chore: bump charts
diff --git a/charts/heat/values.yaml b/charts/heat/values.yaml
index 58f786b..555af53 100644
--- a/charts/heat/values.yaml
+++ b/charts/heat/values.yaml
@@ -340,95 +340,7 @@
paste.filter_factory: oslo_middleware.request_id:RequestId.factory
filter:osprofiler:
paste.filter_factory: osprofiler.web:WsgiMiddleware.factory
- policy:
- context_is_admin: role:admin and is_admin_project:True
- project_admin: role:admin
- deny_stack_user: not role:heat_stack_user
- deny_everybody: "!"
- cloudformation:ListStacks: rule:deny_stack_user
- cloudformation:CreateStack: rule:deny_stack_user
- cloudformation:DescribeStacks: rule:deny_stack_user
- cloudformation:DeleteStack: rule:deny_stack_user
- cloudformation:UpdateStack: rule:deny_stack_user
- cloudformation:CancelUpdateStack: rule:deny_stack_user
- cloudformation:DescribeStackEvents: rule:deny_stack_user
- cloudformation:ValidateTemplate: rule:deny_stack_user
- cloudformation:GetTemplate: rule:deny_stack_user
- cloudformation:EstimateTemplateCost: rule:deny_stack_user
- cloudformation:DescribeStackResource: ''
- cloudformation:DescribeStackResources: rule:deny_stack_user
- cloudformation:ListStackResources: rule:deny_stack_user
- cloudwatch:DeleteAlarms: rule:deny_stack_user
- cloudwatch:DescribeAlarmHistory: rule:deny_stack_user
- cloudwatch:DescribeAlarms: rule:deny_stack_user
- cloudwatch:DescribeAlarmsForMetric: rule:deny_stack_user
- cloudwatch:DisableAlarmActions: rule:deny_stack_user
- cloudwatch:EnableAlarmActions: rule:deny_stack_user
- cloudwatch:GetMetricStatistics: rule:deny_stack_user
- cloudwatch:ListMetrics: rule:deny_stack_user
- cloudwatch:PutMetricAlarm: rule:deny_stack_user
- cloudwatch:PutMetricData: ''
- cloudwatch:SetAlarmState: rule:deny_stack_user
- actions:action: rule:deny_stack_user
- build_info:build_info: rule:deny_stack_user
- events:index: rule:deny_stack_user
- events:show: rule:deny_stack_user
- resource:index: rule:deny_stack_user
- resource:metadata: ''
- resource:signal: ''
- resource:mark_unhealthy: rule:deny_stack_user
- resource:show: rule:deny_stack_user
- stacks:abandon: rule:deny_stack_user
- stacks:create: rule:deny_stack_user
- stacks:delete: rule:deny_stack_user
- stacks:detail: rule:deny_stack_user
- stacks:export: rule:deny_stack_user
- stacks:generate_template: rule:deny_stack_user
- stacks:global_index: rule:deny_everybody
- stacks:index: rule:deny_stack_user
- stacks:list_resource_types: rule:deny_stack_user
- stacks:list_template_versions: rule:deny_stack_user
- stacks:list_template_functions: rule:deny_stack_user
- stacks:lookup: ''
- stacks:preview: rule:deny_stack_user
- stacks:resource_schema: rule:deny_stack_user
- stacks:show: rule:deny_stack_user
- stacks:template: rule:deny_stack_user
- stacks:environment: rule:deny_stack_user
- stacks:files: rule:deny_stack_user
- stacks:update: rule:deny_stack_user
- stacks:update_patch: rule:deny_stack_user
- stacks:preview_update: rule:deny_stack_user
- stacks:preview_update_patch: rule:deny_stack_user
- stacks:validate_template: rule:deny_stack_user
- stacks:snapshot: rule:deny_stack_user
- stacks:show_snapshot: rule:deny_stack_user
- stacks:delete_snapshot: rule:deny_stack_user
- stacks:list_snapshots: rule:deny_stack_user
- stacks:restore_snapshot: rule:deny_stack_user
- stacks:list_outputs: rule:deny_stack_user
- stacks:show_output: rule:deny_stack_user
- software_configs:global_index: rule:deny_everybody
- software_configs:index: rule:deny_stack_user
- software_configs:create: rule:deny_stack_user
- software_configs:show: rule:deny_stack_user
- software_configs:delete: rule:deny_stack_user
- software_deployments:index: rule:deny_stack_user
- software_deployments:create: rule:deny_stack_user
- software_deployments:show: rule:deny_stack_user
- software_deployments:update: rule:deny_stack_user
- software_deployments:delete: rule:deny_stack_user
- software_deployments:metadata: ''
- service:index: rule:context_is_admin
- resource_types:OS::Nova::Flavor: rule:project_admin
- resource_types:OS::Cinder::EncryptedVolumeType: rule:project_admin
- resource_types:OS::Cinder::VolumeType: rule:project_admin
- resource_types:OS::Cinder::Quota: rule:project_admin
- resource_types:OS::Manila::ShareType: rule:project_admin
- resource_types:OS::Neutron::QoSPolicy: rule:project_admin
- resource_types:OS::Neutron::QoSBandwidthLimitRule: rule:project_admin
- resource_types:OS::Nova::HostAggregate: rule:project_admin
- resource_types:OS::Cinder::QoSSpecs: rule:project_admin
+ policy: {}
heat:
DEFAULT:
log_config_append: /etc/heat/logging.conf
@@ -804,6 +716,9 @@
cfn:
public: cloudformation-tls-public
internal: heat-tls-cfn
+ oci_image_registry:
+ heat: heat-oci-image-registry
+
# typically overridden by environmental
# values, but should include all endpoints
# required by this chart
@@ -821,6 +736,21 @@
port:
registry:
node: 5000
+ oci_image_registry:
+ name: oci-image-registry
+ namespace: oci-image-registry
+ auth:
+ enabled: false
+ heat:
+ username: heat
+ password: password
+ hosts:
+ default: localhost
+ host_fqdn_override:
+ default: null
+ port:
+ registry:
+ default: null
identity:
name: keystone
auth:
@@ -892,10 +822,12 @@
default: '/v1/%(project_id)s'
scheme:
default: 'http'
+ service: 'http'
port:
api:
default: 8004
public: 80
+ service: 8004
cloudformation:
name: heat-cfn
hosts:
@@ -914,10 +846,12 @@
default: /v1
scheme:
default: 'http'
+ service: 'http'
port:
api:
default: 8000
public: 80
+ service: 8000
# Cloudwatch does not get an entry in the keystone service catalog
cloudwatch:
name: heat-cloudwatch
@@ -931,10 +865,12 @@
type: null
scheme:
default: 'http'
+ service: 'http'
port:
api:
default: 8003
public: 80
+ service: 8003
oslo_db:
auth:
admin:
@@ -1082,6 +1018,13 @@
default: kubernetes.io/hostname
weight:
default: 10
+ tolerations:
+ heat:
+ enabled: false
+ tolerations:
+ - key: node-role.kubernetes.io/master
+ operator: Exists
+ effect: NoSchedule
mounts:
heat_api:
init_container: null
@@ -1295,6 +1238,11 @@
# set helm3_hook: false when using the helm2 binary.
helm3_hook: true
+tls:
+ identity: false
+ oslo_messaging: false
+ oslo_db: false
+
manifests:
certificates: false
configmap_bin: true
@@ -1328,6 +1276,7 @@
secret_ingress_tls: true
secret_keystone: true
secret_rabbitmq: true
+ secret_registry: true
service_api: true
service_cfn: true
service_cloudwatch: false