bump app-proxy v0.0.14 (#191)

* bump app-proxy v0.0.14

* fix

* wip

* wip

* wip

* wip

* wip

* readiness

Author: roi-codefresh

Makefile

@@ -1,4 +1,4 @@
-VERSION=v0.0.175
+VERSION=v0.0.176
 
 OUT_DIR=dist
 YEAR?=$(shell date +"%Y")

docs/releases/release_notes.md

@@ -23,7 +23,7 @@ cf version
 
 ```bash
 # download and extract the binary
-curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.175/cf-linux-amd64.tar.gz | tar zx
+curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.176/cf-linux-amd64.tar.gz | tar zx
 
 # move the binary to your $PATH
 mv ./cf-linux-amd64 /usr/local/bin/cf
@@ -36,7 +36,7 @@ cf version
 
 ```bash
 # download and extract the binary
-curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.175/cf-darwin-amd64.tar.gz | tar zx
+curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.176/cf-darwin-amd64.tar.gz | tar zx
 
 # move the binary to your $PATH
 mv ./cf-darwin-amd64 /usr/local/bin/cf

manifests/app-proxy/app-proxy.deploy.yaml

@@ -57,13 +57,14 @@ spec:
           name: cap-app-proxy
           livenessProbe:
             initialDelaySeconds: 5
-            timeoutSeconds: 3
+            timeoutSeconds: 10
+            failureThreshold: 10
             httpGet:
               port: http
               path: /api/ping
           readinessProbe:
             initialDelaySeconds: 5
-            timeoutSeconds: 3
+            timeoutSeconds: 10
             httpGet:
               port: http
               path: /api/ping

manifests/app-proxy/app-proxy.crb.yaml renamed to manifests/app-proxy/app-proxy.rb.yaml

@@ -1,14 +1,13 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
+kind: RoleBinding
 metadata:
   labels:
     app: cap-app-proxy
   name: cap-app-proxy
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: argo-server-cluster-role
+  kind: Role
+  name: cap-app-proxy
 subjects:
   - kind: ServiceAccount
     name: cap-app-proxy
-    namespace: default

manifests/app-proxy/app-proxy.role.yaml

@@ -0,0 +1,19 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  labels:
+    app: cap-app-proxy
+  name: cap-app-proxy
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - get
+      - create
+      - delete
+      - update
+      - patch
+      - list
+      - watch

manifests/app-proxy/kustomization.yaml

@@ -3,10 +3,11 @@ kind: Kustomization
 images:
   - name: quay.io/codefresh/cap-app-proxy
     newName: quay.io/codefresh/cap-app-proxy
-    newTag: v0.0.13
+    newTag: v0.0.14
 resources:
   - app-proxy.deploy.yaml
   - app-proxy.svc.yaml
   - app-proxy.sa.yaml
-  - app-proxy.crb.yaml
+  - app-proxy.rb.yaml
+  - app-proxy.role.yaml
   - app-proxy.cm.yaml

manifests/argo-workflows/kustomization.yaml

@@ -4,7 +4,7 @@ resources:
   - https://github.com/codefresh-io/argo-workflows/releases/download/v3.2.4-cap-CR-6798/install.yaml
 
 patches:
-  # reset the crbs to `subject.namespace: default`, so that argo-workflows will later change them to the actual ns
+  # reset the crbs to `subject.namespace: default`, so that argo-cd will later change them to the actual ns
   - target:
       group: rbac.authorization.k8s.io
       version: v1
@@ -13,6 +13,17 @@ patches:
       - op: replace
         path: /subjects/0/namespace
         value: default
+  # add to the app-proxy service account the required permissions
+  # to manipulate workflows
+  - target:
+      group: rbac.authorization.k8s.io
+      version: v1
+      kind: ClusterRoleBinding
+      name: argo-server-binding
+    patch: |-
+      - op: add
+        path: /subjects/1
+        value: { "kind": "ServiceAccount", "name": "cap-app-proxy", "namespace": "default" }
 
   - target:
       group: apps
@@ -25,7 +36,7 @@ patches:
         value: --auth-mode=server
 
 configMapGenerator:
-- name: workflow-controller-configmap
-  behavior: merge
-  literals:
-    - containerRuntimeExecutor=emissary
+  - name: workflow-controller-configmap
+    behavior: merge
+    literals:
+      - containerRuntimeExecutor=emissary

manifests/runtime.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: "{{ namespace }}"
 spec:
   defVersion: 1.0.0
-  version: 0.0.175
+  version: 0.0.176
   bootstrapSpecifier: github.com/codefresh-io/cli-v2/manifests/argo-cd
   components:
     - name: events