This is an automated email from the ASF dual-hosted git repository.

zhongxjian pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-kubernetes.git


The following commit(s) were added to refs/heads/master by this push:
     new 135d57fe [chore] Update charts and replace image (#714)
135d57fe is described below

commit 135d57fefc94714f1af90746c12f3525ad907607
Author: Jian Zhong <[email protected]>
AuthorDate: Mon May 12 08:04:20 2025 +0800

    [chore] Update charts and replace image (#714)
---
 manifests/charts/README.md                                 |  5 +++++
 manifests/charts/admin/templates/deployment.yaml           | 14 ++++++++++++++
 .../register-discovery/nacos/templates/statefulset.yaml    | 11 +++++++++++
 .../dubbo-control/register-discovery/nacos/values.yaml     |  1 +
 .../zookeeper/templates/statefulset.yaml                   | 11 +++++++++++
 .../dubbo-control/register-discovery/zookeeper/values.yaml |  1 +
 samples/addons/grafana.yaml                                |  2 +-
 samples/addons/jaeger.yaml                                 |  2 +-
 samples/addons/prometheus.yaml                             |  4 ++--
 9 files changed, 47 insertions(+), 4 deletions(-)

diff --git a/manifests/charts/README.md b/manifests/charts/README.md
new file mode 100644
index 00000000..1c606bf7
--- /dev/null
+++ b/manifests/charts/README.md
@@ -0,0 +1,5 @@
+# Dubbo Installer
+
+WARNING: Do not use the files in this directory to install Dubbo
+
+If you want to install Dubbo with Helm, instead please follow the Helm 
installation docs here.
\ No newline at end of file
diff --git a/manifests/charts/admin/templates/deployment.yaml 
b/manifests/charts/admin/templates/deployment.yaml
index 44018376..99b79302 100644
--- a/manifests/charts/admin/templates/deployment.yaml
+++ b/manifests/charts/admin/templates/deployment.yaml
@@ -44,6 +44,20 @@ spec:
         ports:
         - name: http
           containerPort: 8888
+        readinessProbe:
+          httpGet:
+            path: /admin
+            port: 8888
+          initialDelaySeconds: 1
+          periodSeconds: 3
+          timeoutSeconds: 5
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          capabilities:
+            drop:
+              - ALL
         volumeMounts:
           - name: data
             mountPath: /var/lib/admin
diff --git 
a/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
 
b/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
index ef08d452..dc9ada8e 100644
--- 
a/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
+++ 
b/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
@@ -25,6 +25,10 @@ spec:
       app: nacos
       dubbo.io/rev: {{ default "default" | quote }}
       dubbo: nacos
+  updateStrategy:
+    type: RollingUpdate
+    rollingUpdate:
+      partition: {{ $nacos.rollingPartition }}
   template:
     metadata:
       labels:
@@ -117,6 +121,13 @@ spec:
         - name: SPRING_DATASOURCE_PLATFORM
           value: ""
         {{- end }}
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          capabilities:
+            drop:
+              - ALL
         volumeMounts:
         - name: data
           mountPath: /home/nacos/data
diff --git 
a/manifests/charts/dubbo-control/register-discovery/nacos/values.yaml 
b/manifests/charts/dubbo-control/register-discovery/nacos/values.yaml
index 91972a3b..e8dbda81 100644
--- a/manifests/charts/dubbo-control/register-discovery/nacos/values.yaml
+++ b/manifests/charts/dubbo-control/register-discovery/nacos/values.yaml
@@ -14,6 +14,7 @@
 # limitations under the License.
 
 _internal_default_values_not_set:
+  rollingPartition: ""
   # Whether to enable the nacos.
   enabled: false
   # Specifies the mode in which nacos is running (standalone, cluster, etc.).
diff --git 
a/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
 
b/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
index 355ed362..9bea8a55 100644
--- 
a/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
+++ 
b/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
@@ -21,6 +21,10 @@ spec:
       dubbo: zookeeper
   replicas: {{ $zookeeper.replicas }}
   serviceName: zookeeper
+  updateStrategy:
+    type: RollingUpdate
+    rollingUpdate:
+      partition: {{ $zookeeper.rollingPartition }}
   template:
     metadata:
       labels:
@@ -58,6 +62,13 @@ spec:
           containerPort: 2888
         - name: election
           containerPort: 3888
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          capabilities:
+            drop:
+              - ALL
         volumeMounts:
         - name: data
           mountPath: /var/lib/zookeeper
diff --git 
a/manifests/charts/dubbo-control/register-discovery/zookeeper/values.yaml 
b/manifests/charts/dubbo-control/register-discovery/zookeeper/values.yaml
index 6e6f0b56..6c29e11d 100644
--- a/manifests/charts/dubbo-control/register-discovery/zookeeper/values.yaml
+++ b/manifests/charts/dubbo-control/register-discovery/zookeeper/values.yaml
@@ -14,6 +14,7 @@
 # limitations under the License.
 
 _internal_default_values_not_set:
+  rollingPartition: ""
   # Whether to enable the zookeeper.
   enabled: false
   # Number of replicas for the Deployment.
diff --git a/samples/addons/grafana.yaml b/samples/addons/grafana.yaml
index 8ba09adb..60b82fed 100644
--- a/samples/addons/grafana.yaml
+++ b/samples/addons/grafana.yaml
@@ -147,7 +147,7 @@ spec:
       enableServiceLinks: true
       containers:
         - name: grafana
-          image: "docker.io/grafana/grafana:11.3.1"
+          image: 
"sca-registry.cn-hangzhou.cr.aliyuncs.com/dubbo/grafana:11.3.1"
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/samples/addons/jaeger.yaml b/samples/addons/jaeger.yaml
index 49994244..cb871859 100644
--- a/samples/addons/jaeger.yaml
+++ b/samples/addons/jaeger.yaml
@@ -34,7 +34,7 @@ spec:
     spec:
       containers:
         - name: jaeger
-          image: "docker.io/jaegertracing/all-in-one:1.67.0"
+          image: 
"sca-registry.cn-hangzhou.cr.aliyuncs.com/dubbo/jager-all-in-one:1.67.0"
           env:
             - name: BADGER_EPHEMERAL
               value: "false"
diff --git a/samples/addons/prometheus.yaml b/samples/addons/prometheus.yaml
index 662da168..bcadb985 100644
--- a/samples/addons/prometheus.yaml
+++ b/samples/addons/prometheus.yaml
@@ -499,7 +499,7 @@ spec:
       serviceAccountName: prometheus
       containers:
         - name: prometheus-server-configmap-reload
-          image: 
"ghcr.io/prometheus-operator/prometheus-config-reloader:v0.81.0"
+          image: 
"sca-registry.cn-hangzhou.cr.aliyuncs.com/dubbo/prometheus-config-reloader:v0.81.0"
           imagePullPolicy: "IfNotPresent"
           args:
             - --watched-dir=/etc/config
@@ -527,7 +527,7 @@ spec:
               readOnly: true
 
         - name: prometheus-server
-          image: "prom/prometheus:v3.2.1"
+          image: 
"sca-registry.cn-hangzhou.cr.aliyuncs.com/dubbo/prometheus:v3.2.1"
           imagePullPolicy: "IfNotPresent"
           args:
             - --storage.tsdb.retention.time=15d

Reply via email to