redis-cluster

README.md

@@ -10,7 +10,7 @@ helm upgrade --install mysql ./mysql -f example/mysql-values.yaml
 
 ```
 
-helm upgrade --install redis ./redis -f example/redis-values.yaml 
+helm upgrade --install redis-cluster ./redis-cluster -f example/redis-values.yaml 
 
 ```
 

redis-cluster/.helmignore

@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj

redis-cluster/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: common
+  repository: oci://registry-1.docker.io/bitnamicharts
+  version: 2.13.3
+digest: sha256:9a971689db0c66ea95ac2e911c05014c2b96c6077c991131ff84f2982f88fb83
+generated: "2023-10-18T11:15:41.399349001Z"

redis/Chart.yaml → redis-cluster/Chart.yaml

@@ -2,14 +2,14 @@ annotations:
   category: Database
   images: |
     - name: os-shell
-      image: docker.io/bitnami/os-shell:11-debian-11-r90
+      image: docker.io/bitnami/os-shell:11-debian-11-r91
     - name: redis-cluster
-      image: docker.io/bitnami/redis-cluster:7.2.1-debian-11-r26
+      image: docker.io/bitnami/redis-cluster:7.2.3-debian-11-r1
     - name: redis-exporter
-      image: docker.io/bitnami/redis-exporter:1.55.0-debian-11-r0
+      image: docker.io/bitnami/redis-exporter:1.55.0-debian-11-r2
   licenses: Apache-2.0
 apiVersion: v2
-appVersion: 7.2.1
+appVersion: 7.2.3
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
@@ -28,7 +28,7 @@ keywords:
 maintainers:
 - name: VMware, Inc.
   url: https://github.com/bitnami/charts
-name: redis
+name: redis-cluster
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/redis-cluster
-version: 1.0.0
+version: 9.1.3

redis/charts/common/Chart.yaml → redis-cluster/charts/common/Chart.yaml

@@ -2,7 +2,7 @@ annotations:
   category: Infrastructure
   licenses: Apache-2.0
 apiVersion: v2
-appVersion: 2.13.2
+appVersion: 2.13.3
 description: A Library Helm Chart for grouping common logic between bitnami charts.
   This chart is not deployable by itself.
 home: https://bitnami.com
@@ -20,4 +20,4 @@ name: common
 sources:
 - https://github.com/bitnami/charts
 type: library
-version: 2.13.2
+version: 2.13.3

redis/charts/common/README.md → redis-cluster/charts/common/README.md

@@ -34,8 +34,8 @@ Looking to use our applications in production? Try [VMware Application Catalog](
 
 ## Prerequisites
 
-- Kubernetes 1.19+
-- Helm 3.2.0+
+- Kubernetes 1.23+
+- Helm 3.8.0+
 
 ## Parameters
 

redis/charts/common/templates/_capabilities.tpl → redis-cluster/charts/common/templates/_capabilities.tpl

@@ -184,7 +184,7 @@ Returns true if PodSecurityPolicy is supported
 {{/*
 Returns true if AdmissionConfiguration is supported
 */}}
-{{- define "common.capabilities.admisionConfiguration.supported" -}}
+{{- define "common.capabilities.admissionConfiguration.supported" -}}
 {{- if semverCompare ">=1.23-0" (include "common.capabilities.kubeVersion" .) -}}
   {{- true -}}
 {{- end -}}
@@ -193,7 +193,7 @@ Returns true if AdmissionConfiguration is supported
 {{/*
 Return the appropriate apiVersion for AdmissionConfiguration.
 */}}
-{{- define "common.capabilities.admisionConfiguration.apiVersion" -}}
+{{- define "common.capabilities.admissionConfiguration.apiVersion" -}}
 {{- if semverCompare "<1.23-0" (include "common.capabilities.kubeVersion" .) -}}
 {{- print "apiserver.config.k8s.io/v1alpha1" -}}
 {{- else if semverCompare "<1.25-0" (include "common.capabilities.kubeVersion" .) -}}

redis/values.yaml → redis-cluster/values.yaml

@@ -62,9 +62,9 @@ diagnosticMode:
 
 ## Bitnami Redis® image version
 ## ref: https://hub.docker.com/r/bitnami/redis/tags/
-## @param image.registry Redis® cluster image registry
-## @param image.repository Redis® cluster image repository
-## @param image.tag Redis® cluster image tag (immutable tags are recommended)
+## @param image.registry [default: REGISTRY_NAME] Redis® cluster image registry
+## @param image.repository [default: REPOSITORY_NAME/redis-cluster] Redis® cluster image repository
+## @skip image.tag Redis® cluster image tag (immutable tags are recommended)
 ## @param image.digest Redis® cluster image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
 ## @param image.pullPolicy Redis® cluster image pull policy
 ## @param image.pullSecrets Specify docker-registry secret names as an array
@@ -73,7 +73,7 @@ diagnosticMode:
 image:
   registry: docker.io
   repository: bitnami/redis-cluster
-  tag: 7.2.1-debian-11-r26
+  tag: 7.2.3-debian-11-r1
   digest: ""
   ## Specify a imagePullPolicy
   ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -143,13 +143,11 @@ rbac:
 ## Redis® pod Security Context
 ## @param podSecurityContext.enabled Enable Redis® pod Security Context
 ## @param podSecurityContext.fsGroup Group ID for the pods
-## @param podSecurityContext.runAsUser User ID for the pods
 ## @param podSecurityContext.sysctls Set namespaced sysctls for the pods
 ##
 podSecurityContext:
   enabled: true
   fsGroup: 1001
-  runAsUser: 1001
   ## Uncomment the setting below to increase the net.core.somaxconn value
   ## e.g:
   ## sysctls:
@@ -168,14 +166,26 @@ minAvailable: ""
 ##
 maxUnavailable: ""
 ## Containers Security Context
-## @param containerSecurityContext.enabled Enable Containers' Security Context
-## @param containerSecurityContext.runAsUser User ID for the containers.
-## @param containerSecurityContext.runAsNonRoot Run container as non root
+## @param containerSecurityContext.enabled Enabled containers' Security Context
+## @param containerSecurityContext.runAsUser Set containers' Security Context runAsUser
+## @param containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
+## @param containerSecurityContext.privileged Set container's Security Context privileged
+## @param containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
+## @param containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
+## @param containerSecurityContext.capabilities.drop List of capabilities to be dropped
+## @param containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
 ##
 containerSecurityContext:
   enabled: true
   runAsUser: 1001
   runAsNonRoot: true
+  privileged: false
+  readOnlyRootFilesystem: false
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop: ["ALL"]
+  seccompProfile:
+    type: "RuntimeDefault"
 ## @param usePassword Use password authentication
 ##
 usePassword: true
@@ -349,17 +359,17 @@ volumePermissions:
   ## @param volumePermissions.enabled Enable init container that changes volume permissions in the registry (for cases where the default k8s `runAsUser` and `fsUser` values do not work)
   ##
   enabled: false
-  ## @param volumePermissions.image.registry Init container volume-permissions image registry
-  ## @param volumePermissions.image.repository Init container volume-permissions image repository
-  ## @param volumePermissions.image.tag Init container volume-permissions image tag
+  ## @param volumePermissions.image.registry [default: REGISTRY_NAME] Init container volume-permissions image registry
+  ## @param volumePermissions.image.repository [default: REPOSITORY_NAME/os-shell] Init container volume-permissions image repository
+  ## @skip volumePermissions.image.tag Init container volume-permissions image tag
   ## @param volumePermissions.image.digest Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
   ## @param volumePermissions.image.pullPolicy Init container volume-permissions image pull policy
   ## @param volumePermissions.image.pullSecrets Specify docker-registry secret names as an array
   ##
   image:
     registry: docker.io
     repository: bitnami/os-shell
-    tag: 11-debian-11-r90
+    tag: 11-debian-11-r91
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
@@ -839,17 +849,17 @@ metrics:
   ## @param metrics.enabled Start a side-car prometheus exporter
   ##
   enabled: false
-  ## @param metrics.image.registry Redis® exporter image registry
-  ## @param metrics.image.repository Redis® exporter image name
-  ## @param metrics.image.tag Redis® exporter image tag
+  ## @param metrics.image.registry [default: REGISTRY_NAME] Redis® exporter image registry
+  ## @param metrics.image.repository [default: REPOSITORY_NAME/redis-exporter] Redis® exporter image name
+  ## @skip metrics.image.tag Redis® exporter image tag
   ## @param metrics.image.digest Redis® exporter image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
   ## @param metrics.image.pullPolicy Redis® exporter image pull policy
   ## @param metrics.image.pullSecrets Specify docker-registry secret names as an array
   ##
   image:
     registry: docker.io
     repository: bitnami/redis-exporter
-    tag: 1.55.0-debian-11-r0
+    tag: 1.55.0-debian-11-r2
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
@@ -1009,16 +1019,16 @@ sysctlImage:
   ## @param sysctlImage.command sysctlImage command to execute
   ##
   command: []
-  ## @param sysctlImage.registry sysctlImage Init container registry
-  ## @param sysctlImage.repository sysctlImage Init container repository
-  ## @param sysctlImage.tag sysctlImage Init container tag
+  ## @param sysctlImage.registry [default: REGISTRY_NAME] sysctlImage Init container registry
+  ## @param sysctlImage.repository [default: REPOSITORY_NAME/os-shell] sysctlImage Init container repository
+  ## @skip sysctlImage.tag sysctlImage Init container tag
   ## @param sysctlImage.digest sysctlImage Init container digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
   ## @param sysctlImage.pullPolicy sysctlImage Init container pull policy
   ## @param sysctlImage.pullSecrets Specify docker-registry secret names as an array
   ##
   registry: docker.io
   repository: bitnami/os-shell
-  tag: 11-debian-11-r90
+  tag: 11-debian-11-r91
   digest: ""
   pullPolicy: IfNotPresent
   ## Optionally specify an array of imagePullSecrets.