Commit Graph

138 Commits

Author SHA1 Message Date
Mayra Cabrera 1e4d615000 Add RoleBinding methods
Includes RoleBinding methods to Kubeclient and introduce a new lib class
to generate RoleBinding resources.

This MR is part of
https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/22011
2018-10-22 17:16:14 -05:00
Thong Kuah f6ff32d9bd Port Helm::Api EE extensions to CE
We will need these utility level code in the future to help upgrade all
helm applications.
2018-10-01 11:16:07 +13:00
Thong Kuah e6fd3f1986 Port UpgradeCommand to CE
This is a utility class that we will need in the future to update and
upgrade our managed helm applications, which we do plan to do in CE.
2018-09-27 18:15:04 +12:00
Thong Kuah a02e35308b Always create `gitlab` service account and service account token regardless of ABAC/RBAC
This also solves the async nature of the automatic creation of default
service tokens for service accounts. It also makes explicit which
service account token we always use.

create cluster role binding only if the provider has legacy_abac
disabled.
2018-09-14 16:26:51 +12:00
Thong Kuah 8c8ccd3167 Teach GitLab how to create Secret of type ServiceAccountToken
Add create_secret to KubeClient
2018-09-14 16:26:51 +12:00
Thong Kuah 6f2ad2b604 Enable Kubernetes RBAC for GitLab Managed Apps for existing clusters 2018-09-06 10:03:38 +00:00
Mayra Cabrera fc13409637 Resolve "Mutual SSL Auth For Helm TIller" 2018-08-07 12:39:38 +00:00
Thong Kuah 05c7c7e0ef Update Helm Tiller used by gitlab-managed-apps to 2.7.2 2018-08-02 13:19:20 +12:00
Mayra Cabrera b21730116e Revert "Merge branch '48098-mutual-auth-cluster-applications' into 'master'"
This reverts merge request !20801
2018-07-31 13:15:18 +00:00
Dylan Griffith 8f41c85760 Minor style improvements for Helm code 2018-07-30 13:08:33 +00:00
Dylan Griffith c6e459d2b5 Use guard clause in Helm::InstallCommand 2018-07-30 13:08:33 +00:00
Dylan Griffith b169ec7fd3 Expand ca -> certificate_authority in Helm::Certificate 2018-07-30 13:08:32 +00:00
Dylan Griffith c7360d13be Combine attr_reader in InstallCommand to one line 2018-07-30 13:08:32 +00:00
Dylan Griffith ca35eb47b7 Minor refactoring of InitCommand and InstallCommand 2018-07-30 13:08:32 +00:00
Dylan Griffith f6ae53bbfc Reduce duplication in code in Gitlab::Kubernetes::Helm::Certificate 2018-07-30 13:08:31 +00:00
Dylan Griffith cb21560b91 Ensure CA + Tiller cert never expire and Helm client cert expires quickly 2018-07-30 13:08:31 +00:00
Dylan Griffith 11edbcccef Get mutual SSL working with helm tiller 2018-07-30 13:08:30 +00:00
Dylan Griffith ce897f11a0 Refactor Cluster Application classes to pass through a has of config files
This is refactoring in the lead up to passing mutual TLS certs for helm applications. As such we expect all applications to need config files so we can remove the logic about which applications need and do not need this (ie `#config_map?`).
2018-07-28 09:50:31 +00:00
Tiago Botelho f7abde937d Move kubeclient and namespace variables to the private interface 2018-07-25 09:39:39 +01:00
Tiago Botelho eb7c08c7a6 Backports relevant changes made in https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/5163 to CE 2018-07-25 09:39:39 +01:00
Mayra Cabrera 8cc2c08aa7 Include wget in apk add command
Closes #48978
2018-07-08 10:27:49 -05:00
Mayra Cabrera 5841e92390 Resolve "Unable to install Prometheus on Clusters: 'Error: Chart incompatible with Tiller v2.7.0'" 2018-06-20 12:10:14 +00:00
Alessio Caiazza ce5723c849
Add alpine mirrors while operating on k8s cluster 2018-04-30 15:12:26 +02:00
Pirate Praveen 53e2987ba6 Replace KubeException with Kubeclient::HttpError (kubeclient 3.0) 2018-03-15 08:14:13 +01:00
Mayra Cabrera c607008ee5 Extend Cluster Applications to install GitLab Runner to Kubernetes cluster 2018-03-01 23:46:02 +00:00
Joshua Lambert 1f912880db Enable Prometheus metrics for deployed Ingresses 2018-02-05 12:46:31 +00:00
Mayra Cabrera 1827f398ad Resolve "Managed Prometheus deployment installs a lot of extra stuff" 2018-01-15 16:27:58 +00:00
🙈 jacopo beschi 🙉 729f05f0e3 Adds Rubocop rule for line break around conditionals 2018-01-11 16:34:01 +00:00
Stan Hu b762430795 Fix namespace ambiguity with Kubernetes Pod definitions
This was causing a spec failure between Gitlab::Kubernetes::Helm::Pod and
Gitlab::Kubernetes::Helm::Api::Pod if one spec loaded the former
definition first.

Closes #41458
2017-12-24 13:43:46 -08:00
Mayra Cabrera 0d4548026f Extend Cluster Applications to allow installation of Prometheus 2017-12-22 17:23:43 +00:00
Rémy Coutable 97552d46fe
Ensure `Namespace`'s is namespaced in `Gitlab::Kubernetes::Helm#initialize` and fix a transient failing spec due to that
Signed-off-by: Rémy Coutable <remy@rymai.me>
2017-12-01 15:55:06 +01:00
Jacopo 181cd299f9 Adds Rubocop rule for line break after guard clause
Adds a rubocop rule (with autocorrect) to ensure line break after guard clauses.
2017-11-16 17:58:29 +01:00
Alessio Caiazza 1471495e15 Review Gitlab::Kubernetes::Namespace 2017-11-07 17:51:30 +01:00
Alessio Caiazza 8ec618a6ed Add Helm InstallCommand 2017-11-07 17:12:41 +01:00
Alessio Caiazza 3f261a499e Add k8s namespace implementation and tests 2017-11-07 14:05:58 +01:00
Alessio Caiazza 44f885eff6
Fix typo 2017-11-03 12:23:08 +01:00
Alessio Caiazza 08752e5d74 Remove `Clusters::Applications::FetchInstallationStatusService` 2017-11-03 10:57:09 +01:00
Alessio Caiazza 31c256c154
General cleanup 2017-11-02 17:01:21 +01:00