@leverege/build-tools 2.50.3 → 2.50.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.50.3",
+  "version": "2.50.5",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {

package/src/helm-charts/cnpg-db-psql-stack/cluster.yaml.ovh

@@ -90,17 +90,3 @@ spec:
   method: volumeSnapshot
   backupOwnerReference: self
   immediate: true
----
-apiVersion: postgresql.cnpg.io/v1
-kind: ScheduledBackup
-metadata:
-  name: cnpg-db-psql-stack-volsnap
-  namespace: cnpg-operands
-spec:
-  # https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format
-  schedule: "0 0 */4 * * *"
-  cluster:
-    name: cnpg-db-psql-stack
-  method: volumeSnapshot
-  backupOwnerReference: self
-  immediate: true

package/src/helm-charts/cnpg-db-psql-stack/gitignore

@@ -1,2 +1,2 @@
 *.swp
-cnpg-db-psql-stack.yaml
+cluster.yaml

package/src/helm-charts/cnpg-db-psql-stack/helmdn.plugin

@@ -9,4 +9,4 @@ kubectl cnpg hibernate on -n cnpg-operands cnpg-db-psql-stack
 # *** DANGER ***
 # kubectl delete  will destroy the cluster
 # *** DANGER ***
-# kubectl delete -f cnpg-db-psql-stack/cnpg-db-psql-stack.yaml $K8S_WHAT
+# kubectl delete -f cnpg-db-psql-stack/cluster.yaml $K8S_WHAT

package/src/helm-charts/cnpg-db-tsdb-basic/cluster.yaml.ovh

@@ -98,11 +98,11 @@ spec:
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: cnpg-db-tsdb-basic-volsnap
+  name: cnpg-db-tsdb-basic-backup
   namespace: cnpg-operands
 spec:
   # https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format
-  schedule: "0 0 */8 * * *"
+  schedule: "0 0 */12 * * *"
   cluster:
     name: cnpg-db-tsdb-basic
   method: volumeSnapshot

package/src/helm-charts/cnpg-db-tsdb-basic/gitignore

@@ -1,2 +1,2 @@
 *.swp
-cnpg-db-tsdb-basic.yaml
+cluster.yaml

package/src/helm-charts/cnpg-db-tsdb-basic/helmdn.plugin

@@ -9,4 +9,4 @@ kubectl cnpg hibernate on -n cnpg-operands cnpg-db-tsdb-basic
 # *** DANGER ***
 # kubectl delete  will destroy the cluster pods and PVCs!!!!!
 # *** DANGER ***
-# kubectl do-not-do-this-delete -f cnpg-db-tsdb-basic/cnpg-db-tsdb-basic.yaml $K8S_WHAT
+# kubectl do-not-do-this-delete -f cnpg-db-tsdb-basic/cluster.yaml $K8S_WHAT

package/src/helm-charts/cnpg-db-tsdb-dense/{cluster.yalm.ovh → cluster.yaml.ovh}

@@ -97,11 +97,11 @@ spec:
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: cnpg-db-tsdb-dense-volsnap
+  name: cnpg-db-tsdb-dense-backup
   namespace: cnpg-operands
 spec:
   # https://pkg.go.dev/github.com/robfig/cron#hdr-CRON_Expression_Format
-  schedule: "0 0 */8 * * *"
+  schedule: "0 0 */12 * * *"
   cluster:
     name: cnpg-db-tsdb-dense
   method: volumeSnapshot

package/src/helm-charts/cnpg-db-tsdb-dense/gitignore

@@ -1,2 +1,2 @@
 *.swp
-cnpg-db-tsdb-dense.yaml
+cluster.yaml

package/src/helm-charts/cnpg-db-tsdb-dense/helmdn.plugin

@@ -9,4 +9,4 @@ kubectl cnpg hibernate on -n cnpg-operands cnpg-db-tsdb-dense
 # *** DANGER ***
 # kubectl delete  will destroy the cluster
 # *** DANGER ***
-# kubectl delete -f cnpg-db-tsdb-dense/cnpg-db-tsdb-dense.yaml $K8S_WHAT
+# kubectl delete -f cnpg-db-tsdb-dense/cluster.yaml $K8S_WHAT

package/src/helm-charts/velero/velero-local.yaml

@@ -14,7 +14,7 @@ schedules:
           app: "postgresql"
 
   elasticsearch:
-    disabled: false
+    disabled: true
     schedule: "0 6 * * *"
     template:
       ttl: "720h"

package/src/helmup.sh

@@ -836,7 +836,6 @@ CATBACKUP
           # this code only executes on the first deployment
           initializeCnpgOperand $SERVICE
           bootstrapLocalSetup $SERVICE
-          kubectl apply -f $SERVICE/$SERVICE.yaml $K8S_WHAT
         fi
         ;;
 

package/src/helm-charts/elasticsearch-helm-gke1.25/.helmignore

@@ -1,2 +0,0 @@
-tests/
-.pytest_cache/

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/Chart.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-version: 7.16.4
-appVersion: 7.16.3
-description: Leverege Elasticsearch Chart
-#home: https://github.com/elastic/helm-charts
-icon: https://helm.elastic.co/icons/elasticsearch.png
-#maintainers:
-#- email: helm-charts@elastic.co
-#  name: Elastic
-name: elasticsearch
-#sources:
-#- https://github.com/elastic/elasticsearch

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/Makefile

@@ -1 +0,0 @@
-include ../helpers/common.mk

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/README.md

@@ -1 +0,0 @@
-# Elasticsearch Helm Chart v7.16.3 +plus gke1.25 mods for use at Leverege

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/NOTES.txt

@@ -1,6 +0,0 @@
-1. Watch all cluster members come up.
-  $ kubectl get pods --namespace={{ .Release.Namespace }} -l app={{ template "elasticsearch.uname" . }} -w
-{{- if .Values.tests.enabled -}}
-2. Test cluster health using Helm test.
-  $ helm --namespace={{ .Release.Namespace }} test {{ .Release.Name }}
-{{- end -}}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/_helpers.tpl

@@ -1,65 +0,0 @@
-{{/* vim: set filetype=mustache: */}}
-{{/*
-Expand the name of the chart.
-*/}}
-{{- define "elasticsearch.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{/*
-Create a default fully qualified app name.
-We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
-*/}}
-{{- define "elasticsearch.fullname" -}}
-{{- $name := default .Chart.Name .Values.nameOverride -}}
-{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
-{{- end -}}
-
-{{- define "elasticsearch.uname" -}}
-{{- if empty .Values.fullnameOverride -}}
-{{- if empty .Values.nameOverride -}}
-{{ .Values.clusterName }}-{{ .Values.nodeGroup }}
-{{- else -}}
-{{ .Values.nameOverride }}-{{ .Values.nodeGroup }}
-{{- end -}}
-{{- else -}}
-{{ .Values.fullnameOverride }}
-{{- end -}}
-{{- end -}}
-
-{{- define "elasticsearch.masterService" -}}
-{{- if empty .Values.masterService -}}
-{{- if empty .Values.fullnameOverride -}}
-{{- if empty .Values.nameOverride -}}
-{{ .Values.clusterName }}-master
-{{- else -}}
-{{ .Values.nameOverride }}-master
-{{- end -}}
-{{- else -}}
-{{ .Values.fullnameOverride }}
-{{- end -}}
-{{- else -}}
-{{ .Values.masterService }}
-{{- end -}}
-{{- end -}}
-
-{{- define "elasticsearch.endpoints" -}}
-{{- $replicas := int (toString (.Values.replicas)) }}
-{{- $uname := (include "elasticsearch.uname" .) }}
-  {{- range $i, $e := untilStep 0 $replicas 1 -}}
-{{ $uname }}-{{ $i }},
-  {{- end -}}
-{{- end -}}
-
-{{- define "elasticsearch.esMajorVersion" -}}
-{{- if .Values.esMajorVersion -}}
-{{ .Values.esMajorVersion }}
-{{- else -}}
-{{- $version := int (index (.Values.imageTag | splitList ".") 0) -}}
-  {{- if and (contains "docker.elastic.co/elasticsearch/elasticsearch" .Values.image) (not (eq $version 0)) -}}
-{{ $version }}
-  {{- else -}}
-7
-  {{- end -}}
-{{- end -}}
-{{- end -}}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/configmap.yaml

@@ -1,34 +0,0 @@
-{{- if .Values.esConfig }}
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: {{ template "elasticsearch.uname" . }}-config
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}"
-    app: "{{ template "elasticsearch.uname" . }}"
-data:
-{{- range $path, $config := .Values.esConfig }}
-  {{ $path }}: |
-{{ $config | indent 4 -}}
-{{- end -}}
-{{- end -}}
-{{- if .Values.esJvmOptions }}
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: {{ template "elasticsearch.uname" . }}-jvm-options
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}"
-    app: "{{ template "elasticsearch.uname" . }}"
-data:
-{{- range $path, $config := .Values.esJvmOptions }}
-  {{ $path }}: |
-{{ $config | indent 4 -}}
-{{- end -}}
-{{- end -}}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/ingress.yaml

@@ -1,64 +0,0 @@
-{{- if .Values.ingress.enabled -}}
-{{- $fullName := include "elasticsearch.uname" . -}}
-{{- $httpPort := .Values.httpPort -}}
-{{- $pathtype := .Values.ingress.pathtype -}}
-{{- $ingressPath := .Values.ingress.path -}}
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: {{ $fullName }}
-  labels:
-    app: {{ .Chart.Name }}
-    release: {{ .Release.Name }}
-    heritage: {{ .Release.Service }}
-{{- with .Values.ingress.annotations }}
-  annotations:
-{{ toYaml . | indent 4 }}
-{{- end }}
-spec:
-  {{- if .Values.ingress.className }}
-  ingressClassName: {{ .Values.ingress.className | quote }}
-  {{- end }}
-{{- if .Values.ingress.tls }}
-  tls:
-  {{- if .ingressPath }}
-  {{- range  .Values.ingress.tls }}
-  - hosts:
-    {{- range  .hosts }}
-      - {{ . }}
-    {{- end }}
-    secretName: {{ .secretName }}
-  {{- end }}
-{{- else }}
-{{ toYaml .Values.ingress.tls | indent 4 }}
-  {{- end }}
-{{- end}}
-  rules:
-  {{- range .Values.ingress.hosts }}
-    {{- if $ingressPath }}
-  - host: {{ . }}
-    http:
-      paths:
-      - path: {{ $ingressPath }}
-        pathType: {{ $pathtype }}
-        backend:
-          service:
-            name: {{ $fullName }}
-            port:
-              number: {{ $httpPort }}
-  {{- else }}
-  - host: {{ .host }}
-    http:
-      paths:
-      {{- range .paths }}
-      - path: {{ .path }}
-        pathType: {{ $pathtype }}
-        backend:
-          service:
-            name: {{ $fullName }}
-            port:
-              number: {{ .servicePort | default $httpPort }}
-      {{- end }}
-  {{- end }}
- {{- end }}
- {{- end }}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/networkpolicy.yaml

@@ -1,61 +0,0 @@
-{{- if (or .Values.networkPolicy.http.enabled .Values.networkPolicy.transport.enabled) }}
-kind: NetworkPolicy
-apiVersion: networking.k8s.io/v1
-metadata:
-  name: {{ template "elasticsearch.uname" . }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}"
-    app: "{{ template "elasticsearch.uname" . }}"
-spec:
-  podSelector:
-    matchLabels:
-      app: "{{ template "elasticsearch.uname" . }}"
-  ingress:  # Allow inbound connections
-
-{{- if .Values.networkPolicy.http.enabled }}
-    # For HTTP access
-    - ports:
-      - port: {{ .Values.httpPort }}
-      from:
-        # From authorized Pods (having the correct label)
-        - podSelector:
-            matchLabels:
-              {{ template "elasticsearch.uname" . }}-http-client: "true"
-{{- with .Values.networkPolicy.http.explicitNamespacesSelector }}
-          # From authorized namespaces
-          namespaceSelector:
-{{ toYaml . | indent 12 }}
-{{- end }}
-{{- with .Values.networkPolicy.http.additionalRules }}
-            # Or from custom additional rules
-{{ toYaml . | indent 8 }}
-{{- end }}
-{{- end }}
-
-{{- if .Values.networkPolicy.transport.enabled }}
-    # For transport access
-    - ports:
-        - port: {{ .Values.transportPort }}
-      from:
-        # From authorized Pods (having the correct label)
-        - podSelector:
-            matchLabels:
-              {{ template "elasticsearch.uname" . }}-transport-client: "true"
-{{- with .Values.networkPolicy.transport.explicitNamespacesSelector }}
-          # From authorized namespaces
-          namespaceSelector:
-{{ toYaml . | indent 12 }}
-{{- end }}
-{{- with .Values.networkPolicy.transport.additionalRules }}
-        # Or from custom additional rules
-{{ toYaml . | indent 8 }}
-{{- end }}
-        # Or from other ElasticSearch Pods
-        - podSelector:
-            matchLabels:
-              app: "{{ template "elasticsearch.uname" . }}"
-{{- end }}
-
-{{- end }}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/poddisruptionbudget.yaml

@@ -1,12 +0,0 @@
----
-{{- if .Values.maxUnavailable }}
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  name: "{{ template "elasticsearch.uname" . }}-pdb"
-spec:
-  maxUnavailable: {{ .Values.maxUnavailable }}
-  selector:
-    matchLabels:
-      app: "{{ template "elasticsearch.uname" . }}"
-{{- end }}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/podsecuritypolicy.yaml

@@ -1,14 +0,0 @@
-{{- if .Values.podSecurityPolicy.create -}}
-{{- $fullName := include "elasticsearch.uname" . -}}
-apiVersion: policy/v1beta1
-kind: PodSecurityPolicy
-metadata:
-  name: {{ default $fullName .Values.podSecurityPolicy.name | quote }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    app: {{ $fullName | quote }}
-spec:
-{{ toYaml .Values.podSecurityPolicy.spec | indent 2 }}
-{{- end -}}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/role.yaml

@@ -1,25 +0,0 @@
-{{- if .Values.rbac.create -}}
-{{- $fullName := include "elasticsearch.uname" . -}}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: {{ $fullName | quote }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    app: {{ $fullName | quote }}
-rules:
-  - apiGroups:
-      - extensions
-    resources:
-      - podsecuritypolicies
-    resourceNames:
-      {{- if eq .Values.podSecurityPolicy.name "" }}
-      - {{ $fullName | quote }}
-      {{- else }}
-      - {{ .Values.podSecurityPolicy.name | quote }}
-      {{- end }}
-    verbs:
-      - use
-{{- end -}}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/rolebinding.yaml

@@ -1,24 +0,0 @@
-{{- if .Values.rbac.create -}}
-{{- $fullName := include "elasticsearch.uname" . -}}
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: {{ $fullName | quote }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    app: {{ $fullName | quote }}
-subjects:
-  - kind: ServiceAccount
-    {{- if eq .Values.rbac.serviceAccountName "" }}
-    name: {{ $fullName | quote }}
-    {{- else }}
-    name: {{ .Values.rbac.serviceAccountName | quote }}
-    {{- end }}
-    namespace: {{ .Release.Namespace | quote }}
-roleRef:
-  kind: Role
-  name: {{ $fullName | quote }}
-  apiGroup: rbac.authorization.k8s.io
-{{- end -}}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/service.yaml

@@ -1,76 +0,0 @@
-{{- if .Values.service.enabled -}}
-kind: Service
-apiVersion: v1
-metadata:
-{{- if eq .Values.nodeGroup "master" }}
-  name: {{ template "elasticsearch.masterService" . }}
-{{- else }}
-  name: {{ template "elasticsearch.uname" . }}
-{{- end }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}"
-    app: "{{ template "elasticsearch.uname" . }}"
-{{- if .Values.service.labels }}
-{{ toYaml .Values.service.labels | indent 4}}
-{{- end }}
-  annotations:
-{{ toYaml .Values.service.annotations | indent 4 }}
-spec:
-  type: {{ .Values.service.type }}
-  selector:
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}"
-    app: "{{ template "elasticsearch.uname" . }}"
-  ports:
-  - name: {{ .Values.service.httpPortName | default "http" }}
-    protocol: TCP
-    port: {{ .Values.httpPort }}
-{{- if .Values.service.nodePort }}
-    nodePort: {{ .Values.service.nodePort }}
-{{- end }}
-  - name: {{ .Values.service.transportPortName | default "transport" }}
-    protocol: TCP
-    port: {{ .Values.transportPort }}
-{{- if .Values.service.loadBalancerIP }}
-  loadBalancerIP: {{ .Values.service.loadBalancerIP }}
-{{- end }}
-{{- with .Values.service.loadBalancerSourceRanges }}
-  loadBalancerSourceRanges:
-{{ toYaml . | indent 4 }}
-{{- end }}
-{{- if .Values.service.externalTrafficPolicy }}
-  externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }}
-{{- end }}
-{{- end }}
----
-kind: Service
-apiVersion: v1
-metadata:
-{{- if eq .Values.nodeGroup "master" }}
-  name: {{ template "elasticsearch.masterService" . }}-headless
-{{- else }}
-  name: {{ template "elasticsearch.uname" . }}-headless
-{{- end }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}"
-    app: "{{ template "elasticsearch.uname" . }}"
-{{- if .Values.service.labelsHeadless }}
-{{ toYaml .Values.service.labelsHeadless | indent 4 }}
-{{- end }}
-  annotations:
-    service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
-spec:
-  clusterIP: None # This is needed for statefulset hostnames like elasticsearch-0 to resolve
-  # Create endpoints also if the related pod isn't ready
-  publishNotReadyAddresses: true
-  selector:
-    app: "{{ template "elasticsearch.uname" . }}"
-  ports:
-  - name: {{ .Values.service.httpPortName | default "http" }}
-    port: {{ .Values.httpPort }}
-  - name: {{ .Values.service.transportPortName | default "transport" }}
-    port: {{ .Values.transportPort }}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/serviceaccount.yaml

@@ -1,20 +0,0 @@
-{{- if .Values.rbac.create -}}
-{{- $fullName := include "elasticsearch.uname" . -}}
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  {{- if eq .Values.rbac.serviceAccountName "" }}
-  name: {{ $fullName | quote }}
-  {{- else }}
-  name: {{ .Values.rbac.serviceAccountName | quote }}
-  {{- end }}
-  annotations:
-    {{- with .Values.rbac.serviceAccountAnnotations }}
-    {{- toYaml . | nindent 4 }}
-    {{- end }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
-    app: {{ $fullName | quote }}
-{{- end -}}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/templates/statefulset.yaml

@@ -1,390 +0,0 @@
----
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: {{ template "elasticsearch.uname" . }}
-  labels:
-    heritage: {{ .Release.Service | quote }}
-    release: {{ .Release.Name | quote }}
-    chart: "{{ .Chart.Name }}"
-    app: "{{ template "elasticsearch.uname" . }}"
-    {{- range $key, $value := .Values.labels }}
-    {{ $key }}: {{ $value | quote }}
-    {{- end }}
-  annotations:
-    esMajorVersion: "{{ include "elasticsearch.esMajorVersion" . }}"
-spec:
-  serviceName: {{ template "elasticsearch.uname" . }}-headless
-  selector:
-    matchLabels:
-      app: "{{ template "elasticsearch.uname" . }}"
-  replicas: {{ .Values.replicas }}
-  podManagementPolicy: {{ .Values.podManagementPolicy }}
-  updateStrategy:
-    type: {{ .Values.updateStrategy }}
-  {{- if .Values.persistence.enabled }}
-  volumeClaimTemplates:
-  - metadata:
-      name: {{ template "elasticsearch.uname" . }}
-    {{- if .Values.persistence.labels.enabled }}
-      labels:
-        release: {{ .Release.Name | quote }}
-        chart: "{{ .Chart.Name }}"
-        app: "{{ template "elasticsearch.uname" . }}"
-        {{- range $key, $value := .Values.labels }}
-        {{ $key }}: {{ $value | quote }}
-        {{- end }}
-    {{- end }}
-    {{- with .Values.persistence.annotations  }}
-      annotations:
-{{ toYaml . | indent 8 }}
-    {{- end }}
-    spec:
-{{ toYaml .Values.volumeClaimTemplate | indent 6 }}
-  {{- end }}
-  template:
-    metadata:
-      name: "{{ template "elasticsearch.uname" . }}"
-      labels:
-        release: {{ .Release.Name | quote }}
-        chart: "{{ .Chart.Name }}"
-        app: "{{ template "elasticsearch.uname" . }}"
-        {{- range $key, $value := .Values.labels }}
-        {{ $key }}: {{ $value | quote }}
-        {{- end }}
-      annotations:
-        {{- range $key, $value := .Values.podAnnotations }}
-        {{ $key }}: {{ $value | quote }}
-        {{- end }}
-        {{/* This forces a restart if the configmap has changed */}}
-        {{- if or .Values.esConfig .Values.esJvmOptions }}
-        configchecksum: {{ include (print .Template.BasePath "/configmap.yaml") . | sha256sum | trunc 63 }}
-        {{- end }}
-    spec:
-      {{- if .Values.schedulerName }}
-      schedulerName: "{{ .Values.schedulerName }}"
-      {{- end }}
-      securityContext:
-{{ toYaml .Values.podSecurityContext | indent 8 }}
-        {{- if .Values.fsGroup }}
-        fsGroup: {{ .Values.fsGroup }} # Deprecated value, please use .Values.podSecurityContext.fsGroup
-        {{- end }}
-      {{- if .Values.rbac.create }}
-      serviceAccountName: "{{ template "elasticsearch.uname" . }}"
-      {{- else if not (eq .Values.rbac.serviceAccountName "") }}
-      serviceAccountName: {{ .Values.rbac.serviceAccountName | quote }}
-      {{- end }}
-      automountServiceAccountToken: {{ .Values.rbac.automountToken }}
-      {{- with .Values.tolerations }}
-      tolerations:
-{{ toYaml . | indent 6 }}
-      {{- end }}
-      {{- with .Values.nodeSelector }}
-      nodeSelector:
-{{ toYaml . | indent 8 }}
-      {{- end }}
-      {{- if or (eq .Values.antiAffinity "hard") (eq .Values.antiAffinity "soft") .Values.nodeAffinity }}
-      {{- if .Values.priorityClassName }}
-      priorityClassName: {{ .Values.priorityClassName }}
-      {{- end }}
-      affinity:
-      {{- end }}
-      {{- if eq .Values.antiAffinity "hard" }}
-        podAntiAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-          - labelSelector:
-              matchExpressions:
-              - key: app
-                operator: In
-                values:
-                - "{{ template "elasticsearch.uname" .}}"
-            topologyKey: {{ .Values.antiAffinityTopologyKey }}
-      {{- else if eq .Values.antiAffinity "soft" }}
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 1
-            podAffinityTerm:
-              topologyKey: {{ .Values.antiAffinityTopologyKey }}
-              labelSelector:
-                matchExpressions:
-                - key: app
-                  operator: In
-                  values:
-                  - "{{ template "elasticsearch.uname" . }}"
-      {{- end }}
-      {{- with .Values.nodeAffinity }}
-        nodeAffinity:
-{{ toYaml . | indent 10 }}
-      {{- end }}
-      terminationGracePeriodSeconds: {{ .Values.terminationGracePeriod }}
-      volumes:
-        {{- range .Values.secretMounts }}
-        - name: {{ .name }}
-          secret:
-            secretName: {{ .secretName }}
-            {{- if .defaultMode }}
-            defaultMode: {{ .defaultMode }}
-            {{- end }}
-        {{- end }}
-        {{- if .Values.esConfig }}
-        - name: esconfig
-          configMap:
-            name: {{ template "elasticsearch.uname" . }}-config
-        {{- end }}
-        {{- if .Values.esJvmOptions }}
-        - name: esjvmoptions
-          configMap:
-            name: {{ template "elasticsearch.uname" . }}-jvm-options
-        {{- end }}
-{{- if .Values.keystore }}
-        - name: keystore
-          emptyDir: {}
-        {{- range .Values.keystore }}
-        - name: keystore-{{ .secretName }}
-          secret: {{ toYaml . | nindent 12 }}
-        {{- end }}
-{{ end }}
-      {{- if .Values.extraVolumes }}
-      # Currently some extra blocks accept strings
-      # to continue with backwards compatibility this is being kept
-      # whilst also allowing for yaml to be specified too.
-      {{- if eq "string" (printf "%T" .Values.extraVolumes) }}
-{{ tpl .Values.extraVolumes . | indent 8 }}
-      {{- else }}
-{{ toYaml .Values.extraVolumes | indent 8 }}
-      {{- end }}
-      {{- end }}
-      {{- if .Values.imagePullSecrets }}
-      imagePullSecrets:
-{{ toYaml .Values.imagePullSecrets | indent 8 }}
-      {{- end }}
-      enableServiceLinks: {{ .Values.enableServiceLinks }}
-      {{- if .Values.hostAliases }}
-      hostAliases: {{ toYaml .Values.hostAliases | nindent 8 }}
-      {{- end }}
-      {{- if or (.Values.extraInitContainers) (.Values.sysctlInitContainer.enabled) (.Values.keystore)  }}
-      initContainers:
-      {{- if .Values.sysctlInitContainer.enabled }}
-      - name: configure-sysctl
-        securityContext:
-          runAsUser: 0
-          privileged: true
-        image: "{{ .Values.image }}:{{ .Values.imageTag }}"
-        imagePullPolicy: "{{ .Values.imagePullPolicy }}"
-        command: ["sysctl", "-w", "vm.max_map_count={{ .Values.sysctlVmMaxMapCount}}"]
-        resources:
-{{ toYaml .Values.initResources | indent 10 }}
-      {{- end }}
-{{ if .Values.keystore }}
-      - name: keystore
-        image: "{{ .Values.image }}:{{ .Values.imageTag }}"
-        imagePullPolicy: "{{ .Values.imagePullPolicy }}"
-        command:
-        - bash
-        - -c
-        - |
-          set -euo pipefail
-
-          elasticsearch-keystore create
-
-          for i in /tmp/keystoreSecrets/*/*; do
-            key=$(basename $i)
-            echo "Adding file $i to keystore key $key"
-            elasticsearch-keystore add-file "$key" "$i"
-          done
-
-          # Add the bootstrap password since otherwise the Elasticsearch entrypoint tries to do this on startup
-          if [ ! -z ${ELASTIC_PASSWORD+x} ]; then
-            echo 'Adding env $ELASTIC_PASSWORD to keystore as key bootstrap.password'
-            echo "$ELASTIC_PASSWORD" | elasticsearch-keystore add -x bootstrap.password
-          fi
-
-          cp -a /usr/share/elasticsearch/config/elasticsearch.keystore /tmp/keystore/
-        env: {{ toYaml .Values.extraEnvs | nindent 10 }}
-        envFrom: {{ toYaml .Values.envFrom | nindent 10 }}
-        resources: {{ toYaml .Values.initResources | nindent 10 }}
-        volumeMounts:
-          - name: keystore
-            mountPath: /tmp/keystore
-          {{- range .Values.keystore }}
-          - name: keystore-{{ .secretName }}
-            mountPath: /tmp/keystoreSecrets/{{ .secretName }}
-          {{- end }}
-{{ end }}
-      {{- if .Values.extraInitContainers }}
-      # Currently some extra blocks accept strings
-      # to continue with backwards compatibility this is being kept
-      # whilst also allowing for yaml to be specified too.
-      {{- if eq "string" (printf "%T" .Values.extraInitContainers) }}
-{{ tpl .Values.extraInitContainers . | indent 6 }}
-      {{- else }}
-{{ toYaml .Values.extraInitContainers | indent 6 }}
-      {{- end }}
-      {{- end }}
-      {{- end }}
-      containers:
-      - name: "{{ template "elasticsearch.name" . }}"
-        securityContext:
-{{ toYaml .Values.securityContext | indent 10 }}
-        image: "{{ .Values.image }}:{{ .Values.imageTag }}"
-        imagePullPolicy: "{{ .Values.imagePullPolicy }}"
-        readinessProbe:
-          exec:
-            command:
-              - bash
-              - -c
-              - |
-                set -e
-                # If the node is starting up wait for the cluster to be ready (request params: "{{ .Values.clusterHealthCheckParams }}" )
-                # Once it has started only check that the node itself is responding
-                START_FILE=/tmp/.es_start_file
-
-                # Disable nss cache to avoid filling dentry cache when calling curl
-                # This is required with Elasticsearch Docker using nss < 3.52
-                export NSS_SDB_USE_CACHE=no
-
-                http () {
-                  local path="${1}"
-                  local args="${2}"
-                  set -- -XGET -s
-
-                  if [ "$args" != "" ]; then
-                    set -- "$@" $args
-                  fi
-
-                  if [ -n "${ELASTIC_PASSWORD}" ]; then
-                    set -- "$@" -u "elastic:${ELASTIC_PASSWORD}"
-                  fi
-
-                  curl --output /dev/null -k "$@" "{{ .Values.protocol }}://127.0.0.1:{{ .Values.httpPort }}${path}"
-                }
-
-                if [ -f "${START_FILE}" ]; then
-                  echo 'Elasticsearch is already running, lets check the node is healthy'
-                  HTTP_CODE=$(http "/" "-w %{http_code}")
-                  RC=$?
-                  if [[ ${RC} -ne 0 ]]; then
-                    echo "curl --output /dev/null -k -XGET -s -w '%{http_code}' \${BASIC_AUTH} {{ .Values.protocol }}://127.0.0.1:{{ .Values.httpPort }}/ failed with RC ${RC}"
-                    exit ${RC}
-                  fi
-                  # ready if HTTP code 200, 503 is tolerable if ES version is 6.x
-                  if [[ ${HTTP_CODE} == "200" ]]; then
-                    exit 0
-                  elif [[ ${HTTP_CODE} == "503" && "{{ include "elasticsearch.esMajorVersion" . }}" == "6" ]]; then
-                    exit 0
-                  else
-                    echo "curl --output /dev/null -k -XGET -s -w '%{http_code}' \${BASIC_AUTH} {{ .Values.protocol }}://127.0.0.1:{{ .Values.httpPort }}/ failed with HTTP code ${HTTP_CODE}"
-                    exit 1
-                  fi
-
-                else
-                  echo 'Waiting for elasticsearch cluster to become ready (request params: "{{ .Values.clusterHealthCheckParams }}" )'
-                  if http "/_cluster/health?{{ .Values.clusterHealthCheckParams }}" "--fail" ; then
-                    touch ${START_FILE}
-                    exit 0
-                  else
-                    echo 'Cluster is not yet ready (request params: "{{ .Values.clusterHealthCheckParams }}" )'
-                    exit 1
-                  fi
-                fi
-{{ toYaml .Values.readinessProbe | indent 10 }}
-        ports:
-        - name: http
-          containerPort: {{ .Values.httpPort }}
-        - name: transport
-          containerPort: {{ .Values.transportPort }}
-        resources:
-{{ toYaml .Values.resources | indent 10 }}
-        env:
-          - name: node.name
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.name
-          {{- if eq .Values.roles.master "true" }}
-          {{- if ge (int (include "elasticsearch.esMajorVersion" .)) 7 }}
-          - name: cluster.initial_master_nodes
-            value: "{{ template "elasticsearch.endpoints" . }}"
-          {{- else }}
-          - name: discovery.zen.minimum_master_nodes
-            value: "{{ .Values.minimumMasterNodes }}"
-          {{- end }}
-          {{- end }}
-          {{- if lt (int (include "elasticsearch.esMajorVersion" .)) 7 }}
-          - name: discovery.zen.ping.unicast.hosts
-            value: "{{ template "elasticsearch.masterService" . }}-headless"
-          {{- else }}
-          - name: discovery.seed_hosts
-            value: "{{ template "elasticsearch.masterService" . }}-headless"
-          {{- end }}
-          - name: cluster.name
-            value: "{{ .Values.clusterName }}"
-          - name: network.host
-            value: "{{ .Values.networkHost }}"
-          - name: cluster.deprecation_indexing.enabled
-            value: "{{ .Values.clusterDeprecationIndexing }}"
-          {{- if .Values.esJavaOpts  }}
-          - name: ES_JAVA_OPTS
-            value: "{{ .Values.esJavaOpts }}"
-          {{- end }}
-          {{- range $role, $enabled := .Values.roles }}
-          - name: node.{{ $role }}
-            value: "{{ $enabled }}"
-          {{- end }}
-{{- if .Values.extraEnvs }}
-{{ toYaml .Values.extraEnvs | indent 10 }}
-{{- end }}
-{{- if .Values.envFrom }}
-        envFrom:
-{{ toYaml .Values.envFrom | indent 10 }}
-{{- end }}
-        volumeMounts:
-          {{- if .Values.persistence.enabled }}
-          - name: "{{ template "elasticsearch.uname" . }}"
-            mountPath: /usr/share/elasticsearch/data
-          {{- end }}
-{{ if .Values.keystore }}
-          - name: keystore
-            mountPath: /usr/share/elasticsearch/config/elasticsearch.keystore
-            subPath: elasticsearch.keystore
-{{ end }}
-          {{- range .Values.secretMounts }}
-          - name: {{ .name }}
-            mountPath: {{ .path }}
-            {{- if .subPath }}
-            subPath: {{ .subPath }}
-            {{- end }}
-          {{- end }}
-          {{- range $path, $config := .Values.esConfig }}
-          - name: esconfig
-            mountPath: /usr/share/elasticsearch/config/{{ $path }}
-            subPath: {{ $path }}
-          {{- end -}}
-          {{- range $path, $config := .Values.esJvmOptions }}
-          - name: esjvmoptions
-            mountPath: /usr/share/elasticsearch/config/jvm.options.d/{{ $path }}
-            subPath: {{ $path }}
-          {{- end -}}
-        {{- if .Values.extraVolumeMounts }}
-        # Currently some extra blocks accept strings
-        # to continue with backwards compatibility this is being kept
-        # whilst also allowing for yaml to be specified too.
-        {{- if eq "string" (printf "%T" .Values.extraVolumeMounts) }}
-{{ tpl .Values.extraVolumeMounts . | indent 10 }}
-        {{- else }}
-{{ toYaml .Values.extraVolumeMounts | indent 10 }}
-        {{- end }}
-        {{- end }}
-{{- if .Values.lifecycle }}
-        lifecycle:
-{{ toYaml .Values.lifecycle | indent 10 }}
-{{- end }}
-      {{- if .Values.extraContainers }}
-      # Currently some extra blocks accept strings
-      # to continue with backwards compatibility this is being kept
-      # whilst also allowing for yaml to be specified too.
-      {{- if eq "string" (printf "%T" .Values.extraContainers) }}
-{{ tpl .Values.extraContainers . | indent 6 }}
-      {{- else }}
-{{ toYaml .Values.extraContainers | indent 6 }}
-      {{- end }}
-      {{- end }}

package/src/helm-charts/elasticsearch-helm-gke1.25/helm/values.yaml

@@ -1,352 +0,0 @@
----
-clusterName: "elasticsearch"
-nodeGroup: "master"
-
-# The service that non master groups will try to connect to when joining the cluster
-# This should be set to clusterName + "-" + nodeGroup for your master group
-masterService: ""
-
-# Elasticsearch roles that will be applied to this nodeGroup
-# These will be set as environment variables. E.g. node.master=true
-roles:
-  master: "true"
-  ingest: "true"
-  data: "true"
-  remote_cluster_client: "true"
-  ml: "true"
-
-replicas: 3
-minimumMasterNodes: 2
-
-esMajorVersion: ""
-
-clusterDeprecationIndexing: "false"
-
-# Allows you to add any config files in /usr/share/elasticsearch/config/
-# such as elasticsearch.yml and log4j2.properties
-esConfig: {}
-#  elasticsearch.yml: |
-#    key:
-#      nestedkey: value
-#  log4j2.properties: |
-#    key = value
-
-esJvmOptions: {}
-#  processors.options: |
-#    -XX:ActiveProcessorCount=3
-
-# Extra environment variables to append to this nodeGroup
-# This will be appended to the current 'env:' key. You can use any of the kubernetes env
-# syntax here
-extraEnvs: []
-#  - name: MY_ENVIRONMENT_VAR
-#    value: the_value_goes_here
-
-# Allows you to load environment variables from kubernetes secret or config map
-envFrom: []
-# - secretRef:
-#     name: env-secret
-# - configMapRef:
-#     name: config-map
-
-# A list of secrets and their paths to mount inside the pod
-# This is useful for mounting certificates for security and for mounting
-# the X-Pack license
-secretMounts: []
-#  - name: elastic-certificates
-#    secretName: elastic-certificates
-#    path: /usr/share/elasticsearch/config/certs
-#    defaultMode: 0755
-
-hostAliases: []
-#- ip: "127.0.0.1"
-#  hostnames:
-#  - "foo.local"
-#  - "bar.local"
-
-image: "docker.elastic.co/elasticsearch/elasticsearch"
-imageTag: "7.16.3"
-imagePullPolicy: "IfNotPresent"
-
-podAnnotations:
-  {}
-  # iam.amazonaws.com/role: es-cluster
-
-# additionals labels
-labels: {}
-
-esJavaOpts: "" # example: "-Xmx1g -Xms1g"
-
-resources:
-  requests:
-    cpu: "1000m"
-    memory: "2Gi"
-  limits:
-    cpu: "1000m"
-    memory: "2Gi"
-
-initResources:
-  {}
-  # limits:
-  #   cpu: "25m"
-  #   # memory: "128Mi"
-  # requests:
-  #   cpu: "25m"
-  #   memory: "128Mi"
-
-networkHost: "0.0.0.0"
-
-volumeClaimTemplate:
-  accessModes: ["ReadWriteOnce"]
-  resources:
-    requests:
-      storage: 30Gi
-
-rbac:
-  create: false
-  serviceAccountAnnotations: {}
-  serviceAccountName: ""
-  automountToken: true
-
-podSecurityPolicy:
-  create: false
-  name: ""
-  spec:
-    privileged: true
-    fsGroup:
-      rule: RunAsAny
-    runAsUser:
-      rule: RunAsAny
-    seLinux:
-      rule: RunAsAny
-    supplementalGroups:
-      rule: RunAsAny
-    volumes:
-      - secret
-      - configMap
-      - persistentVolumeClaim
-      - emptyDir
-
-persistence:
-  enabled: true
-  labels:
-    # Add default labels for the volumeClaimTemplate of the StatefulSet
-    enabled: false
-  annotations: {}
-
-extraVolumes:
-  []
-  # - name: extras
-  #   emptyDir: {}
-
-extraVolumeMounts:
-  []
-  # - name: extras
-  #   mountPath: /usr/share/extras
-  #   readOnly: true
-
-extraContainers:
-  []
-  # - name: do-something
-  #   image: busybox
-  #   command: ['do', 'something']
-
-extraInitContainers:
-  []
-  # - name: do-something
-  #   image: busybox
-  #   command: ['do', 'something']
-
-# This is the PriorityClass settings as defined in
-# https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass
-priorityClassName: ""
-
-# By default this will make sure two pods don't end up on the same node
-# Changing this to a region would allow you to spread pods across regions
-antiAffinityTopologyKey: "kubernetes.io/hostname"
-
-# Hard means that by default pods will only be scheduled if there are enough nodes for them
-# and that they will never end up on the same node. Setting this to soft will do this "best effort"
-antiAffinity: "hard"
-
-# This is the node affinity settings as defined in
-# https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#node-affinity-beta-feature
-nodeAffinity: {}
-
-# The default is to deploy all pods serially. By setting this to parallel all pods are started at
-# the same time when bootstrapping the cluster
-podManagementPolicy: "Parallel"
-
-# The environment variables injected by service links are not used, but can lead to slow Elasticsearch boot times when
-# there are many services in the current namespace.
-# If you experience slow pod startups you probably want to set this to `false`.
-enableServiceLinks: true
-
-protocol: http
-httpPort: 9200
-transportPort: 9300
-
-service:
-  enabled: true
-  labels: {}
-  labelsHeadless: {}
-  type: ClusterIP
-  nodePort: ""
-  annotations: {}
-  httpPortName: http
-  transportPortName: transport
-  loadBalancerIP: ""
-  loadBalancerSourceRanges: []
-  externalTrafficPolicy: ""
-
-updateStrategy: RollingUpdate
-
-# This is the max unavailable setting for the pod disruption budget
-# The default value of 1 will make sure that kubernetes won't allow more than 1
-# of your pods to be unavailable during maintenance
-maxUnavailable: 1
-
-podSecurityContext:
-  fsGroup: 1000
-  runAsUser: 1000
-
-securityContext:
-  capabilities:
-    drop:
-      - ALL
-  # readOnlyRootFilesystem: true
-  runAsNonRoot: true
-  runAsUser: 1000
-
-# How long to wait for elasticsearch to stop gracefully
-terminationGracePeriod: 120
-
-sysctlVmMaxMapCount: 262144
-
-readinessProbe:
-  failureThreshold: 3
-  initialDelaySeconds: 10
-  periodSeconds: 10
-  successThreshold: 3
-  timeoutSeconds: 5
-
-# https://www.elastic.co/guide/en/elasticsearch/reference/7.16/cluster-health.html#request-params wait_for_status
-clusterHealthCheckParams: "wait_for_status=green&timeout=1s"
-
-## Use an alternate scheduler.
-## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
-##
-schedulerName: ""
-
-imagePullSecrets: []
-nodeSelector: {}
-tolerations: []
-
-# Enabling this will publicly expose your Elasticsearch instance.
-# Only enable this if you have security enabled on your cluster
-ingress:
-  enabled: false
-  annotations: {}
-  # kubernetes.io/ingress.class: nginx
-  # kubernetes.io/tls-acme: "true"
-  className: "nginx"
-  pathtype: ImplementationSpecific
-  hosts:
-    - host: chart-example.local
-      paths:
-        - path: /
-  tls: []
-  #  - secretName: chart-example-tls
-  #    hosts:
-  #      - chart-example.local
-
-nameOverride: ""
-fullnameOverride: ""
-healthNameOverride: ""
-
-lifecycle:
-  {}
-  # preStop:
-  #   exec:
-  #     command: ["/bin/sh", "-c", "echo Hello from the postStart handler > /usr/share/message"]
-  # postStart:
-  #   exec:
-  #     command:
-  #       - bash
-  #       - -c
-  #       - |
-  #         #!/bin/bash
-  #         # Add a template to adjust number of shards/replicas
-  #         TEMPLATE_NAME=my_template
-  #         INDEX_PATTERN="logstash-*"
-  #         SHARD_COUNT=8
-  #         REPLICA_COUNT=1
-  #         ES_URL=http://localhost:9200
-  #         while [[ "$(curl -s -o /dev/null -w '%{http_code}\n' $ES_URL)" != "200" ]]; do sleep 1; done
-  #         curl -XPUT "$ES_URL/_template/$TEMPLATE_NAME" -H 'Content-Type: application/json' -d'{"index_patterns":['\""$INDEX_PATTERN"\"'],"settings":{"number_of_shards":'$SHARD_COUNT',"number_of_replicas":'$REPLICA_COUNT'}}'
-
-sysctlInitContainer:
-  enabled: true
-
-keystore: []
-
-networkPolicy:
-  ## Enable creation of NetworkPolicy resources. Only Ingress traffic is filtered for now.
-  ## In order for a Pod to access Elasticsearch, it needs to have the following label:
-  ## {{ template "uname" . }}-client: "true"
-  ## Example for default configuration to access HTTP port:
-  ## elasticsearch-master-http-client: "true"
-  ## Example for default configuration to access transport port:
-  ## elasticsearch-master-transport-client: "true"
-
-  http:
-    enabled: false
-    ## if explicitNamespacesSelector is not set or set to {}, only client Pods being in the networkPolicy's namespace
-    ## and matching all criteria can reach the DB.
-    ## But sometimes, we want the Pods to be accessible to clients from other namespaces, in this case, we can use this
-    ## parameter to select these namespaces
-    ##
-    # explicitNamespacesSelector:
-    #   # Accept from namespaces with all those different rules (only from whitelisted Pods)
-    #   matchLabels:
-    #     role: frontend
-    #   matchExpressions:
-    #     - {key: role, operator: In, values: [frontend]}
-    ## Additional NetworkPolicy Ingress "from" rules to set. Note that all rules are OR-ed.
-    ##
-    # additionalRules:
-    #   - podSelector:
-    #       matchLabels:
-    #         role: frontend
-    #   - podSelector:
-    #       matchExpressions:
-    #         - key: role
-    #           operator: In
-    #           values:
-    #             - frontend
-
-  transport:
-    ## Note that all Elasticsearch Pods can talk to themselves using transport port even if enabled.
-    enabled: false
-    # explicitNamespacesSelector:
-    #   matchLabels:
-    #     role: frontend
-    #   matchExpressions:
-    #     - {key: role, operator: In, values: [frontend]}
-    # additionalRules:
-    #   - podSelector:
-    #       matchLabels:
-    #         role: frontend
-    #   - podSelector:
-    #       matchExpressions:
-    #         - key: role
-    #           operator: In
-    #           values:
-    #             - frontend
-
-tests:
-  enabled: true
-
-# Deprecated
-# please use the above podSecurityContext.fsGroup instead
-fsGroup: ""