zrb 0.28.1__py3-none-any.whl → 1.0.0a2__py3-none-any.whl

zrb/builtin/project/add/fastapp/app/template/src/kebab-zrb-app-name/deployment/helm-charts/redpanda/templates/console/configmap-and-deployment.yaml

@@ -1,325 +0,0 @@
-{{/*
-Licensed to the Apache Software Foundation (ASF) under one or more
-contributor license agreements.  See the NOTICE file distributed with
-this work for additional information regarding copyright ownership.
-The ASF licenses this file to You under the Apache License, Version 2.0
-(the "License"); you may not use this file except in compliance with
-the License.  You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/}}
-{{ $values := .Values }}
-
-{{/* Secret */}}
-{{ $secretConfig := dict ( dict
-  "create" $.Values.console.secret.create
-  )
-}}
-{{/* if the console chart has the creation of the secret disabled, create it here instead if needed */}}
-{{ if and .Values.console.enabled (not .Values.console.secret.create) }}
-{{ $licenseKey := ( include "enterprise-license" .  ) }}
-# before license changes, this was not printing a secret, so we gather in which case to print
-# for now only if we have a license do we print, however, this may be an issue for some
-# since if we do include a license we MUST also print all secret items.
-  {{ if ( not (empty $licenseKey ) ) }}
-{{ $secretConfig = ( dict
-  "create" true
-  "enterprise" ( dict "license" $licenseKey)
-  )
-}}
-
-{{ $config := dict
-  "Values" (dict
-  "secret" $secretConfig
-  )}}
-
-{{ $console := deepCopy .Subcharts.console }}
-{{ $console = merge $config $console }}
----
-{{ include (print .Subcharts.console.Template.BasePath "/secret.yaml") $console }}
-  {{ end }}
-{{ end }}
-
-{{ $configmap := dict }}
-{{/* if the console chart has the creation of the configmap disabled, create it here instead */}}
-{{ if and .Values.console.enabled (not .Values.console.configmap.create) }}
-{{ $consoleConfigmap := dict "create" true }}
-
-{{/* kafka section */}}
-
-{{/* brokers */}}
-{{ $kafkaBrokers := list }}
-{{ range (include "seed-server-list" . | mustFromJson) }}
-  {{ $kafkaBrokers = append $kafkaBrokers (printf "%s:%d" . (int $values.listeners.kafka.port)) }}
-{{ end }}
-
-{{/* sasl */}}
-{{/* the rest of sasl is configured through the secret */}}
-{{ $kafkaSASL := dict "enabled" (include "sasl-enabled" . | fromJson).bool }}
-
-{{/* tls */}}
-{{/* the rest of tls is configured through the secret */}}
-{{ $kafkaTLS := dict "enabled" (include "kafka-internal-tls-enabled" . | fromJson).bool }}
-
-{{/* schemaRegistry */}}
-{{- $urls := list -}}
-{{ $proto := "http" }}
-{{ if (include "schemaRegistry-internal-tls-enabled" . | fromJson).bool }}
-  {{ $proto = "https" }}
-{{ end }}
-{{ $port := int $values.listeners.schemaRegistry.port }}
-{{ range (include "seed-server-list" . | mustFromJson) }}
-  {{ $urls = append $urls (printf "%s://%s:%d" $proto . $port) }}
-{{ end }}
-{{/* tls */}}
-{{/* the rest of tls is configured through the secret */}}
-{{ $schemaRegistryTLS := dict "enabled" (include "schemaRegistry-internal-tls-enabled" . | fromJson).bool }}
-
-{{ $connectConfig := dict }}
-{{ if .Values.connectors.enabled }}
-{{ $connectorsValues := deepCopy .Subcharts.connectors }}
-{{ $connectorsValues = merge $connectorsValues .Values.connectors }}
-{{/* Connector */}}
-{{/* Currently Kafka connect helm chart does not support TLS configuraiton. That's why tls enabled is set explicitly to false*/}}
-{{/* Currently Kafka connect helm chart does not support basic auth. That's why username and password is set explicitly to empty string*/}}
-{{ $connectConfig = dict
-  "enabled" $values.connectors.enabled
-  "clusters" (list
-    (dict
-      "url" (printf "http://%s.%s.svc.%s:%s" (include "connectors.serviceName" $connectorsValues) .Release.Namespace ($values.clusterDomain | trimSuffix ".") ($values.connectors.connectors.restPort | toString ))
-      "name" "connectors"
-      "tls" (dict
-        "enabled" "false"
-        "caFilepath" ""
-        "certFilepath" ""
-        "keyFilepath" ""
-        "insecureSkipTlsVerify" "false"
-      )
-      "username" ""
-      "password" ""
-      "token" ""
-    )
-  )
-}}
-{{ end }}
-
-{{ $kafkaSchemaRegistry := dict
-      "enabled" (and .Values.listeners.schemaRegistry.enabled (include "redpanda-22-2-x-without-sasl" . | fromJson).bool)
-      "urls" $urls
-      "tls" $schemaRegistryTLS
-}}
-{{ $consoleConfigKafka := dict
-      "brokers" $kafkaBrokers
-      "sasl" $kafkaSASL
-      "tls" $kafkaTLS
-      "schemaRegistry" $kafkaSchemaRegistry
-}}
-{{ $consoleConfig := dict
-      "kafka" $consoleConfigKafka
-      "connect" $connectConfig
-}}
-
-{{ $consoleConfig := deepCopy .Values.console.config | merge $consoleConfig  }}
-
-{{ $config := dict
-    "Values" (dict
-      "console" (dict "config" $consoleConfig)
-      "configmap" $consoleConfigmap
-      "secret" $secretConfig
-    )
-}}
-
-{{ $console := deepCopy .Subcharts.console }}
-{{ $console = merge $config $console }}
----
-{{ include (print .Subcharts.console.Template.BasePath "/configmap.yaml") $console }}
-{{ $configmap = include (print .Subcharts.console.Template.BasePath "/configmap.yaml") $console }}
-{{ end }}
-
-{{/* Deployment */}}
-{{ if and .Values.console.enabled (not .Values.console.deployment.create) }}
-
-{{ $extraVolumes := list }}
-{{ $extraVolumeMounts := list }}
-{{ $command := list }}
-{{ if (include "sasl-enabled" . | fromJson).bool }}
-  {{ $command = concat $command (list "sh" "-c") }}
-  {{ $consoleSASLConfig := (printf "set -e; IFS=':' read -r KAFKA_SASL_USERNAME KAFKA_SASL_PASSWORD KAFKA_SASL_MECHANISM < <(grep \"\" $(find /mnt/users/* -print)); KAFKA_SASL_MECHANISM=${KAFKA_SASL_MECHANISM:-%s}; export KAFKA_SASL_USERNAME KAFKA_SASL_PASSWORD KAFKA_SASL_MECHANISM;" ( include "sasl-mechanism" . )) }}
-  {{ $consoleSASLConfig = cat $consoleSASLConfig " export KAFKA_SCHEMAREGISTRY_USERNAME=$KAFKA_SASL_USERNAME;" }}
-  {{ $consoleSASLConfig = cat $consoleSASLConfig " export KAFKA_SCHEMAREGISTRY_PASSWORD=$KAFKA_SASL_PASSWORD;" }}
-  {{ $consoleSASLConfig = cat $consoleSASLConfig " /app/console $@" }}
-  {{ $command = append $command $consoleSASLConfig }}
-  {{ $command = append $command "--" }}
-  {{ $extraVolumes = append $extraVolumes (dict
-    "name" (printf "%s-users" (include "redpanda.fullname" .))
-    "secret" (dict
-      "secretName" .Values.auth.sasl.secretRef
-    )
-  )}}
-  {{ $extraVolumeMounts = append $extraVolumeMounts (dict
-    "name" (printf "%s-users" (include "redpanda.fullname" .))
-    "mountPath" "/mnt/users"
-    "readOnly" true
-  ) }}
-{{ end }}
-
-{{ $kafkaTLS := list }}
-{{ if (include "kafka-internal-tls-enabled" . | fromJson).bool }}
-  {{ $service := .Values.listeners.kafka }}
-  {{ $cert := get .Values.tls.certs $service.tls.cert }}
-  {{- $secretName := (printf "%s-%s-cert" (include "redpanda.fullname" .) $service.tls.cert) }}
-  {{- if $cert.secretRef }}
-    {{- $secretName = $cert.secretRef.name }}
-  {{- end }}
-  {{ if $cert.caEnabled }}
-    {{ $kafkaTLS = append $kafkaTLS (dict
-      "name" "KAFKA_TLS_CAFILEPATH"
-      "value" (printf "/mnt/cert/kafka/%s/ca.crt" $service.tls.cert)
-    )}}
-    {{ $extraVolumes = append $extraVolumes (dict
-        "name" (printf "kafka-%s-cert" $service.tls.cert)
-        "secret" (dict
-          "defaultMode" 0420
-          "items" (list (dict "key" "ca.crt" "path" "ca.crt") )
-          "secretName" ( $secretName )
-    ))}}
-    {{ $extraVolumeMounts = append $extraVolumeMounts (dict
-        "name" (printf "kafka-%s-cert" $service.tls.cert)
-        "mountPath" (printf "/mnt/cert/kafka/%s" $service.tls.cert)
-        "readOnly" true
-    )}}
-  {{ end }}
-{{ end }}
-
-{{ $schemaRegistryTLS := list }}
-{{ if (include "schemaRegistry-internal-tls-enabled" . | fromJson).bool }}
-  {{ $service := .Values.listeners.schemaRegistry }}
-  {{ $cert := get .Values.tls.certs $service.tls.cert }}
-  {{- $secretName := (printf "%s-%s-cert" (include "redpanda.fullname" .) $service.tls.cert) }}
-  {{- if $cert.secretRef }}
-  {{- $secretName = $cert.secretRef.name }}
-  {{- end }}
-  {{ if $cert.caEnabled }}
-    {{ $schemaRegistryTLS = append $schemaRegistryTLS (dict
-      "name" "KAFKA_SCHEMAREGISTRY_TLS_CAFILEPATH"
-      "value" (printf "/mnt/cert/schemaregistry/%s/ca.crt" $service.tls.cert)
-    )}}
-    {{ $extraVolumes = append $extraVolumes (dict
-        "name" (printf "schemaregistry-%s-cert" $service.tls.cert)
-        "secret" (dict
-          "defaultMode" 0420
-          "items" (list (dict "key" "ca.crt" "path" "ca.crt") )
-          "secretName" ( $secretName )
-    ))}}
-    {{ $extraVolumeMounts = append $extraVolumeMounts (dict
-        "name" (printf "schemaregistry-%s-cert" $service.tls.cert)
-        "mountPath" (printf "/mnt/cert/schemaregistry/%s" $service.tls.cert)
-        "readOnly" true
-    )}}
-  {{ end }}
-{{ end }}
-
-{{ $adminAPI := list }}
-{{ if (include "admin-internal-tls-enabled" . | fromJson).bool }}
-  {{ $service := .Values.listeners.admin }}
-  {{ $cert := get .Values.tls.certs $service.tls.cert }}
-  {{- $secretName := (printf "%s-%s-cert" (include "redpanda.fullname" .) $service.tls.cert) }}
-  {{- if $cert.secretRef }}
-  {{- $secretName = $cert.secretRef.name }}
-  {{- end }}
-  {{ if $cert.caEnabled }}
-    {{ $adminAPI = append $adminAPI (dict
-      "name" "REDPANDA_ADMINAPI_TLS_ENABLED"
-      "value" "true"
-    ) }}
-    {{ $adminAPI = append $adminAPI (dict
-      "name" "REDPANDA_ADMINAPI_TLS_CAFILEPATH"
-      "value" (printf "/mnt/cert/adminapi/%s/ca.crt" $service.tls.cert)
-    )}}
-    {{ $extraVolumes = append $extraVolumes (dict
-        "name" (printf "adminapi-%s-cert" $service.tls.cert)
-        "secret" (dict
-          "defaultMode" 0420
-          "items" (list (dict "key" "ca.crt" "path" "ca.crt") )
-          "secretName" ( $secretName )
-    ))}}
-    {{ $extraVolumeMounts = append $extraVolumeMounts (dict
-        "name" (printf "adminapi-%s-cert" $service.tls.cert)
-        "mountPath" (printf "/mnt/cert/adminapi/%s" $service.tls.cert)
-        "readOnly" true
-    )}}
-  {{ end }}
-{{ end }}
-{{ $adminAPI := append $adminAPI (dict
-  "name" "REDPANDA_ADMINAPI_ENABLED"
-  "value" "true"
-)}}
-{{ $adminAPI = append $adminAPI (dict
-  "name" "REDPANDA_ADMINAPI_URLS"
-  "value" (print (include "admin-http-protocol" .) "://" (include "admin-api-service-url" .))
-)}}
-
-{{ $enterprise := dict }}
-{{ if ( include "enterprise-secret" .) }}
-  {{ $enterprise = dict
-    "licenseSecretRef" ( dict
-       "name" ( include "enterprise-secret-name" . )
-       "key" ( include "enterprise-secret-key" . )
-     )
-  }}
-{{ end }}
-
-{{ $extraEnv := concat $kafkaTLS $schemaRegistryTLS $adminAPI .Values.console.extraEnv }}
-{{ $extraVolumes = concat $extraVolumes .Values.console.extraVolumes }}
-{{ $extraVolumeMounts = concat $extraVolumeMounts .Values.console.extraVolumeMounts }}
-{{ $consoleValues := dict
-  "Values" (dict
-  "extraVolumes" $extraVolumes
-  "extraVolumeMounts" $extraVolumeMounts
-  "extraEnv" $extraEnv
-  "secret" $secretConfig
-  "enterprise" $enterprise
-  "image" $values.console.image
-  "autoscaling" .Values.console.autoscaling
-  "replicaCount" .Values.console.replicaCount
-  "strategy" .Values.console.strategy
-  "podAnnotations" .Values.console.podAnnotations
-  "podLabels" .Values.console.podLabels
-  "imagePullSecrets" .Values.console.imagePullSecrets
-  "podSecurityContext" .Values.console.podSecurityContext
-  "secretMounts" .Values.console.secretMounts
-  "initContainers" .Values.console.initContainers
-  "extraArgs" .Values.console.extraArgs
-  "securityContext" .Values.console.securityContext
-  "livenessProbe" .Values.console.livenessProbe
-  "readinessProbe" .Values.console.readinessProbe
-  "resources" .Values.console.resources
-  "extraContainers" .Values.console.extraContainers
-  "nodeSelector" .Values.console.nodeSelector
-  "affinity" .Values.console.affinity
-  "topologySpreadConstraints" .Values.console.topologySpreadConstraints
-  "priorityClassName" .Values.console.priorityClassName
-  "tolerations" .Values.console.tolerations
-)}}
-
-{{ if not (empty $command) }}
-  {{ $consoleValues := merge $consoleValues (dict "Values" (dict "deployment" (dict "command" $command))) }}
-{{ end }}
-{{ $consoleValues := merge $consoleValues (dict "Values" (dict "deployment" (dict "create" (not .Values.console.deployment.create)))) }}
-
-{{ if and .Values.console.enabled (not .Values.console.configmap.create) }}
-{{ $consoleValues := merge $consoleValues (dict "Values" (dict "podAnnotations" (dict "checksum-redpanda-chart/config" ( $configmap | toYaml | sha256sum )))) }}
-{{ end }}
-
-{{ $helmVars := deepCopy .Subcharts.console }}
-{{ $helmVars := merge $consoleValues $helmVars }}
-
----
-{{ include (print .Subcharts.console.Template.BasePath "/deployment.yaml") $helmVars }}
-{{ end }}

zrb/builtin/project/add/fastapp/app/template/src/kebab-zrb-app-name/deployment/helm-charts/redpanda/templates/poddisruptionbudget.yaml

@@ -1,38 +0,0 @@
-{{/*
-Licensed to the Apache Software Foundation (ASF) under one or more
-contributor license agreements.  See the NOTICE file distributed with
-this work for additional information regarding copyright ownership.
-The ASF licenses this file to You under the Apache License, Version 2.0
-(the "License"); you may not use this file except in compliance with
-the License.  You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/}}
-{{- $budget := .Values.statefulset.budget.maxUnavailable -}}
-{{- /* to maintain quorum, raft cannot lose more than half its members */ -}}
-{{- $minReplicas := divf .Values.statefulset.replicas 2 | floor -}}
-{{- /* the lowest we can go is 1 so allow that always */ -}}
-{{- if and (gt $budget (float64 1)) (gt $budget $minReplicas) -}}
-  {{ fail "statefulset.budget.maxUnavailable is set too high to maintain quorum: $budget > $minReplicas" }}
-{{- end -}}
-
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  name: {{ template "redpanda.fullname" . }}
-  namespace: {{ .Release.Namespace }}
-  labels:
-{{- with include "full.labels" . }}
-  {{- . | nindent 4 }}
-{{- end }}
-spec:
-  maxUnavailable: {{ $budget | int64 }}
-  selector:
-    matchLabels: {{ (include "statefulset-pod-labels" .) | nindent 6 }}
-      redpanda.com/poddisruptionbudget: {{ template "redpanda.fullname" . }}

zrb/builtin/project/add/fastapp/app/template/src/kebab-zrb-app-name/deployment/helm-charts/redpanda/templates/post-install-upgrade-job.yaml

@@ -1,142 +0,0 @@
-{{/*
-Licensed to the Apache Software Foundation (ASF) under one or more
-contributor license agreements.  See the NOTICE file distributed with
-this work for additional information regarding copyright ownership.
-The ASF licenses this file to You under the Apache License, Version 2.0
-(the "License"); you may not use this file except in compliance with
-the License.  You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/}}
-{{- if .Values.post_install_job.enabled }}
-{{- $values := .Values }}
-{{- $root := deepCopy . }}
----
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: {{ template "redpanda.fullname" . }}-configuration
-  namespace: {{ .Release.Namespace | quote }}
-  labels:
-{{- with include "full.labels" . }}
-  {{- . | nindent 4 }}
-{{- end }}
-{{- with .Values.post_install_job.labels }}
-  {{- toYaml . | nindent 4 }}
-{{- end }}
-  annotations:
-    # This is what defines this resource as a hook. Without this line, the
-    # job is considered part of the release.
-    "helm.sh/hook": post-install,post-upgrade
-    "helm.sh/hook-delete-policy": before-hook-creation
-    "helm.sh/hook-weight": "-5"
-{{- with .Values.post_install_job.annotations }}
-  {{- toYaml . | nindent 4 }}
-{{- end }}
-spec:
-  template:
-    metadata:
-      generateName: "{{ .Release.Name }}-post-"
-      labels:
-        app.kubernetes.io/name: {{ template "redpanda.name" . }}
-        app.kubernetes.io/instance: {{ .Release.Name | quote }}
-        app.kubernetes.io/component: {{ (include "redpanda.name" .) | trunc 50  }}-post-install
-{{- with .Values.commonLabels }}
-  {{- toYaml . | nindent 8 }}
-{{- end }}
-    spec:
-    {{- with .Values.nodeSelector }}
-      nodeSelector: {{- toYaml . | nindent 8 }}
-    {{- end }}
-    {{- with ( include "post-install-job-affinity" . ) }}
-      affinity: {{- . | nindent 8 }}
-    {{- end }}
-    {{- with .Values.tolerations }}
-      tolerations: {{- toYaml . | nindent 8 }}
-    {{- end }}
-      restartPolicy: Never
-      securityContext: {{ include "pod-security-context" . | nindent 8 }}
-    {{- with .Values.imagePullSecrets }}
-      imagePullSecrets: {{- toYaml . | nindent 8 }}
-    {{- end }}
-      containers:
-      - name: {{ template "redpanda.name" . }}-post-install
-        image: {{ .Values.image.repository }}:{{ template "redpanda.tag" . }}
-        {{ (dict "env" (prepend
-            (include "tiered-storage-env-vars" . | fromJsonArray)
-            (include "secret-ref-or-value" (dict
-                "Name" "REDPANDA_LICENSE"
-                "Value" (include "enterprise-license" .)
-                "SecretName" (include "enterprise-secret-name" .)
-                "SecretKey" (include "enterprise-secret-key" .)
-            ) | fromJson)
-         | compact)) | toYaml | nindent 8 }}
-        command: ["bash","-c"]
-        args:
-          - |
-            set -e
-        {{- if (include "redpanda-atleast-22-2-0" . | fromJson).bool }}
-            if [[ -n "$REDPANDA_LICENSE" ]] then
-              rpk cluster license set "$REDPANDA_LICENSE"
-            fi
-        {{- end }}
-
-            {{/* ### Here be dragons ### 
-            This block of bash configures cluster configuration settings by
-            pulling them from environment variables.
-
-            This allows us to support configurations from secrets or their raw
-            values.
-
-            WARNING: There is a small race condition here. `rpk cluster config
-            import` will reset any values that are not specified. To work
-            around this, we first export the the configuration. If there's a
-            change to the configuration while we're updating the exported
-            config on disk, said change will be reverted.
-
-            TODO(chrisseto): Consolidate all cluster configuration setting to
-            this job.
-            */}}
-
-            {{/* First: dump the existing cluster configuration.
-
-            We need to use config import to handle conditional configurations
-            (e.g. cloud_storage_enabled). Maintaining a DAG of configurations
-            is not an option for the helm chart. */}}
-            rpk cluster config export -f /tmp/cfg.yml
-
-            {{/* Second: For each environment variable with the prefix RPK
-            ("${!RPK_@}"), use `rpk redpanda config set` to update the exported
-            config.
-
-            Lots of Bash Jargon here:
-                "${KEY#*RPK_}" => Strip the RPK_ prefix from KEY.
-                "${config,,}" => config.toLower()
-                "${!KEY}" => Dynamic variable resolution. ie: What is the value of the variable with a name equal to the value of $KEY?
-            */}}
-            for KEY in "${!RPK_@}"; do
-              config="${KEY#*RPK_}"
-              rpk redpanda config set --config /tmp/cfg.yml "${config,,}" "${!KEY}"
-            done
-
-            {{/*
-            The updated file is then loaded via `rpk cluster config import` which
-            ensures that conditional configurations (cloud_storage_enabled)
-            "see" all their dependent keys.
-            */}}
-            rpk cluster config import -f /tmp/cfg.yml
-        {{- with .Values.post_install_job.resources }}
-        resources:
-          {{- toYaml . | nindent 10 }}
-        {{- end }}
-        securityContext: {{ include "container-security-context" . | nindent 10 }}
-        volumeMounts: {{- include "default-mounts" . | nindent 10 }}
-      volumes: {{ include "default-volumes" . | nindent 8 }}
-      serviceAccountName: {{ include "redpanda.serviceAccountName" . }}
-{{- end -}}

zrb/builtin/project/add/fastapp/app/template/src/kebab-zrb-app-name/deployment/helm-charts/redpanda/templates/post-upgrade.yaml

@@ -1,127 +0,0 @@
-{{/*
-Licensed to the Apache Software Foundation (ASF) under one or more
-contributor license agreements.  See the NOTICE file distributed with
-this work for additional information regarding copyright ownership.
-The ASF licenses this file to You under the Apache License, Version 2.0
-(the "License"); you may not use this file except in compliance with
-the License.  You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/}}
-{{- if .Values.post_upgrade_job.enabled }}
-{{- $service := .Values.listeners.admin -}}
-{{- $cert := get .Values.tls.certs $service.tls.cert -}}
-{{- $root := deepCopy . }}
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: {{ template "redpanda.fullname" . }}-post-upgrade
-  namespace: {{ .Release.Namespace | quote }}
-  labels:
-{{- with include "full.labels" . }}
-  {{- . | nindent 4 }}
-{{- end }}
-{{- with .Values.post_upgrade_job.labels }}
-  {{- toYaml . | nindent 4 }}
-{{- end }}
-  annotations:
-    "helm.sh/hook": post-upgrade
-    "helm.sh/hook-delete-policy": before-hook-creation
-    "helm.sh/hook-weight": "-10"
-{{- with .Values.post_upgrade_job.annotations }}
-  {{- toYaml . | nindent 4 }}
-{{- end }}
-spec:
-  {{- with .Values.post_upgrade_job.backoffLimit }}
-  backoffLimit: {{ .Values.post_upgrade_job.backoffLimit }}
-  {{- end }}
-  template:
-    metadata:
-      name: "{{ .Release.Name }}"
-      labels:
-        app.kubernetes.io/name: {{ template "redpanda.name" . }}
-        app.kubernetes.io/instance: {{ .Release.Name | quote }}
-        app.kubernetes.io/component: {{ (include "redpanda.name" .) | trunc 50  }}-post-upgrade
-{{- with .Values.commonLabels }}
-  {{- toYaml . | nindent 8 }}
-{{- end }}
-    spec:
-    {{- with .Values.nodeSelector }}
-      nodeSelector: {{- toYaml . | nindent 8 }}
-    {{- end }}
-    {{- with ( include "post-upgrade-job-affinity" . ) }}
-      affinity: {{- . | nindent 8 }}
-    {{- end }}
-    {{- with .Values.tolerations }}
-      tolerations: {{- toYaml . | nindent 8 }}
-    {{- end }}
-      restartPolicy: Never
-      securityContext: {{ include "pod-security-context" . | nindent 8 }}
-      serviceAccountName: {{ include "redpanda.serviceAccountName" . }}
-    {{- with .Values.imagePullSecrets }}
-      imagePullSecrets: {{- toYaml . | nindent 8 }}
-    {{- end }}
-      containers:
-      - name: {{ template "redpanda.name" . }}-post-upgrade
-        image: {{ .Values.image.repository }}:{{ template "redpanda.tag" . }}
-        command: ["/bin/bash", "-c"]
-        args:
-          - |
-            set -e
-{{- range $key, $value := .Values.config.cluster }}
-  {{- if eq $key "default_topic_replications" }}
-    {{/* "sub (add $i (mod $i 2)) 1" calculates the closest odd number less than or equal to $i: 1=1, 2=1, 3=3, ... */}}
-    {{- $r := $.Values.statefulset.replicas }}
-    {{- $value = min $value (sub (add $r (mod $r 2)) 1) }}
-  {{- end }}
-  {{- if and (typeIs "float64" $value) (eq (floor $value) $value) }}
-    {{- $value = int64 $value }}
-  {{- end }}
-  {{- if and (typeIs "bool" $value ) ( not ( empty $value ) ) }}
-            rpk cluster config set {{ $key }} {{ $value }}
-  {{- else if and (typeIs "[]interface {}" $value ) ( not ( empty $value ) ) }}
-            rpk cluster config set {{ $key }} "[ {{ join "," $value }} ]"
-  {{- else if $value }}
-            rpk cluster config set {{ $key }} {{ $value }}
-  {{- end }}
-{{- end }}
-{{- if not (hasKey .Values.config.cluster "storage_min_free_bytes") }}
-            rpk cluster config set storage_min_free_bytes {{ include "storage-min-free-bytes" . }}
-{{- end }}
-{{- if (include "redpanda-atleast-23-2-1" . | fromJson).bool }}
-            if [ -d "/etc/secrets/users/" ]; then
-                IFS=":" read -r USER_NAME PASSWORD MECHANISM < <(grep "" $(find /etc/secrets/users/* -print))
-                curl -svm3 --fail --retry "120" --retry-max-time "120" --retry-all-errors --ssl-reqd \
-  {{- if and $cert ( dig "caEnabled" false $cert ) }}
-                --cacert /etc/tls/certs/{{ $service.tls.cert }}/ca.crt \
-  {{- end }}
-                -X PUT -u ${USER_NAME}:${PASSWORD} \
-  {{- if (include "admin-internal-tls-enabled" . | fromJson).bool }}
-                https://{{ include "redpanda.internal.domain" . }}:{{ $service.port }}/v1/debug/restart_service?service=schema-registry || true
-  {{- else }}
-                http://{{ include "redpanda.internal.domain" . }}:{{ $service.port }}/v1/debug/restart_service?service=schema-registry || true
-  {{- end }}
-            fi
-{{- end }}
-        {{- with .Values.post_upgrade_job.resources }}
-        resources:
-          {{- toYaml . | nindent 10 }}
-        {{- end }}
-        securityContext: {{ include "container-security-context" . | nindent 10 }}
-        {{- if .Values.post_upgrade_job.extraEnv }}
-        env:
-          {{- include "common.tplvalues.render" (dict "value" .Values.post_upgrade_job.extraEnv "context" $) | nindent 10 }}
-        {{- end }}
-        {{- if .Values.post_upgrade_job.extraEnvFrom }}
-        envFrom:
-          {{- include "common.tplvalues.render" (dict "value" .Values.post_upgrade_job.extraEnvFrom "context" $) | nindent 10 }}
-        {{- end }}
-        volumeMounts: {{- include "default-mounts" . | nindent 10 }}
-      volumes: {{ include "default-volumes" . | nindent 8 }}
-{{- end }}