site/site30/software/charts/kubernetes/container-networking/etcd.yaml

   1 ---
   2 ##############################################################################
   3 # Copyright © 2018 AT&T Intellectual Property. All rights reserved.          #
   4 #                                                                            #
   5 # Licensed under the Apache License, Version 2.0 (the "License"); you may    #
   6 # not use this file except in compliance with the License.                   #
   7 #                                                                            #
   8 # You may obtain a copy of the License at                                    #
   9 #       http://www.apache.org/licenses/LICENSE-2.0                           #
  10 #                                                                            #
  11 # Unless required by applicable law or agreed to in writing, software        #
  12 # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT  #
  13 # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.           #
  14 # See the License for the specific language governing permissions and        #
  15 # limitations under the License.                                             #
  16 ##############################################################################
  17
  18 schema: armada/Chart/v1
  19 metadata:
  20   schema: metadata/Document/v1
  21   name: kubernetes-calico-etcd
  22   layeringDefinition:
  23     abstract: false
  24     layer: site
  25     parentSelector:
  26         name: kubernetes-calico-etcd-global
  27     actions:
  28         - method: merge
  29           path: .
  30   storagePolicy: cleartext
  31   substitutions:
  32
  33     # Chart source
  34     - src:
  35         schema: pegleg/SoftwareVersions/v1
  36         name: software-versions
  37         path: .charts.kubernetes.calico.etcd
  38       dest:
  39         path: .source
  40
  41     # Image versions
  42     - src:
  43         schema: pegleg/SoftwareVersions/v1
  44         name: software-versions
  45         path: .images.calico.etcd
  46       dest:
  47         path: .values.images.tags
  48
  49     # IP addresses
  50     -
  51       src:
  52         schema: pegleg/CommonAddresses/v1
  53         name: common-addresses
  54         path: .calico.etcd.service_ip
  55       dest:
  56         path: .values.service.ip
  57     -
  58       src:
  59         schema: pegleg/CommonAddresses/v1
  60         name: common-addresses
  61         path: .calico.etcd.service_ip
  62       dest:
  63         path: .values.anchor.etcdctl_endpoint
  64
  65     # CAs
  66     -
  67       src:
  68         schema: deckhand/CertificateAuthority/v1
  69         name: calico-etcd
  70         path: .
  71       dest:
  72         path: .values.secrets.tls.client.ca
  73     -
  74       src:
  75         schema: deckhand/CertificateAuthority/v1
  76         name: calico-etcd-peer
  77         path: .
  78       dest:
  79         path: .values.secrets.tls.peer.ca
  80
  81     # Anchor client cert
  82     -
  83       src:
  84         schema: deckhand/Certificate/v1
  85         name: calico-etcd-anchor
  86         path: .
  87       dest:
  88         path: .values.secrets.anchor.tls.cert
  89     -
  90       src:
  91         schema: deckhand/CertificateKey/v1
  92         name: calico-etcd-anchor
  93         path: .
  94       dest:
  95         path: .values.secrets.anchor.tls.key
  96
  97     # Node names
  98     -
  99       src:
 100         schema: pegleg/CommonAddresses/v1
 101         name: common-addresses
 102         path: .masters[0].hostname
 103       dest:
 104         path: .values.nodes[0].name
 105     -
 106       src:
 107         schema: pegleg/CommonAddresses/v1
 108         name: common-addresses
 109         path: .masters[1].hostname
 110       dest:
 111         path: .values.nodes[1].name
 112     -
 113       src:
 114         schema: pegleg/CommonAddresses/v1
 115         name: common-addresses
 116         path: .genesis.hostname
 117       dest:
 118         path: .values.nodes[2].name
 119
 120    # Server certs
 121     - src:
 122         schema: deckhand/Certificate/v1
 123         name: calico-etcd-aknode31
 124         path: .
 125       dest:
 126         path: .values.nodes[0].tls.client.cert
 127     - src:
 128         schema: deckhand/CertificateKey/v1
 129         name: calico-etcd-aknode31
 130         path: .
 131       dest:
 132         path: .values.nodes[0].tls.client.key
 133     - src:
 134         schema: deckhand/Certificate/v1
 135         name: calico-etcd-aknode31-peer
 136         path: .
 137       dest:
 138         path: .values.nodes[0].tls.peer.cert
 139     - src:
 140         schema: deckhand/CertificateKey/v1
 141         name: calico-etcd-aknode31-peer
 142         path: .
 143       dest:
 144         path: .values.nodes[0].tls.peer.key
 145     - src:
 146         schema: deckhand/Certificate/v1
 147         name: calico-etcd-aknode32
 148         path: .
 149       dest:
 150         path: .values.nodes[1].tls.client.cert
 151     - src:
 152         schema: deckhand/CertificateKey/v1
 153         name: calico-etcd-aknode32
 154         path: .
 155       dest:
 156         path: .values.nodes[1].tls.client.key
 157     - src:
 158         schema: deckhand/Certificate/v1
 159         name: calico-etcd-aknode32-peer
 160         path: .
 161       dest:
 162         path: .values.nodes[1].tls.peer.cert
 163     - src:
 164         schema: deckhand/CertificateKey/v1
 165         name: calico-etcd-aknode32-peer
 166         path: .
 167       dest:
 168         path: .values.nodes[1].tls.peer.key
 169     # NOTE(mb874d): Be sure we generate these certs for genesis.
 170     - src:
 171         schema: deckhand/Certificate/v1
 172         name: calico-etcd-aknode30
 173         path: .
 174       dest:
 175         path: .values.nodes[2].tls.client.cert
 176     - src:
 177         schema: deckhand/CertificateKey/v1
 178         name: calico-etcd-aknode30
 179         path: .
 180       dest:
 181         path: .values.nodes[2].tls.client.key
 182     - src:
 183         schema: deckhand/Certificate/v1
 184         name: calico-etcd-aknode30-peer
 185         path: .
 186       dest:
 187         path: .values.nodes[2].tls.peer.cert
 188     - src:
 189         schema: deckhand/CertificateKey/v1
 190         name: calico-etcd-aknode30-peer
 191         path: .
 192       dest:
 193         path: .values.nodes[2].tls.peer.key
 194
 195
 196 data: {}
 197
 198 ...