testing helm linter 25

.gitignore

@@ -1,4 +1,3 @@
-
 # Binaries for programs and plugins
 *.exe
 *.exe~

charts/adcs-issuer/templates/deployment.yaml

@@ -51,6 +51,11 @@ spec:
         {{- toYaml .Values.controllerManager.tolerations | nindent 8 }}
       {{- end }}
 
+      {{- if  .Values.podPriorityClass.enabled }}
+      priorityClassName: {{ .Values.podPriorityClass.name | quote | default "" }}
+
+      {{- end }}
+
       containers:
         - name: manager
           image: {{ .Values.controllerManager.manager.image.repository }}:{{ .Values.controllerManager.manager.image.tag | default .Chart.AppVersion }}

charts/adcs-issuer/templates/openshift-rbac.yaml

@@ -0,0 +1,16 @@
+{{- if and .Values.openshift.enabled .Values.openshift.anyuid }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: scc-anyuid
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:openshift:scc:anyuid
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.controllerManager.rbac.serviceAccountName | default (include "chart.fullname" .) }}
+    namespace: {{ .Release.Namespace }}
+
+{{- end  }} 

charts/adcs-issuer/templates/pdb.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.controllerManager.podDisruptionBudget.enabled }}
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: {{ include "chart.fullname" . }}-controller-manager
+  namespace: {{ .Release.Name }}
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      {{- include "chart.selectorLabels" . | nindent 8 }}
+
+{{- end }}       

charts/adcs-issuer/templates/podpriorityclass.yaml

@@ -0,0 +1,12 @@
+{{- if .Values.podPriorityClass.enabled }}
+
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: {{ .Values.podPriorityClass.name }}
+value: {{ .Values.podPriorityClass.value }}
+globalDefault: false
+preemptionPolicy: PreemptLowerPriority
+description: "Priority class for adcs-issuer applications."
+
+{{- end }}

charts/adcs-issuer/values.yaml

@@ -7,9 +7,22 @@ cert-manager:
 crd:
   install: true
 
+openshift:
+  enabled: false # to use permission SCC on Openshift
+  anyuid: true # add permission for anyuid SCC on Openshift
+
+
 # @section ADCS Issuer Controller Manager
 controllerManager:
 
+  networkPolicy:
+    enabled: false
+
+  podDisruptionBudget:
+    enabled: false
+
+
+
   # @section Image
   # Image settings for the ADCS Issuer manager.
   manager:
@@ -58,7 +71,7 @@ controllerManager:
 
   # @section Replicas
   # Number of replicas for the controller manager deployment.
-  replicas: 1
+  replicas: 2
 
   # @section Environment Variables
   # Environment variables for the controller manager.
@@ -140,6 +153,11 @@ webhookService:
 # Node selector configuration for the controller manager pods.
 nodeSelector: {}
 
+podPriorityClass:
+  enabled: false
+  name: adcs-issuer 
+  value: 1000  
+
 # @section ADCS Simulator
 # Configuration for the ADCS Simulator.
 simulator: