Merge pull request #4 from akto-api-security/feature/disable_runtime_…

…testing Added flags to control service deployments
akto-api-security · Nov 28, 2023 · 4960e40 · 4960e40
2 parents b95e716 + 397d907
commit 4960e40
Show file tree

Hide file tree

Showing 9 changed files with 31 additions and 6 deletions.
diff --git a/charts/akto-setup/templates/dashboard.yaml b/charts/akto-setup/templates/dashboard.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.dashboard.aktoApiSecurityDashboard.env.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -12,4 +13,5 @@ spec:
     app: {{ include "akto.fullname" . }}-dashboard
   {{- include "akto.selectorLabels" . | nindent 4 }}
   ports:
-	{{- .Values.dashboard.ports | toYaml | nindent 2 -}}
+	{{- .Values.dashboard.ports | toYaml | nindent 2 -}}
+{{ end }}
diff --git a/charts/akto-setup/templates/deployment.yaml b/charts/akto-setup/templates/deployment.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.dashboard.aktoApiSecurityDashboard.env.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -70,7 +71,9 @@ spec:
         ports:
         - containerPort: 8080
         resources: {{- toYaml .Values.dashboard.aktoApiSecurityDashboard.resources |  nindent 10 }}
+{{ end }}
 ---
+{{ if .Values.testing.aktoApiSecurityTesting.env.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -136,7 +139,9 @@ spec:
         name: akto-api-security-testing
         resources: {{- toYaml .Values.testing.aktoApiSecurityTesting.resources |  nindent 10 }}
       restartPolicy: Always
+{{ end }}
 ---
+{{ if .Values.runtime.aktoApiSecurityRuntime.env.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -270,8 +275,9 @@ spec:
         - containerPort: 9999
         resources: {{- toYaml .Values.runtime.kafka1.resources | nindent 10 }}
       restartPolicy: Always
-
+{{ end }}
 ---
+{{ if .Values.keel.keel.env.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -340,4 +346,5 @@ spec:
         ports:
         - containerPort: 9300
         resources: {{- toYaml .Values.keel.keel.resources | nindent 10 }}
-      serviceAccountName: {{ include "akto.fullname" . }}-keel
+      serviceAccountName: {{ include "akto.fullname" . }}-keel
+{{ end }}
diff --git a/charts/akto-setup/templates/hpa.yaml b/charts/akto-setup/templates/hpa.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.runtime.aktoApiSecurityRuntime.env.enabled }}
 apiVersion: autoscaling/v1
 kind: HorizontalPodAutoscaler
 metadata:
@@ -11,4 +12,5 @@ spec:
     apiVersion: apps/v1
     kind: Deployment
     name: {{ include "akto.fullname" . }}-runtime
-  targetCPUUtilizationPercentage: 80
+  targetCPUUtilizationPercentage: 80
+{{ end }}
diff --git a/charts/akto-setup/templates/keel-rbac-binding.yaml b/charts/akto-setup/templates/keel-rbac-binding.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.keel.keel.env.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -11,4 +12,5 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: '{{ include "akto.fullname" . }}-keel'
-  namespace: '{{ .Release.Namespace }}'
+  namespace: '{{ .Release.Namespace }}'
+{{ end }}
diff --git a/charts/akto-setup/templates/keel-rbac.yaml b/charts/akto-setup/templates/keel-rbac.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.keel.keel.env.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -49,3 +50,4 @@ rules:
   - get
   - create
   - update
+{{ end }}
diff --git a/charts/akto-setup/templates/keel.yaml b/charts/akto-setup/templates/keel.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.keel.keel.env.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -12,3 +13,4 @@ spec:
   {{- include "akto.selectorLabels" . | nindent 4 }}
   ports:
 	{{- .Values.keel.ports | toYaml | nindent 2 -}}
+{{ end }}
diff --git a/charts/akto-setup/templates/runtime.yaml b/charts/akto-setup/templates/runtime.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.runtime.aktoApiSecurityRuntime.env.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -11,3 +12,4 @@ spec:
   {{- include "akto.selectorLabels" . | nindent 4 }}
   ports:
 	{{- .Values.runtime.ports | toYaml | nindent 2 -}}
+{{ end }}
diff --git a/charts/akto-setup/templates/serviceaccount.yaml b/charts/akto-setup/templates/serviceaccount.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.keel.keel.env.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -6,4 +7,5 @@ metadata:
     app: {{ include "akto.fullname" . }}-keel
   {{- include "akto.labels" . | nindent 4 }}
   annotations:
-    {{- toYaml .Values.keel.serviceAccount.annotations | nindent 4 }}
+    {{- toYaml .Values.keel.serviceAccount.annotations | nindent 4 }}
+{{ end }}
diff --git a/charts/akto-setup/values.yaml b/charts/akto-setup/values.yaml
@@ -15,6 +15,7 @@ dashboard:
       aktoTrafficBatchSize: "100"
       aktoTrafficBatchTimeSecs: "10"
       puppeteerReplayServiceUrl: http://akto-puppeteer-replay:3000
+      enabled: true
     image:
       repository: public.ecr.aws/aktosecurity/akto-api-security-dashboard
       tag: latest
@@ -47,6 +48,7 @@ runtime:
       aktoTrafficBatchTimeSecs: "10"
       puppeteerReplayServiceUrl: http://akto-puppeteer-replay:3000
       useHostName: true
+      enabled: true
     image:
       repository: public.ecr.aws/aktosecurity/akto-api-security-runtime
       tag: latest
@@ -122,6 +124,7 @@ testing:
       aktoTrafficBatchSize: "100"
       aktoTrafficBatchTimeSecs: "10"
       puppeteerReplayServiceUrl: http://akto-puppeteer-replay:3000
+      enabled: true
     image:
       repository: public.ecr.aws/aktosecurity/akto-api-testing
       tag: latest
@@ -151,6 +154,7 @@ keel:
       mattermostEndpoint: ""
       notificationLevel: info
       webhookEndpoint: ""
+      enabled: true
     image:
       repository: keelhq/keel
       tag: latest