{{- define "addons-values" }} clusterBackup: enabled: {{ ternary "true" "false" (or (hasKey .Values.global "aws") .Values.addons.clusterBackup.enabled) }} {{- with omit .Values.addons.clusterBackup "enabled" }} {{- toYaml . | nindent 2 }} {{- end }} {{- if .Values.global.aws }} # AWS extraEnv: - name: AWS_DEFAULT_REGION value: {{ .Values.global.aws.region }} {{- end }} forseti: enabled: {{ ternary "true" "false" (or (hasKey .Values.global "aws") .Values.addons.forseti.enabled) }} {{- with omit .Values.addons.forseti "enabled" }} {{- toYaml . | nindent 2 }} {{- end }} {{- if .Values.global.aws }} # AWS aws: region: {{ $.Values.global.aws.region }} iamRoleArn: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.kubezeroForseti" {{- end }} aws-node-termination-handler: enabled: {{ ternary "true" "false" (or (hasKey .Values.global "aws") (index .Values "addons" "aws-node-termination-handler" "enabled")) }} {{- with omit (index .Values "addons" "aws-node-termination-handler") "enabled" }} {{- toYaml . | nindent 2 }} {{- end }} {{- with .Values.metrics }} enablePrometheusServer: {{ .enabled }} {{- end }} {{- if .Values.global.aws }} # AWS queueURL: "https://sqs.{{ .Values.global.aws.region }}.amazonaws.com/{{ .Values.global.aws.accountId }}/{{ .Values.global.clusterName }}_Nth" managedAsgTag: "aws-node-termination-handler/{{ .Values.global.clusterName }}" extraEnv: - name: AWS_ROLE_ARN value: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.awsNth" - name: AWS_WEB_IDENTITY_TOKEN_FILE value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token" - name: AWS_STS_REGIONAL_ENDPOINTS value: "regional" - name: METADATA_TRIES value: "0" {{- end }} external-dns: enabled: {{ ternary "true" "false" (or (hasKey .Values.global "aws") (index .Values "addons" "external-dns" "enabled")) }} {{- with omit (index .Values "addons" "external-dns") "enabled" }} {{- toYaml . | nindent 2 }} {{- end }} {{- if .Values.global.aws }} # AWS txtOwnerId: {{ .Values.global.clusterName }} provider: aws extraArgs: - "--aws-zone-type=public" - "--aws-zones-cache-duration=1h" env: - name: AWS_ROLE_ARN value: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.externalDNS" - name: AWS_WEB_IDENTITY_TOKEN_FILE value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token" - name: AWS_STS_REGIONAL_ENDPOINTS value: "regional" - name: METADATA_TRIES value: "0" {{- end }} cluster-autoscaler: enabled: {{ default "false" (index .Values "addons" "cluster-autoscaler" "enabled") }} {{- with omit (index .Values "addons" "cluster-autoscaler") "enabled" }} {{- toYaml . | nindent 2 }} {{- end }} autoDiscovery: clusterName: {{ .Values.global.clusterName }} {{- with .Values.metrics }} serviceMonitor: enabled: {{ .enabled }} prometheusRule: enabled: {{ .enabled }} {{- end }} {{- if .Values.global.aws }} # AWS awsRegion: {{ .Values.global.aws.region }} extraEnv: AWS_ROLE_ARN: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.clusterAutoScaler" AWS_WEB_IDENTITY_TOKEN_FILE: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token" AWS_STS_REGIONAL_ENDPOINTS: "regional" extraVolumes: - name: aws-token projected: sources: - serviceAccountToken: path: token expirationSeconds: 86400 audience: "sts.amazonaws.com" extraVolumeMounts: - name: aws-token mountPath: "/var/run/secrets/sts.amazonaws.com/serviceaccount/" readOnly: true {{- end }} {{- with .Values.addons.fuseDevicePlugin }} fuseDevicePlugin: {{- toYaml . | nindent 2 }} {{- end }} {{- with .Values.addons.awsNeuron }} awsNeuron: {{- toYaml . | nindent 2 }} {{- end }} {{- with index .Values "addons" "nvidia-device-plugin" }} nvidia-device-plugin: {{- toYaml . | nindent 2 }} {{- end }} {{- end }} {{- define "addons-argo" }} {{- end }} {{ include "kubezero-app.app" . }}