotations:
|
||||
service.beta.kubernetes.io/aws-load-balancer-type: nlb
|
||||
spec:
|
||||
type: LoadBalancer
|
||||
selector:
|
||||
{{ include "aurva-proxy.selectorLabels" . | indent 4 }}
|
||||
{{- if .Values.aurva_proxy.podLabels }}
|
||||
{{ toYaml .Values.aurva_proxy.podLabels | indent 4 }}
|
||||
{{- end }}
|
||||
ports:
|
||||
- protocol: TCP
|
||||
port: 8089
|
||||
targetPort: 8089
|
||||
name: http
|
||||
{{- end }}
|
||||
@@ -0,0 +1,20 @@
|
||||
{{- if .Values.global.aurva_proxy.enabled }}
|
||||
{{- if or .Values.aurva_proxy.enabled .Values.aurva_proxy.serviceAccount.create }}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: {{ .Release.Name}}-{{ template "aurva-proxy.proxyServiceAccountName" . }}
|
||||
namespace: {{ template "application.namespace" $ }}
|
||||
{{- if .Values.aurva_proxy.serviceAccount.annotations }}
|
||||
annotations:
|
||||
{{- range $key, $value := .Values.aurva_proxy.serviceAccount.annotations }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "application.labels" . | nindent 4 }}
|
||||
{{- range $key, $value := .Values.aurva_proxy.serviceAccount.labels }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,629 @@
|
||||
## Aurva Data Plane
|
||||
## Ref: https://github.com/aurva-io/aurva-charts.git
|
||||
|
||||
|
||||
postgresql:
|
||||
enabled: true
|
||||
fullnameOverride: "aurva-dataplane-database"
|
||||
global:
|
||||
postgresql:
|
||||
auth:
|
||||
postgresPassword: "aurva"
|
||||
database: "controller"
|
||||
# Add toleration to make sure where this postgres db pod should reside (Applicable for production workloads): For more detail ref: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/
|
||||
primary:
|
||||
extendedConfiguration: |
|
||||
max_connections = 300
|
||||
tolerations:
|
||||
# - key: "dedicated"
|
||||
# operator: "Equal"
|
||||
# value: "app"
|
||||
# effect: "NoSchedule"
|
||||
|
||||
# -- Provide a name in place of `aurva`
|
||||
# namespaceOverride: aurva-dataplane
|
||||
|
||||
|
||||
##########################################################
|
||||
# Global Configs
|
||||
##########################################################
|
||||
global:
|
||||
|
||||
aurva_controller:
|
||||
enabled: true
|
||||
aurva_pii_analyzer:
|
||||
enabled: true
|
||||
aurva_ocr:
|
||||
enabled: true
|
||||
aurva_collector:
|
||||
enabled: true
|
||||
aurva_proxy:
|
||||
enabled: false
|
||||
|
||||
|
||||
deploymentAnnotations: {}
|
||||
|
||||
priorityClassName: ""
|
||||
|
||||
##########################################################
|
||||
# Aurva Controller
|
||||
##########################################################
|
||||
aurva_controller:
|
||||
|
||||
# -- Additional labels for aurva-controller
|
||||
additionalLabels: {}
|
||||
|
||||
# -- Annotations on aurva-controller
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
# -- no of replicas for aurva controller
|
||||
replicas: 4
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: 119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-controller
|
||||
tag: "v1.5.8-pre2"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env:
|
||||
- name: NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
apiVersion: v1
|
||||
fieldPath: spec.nodeName
|
||||
- name: NODE_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
apiVersion: v1
|
||||
fieldPath: status.hostIP
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-controller:
|
||||
type: secret
|
||||
name: aurva-controller-secrets
|
||||
|
||||
# -- Resources to be defined for pod
|
||||
resources:
|
||||
limits:
|
||||
memory: 512Mi
|
||||
cpu: 1
|
||||
requests:
|
||||
memory: 256Mi
|
||||
cpu: 0.5
|
||||
|
||||
|
||||
# -- Select nodes to deploy which matches the following labels
|
||||
nodeSelector:
|
||||
# cloud.google.com/gke-nodepool: default-pool
|
||||
# schedule-on: app-workload
|
||||
|
||||
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
# - key: "dedicated"
|
||||
# operator: "Equal"
|
||||
# value: "app"
|
||||
# effect: "NoSchedule"
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
|
||||
# -- [DNS configuration]
|
||||
dnsConfig: {}
|
||||
# -- Alternative DNS policy for application controller pods
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-controller-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
COMPANY_ID: "47c5ed30-c23e-48c3-a510-9c9378867737"
|
||||
PG_USERNAME: "postgres"
|
||||
PG_PASSWORD: "aurva"
|
||||
PG_DBNAME: "controller"
|
||||
AWS_REGION: "ap-south-1"
|
||||
COMMAND_URL: "command.uat.aurva.io:443" # Please update this with ingress URL of command
|
||||
ENVIRONMENT: "uat"
|
||||
PROVIDER_ACCOUNT_ID: "918749230"
|
||||
LOG_ENV: "production"
|
||||
RDS_SCANNER_AVAILABILITY : "true"
|
||||
REDSHIFT_SCANNER_AVAILABILITY : "true"
|
||||
S3_SCANNER_AVAILABILITY : "true"
|
||||
EGRESS_MODE_ONLY: "false"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-controller-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
|
||||
##########################################################
|
||||
# Aurva Collector
|
||||
##########################################################
|
||||
aurva_collector:
|
||||
|
||||
# -- Additional labels for aurva-analyzer
|
||||
additionalLabels: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Annotations on aurva-analyzer
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: 119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-collector
|
||||
tag: "v1.5.8-pre2"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-controller:
|
||||
type: secret
|
||||
name: aurva-collector-secrets
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 400m
|
||||
memory: 256Mi
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 128Mi
|
||||
|
||||
podSecurityContext: {}
|
||||
|
||||
securityContext:
|
||||
privileged: false
|
||||
capabilities:
|
||||
add:
|
||||
# For kernel v5.8 and above we don't need SYS_ADMIN or SYS_RESOURCE
|
||||
# we just need CAP_BPF and CAP_PERFMON. This has been tested on our EKS node
|
||||
# which is on kernel v5.10.x
|
||||
# - BPF
|
||||
# - PERFMON
|
||||
- SYS_ADMIN
|
||||
- SYS_RESOURCE
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
|
||||
volumes:
|
||||
- name: sys-kernal-debug
|
||||
mountPath: /sys/kernel/debug
|
||||
hostPath: /sys/kernel/debug
|
||||
- name: sys-kernal-btf
|
||||
mountPath: /sys/kernel/btf/vmlinux
|
||||
hostPath: /sys/kernel/btf/vmlinux
|
||||
|
||||
# -- Select nodes to deploy which matches the following labels
|
||||
nodeSelector:
|
||||
# cloud.google.com/gke-nodepool: default-pool
|
||||
# schedule-on: app-workload
|
||||
|
||||
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
- operator: Exists
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-collector-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
COMPANY_ID: ""
|
||||
DEPLOYMENT_TYPE: kubernetes
|
||||
LOG_ENV: production
|
||||
TRACE_EGRESS: "true"
|
||||
TRACE_PSQL: "false"
|
||||
SKIP_NAMESPACES: "aurva-dataplane,kube-system,default"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-controller-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
|
||||
##########################################################
|
||||
# Aurva PII Analyzer
|
||||
##########################################################
|
||||
aurva_pii_analyzer:
|
||||
|
||||
# -- Additional labels for aurva-controller
|
||||
additionalLabels: {}
|
||||
|
||||
# -- Annotations on aurva-controller
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
# -- no of replicas for aurva controller
|
||||
replicas: 1
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: 119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-piianalyzer
|
||||
tag: "v1.2.8"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-pii-analyzer:
|
||||
type: secret
|
||||
name: aurva-pii-analyzer-secrets
|
||||
|
||||
# -- Resources to be defined for pod
|
||||
resources:
|
||||
limits:
|
||||
memory: 4Gi
|
||||
cpu: 2
|
||||
requests:
|
||||
memory: 2Gi
|
||||
cpu: 1
|
||||
|
||||
|
||||
# -- Select nodes to deploy which matches the following labels
|
||||
nodeSelector:
|
||||
# cloud.google.com/gke-nodepool: default-pool
|
||||
# schedule-on: app-workload
|
||||
|
||||
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
# - key: "dedicated"
|
||||
# operator: "Equal"
|
||||
# value: "app"
|
||||
# effect: "NoSchedule"
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
|
||||
# -- [DNS configuration]
|
||||
dnsConfig: {}
|
||||
# -- Alternative DNS policy for application controller pods
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-pii-analyzer-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
PG_USERNAME: "postgres"
|
||||
PG_PASSWORD: "aurva"
|
||||
PG_DBNAME: "controller"
|
||||
SCHEDULER_TIME: "1"
|
||||
SUPPORTED_REGION: "US"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-pii-analyzer-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
|
||||
##########################################################
|
||||
# Aurva OCR
|
||||
##########################################################
|
||||
aurva_ocr:
|
||||
|
||||
# -- Additional labels for aurva-controller
|
||||
additionalLabels: {}
|
||||
|
||||
# -- Annotations on aurva-controller
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
# -- no of replicas for aurva controller
|
||||
replicas: 1
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: 119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-ocr
|
||||
tag: "v1.2.8"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-ocr:
|
||||
type: secret
|
||||
name: aurva-ocr-secrets
|
||||
|
||||
# -- Resources to be defined for pod
|
||||
resources:
|
||||
limits:
|
||||
memory: 2Gi
|
||||
cpu: 1
|
||||
requests:
|
||||
memory: 2Gi
|
||||
cpu: 1
|
||||
|
||||
|
||||
# -- Select nodes to deploy which matches the following labels
|
||||
nodeSelector:
|
||||
# cloud.google.com/gke-nodepool: default-pool
|
||||
# schedule-on: app-workload
|
||||
|
||||
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
# - key: "dedicated"
|
||||
# operator: "Equal"
|
||||
# value: "app"
|
||||
# effect: "NoSchedule"
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
|
||||
# -- [DNS configuration]
|
||||
dnsConfig: {}
|
||||
# -- Alternative DNS policy for application controller pods
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-ocr-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
PG_USERNAME: "postgres"
|
||||
PG_PASSWORD: "aurva"
|
||||
PG_DBNAME: "controller"
|
||||
OCR_TIME_LIMIT: "1"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-ocr-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
|
||||
|
||||
##########################################################
|
||||
# Aurva Proxy
|
||||
##########################################################
|
||||
aurva_proxy:
|
||||
|
||||
# -- Additional labels for aurva-proxy
|
||||
additionalLabels: {}
|
||||
|
||||
# -- Annotations on aurva-proxy
|
||||
annotations: {}
|
||||
# "key": "value"
|
||||
|
||||
revisionHistoryLimit: 3
|
||||
|
||||
# -- no of replicas for aurva proxy
|
||||
replicas: 4
|
||||
|
||||
# -- Additional label added on pod which is used in Service's Label Selector
|
||||
podLabels: {}
|
||||
|
||||
# -- Additional Pod Annotations added on pod created by this Deployment
|
||||
additionalPodAnnotations: {}
|
||||
# "key": "value"
|
||||
|
||||
|
||||
# -- Secrets used to pull image
|
||||
imagePullSecrets: ""
|
||||
|
||||
# Image of the app container
|
||||
image:
|
||||
repository: 119191042565.dkr.ecr.ap-south-1.amazonaws.com/aurva-proxy
|
||||
tag: "v1.2.6"
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
# Environment variables to be passed to the app container
|
||||
env: []
|
||||
|
||||
# -- If want to mount Envs from configmap or secret
|
||||
envFrom:
|
||||
aurva-controller:
|
||||
type: secret
|
||||
name: aurva-proxy-secrets
|
||||
|
||||
# -- Resources to be defined for pod
|
||||
resources:
|
||||
limits:
|
||||
memory: 512Mi
|
||||
cpu: 1
|
||||
requests:
|
||||
memory: 256Mi
|
||||
cpu: 0.5
|
||||
|
||||
|
||||
# -- Select nodes to deploy which matches the following labels
|
||||
nodeSelector:
|
||||
# cloud.google.com/gke-nodepool: default-pool
|
||||
# schedule-on: app-workload
|
||||
|
||||
|
||||
# -- Taint tolerations for nodes
|
||||
tolerations:
|
||||
# - key: "dedicated"
|
||||
# operator: "Equal"
|
||||
# value: "app"
|
||||
# effect: "NoSchedule"
|
||||
|
||||
# -- Pod affinity and pod anti-affinity allow you to specify rules about how pods should be placed relative to other pods.
|
||||
affinity:
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: disktype
|
||||
# operator: In
|
||||
# values:
|
||||
# - ssd
|
||||
|
||||
# -- [DNS configuration]
|
||||
dnsConfig: {}
|
||||
# -- Alternative DNS policy for application controller pods
|
||||
dnsPolicy: "ClusterFirst"
|
||||
|
||||
secret:
|
||||
name: "aurva-proxy-secrets"
|
||||
# -- Additional Labels on secrets
|
||||
additionalLabels:
|
||||
# key: value
|
||||
# -- Annotations on secrets
|
||||
annotations:
|
||||
# key: value
|
||||
|
||||
config:
|
||||
# PG_HOST: "aurva-dataplane-database.aurva-dataplane.svc.cluster.local"
|
||||
PG_USERNAME: "postgres"
|
||||
PG_PASSWORD: "aurva"
|
||||
PG_DBNAME: "controller"
|
||||
# CONTROLLER_HOST: "aurva-controller.aurva-dataplane"
|
||||
CONTROLLER_PORT: "9090"
|
||||
COMPANY_ID: "47c5ed30-c23e-48c3-a510-9c9378867737" # TODO: update this with your relevant COMPANY_ID
|
||||
JWT_PUBLIC_KEY: "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfS6iQUtuHtloso4mZeSg0663/a4F\n61UIvWTs5XtI3fE7/7LbQpPD5u5l7xDQpqRjD0wfIT32Y3WgjqyDQTadag==\n-----END PUBLIC KEY-----"
|
||||
PROXY_HOST: "proxy.aurva.io"
|
||||
PROXY_PORT: "8090"
|
||||
|
||||
serviceAccount:
|
||||
# -- Create a service account for the aurva controller
|
||||
create: true
|
||||
# -- Service account name
|
||||
name: aurva-proxy-sa
|
||||
# -- Annotations applied to created service account
|
||||
annotations:
|
||||
# eks.amazonaws.com/role-arn: arn:aws:iam::<account-id>:role/<role-name>
|
||||
# -- Labels applied to created service account
|
||||
labels: {}
|
||||
Reference in New Issue
Block a user