diff --git a/assets/rancher-gke-operator-crd/rancher-gke-operator-crd-106.0.0+up1.11.0-rc.1.tgz b/assets/rancher-gke-operator-crd/rancher-gke-operator-crd-106.0.0+up1.11.0-rc.1.tgz new file mode 100644 index 0000000000..87f03f367c Binary files /dev/null and b/assets/rancher-gke-operator-crd/rancher-gke-operator-crd-106.0.0+up1.11.0-rc.1.tgz differ diff --git a/assets/rancher-gke-operator/rancher-gke-operator-106.0.0+up1.11.0-rc.1.tgz b/assets/rancher-gke-operator/rancher-gke-operator-106.0.0+up1.11.0-rc.1.tgz new file mode 100644 index 0000000000..c3ad649833 Binary files /dev/null and b/assets/rancher-gke-operator/rancher-gke-operator-106.0.0+up1.11.0-rc.1.tgz differ diff --git a/charts/rancher-gke-operator-crd/106.0.0+up1.11.0-rc.1/Chart.yaml b/charts/rancher-gke-operator-crd/106.0.0+up1.11.0-rc.1/Chart.yaml new file mode 100644 index 0000000000..fb0a588d2e --- /dev/null +++ b/charts/rancher-gke-operator-crd/106.0.0+up1.11.0-rc.1/Chart.yaml @@ -0,0 +1,12 @@ +annotations: + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/release-name: rancher-gke-operator-crd +apiVersion: v2 +appVersion: 1.11.0-rc.1 +description: GKE Operator CustomResourceDefinitions +name: rancher-gke-operator-crd +version: 106.0.0+up1.11.0-rc.1 diff --git a/charts/rancher-gke-operator-crd/106.0.0+up1.11.0-rc.1/templates/crds.yaml b/charts/rancher-gke-operator-crd/106.0.0+up1.11.0-rc.1/templates/crds.yaml new file mode 100644 index 0000000000..53fed0719c --- /dev/null +++ b/charts/rancher-gke-operator-crd/106.0.0+up1.11.0-rc.1/templates/crds.yaml @@ -0,0 +1,272 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + helm.sh/resource-policy: keep + name: gkeclusterconfigs.gke.cattle.io +spec: + group: gke.cattle.io + names: + kind: GKEClusterConfig + plural: gkeclusterconfigs + shortNames: + - gkecc + singular: gkeclusterconfig + preserveUnknownFields: false + scope: Namespaced + versions: + - name: v1 + schema: + openAPIV3Schema: + properties: + spec: + properties: + autopilotConfig: + nullable: true + properties: + enabled: + type: boolean + type: object + clusterAddons: + nullable: true + properties: + horizontalPodAutoscaling: + type: boolean + httpLoadBalancing: + type: boolean + networkPolicyConfig: + type: boolean + type: object + clusterIpv4Cidr: + nullable: true + type: string + clusterName: + nullable: true + type: string + customerManagedEncryptionKey: + nullable: true + properties: + keyName: + nullable: true + type: string + ringName: + nullable: true + type: string + type: object + description: + nullable: true + type: string + enableKubernetesAlpha: + nullable: true + type: boolean + googleCredentialSecret: + nullable: true + type: string + imported: + type: boolean + ipAllocationPolicy: + nullable: true + properties: + clusterIpv4CidrBlock: + nullable: true + type: string + clusterSecondaryRangeName: + nullable: true + type: string + createSubnetwork: + type: boolean + nodeIpv4CidrBlock: + nullable: true + type: string + servicesIpv4CidrBlock: + nullable: true + type: string + servicesSecondaryRangeName: + nullable: true + type: string + subnetworkName: + nullable: true + type: string + useIpAliases: + type: boolean + type: object + kubernetesVersion: + nullable: true + type: string + labels: + additionalProperties: + nullable: true + type: string + nullable: true + type: object + locations: + items: + nullable: true + type: string + nullable: true + type: array + loggingService: + nullable: true + type: string + maintenanceWindow: + nullable: true + type: string + masterAuthorizedNetworks: + nullable: true + properties: + cidrBlocks: + items: + properties: + cidrBlock: + nullable: true + type: string + displayName: + nullable: true + type: string + type: object + nullable: true + type: array + enabled: + type: boolean + type: object + monitoringService: + nullable: true + type: string + network: + nullable: true + type: string + networkPolicyEnabled: + nullable: true + type: boolean + nodePools: + items: + properties: + autoscaling: + nullable: true + properties: + enabled: + type: boolean + maxNodeCount: + type: integer + minNodeCount: + type: integer + type: object + config: + nullable: true + properties: + bootDiskKmsKey: + nullable: true + type: string + diskSizeGb: + type: integer + diskType: + nullable: true + type: string + imageType: + nullable: true + type: string + labels: + additionalProperties: + nullable: true + type: string + nullable: true + type: object + localSsdCount: + type: integer + machineType: + nullable: true + type: string + oauthScopes: + items: + nullable: true + type: string + nullable: true + type: array + preemptible: + type: boolean + serviceAccount: + nullable: true + type: string + tags: + items: + nullable: true + type: string + nullable: true + type: array + taints: + items: + properties: + effect: + nullable: true + type: string + key: + nullable: true + type: string + value: + nullable: true + type: string + type: object + nullable: true + type: array + type: object + initialNodeCount: + nullable: true + type: integer + management: + nullable: true + properties: + autoRepair: + type: boolean + autoUpgrade: + type: boolean + type: object + maxPodsConstraint: + nullable: true + type: integer + name: + nullable: true + type: string + version: + nullable: true + type: string + type: object + nullable: true + type: array + privateClusterConfig: + nullable: true + properties: + enablePrivateEndpoint: + type: boolean + enablePrivateNodes: + type: boolean + masterIpv4CidrBlock: + nullable: true + type: string + type: object + projectID: + nullable: true + type: string + region: + nullable: true + type: string + subnetwork: + nullable: true + type: string + zone: + nullable: true + type: string + type: object + status: + properties: + failureMessage: + nullable: true + type: string + phase: + nullable: true + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/Chart.yaml b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/Chart.yaml new file mode 100644 index 0000000000..5eacb89503 --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/Chart.yaml @@ -0,0 +1,20 @@ +annotations: + catalog.cattle.io/auto-install: rancher-gke-operator-crd=match + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/kube-version: '>= 1.30.0-0 < 1.33.0-0' + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/provides-gvr: gkeclusterconfigs.gke.cattle.io/v1 + catalog.cattle.io/rancher-version: '>= 2.11.0-0 < 2.12.0-0' + catalog.cattle.io/release-name: rancher-gke-operator + catalog.cattle.io/scope: management +apiVersion: v2 +appVersion: 1.11.0-rc.1 +description: A Helm chart for provisioning GKE clusters +home: https://github.com/rancher/gke-operator +name: rancher-gke-operator +sources: +- https://github.com/rancher/gke-operator +version: 106.0.0+up1.11.0-rc.1 diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/NOTES.txt b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/NOTES.txt new file mode 100644 index 0000000000..238173d1bd --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/NOTES.txt @@ -0,0 +1,4 @@ +You have deployed the Rancher GKE operator +Version: {{ .Chart.AppVersion }} +Description: This operator provisions GKE clusters +from GKEClusterConfig CRs. diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/_helpers.tpl b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/_helpers.tpl new file mode 100644 index 0000000000..de3b332f6a --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/_helpers.tpl @@ -0,0 +1,25 @@ +{{/* vim: set filetype=mustache: */}} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} + +{{/* +Windows cluster will add default taint for linux nodes, +add below linux tolerations to workloads could be scheduled to those linux nodes +*/}} +{{- define "linux-node-tolerations" -}} +- key: "cattle.io/os" + value: "linux" + effect: "NoSchedule" + operator: "Equal" +{{- end -}} + +{{- define "linux-node-selector" -}} +kubernetes.io/os: linux +{{- end -}} + diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/clusterrole.yaml b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/clusterrole.yaml new file mode 100644 index 0000000000..7c352696ee --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/clusterrole.yaml @@ -0,0 +1,15 @@ +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: gke-operator + namespace: cattle-system +rules: + - apiGroups: [''] + resources: ['secrets'] + verbs: ['get', 'list', 'create', 'watch'] + - apiGroups: ['gke.cattle.io'] + resources: ['gkeclusterconfigs'] + verbs: ['get', 'list', 'update', 'watch'] + - apiGroups: ['gke.cattle.io'] + resources: ['gkeclusterconfigs/status'] + verbs: ['update'] diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/clusterrolebinding.yaml b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/clusterrolebinding.yaml new file mode 100644 index 0000000000..e2af390c71 --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/clusterrolebinding.yaml @@ -0,0 +1,13 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: gke-operator + namespace: cattle-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: gke-operator +subjects: +- kind: ServiceAccount + name: gke-operator + namespace: cattle-system diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/deployment.yaml b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/deployment.yaml new file mode 100644 index 0000000000..731fa1d4c2 --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/deployment.yaml @@ -0,0 +1,69 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: gke-config-operator + namespace: cattle-system +spec: + replicas: 1 + selector: + matchLabels: + ke.cattle.io/operator: gke + template: + metadata: + labels: + ke.cattle.io/operator: gke + spec: + nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} +{{- if .Values.nodeSelector }} +{{ toYaml .Values.nodeSelector | indent 8 }} +{{- end }} + tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} +{{- if .Values.tolerations }} +{{ toYaml .Values.tolerations | indent 8 }} +{{- end }} + serviceAccountName: gke-operator + {{- if .Values.priorityClassName }} + priorityClassName: "{{.Values.priorityClassName}}" + {{- end }} + securityContext: + fsGroup: 1007 + runAsUser: 1007 + containers: + - name: rancher-gke-operator + image: '{{ template "system_default_registry" $ }}{{ $.Values.gkeOperator.image.repository }}:{{ $.Values.gkeOperator.image.tag }}' + imagePullPolicy: IfNotPresent + args: ["-debug={{ .Values.gkeOperator.debug | default false }}"] + env: + - name: HTTP_PROXY + value: {{ .Values.httpProxy }} + - name: HTTPS_PROXY + value: {{ .Values.httpsProxy }} + - name: NO_PROXY + value: {{ .Values.noProxy }} + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + privileged: false + capabilities: + drop: + - ALL +{{- if .Values.additionalTrustedCAs }} + # gke-operator mounts the additional CAs in two places: + volumeMounts: + # This directory is owned by the gke-operator user so c_rehash works here. + - mountPath: /etc/rancher/ssl/ca-additional.pem + name: tls-ca-additional-volume + subPath: ca-additional.pem + readOnly: true + # This directory is root-owned so c_rehash doesn't work here, + # but the cert is here in case update-ca-certificates is called in the future or by the OS. + - mountPath: /etc/pki/trust/anchors/ca-additional.pem + name: tls-ca-additional-volume + subPath: ca-additional.pem + readOnly: true + volumes: + - name: tls-ca-additional-volume + secret: + defaultMode: 0400 + secretName: tls-ca-additional + {{- end }} diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/serviceaccount.yaml b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/serviceaccount.yaml new file mode 100644 index 0000000000..ba52af6280 --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/templates/serviceaccount.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + namespace: cattle-system + name: gke-operator diff --git a/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/values.yaml b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/values.yaml new file mode 100644 index 0000000000..5eaf19baf0 --- /dev/null +++ b/charts/rancher-gke-operator/106.0.0+up1.11.0-rc.1/values.yaml @@ -0,0 +1,23 @@ +global: + cattle: + systemDefaultRegistry: "" + +gkeOperator: + image: + repository: rancher/gke-operator + tag: v1.11.0-rc.1 + debug: false + +httpProxy: "" +httpsProxy: "" +noProxy: "" +additionalTrustedCAs: false +## Node labels for pod assignment +## Ref: https://kubernetes.io/docs/user-guide/node-selection/ +## +nodeSelector: {} +## List of node taints to tolerate (requires Kubernetes >= 1.6) +tolerations: [] + +## PriorityClassName assigned to deployment. +priorityClassName: "" diff --git a/index.yaml b/index.yaml index 2e38d6f3ba..9c3645c108 100755 --- a/index.yaml +++ b/index.yaml @@ -13015,6 +13015,30 @@ entries: - assets/rancher-gatekeeper-crd/rancher-gatekeeper-crd-101.0.0+up3.9.0.tgz version: 101.0.0+up3.9.0 rancher-gke-operator: + - annotations: + catalog.cattle.io/auto-install: rancher-gke-operator-crd=match + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/kube-version: '>= 1.30.0-0 < 1.33.0-0' + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/provides-gvr: gkeclusterconfigs.gke.cattle.io/v1 + catalog.cattle.io/rancher-version: '>= 2.11.0-0 < 2.12.0-0' + catalog.cattle.io/release-name: rancher-gke-operator + catalog.cattle.io/scope: management + apiVersion: v2 + appVersion: 1.11.0-rc.1 + created: "2025-01-28T18:11:05.437288479+01:00" + description: A Helm chart for provisioning GKE clusters + digest: e8d9bf6f790cf7245b24ae66121b8e3cf7553b1498fbbe228d63a929583d817e + home: https://github.com/rancher/gke-operator + name: rancher-gke-operator + sources: + - https://github.com/rancher/gke-operator + urls: + - assets/rancher-gke-operator/rancher-gke-operator-106.0.0+up1.11.0-rc.1.tgz + version: 106.0.0+up1.11.0-rc.1 - annotations: catalog.cattle.io/auto-install: rancher-gke-operator-crd=match catalog.cattle.io/certified: rancher @@ -13448,6 +13472,22 @@ entries: - assets/rancher-gke-operator/rancher-gke-operator-101.0.0+up1.1.5.tgz version: 101.0.0+up1.1.5 rancher-gke-operator-crd: + - annotations: + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/release-name: rancher-gke-operator-crd + apiVersion: v2 + appVersion: 1.11.0-rc.1 + created: "2025-01-28T18:11:07.42843071+01:00" + description: GKE Operator CustomResourceDefinitions + digest: cb8efa566e5b581ef404299ec478aaadf5826fa62c60d855664e009ce59f640d + name: rancher-gke-operator-crd + urls: + - assets/rancher-gke-operator-crd/rancher-gke-operator-crd-106.0.0+up1.11.0-rc.1.tgz + version: 106.0.0+up1.11.0-rc.1 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true" diff --git a/packages/rancher-gke-operator/rancher-gke-operator-crd/package.yaml b/packages/rancher-gke-operator/rancher-gke-operator-crd/package.yaml index 3bff7f4e1d..0b283aebd2 100644 --- a/packages/rancher-gke-operator/rancher-gke-operator-crd/package.yaml +++ b/packages/rancher-gke-operator/rancher-gke-operator-crd/package.yaml @@ -1,2 +1,2 @@ -url: https://github.com/rancher/gke-operator/releases/download/v1.10.0/rancher-gke-operator-crd-1.10.0.tgz -version: 105.0.0 +url: https://github.com/rancher/gke-operator/releases/download/v1.11.0-rc.1/rancher-gke-operator-crd-1.11.0-rc.1.tgz +version: 106.0.0 diff --git a/packages/rancher-gke-operator/rancher-gke-operator/generated-changes/patch/Chart.yaml.patch b/packages/rancher-gke-operator/rancher-gke-operator/generated-changes/patch/Chart.yaml.patch index 889934ed81..c838b1608c 100644 --- a/packages/rancher-gke-operator/rancher-gke-operator/generated-changes/patch/Chart.yaml.patch +++ b/packages/rancher-gke-operator/rancher-gke-operator/generated-changes/patch/Chart.yaml.patch @@ -5,13 +5,13 @@ catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true" - catalog.cattle.io/kube-version: '>= 1.18.0-0' -+ catalog.cattle.io/kube-version: '>= 1.28.0-0 < 1.32.0-0' ++ catalog.cattle.io/kube-version: '>= 1.30.0-0 < 1.33.0-0' catalog.cattle.io/namespace: cattle-system catalog.cattle.io/os: linux catalog.cattle.io/permits-os: linux,windows catalog.cattle.io/provides-gvr: gkeclusterconfigs.gke.cattle.io/v1 - catalog.cattle.io/rancher-version: '>= 2.6.0-alpha' -+ catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.11.0-0' ++ catalog.cattle.io/rancher-version: '>= 2.11.0-0 < 2.12.0-0' catalog.cattle.io/release-name: rancher-gke-operator catalog.cattle.io/scope: management apiVersion: v2 diff --git a/packages/rancher-gke-operator/rancher-gke-operator/package.yaml b/packages/rancher-gke-operator/rancher-gke-operator/package.yaml index 10a531d22d..3476bdb3f5 100644 --- a/packages/rancher-gke-operator/rancher-gke-operator/package.yaml +++ b/packages/rancher-gke-operator/rancher-gke-operator/package.yaml @@ -1,2 +1,2 @@ -url: https://github.com/rancher/gke-operator/releases/download/v1.10.0/rancher-gke-operator-1.10.0.tgz -version: 105.0.0 +url: https://github.com/rancher/gke-operator/releases/download/v1.11.0-rc.1/rancher-gke-operator-1.11.0-rc.1.tgz +version: 106.0.0 diff --git a/release.yaml b/release.yaml index 1e22402f7e..dc99b31a1c 100644 --- a/release.yaml +++ b/release.yaml @@ -44,6 +44,10 @@ rancher-eks-operator: - 106.0.0+up1.11.0-rc.1 rancher-eks-operator-crd: - 106.0.0+up1.11.0-rc.1 +rancher-gke-operator: + - 106.0.0+up1.11.0-rc.1 +rancher-gke-operator-crd: + - 106.0.0+up1.11.0-rc.1 rancher-logging: - 105.1.0-rc.1+up4.10.0 rancher-logging-crd: