Delete post-delete-hook for argocd deployment
This commit is contained in:
@@ -1,19 +0,0 @@
|
|||||||
{{- if .Values.postDelete.enabled }}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "2"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,39 +0,0 @@
|
|||||||
{{- if .Values.postDelete.enabled }}
|
|
||||||
kind: ClusterRole
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
rules:
|
|
||||||
- apiGroups: [ "extensions","apps" ]
|
|
||||||
resources: [ "deployments" ]
|
|
||||||
verbs: [ "get", "list", "delete" ]
|
|
||||||
- apiGroups: [ "batch" ]
|
|
||||||
resources: [ "jobs" ]
|
|
||||||
verbs: [ "get", "list", "watch", "delete", "create" ]
|
|
||||||
- apiGroups: [ "rbac.authorization.k8s.io" ]
|
|
||||||
resources: [ "clusterroles", "clusterrolebindings", "roles", "rolebindings" ]
|
|
||||||
verbs: [ "get", "list", "delete", "create" ]
|
|
||||||
- apiGroups: [ "" ]
|
|
||||||
resources: [ "pods", "secrets", "services", "configmaps" ]
|
|
||||||
verbs: [ "get", "list", "delete" ]
|
|
||||||
- apiGroups: [ "" ]
|
|
||||||
resources: [ "serviceaccounts" ]
|
|
||||||
verbs: [ "get", "list", "delete", "create" ]
|
|
||||||
- apiGroups: [ "networking.k8s.io" ]
|
|
||||||
resources: [ "networkpolicies" ]
|
|
||||||
verbs: [ "get", "list", "delete" ]
|
|
||||||
- apiGroups: [ "admissionregistration.k8s.io" ]
|
|
||||||
resources: [ "validatingwebhookconfigurations", "mutatingwebhookconfigurations" ]
|
|
||||||
verbs: [ "get", "list", "delete" ]
|
|
||||||
- apiGroups: [ "networking.k8s.io" ]
|
|
||||||
resources: [ "ingresses" ]
|
|
||||||
verbs: [ "delete" ]
|
|
||||||
- apiGroups: [ "cert-manager.io" ]
|
|
||||||
resources: [ "issuers" ]
|
|
||||||
verbs: [ "delete" ]
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
{{- if .Values.postDelete.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ConfigMap
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
data:
|
|
||||||
post-delete-hook.sh: |-
|
|
||||||
{{ $.Files.Get "scripts/post-delete-hook.sh" | indent 4 }}
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,46 +0,0 @@
|
|||||||
{{- if .Values.postDelete.enabled }}
|
|
||||||
apiVersion: batch/v1
|
|
||||||
kind: Job
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "3"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
|
||||||
spec:
|
|
||||||
backoffLimit: 3
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 8 }}
|
|
||||||
spec:
|
|
||||||
serviceAccountName: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
restartPolicy: OnFailure
|
|
||||||
containers:
|
|
||||||
- name: {{ template "rancher.name" . }}-post-delete
|
|
||||||
image: "{{ include "system_default_registry" . }}{{ .Values.postDelete.image.repository }}:{{ .Values.postDelete.image.tag }}"
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
securityContext:
|
|
||||||
runAsUser: 0
|
|
||||||
command:
|
|
||||||
- /scripts/post-delete-hook.sh
|
|
||||||
volumeMounts:
|
|
||||||
- mountPath: /scripts
|
|
||||||
name: config-volume
|
|
||||||
env:
|
|
||||||
- name: NAMESPACES
|
|
||||||
value: {{ .Values.postDelete.namespaceList | join " " | quote }}
|
|
||||||
- name: RANCHER_NAMESPACE
|
|
||||||
value: {{ .Release.Namespace }}
|
|
||||||
- name: TIMEOUT
|
|
||||||
value: {{ .Values.postDelete.timeout | quote }}
|
|
||||||
- name: IGNORETIMEOUTERROR
|
|
||||||
value: {{ .Values.postDelete.ignoreTimeoutError | quote }}
|
|
||||||
volumes:
|
|
||||||
- name: config-volume
|
|
||||||
configMap:
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
defaultMode: 0777
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,12 +0,0 @@
|
|||||||
{{- if .Values.postDelete.enabled }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-post-delete
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,41 +0,0 @@
|
|||||||
{{- if .Values.preinstallHook }}
|
|
||||||
apiVersion: batch/v1
|
|
||||||
kind: Job
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-cleanup-tls-ca-job
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "3"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
|
|
||||||
spec:
|
|
||||||
backoffLimit: 3
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-cleanup-tls-ca
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 8 }}
|
|
||||||
spec:
|
|
||||||
serviceAccountName: {{ template "rancher.fullname" . }}-cleanup-tls-ca-sa
|
|
||||||
restartPolicy: OnFailure
|
|
||||||
containers:
|
|
||||||
- name: {{ template "rancher.name" . }}-cleanup-tls-ca
|
|
||||||
image: "{{ include "system_default_registry" . }}{{ .Values.postDelete.image.repository }}:{{ .Values.postDelete.image.tag }}"
|
|
||||||
imagePullPolicy: IfNotPresent
|
|
||||||
securityContext:
|
|
||||||
runAsUser: 0
|
|
||||||
command:
|
|
||||||
- /bin/sh
|
|
||||||
- -c
|
|
||||||
- |
|
|
||||||
#!/bin/bash
|
|
||||||
kd () {
|
|
||||||
if [ $(kubectl get $@ --ignore-not-found | wc -l) -eq 2 ];then
|
|
||||||
echo [INFO] delete $@
|
|
||||||
kubectl delete $@
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
kd secret tls-ca -n {{ .Release.Namespace }}
|
|
||||||
kd certificate {{ .Values.ingress.tls.secretName }} -n {{ .Release.Namespace }}
|
|
||||||
kd secret {{ .Values.ingress.tls.secretName }} -n {{ .Release.Namespace }}
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
{{- if .Values.preinstallHook }}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-cleanup-tls-ca-role
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
rules:
|
|
||||||
- apiGroups: [""]
|
|
||||||
resources: ["secrets"]
|
|
||||||
verbs: ["get", "list", "delete"]
|
|
||||||
- apiGroups: ["cert-manager.io"]
|
|
||||||
resources: ["certificates"]
|
|
||||||
verbs: ["get", "list", "delete"]
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
{{- if .Values.preinstallHook }}
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: RoleBinding
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-cleanup-tls-ca-rolebinding
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "2"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: {{ template "rancher.fullname" . }}-cleanup-tls-ca-sa
|
|
||||||
namespace: {{ .Release.Namespace }}
|
|
||||||
roleRef:
|
|
||||||
kind: Role
|
|
||||||
name: {{ template "rancher.fullname" . }}-cleanup-tls-ca-role
|
|
||||||
{{- end }}
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
{{- if .Values.preinstallHook }}
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: {{ template "rancher.fullname" . }}-cleanup-tls-ca-sa
|
|
||||||
labels: {{ include "rancher.labels" . | nindent 4 }}
|
|
||||||
annotations:
|
|
||||||
"helm.sh/hook": post-delete
|
|
||||||
"helm.sh/hook-weight": "1"
|
|
||||||
"helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
|
|
||||||
{{- end }}
|
|
||||||
Reference in New Issue
Block a user