update lakekeeper/0.11.0

- chart 0.8.1 → 0.11.0 (appVersion 0.10.4 → 0.12.2) - deps: postgres 1.5.8 → 1.5.13, openfga 0.2.44 → 0.2.62 - ingress: Kong → APISIX (use-regex + path /.*, cluster-issuer) - openfga.playground 비활성화 (preshared 인증 패닉 방지) - breaking=false, custom-values 키 전부 호환 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-15 09:13:31 +09:00
parent 1ab3d4d31c
commit f4d287abef
217 changed files with 23584 additions and 0 deletions
@@ -0,0 +1,7 @@
+helmWait: true
+internalOpenFGA: true
+authn:
+  k8s:
+    enabled: true
+authz:
+  backend: "openfga"
@@ -0,0 +1,12 @@
+helmWait: true
+catalog:
+  autoscaling:
+    enabled: true
+    maxReplicas: 3
+    metrics:
+      - type: Resource
+        resource:
+          name: cpu-percent
+          target:
+            type: Utilization
+            averageUtilization: 80
@@ -0,0 +1,13 @@
+helmWait: true
+catalog:
+  ingress:
+    enabled: true
+    annotations:
+      nginx.ingress.kubernetes.io/rewrite-target: /
+    labels:
+      foo: bar
+    ingressClassName: nginx
+    host: iceberg-catalog.local
+    tls:
+      enabled: true
+      secretName: iceberg-catalog-tls
@@ -0,0 +1,4 @@
+helmWait: true
+lakekeeper:
+  edition: "plus"
+  useLicenseSecret: false
@@ -0,0 +1,13 @@
+helmWait: true
+internalOpenFGA: true
+authn:
+  k8s:
+    enabled: true
+authz:
+  backend: "openfga"
+OPABridge:
+  enabled: true
+  lakekeeper:
+    tokenEndpoint: "http://localhost/nonexistant/oauth2/token"
+    clientId: "example-client-id"
+    clientSecret: "example-client-secret"
@@ -0,0 +1,15 @@
+helmWait: true
+catalog:
+  replicas: 2
+  labels:
+    foo: bar
+  podLabels:
+    bar: baz
+  annotations:
+    baz: qux
+  podAnnotations:
+    qux: quux
+  podDisruptionBudget:
+    enabled: true
+    # maxUnavailable: 1
+    minAvailable: 1
@@ -0,0 +1,13 @@
+helmWait: true
+catalog:
+  podSecurityContext:
+    runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
+
+  containerSecurityContext:
+    allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - all
@@ -0,0 +1,9 @@
+helmWait: true
+catalog:
+  extraVolumes:
+    - name: iceberg-catalog
+      emptyDir: {}
+  extraVolumeMounts:
+    - name: iceberg-catalog
+      mountPath: /volume-mount-test
+      readOnly: false