Merge pull request #61 from signadot/release-v0.16.0

changes for release v0.16.0

signadot/operator/Chart.yaml

@@ -6,10 +6,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "0.15.0"
+version: "0.16.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.15.0"
+appVersion: "0.16.0"

signadot/operator/templates/agent-deployment.yaml

@@ -48,7 +48,7 @@ spec:
             secretKeyRef:
               key: token
               name: cluster-agent
-        image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.15.0{{- end }}{{- else -}}signadot/agent:v0.15.0{{- end }}{{- else -}}signadot/agent:v0.15.0{{- end }}
+        image: {{ with .Values }}{{ with .agent }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/agent:v0.16.0{{- end }}{{- else -}}signadot/agent:v0.16.0{{- end }}{{- else -}}signadot/agent:v0.16.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .agent }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         livenessProbe:
           httpGet:

signadot/operator/templates/io-context-server-deployment.yaml

@@ -40,7 +40,7 @@ spec:
         - /app/io-context-server
         - -tls=secretns=signadot
         - -port=8443
-        image: {{ with .Values }}{{ with .ioContextServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-context-server:v0.15.0{{- end }}{{- else -}}signadot/io-context-server:v0.15.0{{- end }}{{- else -}}signadot/io-context-server:v0.15.0{{- end }}
+        image: {{ with .Values }}{{ with .ioContextServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-context-server:v0.16.0{{- end }}{{- else -}}signadot/io-context-server:v0.16.0{{- end }}{{- else -}}signadot/io-context-server:v0.16.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .ioContextServer }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         name: io-context-server
         ports:

signadot/operator/templates/routeserver-deployment.yaml

@@ -36,7 +36,7 @@ spec:
         {{- end }}
     spec:
       containers:
-      - image: {{ with .Values }}{{ with .routeServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-server:v0.15.0{{- end }}{{- else -}}signadot/route-server:v0.15.0{{- end }}{{- else -}}signadot/route-server:v0.15.0{{- end }}
+      - image: {{ with .Values }}{{ with .routeServer }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-server:v0.16.0{{- end }}{{- else -}}signadot/route-server:v0.16.0{{- end }}{{- else -}}signadot/route-server:v0.16.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .routeServer }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         name: routeserver
         ports:

signadot/operator/templates/signadot-controller-manager-deployment.yaml

@@ -67,18 +67,18 @@ spec:
         - name: ISTIO_ADDITIONAL_ANNOTATIONS
           value: {{ with .Values }}{{ with .istio }}{{ with .additionalAnnotations }}{{ mustToJson . | quote}}{{- else -}}""{{- end }}{{- else -}}""{{- end }}{{- else -}}""{{- end }}
         - name: SIDECAR_INIT_IMAGE
-          value: {{ with .Values }}{{ with .routeInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-init:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-init:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-init:v0.15.0{{- end }}
+          value: {{ with .Values }}{{ with .routeInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-init:v0.16.0{{- end }}{{- else -}}signadot/route-sidecar-init:v0.16.0{{- end }}{{- else -}}signadot/route-sidecar-init:v0.16.0{{- end }}
         - name: LEGACY_SIDECAR_INIT_IMAGE
           value: {{ with .Values }}{{ with .routeInit }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}{{- else -}}signadot/sd-init-networking:latest{{- end }}
         - name: ROUTE_SIDECAR_IMAGE
-          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar:v0.15.0{{- end }}
+          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar:v0.16.0{{- end }}{{- else -}}signadot/route-sidecar:v0.16.0{{- end }}{{- else -}}signadot/route-sidecar:v0.16.0{{- end }}
         - name: LEGACY_ROUTE_SIDECAR_IMAGE
-          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.15.0{{- end }}
+          value: {{ with .Values }}{{ with .routeSidecar }}{{ with .legacy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/route-sidecar-legacy:v0.16.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.16.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.16.0{{- end }}{{- else -}}signadot/route-sidecar-legacy:v0.16.0{{- end }}
         - name: IO_INIT_IMAGE
-          value: {{ with .Values }}{{ with .ioInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-init:v0.15.0{{- end }}{{- else -}}signadot/io-init:v0.15.0{{- end }}{{- else -}}signadot/io-init:v0.15.0{{- end }}
+          value: {{ with .Values }}{{ with .ioInit }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-init:v0.16.0{{- end }}{{- else -}}signadot/io-init:v0.16.0{{- end }}{{- else -}}signadot/io-init:v0.16.0{{- end }}
         - name: IO_SIDECAR_IMAGE
-          value: {{ with .Values }}{{ with .ioSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-sidecar:v0.15.0{{- end }}{{- else -}}signadot/io-sidecar:v0.15.0{{- end }}{{- else -}}signadot/io-sidecar:v0.15.0{{- end }}
-        image: {{ with .Values }}{{ with .operator }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/operator:v0.15.0{{- end }}{{- else -}}signadot/operator:v0.15.0{{- end }}{{- else -}}signadot/operator:v0.15.0{{- end }}
+          value: {{ with .Values }}{{ with .ioSidecar }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/io-sidecar:v0.16.0{{- end }}{{- else -}}signadot/io-sidecar:v0.16.0{{- end }}{{- else -}}signadot/io-sidecar:v0.16.0{{- end }}
+        image: {{ with .Values }}{{ with .operator }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/operator:v0.16.0{{- end }}{{- else -}}signadot/operator:v0.16.0{{- end }}{{- else -}}signadot/operator:v0.16.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .operator }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         livenessProbe:
           httpGet:

signadot/operator/templates/signadotexternalworkloads.signadot.com-customresourcedefinition.yaml

@@ -95,8 +95,6 @@ spec:
                       - localAddress
                       type: object
                     type: array
-                required:
-                - baselineToLocals
                 type: object
               workloadID:
                 description: 'DEPRECATED: this field is no longer needed.'
@@ -278,7 +276,6 @@ spec:
                     - controlPort
                     - tunnelProxyPodIP
                     - tunnelProxyPodName
-                    - workloadPorts
                     type: object
                 type: object
             type: object

signadot/operator/templates/signadotsandboxes.signadot.com-customresourcedefinition.yaml

@@ -238,8 +238,6 @@ spec:
                             - localAddress
                             type: object
                           type: array
-                      required:
-                      - baselineToLocals
                       type: object
                   required:
                   - baseline
@@ -7256,7 +7254,6 @@ spec:
                           - controlPort
                           - tunnelProxyPodIP
                           - tunnelProxyPodName
-                          - workloadPorts
                           type: object
                       type: object
                   required:

signadot/operator/templates/tunnel-api-clusterrole.yaml

@@ -20,6 +20,14 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - apps
+  resources:
+  - statefulsets
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
   - signadot.com
   resources:

signadot/operator/templates/tunnel-api-deployment.yaml

@@ -45,7 +45,7 @@ spec:
 {{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}
 {{ with .Values }}{{ with .tunnel }}{{ with .config }}{{ with .externalDNS }}{{ with .syncInterval }}        - --external-dns-resync-interval={{ . }}
 {{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}{{- else -}}{{- end }}
-        image: {{ with .Values }}{{ with .tunnel }}{{ with .api }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/tunnel-api:v0.15.0{{- end }}{{- else -}}signadot/tunnel-api:v0.15.0{{- end }}{{- else -}}signadot/tunnel-api:v0.15.0{{- end }}{{- else -}}signadot/tunnel-api:v0.15.0{{- end }}
+        image: {{ with .Values }}{{ with .tunnel }}{{ with .api }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/tunnel-api:v0.16.0{{- end }}{{- else -}}signadot/tunnel-api:v0.16.0{{- end }}{{- else -}}signadot/tunnel-api:v0.16.0{{- end }}{{- else -}}signadot/tunnel-api:v0.16.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .tunnel }}{{ with .api }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         name: tunnel-api
         ports:

signadot/operator/templates/tunnel-proxy-deployment.yaml

@@ -60,7 +60,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.name
-        image: {{ with .Values }}{{ with .tunnel }}{{ with .proxy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/tunnel-proxy:v0.15.0{{- end }}{{- else -}}signadot/tunnel-proxy:v0.15.0{{- end }}{{- else -}}signadot/tunnel-proxy:v0.15.0{{- end }}{{- else -}}signadot/tunnel-proxy:v0.15.0{{- end }}
+        image: {{ with .Values }}{{ with .tunnel }}{{ with .proxy }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/tunnel-proxy:v0.16.0{{- end }}{{- else -}}signadot/tunnel-proxy:v0.16.0{{- end }}{{- else -}}signadot/tunnel-proxy:v0.16.0{{- end }}{{- else -}}signadot/tunnel-proxy:v0.16.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .tunnel }}{{ with .proxy }}{{ with .imagePullPolicy }}{{ . | quote}}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}{{- else -}}IfNotPresent{{- end }}
         name: tunnel-proxy
         ports:
@@ -108,7 +108,7 @@ spec:
           value: "10000"
         - name: OUTBOUND_AUDITOR_PORT
           value: "10001"
-        image: {{ with .Values }}{{ with .tunnel }}{{ with .auditor }}{{ with .init }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/tunnel-auditor-init:v0.15.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.15.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.15.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.15.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.15.0{{- end }}
+        image: {{ with .Values }}{{ with .tunnel }}{{ with .auditor }}{{ with .init }}{{ with .image }}{{ . | quote}}{{- else -}}signadot/tunnel-auditor-init:v0.16.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.16.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.16.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.16.0{{- end }}{{- else -}}signadot/tunnel-auditor-init:v0.16.0{{- end }}
         imagePullPolicy: {{ with .Values }}{{ with .tunnel }}{{ with .auditor }}{{ with .init }}{{ with .imagePullPolicy }}{{ . }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}
         name: auditor-init
         securityContext:

signadot/operator/templates/tunnel-proxy-metrics-service.yaml

@@ -21,7 +21,8 @@ metadata:
   namespace: signadot
 spec:
   ports:
-  - name: metrics
+  - appProtocol: http
+    name: metrics
     port: 9090
     protocol: TCP
     targetPort: 8001

signadot/operator/templates/tunnel-proxy-service.yaml

@@ -20,13 +20,17 @@ metadata:
   namespace: signadot
 spec:
   ports:
-  - name: als
+  - appProtocol: grpc
+    name: grpc-als
     port: 5000
-  - name: socks5
+  - appProtocol: tcp
+    name: tcp-socks5
     port: 1080
-  - name: revtun-ssh
+  - appProtocol: tcp
+    name: tcp-revtun-ssh
     port: 2222
-  - name: revtun-xap
+  - appProtocol: tcp
+    name: tcp-revtun-xap
     port: 7777
   selector:
     app: tunnel-proxy