onprem: 2.4.0-rc.1 (#1308)

codefresh-io · Jun 20, 2024 · 4c8c9d3 · 4c8c9d3
1 parent ef2701c
commit 4c8c9d3
Show file tree

Hide file tree

Showing 14 changed files with 288 additions and 90 deletions.
diff --git a/.github/workflows/pr-branch-labeler.yml b/.github/workflows/pr-branch-labeler.yml
@@ -9,4 +9,6 @@ jobs:
       - name: Add base branch label
         uses: ffittschen/pr-branch-labeler@v1
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+
+
diff --git a/codefresh/.ci/values/cfapi-roles-hpa.yaml b/codefresh/.ci/values/cfapi-roles-hpa.yaml
@@ -4,52 +4,57 @@ global:
 
 cfapi: &cf-api
   enabled: false
+  rbac:
+    namespaced: false
 
+cfapi-auth:
+  <<: *cf-api
+  enabled: true
 cfapi-internal:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-ws:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-admin:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-terminators:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-sso-group-synchronizer:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-buildmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-cacheevictmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-eventsmanagersubscriptions:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-kubernetesresourcemonitor:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-environments:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-gitops-resource-receiver:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-downloadlogmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-teams:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-kubernetes-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-test-reporting:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
diff --git a/codefresh/.ci/values/defaults-hpa.yaml b/codefresh/.ci/values/defaults-hpa.yaml
@@ -102,12 +102,17 @@ global:
     key: redis-url
 
 cfapi:
+  rbac:
+    namespaced: false
   hpa:
     enabled: true
   resources:
     requests:
       cpu: 300m
       memory: 1024Mi
+  container:
+    env:
+      DEFAULT_SYSTEM_TYPE: CLASSIC
 
 ingress:
   enabled: true
@@ -160,3 +165,7 @@ argo-platform:
   abac:
     hpa:
       enabled: true
+
+  promotion-orchestrator:
+    hpa:
+      enabled: true
diff --git a/codefresh/.ci/values/mtls-mongodb-redis.yaml b/codefresh/.ci/values/mtls-mongodb-redis.yaml
@@ -7,7 +7,7 @@ global:
   firebaseSecret: ""  # placeholder for ${FIREBASE_SECRET}
 
   mongoURI: "mongodb://cf-mongodb:27017/?ssl=true&authMechanism=MONGODB-X509&authSource=$external"
-  redisUrl: cf-redis-master.codefresh.svc.cluster.local
+  redisUrl: cf-redis
   postgresPort: 6432
 
   volumes:
@@ -49,10 +49,9 @@ global:
 
 ingress:
   enabled: true
+  ingressClassName: nginx-internal
   tls:
-    enabled: true
-    cert: ""  # placeholder for ${WEB_TLS_CERT}
-    key: "" # placeholder for ${WEB_TLS_KEY}
+    enabled: false
 
 mongodb:
   auth:
@@ -123,7 +122,33 @@ postgresql:
         postgresql: 6432
 
 secrets:
+  ext-redis:
+    enabled: true
+    stringData:
+      redis-url: cf-redis
+      redis-password: hoC9szf7NtrU
   mongodb-tls:
     enabled: true
     data:
-      ca.pem: "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"
+      ca.pem: "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"
+
+extraResources:
+- apiVersion: v1
+  kind: Service
+  metadata:
+    name: cf-redis
+    namespace: codefresh-mtls
+  spec:
+    ports:
+    - name: tcp-redis
+      port: 6379
+      protocol: TCP
+      targetPort: redis
+    selector:
+      app.kubernetes.io/component: master
+      app.kubernetes.io/instance: cf
+      app.kubernetes.io/name: redis
+    type: ClusterIP
+
+seed-e2e:
+  enabled: false
diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
@@ -4,10 +4,10 @@ dependencies:
   version: 0.18.1
 - name: internal-gateway
   repository: oci://quay.io/codefresh/charts
-  version: 0.6.0
+  version: 0.7.0
 - name: consul
   repository: https://charts.bitnami.com/bitnami
-  version: 11.0.0
+  version: 11.1.9
 - name: mongodb
   repository: https://charts.bitnami.com/bitnami
   version: 14.4.1
@@ -40,94 +40,97 @@ dependencies:
   version: 4.10.0
 - name: cluster-providers
   repository: oci://quay.io/codefresh/charts
-  version: 1.17.4
+  version: 1.17.6
 - name: kube-integration
   repository: oci://quay.io/codefresh/charts
-  version: 1.31.4
+  version: 1.31.7
 - name: charts-manager
   repository: oci://quay.io/codefresh/charts
-  version: 1.16.12
+  version: 1.17.1
 - name: cfsign
   repository: oci://quay.io/codefresh/charts
-  version: 1.8.0
+  version: 1.8.1
 - name: tasker-kubernetes
   repository: oci://quay.io/codefresh/charts
-  version: 1.26.3
+  version: 1.26.8
 - name: context-manager
   repository: oci://quay.io/codefresh/charts
-  version: 2.27.2
+  version: 2.29.3
 - name: pipeline-manager
   repository: oci://quay.io/codefresh/charts
-  version: 3.133.5
+  version: 3.134.7
 - name: gitops-dashboard-manager
   repository: oci://quay.io/codefresh/charts
-  version: 1.14.11
+  version: 1.14.12
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.248.47
+  version: 21.253.42
+- name: cfapi
+  repository: oci://quay.io/codefresh/charts
+  version: 21.253.42
 - name: cfui
   repository: oci://quay.io/codefresh/charts
-  version: 14.93.94
+  version: 14.94.76
 - name: k8s-monitor
   repository: oci://quay.io/codefresh/charts
   version: 4.11.6
 - name: runtime-environment-manager
   repository: oci://quay.io/codefresh/charts
-  version: 3.34.2
+  version: 3.35.6
 - name: cf-broadcaster
   repository: oci://quay.io/codefresh/charts
-  version: 1.12.9
+  version: 1.12.13
 - name: helm-repo-manager
   repository: oci://quay.io/codefresh/charts
-  version: 0.14.0
+  version: 0.15.0
 - name: hermes
   repository: oci://quay.io/codefresh/charts
   version: 0.21.8
@@ -139,18 +142,18 @@ dependencies:
   version: 0.8.5
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.37
+  version: 0.49.46
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.37
+  version: 0.49.46
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.2726.0
+  version: 1.2902.0
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
-  version: 0.1.11
+  version: 0.1.12
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
-  version: 0.0.14
-digest: sha256:42a135491dffa22e2a8a953231e1ab8a8018c2e233818885dce1f77ec087c52b
-generated: "2024-03-26T21:45:24.814558482+03:00"
+  version: 0.0.15
+digest: sha256:a2838c04a731b9fa53322d5e0732ce6af98dbfb54627feef569f90e481fd527a
+generated: "2024-06-20T21:45:49.135939035+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.3.0
+version: 2.4.0-rc.1
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -11,25 +11,30 @@ sources:
 maintainers:
   - name: codefresh
     url: https://codefresh-io.github.io/
-appVersion: 2.3.0
+appVersion: 2.4.0
 annotations:
+  artifacthub.io/prerelease: "true"
   artifacthub.io/alternativeName: "codefresh-onprem"
+  artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
     - kind: changed
-      description: Onprem 2.3.0 release
-      links:
-        - name: Changes
-          url: https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-23
+      description: Onprem 2.4.0-rc.1 pre-release
+    - kind: changed
+      description: Update MongoDB image to 6.0
+    - kind: added
+      description: Added cfapi-auth role
+    - kind: changed
+      description: Update internal-gateway to 0.7.0 for cfapi-auth
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
     version: 0.18.1
   - name: internal-gateway
     repository: oci://quay.io/codefresh/charts
-    version: 0.6.0
+    version: 0.7.0
     condition: internal-gateway.enabled
   - name: consul
-    version: 11.0.0
+    version: 11.1.9
     repository: https://charts.bitnami.com/bitnami
     condition: consul.enabled
   - name: mongodb
@@ -109,6 +114,11 @@ dependencies:
     version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi.enabled
+  - name: cfapi
+    alias: cfapi-auth
+    version: "*"
+    repository: oci://quay.io/codefresh/charts
+    condition: cfapi-auth.enabled
   - name: cfapi
     alias: cfapi-internal
     version: "*"