From d4e359b7be4d018fbb5d4915dee109e4d4d58543 Mon Sep 17 00:00:00 2001 From: Shubham Chaudhary Date: Fri, 10 Jan 2020 18:32:36 +0530 Subject: [PATCH] (feat): Adding minimal permissions in kafka broker pod failure (#105) Signed-off-by: shubhamchaudhary --- charts/generic/container-kill/experiment.yaml | 2 +- charts/generic/cpu-hog/experiment.yaml | 2 +- charts/generic/disk-fill/experiment.yaml | 2 +- charts/generic/disk-loss/experiment.yaml | 2 +- .../kafka-broker-pod-failure/experiment.yaml | 50 +++++++++++-------- 5 files changed, 34 insertions(+), 24 deletions(-) diff --git a/charts/generic/container-kill/experiment.yaml b/charts/generic/container-kill/experiment.yaml index d25aeb6..5daad85 100644 --- a/charts/generic/container-kill/experiment.yaml +++ b/charts/generic/container-kill/experiment.yaml @@ -42,7 +42,7 @@ spec: - name: TARGET_CONTAINER value: '' - # It only supported pumba + # It only supports pumba - name: LIB value: 'pumba' diff --git a/charts/generic/cpu-hog/experiment.yaml b/charts/generic/cpu-hog/experiment.yaml index c1049b3..363838d 100644 --- a/charts/generic/cpu-hog/experiment.yaml +++ b/charts/generic/cpu-hog/experiment.yaml @@ -5,7 +5,7 @@ description: kind: ChaosExperiment metadata: name: cpu-hog - version: 0.0.5 + version: 0.1.5 spec: definition: scope: Cluster diff --git a/charts/generic/disk-fill/experiment.yaml b/charts/generic/disk-fill/experiment.yaml index 667ad36..1bebaf5 100644 --- a/charts/generic/disk-fill/experiment.yaml +++ b/charts/generic/disk-fill/experiment.yaml @@ -44,7 +44,7 @@ spec: value: '' - name: FILL_PERCENTAGE - value: '' + value: '80' - name: TOTAL_CHAOS_DURATION value: '60' diff --git a/charts/generic/disk-loss/experiment.yaml b/charts/generic/disk-loss/experiment.yaml index 153ce1f..7a3a7b4 100644 --- a/charts/generic/disk-loss/experiment.yaml +++ b/charts/generic/disk-loss/experiment.yaml @@ -46,7 +46,7 @@ spec: - name: CHAOS_NAMESPACE value: '' - # Only GCP is supported + # It supports GCP and AWS - name: CLOUD_PLATFORM value: 'GCP' diff --git a/charts/kafka/kafka-broker-pod-failure/experiment.yaml b/charts/kafka/kafka-broker-pod-failure/experiment.yaml index 7bf0ed5..7bbb31e 100644 --- a/charts/kafka/kafka-broker-pod-failure/experiment.yaml +++ b/charts/kafka/kafka-broker-pod-failure/experiment.yaml @@ -8,26 +8,36 @@ metadata: version: 0.1.3 spec: definition: + scope: Cluster permissions: - apiGroups: - - "" - - "extensions" - - "apps" - - "batch" - - "litmuschaos.io" - resources: - - "daemonsets" - - "statefulsets" - - "deployments" - - "replicasets" - - "jobs" - - "pods" - - "pods/exec" - - "chaosengines" - - "chaosexperiments" - - "chaosresults" - verbs: - - "*" + - apiGroups: + - "" + - "apps" + - "batch" + - "litmuschaos.io" + resources: + - "statefulsets" + - "deployments" + - "configmaps" + - "jobs" + - "pods" + - "pods/exec" + - "chaosengines" + - "chaosexperiments" + - "chaosresults" + verbs: + - "create" + - "get" + - "delete" + - "list" + - "patch" + - apiGroups: + - "" + resources: + - "nodes" + verbs : + - "get" + - "list" image: "litmuschaos/ansible-runner:ci" args: - -c @@ -94,7 +104,7 @@ spec: value: '' ## env var that describes the library used to execute the chaos - ## default: litmus. Supported values: litmus, powerfulseal, chaoskube + ## default: litmus. Supported values: litmus, powerfulseal - name: LIB value: 'litmus'