diff --git a/.source/certificates/cert-manager/config/overlays/crds.yaml b/.source/certificates/cert-manager/config/overlays/crds.yaml index 93ad646..bd66de9 100644 --- a/.source/certificates/cert-manager/config/overlays/crds.yaml +++ b/.source/certificates/cert-manager/config/overlays/crds.yaml @@ -1,5 +1,15 @@ --- -commonOverlays: [] +commonOverlays: + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager + yamlFiles: - name: "cert-manager custom resource definitions" path: "../../vendor/cert-manager.yaml" @@ -11,3 +21,4 @@ yamlFiles: documentQuery: - conditions: - query: $[?($.kind != "CustomResourceDefinition")] + diff --git a/.source/certificates/cert-manager/config/overlays/deployment.yaml b/.source/certificates/cert-manager/config/overlays/deployment.yaml index 905864b..b26aa7b 100644 --- a/.source/certificates/cert-manager/config/overlays/deployment.yaml +++ b/.source/certificates/cert-manager/config/overlays/deployment.yaml @@ -1,13 +1,24 @@ --- commonOverlays: - - name: "inject the platform purpose label" + - name: "add kubernetes and nukleros labels on deployments" query: "metadata" value: labels: - platform.nukleros.io/purpose: certificates - documentQuery: - - conditions: - - query: $[?($.kind != "Deployment")] + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager + + - name: "add kubernetes and nukleros labels on pods" + query: "spec.template.metadata" + value: + labels: + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager yamlFiles: - name: "cert-manager deployments" @@ -74,7 +85,40 @@ yamlFiles: - conditions: - query: $[?($.metadata.name == "cert-manager")] - - name: "ensure controller affinity is set" + - name: "set controller deployment labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager + app.kubernetes.io/instance: cert-manager + app.kubernetes.io/component: controller + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager")] + + - name: "set controller label selectors" + query: "spec.selector" + value: + matchLabels: + app.kubernetes.io/name: cert-manager + app.kubernetes.io/instance: cert-manager + app.kubernetes.io/component: controller + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager")] + + - name: "set controller pod labels" + query: "spec.template.metadata" + value: + labels: + app.kubernetes.io/name: cert-manager + app.kubernetes.io/instance: cert-manager + app.kubernetes.io/component: controller + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager")] + + - name: "ensure controller anti affinity is set" query: spec.template.spec action: merge value: @@ -110,7 +154,40 @@ yamlFiles: - conditions: - query: $[?($.metadata.name == "cert-manager-cainjector")] - - name: "ensure injector affinity is set" + - name: "set injector deployment labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector + app.kubernetes.io/component: cainjector + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-cainjector")] + + - name: "set injector label selectors" + query: "spec.selector" + value: + matchLabels: + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector + app.kubernetes.io/component: cainjector + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-cainjector")] + + - name: "set injector pod labels" + query: "spec.template.metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector + app.kubernetes.io/component: cainjector + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-cainjector")] + + - name: "ensure injector anti affinity is set" query: spec.template.spec action: merge value: @@ -146,7 +223,40 @@ yamlFiles: - conditions: - query: $[?($.metadata.name == "cert-manager-webhook")] - - name: "ensure webhook affinity is set" + - name: "set webhook deployment labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook + app.kubernetes.io/component: webhook + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook")] + + - name: "set webhook label selectors" + query: "spec.selector" + value: + matchLabels: + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook + app.kubernetes.io/component: webhook + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook")] + + - name: "set webhook pod labels" + query: "spec.template.metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook + app.kubernetes.io/component: webhook + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook")] + + - name: "ensure webhook anti affinity is set" query: spec.template.spec action: merge value: @@ -161,9 +271,10 @@ yamlFiles: - key: app.kubernetes.io/name operator: In values: - - cert-manager-cainjector + - cert-manager-webhook nodeSelector: kubernetes.io/os: linux documentQuery: - conditions: - query: $[?($.metadata.name == "cert-manager-webhook")] + diff --git a/.source/certificates/cert-manager/config/overlays/rbac.yaml b/.source/certificates/cert-manager/config/overlays/rbac.yaml index 5d92796..c78fb44 100644 --- a/.source/certificates/cert-manager/config/overlays/rbac.yaml +++ b/.source/certificates/cert-manager/config/overlays/rbac.yaml @@ -1,5 +1,15 @@ --- -commonOverlays: [] +commonOverlays: + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager + yamlFiles: - name: "cert-manager rbac" path: "../../vendor/cert-manager.yaml" @@ -20,4 +30,60 @@ yamlFiles: query: - metadata.namespace - subjects[*].namespace - value: "{{ .namespace }}" \ No newline at end of file + value: "{{ .namespace }}" + + - name: "set controller service account labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager + app.kubernetes.io/instance: cert-manager + app.kubernetes.io/component: controller + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-issuers")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-clusterissuers")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-certificates")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-orders")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-challenges")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-ingress-shim")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-approve:cert-manager-io")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-controller-certificatesigningrequests")] + + - name: "set injector service account labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector + app.kubernetes.io/component: cainjector + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-cainjector")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-cainjector:leaderelection")] + + - name: "set webhook service account labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook + app.kubernetes.io/component: webhook + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook:subjectaccessreviews")] + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook:dynamic-serving")] + diff --git a/.source/certificates/cert-manager/config/overlays/service.yaml b/.source/certificates/cert-manager/config/overlays/service.yaml index 476d2e1..4902b87 100644 --- a/.source/certificates/cert-manager/config/overlays/service.yaml +++ b/.source/certificates/cert-manager/config/overlays/service.yaml @@ -1,5 +1,15 @@ --- -commonOverlays: [] +commonOverlays: + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager + yamlFiles: - name: "cert-manager services" path: "../../vendor/cert-manager.yaml" @@ -15,3 +25,26 @@ yamlFiles: - name: "ensure namespace is updated" query: metadata.namespace value: "{{ .namespace }}" + + - name: "set webhook service labes" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook + app.kubernetes.io/component: webhook + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook")] + + - name: "set webhook service label selectors" + query: "spec" + value: + selector: + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook + app.kubernetes.io/component: webhook + documentQuery: + - conditions: + - query: $[?($.metadata.name == "cert-manager-webhook")] + diff --git a/.source/certificates/cert-manager/config/overlays/webhook.yaml b/.source/certificates/cert-manager/config/overlays/webhook.yaml index 25a8875..d02b069 100644 --- a/.source/certificates/cert-manager/config/overlays/webhook.yaml +++ b/.source/certificates/cert-manager/config/overlays/webhook.yaml @@ -1,5 +1,18 @@ --- -commonOverlays: [] +commonOverlays: + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook + app.kubernetes.io/component: webhook + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager + yamlFiles: - name: "cert-manager webhooks" path: "../../vendor/cert-manager.yaml" @@ -22,3 +35,4 @@ yamlFiles: - name: "ensure webhook annotation with appropriate namespace is updated" query: metadata.annotations['cert-manager.io/inject-ca-from-secret'] value: "{{ .namespace }}/cert-manager-webhook-ca" + diff --git a/.source/certificates/cert-manager/config/values.yaml b/.source/certificates/cert-manager/config/values.yaml index 6a9a991..bd8e894 100644 --- a/.source/certificates/cert-manager/config/values.yaml +++ b/.source/certificates/cert-manager/config/values.yaml @@ -1,4 +1,5 @@ --- +version: "v1.9.1" namespace: certificates-system replicas: 2 injector: diff --git a/.source/ingress/external-dns/config/overlays/config-active-directory.yaml b/.source/ingress/external-dns/config/overlays/config-active-directory.yaml index d24450d..6e4fa44 100644 --- a/.source/ingress/external-dns/config/overlays/config-active-directory.yaml +++ b/.source/ingress/external-dns/config/overlays/config-active-directory.yaml @@ -10,3 +10,19 @@ yamlFiles: value: "{{ .namespace }}" onMissing: action: inject + + - name: "add kubernetes and nukleros labels" + query: metadata + onMissing: + action: inject + value: + labels: + app.kubernetes.io/name: external-dns-active-directory + app.kubernetes.io/instance: external-dns-active-directory + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns + diff --git a/.source/ingress/external-dns/config/overlays/config-google.yaml b/.source/ingress/external-dns/config/overlays/config-google.yaml index 04c6da5..c6cb7b6 100644 --- a/.source/ingress/external-dns/config/overlays/config-google.yaml +++ b/.source/ingress/external-dns/config/overlays/config-google.yaml @@ -9,4 +9,20 @@ yamlFiles: query: metadata.namespace value: "{{ .namespace }}" onMissing: - action: inject \ No newline at end of file + action: inject + + - name: "add kubernetes and nukleros labels" + query: metadata + onMissing: + action: inject + value: + labels: + app.kubernetes.io/name: external-dns-google + app.kubernetes.io/instance: external-dns-google + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns + diff --git a/.source/ingress/external-dns/config/overlays/config-route53.yaml b/.source/ingress/external-dns/config/overlays/config-route53.yaml index 77dbb76..28c71d2 100644 --- a/.source/ingress/external-dns/config/overlays/config-route53.yaml +++ b/.source/ingress/external-dns/config/overlays/config-route53.yaml @@ -9,4 +9,20 @@ yamlFiles: query: metadata.namespace value: "{{ .namespace }}" onMissing: - action: inject \ No newline at end of file + action: inject + + - name: "add kubernetes and nukleros labels" + query: metadata + onMissing: + action: inject + value: + labels: + app.kubernetes.io/name: external-dns-route53 + app.kubernetes.io/instance: external-dns-route53 + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns + diff --git a/.source/ingress/external-dns/config/overlays/deployment-active-directory.yaml b/.source/ingress/external-dns/config/overlays/deployment-active-directory.yaml index 7f19db0..1aef159 100644 --- a/.source/ingress/external-dns/config/overlays/deployment-active-directory.yaml +++ b/.source/ingress/external-dns/config/overlays/deployment-active-directory.yaml @@ -1,6 +1,6 @@ --- commonOverlays: - - name: "inject the platform purpose label" + - name: "set the kubernetes and nukleros labels" query: "$" action: merge value: @@ -8,8 +8,13 @@ commonOverlays: labels: app: external-dns-active-directory app.kubernetes.io/name: external-dns-active-directory - app.kubernetes.io/instance: external-dns - platform.nukleros.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-active-directory + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns spec: selector: matchLabels: @@ -19,8 +24,13 @@ commonOverlays: labels: app: external-dns-active-directory app.kubernetes.io/name: external-dns-active-directory - app.kubernetes.io/instance: external-dns - platform.nukleros.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-active-directory + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns documentQuery: - conditions: - query: $[?($.kind == "Deployment")] diff --git a/.source/ingress/external-dns/config/overlays/deployment-google.yaml b/.source/ingress/external-dns/config/overlays/deployment-google.yaml index 81124ae..ad4c581 100644 --- a/.source/ingress/external-dns/config/overlays/deployment-google.yaml +++ b/.source/ingress/external-dns/config/overlays/deployment-google.yaml @@ -1,6 +1,6 @@ --- commonOverlays: - - name: "inject the platform purpose label" + - name: "set the kubernetes and nukleros labels" query: "$" action: merge value: @@ -8,8 +8,13 @@ commonOverlays: labels: app: external-dns-google app.kubernetes.io/name: external-dns-google - app.kubernetes.io/instance: external-dns - platform.nukleros.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-google + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns spec: selector: matchLabels: @@ -19,8 +24,13 @@ commonOverlays: labels: app: external-dns-google app.kubernetes.io/name: external-dns-google - app.kubernetes.io/instance: external-dns - platform.nukleros.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-google + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns documentQuery: - conditions: - query: $[?($.kind == "Deployment")] diff --git a/.source/ingress/external-dns/config/overlays/deployment-route53.yaml b/.source/ingress/external-dns/config/overlays/deployment-route53.yaml index 41f14c5..37be55c 100644 --- a/.source/ingress/external-dns/config/overlays/deployment-route53.yaml +++ b/.source/ingress/external-dns/config/overlays/deployment-route53.yaml @@ -1,15 +1,22 @@ --- commonOverlays: - - name: "inject the platform purpose label" + - name: "set the kubernetes and nukleros labels" query: "$" action: merge + onMission: + action: value: metadata: labels: app: external-dns-route53 app.kubernetes.io/name: external-dns-route53 - app.kubernetes.io/instance: external-dns - platform.nukleros.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-route53 + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns spec: selector: matchLabels: @@ -19,11 +26,13 @@ commonOverlays: labels: app: external-dns-route53 app.kubernetes.io/name: external-dns-route53 - app.kubernetes.io/instance: external-dns - platform.nukleros.io/purpose: dns-updates - documentQuery: - - conditions: - - query: $[?($.kind == "Deployment")] + app.kubernetes.io/instance: external-dns-route53 + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns yamlFiles: - name: "external-dns deployments" diff --git a/.source/ingress/external-dns/config/overlays/rbac.yaml b/.source/ingress/external-dns/config/overlays/rbac.yaml index 7192886..7cffc97 100644 --- a/.source/ingress/external-dns/config/overlays/rbac.yaml +++ b/.source/ingress/external-dns/config/overlays/rbac.yaml @@ -1,5 +1,20 @@ --- -commonOverlays: [] +commonOverlays: + - name: "set the kubernetes and nukleros labels" + query: "$" + action: merge + value: + metadata: + labels: + app.kubernetes.io/name: external-dns + app.kubernetes.io/instance: external-dns + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns + yamlFiles: - name: "external-dns service account" path: "../../vendor/external-dns-serviceaccount.yaml" @@ -31,4 +46,4 @@ yamlFiles: query: subjects[*].namespace value: "{{ .namespace }}" onMissing: - action: inject \ No newline at end of file + action: inject diff --git a/.source/ingress/external-dns/config/values.yaml b/.source/ingress/external-dns/config/values.yaml index 1231b40..6840102 100644 --- a/.source/ingress/external-dns/config/values.yaml +++ b/.source/ingress/external-dns/config/values.yaml @@ -1,4 +1,5 @@ --- +version: v0.12.2 namespace: ingress-system replicas: 1 resources: diff --git a/.source/ingress/kong/config/overlays/crds.yaml b/.source/ingress/kong/config/overlays/crds.yaml index fdbd946..51ae44f 100644 --- a/.source/ingress/kong/config/overlays/crds.yaml +++ b/.source/ingress/kong/config/overlays/crds.yaml @@ -15,3 +15,14 @@ yamlFiles: - name: "ensure creation timestamp is missing" query: metadata.creationTimestamp action: delete + + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong + diff --git a/.source/ingress/kong/config/overlays/deployment.yaml b/.source/ingress/kong/config/overlays/deployment.yaml index 5c1ba1f..896e1f2 100644 --- a/.source/ingress/kong/config/overlays/deployment.yaml +++ b/.source/ingress/kong/config/overlays/deployment.yaml @@ -21,9 +21,6 @@ yamlFiles: value: metadata: namespace: "{{ .namespace }}" - labels: - app.kubernetes.io/name: kong-ingress - platform.nukleros.io/purpose: ingress spec: replicas: !!int {{ .replicas }} template: @@ -124,3 +121,30 @@ yamlFiles: - name: "ensure we are not using image pull secrets" query: spec.template.spec.imagePullSecrets action: delete + + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong + + - name: "set pod labels" + query: "spec.template.metadata" + value: + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong + diff --git a/.source/ingress/kong/config/overlays/ingress-class.yaml b/.source/ingress/kong/config/overlays/ingress-class.yaml index 7552203..f3a475b 100644 --- a/.source/ingress/kong/config/overlays/ingress-class.yaml +++ b/.source/ingress/kong/config/overlays/ingress-class.yaml @@ -15,3 +15,17 @@ yamlFiles: - name: "ensure creation timestamp is missing" query: metadata.creationTimestamp action: delete + + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong + diff --git a/.source/ingress/kong/config/overlays/rbac.yaml b/.source/ingress/kong/config/overlays/rbac.yaml index bce07d2..59d91ed 100644 --- a/.source/ingress/kong/config/overlays/rbac.yaml +++ b/.source/ingress/kong/config/overlays/rbac.yaml @@ -25,3 +25,17 @@ yamlFiles: - name: "ensure creation timestamp is missing" query: metadata.creationTimestamp action: delete + + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong + diff --git a/.source/ingress/kong/config/overlays/service.yaml b/.source/ingress/kong/config/overlays/service.yaml index 126c913..368ffef 100644 --- a/.source/ingress/kong/config/overlays/service.yaml +++ b/.source/ingress/kong/config/overlays/service.yaml @@ -19,3 +19,17 @@ yamlFiles: - name: "ensure namespace is updated" query: metadata.namespace value: "{{ .namespace }}" + + - name: "add kubernetes and nukleros labels" + query: "metadata" + value: + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: {{ .version }} + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong + diff --git a/.source/ingress/kong/config/values.yaml b/.source/ingress/kong/config/values.yaml index d00d0d4..bdce0e5 100644 --- a/.source/ingress/kong/config/values.yaml +++ b/.source/ingress/kong/config/values.yaml @@ -1,4 +1,5 @@ --- +version: "2.5.0" namespace: ingress-system replicas: 2 resources: @@ -10,4 +11,4 @@ resources: memory: "384Mi" images: controller: - proxy: \ No newline at end of file + proxy: diff --git a/certificates/cert-manager/crds.yaml b/certificates/cert-manager/crds.yaml index ce7cb23..ea9f250 100644 --- a/certificates/cert-manager/crds.yaml +++ b/certificates/cert-manager/crds.yaml @@ -7,6 +7,10 @@ metadata: app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: group: cert-manager.io names: @@ -205,6 +209,10 @@ metadata: app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: group: cert-manager.io names: @@ -576,6 +584,10 @@ metadata: app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: group: acme.cert-manager.io names: @@ -1621,6 +1633,10 @@ metadata: app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: group: cert-manager.io names: @@ -2881,6 +2897,10 @@ metadata: app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: group: cert-manager.io names: @@ -4141,6 +4161,10 @@ metadata: app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: group: acme.cert-manager.io names: diff --git a/certificates/cert-manager/deployment.yaml b/certificates/cert-manager/deployment.yaml index 7e26724..de40f1b 100644 --- a/certificates/cert-manager/deployment.yaml +++ b/certificates/cert-manager/deployment.yaml @@ -5,25 +5,33 @@ metadata: namespace: certificates-system labels: app: cainjector - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: replicas: 2 selector: matchLabels: - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector template: metadata: labels: app: cainjector - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: serviceAccountName: cert-manager-cainjector securityContext: @@ -82,6 +90,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: replicas: 2 selector: @@ -97,6 +109,10 @@ spec: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager annotations: prometheus.io/path: /metrics prometheus.io/scrape: "true" @@ -160,25 +176,33 @@ metadata: namespace: certificates-system labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: replicas: 2 selector: matchLabels: - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook template: metadata: labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: serviceAccountName: cert-manager-webhook securityContext: @@ -251,4 +275,4 @@ spec: - key: app.kubernetes.io/name operator: In values: - - cert-manager-cainjector + - cert-manager-webhook diff --git a/certificates/cert-manager/rbac.yaml b/certificates/cert-manager/rbac.yaml index b16c78e..d54a544 100644 --- a/certificates/cert-manager/rbac.yaml +++ b/certificates/cert-manager/rbac.yaml @@ -6,10 +6,14 @@ metadata: namespace: certificates-system labels: app: cainjector - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager --- apiVersion: v1 kind: ServiceAccount @@ -23,6 +27,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager --- apiVersion: v1 kind: ServiceAccount @@ -32,10 +40,14 @@ metadata: namespace: certificates-system labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole @@ -43,10 +55,14 @@ metadata: name: cert-manager-cainjector labels: app: cainjector - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -112,6 +128,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -158,6 +178,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -204,6 +228,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -273,6 +301,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - acme.cert-manager.io @@ -339,6 +371,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - acme.cert-manager.io @@ -444,6 +480,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -516,6 +556,10 @@ metadata: rbac.authorization.k8s.io/aggregate-to-view: "true" rbac.authorization.k8s.io/aggregate-to-edit: "true" rbac.authorization.k8s.io/aggregate-to-admin: "true" + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -549,6 +593,10 @@ metadata: app.kubernetes.io/version: v1.9.1 rbac.authorization.k8s.io/aggregate-to-edit: "true" rbac.authorization.k8s.io/aggregate-to-admin: "true" + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -588,8 +636,12 @@ metadata: app: cert-manager app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager - app.kubernetes.io/component: cert-manager + app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - cert-manager.io @@ -609,8 +661,12 @@ metadata: app: cert-manager app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager - app.kubernetes.io/component: cert-manager + app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - certificates.k8s.io @@ -650,10 +706,14 @@ metadata: name: cert-manager-webhook:subjectaccessreviews labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - authorization.k8s.io @@ -668,10 +728,14 @@ metadata: name: cert-manager-cainjector labels: app: cainjector - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -691,6 +755,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -710,6 +778,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -729,6 +801,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -748,6 +824,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -767,6 +847,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -786,6 +870,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -803,8 +891,12 @@ metadata: app: cert-manager app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager - app.kubernetes.io/component: cert-manager + app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -822,8 +914,12 @@ metadata: app: cert-manager app.kubernetes.io/name: cert-manager app.kubernetes.io/instance: cert-manager - app.kubernetes.io/component: cert-manager + app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -839,10 +935,14 @@ metadata: name: cert-manager-webhook:subjectaccessreviews labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -860,10 +960,14 @@ metadata: namespace: certificates-system labels: app: cainjector - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - coordination.k8s.io @@ -894,6 +998,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - coordination.k8s.io @@ -919,10 +1027,14 @@ metadata: namespace: certificates-system labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager rules: - apiGroups: - "" @@ -949,10 +1061,14 @@ metadata: namespace: certificates-system labels: app: cainjector - app.kubernetes.io/name: cainjector - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-cainjector + app.kubernetes.io/instance: cert-manager-cainjector app.kubernetes.io/component: cainjector app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: Role @@ -973,6 +1089,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: Role @@ -990,10 +1110,14 @@ metadata: namespace: certificates-system labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager roleRef: apiGroup: rbac.authorization.k8s.io kind: Role diff --git a/certificates/cert-manager/service.yaml b/certificates/cert-manager/service.yaml index 2292348..8b3af37 100644 --- a/certificates/cert-manager/service.yaml +++ b/certificates/cert-manager/service.yaml @@ -9,6 +9,10 @@ metadata: app.kubernetes.io/instance: cert-manager app.kubernetes.io/component: controller app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: type: ClusterIP ports: @@ -28,10 +32,14 @@ metadata: namespace: certificates-system labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager spec: type: ClusterIP ports: @@ -40,6 +48,6 @@ spec: protocol: TCP targetPort: https selector: - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook diff --git a/certificates/cert-manager/webhook.yaml b/certificates/cert-manager/webhook.yaml index 3bc9ece..aa47057 100644 --- a/certificates/cert-manager/webhook.yaml +++ b/certificates/cert-manager/webhook.yaml @@ -4,10 +4,14 @@ metadata: name: cert-manager-webhook labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager annotations: cert-manager.io/inject-ca-from-secret: certificates-system/cert-manager-webhook-ca webhooks: @@ -41,10 +45,14 @@ metadata: name: cert-manager-webhook labels: app: webhook - app.kubernetes.io/name: webhook - app.kubernetes.io/instance: cert-manager + app.kubernetes.io/name: cert-manager-webhook + app.kubernetes.io/instance: cert-manager-webhook app.kubernetes.io/component: webhook app.kubernetes.io/version: v1.9.1 + app.kubernetes.io/part-of: cert-manager + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: certificates + platform.nukleros.io/project: cert-manager annotations: cert-manager.io/inject-ca-from-secret: certificates-system/cert-manager-webhook-ca webhooks: diff --git a/ingress/external-dns/config-active-directory.yaml b/ingress/external-dns/config-active-directory.yaml index b5c9626..3ad968a 100644 --- a/ingress/external-dns/config-active-directory.yaml +++ b/ingress/external-dns/config-active-directory.yaml @@ -4,6 +4,15 @@ kind: Secret metadata: name: external-dns-active-directory namespace: ingress-system + labels: + app.kubernetes.io/name: external-dns-active-directory + app.kubernetes.io/instance: external-dns-active-directory + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns stringData: EXTERNAL_DNS_TXT_OWNER_ID: external-dns- EXTERNAL_DNS_TXT_PREFIX: external-dns- @@ -24,6 +33,15 @@ kind: ConfigMap metadata: name: external-dns-active-directory-kerberos namespace: ingress-system + labels: + app.kubernetes.io/name: external-dns-active-directory + app.kubernetes.io/instance: external-dns-active-directory + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns data: krb5.conf: | [logging] diff --git a/ingress/external-dns/config-google.yaml b/ingress/external-dns/config-google.yaml index 840c7b0..9a2485f 100644 --- a/ingress/external-dns/config-google.yaml +++ b/ingress/external-dns/config-google.yaml @@ -4,6 +4,15 @@ kind: Secret metadata: name: external-dns-google namespace: ingress-system + labels: + app.kubernetes.io/name: external-dns-google + app.kubernetes.io/instance: external-dns-google + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns stringData: EXTERNAL_DNS_TXT_OWNER_ID: external-dns- EXTERNAL_DNS_TXT_PREFIX: external-dns- diff --git a/ingress/external-dns/config-route53.yaml b/ingress/external-dns/config-route53.yaml index 3ee5ca3..49f0a49 100644 --- a/ingress/external-dns/config-route53.yaml +++ b/ingress/external-dns/config-route53.yaml @@ -4,6 +4,15 @@ kind: Secret metadata: name: external-dns-route53 namespace: ingress-system + labels: + app.kubernetes.io/name: external-dns-route53 + app.kubernetes.io/instance: external-dns-route53 + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns stringData: EXTERNAL_DNS_TXT_OWNER_ID: external-dns- EXTERNAL_DNS_TXT_PREFIX: external-dns- diff --git a/ingress/external-dns/deployment-active-directory.yaml b/ingress/external-dns/deployment-active-directory.yaml index a5f4f8f..25b3765 100644 --- a/ingress/external-dns/deployment-active-directory.yaml +++ b/ingress/external-dns/deployment-active-directory.yaml @@ -6,8 +6,13 @@ metadata: labels: app: external-dns-active-directory app.kubernetes.io/name: external-dns-active-directory - app.kubernetes.io/instance: external-dns - platform.kubernetes.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-active-directory + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns namespace: ingress-system spec: strategy: @@ -20,8 +25,13 @@ spec: labels: app: external-dns-active-directory app.kubernetes.io/name: external-dns-active-directory - app.kubernetes.io/instance: external-dns - platform.kubernetes.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-active-directory + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns spec: serviceAccountName: external-dns containers: diff --git a/ingress/external-dns/deployment-google.yaml b/ingress/external-dns/deployment-google.yaml index d7cd6fe..2ce6c6c 100644 --- a/ingress/external-dns/deployment-google.yaml +++ b/ingress/external-dns/deployment-google.yaml @@ -6,8 +6,13 @@ metadata: labels: app: external-dns-google app.kubernetes.io/name: external-dns-google - app.kubernetes.io/instance: external-dns - platform.kubernetes.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-google + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns namespace: ingress-system spec: strategy: @@ -20,8 +25,13 @@ spec: labels: app: external-dns-google app.kubernetes.io/name: external-dns-google - app.kubernetes.io/instance: external-dns - platform.kubernetes.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-google + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns spec: serviceAccountName: external-dns containers: diff --git a/ingress/external-dns/deployment-route53.yaml b/ingress/external-dns/deployment-route53.yaml index 7809368..40d52f8 100644 --- a/ingress/external-dns/deployment-route53.yaml +++ b/ingress/external-dns/deployment-route53.yaml @@ -6,8 +6,13 @@ metadata: labels: app: external-dns-route53 app.kubernetes.io/name: external-dns-route53 - app.kubernetes.io/instance: external-dns - platform.kubernetes.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-route53 + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns namespace: ingress-system spec: strategy: @@ -20,8 +25,13 @@ spec: labels: app: external-dns-route53 app.kubernetes.io/name: external-dns-route53 - app.kubernetes.io/instance: external-dns - platform.kubernetes.io/purpose: dns-updates + app.kubernetes.io/instance: external-dns-route53 + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns spec: serviceAccountName: external-dns containers: diff --git a/ingress/external-dns/rbac.yaml b/ingress/external-dns/rbac.yaml index 818cee6..046add6 100644 --- a/ingress/external-dns/rbac.yaml +++ b/ingress/external-dns/rbac.yaml @@ -1,8 +1,32 @@ --- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: external-dns + labels: + app.kubernetes.io/name: external-dns + app.kubernetes.io/instance: external-dns + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns + namespace: ingress-system +--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: external-dns-viewer + labels: + app.kubernetes.io/name: external-dns + app.kubernetes.io/instance: external-dns + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole @@ -16,6 +40,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: external-dns + labels: + app.kubernetes.io/name: external-dns + app.kubernetes.io/instance: external-dns + app.kubernetes.io/component: external-dns + app.kubernetes.io/version: v0.12.2 + app.kubernetes.io/part-of: external-dns + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: external-dns namespace: ingress-system rules: - apiGroups: @@ -51,9 +84,3 @@ rules: verbs: - watch - list ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: external-dns - namespace: ingress-system diff --git a/ingress/kong/crds.yaml b/ingress/kong/crds.yaml index 9275466..a644bca 100644 --- a/ingress/kong/crds.yaml +++ b/ingress/kong/crds.yaml @@ -4,6 +4,12 @@ metadata: annotations: controller-gen.kubebuilder.io/version: v0.7.0 name: kongclusterplugins.configuration.konghq.com + labels: + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: group: configuration.konghq.com names: @@ -123,6 +129,12 @@ metadata: annotations: controller-gen.kubebuilder.io/version: v0.7.0 name: kongconsumers.configuration.konghq.com + labels: + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: group: configuration.konghq.com names: @@ -187,6 +199,12 @@ metadata: annotations: controller-gen.kubebuilder.io/version: v0.7.0 name: kongingresses.configuration.konghq.com + labels: + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: group: configuration.konghq.com names: @@ -459,6 +477,12 @@ metadata: annotations: controller-gen.kubebuilder.io/version: v0.7.0 name: kongplugins.configuration.konghq.com + labels: + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: group: configuration.konghq.com names: @@ -574,6 +598,12 @@ metadata: annotations: controller-gen.kubebuilder.io/version: v0.7.0 name: tcpingresses.configuration.konghq.com + labels: + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: group: configuration.konghq.com names: @@ -722,6 +752,12 @@ metadata: annotations: controller-gen.kubebuilder.io/version: v0.7.0 name: udpingresses.configuration.konghq.com + labels: + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: group: configuration.konghq.com names: diff --git a/ingress/kong/deployment.yaml b/ingress/kong/deployment.yaml index a6e2581..957a921 100644 --- a/ingress/kong/deployment.yaml +++ b/ingress/kong/deployment.yaml @@ -3,8 +3,14 @@ kind: Deployment metadata: labels: app: ingress-kong - app.kubernetes.io/name: kong-ingress - platform.kubernetes.io/purpose: ingress + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong name: ingress-kong namespace: ingress-system spec: @@ -20,6 +26,14 @@ spec: traffic.sidecar.istio.io/includeInboundPorts: "" labels: app: ingress-kong + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: automountServiceAccountToken: false containers: diff --git a/ingress/kong/ingress-class.yaml b/ingress/kong/ingress-class.yaml index fdf9957..1725c4f 100644 --- a/ingress/kong/ingress-class.yaml +++ b/ingress/kong/ingress-class.yaml @@ -2,5 +2,14 @@ apiVersion: networking.k8s.io/v1 kind: IngressClass metadata: name: kong + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: controller: ingress-controllers.konghq.com/kong diff --git a/ingress/kong/rbac.yaml b/ingress/kong/rbac.yaml index 9d891ad..33c9b12 100644 --- a/ingress/kong/rbac.yaml +++ b/ingress/kong/rbac.yaml @@ -3,12 +3,30 @@ kind: ServiceAccount metadata: name: kong-serviceaccount namespace: ingress-system + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: kong-leader-election namespace: ingress-system + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong rules: - apiGroups: - "" @@ -36,6 +54,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: kong-ingress + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong rules: - apiGroups: - "" @@ -380,6 +407,15 @@ kind: RoleBinding metadata: name: kong-leader-election namespace: ingress-system + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong roleRef: apiGroup: rbac.authorization.k8s.io kind: Role @@ -393,6 +429,15 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: kong-ingress + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole diff --git a/ingress/kong/service.yaml b/ingress/kong/service.yaml index 58a468f..db3be77 100644 --- a/ingress/kong/service.yaml +++ b/ingress/kong/service.yaml @@ -6,6 +6,15 @@ metadata: service.beta.kubernetes.io/aws-load-balancer-type: nlb name: kong-proxy namespace: ingress-system + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: ports: - name: proxy @@ -25,6 +34,15 @@ kind: Service metadata: name: kong-validation-webhook namespace: ingress-system + labels: + app.kubernetes.io/name: ingress-kong + app.kubernetes.io/instance: ingress-kong + app.kubernetes.io/component: ingress-kong + app.kubernetes.io/version: 2.5.0 + app.kubernetes.io/part-of: kong-ingress-controller + app.kubernetes.io/managed-by: platform-component-library + platform.nukleros.io/group: ingress + platform.nukleros.io/project: kong spec: ports: - name: webhook