apiVersion: litmuschaos.io/v1alpha1
description:
  message: |
    Execute AWS SSM Chaos on given ec2 instance Tag
kind: ChaosExperiment
metadata:
  name: aws-ssm-chaos-by-tag
  labels:
    name: aws-ssm-chaos-by-tag
    app.kubernetes.io/part-of: litmus
    app.kubernetes.io/component: chaosexperiment
    app.kubernetes.io/version: latest
spec:
  definition:
    scope: Cluster
    permissions:
      # Create and monitor the experiment & helper pods
      - apiGroups: [""]
        resources: ["pods"]
        verbs: ["create","delete","get","list","patch","update", "deletecollection"]
      # Performs CRUD operations on the events inside chaosengine and chaosresult
      - apiGroups: [""]
        resources: ["events"]
        verbs: ["create","get","list","patch","update"]
      # Fetch configmaps & secrets details and mount it to the experiment pod (if specified)
      - apiGroups: [""]
        resources: ["secrets","configmaps"]
        verbs: ["get","list",]
      # Track and get the runner, experiment, and helper pods log 
      - apiGroups: [""]
        resources: ["pods/log"]
        verbs: ["get","list","watch"]  
      # for creating and managing to execute comands inside target container
      - apiGroups: [""]
        resources: ["pods/exec"]
        verbs: ["get","list","create"]
      # for configuring and monitor the experiment job by the chaos-runner pod
      - apiGroups: ["batch"]
        resources: ["jobs"]
        verbs: ["create","list","get","delete","deletecollection"]
      # for creation, status polling and deletion of litmus chaos resources used within a chaos workflow
      - apiGroups: ["litmuschaos.io"]
        resources: ["chaosengines","chaosexperiments","chaosresults"]
        verbs: ["create","list","get","patch","update","delete"]
    image: "litmuschaos/go-runner:latest"
    imagePullPolicy: Always
    args:
    - -c
    - ./experiments -name aws-ssm-chaos-by-tag
    command:
    - /bin/bash
    env:
    - name: TOTAL_CHAOS_DURATION
      value: '60'

    - name: CHAOS_INTERVAL
      value: '60'

    # Period to wait before and after injection of chaos in sec
    - name: RAMP_TIME
      value: ''

      # provide tag of the target ec2 instances
      # ex: team:devops (key:value)
    - name: EC2_INSTANCE_TAG
      value: ''

    - name: REGION
      value: ''

    # it defines the sequence of chaos execution for multiple target instances
    # supported values: serial, parallel
    - name: SEQUENCE
      value: 'parallel'

    # Provide the path of aws credentials mounted from secret  
    - name: AWS_SHARED_CREDENTIALS_FILE
      value: '/tmp/cloud_config.yml'      

    # percentage of total instance to target
    - name: INSTANCE_AFFECTED_PERC
      value: ''      

    # Provide the name of ssm doc 
    # if not using the default stress docs  
    - name: DOCUMENT_NAME
      value: ''

    # Provide the type of ssm doc 
    # if not using the default stress docs  
    - name: DOCUMENT_TYPE
      value: ''

    # Provide the format of ssm doc
    # if not using the default stress docs  
    - name: DOCUMENT_FORMAT
      value: ''

    # Provide the path of ssm doc 
    # if not using the default stress docs  
    - name: DOCUMENT_PATH
      value: ''

    # if you want to install dependencies to run default ssm docs
    - name: INSTALL_DEPENDENCIES
      value: 'True'        

    # provide the number of workers for memory stress
    - name: NUMBER_OF_WORKERS
      value: '1'

    # provide the percentage of available memory to stress
    - name: MEMORY_PERCENTAGE
      value: '80'

    # provide the CPU chores to comsumed
    # 0 will consume all the available cpu cores
    - name: CPU_CORE
      value: '0'
                
    # provide the LIB
    # only litmus supported
    - name: LIB
      value: 'litmus'  
          
    labels:
      name: aws-ssm-chaos-by-tag
      app.kubernetes.io/part-of: litmus
      app.kubernetes.io/component: experiment-job
      app.kubernetes.io/version: latest
    secrets:
    - name: cloud-secret
      mountPath: /tmp/

---
apiVersion: litmuschaos.io/v1alpha1
description:
  message: |
    Execute AWS SSM Chaos on given ec2 instance IDs
kind: ChaosExperiment
metadata:
  name: aws-ssm-chaos-by-id
  labels:
    name: aws-ssm-chaos-by-id
    app.kubernetes.io/part-of: litmus
    app.kubernetes.io/component: chaosexperiment
    app.kubernetes.io/version: latest
spec:
  definition:
    scope: Cluster
    permissions:
      # Create and monitor the experiment & helper pods
      - apiGroups: [""]
        resources: ["pods"]
        verbs: ["create","delete","get","list","patch","update", "deletecollection"]
      # Performs CRUD operations on the events inside chaosengine and chaosresult
      - apiGroups: [""]
        resources: ["events"]
        verbs: ["create","get","list","patch","update"]
      # Fetch configmaps & secrets details and mount it to the experiment pod (if specified)
      - apiGroups: [""]
        resources: ["secrets","configmaps"]
        verbs: ["get","list",]
      # Track and get the runner, experiment, and helper pods log 
      - apiGroups: [""]
        resources: ["pods/log"]
        verbs: ["get","list","watch"]  
      # for creating and managing to execute comands inside target container
      - apiGroups: [""]
        resources: ["pods/exec"]
        verbs: ["get","list","create"]
      # for configuring and monitor the experiment job by the chaos-runner pod
      - apiGroups: ["batch"]
        resources: ["jobs"]
        verbs: ["create","list","get","delete","deletecollection"]
      # for creation, status polling and deletion of litmus chaos resources used within a chaos workflow
      - apiGroups: ["litmuschaos.io"]
        resources: ["chaosengines","chaosexperiments","chaosresults"]
        verbs: ["create","list","get","patch","update","delete"]
    image: "litmuschaos/go-runner:latest"
    imagePullPolicy: Always
    args:
    - -c
    - ./experiments -name aws-ssm-chaos-by-id
    command:
    - /bin/bash
    env:
    - name: TOTAL_CHAOS_DURATION
      value: '60'

    - name: CHAOS_INTERVAL
      value: '60'
      
    # Period to wait before and after injection of chaos in sec
    - name: RAMP_TIME
      value: ''

    # Instance ID of the target ec2 instance
    # Multiple IDs can also be provided as comma separated values ex: id1,id2
    - name: EC2_INSTANCE_ID
      value: ''

    - name: REGION
      value: ''

    # it defines the sequence of chaos execution for multiple target instances
    # supported values: serial, parallel
    - name: SEQUENCE
      value: 'parallel'

    # Provide the path of aws credentials mounted from secret  
    - name: AWS_SHARED_CREDENTIALS_FILE
      value: '/tmp/cloud_config.yml'      

    # Provide the name of ssm doc 
    # if not using the default stress docs  
    - name: DOCUMENT_NAME
      value: ''

    # Provide the type of ssm doc 
    # if not using the default stress docs  
    - name: DOCUMENT_TYPE
      value: ''

    # Provide the format of ssm doc
    # if not using the default stress docs  
    - name: DOCUMENT_FORMAT
      value: ''

    # Provide the path of ssm doc 
    # if not using the default stress docs  
    - name: DOCUMENT_PATH
      value: ''

    # if you want to install dependencies to run default ssm docs
    - name: INSTALL_DEPENDENCIES
      value: 'True'        

    # provide the number of workers for memory stress
    - name: NUMBER_OF_WORKERS
      value: '1'

    # provide the percentage of available memory to stress
    - name: MEMORY_PERCENTAGE
      value: '80'

    # provide the CPU chores to be comsumed
    # 0 will consume all the available cpu cores
    - name: CPU_CORE
      value: '0'
                
    # provide the LIB
    # only litmus supported
    - name: LIB
      value: 'litmus'  
          
    labels:
      name: aws-ssm-chaos-by-id
      app.kubernetes.io/part-of: litmus
      app.kubernetes.io/component: experiment-job
      app.kubernetes.io/version: latest
    secrets:
    - name: cloud-secret
      mountPath: /tmp/

---