From 06546f7cde87dce2a597fc1f71f44ab0e3ea2525 Mon Sep 17 00:00:00 2001 From: Michal Jura Date: Thu, 9 Jan 2025 16:07:35 +0100 Subject: [PATCH] [v2.10] Bump eks-operator to v1.10.2-rc.1 (#4941) --- ...eks-operator-crd-105.2.0+up1.10.2-rc.1.tgz | Bin 0 -> 1215 bytes ...her-eks-operator-105.2.0+up1.10.2-rc.1.tgz | Bin 0 -> 2116 bytes .../105.2.0+up1.10.2-rc.1/Chart.yaml | 12 + .../105.2.0+up1.10.2-rc.1/templates/crds.yaml | 229 ++++++++++++++++++ .../105.2.0+up1.10.2-rc.1/Chart.yaml | 20 ++ .../105.2.0+up1.10.2-rc.1/templates/NOTES.txt | 4 + .../templates/_helpers.tpl | 25 ++ .../templates/clusterrole.yaml | 15 ++ .../templates/clusterrolebinding.yaml | 13 + .../templates/deployment.yaml | 68 ++++++ .../templates/serviceaccount.yaml | 5 + .../105.2.0+up1.10.2-rc.1/values.yaml | 22 ++ index.yaml | 40 +++ .../rancher-eks-operator-crd/package.yaml | 4 +- .../rancher-eks-operator/package.yaml | 4 +- release.yaml | 4 + 16 files changed, 461 insertions(+), 4 deletions(-) create mode 100644 assets/rancher-eks-operator-crd/rancher-eks-operator-crd-105.2.0+up1.10.2-rc.1.tgz create mode 100644 assets/rancher-eks-operator/rancher-eks-operator-105.2.0+up1.10.2-rc.1.tgz create mode 100644 charts/rancher-eks-operator-crd/105.2.0+up1.10.2-rc.1/Chart.yaml create mode 100644 charts/rancher-eks-operator-crd/105.2.0+up1.10.2-rc.1/templates/crds.yaml create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/Chart.yaml create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/NOTES.txt create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/_helpers.tpl create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrole.yaml create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrolebinding.yaml create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/deployment.yaml create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/serviceaccount.yaml create mode 100644 charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/values.yaml diff --git a/assets/rancher-eks-operator-crd/rancher-eks-operator-crd-105.2.0+up1.10.2-rc.1.tgz b/assets/rancher-eks-operator-crd/rancher-eks-operator-crd-105.2.0+up1.10.2-rc.1.tgz new file mode 100644 index 0000000000000000000000000000000000000000..a8e0dac6212c654f1b05df84af92541f4082cbb3 GIT binary patch literal 1215 zcmV;w1VH;AiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI;`QzAzY_jy0X)V(I);;E!~yF!z)Ow83`d~askWy0*tqJrLp6$ZJT-9_S$48f!7QHzHt+_288? z+zW(|;6dBCEx~(@ZDkK7l2^A1qn;>hrE=LwMG=~w_~a?YPnAmyB*+dV_C)cp#Z&f} zR4%sM6Iz+{zEbOu66Lw|ugWm8%Ig0%I$4;30~oiVwi48zffN^u**S0OuaQ zcG{h=ebge^?gSCCB;|arIKLc-KT9K`pR%{fH)NZV#525AM&+3eRv=FvaKe-JQ9Jx8 zb@Pb3eE+rm?=f*2Jo2HWh_@nw=lj2Na&mII(Er`;NB{3f=8GPj!h4S<`^N3@FPt^c zq!WyliF&ow9VF->0uLE~EYOJ%Bh*QoM~77YuH~#&a@rGPL>CBAbOw%D>Xbc_wB}aD z+{Q6Kc5uKBWo9oXo4S1YoU$-d;uXH0Uk>_(y?$;lS2>*$=nAl0%Ogwv>d{auUndKl zGI6SbmVX-v;RqRNf`6H@v3KTIg*xJ%xCPA^2*J`i?1`%x`9*;cWxwZ0tuh6ZP5~uH zm_Xrz5Z0mj^7Z28^We$j3^Z$2uV&sBGE38=RIkef68LUSpD;q>73cvb#-4=&C~O^{w_cWA9fFbi6hI7=R*Wuwpi zYMk&TPMZvHoDPu;dgNJWHfUViI94XUp1S3d5JGuODju%{d=_#|cYz3|3p!&X{4MMG zO?<7d`9gq_YQ-91iWSvRNQA5iqk;NfQTZDqDdRED$F2$_#p6A|pgbDzsItyC#;K{1 zOk$Vr_|2#UV!Wtm@g~DihCLXGS(EJ+Ny89zO_>V;QIzk{puetYiM2gi!>5g6v%|kp z`kL5MBS+We7`jy+S202+s;Wa) zp}twY<37(&^4Yg~m}(M=@Shaf51jQEC6Cp1O+%zSI~!a>{7$)y=dxKddKFST)cnA> zss^(%taND5zms76yRE*IkB{UIgBP(kbB|$P96#?>#h|c4Ej4u1_91U29gBbe d+vz{KAMzm|@*$ha{{a91|Np&Adq4mt002r$TT=i4 literal 0 HcmV?d00001 diff --git a/assets/rancher-eks-operator/rancher-eks-operator-105.2.0+up1.10.2-rc.1.tgz b/assets/rancher-eks-operator/rancher-eks-operator-105.2.0+up1.10.2-rc.1.tgz new file mode 100644 index 0000000000000000000000000000000000000000..0208e5557e433f6ee781972d8043ba904b7550d1 GIT binary patch literal 2116 zcmV-K2)p+miwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PH$#bK|zr_nE(9N6s^TnjR@imhCI2*BRG$Z92Kw9{Za1CUbKG zfh!ReL@-!TK3CCy?*ODElA=5KE>IDXL^oF1K?hW+D{!HckW+#j62fbff~z5{YHOuq;OU-)5+%!jQkhdU-3-Slv=PwpKF{Bl+W*jsPdbWljb) zSLsNMDZmL;uxGtiB1^5;WbX%mC`IoFz20`wHA-ZJzEwf{2DVNkt}={Z%2GDQDW=9_ znfQLmz^w1FEL;8U1-&rn`-3y*_-5dJ>Tsvi=g<=15;G0POJp;b}i?`v2oF-24BhfU#6VCQH|EB-$r{!a2Ud5zD2y#<3uy?;_}Q zJP#*yS)LP%E2eB*PSThu5=L3fRx7hehK(bbRgKHDMtY^y=VAe8vg^O8T0gTm7S^pW z`CeP65ucw?1S2L1y@La|P%(mJLzGmw8WjU0664gluY&`)#?jit*l40tG)UIn#fnom zC)EBp7cq8I6{Almk=qr!-ob%qhi=@6(h2Gj`bJ1|V7hQKH=N?Mr_{$Jyd zxzI@P?P@u2f$QXVUWw&mFZ}S)vjnfSP+FL~bIFJ<*c3|b4xNL~|XjV3#kwv7NLTPH3Soyrmo)_Cr4Rci3FSs#oMm2syRhNr7hou_B?cS2no z=PET!q^MU1%Wn@P1r&E9aAc0z@${SS6a-3#4)}l&Lk@u*u}ll8dD>SFH?DU zt(5tTkXUSF1V-mov}{Q$-Xy_U#)d))Bao_00K{5l^${P=-o0xYYugQ2RnUXlL4>I_ zLvkJc^-QpHL<;6sK_(fmvNBULpW=6JTAiJPqM;uP?cCHI2m*DRVhqDOw?J*-oKOQP z;GZ-mj1t!oBS=tV;8kUG99}V#M9@XUSGV&-vdfvj<~qpS#~N!WPK1%<*YNy8gc>U4 z!(xg1DK0m7V@unm*Gd_`P(fAFSRti{#!2i1e%YWj%#BkRM{O(}i(~hLGeRipJS$T9 z*$lU7m__4EN{rpcB?zP3= 1.28.0-0 < 1.32.0-0' + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/provides-gvr: eksclusterconfigs.eks.cattle.io/v1 + catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.11.0-0' + catalog.cattle.io/release-name: rancher-eks-operator + catalog.cattle.io/scope: management +apiVersion: v2 +appVersion: 1.10.2-rc.1 +description: A Helm chart for provisioning EKS clusters +home: https://github.com/rancher/eks-operator +name: rancher-eks-operator +sources: +- https://github.com/rancher/eks-operator +version: 105.2.0+up1.10.2-rc.1 diff --git a/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/NOTES.txt b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/NOTES.txt new file mode 100644 index 0000000000..23a1b4a8bf --- /dev/null +++ b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/NOTES.txt @@ -0,0 +1,4 @@ +You have deployed the Rancher EKS operator +Version: {{ .Chart.AppVersion }} +Description: This operator provisions EKS clusters +from EKSClusterConfig CRs. diff --git a/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/_helpers.tpl b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/_helpers.tpl new file mode 100644 index 0000000000..de3b332f6a --- /dev/null +++ b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/_helpers.tpl @@ -0,0 +1,25 @@ +{{/* vim: set filetype=mustache: */}} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} + +{{/* +Windows cluster will add default taint for linux nodes, +add below linux tolerations to workloads could be scheduled to those linux nodes +*/}} +{{- define "linux-node-tolerations" -}} +- key: "cattle.io/os" + value: "linux" + effect: "NoSchedule" + operator: "Equal" +{{- end -}} + +{{- define "linux-node-selector" -}} +kubernetes.io/os: linux +{{- end -}} + diff --git a/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrole.yaml b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrole.yaml new file mode 100644 index 0000000000..d0d561b6ea --- /dev/null +++ b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrole.yaml @@ -0,0 +1,15 @@ +kind: ClusterRole +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: eks-operator + namespace: cattle-system +rules: + - apiGroups: [''] + resources: ['secrets'] + verbs: ['get', 'list', 'create', 'watch'] + - apiGroups: ['eks.cattle.io'] + resources: ['eksclusterconfigs'] + verbs: ['get', 'list', 'update', 'watch'] + - apiGroups: ['eks.cattle.io'] + resources: ['eksclusterconfigs/status'] + verbs: ['update'] diff --git a/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrolebinding.yaml b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrolebinding.yaml new file mode 100644 index 0000000000..2b1846353e --- /dev/null +++ b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/clusterrolebinding.yaml @@ -0,0 +1,13 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: eks-operator + namespace: cattle-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: eks-operator +subjects: +- kind: ServiceAccount + name: eks-operator + namespace: cattle-system diff --git a/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/deployment.yaml b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/deployment.yaml new file mode 100644 index 0000000000..27b1f58366 --- /dev/null +++ b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/deployment.yaml @@ -0,0 +1,68 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: eks-config-operator + namespace: cattle-system +spec: + replicas: 1 + selector: + matchLabels: + ke.cattle.io/operator: eks + template: + metadata: + labels: + ke.cattle.io/operator: eks + spec: + nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} +{{- if .Values.nodeSelector }} +{{ toYaml .Values.nodeSelector | indent 8 }} +{{- end }} + tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} +{{- if .Values.tolerations }} +{{ toYaml .Values.tolerations | indent 8 }} +{{- end }} + serviceAccountName: eks-operator + {{- if .Values.priorityClassName }} + priorityClassName: "{{.Values.priorityClassName}}" + {{- end }} + securityContext: + fsGroup: 1007 + runAsUser: 1007 + containers: + - name: eks-operator + image: '{{ template "system_default_registry" $ }}{{ $.Values.eksOperator.image.repository }}:{{ $.Values.eksOperator.image.tag }}' + imagePullPolicy: IfNotPresent + env: + - name: HTTP_PROXY + value: {{ .Values.httpProxy }} + - name: HTTPS_PROXY + value: {{ .Values.httpsProxy }} + - name: NO_PROXY + value: {{ .Values.noProxy }} + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + privileged: false + capabilities: + drop: + - ALL +{{- if .Values.additionalTrustedCAs }} + # eks-operator mounts the additional CAs in two places: + volumeMounts: + # This directory is owned by the eks-operator user so c_rehash works here. + - mountPath: /etc/rancher/ssl/ca-additional.pem + name: tls-ca-additional-volume + subPath: ca-additional.pem + readOnly: true + # This directory is root-owned so c_rehash doesn't work here, + # but the cert is here in case update-ca-certificates is called in the future or by the OS. + - mountPath: /etc/pki/trust/anchors/ca-additional.pem + name: tls-ca-additional-volume + subPath: ca-additional.pem + readOnly: true + volumes: + - name: tls-ca-additional-volume + secret: + defaultMode: 0400 + secretName: tls-ca-additional + {{- end }} diff --git a/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/serviceaccount.yaml b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/serviceaccount.yaml new file mode 100644 index 0000000000..934de07e0d --- /dev/null +++ b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/templates/serviceaccount.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + namespace: cattle-system + name: eks-operator diff --git a/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/values.yaml b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/values.yaml new file mode 100644 index 0000000000..fd1910c645 --- /dev/null +++ b/charts/rancher-eks-operator/105.2.0+up1.10.2-rc.1/values.yaml @@ -0,0 +1,22 @@ +global: + cattle: + systemDefaultRegistry: "" + +eksOperator: + image: + repository: rancher/eks-operator + tag: v1.10.2-rc.1 + +httpProxy: "" +httpsProxy: "" +noProxy: "" +additionalTrustedCAs: false +## Node labels for pod assignment +## Ref: https://kubernetes.io/docs/user-guide/node-selection/ +## +nodeSelector: {} +## List of node taints to tolerate (requires Kubernetes >= 1.6) +tolerations: [] + +## PriorityClassName assigned to deployment. +priorityClassName: "" diff --git a/index.yaml b/index.yaml index ab9e7e50af..5b2977c22f 100755 --- a/index.yaml +++ b/index.yaml @@ -12372,6 +12372,30 @@ entries: - assets/rancher-csp-adapter/rancher-csp-adapter-1.0.0.tgz version: 1.0.0 rancher-eks-operator: + - annotations: + catalog.cattle.io/auto-install: rancher-eks-operator-crd=match + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/kube-version: '>= 1.28.0-0 < 1.32.0-0' + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/provides-gvr: eksclusterconfigs.eks.cattle.io/v1 + catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.11.0-0' + catalog.cattle.io/release-name: rancher-eks-operator + catalog.cattle.io/scope: management + apiVersion: v2 + appVersion: 1.10.2-rc.1 + created: "2025-01-09T09:14:44.072104198+01:00" + description: A Helm chart for provisioning EKS clusters + digest: 78f8298b1c13ca097b78a8be3b2b3b08b96c1e102c75bc3b6dadeccd04f44c43 + home: https://github.com/rancher/eks-operator + name: rancher-eks-operator + sources: + - https://github.com/rancher/eks-operator + urls: + - assets/rancher-eks-operator/rancher-eks-operator-105.2.0+up1.10.2-rc.1.tgz + version: 105.2.0+up1.10.2-rc.1 - annotations: catalog.cattle.io/auto-install: rancher-eks-operator-crd=match catalog.cattle.io/certified: rancher @@ -12973,6 +12997,22 @@ entries: - assets/rancher-eks-operator/rancher-eks-operator-101.0.0+up1.1.5.tgz version: 101.0.0+up1.1.5 rancher-eks-operator-crd: + - annotations: + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/namespace: cattle-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux,windows + catalog.cattle.io/release-name: rancher-eks-operator-crd + apiVersion: v2 + appVersion: 1.10.2-rc.1 + created: "2025-01-09T09:14:46.317973042+01:00" + description: EKS Operator CustomResourceDefinitions + digest: 6c019dbdb3c9148926a89a5cff3c59d990cd12ad38b37d2bf5fbc615b18df87c + name: rancher-eks-operator-crd + urls: + - assets/rancher-eks-operator-crd/rancher-eks-operator-crd-105.2.0+up1.10.2-rc.1.tgz + version: 105.2.0+up1.10.2-rc.1 - annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/hidden: "true" diff --git a/packages/rancher-eks-operator/rancher-eks-operator-crd/package.yaml b/packages/rancher-eks-operator/rancher-eks-operator-crd/package.yaml index a24b984423..da64382461 100644 --- a/packages/rancher-eks-operator/rancher-eks-operator-crd/package.yaml +++ b/packages/rancher-eks-operator/rancher-eks-operator-crd/package.yaml @@ -1,2 +1,2 @@ -url: https://github.com/rancher/eks-operator/releases/download/v1.10.1/rancher-eks-operator-crd-1.10.1.tgz -version: 105.1.0 +url: https://github.com/rancher/eks-operator/releases/download/v1.10.2-rc.1/rancher-eks-operator-crd-1.10.2-rc.1.tgz +version: 105.2.0 diff --git a/packages/rancher-eks-operator/rancher-eks-operator/package.yaml b/packages/rancher-eks-operator/rancher-eks-operator/package.yaml index 7f7396c03b..da239201f7 100644 --- a/packages/rancher-eks-operator/rancher-eks-operator/package.yaml +++ b/packages/rancher-eks-operator/rancher-eks-operator/package.yaml @@ -1,2 +1,2 @@ -url: https://github.com/rancher/eks-operator/releases/download/v1.10.1/rancher-eks-operator-1.10.1.tgz -version: 105.1.0 +url: https://github.com/rancher/eks-operator/releases/download/v1.10.2-rc.1/rancher-eks-operator-1.10.2-rc.1.tgz +version: 105.2.0 diff --git a/release.yaml b/release.yaml index eccb7a9490..ad7881b625 100644 --- a/release.yaml +++ b/release.yaml @@ -22,6 +22,10 @@ rancher-cis-benchmark: - 105.1.0+up7.1.1 rancher-cis-benchmark-crd: - 105.1.0+up7.1.1 +rancher-eks-operator: + - 105.2.0+up1.10.2-rc.1 +rancher-eks-operator-crd: + - 105.2.0+up1.10.2-rc.1 rancher-gke-operator: - 105.2.0+up1.10.2-rc.1 rancher-gke-operator-crd: