github_mirrors/openappsec
3
0
Fork 1
mirror of https://github.com/openappsec/openappsec.git synced 2025-06-28 16:41:02 +03:00
Code Issues Packages Projects Releases Wiki Activity

Open Appsec helm chart automation Wed Mar 27 16:27:33 IST 2024 latest

Browse Source
This commit is contained in:
Ned Wright 2024-03-27 16:27:33 +02:00
parent 3913e1e8b3
commit 8454b2dd9b
35 changed files with 3417 additions and 1044 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
build_system/charts/open-appsec-k8s-nginx-ingress/Chart.lock
View File

@ -3,4 +3,4 @@ dependencies:
repository: https://charts.bitnami.com/bitnami repository: https://charts.bitnami.com/bitnami
version: 12.2.8 version: 12.2.8
digest: sha256:0d13b8b0c66b8e18781eac510ce58b069518ff14a6a15ad90375e7f0ffad71fe digest: sha256:0d13b8b0c66b8e18781eac510ce58b069518ff14a6a15ad90375e7f0ffad71fe
generated: "2024-02-18T16:45:15.395307713Z" generated: "2024-03-26T14:53:49.928153508Z"

6
build_system/charts/open-appsec-k8s-nginx-ingress/Chart.yaml
View File

@ -1,7 +1,5 @@
annotations: annotations:
artifacthub.io/changes: |- artifacthub.io/changes: '- "Update Ingress-Nginx version controller-v1.10.0"'
- "update web hook cert gen to latest release v20231226-1a7112e06"
- "Update Ingress-Nginx version controller-v1.9.6"
artifacthub.io/prerelease: "false" artifacthub.io/prerelease: "false"
apiVersion: v2 apiVersion: v2
appVersion: latest appVersion: latest
@ -17,4 +15,4 @@ kubeVersion: '>=1.20.0-0'
name: open-appsec-k8s-nginx-ingress name: open-appsec-k8s-nginx-ingress
sources: sources:
- https://github.com/kubernetes/ingress-nginx - https://github.com/kubernetes/ingress-nginx
version: 4.9.1 version: 4.10.0

10
build_system/charts/open-appsec-k8s-nginx-ingress/README.md
View File

@ -2,7 +2,7 @@
[ingress-nginx](https://github.com/kubernetes/ingress-nginx) Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer
![Version: 4.9.1](https://img.shields.io/badge/Version-4.9.1-informational?style=flat-square) ![AppVersion: 1.9.6](https://img.shields.io/badge/AppVersion-1.9.6-informational?style=flat-square) ![Version: 4.10.0](https://img.shields.io/badge/Version-4.10.0-informational?style=flat-square) ![AppVersion: 1.10.0](https://img.shields.io/badge/AppVersion-1.10.0-informational?style=flat-square)
To use, add `ingressClassName: nginx` spec field or the `kubernetes.io/ingress.class: nginx` annotation to your Ingress resources. To use, add `ingressClassName: nginx` spec field or the `kubernetes.io/ingress.class: nginx` annotation to your Ingress resources.
@ -253,11 +253,11 @@ As of version `1.26.0` of this chart, by simply not providing any clusterIP valu
| controller.admissionWebhooks.namespaceSelector | object | `{}` | | | controller.admissionWebhooks.namespaceSelector | object | `{}` | |
| controller.admissionWebhooks.objectSelector | object | `{}` | | | controller.admissionWebhooks.objectSelector | object | `{}` | |
| controller.admissionWebhooks.patch.enabled | bool | `true` | | | controller.admissionWebhooks.patch.enabled | bool | `true` | |
| controller.admissionWebhooks.patch.image.digest | string | `"sha256:25d6a5f11211cc5c3f9f2bf552b585374af287b4debf693cacbe2da47daa5084"` | | | controller.admissionWebhooks.patch.image.digest | string | `"sha256:44d1d0e9f19c63f58b380c5fddaca7cf22c7cee564adeff365225a5df5ef3334"` | |
| controller.admissionWebhooks.patch.image.image | string | `"ingress-nginx/kube-webhook-certgen"` | | | controller.admissionWebhooks.patch.image.image | string | `"ingress-nginx/kube-webhook-certgen"` | |
| controller.admissionWebhooks.patch.image.pullPolicy | string | `"IfNotPresent"` | | | controller.admissionWebhooks.patch.image.pullPolicy | string | `"IfNotPresent"` | |
| controller.admissionWebhooks.patch.image.registry | string | `"registry.k8s.io"` | | | controller.admissionWebhooks.patch.image.registry | string | `"registry.k8s.io"` | |
| controller.admissionWebhooks.patch.image.tag | string | `"v20231226-1a7112e06"` | | | controller.admissionWebhooks.patch.image.tag | string | `"v1.4.0"` | |
| controller.admissionWebhooks.patch.labels | object | `{}` | Labels to be added to patch job resources | | controller.admissionWebhooks.patch.labels | object | `{}` | Labels to be added to patch job resources |
| controller.admissionWebhooks.patch.networkPolicy.enabled | bool | `false` | Enable 'networkPolicy' or not | | controller.admissionWebhooks.patch.networkPolicy.enabled | bool | `false` | Enable 'networkPolicy' or not |
| controller.admissionWebhooks.patch.nodeSelector."kubernetes.io/os" | string | `"linux"` | | | controller.admissionWebhooks.patch.nodeSelector."kubernetes.io/os" | string | `"linux"` | |
@ -317,7 +317,7 @@ As of version `1.26.0` of this chart, by simply not providing any clusterIP valu
| controller.hostname | object | `{}` | Optionally customize the pod hostname. | | controller.hostname | object | `{}` | Optionally customize the pod hostname. |
| controller.image.allowPrivilegeEscalation | bool | `false` | | | controller.image.allowPrivilegeEscalation | bool | `false` | |
| controller.image.chroot | bool | `false` | | | controller.image.chroot | bool | `false` | |
| controller.image.digest | string | `"sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c"` | | | controller.image.digest | string | `"sha256:42b3f0e5d0846876b1791cd3afeb5f1cbbe4259d6f35651dcc1b5c980925379c"` | |
| controller.image.digestChroot | string | `"sha256:7eb46ff733429e0e46892903c7394aff149ac6d284d92b3946f3baf7ff26a096"` | | | controller.image.digestChroot | string | `"sha256:7eb46ff733429e0e46892903c7394aff149ac6d284d92b3946f3baf7ff26a096"` | |
| controller.image.image | string | `"ingress-nginx/controller"` | | | controller.image.image | string | `"ingress-nginx/controller"` | |
| controller.image.pullPolicy | string | `"IfNotPresent"` | | | controller.image.pullPolicy | string | `"IfNotPresent"` | |
@ -326,7 +326,7 @@ As of version `1.26.0` of this chart, by simply not providing any clusterIP valu
| controller.image.runAsNonRoot | bool | `true` | | | controller.image.runAsNonRoot | bool | `true` | |
| controller.image.runAsUser | int | `101` | | | controller.image.runAsUser | int | `101` | |
| controller.image.seccompProfile.type | string | `"RuntimeDefault"` | | | controller.image.seccompProfile.type | string | `"RuntimeDefault"` | |
| controller.image.tag | string | `"v1.9.6"` | | | controller.image.tag | string | `"v1.10.0"` | |
| controller.ingressClass | string | `"nginx"` | For backwards compatibility with ingress.class annotation, use ingressClass. Algorithm is as follows, first ingressClassName is considered, if not present, controller looks for ingress.class annotation | | controller.ingressClass | string | `"nginx"` | For backwards compatibility with ingress.class annotation, use ingressClass. Algorithm is as follows, first ingressClassName is considered, if not present, controller looks for ingress.class annotation |
| controller.ingressClassByName | bool | `false` | Process IngressClass per name (additionally as per spec.controller). | | controller.ingressClassByName | bool | `false` | Process IngressClass per name (additionally as per spec.controller). |
| controller.ingressClassResource.controllerValue | string | `"k8s.io/ingress-nginx"` | Controller-value of the controller that is processing this ingressClass | | controller.ingressClassResource.controllerValue | string | `"k8s.io/ingress-nginx"` | Controller-value of the controller that is processing this ingressClass |

9
build_system/charts/open-appsec-k8s-nginx-ingress/changelog/helm-chart-4.10.0.md Normal file
View File

@ -0,0 +1,9 @@
# Changelog
This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org).
### 4.10.0
* - "Update Ingress-Nginx version controller-v1.10.0"
**Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.9.1...helm-chart-4.10.0

5
build_system/charts/open-appsec-k8s-nginx-ingress/templates/_params.tpl
View File

@ -29,7 +29,7 @@
- --watch-namespace={{ default "$(POD_NAMESPACE)" .Values.controller.scope.namespace }} - --watch-namespace={{ default "$(POD_NAMESPACE)" .Values.controller.scope.namespace }}
{{- end }} {{- end }}
{{- if and (not .Values.controller.scope.enabled) .Values.controller.scope.namespaceSelector }} {{- if and (not .Values.controller.scope.enabled) .Values.controller.scope.namespaceSelector }}
- --watch-namespace-selector={{ default "" .Values.controller.scope.namespaceSelector }} - --watch-namespace-selector={{ .Values.controller.scope.namespaceSelector }}
{{- end }} {{- end }}
{{- if and .Values.controller.reportNodeInternalIp .Values.controller.hostNetwork }} {{- if and .Values.controller.reportNodeInternalIp .Values.controller.hostNetwork }}
- --report-node-internal-ip-address={{ .Values.controller.reportNodeInternalIp }} - --report-node-internal-ip-address={{ .Values.controller.reportNodeInternalIp }}
@ -54,6 +54,9 @@
{{- if .Values.controller.watchIngressWithoutClass }} {{- if .Values.controller.watchIngressWithoutClass }}
- --watch-ingress-without-class=true - --watch-ingress-without-class=true
{{- end }} {{- end }}
{{- if not .Values.controller.metrics.enabled }}
- --enable-metrics={{ .Values.controller.metrics.enabled }}
{{- end }}
{{- if .Values.controller.enableTopologyAwareRouting }} {{- if .Values.controller.enableTopologyAwareRouting }}
- --enable-topology-aware-routing=true - --enable-topology-aware-routing=true
{{- end }} {{- end }}

2
build_system/charts/open-appsec-k8s-nginx-ingress/templates/controller-prometheusrules.yaml
View File

@ -1,4 +1,4 @@
{{- if and ( .Values.controller.metrics.enabled ) ( .Values.controller.metrics.prometheusRule.enabled ) ( .Capabilities.APIVersions.Has "monitoring.coreos.com/v1" ) -}} {{- if and .Values.controller.metrics.enabled .Values.controller.metrics.prometheusRule.enabled -}}
apiVersion: monitoring.coreos.com/v1 apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule kind: PrometheusRule
metadata: metadata:

2
build_system/charts/open-appsec-k8s-nginx-ingress/templates/default-policy.yaml
View File

@ -34,7 +34,7 @@ spec:
http-headers: false http-headers: false
request-body: false request-body: false
log-destination: log-destination:
cloud: false cloud: true
stdout: stdout:
format: json-formatted format: json-formatted
--- ---

34
build_system/charts/open-appsec-k8s-nginx-ingress/tests/controller-daemonset_test.yaml
View File

@ -15,3 +15,37 @@ tests:
- equal: - equal:
path: metadata.name path: metadata.name
value: RELEASE-NAME-open-appsec-k8s-nginx-ingress-controller value: RELEASE-NAME-open-appsec-k8s-nginx-ingress-controller
- it: should create a DaemonSet with argument `--enable-metrics=false` if `controller.metrics.enabled` is false
set:
controller.kind: DaemonSet
kind: Vanilla
controller.metrics.enabled: false
asserts:
- contains:
path: spec.template.spec.containers[0].args
content: --enable-metrics=false
- it: should create a DaemonSet without argument `--enable-metrics=false` if `controller.metrics.enabled` is true
set:
controller.kind: DaemonSet
kind: Vanilla
controller.metrics.enabled: true
asserts:
- notContains:
path: spec.template.spec.containers[0].args
content: --enable-metrics=false
- it: should create a DaemonSet with resource limits if `controller.resources.limits` is set
set:
controller.kind: DaemonSet
kind: Vanilla
controller.resources.limits.cpu: 500m
controller.resources.limits.memory: 512Mi
asserts:
- equal:
path: spec.template.spec.containers[0].resources.limits.cpu
value: 500m
- equal:
path: spec.template.spec.containers[0].resources.limits.memory
value: 512Mi

18
build_system/charts/open-appsec-k8s-nginx-ingress/tests/controller-deployment_test.yaml
View File

@ -4,8 +4,6 @@ templates:
tests: tests:
- it: should create a Deployment - it: should create a Deployment
set:
kind: Vanilla
asserts: asserts:
- hasDocuments: - hasDocuments:
count: 1 count: 1
@ -24,6 +22,22 @@ tests:
path: spec.replicas path: spec.replicas
value: 3 value: 3
- it: should create a Deployment with argument `--enable-metrics=false` if `controller.metrics.enabled` is false
set:
controller.metrics.enabled: false
asserts:
- contains:
path: spec.template.spec.containers[0].args
content: --enable-metrics=false
- it: should create a Deployment without argument `--enable-metrics=false` if `controller.metrics.enabled` is true
set:
controller.metrics.enabled: true
asserts:
- notContains:
path: spec.template.spec.containers[0].args
content: --enable-metrics=false
- it: should create a Deployment with resource limits if `controller.resources.limits` is set - it: should create a Deployment with resource limits if `controller.resources.limits` is set
set: set:
controller.resources.limits.cpu: 500m controller.resources.limits.cpu: 500m

10
build_system/charts/open-appsec-k8s-nginx-ingress/values.yaml
View File

@ -26,8 +26,8 @@ controller:
## for backwards compatibility consider setting the full image url via the repository value below ## for backwards compatibility consider setting the full image url via the repository value below
## use *either* current default registry/image or repository format or installing chart by providing the values.yaml will fail ## use *either* current default registry/image or repository format or installing chart by providing the values.yaml will fail
## repository: ## repository:
tag: "v1.9.6" tag: "v1.10.0"
digest: sha256:1405cc613bd95b2c6edd8b2a152510ae91c7e62aea4698500d23b2145960ab9c digest: sha256:42b3f0e5d0846876b1791cd3afeb5f1cbbe4259d6f35651dcc1b5c980925379c
digestChroot: sha256:7eb46ff733429e0e46892903c7394aff149ac6d284d92b3946f3baf7ff26a096 digestChroot: sha256:7eb46ff733429e0e46892903c7394aff149ac6d284d92b3946f3baf7ff26a096
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
runAsNonRoot: true runAsNonRoot: true
@ -781,8 +781,8 @@ controller:
## for backwards compatibility consider setting the full image url via the repository value below ## for backwards compatibility consider setting the full image url via the repository value below
## use *either* current default registry/image or repository format or installing chart by providing the values.yaml will fail ## use *either* current default registry/image or repository format or installing chart by providing the values.yaml will fail
## repository: ## repository:
tag: v20231226-1a7112e06 tag: v1.4.0
digest: sha256:25d6a5f11211cc5c3f9f2bf552b585374af287b4debf693cacbe2da47daa5084 digest: sha256:44d1d0e9f19c63f58b380c5fddaca7cf22c7cee564adeff365225a5df5ef3334
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# -- Provide a priority class name to the webhook patching job # -- Provide a priority class name to the webhook patching job
## ##
@ -1198,7 +1198,7 @@ appsec:
image: image:
registry: ghcr.io/openappsec registry: ghcr.io/openappsec
image: smartsync-tuning image: smartsync-tuning
tag: 1.1.3 tag: latest
enabled: false enabled: false
replicaCount: 1 replicaCount: 1
securityContext: securityContext:

22
build_system/charts/open-appsec-kong/CHANGELOG.md
View File

@ -1,5 +1,27 @@
# Changelog # Changelog
## 2.38.0
### Changes
* Added support for setting `SVC.tls.appProtocol` and `SVC.http.appProtocol` values to configure the appProtocol fields
for Kubernetes Service HTTP and TLS ports. It might be useful for integration with external load balancers like GCP.
[#1018](https://github.com/Kong/charts/pull/1018)
## 2.37.1
* Rename the controller status port. This fixes a collision with the proxy status port in the Prometheus ServiceMonitor.
[#1008](https://github.com/Kong/charts/pull/1008)
## 2.37.0
### Changes
* Bumped default `kong/kubernetes-ingress-controller` image tag and updated CRDs to 3.1.
[#1011](https://github.com/Kong/charts/pull/1011)
* Bumped default `kong` image tag to 3.6.
[#1011](https://github.com/Kong/charts/pull/1011)
## 2.36.0 ## 2.36.0
### Fixed ### Fixed

4
build_system/charts/open-appsec-kong/Chart.yaml
View File

@ -1,5 +1,5 @@
apiVersion: v2 apiVersion: v2
appVersion: 1.1.6 appVersion: 1.1.8
dependencies: dependencies:
- condition: postgresql.enabled - condition: postgresql.enabled
name: postgresql name: postgresql
@ -14,4 +14,4 @@ maintainers:
name: open-appsec-kong name: open-appsec-kong
sources: sources:
- https://github.com/Kong/charts/tree/main/charts/kong - https://github.com/Kong/charts/tree/main/charts/kong
version: 2.36.0 version: 2.38.0

70
build_system/charts/open-appsec-kong/README.md
View File

@ -666,40 +666,42 @@ nodes.
mixed TCP/UDP LoadBalancer Services). It _does not_ support the `http`, `tls`, mixed TCP/UDP LoadBalancer Services). It _does not_ support the `http`, `tls`,
or `ingress` sections, as it is used only for stream listens. or `ingress` sections, as it is used only for stream listens.
| Parameter | Description | Default | | Parameter | Description | Default |
|------------------------------------|---------------------------------------------------------------------------------------|--------------------------| |-----------------------------------|-------------------------------------------------------------------------------------------|--------------------------|
| SVC.enabled | Create Service resource for SVC (admin, proxy, manager, etc.) | | | SVC.enabled | Create Service resource for SVC (admin, proxy, manager, etc.) | |
| SVC.http.enabled | Enables http on the service | | | SVC.http.enabled | Enables http on the service | |
| SVC.http.servicePort | Service port to use for http | | | SVC.http.servicePort | Service port to use for http | |
| SVC.http.containerPort | Container port to use for http | | | SVC.http.containerPort | Container port to use for http | |
| SVC.http.nodePort | Node port to use for http | | | SVC.http.nodePort | Node port to use for http | |
| SVC.http.hostPort | Host port to use for http | | | SVC.http.hostPort | Host port to use for http | |
| SVC.http.parameters | Array of additional listen parameters | `[]` | | SVC.http.parameters | Array of additional listen parameters | `[]` |
| SVC.tls.enabled | Enables TLS on the service | | | SVC.http.appProtocol | `appProtocol` to be set in a Service's port. If left empty, no `appProtocol` will be set. | |
| SVC.tls.containerPort | Container port to use for TLS | | | SVC.tls.enabled | Enables TLS on the service | |
| SVC.tls.servicePort | Service port to use for TLS | | | SVC.tls.containerPort | Container port to use for TLS | |
| SVC.tls.nodePort | Node port to use for TLS | | | SVC.tls.servicePort | Service port to use for TLS | |
| SVC.tls.hostPort | Host port to use for TLS | | | SVC.tls.nodePort | Node port to use for TLS | |
| SVC.tls.overrideServiceTargetPort | Override service port to use for TLS without touching Kong containerPort | | | SVC.tls.hostPort | Host port to use for TLS | |
| SVC.tls.parameters | Array of additional listen parameters | `["http2"]` | | SVC.tls.overrideServiceTargetPort | Override service port to use for TLS without touching Kong containerPort | |
| SVC.type | k8s service type. Options: NodePort, ClusterIP, LoadBalancer | | | SVC.tls.parameters | Array of additional listen parameters | `["http2"]` |
| SVC.clusterIP | k8s service clusterIP | | | SVC.tls.appProtocol | `appProtocol` to be set in a Service's port. If left empty, no `appProtocol` will be set. | |
| SVC.loadBalancerClass | loadBalancerClass to use for LoadBalancer provisionning | | | SVC.type | k8s service type. Options: NodePort, ClusterIP, LoadBalancer | |
| SVC.loadBalancerSourceRanges | Limit service access to CIDRs if set and service type is `LoadBalancer` | `[]` | | SVC.clusterIP | k8s service clusterIP | |
| SVC.loadBalancerIP | Reuse an existing ingress static IP for the service | | | SVC.loadBalancerClass | loadBalancerClass to use for LoadBalancer provisionning | |
| SVC.externalIPs | IPs for which nodes in the cluster will also accept traffic for the servic | `[]` | | SVC.loadBalancerSourceRanges | Limit service access to CIDRs if set and service type is `LoadBalancer` | `[]` |
| SVC.externalTrafficPolicy | k8s service's externalTrafficPolicy. Options: Cluster, Local | | | SVC.loadBalancerIP | Reuse an existing ingress static IP for the service | |
| SVC.ingress.enabled | Enable ingress resource creation (works with SVC.type=ClusterIP) | `false` | | SVC.externalIPs | IPs for which nodes in the cluster will also accept traffic for the servic | `[]` |
| SVC.ingress.ingressClassName | Set the ingressClassName to associate this Ingress with an IngressClass | | | SVC.externalTrafficPolicy | k8s service's externalTrafficPolicy. Options: Cluster, Local | |
| SVC.ingress.hostname | Ingress hostname | `""` | | SVC.ingress.enabled | Enable ingress resource creation (works with SVC.type=ClusterIP) | `false` |
| SVC.ingress.path | Ingress path. | `/` | | SVC.ingress.ingressClassName | Set the ingressClassName to associate this Ingress with an IngressClass | |
| SVC.ingress.pathType | Ingress pathType. One of `ImplementationSpecific`, `Exact` or `Prefix` | `ImplementationSpecific` | | SVC.ingress.hostname | Ingress hostname | `""` |
| SVC.ingress.hosts | Slice of hosts configurations, including `hostname`, `path` and `pathType` keys | `[]` | | SVC.ingress.path | Ingress path. | `/` |
| SVC.ingress.tls | Name of secret resource or slice of `secretName` and `hosts` keys | | | SVC.ingress.pathType | Ingress pathType. One of `ImplementationSpecific`, `Exact` or `Prefix` | `ImplementationSpecific` |
| SVC.ingress.annotations | Ingress annotations. See documentation for your ingress controller for details | `{}` | | SVC.ingress.hosts | Slice of hosts configurations, including `hostname`, `path` and `pathType` keys | `[]` |
| SVC.ingress.labels | Ingress labels. Additional custom labels to add to the ingress. | `{}` | | SVC.ingress.tls | Name of secret resource or slice of `secretName` and `hosts` keys | |
| SVC.annotations | Service annotations | `{}` | | SVC.ingress.annotations | Ingress annotations. See documentation for your ingress controller for details | `{}` |
| SVC.labels | Service labels | `{}` | | SVC.ingress.labels | Ingress labels. Additional custom labels to add to the ingress. | `{}` |
| SVC.annotations | Service annotations | `{}` |
| SVC.labels | Service labels | `{}` |
#### Admin Service mTLS #### Admin Service mTLS

34
build_system/charts/open-appsec-kong/ci/__snapshots__/admin-api-service-clusterip-values.snap
View File

@ -9,8 +9,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -33,9 +33,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -90,7 +90,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -205,7 +205,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -274,8 +274,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-custom-dbless-config name: chartsnap-kong-custom-dbless-config
namespace: default namespace: default
- object: - object:
@ -286,8 +286,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-admin name: chartsnap-kong-admin
namespace: default namespace: default
spec: spec:
@ -309,8 +309,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -336,9 +336,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -364,8 +364,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

98
build_system/charts/open-appsec-kong/ci/__snapshots__/custom-labels-values.snap
View File

@ -9,8 +9,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -84,8 +84,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -108,9 +108,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -138,7 +138,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -159,7 +159,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -240,7 +240,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -350,7 +350,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -408,8 +408,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -617,6 +617,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -657,8 +689,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -677,8 +709,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -742,8 +774,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -766,8 +798,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -783,8 +815,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -797,8 +829,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -825,9 +857,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -854,8 +886,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -870,8 +902,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -881,8 +913,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

98
build_system/charts/open-appsec-kong/ci/__snapshots__/default-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -137,7 +137,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -158,7 +158,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -241,7 +241,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -353,7 +353,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -410,8 +410,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -619,6 +619,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -658,8 +690,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -677,8 +709,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -741,8 +773,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -764,8 +796,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -780,8 +812,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -793,8 +825,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -820,9 +852,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -848,8 +880,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -863,8 +895,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -873,8 +905,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

102
build_system/charts/open-appsec-kong/ci/__snapshots__/kong-ingress-1-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -135,7 +135,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -156,7 +156,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -237,7 +237,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -347,7 +347,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -404,8 +404,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -430,8 +430,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -639,6 +639,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -678,8 +710,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -697,8 +729,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -761,8 +793,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -784,8 +816,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -800,8 +832,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -822,8 +854,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -849,9 +881,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -877,8 +909,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -892,8 +924,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -902,8 +934,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

102
build_system/charts/open-appsec-kong/ci/__snapshots__/kong-ingress-2-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -135,7 +135,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -156,7 +156,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -237,7 +237,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -347,7 +347,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -404,8 +404,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -432,8 +432,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -641,6 +641,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -680,8 +712,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -699,8 +731,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -763,8 +795,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -786,8 +818,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -802,8 +834,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -824,8 +856,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -851,9 +883,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -879,8 +911,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -894,8 +926,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -904,8 +936,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

102
build_system/charts/open-appsec-kong/ci/__snapshots__/kong-ingress-3-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -135,7 +135,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -156,7 +156,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -237,7 +237,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -347,7 +347,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -404,8 +404,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -428,8 +428,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -637,6 +637,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -676,8 +708,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -695,8 +727,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -759,8 +791,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -782,8 +814,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -798,8 +830,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -811,8 +843,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -838,9 +870,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -866,8 +898,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -881,8 +913,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -891,8 +923,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

102
build_system/charts/open-appsec-kong/ci/__snapshots__/kong-ingress-4-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -135,7 +135,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -156,7 +156,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -237,7 +237,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -347,7 +347,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -404,8 +404,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -463,8 +463,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -672,6 +672,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -711,8 +743,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -730,8 +762,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -794,8 +826,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -817,8 +849,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -833,8 +865,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -864,8 +896,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -891,9 +923,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -919,8 +951,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -934,8 +966,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -944,8 +976,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

64
build_system/charts/open-appsec-kong/ci/__snapshots__/kong-ingress-5-3.1-rbac-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -158,7 +158,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -241,7 +241,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -353,7 +353,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -410,8 +410,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -690,8 +690,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -709,8 +709,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -773,8 +773,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -796,8 +796,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -812,8 +812,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -825,8 +825,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -852,9 +852,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -880,8 +880,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -895,8 +895,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -905,8 +905,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

908
build_system/charts/open-appsec-kong/ci/__snapshots__/proxy-appprotocol-values.snap Normal file
View File

@ -0,0 +1,908 @@
[proxy-appprotocol-values]
SnapShot = """
- object:
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingWebhookConfiguration
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations
namespace: default
webhooks:
- admissionReviewVersions:
- v1beta1
clientConfig:
caBundle: '###DYNAMIC_FIELD###'
service:
name: chartsnap-kong-validation-webhook
namespace: default
failurePolicy: Ignore
name: validations.kong.konghq.com
objectSelector:
matchExpressions:
- key: owner
operator: NotIn
values:
- helm
rules:
- apiGroups:
- configuration.konghq.com
apiVersions:
- '*'
operations:
- CREATE
- UPDATE
resources:
- kongconsumers
- kongplugins
- kongclusterplugins
- kongingresses
- apiGroups:
- \"\"
apiVersions:
- v1
operations:
- CREATE
- UPDATE
resources:
- secrets
- services
- apiGroups:
- networking.k8s.io
apiVersions:
- v1
operations:
- CREATE
- UPDATE
resources:
- ingresses
- apiGroups:
- gateway.networking.k8s.io
apiVersions:
- v1alpha2
- v1beta1
- v1
operations:
- CREATE
- UPDATE
resources:
- gateways
- httproutes
sideEffects: None
- object:
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app.kubernetes.io/component: app
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong
namespace: default
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/component: app
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/name: kong
template:
metadata:
annotations:
kuma.io/gateway: enabled
kuma.io/service-account-token-volume: chartsnap-kong-token
traffic.sidecar.istio.io/includeInboundPorts: \"\"
labels:
app: chartsnap-kong
app.kubernetes.io/component: app
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
version: \"3.6\"
spec:
automountServiceAccountToken: false
containers:
- args: null
env:
- name: POD_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
- name: CONTROLLER_ADMISSION_WEBHOOK_LISTEN
value: 0.0.0.0:8080
- name: CONTROLLER_ELECTION_ID
value: kong-ingress-controller-leader-kong
- name: CONTROLLER_INGRESS_CLASS
value: kong
- name: CONTROLLER_KONG_ADMIN_TLS_SKIP_VERIFY
value: \"true\"
- name: CONTROLLER_KONG_ADMIN_URL
value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
name: ingress-controller
ports:
- containerPort: 8080
name: webhook
protocol: TCP
- containerPort: 10255
name: cmetrics
protocol: TCP
- containerPort: 10254
name: cstatus
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /readyz
port: 10254
scheme: HTTP
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
resources: {}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
volumeMounts:
- mountPath: /admission-webhook
name: webhook-cert
readOnly: true
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: chartsnap-kong-token
readOnly: true
- env:
- name: KONG_ADMIN_ACCESS_LOG
value: /dev/stdout
- name: KONG_ADMIN_ERROR_LOG
value: /dev/stderr
- name: KONG_ADMIN_GUI_ACCESS_LOG
value: /dev/stdout
- name: KONG_ADMIN_GUI_ERROR_LOG
value: /dev/stderr
- name: KONG_ADMIN_LISTEN
value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
- name: KONG_CLUSTER_LISTEN
value: \"off\"
- name: KONG_DATABASE
value: \"off\"
- name: KONG_KIC
value: \"on\"
- name: KONG_LUA_PACKAGE_PATH
value: /opt/?.lua;/opt/?/init.lua;;
- name: KONG_NGINX_WORKER_PROCESSES
value: \"2\"
- name: KONG_PORTAL_API_ACCESS_LOG
value: /dev/stdout
- name: KONG_PORTAL_API_ERROR_LOG
value: /dev/stderr
- name: KONG_PORT_MAPS
value: 80:8000, 443:8443
- name: KONG_PREFIX
value: /kong_prefix/
- name: KONG_PROXY_ACCESS_LOG
value: /dev/stdout
- name: KONG_PROXY_ERROR_LOG
value: /dev/stderr
- name: KONG_PROXY_LISTEN
value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
- name: KONG_PROXY_STREAM_ACCESS_LOG
value: /dev/stdout basic
- name: KONG_PROXY_STREAM_ERROR_LOG
value: /dev/stderr
- name: KONG_ROUTER_FLAVOR
value: traditional
- name: KONG_STATUS_ACCESS_LOG
value: \"off\"
- name: KONG_STATUS_ERROR_LOG
value: /dev/stderr
- name: KONG_STATUS_LISTEN
value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN
value: \"off\"
- name: KONG_NGINX_DAEMON
value: \"off\"
image: kong:3.6
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- kong
- quit
- --wait=15
livenessProbe:
failureThreshold: 3
httpGet:
path: /status
port: status
scheme: HTTP
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
name: proxy
ports:
- containerPort: 8000
name: proxy
protocol: TCP
- containerPort: 8443
name: proxy-tls
protocol: TCP
- containerPort: 8100
name: status
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /status/ready
port: status
scheme: HTTP
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 5
resources: {}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
volumeMounts:
- mountPath: /kong_prefix/
name: chartsnap-kong-prefix-dir
- mountPath: /tmp
name: chartsnap-kong-tmp
initContainers:
- command:
- rm
- -vrf
- $KONG_PREFIX/pids
env:
- name: KONG_ADMIN_ACCESS_LOG
value: /dev/stdout
- name: KONG_ADMIN_ERROR_LOG
value: /dev/stderr
- name: KONG_ADMIN_GUI_ACCESS_LOG
value: /dev/stdout
- name: KONG_ADMIN_GUI_ERROR_LOG
value: /dev/stderr
- name: KONG_ADMIN_LISTEN
value: 127.0.0.1:8444 http2 ssl, [::1]:8444 http2 ssl
- name: KONG_CLUSTER_LISTEN
value: \"off\"
- name: KONG_DATABASE
value: \"off\"
- name: KONG_KIC
value: \"on\"
- name: KONG_LUA_PACKAGE_PATH
value: /opt/?.lua;/opt/?/init.lua;;
- name: KONG_NGINX_WORKER_PROCESSES
value: \"2\"
- name: KONG_PORTAL_API_ACCESS_LOG
value: /dev/stdout
- name: KONG_PORTAL_API_ERROR_LOG
value: /dev/stderr
- name: KONG_PORT_MAPS
value: 80:8000, 443:8443
- name: KONG_PREFIX
value: /kong_prefix/
- name: KONG_PROXY_ACCESS_LOG
value: /dev/stdout
- name: KONG_PROXY_ERROR_LOG
value: /dev/stderr
- name: KONG_PROXY_LISTEN
value: 0.0.0.0:8000, [::]:8000, 0.0.0.0:8443 http2 ssl, [::]:8443 http2 ssl
- name: KONG_PROXY_STREAM_ACCESS_LOG
value: /dev/stdout basic
- name: KONG_PROXY_STREAM_ERROR_LOG
value: /dev/stderr
- name: KONG_ROUTER_FLAVOR
value: traditional
- name: KONG_STATUS_ACCESS_LOG
value: \"off\"
- name: KONG_STATUS_ERROR_LOG
value: /dev/stderr
- name: KONG_STATUS_LISTEN
value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN
value: \"off\"
image: kong:3.6
imagePullPolicy: IfNotPresent
name: clear-stale-pid
resources: {}
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
volumeMounts:
- mountPath: /kong_prefix/
name: chartsnap-kong-prefix-dir
- mountPath: /tmp
name: chartsnap-kong-tmp
securityContext: {}
serviceAccountName: chartsnap-kong
terminationGracePeriodSeconds: 30
volumes:
- emptyDir:
sizeLimit: 256Mi
name: chartsnap-kong-prefix-dir
- emptyDir:
sizeLimit: 1Gi
name: chartsnap-kong-tmp
- name: chartsnap-kong-token
projected:
sources:
- serviceAccountToken:
expirationSeconds: 3607
path: token
- configMap:
items:
- key: ca.crt
path: ca.crt
name: kube-root-ca.crt
- downwardAPI:
items:
- fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
path: namespace
- name: webhook-cert
secret:
secretName: chartsnap-kong-validation-webhook-keypair
- object:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong
rules:
- apiGroups:
- configuration.konghq.com
resources:
- kongupstreampolicies
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongupstreampolicies/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongconsumergroups
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongconsumergroups/status
verbs:
- get
- patch
- update
- apiGroups:
- \"\"
resources:
- events
verbs:
- create
- patch
- apiGroups:
- \"\"
resources:
- nodes
verbs:
- list
- watch
- apiGroups:
- \"\"
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- \"\"
resources:
- secrets
verbs:
- list
- watch
- apiGroups:
- \"\"
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- \"\"
resources:
- services/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- ingressclassparameterses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongconsumers
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongconsumers/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongingresses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongingresses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongplugins
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongplugins/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- tcpingresses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- tcpingresses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- udpingresses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- udpingresses/status
verbs:
- get
- patch
- update
- apiGroups:
- extensions
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- extensions
resources:
- ingresses/status
verbs:
- get
- patch
- update
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses/status
verbs:
- get
- patch
- update
- apiGroups:
- discovery.k8s.io
resources:
- endpointslices
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongclusterplugins
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongclusterplugins/status
verbs:
- get
- patch
- update
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
verbs:
- list
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingressclasses
verbs:
- get
- list
- watch
- object:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: chartsnap-kong
subjects:
- kind: ServiceAccount
name: chartsnap-kong
namespace: default
- object:
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong
namespace: default
rules:
- apiGroups:
- \"\"
resources:
- configmaps
- pods
- secrets
- namespaces
verbs:
- get
- apiGroups:
- \"\"
resourceNames:
- kong-ingress-controller-leader-kong-kong
resources:
- configmaps
verbs:
- get
- update
- apiGroups:
- \"\"
resources:
- configmaps
verbs:
- create
- apiGroups:
- \"\"
- coordination.k8s.io
resources:
- configmaps
- leases
verbs:
- get
- list
- watch
- create
- update
- patch
- delete
- apiGroups:
- \"\"
resources:
- events
verbs:
- create
- patch
- apiGroups:
- \"\"
resources:
- services
verbs:
- get
- object:
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong
namespace: default
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: chartsnap-kong
subjects:
- kind: ServiceAccount
name: chartsnap-kong
namespace: default
- object:
apiVersion: v1
data:
tls.crt: '###DYNAMIC_FIELD###'
tls.key: '###DYNAMIC_FIELD###'
kind: Secret
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default
type: kubernetes.io/tls
- object:
apiVersion: v1
data:
tls.crt: '###DYNAMIC_FIELD###'
tls.key: '###DYNAMIC_FIELD###'
kind: Secret
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair
namespace: default
type: kubernetes.io/tls
- object:
apiVersion: v1
kind: Service
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager
namespace: default
spec:
ports:
- name: kong-manager
port: 8002
protocol: TCP
targetPort: 8002
- name: kong-manager-tls
port: 8445
protocol: TCP
targetPort: 8445
selector:
app.kubernetes.io/component: app
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/name: kong
type: NodePort
- object:
apiVersion: v1
kind: Service
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy
namespace: default
spec:
ports:
- appProtocol: http
name: kong-proxy
port: 80
protocol: TCP
targetPort: 8000
- appProtocol: https
name: kong-proxy-tls
port: 443
protocol: TCP
targetPort: 8443
selector:
app.kubernetes.io/component: app
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/name: kong
type: LoadBalancer
- object:
apiVersion: v1
kind: Service
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook
namespace: default
spec:
ports:
- name: webhook
port: 443
protocol: TCP
targetPort: webhook
selector:
app.kubernetes.io/component: app
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
- object:
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.38.0
name: chartsnap-kong
namespace: default
"""

98
build_system/charts/open-appsec-kong/ci/__snapshots__/service-account.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -135,7 +135,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -156,7 +156,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -237,7 +237,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -347,7 +347,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -404,8 +404,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -613,6 +613,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -652,8 +684,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -671,8 +703,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -735,8 +767,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -758,8 +790,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -774,8 +806,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -787,8 +819,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -814,9 +846,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -842,8 +874,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -857,8 +889,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -867,8 +899,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: my-kong-sa name: my-kong-sa
namespace: default namespace: default
""" """

92
build_system/charts/open-appsec-kong/ci/__snapshots__/single-image-default-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -105,9 +105,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -158,7 +158,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -410,8 +410,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -619,6 +619,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -658,8 +690,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -677,8 +709,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -741,8 +773,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -764,8 +796,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -780,8 +812,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -793,8 +825,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -820,9 +852,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -848,8 +880,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -863,8 +895,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -873,8 +905,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

22
build_system/charts/open-appsec-kong/ci/__snapshots__/test-enterprise-version-3.4.0.0-values.snap
View File

@ -9,8 +9,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -32,9 +32,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -249,8 +249,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -276,9 +276,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -304,8 +304,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

106
build_system/charts/open-appsec-kong/ci/__snapshots__/test1-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -104,10 +104,10 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
environment: test environment: test
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -139,7 +139,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -160,7 +160,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -252,7 +252,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -370,7 +370,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -447,8 +447,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -473,8 +473,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -497,8 +497,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -706,6 +706,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -745,8 +777,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -764,8 +796,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -828,8 +860,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -851,8 +883,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -867,8 +899,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -880,8 +912,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -907,9 +939,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -935,8 +967,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -950,8 +982,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
@ -960,8 +992,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

152
build_system/charts/open-appsec-kong/ci/__snapshots__/test2-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -83,8 +83,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -111,9 +111,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -150,7 +150,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -171,7 +171,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -270,7 +270,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -404,7 +404,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -507,7 +507,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-db name: wait-for-db
resources: {} resources: {}
@ -724,8 +724,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-init-migrations name: chartsnap-kong-init-migrations
namespace: default namespace: default
spec: spec:
@ -740,8 +740,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: kong-init-migrations name: kong-init-migrations
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
@ -819,7 +819,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: kong-migrations name: kong-migrations
resources: {} resources: {}
@ -924,7 +924,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-postgres name: wait-for-postgres
resources: {} resources: {}
@ -977,8 +977,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-post-upgrade-migrations name: chartsnap-kong-post-upgrade-migrations
namespace: default namespace: default
spec: spec:
@ -993,8 +993,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: kong-post-upgrade-migrations name: kong-post-upgrade-migrations
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
@ -1072,7 +1072,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: kong-post-upgrade-migrations name: kong-post-upgrade-migrations
resources: {} resources: {}
@ -1177,7 +1177,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-postgres name: wait-for-postgres
resources: {} resources: {}
@ -1232,8 +1232,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-pre-upgrade-migrations name: chartsnap-kong-pre-upgrade-migrations
namespace: default namespace: default
spec: spec:
@ -1248,8 +1248,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: kong-pre-upgrade-migrations name: kong-pre-upgrade-migrations
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
@ -1327,7 +1327,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: kong-upgrade-migrations name: kong-upgrade-migrations
resources: {} resources: {}
@ -1432,7 +1432,7 @@ SnapShot = """
envFrom: envFrom:
- configMapRef: - configMapRef:
name: env-config name: env-config
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-postgres name: wait-for-postgres
resources: {} resources: {}
@ -1481,8 +1481,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -1505,10 +1505,26 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -1548,8 +1564,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -1567,8 +1583,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -1631,8 +1647,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-default name: chartsnap-kong-default
namespace: default namespace: default
rules: rules:
@ -1841,6 +1857,22 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- object: - object:
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
@ -1849,8 +1881,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -1869,8 +1901,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-default name: chartsnap-kong-default
namespace: default namespace: default
roleRef: roleRef:
@ -1895,8 +1927,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-bash-wait-for-postgres name: chartsnap-kong-bash-wait-for-postgres
namespace: default namespace: default
- object: - object:
@ -1917,8 +1949,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -1933,8 +1965,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -1961,8 +1993,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -1988,9 +2020,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -2024,8 +2056,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -2039,8 +2071,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
@ -2099,8 +2131,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

30
build_system/charts/open-appsec-kong/ci/__snapshots__/test3-values.snap
View File

@ -9,8 +9,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -33,9 +33,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -92,7 +92,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -208,7 +208,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -295,8 +295,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-custom-dbless-config name: chartsnap-kong-custom-dbless-config
namespace: default namespace: default
- object: - object:
@ -307,8 +307,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -334,9 +334,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -362,8 +362,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

34
build_system/charts/open-appsec-kong/ci/__snapshots__/test4-values.snap
View File

@ -9,8 +9,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -33,9 +33,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -92,7 +92,7 @@ SnapShot = """
value: 0.0.0.0:9000, [::]:9000, 0.0.0.0:9001 ssl, [::]:9001 ssl value: 0.0.0.0:9000, [::]:9000, 0.0.0.0:9001 ssl, [::]:9001 ssl
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -212,7 +212,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: 0.0.0.0:9000, [::]:9000, 0.0.0.0:9001 ssl, [::]:9001 ssl value: 0.0.0.0:9000, [::]:9000, 0.0.0.0:9001 ssl, [::]:9001 ssl
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -271,8 +271,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -304,8 +304,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-custom-dbless-config name: chartsnap-kong-custom-dbless-config
namespace: default namespace: default
- object: - object:
@ -316,8 +316,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -343,9 +343,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -379,8 +379,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

144
build_system/charts/open-appsec-kong/ci/__snapshots__/test5-values.snap
View File

@ -8,8 +8,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validations name: chartsnap-kong-validations
namespace: default namespace: default
webhooks: webhooks:
@ -82,8 +82,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
spec: spec:
@ -110,9 +110,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
version: \"3.5\" version: \"3.6\"
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
containers: containers:
@ -142,7 +142,7 @@ SnapShot = """
value: https://localhost:8444 value: https://localhost:8444
- name: CONTROLLER_PUBLISH_SERVICE - name: CONTROLLER_PUBLISH_SERVICE
value: default/chartsnap-kong-proxy value: default/chartsnap-kong-proxy
image: kong/kubernetes-ingress-controller:3.0 image: kong/kubernetes-ingress-controller:3.1
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3
@ -163,7 +163,7 @@ SnapShot = """
name: cmetrics name: cmetrics
protocol: TCP protocol: TCP
- containerPort: 10254 - containerPort: 10254
name: status name: cstatus
protocol: TCP protocol: TCP
readinessProbe: readinessProbe:
failureThreshold: 3 failureThreshold: 3
@ -261,7 +261,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
lifecycle: lifecycle:
preStop: preStop:
@ -388,7 +388,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: clear-stale-pid name: clear-stale-pid
resources: {} resources: {}
@ -477,7 +477,7 @@ SnapShot = """
value: 0.0.0.0:8100, [::]:8100 value: 0.0.0.0:8100, [::]:8100
- name: KONG_STREAM_LISTEN - name: KONG_STREAM_LISTEN
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-db name: wait-for-db
resources: {} resources: {}
@ -694,8 +694,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-init-migrations name: chartsnap-kong-init-migrations
namespace: default namespace: default
spec: spec:
@ -710,8 +710,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: kong-init-migrations name: kong-init-migrations
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
@ -788,7 +788,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: kong-migrations name: kong-migrations
resources: {} resources: {}
@ -879,7 +879,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-postgres name: wait-for-postgres
resources: {} resources: {}
@ -932,8 +932,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-post-upgrade-migrations name: chartsnap-kong-post-upgrade-migrations
namespace: default namespace: default
spec: spec:
@ -948,8 +948,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: kong-post-upgrade-migrations name: kong-post-upgrade-migrations
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
@ -1026,7 +1026,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: kong-post-upgrade-migrations name: kong-post-upgrade-migrations
resources: {} resources: {}
@ -1117,7 +1117,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-postgres name: wait-for-postgres
resources: {} resources: {}
@ -1172,8 +1172,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-pre-upgrade-migrations name: chartsnap-kong-pre-upgrade-migrations
namespace: default namespace: default
spec: spec:
@ -1188,8 +1188,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: kong-pre-upgrade-migrations name: kong-pre-upgrade-migrations
spec: spec:
automountServiceAccountToken: false automountServiceAccountToken: false
@ -1266,7 +1266,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: kong-upgrade-migrations name: kong-upgrade-migrations
resources: {} resources: {}
@ -1357,7 +1357,7 @@ SnapShot = """
value: \"off\" value: \"off\"
- name: KONG_NGINX_DAEMON - name: KONG_NGINX_DAEMON
value: \"off\" value: \"off\"
image: kong:3.5 image: kong:3.6
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
name: wait-for-postgres name: wait-for-postgres
resources: {} resources: {}
@ -1406,8 +1406,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -1430,8 +1430,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
rules: rules:
- apiGroups: - apiGroups:
@ -1639,6 +1639,38 @@ SnapShot = """
- get - get
- list - list
- watch - watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- konglicenses/status
verbs:
- get
- patch
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults
verbs:
- get
- list
- watch
- apiGroups:
- configuration.konghq.com
resources:
- kongvaults/status
verbs:
- get
- patch
- update
- apiGroups: - apiGroups:
- configuration.konghq.com - configuration.konghq.com
resources: resources:
@ -1678,8 +1710,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
@ -1697,8 +1729,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
rules: rules:
@ -1761,8 +1793,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
roleRef: roleRef:
@ -1787,8 +1819,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-bash-wait-for-postgres name: chartsnap-kong-bash-wait-for-postgres
namespace: default namespace: default
- object: - object:
@ -1802,8 +1834,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-ca-keypair name: chartsnap-kong-validation-webhook-ca-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -1818,8 +1850,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook-keypair name: chartsnap-kong-validation-webhook-keypair
namespace: default namespace: default
type: kubernetes.io/tls type: kubernetes.io/tls
@ -1846,8 +1878,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-manager name: chartsnap-kong-manager
namespace: default namespace: default
spec: spec:
@ -1873,9 +1905,9 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
enable-metrics: \"true\" enable-metrics: \"true\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-proxy name: chartsnap-kong-proxy
namespace: default namespace: default
spec: spec:
@ -1901,8 +1933,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong-validation-webhook name: chartsnap-kong-validation-webhook
namespace: default namespace: default
spec: spec:
@ -1916,8 +1948,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
- object: - object:
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
@ -1976,8 +2008,8 @@ SnapShot = """
app.kubernetes.io/instance: chartsnap app.kubernetes.io/instance: chartsnap
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: kong app.kubernetes.io/name: kong
app.kubernetes.io/version: \"3.5\" app.kubernetes.io/version: \"3.6\"
helm.sh/chart: kong-2.36.0 helm.sh/chart: kong-2.38.0
name: chartsnap-kong name: chartsnap-kong
namespace: default namespace: default
""" """

7
build_system/charts/open-appsec-kong/ci/proxy-appprotocol-values.yaml Normal file
View File

@ -0,0 +1,7 @@
# This values test that the `proxy.*.appProtocol` can be set to a custom value.
proxy:
http:
appProtocol: "http"
tls:
appProtocol: "https"

1950
build_system/charts/open-appsec-kong/crds/custom-resource-definitions.yaml
View File

File diff suppressed because it is too large Load Diff

8
build_system/charts/open-appsec-kong/templates/_helpers.tpl
View File

@ -213,6 +213,9 @@ spec:
- name: kong-{{ .serviceName }} - name: kong-{{ .serviceName }}
port: {{ .http.servicePort }} port: {{ .http.servicePort }}
targetPort: {{ .http.containerPort }} targetPort: {{ .http.containerPort }}
{{- if .http.appProtocol }}
appProtocol: {{ .http.appProtocol }}
{{- end }}
{{- if (and (or (eq .type "LoadBalancer") (eq .type "NodePort")) (not (empty .http.nodePort))) }} {{- if (and (or (eq .type "LoadBalancer") (eq .type "NodePort")) (not (empty .http.nodePort))) }}
nodePort: {{ .http.nodePort }} nodePort: {{ .http.nodePort }}
{{- end }} {{- end }}
@ -223,6 +226,9 @@ spec:
- name: kong-{{ .serviceName }}-tls - name: kong-{{ .serviceName }}-tls
port: {{ .tls.servicePort }} port: {{ .tls.servicePort }}
targetPort: {{ .tls.overrideServiceTargetPort | default .tls.containerPort }} targetPort: {{ .tls.overrideServiceTargetPort | default .tls.containerPort }}
{{- if .tls.appProtocol }}
appProtocol: {{ .tls.appProtocol }}
{{- end }}
{{- if (and (or (eq .type "LoadBalancer") (eq .type "NodePort")) (not (empty .tls.nodePort))) }} {{- if (and (or (eq .type "LoadBalancer") (eq .type "NodePort")) (not (empty .tls.nodePort))) }}
nodePort: {{ .tls.nodePort }} nodePort: {{ .tls.nodePort }}
{{- end }} {{- end }}
@ -890,7 +896,7 @@ The name of the Service which will be used by the controller to update the Ingre
containerPort: 10255 containerPort: 10255
protocol: TCP protocol: TCP
{{- end }} {{- end }}
- name: status - name: cstatus
containerPort: 10254 containerPort: 10254
protocol: TCP protocol: TCP
env: env:

2
build_system/charts/open-appsec-kong/templates/default-policy.yaml
View File

@ -34,7 +34,7 @@ spec:
http-headers: false http-headers: false
request-body: false request-body: false
log-destination: log-destination:
cloud: false cloud: true
stdout: stdout:
format: json-formatted format: json-formatted
--- ---

12
build_system/charts/open-appsec-kong/values.yaml
View File

@ -130,7 +130,7 @@ extraLabels: {}
# Specify Kong's Docker image and repository details here # Specify Kong's Docker image and repository details here
image: image:
repository: kong repository: kong
tag: "3.5" tag: "3.6"
# Kong Enterprise # Kong Enterprise
# repository: kong/kong-gateway # repository: kong/kong-gateway
# tag: "3.5" # tag: "3.5"
@ -317,6 +317,10 @@ proxy:
parameters: parameters:
- http2 - http2
# Specify the Service's TLS port's appProtocol. This can be useful when integrating with
# external load balancers that require the `appProtocol` field to be set (e.g. GCP).
appProtocol: ""
# Define stream (TCP) listen # Define stream (TCP) listen
# To enable, remove "[]", uncomment the section below, and select your desired # To enable, remove "[]", uncomment the section below, and select your desired
# ports and parameters. Listens are dynamically named after their containerPort, # ports and parameters. Listens are dynamically named after their containerPort,
@ -525,7 +529,7 @@ ingressController:
enabled: true enabled: true
image: image:
repository: kong/kubernetes-ingress-controller repository: kong/kubernetes-ingress-controller
tag: "3.0" tag: "3.1"
# Optionally set a semantic version for version-gated features. This can normally # Optionally set a semantic version for version-gated features. This can normally
# be left unset. You only need to set this if your tag is not a semver string, # be left unset. You only need to set this if your tag is not a semver string,
# such as when you are using a "next" tag. Set this to the effective semantic # such as when you are using a "next" tag. Set this to the effective semantic
@ -1255,7 +1259,7 @@ appsec:
#registry: #registry:
repository: ghcr.io/openappsec repository: ghcr.io/openappsec
image: "agent" image: "agent"
tag: "1.1.6" tag: "1.1.8"
pullPolicy: Always pullPolicy: Always
securityContext: securityContext:
@ -1269,7 +1273,7 @@ appsec:
kong: kong:
image: image:
repository: "ghcr.io/openappsec/kong-attachment" repository: "ghcr.io/openappsec/kong-attachment"
tag: "1.1.6" tag: "1.1.8"
configMapName: appsec-settings-configmap configMapName: appsec-settings-configmap
configMapContent: configMapContent:
crowdsec: crowdsec: