site/hpgen10/software/charts/kubernetes/container-networking/etcd.yaml

   1 ---
   2 ##############################################################################
   3 # Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.        #
   4 #                                                                            #
   5 # Licensed under the Apache License, Version 2.0 (the "License"); you may    #
   6 # not use this file except in compliance with the License.                   #
   7 #                                                                            #
   8 # You may obtain a copy of the License at                                    #
   9 #       http://www.apache.org/licenses/LICENSE-2.0                           #
  10 #                                                                            #
  11 # Unless required by applicable law or agreed to in writing, software        #
  12 # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT  #
  13 # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.           #
  14 # See the License for the specific language governing permissions and        #
  15 # limitations under the License.                                             #
  16 ##############################################################################
  17
  18 schema: armada/Chart/v1
  19 metadata:
  20   schema: metadata/Document/v1
  21   name: kubernetes-calico-etcd
  22   layeringDefinition:
  23     abstract: false
  24     layer: site
  25     parentSelector:
  26         name: kubernetes-calico-etcd-global
  27     actions:
  28         - method: merge
  29           path: .
  30   storagePolicy: cleartext
  31   substitutions:
  32
  33     # Chart source
  34     - src:
  35         schema: pegleg/SoftwareVersions/v1
  36         name: software-versions
  37         path: .charts.kubernetes.calico.etcd
  38       dest:
  39         path: .source
  40
  41     # Image versions
  42     - src:
  43         schema: pegleg/SoftwareVersions/v1
  44         name: software-versions
  45         path: .images.calico.etcd
  46       dest:
  47         path: .values.images.tags
  48
  49     # IP addresses
  50     - src:
  51         schema: pegleg/CommonAddresses/v1
  52         name: common-addresses
  53         path: .calico.etcd.service_ip
  54       dest:
  55         path: .values.service.ip
  56     - src:
  57         schema: pegleg/CommonAddresses/v1
  58         name: common-addresses
  59         path: .calico.etcd.service_ip
  60       dest:
  61         path: .values.anchor.etcdctl_endpoint
  62
  63     # CAs
  64     - src:
  65         schema: deckhand/CertificateAuthority/v1
  66         name: calico-etcd
  67         path: .
  68       dest:
  69         path: .values.secrets.tls.client.ca
  70     - src:
  71         schema: deckhand/CertificateAuthority/v1
  72         name: calico-etcd-peer
  73         path: .
  74       dest:
  75         path: .values.secrets.tls.peer.ca
  76
  77     # Anchor client cert
  78     - src:
  79         schema: deckhand/Certificate/v1
  80         name: calico-etcd-anchor
  81         path: .
  82       dest:
  83         path: .values.secrets.anchor.tls.cert
  84     - src:
  85         schema: deckhand/CertificateKey/v1
  86         name: calico-etcd-anchor
  87         path: .
  88       dest:
  89         path: .values.secrets.anchor.tls.key
  90
  91     # Node names
  92     - src:
  93         schema: pegleg/CommonAddresses/v1
  94         name: common-addresses
  95         path: .masters[0].hostname
  96       dest:
  97         path: .values.nodes[0].name
  98     - src:
  99         schema: pegleg/CommonAddresses/v1
 100         name: common-addresses
 101         path: .masters[1].hostname
 102       dest:
 103         path: .values.nodes[1].name
 104     - src:
 105         schema: pegleg/CommonAddresses/v1
 106         name: common-addresses
 107         path: .genesis.hostname
 108       dest:
 109         path: .values.nodes[2].name
 110
 111     # Server certs
 112     - src:
 113         schema: deckhand/Certificate/v1
 114         name: calico-etcd-aknode31
 115         path: .
 116       dest:
 117         path: .values.nodes[0].tls.client.cert
 118     - src:
 119         schema: deckhand/CertificateKey/v1
 120         name: calico-etcd-aknode31
 121         path: .
 122       dest:
 123         path: .values.nodes[0].tls.client.key
 124     - src:
 125         schema: deckhand/Certificate/v1
 126         name: calico-etcd-aknode31-peer
 127         path: .
 128       dest:
 129         path: .values.nodes[0].tls.peer.cert
 130     - src:
 131         schema: deckhand/CertificateKey/v1
 132         name: calico-etcd-aknode31-peer
 133         path: .
 134       dest:
 135         path: .values.nodes[0].tls.peer.key
 136     - src:
 137         schema: deckhand/Certificate/v1
 138         name: calico-etcd-aknode32
 139         path: .
 140       dest:
 141         path: .values.nodes[1].tls.client.cert
 142     - src:
 143         schema: deckhand/CertificateKey/v1
 144         name: calico-etcd-aknode32
 145         path: .
 146       dest:
 147         path: .values.nodes[1].tls.client.key
 148     - src:
 149         schema: deckhand/Certificate/v1
 150         name: calico-etcd-aknode32-peer
 151         path: .
 152       dest:
 153         path: .values.nodes[1].tls.peer.cert
 154     - src:
 155         schema: deckhand/CertificateKey/v1
 156         name: calico-etcd-aknode32-peer
 157         path: .
 158       dest:
 159         path: .values.nodes[1].tls.peer.key
 160
 161     # NOTE(mb874d): Be sure we generate these certs for genesis.
 162     - src:
 163         schema: deckhand/Certificate/v1
 164         name: calico-etcd-aknode30
 165         path: .
 166       dest:
 167         path: .values.nodes[2].tls.client.cert
 168     - src:
 169         schema: deckhand/CertificateKey/v1
 170         name: calico-etcd-aknode30
 171         path: .
 172       dest:
 173         path: .values.nodes[2].tls.client.key
 174     - src:
 175         schema: deckhand/Certificate/v1
 176         name: calico-etcd-aknode30-peer
 177         path: .
 178       dest:
 179         path: .values.nodes[2].tls.peer.cert
 180     - src:
 181         schema: deckhand/CertificateKey/v1
 182         name: calico-etcd-aknode30-peer
 183         path: .
 184       dest:
 185         path: .values.nodes[2].tls.peer.key
 186
 187 data:
 188   values:
 189     manifests:
 190       test_etcd_health: false
 191 ...