Move to tiller 2.14.0

This version fixes manifest validation [0], so a couple invalid manifests are fixed in this patchset as well. [0]: 32d7f1a3fc Change-Id: I0cbdf21cf016271bef2d8a541687ce3ab28081ce
2019-05-17 13:54:19 -05:00 · 2019-05-17 13:54:19 -05:00 · 184d114062
commit 184d114062
parent 8c9be2b5b1
18 changed files with 18 additions and 23 deletions
--- a/charts/apiserver/templates/job-key-rotate.yaml
+++ b/charts/apiserver/templates/job-key-rotate.yaml
@ -73,7 +73,6 @@ metadata:
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
-  namespace: {{ $envAll.Release.Namespace }}
  name: {{ $serviceAccountName }}-{{ $envAll.Release.Namespace }}
 subjects:
  - kind: ServiceAccount
--- a/charts/haproxy/templates/daemonset.yaml
+++ b/charts/haproxy/templates/daemonset.yaml
@ -77,8 +77,6 @@ spec:
              mountPath: /tmp/etc
            - name: host
              mountPath: /host
-      securityContext:
-        readOnlyRootFilesystem: true
      volumes:
        - name: haproxy-bin
          configMap:
--- a/charts/haproxy/templates/etc/_haproxy.yaml.tpl
+++ b/charts/haproxy/templates/etc/_haproxy.yaml.tpl
@ -93,5 +93,3 @@ spec:
    - name: etc
      hostPath:
        path: {{ .Values.conf.haproxy.host_config_dir }}
-  securityContext:
-    readOnlyRootFilesystem: true
--- a/doc/source/configuration/genesis.rst
+++ b/doc/source/configuration/genesis.rst
@ -39,7 +39,7 @@ Here is a complete sample document:
      images:
        armada: quay.io/airshipit/armada:latest
        helm:
-          tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+          tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
        kubernetes:
          apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
          controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6
--- a/doc/source/configuration/host-system.rst
+++ b/doc/source/configuration/host-system.rst
@ -22,7 +22,7 @@ Sample Document
      images:
        haproxy: haproxy:1.8.3
        helm:
-          helm: lachlanevenson/k8s-helm:v2.13.1
+          helm: lachlanevenson/k8s-helm:v2.14.0
        kubernetes:
          kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
      packages:
--- a/examples/basic/Genesis.yaml
+++ b/examples/basic/Genesis.yaml
@ -45,7 +45,7 @@ data:
  images:
    armada: quay.io/airshipit/armada:master
    helm:
-      tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+      tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
    kubernetes:
      apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
      controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6
--- a/examples/basic/HostSystem.yaml
+++ b/examples/basic/HostSystem.yaml
@ -67,7 +67,7 @@ data:
  images:
    haproxy: haproxy:1.8.3
    helm:
-      helm: lachlanevenson/k8s-helm:v2.13.1
+      helm: lachlanevenson/k8s-helm:v2.14.0
    kubernetes:
      kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
  packages:
--- a/examples/basic/armada-resources.yaml
+++ b/examples/basic/armada-resources.yaml
@ -1152,7 +1152,7 @@ data:
  values:
    images:
      tags:
-        tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+        tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
    labels:
      node_selector_key: ucp-control-plane
      node_selector_value: enabled
--- a/examples/complete/Genesis.yaml
+++ b/examples/complete/Genesis.yaml
@ -31,7 +31,7 @@ data:
  images:
    armada: quay.io/airshipit/armada:master
    helm:
-      tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+      tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
    kubernetes:
      apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
      controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6
--- a/examples/complete/HostSystem.yaml
+++ b/examples/complete/HostSystem.yaml
@ -33,7 +33,7 @@ data:
  images:
    haproxy: haproxy:1.8.3
    helm:
-      helm: lachlanevenson/k8s-helm:v2.13.1
+      helm: lachlanevenson/k8s-helm:v2.14.0
    kubernetes:
      kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
  packages:
--- a/examples/complete/armada-resources.yaml
+++ b/examples/complete/armada-resources.yaml
@ -1687,7 +1687,7 @@ data:
  values:
    images:
      tags:
-        tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+        tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
    labels:
      node_selector_key: ucp-control-plane
      node_selector_value: enabled
--- a/tests/unit/api/test_validatedesign.py
+++ b/tests/unit/api/test_validatedesign.py
@ -103,7 +103,7 @@ VALID_DOCS = [
            'images': {
                'armada': 'quay.io/airshipit/armada:master',
                'helm': {
-                    'tiller': 'gcr.io/kubernetes-helm/tiller:v2.13.1'
+                    'tiller': 'gcr.io/kubernetes-helm/tiller:v2.14.0'
                },
                'kubernetes': {
                    'apiserver':
@ -162,7 +162,7 @@ VALID_DOCS = [
            'images': {
                'haproxy': 'haproxy:1.8.3',
                'helm': {
-                    'helm': 'lachlanevenson/k8s-helm:v2.13.1'
+                    'helm': 'lachlanevenson/k8s-helm:v2.14.0'
                },
                'kubernetes': {
                    'kubectl':
--- a/tests/unit/builder_data/simple/Genesis.yaml
+++ b/tests/unit/builder_data/simple/Genesis.yaml
@ -32,7 +32,7 @@ data:
  images:
    armada: quay.io/airshipit/armada:master
    helm:
-      tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+      tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
    kubernetes:
      apiserver: gcr.io/google_containers/hyperkube-amd64:v1.11.6
      controller-manager: gcr.io/google_containers/hyperkube-amd64:v1.11.6
--- a/tests/unit/builder_data/simple/HostSystem.yaml
+++ b/tests/unit/builder_data/simple/HostSystem.yaml
@ -37,7 +37,7 @@ data:
  images:
    haproxy: haproxy:1.8.3
    helm:
-      helm: lachlanevenson/k8s-helm:v2.13.1
+      helm: lachlanevenson/k8s-helm:v2.14.0
    kubernetes:
      kubectl: gcr.io/google_containers/hyperkube-amd64:v1.11.6
  packages:
--- a/tests/unit/builder_data/simple/armada-resources.yaml
+++ b/tests/unit/builder_data/simple/armada-resources.yaml
@ -1002,7 +1002,7 @@ data:
  values:
    images:
      tags:
-        tiller: gcr.io/kubernetes-helm/tiller:v2.13.1
+        tiller: gcr.io/kubernetes-helm/tiller:v2.14.0
    labels:
      node_selector_key: ucp-control-plane
      node_selector_value: enabled
--- a/tools/gate/default-config-env
+++ b/tools/gate/default-config-env
@ -7,7 +7,7 @@ IMAGE_COREDNS=coredns/coredns:1.1.3
 IMAGE_DEP_CHECK=quay.io/stackanetes/kubernetes-entrypoint:v0.3.1
 IMAGE_ETCD=quay.io/coreos/etcd:v3.2.18
 IMAGE_HAPROXY=haproxy:1.8.3
-IMAGE_HELM=lachlanevenson/k8s-helm:v2.13.1
+IMAGE_HELM=lachlanevenson/k8s-helm:v2.14.0
 IMAGE_HYPERKUBE=gcr.io/google_containers/hyperkube-amd64:v1.11.6
-IMAGE_TILLER=gcr.io/kubernetes-helm/tiller:v2.13.1
+IMAGE_TILLER=gcr.io/kubernetes-helm/tiller:v2.14.0
 KUBELET_URL=https://dl.k8s.io/v1.11.6/kubernetes-node-linux-amd64.tar.gz
--- a/tools/helm_install.sh
+++ b/tools/helm_install.sh
@ -17,7 +17,7 @@
 set -x

 HELM=$1
-HELM_ARTIFACT_URL=${HELM_ARTIFACT_URL:-"https://storage.googleapis.com/kubernetes-helm/helm-v2.13.1-linux-amd64.tar.gz"}
+HELM_ARTIFACT_URL=${HELM_ARTIFACT_URL:-"https://storage.googleapis.com/kubernetes-helm/helm-v2.14.0-linux-amd64.tar.gz"}


 function install_helm_binary {
--- a/tools/registry/IMAGES
+++ b/tools/registry/IMAGES
@ -4,8 +4,8 @@ gcr.io/google_containers/hyperkube-amd64,v1.11.6,hyperkube
 gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64,1.14.4,k8s-dns-dnsmasq-nanny-amd64
 gcr.io/google_containers/k8s-dns-kube-dns-amd64,1.14.4,k8s-dns-kube-dns-amd64
 gcr.io/google_containers/k8s-dns-sidecar-amd64,1.14.4,k8s-dns-sidecar-amd64
-gcr.io/kubernetes-helm/tiller,v2.13.1,tiller
-lachlanevenson/k8s-helm,v2.13.1,helm
+gcr.io/kubernetes-helm/tiller,v2.14.0,tiller
+lachlanevenson/k8s-helm,v2.14.0,helm
 quay.io/airshipit/armada,master,armada
 quay.io/calico/cni,v1.11.0,calico-cni
 quay.io/calico/ctl,v1.6.1,calico-ctl