From cb4483006a336d92fc5a3ddee7532e12bf9bc612 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Patryk=20Ma=C5=82ek?= Date: Thu, 15 Feb 2024 16:14:24 +0100 Subject: [PATCH] kong: add RBACs for KongLicense (#1006) --- charts/kong/CHANGELOG.md | 9 +- charts/kong/Chart.yaml | 2 +- .../admin-api-service-clusterip-values.snap | 14 +- .../__snapshots__/custom-labels-values.snap | 28 +- .../kong/ci/__snapshots__/default-values.snap | 28 +- .../__snapshots__/kong-ingress-1-values.snap | 30 +- .../__snapshots__/kong-ingress-2-values.snap | 30 +- .../__snapshots__/kong-ingress-3-values.snap | 30 +- .../__snapshots__/kong-ingress-4-values.snap | 30 +- .../kong-ingress-5-3.1-rbac-values.snap | 912 ++++++++++++++++++ .../ci/__snapshots__/service-account.snap | 28 +- .../single-image-default-values.snap | 28 +- ...est-enterprise-version-3.4.0.0-values.snap | 10 +- .../kong/ci/__snapshots__/test1-values.snap | 32 +- .../kong/ci/__snapshots__/test2-values.snap | 48 +- .../kong/ci/__snapshots__/test3-values.snap | 12 +- .../kong/ci/__snapshots__/test4-values.snap | 14 +- .../kong/ci/__snapshots__/test5-values.snap | 44 +- .../ci/kong-ingress-5-3.1-rbac-values.yaml | 7 + charts/kong/templates/_helpers.tpl | 18 + 20 files changed, 1147 insertions(+), 207 deletions(-) create mode 100644 charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap create mode 100644 charts/kong/ci/kong-ingress-5-3.1-rbac-values.yaml diff --git a/charts/kong/CHANGELOG.md b/charts/kong/CHANGELOG.md index bce8df9c0..410dc2db9 100644 --- a/charts/kong/CHANGELOG.md +++ b/charts/kong/CHANGELOG.md @@ -1,8 +1,11 @@ # Changelog -## Unreleased +## 2.36.0 -Nothing yet. +### Fixed + +* Add `KongLicense` RBAC rules. + [#1006](https://github.com/Kong/charts/pull/1006) ## 2.35.1 @@ -13,7 +16,7 @@ Nothing yet. ## 2.35.0 -### Added +### Added * Added controller's RBAC rules for `KongVault` CRD (installed only when KIC version >= 3.1.0). diff --git a/charts/kong/Chart.yaml b/charts/kong/Chart.yaml index fb7d202fc..81c941976 100644 --- a/charts/kong/Chart.yaml +++ b/charts/kong/Chart.yaml @@ -8,7 +8,7 @@ maintainers: name: kong sources: - https://github.com/Kong/charts/tree/main/charts/kong -version: 2.35.1 +version: 2.36.0 appVersion: "3.5" dependencies: - name: postgresql diff --git a/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap b/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap index e4a642bdf..c72175dd3 100644 --- a/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap +++ b/charts/kong/ci/__snapshots__/admin-api-service-clusterip-values.snap @@ -10,7 +10,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -34,7 +34,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -275,7 +275,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-custom-dbless-config namespace: default - object: @@ -287,7 +287,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-admin namespace: default spec: @@ -310,7 +310,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -338,7 +338,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -365,7 +365,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/custom-labels-values.snap b/charts/kong/ci/__snapshots__/custom-labels-values.snap index 48a17cc2a..25e052ac7 100644 --- a/charts/kong/ci/__snapshots__/custom-labels-values.snap +++ b/charts/kong/ci/__snapshots__/custom-labels-values.snap @@ -10,7 +10,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -85,7 +85,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -109,7 +109,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -409,7 +409,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -658,7 +658,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -678,7 +678,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -743,7 +743,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -767,7 +767,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -784,7 +784,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -798,7 +798,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -827,7 +827,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -855,7 +855,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -871,7 +871,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -882,7 +882,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/default-values.snap b/charts/kong/ci/__snapshots__/default-values.snap index 4a3009ad5..69e476850 100644 --- a/charts/kong/ci/__snapshots__/default-values.snap +++ b/charts/kong/ci/__snapshots__/default-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -411,7 +411,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -659,7 +659,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -678,7 +678,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -742,7 +742,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -765,7 +765,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -781,7 +781,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -794,7 +794,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -822,7 +822,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -849,7 +849,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -864,7 +864,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -874,7 +874,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap index 7ffab2b24..d8afd9d75 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-1-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -405,7 +405,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -431,7 +431,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -679,7 +679,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -698,7 +698,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -762,7 +762,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -785,7 +785,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -801,7 +801,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -823,7 +823,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -851,7 +851,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -878,7 +878,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -893,7 +893,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -903,7 +903,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap index 80ae7822f..62584f64e 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-2-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -405,7 +405,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -433,7 +433,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -681,7 +681,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -700,7 +700,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -764,7 +764,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -787,7 +787,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -803,7 +803,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -825,7 +825,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -853,7 +853,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -880,7 +880,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -895,7 +895,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -905,7 +905,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap index f3cc17157..a6d79ee59 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-3-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -405,7 +405,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -429,7 +429,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -677,7 +677,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -696,7 +696,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -760,7 +760,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -783,7 +783,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -799,7 +799,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -812,7 +812,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -840,7 +840,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -867,7 +867,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -882,7 +882,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -892,7 +892,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap index cadb9ee98..7f754abff 100644 --- a/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap +++ b/charts/kong/ci/__snapshots__/kong-ingress-4-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -405,7 +405,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -464,7 +464,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -712,7 +712,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -731,7 +731,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -795,7 +795,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -818,7 +818,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -834,7 +834,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -865,7 +865,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -893,7 +893,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -920,7 +920,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -935,7 +935,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -945,7 +945,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap b/charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap new file mode 100644 index 000000000..3a5b09a5b --- /dev/null +++ b/charts/kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap @@ -0,0 +1,912 @@ +['kong-ingress-5-3.1-rbac-values'] +SnapShot = """ +- object: + apiVersion: admissionregistration.k8s.io/v1 + kind: ValidatingWebhookConfiguration + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong-validations + namespace: default + webhooks: + - admissionReviewVersions: + - v1beta1 + clientConfig: + caBundle: '###DYNAMIC_FIELD###' + service: + name: chartsnap-kong-validation-webhook + namespace: default + failurePolicy: Ignore + name: validations.kong.konghq.com + objectSelector: + matchExpressions: + - key: owner + operator: NotIn + values: + - helm + rules: + - apiGroups: + - configuration.konghq.com + apiVersions: + - '*' + operations: + - CREATE + - UPDATE + resources: + - kongconsumers + - kongplugins + - kongclusterplugins + - kongingresses + - apiGroups: + - \"\" + apiVersions: + - v1 + operations: + - CREATE + - UPDATE + resources: + - secrets + - services + - apiGroups: + - networking.k8s.io + apiVersions: + - v1 + operations: + - CREATE + - UPDATE + resources: + - ingresses + - apiGroups: + - gateway.networking.k8s.io + apiVersions: + - v1alpha2 + - v1beta1 + - v1 + operations: + - CREATE + - UPDATE + resources: + - gateways + - httproutes + sideEffects: None +- object: + apiVersion: apps/v1 + kind: Deployment + metadata: + labels: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong + namespace: default + spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/name: kong + template: + metadata: + annotations: + kuma.io/gateway: enabled + kuma.io/service-account-token-volume: chartsnap-kong-token + traffic.sidecar.istio.io/includeInboundPorts: \"\" + labels: + app: chartsnap-kong + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + version: \"3.5\" + spec: + automountServiceAccountToken: false + containers: + - args: null + env: + - name: POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: POD_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: CONTROLLER_ADMISSION_WEBHOOK_LISTEN + value: 0.0.0.0:8080 + - name: CONTROLLER_ANONYMOUS_REPORTS + value: \"false\" + - name: CONTROLLER_ELECTION_ID + value: kong-ingress-controller-leader-kong + - name: CONTROLLER_INGRESS_CLASS + value: kong + - name: CONTROLLER_KONG_ADMIN_TLS_SKIP_VERIFY + value: \"true\" + - name: CONTROLLER_KONG_ADMIN_URL + value: https://localhost:8444 + - name: CONTROLLER_PUBLISH_SERVICE + value: default/chartsnap-kong-proxy + image: kong/kubernetes-ingress-controller:3.1.0 + imagePullPolicy: IfNotPresent + livenessProbe: + failureThreshold: 3 + httpGet: + path: /healthz + port: 10254 + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + name: ingress-controller + ports: + - containerPort: 8080 + name: webhook + protocol: TCP + - containerPort: 10255 + name: cmetrics + protocol: TCP + - containerPort: 10254 + name: status + protocol: TCP + readinessProbe: + failureThreshold: 3 + httpGet: + path: /readyz + port: 10254 + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + resources: {} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 1000 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /admission-webhook + name: webhook-cert + readOnly: true + - mountPath: /var/run/secrets/kubernetes.io/serviceaccount + name: chartsnap-kong-token + readOnly: true + - env: + - name: KONG_ADMIN_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_GUI_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_GUI_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_LISTEN + value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl + - name: KONG_ANONYMOUS_REPORTS + value: \"off\" + - name: KONG_CLUSTER_LISTEN + value: \"off\" + - name: KONG_DATABASE + value: \"off\" + - name: KONG_KIC + value: \"on\" + - name: KONG_LUA_PACKAGE_PATH + value: /opt/?.lua;/opt/?/init.lua;; + - name: KONG_NGINX_WORKER_PROCESSES + value: \"2\" + - name: KONG_PORTAL_API_ACCESS_LOG + value: /dev/stdout + - name: KONG_PORTAL_API_ERROR_LOG + value: /dev/stderr + - name: KONG_PORT_MAPS + value: 80:8000, 443:8443 + - name: KONG_PREFIX + value: /kong_prefix/ + - name: KONG_PROXY_ACCESS_LOG + value: /dev/stdout + - name: KONG_PROXY_ERROR_LOG + value: /dev/stderr + - name: KONG_PROXY_LISTEN + value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl + - name: KONG_PROXY_STREAM_ACCESS_LOG + value: /dev/stdout basic + - name: KONG_PROXY_STREAM_ERROR_LOG + value: /dev/stderr + - name: KONG_ROUTER_FLAVOR + value: traditional + - name: KONG_STATUS_ACCESS_LOG + value: \"off\" + - name: KONG_STATUS_ERROR_LOG + value: /dev/stderr + - name: KONG_STATUS_LISTEN + value: 0.0.0.0:8100, [::]:8100 + - name: KONG_STREAM_LISTEN + value: \"off\" + - name: KONG_NGINX_DAEMON + value: \"off\" + image: kong:3.5 + imagePullPolicy: IfNotPresent + lifecycle: + preStop: + exec: + command: + - kong + - quit + - --wait=15 + livenessProbe: + failureThreshold: 3 + httpGet: + path: /status + port: status + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + name: proxy + ports: + - containerPort: 8000 + name: proxy + protocol: TCP + - containerPort: 8443 + name: proxy-tls + protocol: TCP + - containerPort: 8100 + name: status + protocol: TCP + readinessProbe: + failureThreshold: 3 + httpGet: + path: /status/ready + port: status + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + resources: {} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 1000 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /kong_prefix/ + name: chartsnap-kong-prefix-dir + - mountPath: /tmp + name: chartsnap-kong-tmp + initContainers: + - command: + - rm + - -vrf + - $KONG_PREFIX/pids + env: + - name: KONG_ADMIN_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_GUI_ACCESS_LOG + value: /dev/stdout + - name: KONG_ADMIN_GUI_ERROR_LOG + value: /dev/stderr + - name: KONG_ADMIN_LISTEN + value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl + - name: KONG_ANONYMOUS_REPORTS + value: \"off\" + - name: KONG_CLUSTER_LISTEN + value: \"off\" + - name: KONG_DATABASE + value: \"off\" + - name: KONG_KIC + value: \"on\" + - name: KONG_LUA_PACKAGE_PATH + value: /opt/?.lua;/opt/?/init.lua;; + - name: KONG_NGINX_WORKER_PROCESSES + value: \"2\" + - name: KONG_PORTAL_API_ACCESS_LOG + value: /dev/stdout + - name: KONG_PORTAL_API_ERROR_LOG + value: /dev/stderr + - name: KONG_PORT_MAPS + value: 80:8000, 443:8443 + - name: KONG_PREFIX + value: /kong_prefix/ + - name: KONG_PROXY_ACCESS_LOG + value: /dev/stdout + - name: KONG_PROXY_ERROR_LOG + value: /dev/stderr + - name: KONG_PROXY_LISTEN + value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl + - name: KONG_PROXY_STREAM_ACCESS_LOG + value: /dev/stdout basic + - name: KONG_PROXY_STREAM_ERROR_LOG + value: /dev/stderr + - name: KONG_ROUTER_FLAVOR + value: traditional + - name: KONG_STATUS_ACCESS_LOG + value: \"off\" + - name: KONG_STATUS_ERROR_LOG + value: /dev/stderr + - name: KONG_STATUS_LISTEN + value: 0.0.0.0:8100, [::]:8100 + - name: KONG_STREAM_LISTEN + value: \"off\" + image: kong:3.5 + imagePullPolicy: IfNotPresent + name: clear-stale-pid + resources: {} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 1000 + seccompProfile: + type: RuntimeDefault + volumeMounts: + - mountPath: /kong_prefix/ + name: chartsnap-kong-prefix-dir + - mountPath: /tmp + name: chartsnap-kong-tmp + securityContext: {} + serviceAccountName: chartsnap-kong + terminationGracePeriodSeconds: 30 + volumes: + - emptyDir: + sizeLimit: 256Mi + name: chartsnap-kong-prefix-dir + - emptyDir: + sizeLimit: 1Gi + name: chartsnap-kong-tmp + - name: chartsnap-kong-token + projected: + sources: + - serviceAccountToken: + expirationSeconds: 3607 + path: token + - configMap: + items: + - key: ca.crt + path: ca.crt + name: kube-root-ca.crt + - downwardAPI: + items: + - fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + path: namespace + - name: webhook-cert + secret: + secretName: chartsnap-kong-validation-webhook-keypair +- object: + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRole + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong + rules: + - apiGroups: + - configuration.konghq.com + resources: + - kongupstreampolicies + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongupstreampolicies/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumergroups + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumergroups/status + verbs: + - get + - patch + - update + - apiGroups: + - \"\" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - \"\" + resources: + - nodes + verbs: + - list + - watch + - apiGroups: + - \"\" + resources: + - pods + verbs: + - get + - list + - watch + - apiGroups: + - \"\" + resources: + - secrets + verbs: + - list + - watch + - apiGroups: + - \"\" + resources: + - services + verbs: + - get + - list + - watch + - apiGroups: + - \"\" + resources: + - services/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - ingressclassparameterses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumers + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongconsumers/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongingresses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongplugins + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongplugins/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - tcpingresses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - tcpingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - udpingresses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - udpingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - get + - patch + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - konglicenses + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - konglicenses/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongvaults + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongvaults/status + verbs: + - get + - patch + - update + - apiGroups: + - configuration.konghq.com + resources: + - kongclusterplugins + verbs: + - get + - list + - watch + - apiGroups: + - configuration.konghq.com + resources: + - kongclusterplugins/status + verbs: + - get + - patch + - update + - apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - list + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +- object: + apiVersion: rbac.authorization.k8s.io/v1 + kind: ClusterRoleBinding + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: chartsnap-kong + subjects: + - kind: ServiceAccount + name: chartsnap-kong + namespace: default +- object: + apiVersion: rbac.authorization.k8s.io/v1 + kind: Role + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong + namespace: default + rules: + - apiGroups: + - \"\" + resources: + - configmaps + - pods + - secrets + - namespaces + verbs: + - get + - apiGroups: + - \"\" + resourceNames: + - kong-ingress-controller-leader-kong-kong + resources: + - configmaps + verbs: + - get + - update + - apiGroups: + - \"\" + resources: + - configmaps + verbs: + - create + - apiGroups: + - \"\" + - coordination.k8s.io + resources: + - configmaps + - leases + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - apiGroups: + - \"\" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - \"\" + resources: + - services + verbs: + - get +- object: + apiVersion: rbac.authorization.k8s.io/v1 + kind: RoleBinding + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong + namespace: default + roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: chartsnap-kong + subjects: + - kind: ServiceAccount + name: chartsnap-kong + namespace: default +- object: + apiVersion: v1 + data: + tls.crt: '###DYNAMIC_FIELD###' + tls.key: '###DYNAMIC_FIELD###' + kind: Secret + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong-validation-webhook-ca-keypair + namespace: default + type: kubernetes.io/tls +- object: + apiVersion: v1 + data: + tls.crt: '###DYNAMIC_FIELD###' + tls.key: '###DYNAMIC_FIELD###' + kind: Secret + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong-validation-webhook-keypair + namespace: default + type: kubernetes.io/tls +- object: + apiVersion: v1 + kind: Service + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong-manager + namespace: default + spec: + ports: + - name: kong-manager + port: 8002 + protocol: TCP + targetPort: 8002 + - name: kong-manager-tls + port: 8445 + protocol: TCP + targetPort: 8445 + selector: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/name: kong + type: NodePort +- object: + apiVersion: v1 + kind: Service + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + enable-metrics: \"true\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong-proxy + namespace: default + spec: + ports: + - name: kong-proxy + port: 80 + protocol: TCP + targetPort: 8000 + - name: kong-proxy-tls + port: 443 + protocol: TCP + targetPort: 8443 + selector: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/name: kong + type: LoadBalancer +- object: + apiVersion: v1 + kind: Service + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong-validation-webhook + namespace: default + spec: + ports: + - name: webhook + port: 443 + protocol: TCP + targetPort: webhook + selector: + app.kubernetes.io/component: app + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 +- object: + apiVersion: v1 + kind: ServiceAccount + metadata: + labels: + app.kubernetes.io/instance: chartsnap + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: kong + app.kubernetes.io/version: \"3.5\" + helm.sh/chart: kong-2.36.0 + name: chartsnap-kong + namespace: default +""" diff --git a/charts/kong/ci/__snapshots__/service-account.snap b/charts/kong/ci/__snapshots__/service-account.snap index 17b345ed2..8192a6dd8 100644 --- a/charts/kong/ci/__snapshots__/service-account.snap +++ b/charts/kong/ci/__snapshots__/service-account.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -405,7 +405,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -653,7 +653,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -672,7 +672,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -736,7 +736,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -759,7 +759,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -775,7 +775,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -788,7 +788,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -816,7 +816,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -843,7 +843,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -858,7 +858,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -868,7 +868,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: my-kong-sa namespace: default """ diff --git a/charts/kong/ci/__snapshots__/single-image-default-values.snap b/charts/kong/ci/__snapshots__/single-image-default-values.snap index 8ff4201e6..dd02ebf08 100644 --- a/charts/kong/ci/__snapshots__/single-image-default-values.snap +++ b/charts/kong/ci/__snapshots__/single-image-default-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -411,7 +411,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -659,7 +659,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -678,7 +678,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -742,7 +742,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -765,7 +765,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -781,7 +781,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -794,7 +794,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -822,7 +822,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -849,7 +849,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -864,7 +864,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -874,7 +874,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/test-enterprise-version-3.4.0.0-values.snap b/charts/kong/ci/__snapshots__/test-enterprise-version-3.4.0.0-values.snap index a954f812e..c8d5ad2a0 100644 --- a/charts/kong/ci/__snapshots__/test-enterprise-version-3.4.0.0-values.snap +++ b/charts/kong/ci/__snapshots__/test-enterprise-version-3.4.0.0-values.snap @@ -10,7 +10,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -33,7 +33,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -250,7 +250,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -278,7 +278,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -305,7 +305,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/test1-values.snap b/charts/kong/ci/__snapshots__/test1-values.snap index 4e3848904..841e410a9 100644 --- a/charts/kong/ci/__snapshots__/test1-values.snap +++ b/charts/kong/ci/__snapshots__/test1-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -106,7 +106,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" environment: test - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -448,7 +448,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -474,7 +474,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -498,7 +498,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -746,7 +746,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -765,7 +765,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -829,7 +829,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -852,7 +852,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -868,7 +868,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -881,7 +881,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -909,7 +909,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -936,7 +936,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -951,7 +951,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: ServiceAccount @@ -961,7 +961,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/test2-values.snap b/charts/kong/ci/__snapshots__/test2-values.snap index 4e4688cbc..823d98751 100644 --- a/charts/kong/ci/__snapshots__/test2-values.snap +++ b/charts/kong/ci/__snapshots__/test2-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -84,7 +84,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -112,7 +112,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -725,7 +725,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-init-migrations namespace: default spec: @@ -741,7 +741,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: kong-init-migrations spec: automountServiceAccountToken: false @@ -978,7 +978,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-post-upgrade-migrations namespace: default spec: @@ -994,7 +994,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: kong-post-upgrade-migrations spec: automountServiceAccountToken: false @@ -1233,7 +1233,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-pre-upgrade-migrations namespace: default spec: @@ -1249,7 +1249,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: kong-pre-upgrade-migrations spec: automountServiceAccountToken: false @@ -1482,7 +1482,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -1506,7 +1506,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -1549,7 +1549,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -1568,7 +1568,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -1632,7 +1632,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-default namespace: default rules: @@ -1850,7 +1850,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -1870,7 +1870,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-default namespace: default roleRef: @@ -1896,7 +1896,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-bash-wait-for-postgres namespace: default - object: @@ -1918,7 +1918,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -1934,7 +1934,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -1962,7 +1962,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -1990,7 +1990,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -2025,7 +2025,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -2040,7 +2040,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: Service @@ -2100,7 +2100,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/test3-values.snap b/charts/kong/ci/__snapshots__/test3-values.snap index 19e84fa6c..22448a261 100644 --- a/charts/kong/ci/__snapshots__/test3-values.snap +++ b/charts/kong/ci/__snapshots__/test3-values.snap @@ -10,7 +10,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -34,7 +34,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -296,7 +296,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-custom-dbless-config namespace: default - object: @@ -308,7 +308,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -336,7 +336,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -363,7 +363,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/test4-values.snap b/charts/kong/ci/__snapshots__/test4-values.snap index 496dc250e..9a2b7fcd4 100644 --- a/charts/kong/ci/__snapshots__/test4-values.snap +++ b/charts/kong/ci/__snapshots__/test4-values.snap @@ -10,7 +10,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -34,7 +34,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -272,7 +272,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -305,7 +305,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-custom-dbless-config namespace: default - object: @@ -317,7 +317,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -345,7 +345,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -380,7 +380,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/__snapshots__/test5-values.snap b/charts/kong/ci/__snapshots__/test5-values.snap index 020e83507..b0a4d8f20 100644 --- a/charts/kong/ci/__snapshots__/test5-values.snap +++ b/charts/kong/ci/__snapshots__/test5-values.snap @@ -9,7 +9,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validations namespace: default webhooks: @@ -83,7 +83,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default spec: @@ -111,7 +111,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 version: \"3.5\" spec: automountServiceAccountToken: false @@ -695,7 +695,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-init-migrations namespace: default spec: @@ -711,7 +711,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: kong-init-migrations spec: automountServiceAccountToken: false @@ -933,7 +933,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-post-upgrade-migrations namespace: default spec: @@ -949,7 +949,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: kong-post-upgrade-migrations spec: automountServiceAccountToken: false @@ -1173,7 +1173,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-pre-upgrade-migrations namespace: default spec: @@ -1189,7 +1189,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: kong-pre-upgrade-migrations spec: automountServiceAccountToken: false @@ -1407,7 +1407,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -1431,7 +1431,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong rules: - apiGroups: @@ -1679,7 +1679,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong roleRef: apiGroup: rbac.authorization.k8s.io @@ -1698,7 +1698,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default rules: @@ -1762,7 +1762,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default roleRef: @@ -1788,7 +1788,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-bash-wait-for-postgres namespace: default - object: @@ -1803,7 +1803,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-ca-keypair namespace: default type: kubernetes.io/tls @@ -1819,7 +1819,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook-keypair namespace: default type: kubernetes.io/tls @@ -1847,7 +1847,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-manager namespace: default spec: @@ -1875,7 +1875,7 @@ SnapShot = """ app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" enable-metrics: \"true\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-proxy namespace: default spec: @@ -1902,7 +1902,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong-validation-webhook namespace: default spec: @@ -1917,7 +1917,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 - object: apiVersion: v1 kind: Service @@ -1977,7 +1977,7 @@ SnapShot = """ app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: kong app.kubernetes.io/version: \"3.5\" - helm.sh/chart: kong-2.35.1 + helm.sh/chart: kong-2.36.0 name: chartsnap-kong namespace: default """ diff --git a/charts/kong/ci/kong-ingress-5-3.1-rbac-values.yaml b/charts/kong/ci/kong-ingress-5-3.1-rbac-values.yaml new file mode 100644 index 000000000..0e5d26acc --- /dev/null +++ b/charts/kong/ci/kong-ingress-5-3.1-rbac-values.yaml @@ -0,0 +1,7 @@ +env: + anonymous_reports: "off" +ingressController: + env: + anonymous_reports: "false" + image: + tag: "3.1.0" diff --git a/charts/kong/templates/_helpers.tpl b/charts/kong/templates/_helpers.tpl index e47933627..fe5c2ef91 100644 --- a/charts/kong/templates/_helpers.tpl +++ b/charts/kong/templates/_helpers.tpl @@ -1641,6 +1641,24 @@ resource roles into their separate templates. - get - list - watch +{{- if (semverCompare ">= 3.1.0" (include "kong.effectiveVersion" .Values.ingressController.image)) }} +- apiGroups: + - configuration.konghq.com + resources: + - konglicenses + verbs: + - get + - list + - watch +- apiGroups: + - configuration.konghq.com + resources: + - konglicenses/status + verbs: + - get + - patch + - update +{{- end -}} {{- end -}} {{/*