feat: create and automate the overwhelm helmchart and add events (#12)

* feat: create and automate the overwhelm helmchart and add events * fix: reverting makefile command to use go get Co-authored-by: Sangeetha Madamanchi <[email protected]>
ExpediaGroup · Aug 1, 2022 · de80791 · de80791
1 parent 9ba5cd8
commit de80791
Show file tree

Hide file tree

Showing 25 changed files with 1,071 additions and 12 deletions.
diff --git a/.charts/overwhelm/Chart.yaml b/.charts/overwhelm/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v2
+name: overwhelm
+version: 0.0.3
+maintainers:
+    - name: "Expedia Group"
+      url: "https://github.com/ExpediaGroup/overwhelm"
diff --git a/.charts/overwhelm/templates/applications.core.expediagroup.com-crd.yaml b/.charts/overwhelm/templates/applications.core.expediagroup.com-crd.yaml
diff --git a/.charts/overwhelm/templates/overwhelm-controller-manager-deployment.yaml b/.charts/overwhelm/templates/overwhelm-controller-manager-deployment.yaml
@@ -0,0 +1,66 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    control-plane: controller-manager
+  name: overwhelm-controller-manager
+  namespace: overwhelm-system
+spec:
+  replicas: {{ .Values.overwhelm.deployment.replicas }}
+  selector:
+    matchLabels:
+      control-plane: controller-manager
+  template:
+    metadata:
+      annotations: 
+{{ toYaml .Values.overwhelm.deployment.annotations  | indent 8 }}
+      labels: 
+{{ toYaml .Values.overwhelm.deployment.labels  | indent 8 }}
+    spec:
+      containers:
+      - args:
+        - --health-probe-bind-address=:8081
+        - --metrics-bind-address=127.0.0.1:8080
+        - --leader-elect
+        command:
+        - /manager
+        image: {{ .Values.overwhelm.deployment.image.manager.name }}:{{ .Values.overwhelm.deployment.image.manager.tag }}
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: 8081
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        name: manager
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: 8081
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        resources: 
+{{ toYaml .Values.overwhelm.deployment.resources  | indent 10 }}
+        securityContext:
+          allowPrivilegeEscalation: false
+      - args:
+        - --secure-listen-address=0.0.0.0:8443
+        - --upstream=http://127.0.0.1:8080/
+        - --logtostderr=true
+        - --v=0
+        image: {{ .Values.overwhelm.deployment.image.kubeRbacProxy.name }}:{{ .Values.overwhelm.deployment.image.kubeRbacProxy.tag }}
+        name: kube-rbac-proxy
+        ports:
+        - containerPort: 8443
+          name: https
+          protocol: TCP
+        resources:
+          limits:
+            cpu: 500m
+            memory: 128Mi
+          requests:
+            cpu: 5m
+            memory: 64Mi
+      securityContext:
+        runAsNonRoot: true
+      serviceAccountName: overwhelm-controller-manager
+      terminationGracePeriodSeconds: 10
diff --git a/.charts/overwhelm/templates/overwhelm-controller-manager-metrics-service-svc.yaml b/.charts/overwhelm/templates/overwhelm-controller-manager-metrics-service-svc.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    control-plane: controller-manager
+  name: overwhelm-controller-manager-metrics-service
+  namespace: overwhelm-system
+spec:
+  ports:
+  - name: https
+    port: 8443
+    protocol: TCP
+    targetPort: https
+  selector:
+    control-plane: controller-manager
diff --git a/.charts/overwhelm/templates/overwhelm-controller-manager-sa.yaml b/.charts/overwhelm/templates/overwhelm-controller-manager-sa.yaml
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: overwhelm-controller-manager
+  namespace: overwhelm-system
diff --git a/.charts/overwhelm/templates/overwhelm-leader-election-role-role.yaml b/.charts/overwhelm/templates/overwhelm-leader-election-role-role.yaml
@@ -0,0 +1,37 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: overwhelm-leader-election-role
+  namespace: overwhelm-system
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
diff --git a/.charts/overwhelm/templates/overwhelm-leader-election-rolebinding-rb.yaml b/.charts/overwhelm/templates/overwhelm-leader-election-rolebinding-rb.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: overwhelm-leader-election-rolebinding
+  namespace: overwhelm-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: overwhelm-leader-election-role
+subjects:
+- kind: ServiceAccount
+  name: overwhelm-controller-manager
+  namespace: overwhelm-system
diff --git a/.charts/overwhelm/templates/overwhelm-manager-config-cm.yaml b/.charts/overwhelm/templates/overwhelm-manager-config-cm.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+data:
+  controller_manager_config.yaml: |
+    apiVersion: controller-runtime.sigs.k8s.io/v1alpha1
+    kind: ControllerManagerConfig
+    health:
+      healthProbeBindAddress: :8081
+    metrics:
+      bindAddress: 127.0.0.1:8080
+    webhook:
+      port: 9443
+    leaderElection:
+      leaderElect: true
+      resourceName: e04e01ad.expediagroup.com
+kind: ConfigMap
+metadata:
+  name: overwhelm-manager-config
+  namespace: overwhelm-system
diff --git a/.charts/overwhelm/templates/overwhelm-manager-role-cr.yaml b/.charts/overwhelm/templates/overwhelm-manager-role-cr.yaml
@@ -0,0 +1,64 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  creationTimestamp: null
+  name: overwhelm-manager-role
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - core.expediagroup.com
+  resources:
+  - applications
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - core.expediagroup.com
+  resources:
+  - applications/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - core.expediagroup.com
+  resources:
+  - applications/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - helm.toolkit.fluxcd.io
+  resources:
+  - helmreleases
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - helm.toolkit.fluxcd.io
+  resources:
+  - helmreleases/status
+  verbs:
+  - get
+  - patch
+  - update
diff --git a/.charts/overwhelm/templates/overwhelm-manager-rolebinding-crb.yaml b/.charts/overwhelm/templates/overwhelm-manager-rolebinding-crb.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: overwhelm-manager-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: overwhelm-manager-role
+subjects:
+- kind: ServiceAccount
+  name: overwhelm-controller-manager
+  namespace: overwhelm-system
diff --git a/.charts/overwhelm/templates/overwhelm-metrics-reader-cr.yaml b/.charts/overwhelm/templates/overwhelm-metrics-reader-cr.yaml
@@ -0,0 +1,9 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: overwhelm-metrics-reader
+rules:
+- nonResourceURLs:
+  - /metrics
+  verbs:
+  - get
diff --git a/.charts/overwhelm/templates/overwhelm-proxy-role-cr.yaml b/.charts/overwhelm/templates/overwhelm-proxy-role-cr.yaml
@@ -0,0 +1,17 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: overwhelm-proxy-role
+rules:
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
diff --git a/.charts/overwhelm/templates/overwhelm-proxy-rolebinding-crb.yaml b/.charts/overwhelm/templates/overwhelm-proxy-rolebinding-crb.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: overwhelm-proxy-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: overwhelm-proxy-role
+subjects:
+- kind: ServiceAccount
+  name: overwhelm-controller-manager
+  namespace: overwhelm-system
diff --git a/.charts/overwhelm/templates/overwhelm-system-namespace.yaml b/.charts/overwhelm/templates/overwhelm-system-namespace.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    control-plane: controller-manager
+  name: overwhelm-system
diff --git a/.charts/overwhelm/values.yaml b/.charts/overwhelm/values.yaml
@@ -0,0 +1,21 @@
+---
+overwhelm:
+  deployment:
+    image:
+      manager:
+        name: ghcr.io/expediagroup/overwhelm
+        tag: latest
+      kubeRbacProxy:
+        name: gcr.io/kubebuilder/kube-rbac-proxy
+        tag: v0.8.0
+    labels:
+      control-plane: controller-manager
+    replicas: 2
+    resources:
+      limits:
+        cpu: 1024m
+        memory: 1Gi
+      requests:
+        cpu: 128m
+        memory: 64Mi
+
diff --git a/.github/workflows/helm-chart-releaser.yaml b/.github/workflows/helm-chart-releaser.yaml
@@ -0,0 +1,32 @@
+name: Release Charts
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+
+      - name: Configure Git
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "[email protected]"
+
+      - name: Install Helm
+        uses: azure/setup-helm@v1
+        with:
+          version: v3.8.1
+
+      - name: Run chart-releaser
+        uses: helm/[email protected]
+        with:
+          charts_dir: .charts
+        env:
+          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"