rancher · nflondo · Nov 13, 2023 · Nov 13, 2023
@@ -1,7 +1,7 @@
 annotations:
   artifacthub.io/changes: |
-    - kind: changed
-      description: Upgrade Argo CD to v2.9.0
+    - kind: fixed
+      description: Add configurations for Applications in any namespace
   artifacthub.io/signKey: |
     fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
     url: https://argoproj.github.io/argo-helm/pgp_keys.asc
@@ -33,4 +33,4 @@ name: argo-cd
 sources:
 - https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
 - https://github.com/argoproj/argo-cd
-version: 5.51.0
+version: 5.51.1
@@ -449,6 +449,7 @@ NAME: my-release
 | configs.credentialTemplatesAnnotations | object | `{}` | Annotations to be added to `configs.credentialTemplates` Secret |
 | configs.gpg.annotations | object | `{}` | Annotations to be added to argocd-gpg-keys-cm configmap |
 | configs.gpg.keys | object | `{}` (See [values.yaml]) | [GnuPG] public keys to add to the keyring |
+| configs.params."application.namespaces" | string | `""` | Enables [Applications in any namespace] |
 | configs.params."applicationsetcontroller.enable.progressive.syncs" | bool | `false` | Enables use of the Progressive Syncs capability |
 | configs.params."applicationsetcontroller.policy" | string | `"sync"` | Modify how application is synced between the generator and the cluster. One of: `sync`, `create-only`, `create-update`, `create-delete` |
 | configs.params."controller.operation.processors" | int | `10` | Number of application operation processors |
@@ -1253,3 +1254,4 @@ Autogenerated from chart metadata using [helm-docs](https://github.com/norwoodj/
 [tini]: https://github.com/argoproj/argo-cd/pull/12707
 [EKS EoL]: https://endoflife.date/amazon-eks
 [Kubernetes Compatibility Matrix]: https://argo-cd.readthedocs.io/en/stable/operator-manual/installation/#supported-versions
+[Applications in any namespace]: https://argo-cd.readthedocs.io/en/stable/operator-manual/app-any-namespace/#applications-in-any-namespace
@@ -21,6 +21,9 @@ rules:
       - events
     verbs:
       - list
+      {{- if (index .Values.configs.params "application.namespaces") }}
+      - create
+      {{- end }}
   - apiGroups:
       - ""
     resources:

@@ -263,6 +263,12 @@ configs:
     # -- Enables use of the Progressive Syncs capability
     applicationsetcontroller.enable.progressive.syncs: false
 
+    # -- Enables [Applications in any namespace]
+    ## List of additional namespaces where applications may be created in and reconciled from.
+    ## The namespace where Argo CD is installed to will always be allowed.
+    ## Set comma-separated list. (e.g. app-team-one, app-team-two)
+    application.namespaces: ""
+
   # Argo CD RBAC policy configuration
   ## Ref: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/rbac.md
   rbac:

@@ -5,7 +5,7 @@ annotations:
   catalog.cattle.io/namespace: kubeslice-controller
   catalog.cattle.io/release-name: kubeslice-controller
 apiVersion: v2
-appVersion: 1.1.1
+appVersion: 1.3.4
 description: Multi cloud networking (MCN), multi cluster, hybrid cloud networking
   tool for efficient, secure, policy-enforced connectivity and true multi-tenancy
   capabilities.  KubeSlice enables enterprise platform teams to reduce infrastructure
@@ -39,4 +39,4 @@ maintainers:
   name: Avesha
 name: kubeslice-controller
 type: application
-version: 1.1.1
+version: 1.3.4
@@ -1,13 +1,13 @@
 # Kubeslice Enterprise Controller Helm Charts
 
 ## Prerequisites
-📖 Follow the overview and registration [documentation](https://docs.avesha.io/documentation/enterprise/1.1.1/deployment-partners/deploying-kubeslice-on-rancher/)
+📖 Follow the overview and registration [documentation](https://docs.avesha.io/documentation/enterprise/1.3.0/get-started/prerequisites/prerequisites-kubeslice-registration).
 
-- Create and configure the controller cluster following instructions in the prerequisites section [documentation](https://docs.avesha.io/documentation/enterprise/1.1.1/deployment-partners/deploying-kubeslice-on-rancher/installing-the-kubeslice-controller-on-rancher)
+- Create and configure the controller cluster following instructions in the prerequisites [documentation](https://docs.avesha.io/documentation/enterprise/1.3.0/get-started/prerequisites/prerequisites-rancher-deployments).
 - Copy the chart version from the upper right hand section of this page [VERSION parameter need during install and upgrade]
 - Click on the download chart link from the upper right hand section of this page, save it to location available from command prompt 
 - Untar the chart to get the values.yaml file, update values.yaml with the follwing information
-  - cluster end point [documentation](https://docs.avesha.io/documentation/enterprise/1.1.1/deployment-partners/deploying-kubeslice-on-rancher/installing-the-kubeslice-controller-on-rancher#getting-the-controller-cluster-endpoint)
+  - cluster end point [documentation](https://docs.avesha.io/documentation/enterprise/1.3.0/get-started/prerequisites/prerequisites-rancher-deployments#get-the-controller-cluster-endpoint)
   - helm repository username, password and email [From registration]
 
 
@@ -19,20 +19,20 @@ Add the repo as follows:
 helm repo add kubeslice-rancher https://kubeslice.github.io/rancher-avesha-charts/
 ```
 
-### Install KubeSlice Controller
+### Install the KubeSlice Controller
 ```console
 export KUBECONFIG=<CONTROLLER CLUSTER KUBECONFIG>
 helm install --namespace=kubeslice-controller --create-namespace kubeslice-controller kubeslice-rancher/kubeslice-controller --timeout=10m0s --values=<LOCATION OF values.yaml> --version=<VERSION> --wait=true 
 ```
 
-### Upgrading KubeSlice Controller
+### Upgrading the KubeSlice Controller
 
 ```console
 helm upgrade --history-max=5 --namespace=kubeslice-controller kubeslice-controller kubeslice-rancher/kubeslice-controller --timeout=10m0s --values=<LOCATION OF values.yaml> --version=<VERSION> --wait=true 
 ```
 
-### Uninstall KubeSlice Controller
-- Follow instructions [documentation](https://docs.avesha.io/documentation/enterprise/1.1.1/getting-started-with-cloud-clusters/uninstalling-kubeslice/uninstalling-the-kubeslice-controller/)
+### Uninstall the KubeSlice Controller
+- Follow instructions [documentation](https://docs.avesha.io/documentation/enterprise/1.3.0/uninstall-kubeslice/)
 
 ```console
 export KUBECONFIG=<CONTROLLER CLUSTER KUBECONFIG>

@@ -2,7 +2,7 @@
 questions: 
   - 
     default: ""
-    description: "https://docs.avesha.io/documentation/enterprise/1.1.1/deployment-partners/deploying-kubeslice-on-rancher/#registering-to-access-the-enterprise-helm-chart"
+    description: "https://docs.avesha.io/documentation/enterprise/1.3.0/get-started/prerequisites/prerequisites-kubeslice-registration/"
     group: "Global Settings"
     label: "Registered Username"
     required: true
@@ -18,7 +18,7 @@ questions:
     variable: imagePullSecrets.password
   - 
     default: ""
-    description: "https://docs.avesha.io/documentation/enterprise/1.1.1/deployment-partners/deploying-kubeslice-on-rancher/installing-the-kubeslice-controller-on-rancher/#getting-the-controller-cluster-endpoint"
+    description: "https://docs.avesha.io/documentation/enterprise/1.3.0/get-started/prerequisites/prerequisites-rancher-deployments/"
     group: "Controller Settings"
     label: "Controller Endpoint"
     required: true
@@ -50,7 +50,7 @@ questions:
     variable: kubeslice.uiproxy.service.type
   - 
     default: ""
-    description: "https://docs.avesha.io/documentation/enterprise/1.1.1/reference/configuration-parameters/#license-parameters"
+    description: "https://docs.avesha.io/documentation/enterprise/1.3.0/license/trial-license"
     group: "Controller Settings"
     label: "Customer Name for generating Trial License"
     required: false

@@ -126,4 +126,133 @@ Create the name of the service account to use
 {{- else }}
 {{- default "default" .Values.serviceAccount.name }}
 {{- end }}
+{{- end }}
+*************************kubeslice-ui*********************************
+
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "kubeslice-ui.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "kubeslice-ui.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "kubeslice-ui.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "kubeslice-ui.labels" -}}
+helm.sh/chart: {{ include "kubeslice-ui.chart" . }}
+{{ include "kubeslice-ui.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "kubeslice-ui.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "kubeslice-ui.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "kubeslice-ui.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "kubeslice-ui.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
+
+*************************KUBERNETES-DASHBOARD*********************************
+
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "kubernetes-dashboard.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "kubernetes-dashboard.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "kubernetes-dashboard.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "kubernetes-dashboard.labels" -}}
+helm.sh/chart: {{ include "kubernetes-dashboard.chart" . }}
+{{ include "kubernetes-dashboard.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "kubernetes-dashboard.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "kubernetes-dashboard.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "kubernetes-dashboard.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "kubernetes-dashboard.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
 {{- end }}
@@ -11,7 +11,6 @@ metadata:
   namespace: {{ .Release.Namespace }}
 type: Opaque
 data:
-  ca.crt: {{ $ca.Cert | b64enc }}
   tls.key: {{ $cert.Key | b64enc }}
   tls.crt: {{ $cert.Cert | b64enc }}
 
@@ -261,6 +260,28 @@ webhooks:
         resources:
           - workerslicegateways
     sideEffects: None
+  - admissionReviewVersions:
+      - v1
+    clientConfig:
+      caBundle: {{ $ca.Cert | b64enc }}
+      service:
+        name: kubeslice-controller-webhook-service
+        namespace: kubeslice-controller
+        path: /validate-controller-kubeslice-io-v1alpha1-vpnkeyrotation
+    failurePolicy: Fail
+    name: vvpnkeyrotation.kb.io
+    rules:
+    - apiGroups:
+      - controller.kubeslice.io
+      apiVersions:
+      - v1alpha1
+      operations:
+      - CREATE
+      - UPDATE
+      - DELETE
+      resources:
+      - vpnkeyrotations
+    sideEffects: None
 ---
 apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
@@ -455,4 +476,4 @@ webhooks:
           - UPDATE
         resources:
           - workerslicegateways
-    sideEffects: None
+    sideEffects: None