From 1c4463038f1ba0d4cdae2166ae44e2750eacdf4b Mon Sep 17 00:00:00 2001
From: cf-ci-bot <integration@codefresh.io>
Date: Fri, 21 Jun 2024 08:11:45 +0000
Subject: [PATCH 01/24] create onprem-release-2.4.0-rc branch

---
 codefresh/Chart.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index a4159c6fa7..f0d48efccf 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -86,7 +86,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: kube-integration.enabled
   - name: charts-manager
-    version: "*"
+    version: "~1.17.0"
     repository: oci://quay.io/codefresh/charts
     condition: charts-manager.enabled
   - name: cfsign
@@ -98,7 +98,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: tasker-kubernetes.enabled
   - name: context-manager
-    version: "*"
+    version: "~2.29.0"
     repository: oci://quay.io/codefresh/charts
     condition: context-manager.enabled
   - name: pipeline-manager
@@ -208,7 +208,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: k8s-monitor.enabled
   - name: runtime-environment-manager
-    version: "*"
+    version: "~3.35.0"
     repository: oci://quay.io/codefresh/charts
     condition: runtime-environment-manager.enabled
   - name: cf-broadcaster
@@ -216,7 +216,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: cf-broadcaster.enabled
   - name: helm-repo-manager
-    version: "*"
+    version: "~0.15.0"
     repository: oci://quay.io/codefresh/charts
     condition: helm-repo-manager.enabled
   - name: hermes

From a8554c4401b6b8e4df1d782fecf5e4d9dd5ae71e Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Fri, 21 Jun 2024 11:18:10 +0300
Subject: [PATCH 02/24] upd Chart.yaml

---
 codefresh/Chart.yaml | 40 ++++++++++++++++++++--------------------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index f0d48efccf..d254a3adf9 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -102,7 +102,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: context-manager.enabled
   - name: pipeline-manager
-    version: "*"
+    version: "~3.134.0"
     repository: oci://quay.io/codefresh/charts
     condition: pipeline-manager.enabled
   - name: gitops-dashboard-manager
@@ -111,96 +111,96 @@ dependencies:
     condition: gitops-dashboard-manager.enabled
   - name: cfapi
     alias: cfapi
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi.enabled
   - name: cfapi
     alias: cfapi-auth
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-auth.enabled
   - name: cfapi
     alias: cfapi-internal
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-internal.enabled
   - name: cfapi
     alias: cfapi-ws
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-ws.enabled
   - name: cfapi
     alias: cfapi-admin
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-admin.enabled
   - name: cfapi
     alias: cfapi-endpoints
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-endpoints.enabled
   - name: cfapi
     alias: cfapi-terminators
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-terminators.enabled
   - name: cfapi
     alias: cfapi-sso-group-synchronizer
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-sso-group-synchronizer.enabled
   - name: cfapi
     alias: cfapi-buildmanager
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-buildmanager.enabled
   - name: cfapi
     alias: cfapi-cacheevictmanager
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-cacheevictmanager.enabled
   - name: cfapi
     alias: cfapi-eventsmanagersubscriptions
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-eventsmanagersubscriptions.enabled
   - name: cfapi
     alias: cfapi-kubernetesresourcemonitor
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-kubernetesresourcemonitor.enabled
   - name: cfapi
     alias: cfapi-environments
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-environments.enabled
   - name: cfapi
     alias: cfapi-gitops-resource-receiver
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-gitops-resource-receiver.enabled
   - name: cfapi
     alias: cfapi-downloadlogmanager
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-downloadlogmanager.enabled
   - name: cfapi
     alias: cfapi-teams
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-teams.enabled
   - name: cfapi
     alias: cfapi-kubernetes-endpoints
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-kubernetes-endpoints.enabled
   - name: cfapi
     alias: cfapi-test-reporting
-    version: "*"
+    version: "~21.253.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-test-reporting.enabled
   - name: cfui
-    version: "*"
+    version: "~14.94.0"
     repository: oci://quay.io/codefresh/charts
     condition: cfui.enabled
   - name: k8s-monitor

From fcc5e781331292660695d850e6b4db9fb1820569 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Fri, 21 Jun 2024 12:23:11 +0300
Subject: [PATCH 03/24] onprem: 2.4.0-rc.2 (#1309)

---
 codefresh/Chart.lock |  4 ++--
 codefresh/Chart.yaml | 12 +++---------
 codefresh/README.md  |  2 +-
 3 files changed, 6 insertions(+), 12 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 0188f6e770..bb438b6de0 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:a2838c04a731b9fa53322d5e0732ce6af98dbfb54627feef569f90e481fd527a
-generated: "2024-06-20T21:45:49.135939035+03:00"
+digest: sha256:8156c980d95e31297c9ab121bf0456513e2f940779aac319a1a102588a2a943c
+generated: "2024-06-21T11:27:48.323562079+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index d254a3adf9..2d070d443c 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0-rc.1
+version: 2.4.0-rc.2
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -15,16 +15,10 @@ appVersion: 2.4.0
 annotations:
   artifacthub.io/prerelease: "true"
   artifacthub.io/alternativeName: "codefresh-onprem"
-  artifacthub.io/containsSecurityUpdates: "true"
+  # artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
     - kind: changed
-      description: Onprem 2.4.0-rc.1 pre-release
-    - kind: changed
-      description: Update MongoDB image to 6.0
-    - kind: added
-      description: Added cfapi-auth role
-    - kind: changed
-      description: Update internal-gateway to 0.7.0 for cfapi-auth
+      description: Change default SYSTEM_TYPE for accounts to PROJECT_ONE
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index 52c406e5c9..a757c0a89e 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0-rc.1](https://img.shields.io/badge/Version-2.4.0--rc.1-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.0-rc.2](https://img.shields.io/badge/Version-2.4.0--rc.2-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From b5c6505ceddc96de7ba77d62d55bac13c9e7a5f7 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Fri, 21 Jun 2024 14:49:19 +0300
Subject: [PATCH 04/24] onprem: 2.4.0-rc.3 (#1310)

---
 codefresh/.ci/values/cfapi-roles-no-rbac.yaml | 56 +++++++++++++++
 codefresh/.ci/values/values-upgrade.yaml      |  3 +
 codefresh/Chart.yaml                          |  6 +-
 codefresh/README.md                           | 69 ++++++++++++++-----
 codefresh/README.md.gotmpl                    | 67 +++++++++++++-----
 5 files changed, 163 insertions(+), 38 deletions(-)
 create mode 100644 codefresh/.ci/values/cfapi-roles-no-rbac.yaml
 create mode 100644 codefresh/.ci/values/values-upgrade.yaml

diff --git a/codefresh/.ci/values/cfapi-roles-no-rbac.yaml b/codefresh/.ci/values/cfapi-roles-no-rbac.yaml
new file mode 100644
index 0000000000..5e7432dfd5
--- /dev/null
+++ b/codefresh/.ci/values/cfapi-roles-no-rbac.yaml
@@ -0,0 +1,56 @@
+cfapi: &cf-api
+  enabled: false
+  rbac:
+    namespaced: true
+
+cfapi-auth:
+  <<: *cf-api
+  enabled: true
+cfapi-internal:
+  <<: *cf-api
+  enabled: true
+cfapi-ws:
+  <<: *cf-api
+  enabled: true
+cfapi-admin:
+  <<: *cf-api
+  enabled: true
+cfapi-endpoints:
+  <<: *cf-api
+  enabled: true
+cfapi-terminators:
+  <<: *cf-api
+  enabled: true
+cfapi-sso-group-synchronizer:
+  <<: *cf-api
+  enabled: true
+cfapi-buildmanager:
+  <<: *cf-api
+  enabled: true
+cfapi-cacheevictmanager:
+  <<: *cf-api
+  enabled: true
+cfapi-eventsmanagersubscriptions:
+  <<: *cf-api
+  enabled: true
+cfapi-kubernetesresourcemonitor:
+  <<: *cf-api
+  enabled: true
+cfapi-environments:
+  <<: *cf-api
+  enabled: true
+cfapi-gitops-resource-receiver:
+  <<: *cf-api
+  enabled: true
+cfapi-downloadlogmanager:
+  <<: *cf-api
+  enabled: true
+cfapi-teams:
+  <<: *cf-api
+  enabled: true
+cfapi-kubernetes-endpoints:
+  <<: *cf-api
+  enabled: true
+cfapi-test-reporting:
+  <<: *cf-api
+  enabled: true
diff --git a/codefresh/.ci/values/values-upgrade.yaml b/codefresh/.ci/values/values-upgrade.yaml
new file mode 100644
index 0000000000..748d509d5f
--- /dev/null
+++ b/codefresh/.ci/values/values-upgrade.yaml
@@ -0,0 +1,3 @@
+cfapi:
+  rbac:
+    namespaced: true
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 2d070d443c..35bc9c9566 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0-rc.2
+version: 2.4.0-rc.3
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -17,8 +17,8 @@ annotations:
   artifacthub.io/alternativeName: "codefresh-onprem"
   # artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
-    - kind: changed
-      description: Change default SYSTEM_TYPE for accounts to PROJECT_ONE
+    - kind: added
+      description: Update docs for 2.4.x upgrade
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index a757c0a89e..8f9cecbd96 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0-rc.2](https://img.shields.io/badge/Version-2.4.0--rc.2-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.0-rc.3](https://img.shields.io/badge/Version-2.4.0--rc.3-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 
@@ -42,6 +42,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
   - [To 2.1.7](#to-2-1-7)
   - [To 2.2.0](#to-2-2-0)
   - [To 2.3.0](#to-2-3-0)
+  - [To 2.4.0](#to-2-4-0)
 - [Rollback](#rollback)
 - [Troubleshooting](#troubleshooting)
 - [Values](#values)
@@ -722,53 +723,56 @@ cfapi: &cf-api
   hpa:
     enabled: true
 # Enable cf-api roles
+cfapi-auth:
+  <<: *cf-api
+  enabled: true
 cfapi-internal:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-ws:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-admin:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-terminators:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-sso-group-synchronizer:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-buildmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-cacheevictmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-eventsmanagersubscriptions:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-kubernetesresourcemonitor:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-environments:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-gitops-resource-receiver:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-downloadlogmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-teams:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-kubernetes-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-test-reporting:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 ```
 
@@ -1885,6 +1889,35 @@ helm rollback $RELEASE_NAME $RELEASE_NUMBER \
     --wait
 ```
 
+### To 2.4.0
+
+### [What's new in 2.4.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-24)
+
+#### New cfapi-auth role
+
+New `cfapi-auth` role is introduced in 2.4.x.
+
+If you run onprem with [multi-role cfapi configuration](#configuration-with-multi-role-cf-api), make sure to **enable** `cfapi-auth` role:
+
+```yaml
+cfapi-auth:
+  <<: *cf-api
+  enabled: true
+```
+
+#### Default SYSTEM_TYPE for acccounts
+
+Since 2.4.x, `SYSTEM_TYPE` is changed to `PROJECT_ONE` by default.
+
+If you want to preserve original `CLASSIC` values, update cfapi environment variables:
+
+```yaml
+cfapi:
+  container:
+    env:
+      DEFAULT_SYSTEM_TYPE: CLASSIC
+```
+
 ## Troubleshooting
 
 ### Error: Failed to validate connection to Docker daemon; caused by Error: certificate has expired
@@ -2175,4 +2208,4 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server
 | seed.postgresSeedJob.postgresUser | optional | `""` | "postgres" admin user in plain text (required ONLY for seed job!) Must be a privileged user allowed to create databases and grant roles. If omitted, username and password from `.Values.global.postgresUser/postgresPassword` will be used. |
 | seed.postgresSeedJob.postgresUserSecretKeyRef | optional | `{}` | "postgres" admin user from exising secret |
 | tasker-kubernetes | object | `{"affinity":{},"container":{"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/tasker-kubernetes"}},"enabled":true,"hpa":{"enabled":false},"nodeSelector":{},"pdb":{"enabled":false},"podSecurityContext":{},"resources":{"limits":{},"requests":{"cpu":"100m","memory":"128Mi"}},"tolerations":[]}` | tasker-kubernetes |
-| webTLS | object | `{"cert":"","enabled":false,"key":"","secretName":"star.codefresh.io"}` | DEPRECATED - Use `.Values.ingress.tls` instead TLS secret for Ingress |
\ No newline at end of file
+| webTLS | object | `{"cert":"","enabled":false,"key":"","secretName":"star.codefresh.io"}` | DEPRECATED - Use `.Values.ingress.tls` instead TLS secret for Ingress |
diff --git a/codefresh/README.md.gotmpl b/codefresh/README.md.gotmpl
index cde03d3c27..304b27432c 100644
--- a/codefresh/README.md.gotmpl
+++ b/codefresh/README.md.gotmpl
@@ -42,6 +42,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
   - [To 2.1.7](#to-2-1-7)
   - [To 2.2.0](#to-2-2-0)
   - [To 2.3.0](#to-2-3-0)
+  - [To 2.4.0](#to-2-4-0)
 - [Rollback](#rollback)
 - [Troubleshooting](#troubleshooting)
 - [Values](#values)
@@ -725,53 +726,56 @@ cfapi: &cf-api
   hpa:
     enabled: true
 # Enable cf-api roles
+cfapi-auth:
+  <<: *cf-api
+  enabled: true
 cfapi-internal:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-ws:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-admin:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-terminators:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-sso-group-synchronizer:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-buildmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-cacheevictmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-eventsmanagersubscriptions:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-kubernetesresourcemonitor:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-environments:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-gitops-resource-receiver:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-downloadlogmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-teams:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-kubernetes-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 cfapi-test-reporting:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: true
 ```
 
@@ -1893,6 +1897,35 @@ helm rollback $RELEASE_NAME $RELEASE_NUMBER \
     --wait
 ```
 
+### To 2.4.0
+
+### [What's new in 2.4.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-24)
+
+#### New cfapi-auth role
+
+New `cfapi-auth` role is introduced in 2.4.x.
+
+If you run onprem with [multi-role cfapi configuration](#configuration-with-multi-role-cf-api), make sure to **enable** `cfapi-auth` role:
+
+```yaml
+cfapi-auth:
+  <<: *cf-api
+  enabled: true
+```
+
+#### Default SYSTEM_TYPE for acccounts
+
+Since 2.4.x, `SYSTEM_TYPE` is changed to `PROJECT_ONE` by default.
+
+If you want to preserve original `CLASSIC` values, update cfapi environment variables:
+
+```yaml
+cfapi:
+  container:
+    env:
+      DEFAULT_SYSTEM_TYPE: CLASSIC
+```
+
 ## Troubleshooting
 
 ### Error: Failed to validate connection to Docker daemon; caused by Error: certificate has expired
@@ -1954,4 +1987,4 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server
 ./configure-dind-certs.sh -n $RUNTIME_NAMESPACE https://$CODEFRESH_HOST $CODEFRESH_API_TOKEN
 ```
 
-{{ template "chart.valuesSection" . }}
\ No newline at end of file
+{{ template "chart.valuesSection" . }}

From 99aa5f6d0a02c130563ea61cb831ffbf836be870 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Fri, 21 Jun 2024 16:58:53 +0300
Subject: [PATCH 05/24] onprem: 2.4.0-rc.4 (#1311)

---
 codefresh/Chart.yaml        |  6 +++---
 codefresh/README.md         |  2 +-
 codefresh/values.yaml       | 40 ++++++++++++++++++-------------------
 scripts/update_re_images.sh |  4 +++-
 4 files changed, 27 insertions(+), 25 deletions(-)

diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 35bc9c9566..3dc30c6933 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0-rc.3
+version: 2.4.0-rc.4
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -17,8 +17,8 @@ annotations:
   artifacthub.io/alternativeName: "codefresh-onprem"
   # artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
-    - kind: added
-      description: Update docs for 2.4.x upgrade
+    - kind: changed
+      description: Update runtime images
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index 8f9cecbd96..03652dcf51 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0-rc.3](https://img.shields.io/badge/Version-2.4.0--rc.3-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.0-rc.4](https://img.shields.io/badge/Version-2.4.0--rc.4-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 
diff --git a/codefresh/values.yaml b/codefresh/values.yaml
index a919bb6a7b..5e7a43d060 100644
--- a/codefresh/values.yaml
+++ b/codefresh/values.yaml
@@ -456,12 +456,12 @@ postgresqlCleanJob:
 runtimeImages:
   COMPOSE_IMAGE: quay.io/codefresh/compose:v2.20.3-1.4.0
   CONTAINER_LOGGER_IMAGE: quay.io/codefresh/cf-container-logger:1.11.4
-  DIND_IMAGE: quay.io/codefresh/dind:25.0.4-1.28.5
+  DIND_IMAGE: quay.io/codefresh/dind:26.0.0-1.28.6
   DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.3.11
-  DOCKER_PULLER_IMAGE: quay.io/codefresh/cf-docker-puller:8.0.14
+  DOCKER_PULLER_IMAGE: quay.io/codefresh/cf-docker-puller:8.0.17
   DOCKER_PUSHER_IMAGE: quay.io/codefresh/cf-docker-pusher:6.0.13
   DOCKER_TAG_PUSHER_IMAGE: quay.io/codefresh/cf-docker-tag-pusher:1.3.11
-  ENGINE_IMAGE: quay.io/codefresh/engine:1.169.9
+  ENGINE_IMAGE: quay.io/codefresh/engine:1.171.3
   FS_OPS_IMAGE: quay.io/codefresh/fs-ops:1.2.7
   GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.1.27
   KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:16.2.6
@@ -542,70 +542,70 @@ cfapi: &cf-api
 # cfapi roles
 # @ignored internal
 cfapi-auth:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 cfapi-internal:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored ws
 cfapi-ws:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored admin
 cfapi-admin:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored endpoints
 cfapi-endpoints:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored terminators
 cfapi-terminators:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored sso-group-synchronizer
 cfapi-sso-group-synchronizer:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored buildmanager
 cfapi-buildmanager:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored cacheevictmanager
 cfapi-cacheevictmanager:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored eventsmanagersubscriptions
 cfapi-eventsmanagersubscriptions:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored kubernetesresourcemonitor
 cfapi-kubernetesresourcemonitor:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored environments
 cfapi-environments:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored gitops-resource-receiver
 cfapi-gitops-resource-receiver:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored downloadlogmanager
 cfapi-downloadlogmanager:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored teams
 cfapi-teams:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored kubernetes-endpoints
 cfapi-kubernetes-endpoints:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 # @ignored test-reporting
 cfapi-test-reporting:
-  <<: *cf-api
+  !!merge <<: *cf-api
   enabled: false
 
 # -- internal-gateway
diff --git a/scripts/update_re_images.sh b/scripts/update_re_images.sh
index f7ccbc81dd..dfed0a8db5 100755
--- a/scripts/update_re_images.sh
+++ b/scripts/update_re_images.sh
@@ -56,5 +56,7 @@ for k in ${RUNTIME_IMAGES[@]}; do
    fi
 done
 
+sed -i 's|us-docker.pkg.dev/codefresh-inc/public-gcr-io|quay.io|' $CHARTDIR/values.yaml
+
 msg "The list of updated runtime images:\n"
-echo -e "\e[33m$(cat $CHARTDIR/values.yaml)\e[0m"
\ No newline at end of file
+echo -e "\e[33m$(cat $CHARTDIR/values.yaml)\e[0m"

From 3b424334a4aa5b4cc3c0a7ee9f8be9247629074f Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Sat, 22 Jun 2024 00:11:42 +0300
Subject: [PATCH 06/24] onprem: 2.4.0-rc.5 (#1312)

---
 codefresh/Chart.lock | 10 +++++-----
 codefresh/Chart.yaml |  8 ++++----
 codefresh/README.md  |  2 +-
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index bb438b6de0..da2e4f1b8e 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -127,7 +127,7 @@ dependencies:
   version: 3.35.6
 - name: cf-broadcaster
   repository: oci://quay.io/codefresh/charts
-  version: 1.12.13
+  version: 1.12.14
 - name: helm-repo-manager
   repository: oci://quay.io/codefresh/charts
   version: 0.15.0
@@ -142,10 +142,10 @@ dependencies:
   version: 0.8.5
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.46
+  version: 0.49.47
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.46
+  version: 0.49.47
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
   version: 1.2902.0
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:8156c980d95e31297c9ab121bf0456513e2f940779aac319a1a102588a2a943c
-generated: "2024-06-21T11:27:48.323562079+03:00"
+digest: sha256:16d2321b39b38c435286704078a47b7c27a2909860da19b4b2800370017c15cd
+generated: "2024-06-21T18:38:18.741472976+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 3dc30c6933..858e745cf6 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0-rc.4
+version: 2.4.0-rc.5
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -17,8 +17,8 @@ annotations:
   artifacthub.io/alternativeName: "codefresh-onprem"
   # artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
-    - kind: changed
-      description: Update runtime images
+    - kind: fixed
+      description: Fix platform-analytics for Mongo MTLS
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
@@ -236,7 +236,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-platform
-    version: "*"
+    version: "1.2902.0"
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-hub-platform
diff --git a/codefresh/README.md b/codefresh/README.md
index 03652dcf51..d168160944 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0-rc.4](https://img.shields.io/badge/Version-2.4.0--rc.4-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.0-rc.5](https://img.shields.io/badge/Version-2.4.0--rc.5-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From 1922203bf1060ca4548378b3c05ca802eb642c8e Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Wed, 26 Jun 2024 10:47:24 +0300
Subject: [PATCH 07/24] onprem: 2.4.0-rc.6 (#1313)

---
 codefresh/Chart.lock | 40 ++++++++++++++++++++--------------------
 codefresh/Chart.yaml |  6 +++---
 codefresh/README.md  |  2 +-
 3 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index da2e4f1b8e..b8a66016d6 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -64,58 +64,58 @@ dependencies:
   version: 1.14.12
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.42
+  version: 21.253.43
 - name: cfui
   repository: oci://quay.io/codefresh/charts
   version: 14.94.76
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:16d2321b39b38c435286704078a47b7c27a2909860da19b4b2800370017c15cd
-generated: "2024-06-21T18:38:18.741472976+03:00"
+digest: sha256:e500b2f92f92d681268b48faeb544bcc3c5bd0b7adb299dc340f9acef9065968
+generated: "2024-06-25T12:43:23.123520411+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 858e745cf6..cf2b58f940 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0-rc.5
+version: 2.4.0-rc.6
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -17,8 +17,8 @@ annotations:
   artifacthub.io/alternativeName: "codefresh-onprem"
   # artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
-    - kind: fixed
-      description: Fix platform-analytics for Mongo MTLS
+    - kind: changed
+      description: Enable delightedSurvey feature flag
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index d168160944..73026835e1 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0-rc.5](https://img.shields.io/badge/Version-2.4.0--rc.5-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.0-rc.6](https://img.shields.io/badge/Version-2.4.0--rc.6-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From 2ee31643a2b09347ea1f67deaee45756b56e4a10 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Sat, 29 Jun 2024 21:39:47 +0300
Subject: [PATCH 08/24] onprem: 2.4.0-rc.7 (#1314)

---
 codefresh/Chart.lock | 20 ++++++++++----------
 codefresh/Chart.yaml | 10 ++++++----
 codefresh/README.md  |  2 +-
 3 files changed, 17 insertions(+), 15 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index b8a66016d6..2996a2ed56 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -40,7 +40,7 @@ dependencies:
   version: 4.10.0
 - name: cluster-providers
   repository: oci://quay.io/codefresh/charts
-  version: 1.17.6
+  version: 1.17.7
 - name: kube-integration
   repository: oci://quay.io/codefresh/charts
   version: 1.31.7
@@ -52,7 +52,7 @@ dependencies:
   version: 1.8.1
 - name: tasker-kubernetes
   repository: oci://quay.io/codefresh/charts
-  version: 1.26.8
+  version: 1.26.9
 - name: context-manager
   repository: oci://quay.io/codefresh/charts
   version: 2.29.3
@@ -61,7 +61,7 @@ dependencies:
   version: 3.134.7
 - name: gitops-dashboard-manager
   repository: oci://quay.io/codefresh/charts
-  version: 1.14.12
+  version: 1.14.13
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
   version: 21.253.43
@@ -118,7 +118,7 @@ dependencies:
   version: 21.253.43
 - name: cfui
   repository: oci://quay.io/codefresh/charts
-  version: 14.94.76
+  version: 14.94.77
 - name: k8s-monitor
   repository: oci://quay.io/codefresh/charts
   version: 4.11.6
@@ -133,13 +133,13 @@ dependencies:
   version: 0.15.0
 - name: hermes
   repository: oci://quay.io/codefresh/charts
-  version: 0.21.8
+  version: 0.21.9
 - name: nomios
   repository: oci://quay.io/codefresh/charts
-  version: 0.11.5
+  version: 0.11.6
 - name: cronus
   repository: oci://quay.io/codefresh/charts
-  version: 0.8.5
+  version: 0.8.6
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
   version: 0.49.47
@@ -148,12 +148,12 @@ dependencies:
   version: 0.49.47
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.2902.0
+  version: 1.2911.0
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
   version: 0.1.12
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:e500b2f92f92d681268b48faeb544bcc3c5bd0b7adb299dc340f9acef9065968
-generated: "2024-06-25T12:43:23.123520411+03:00"
+digest: sha256:afd6bb6e7aeac4de925b73c8f5ed30dd8eeefd80b77a973945c77394978fa305
+generated: "2024-06-29T20:13:11.761713031+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index cf2b58f940..1ae99f406c 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0-rc.6
+version: 2.4.0-rc.7
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -15,10 +15,12 @@ appVersion: 2.4.0
 annotations:
   artifacthub.io/prerelease: "true"
   artifacthub.io/alternativeName: "codefresh-onprem"
-  # artifacthub.io/containsSecurityUpdates: "true"
+  artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
     - kind: changed
-      description: Enable delightedSurvey feature flag
+      description: Update cf-ui, argo-platform
+    - kind: security
+      description: Misc security updates
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
@@ -236,7 +238,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-platform
-    version: "1.2902.0"
+    version: "1.2911.0"
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-hub-platform
diff --git a/codefresh/README.md b/codefresh/README.md
index 73026835e1..4325e7dd96 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0-rc.6](https://img.shields.io/badge/Version-2.4.0--rc.6-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.0-rc.7](https://img.shields.io/badge/Version-2.4.0--rc.7-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From b98a591680f1b5fc07a8db1e58428c23ce1f6b96 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Tue, 2 Jul 2024 10:50:04 +0300
Subject: [PATCH 09/24] onprem: 2.4.0 (#1315)

---
 codefresh/Chart.lock | 10 +++++-----
 codefresh/Chart.yaml |  6 ++----
 codefresh/README.md  |  2 +-
 3 files changed, 8 insertions(+), 10 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 2996a2ed56..b8a1a7f792 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -43,7 +43,7 @@ dependencies:
   version: 1.17.7
 - name: kube-integration
   repository: oci://quay.io/codefresh/charts
-  version: 1.31.7
+  version: 1.31.8
 - name: charts-manager
   repository: oci://quay.io/codefresh/charts
   version: 1.17.1
@@ -142,10 +142,10 @@ dependencies:
   version: 0.8.6
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.47
+  version: 0.49.48
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.47
+  version: 0.49.48
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
   version: 1.2911.0
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:afd6bb6e7aeac4de925b73c8f5ed30dd8eeefd80b77a973945c77394978fa305
-generated: "2024-06-29T20:13:11.761713031+03:00"
+digest: sha256:93d3780111076127ba2d1818ea7ad3cbe120eeaaeebc2a4a82fb49b11e765409
+generated: "2024-07-02T10:02:41.675438222+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 1ae99f406c..b456c384b1 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0-rc.7
+version: 2.4.0
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -13,12 +13,10 @@ maintainers:
     url: https://codefresh-io.github.io/
 appVersion: 2.4.0
 annotations:
-  artifacthub.io/prerelease: "true"
+  # artifacthub.io/prerelease: "true"
   artifacthub.io/alternativeName: "codefresh-onprem"
   artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
-    - kind: changed
-      description: Update cf-ui, argo-platform
     - kind: security
       description: Misc security updates
 dependencies:
diff --git a/codefresh/README.md b/codefresh/README.md
index 4325e7dd96..5e35caff30 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0-rc.7](https://img.shields.io/badge/Version-2.4.0--rc.7-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.0](https://img.shields.io/badge/Version-2.4.0-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From 92c7bab3eb7a99c04f577937d42065cca61fec95 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Thu, 4 Jul 2024 16:44:07 +0300
Subject: [PATCH 10/24] onprem: 2.4.1 (#1318)

---
 codefresh/Chart.lock  | 14 +++++++-------
 codefresh/Chart.yaml  | 10 ++++++----
 codefresh/README.md   |  4 ++--
 codefresh/values.yaml |  4 ++--
 4 files changed, 17 insertions(+), 15 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index b8a1a7f792..b8dfaa81cc 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -4,10 +4,10 @@ dependencies:
   version: 0.18.1
 - name: internal-gateway
   repository: oci://quay.io/codefresh/charts
-  version: 0.7.0
+  version: 0.9.0
 - name: consul
   repository: https://charts.bitnami.com/bitnami
-  version: 11.1.9
+  version: 11.3.5
 - name: mongodb
   repository: https://charts.bitnami.com/bitnami
   version: 14.4.1
@@ -49,13 +49,13 @@ dependencies:
   version: 1.17.1
 - name: cfsign
   repository: oci://quay.io/codefresh/charts
-  version: 1.8.1
+  version: 1.8.2
 - name: tasker-kubernetes
   repository: oci://quay.io/codefresh/charts
   version: 1.26.9
 - name: context-manager
   repository: oci://quay.io/codefresh/charts
-  version: 2.29.3
+  version: 2.29.4
 - name: pipeline-manager
   repository: oci://quay.io/codefresh/charts
   version: 3.134.7
@@ -124,7 +124,7 @@ dependencies:
   version: 4.11.6
 - name: runtime-environment-manager
   repository: oci://quay.io/codefresh/charts
-  version: 3.35.6
+  version: 3.35.7
 - name: cf-broadcaster
   repository: oci://quay.io/codefresh/charts
   version: 1.12.14
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:93d3780111076127ba2d1818ea7ad3cbe120eeaaeebc2a4a82fb49b11e765409
-generated: "2024-07-02T10:02:41.675438222+03:00"
+digest: sha256:74af70e180bde255b3df58ed1b54f1e6db2ecf7e29b675ab222cccd5d181dcf1
+generated: "2024-07-04T14:53:30.648792884+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index b456c384b1..75a30c0e5c 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.0
+version: 2.4.1
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -18,17 +18,19 @@ annotations:
   artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
     - kind: security
-      description: Misc security updates
+      description: "Misc security updates"
+    - kind: changed
+      description: "Update internal-gateway/docker:dind"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
     version: 0.18.1
   - name: internal-gateway
     repository: oci://quay.io/codefresh/charts
-    version: 0.7.0
+    version: 0.9.0
     condition: internal-gateway.enabled
   - name: consul
-    version: 11.1.9
+    version: 11.3.5
     repository: https://charts.bitnami.com/bitnami
     condition: consul.enabled
   - name: mongodb
diff --git a/codefresh/README.md b/codefresh/README.md
index 5e35caff30..ecb26cee0f 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.0](https://img.shields.io/badge/Version-2.4.0-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.1](https://img.shields.io/badge/Version-2.4.1-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 
@@ -2013,7 +2013,7 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server
 | argo-platform.runtime-monitor | object | See below | runtime-monitor Don't enable! Not used in onprem! |
 | argo-platform.ui | object | See below | ui |
 | argo-platform.useExternalSecret | bool | `false` | Use regular k8s secret object. Keep `false`! |
-| builder | object | `{"affinity":{},"container":{"image":{"registry":"docker.io","repository":"library/docker","tag":"26.0-dind"}},"enabled":true,"initContainers":{"register":{"image":{"registry":"quay.io","repository":"codefresh/curl","tag":"8.4.0"}}},"nodeSelector":{},"podSecurityContext":{},"resources":{},"tolerations":[]}` | builder |
+| builder | object | `{"affinity":{},"container":{"image":{"registry":"docker.io","repository":"library/docker","tag":"27.0-dind"}},"enabled":true,"initContainers":{"register":{"image":{"registry":"quay.io","repository":"codefresh/curl","tag":"8.4.0"}}},"nodeSelector":{},"podSecurityContext":{},"resources":{},"tolerations":[]}` | builder |
 | cf-broadcaster | object | See below | broadcaster |
 | cf-oidc-provider | object | See below | cf-oidc-provider |
 | cf-platform-analytics-etlstarter | object | See below | etl-starter |
diff --git a/codefresh/values.yaml b/codefresh/values.yaml
index 5e7a43d060..c2ac18bd54 100644
--- a/codefresh/values.yaml
+++ b/codefresh/values.yaml
@@ -1191,7 +1191,7 @@ builder:
     image:
       registry: docker.io
       repository: library/docker
-      tag: 26.0-dind
+      tag: 27.0-dind
   affinity: {}
   nodeSelector: {}
   podSecurityContext: {}
@@ -1212,7 +1212,7 @@ runner:
     image:
       registry: docker.io
       repository: library/docker
-      tag: 26.0-dind
+      tag: 27.0-dind
   affinity: {}
   nodeSelector: {}
   podSecurityContext: {}

From 429c132f3d9fc9b7e27a44311a55022f62536ec2 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Fri, 5 Jul 2024 00:27:33 +0300
Subject: [PATCH 11/24] onprem: 2.4.2 (#1319)

---
 codefresh/Chart.lock | 8 ++++----
 codefresh/Chart.yaml | 4 +---
 codefresh/README.md  | 2 +-
 3 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index b8dfaa81cc..e8225dddf5 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -46,7 +46,7 @@ dependencies:
   version: 1.31.8
 - name: charts-manager
   repository: oci://quay.io/codefresh/charts
-  version: 1.17.1
+  version: 1.17.2
 - name: cfsign
   repository: oci://quay.io/codefresh/charts
   version: 1.8.2
@@ -58,7 +58,7 @@ dependencies:
   version: 2.29.4
 - name: pipeline-manager
   repository: oci://quay.io/codefresh/charts
-  version: 3.134.7
+  version: 3.134.9
 - name: gitops-dashboard-manager
   repository: oci://quay.io/codefresh/charts
   version: 1.14.13
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:74af70e180bde255b3df58ed1b54f1e6db2ecf7e29b675ab222cccd5d181dcf1
-generated: "2024-07-04T14:53:30.648792884+03:00"
+digest: sha256:60516f1b04ca5d996b09835b0fd4966fee2511a6f97a4c5e9bedf9663bb56827
+generated: "2024-07-05T00:02:54.595990362+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 75a30c0e5c..1a1d037938 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.1
+version: 2.4.2
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -19,8 +19,6 @@ annotations:
   artifacthub.io/changes: |
     - kind: security
       description: "Misc security updates"
-    - kind: changed
-      description: "Update internal-gateway/docker:dind"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index ecb26cee0f..3741a0ab98 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.1](https://img.shields.io/badge/Version-2.4.1-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.2](https://img.shields.io/badge/Version-2.4.2-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From 357571a3688b953461f3402d9df1f54c92add77c Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Fri, 12 Jul 2024 18:22:58 +0300
Subject: [PATCH 12/24] onprem: 2.4.3 (#1320)

---
 codefresh/.ci/values/cfapi-roles-no-rbac.yaml |  4 ++
 codefresh/Chart.lock                          | 44 +++++++++----------
 codefresh/Chart.yaml                          |  6 +--
 codefresh/README.md                           |  2 +-
 4 files changed, 30 insertions(+), 26 deletions(-)

diff --git a/codefresh/.ci/values/cfapi-roles-no-rbac.yaml b/codefresh/.ci/values/cfapi-roles-no-rbac.yaml
index 5e7432dfd5..7d03bd74e0 100644
--- a/codefresh/.ci/values/cfapi-roles-no-rbac.yaml
+++ b/codefresh/.ci/values/cfapi-roles-no-rbac.yaml
@@ -1,3 +1,7 @@
+global:
+  cfapiService: cfapi-internal
+  cfapiEndpointsService: cfapi-endpoints
+
 cfapi: &cf-api
   enabled: false
   rbac:
diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index e8225dddf5..3f3f33ce2c 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -64,58 +64,58 @@ dependencies:
   version: 1.14.13
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.43
+  version: 21.253.44
 - name: cfui
   repository: oci://quay.io/codefresh/charts
   version: 14.94.77
@@ -142,10 +142,10 @@ dependencies:
   version: 0.8.6
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.48
+  version: 0.49.49
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.48
+  version: 0.49.49
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
   version: 1.2911.0
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:60516f1b04ca5d996b09835b0fd4966fee2511a6f97a4c5e9bedf9663bb56827
-generated: "2024-07-05T00:02:54.595990362+03:00"
+digest: sha256:85bcd8321b91df7d4a6e71f5b727c06d0d77a40a2264dddc18a52e60a44c628f
+generated: "2024-07-12T15:58:58.89447039+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 1a1d037938..d77b5bd046 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.2
+version: 2.4.3
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -17,8 +17,8 @@ annotations:
   artifacthub.io/alternativeName: "codefresh-onprem"
   artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
-    - kind: security
-      description: "Misc security updates"
+    - kind: fixed
+      description: "Fix LaunchDarkly I/O error for air-gapped installations"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index 3741a0ab98..2c4d9f913c 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.2](https://img.shields.io/badge/Version-2.4.2-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.3](https://img.shields.io/badge/Version-2.4.3-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From ab23572de8cca0c7ca726ed7deb403e8be8956bc Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mikhail.klimko@codefresh.io>
Date: Mon, 22 Jul 2024 17:48:51 +0300
Subject: [PATCH 13/24] onprem: 2.4.4 patch (#1323)

---
 codefresh/Chart.lock | 12 ++++++------
 codefresh/Chart.yaml |  9 ++++++---
 codefresh/README.md  |  2 +-
 3 files changed, 13 insertions(+), 10 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 3f3f33ce2c..bba97a1d6a 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -142,18 +142,18 @@ dependencies:
   version: 0.8.6
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.49
+  version: 0.49.52
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.49
+  version: 0.49.52
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.2911.0
+  version: 1.2944.1
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
-  version: 0.1.12
+  version: 0.1.13
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:85bcd8321b91df7d4a6e71f5b727c06d0d77a40a2264dddc18a52e60a44c628f
-generated: "2024-07-12T15:58:58.89447039+03:00"
+digest: sha256:6bcae4853d52aa868bbc651a847ffc9d5d0ba61d54b36d2118859aeeacdefe2e
+generated: "2024-07-22T10:53:22.504306253+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index d77b5bd046..de02ad0615 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.3
+version: 2.4.4
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -18,7 +18,10 @@ annotations:
   artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
     - kind: fixed
-      description: "Fix LaunchDarkly I/O error for air-gapped installations"
+      description: "(gitops-platform) Fix ApplicationSet sync"
+      links:
+        - name: JIRA Issue
+          url: https://codefresh-io.atlassian.net/browse/CR-23763
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
@@ -236,7 +239,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-platform
-    version: "1.2911.0"
+    version: "1.2944.1"
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-hub-platform
diff --git a/codefresh/README.md b/codefresh/README.md
index 2c4d9f913c..3dc5559900 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.3](https://img.shields.io/badge/Version-2.4.3-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.4](https://img.shields.io/badge/Version-2.4.4-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From 9c59fb83e3ec743b2d42aae6844a5da6341c572b Mon Sep 17 00:00:00 2001
From: ilia-medvedev-codefresh <ilia.medvedev@codefresh.io>
Date: Thu, 1 Aug 2024 12:43:21 +0300
Subject: [PATCH 14/24] Onprem 2.4.5 - update cf-api: fix missing offline
 logging (#1)

---
 codefresh/Chart.lock | 46 ++++++++++++++++++++++----------------------
 codefresh/Chart.yaml |  8 ++++----
 codefresh/README.md  |  2 +-
 3 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index bba97a1d6a..745870db85 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -64,64 +64,64 @@ dependencies:
   version: 1.14.13
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.44
+  version: 21.253.45
 - name: cfui
   repository: oci://quay.io/codefresh/charts
   version: 14.94.77
 - name: k8s-monitor
   repository: oci://quay.io/codefresh/charts
-  version: 4.11.6
+  version: 4.11.7
 - name: runtime-environment-manager
   repository: oci://quay.io/codefresh/charts
   version: 3.35.7
@@ -142,10 +142,10 @@ dependencies:
   version: 0.8.6
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.52
+  version: 0.49.54
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.52
+  version: 0.49.54
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
   version: 1.2944.1
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:6bcae4853d52aa868bbc651a847ffc9d5d0ba61d54b36d2118859aeeacdefe2e
-generated: "2024-07-22T10:53:22.504306253+03:00"
+digest: sha256:4ee2356ee0c50b458075c52aedeb1976da4bbe709089626164f32e22dbd218de
+generated: "2024-07-31T16:44:15.270805+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index de02ad0615..ddc326551e 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,13 +1,13 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.4
+version: 2.4.5
 keywords:
   - codefresh
 home: https://codefresh.io/
 icon: https://avatars1.githubusercontent.com/u/11412079?v=3
 sources:
-  - https://github.com/codefresh-io/cf-helm
+  - https://github.com/codefresh-io/codefresh-onprem-helm
 maintainers:
   - name: codefresh
     url: https://codefresh-io.github.io/
@@ -18,10 +18,10 @@ annotations:
   artifacthub.io/containsSecurityUpdates: "true"
   artifacthub.io/changes: |
     - kind: fixed
-      description: "(gitops-platform) Fix ApplicationSet sync"
+      description: "(cf-api) Missing build logs with OfflineLogging and MongoDB 6.x"
       links:
         - name: JIRA Issue
-          url: https://codefresh-io.atlassian.net/browse/CR-23763
+          url: https://codefresh-io.atlassian.net/browse/CR-24606
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index 3dc5559900..910ab39ae9 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.4](https://img.shields.io/badge/Version-2.4.4-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.4.5](https://img.shields.io/badge/Version-2.4.5-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From 4dcae98c230768419173c63c437e68b85d816483 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Thu, 29 Aug 2024 10:05:05 +0300
Subject: [PATCH 15/24] onprem: 2.5.0-rc.1

---
 .gitignore                            |  3 +-
 codefresh/Chart.lock                  | 60 +++++++++++++--------------
 codefresh/Chart.yaml                  | 16 +++----
 codefresh/files/mongoSeedJobScript.sh |  4 +-
 codefresh/values.yaml                 | 34 +++++++--------
 5 files changed, 60 insertions(+), 57 deletions(-)

diff --git a/.gitignore b/.gitignore
index 22ec8221a5..03f3119d34 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,4 +27,5 @@ index.yaml
 # dry-run templates from `helm template` output
 dry-run/**
 **/values-dev.yaml
-**/dry-run.yaml
\ No newline at end of file
+**/dry-run.yaml
+.debug/**
diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 745870db85..68f1c246fb 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -46,7 +46,7 @@ dependencies:
   version: 1.31.8
 - name: charts-manager
   repository: oci://quay.io/codefresh/charts
-  version: 1.17.2
+  version: 1.18.1
 - name: cfsign
   repository: oci://quay.io/codefresh/charts
   version: 1.8.2
@@ -55,82 +55,82 @@ dependencies:
   version: 1.26.9
 - name: context-manager
   repository: oci://quay.io/codefresh/charts
-  version: 2.29.4
+  version: 2.30.1
 - name: pipeline-manager
   repository: oci://quay.io/codefresh/charts
-  version: 3.134.9
+  version: 3.135.7
 - name: gitops-dashboard-manager
   repository: oci://quay.io/codefresh/charts
-  version: 1.14.13
+  version: 1.14.14
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.253.45
+  version: 21.260.25
 - name: cfui
   repository: oci://quay.io/codefresh/charts
-  version: 14.94.77
+  version: 14.95.62
 - name: k8s-monitor
   repository: oci://quay.io/codefresh/charts
   version: 4.11.7
 - name: runtime-environment-manager
   repository: oci://quay.io/codefresh/charts
-  version: 3.35.7
+  version: 3.36.3
 - name: cf-broadcaster
   repository: oci://quay.io/codefresh/charts
   version: 1.12.14
 - name: helm-repo-manager
   repository: oci://quay.io/codefresh/charts
-  version: 0.15.0
+  version: 0.16.1
 - name: hermes
   repository: oci://quay.io/codefresh/charts
   version: 0.21.9
@@ -142,18 +142,18 @@ dependencies:
   version: 0.8.6
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.54
+  version: 0.49.57
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.54
+  version: 0.49.57
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.2944.1
+  version: 1.3014.0
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
   version: 0.1.13
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:4ee2356ee0c50b458075c52aedeb1976da4bbe709089626164f32e22dbd218de
-generated: "2024-07-31T16:44:15.270805+03:00"
+digest: sha256:60a898eb3e565b4a2620b806d837d5fe423ef4d352be1c02fa963daf504b7183
+generated: "2024-08-28T17:45:21.962105521+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index ddc326551e..ddb13ab4f1 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.4.5
+version: 2.5.0-rc.1
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -11,17 +11,17 @@ sources:
 maintainers:
   - name: codefresh
     url: https://codefresh-io.github.io/
-appVersion: 2.4.0
+appVersion: 2.5.0
 annotations:
-  # artifacthub.io/prerelease: "true"
+  artifacthub.io/prerelease: "true"
   artifacthub.io/alternativeName: "codefresh-onprem"
-  artifacthub.io/containsSecurityUpdates: "true"
+  # artifacthub.io/containsSecurityUpdates: "true"
+  # supported kinds are added, changed, deprecated, removed, fixed and security.
   artifacthub.io/changes: |
+    - kind: changed
+      description: "Initial onprem 2.5.0-rc.1 release"
     - kind: fixed
-      description: "(cf-api) Missing build logs with OfflineLogging and MongoDB 6.x"
-      links:
-        - name: JIRA Issue
-          url: https://codefresh-io.atlassian.net/browse/CR-24606
+      description: "Fix global.mongodbPassword updates via values.yaml"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/files/mongoSeedJobScript.sh b/codefresh/files/mongoSeedJobScript.sh
index e124d66bf2..aaf2eabe51 100644
--- a/codefresh/files/mongoSeedJobScript.sh
+++ b/codefresh/files/mongoSeedJobScript.sh
@@ -75,11 +75,13 @@ waitForMongoDB
 getMongoVersion
 
 for MONGODB_DATABASE in ${MONGODB_DATABASES[@]}; do
-   mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"${MONGODB_DATABASE}\").createUser({user: \"${MONGODB_USER}\", pwd: \"${MONGODB_PASSWORD}\", roles: [\"readWrite\"]})" || echo "Error creating the user. Continuing anyway assuming the user is already created..."
+    mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"${MONGODB_DATABASE}\").createUser({user: \"${MONGODB_USER}\", pwd: \"${MONGODB_PASSWORD}\", roles: [\"readWrite\"]})" || true
+    mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"${MONGODB_DATABASE}\").changeUserPassword(\"${MONGODB_USER}\",\"${MONGODB_PASSWORD}\")" || true
 done
 
 mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"codefresh\").grantRolesToUser( \"${MONGODB_USER}\", [ { role: \"readWrite\", db: \"pipeline-manager\" } ] )" || true
 mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"codefresh\").grantRolesToUser( \"${MONGODB_USER}\", [ { role: \"readWrite\", db: \"platform-analytics-postgres\" } ] )" || true
+mongosh ${MONGODB_ROOT_URI} --eval "db.getSiblingDB(\"codefresh\").changeUserPassword(\"${MONGODB_USER}\",\"${MONGODB_PASSWORD}\")" || true
 
 mongoimport --uri ${MONGO_URI} --collection idps --type json --legacy --file ${ASSETS_PATH}idps.json
 mongoimport --uri ${MONGO_URI} --collection accounts --type json --legacy --file ${ASSETS_PATH}accounts.json
diff --git a/codefresh/values.yaml b/codefresh/values.yaml
index c2ac18bd54..b52fa7a3ca 100644
--- a/codefresh/values.yaml
+++ b/codefresh/values.yaml
@@ -542,70 +542,70 @@ cfapi: &cf-api
 # cfapi roles
 # @ignored internal
 cfapi-auth:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 cfapi-internal:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored ws
 cfapi-ws:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored admin
 cfapi-admin:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored endpoints
 cfapi-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored terminators
 cfapi-terminators:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored sso-group-synchronizer
 cfapi-sso-group-synchronizer:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored buildmanager
 cfapi-buildmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored cacheevictmanager
 cfapi-cacheevictmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored eventsmanagersubscriptions
 cfapi-eventsmanagersubscriptions:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored kubernetesresourcemonitor
 cfapi-kubernetesresourcemonitor:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored environments
 cfapi-environments:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored gitops-resource-receiver
 cfapi-gitops-resource-receiver:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored downloadlogmanager
 cfapi-downloadlogmanager:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored teams
 cfapi-teams:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored kubernetes-endpoints
 cfapi-kubernetes-endpoints:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 # @ignored test-reporting
 cfapi-test-reporting:
-  !!merge <<: *cf-api
+  <<: *cf-api
   enabled: false
 
 # -- internal-gateway

From c21a8d452d2a19f87fc8d7585b85c3ac31de7128 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Thu, 29 Aug 2024 10:18:27 +0300
Subject: [PATCH 16/24] onprem: 2.5.0-rc.1

---
 codefresh/Chart.lock | 52 +++++++++++++++++++++---------------------
 codefresh/Chart.yaml | 54 ++++++++++++++++++++++----------------------
 2 files changed, 53 insertions(+), 53 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 68f1c246fb..5e3fe5bbc3 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -7,7 +7,7 @@ dependencies:
   version: 0.9.0
 - name: consul
   repository: https://charts.bitnami.com/bitnami
-  version: 11.3.5
+  version: 11.3.13
 - name: mongodb
   repository: https://charts.bitnami.com/bitnami
   version: 14.4.1
@@ -19,16 +19,16 @@ dependencies:
   version: 12.0.4
 - name: redis
   repository: https://charts.bitnami.com/bitnami
-  version: 18.19.2
+  version: 20.0.3
 - name: redis-ha
   repository: https://dandydeveloper.github.io/charts
   version: 4.26.1
 - name: rabbitmq
   repository: https://charts.bitnami.com/bitnami
-  version: 12.15.0
+  version: 14.6.9
 - name: nats
   repository: https://charts.bitnami.com/bitnami
-  version: 7.18.1
+  version: 8.3.2
 - name: builder
   repository: oci://quay.io/codefresh/charts
   version: 1.3.0
@@ -46,7 +46,7 @@ dependencies:
   version: 1.31.8
 - name: charts-manager
   repository: oci://quay.io/codefresh/charts
-  version: 1.18.1
+  version: 1.17.2
 - name: cfsign
   repository: oci://quay.io/codefresh/charts
   version: 1.8.2
@@ -64,58 +64,58 @@ dependencies:
   version: 1.14.14
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.25
+  version: 21.260.26
 - name: cfui
   repository: oci://quay.io/codefresh/charts
   version: 14.95.62
@@ -148,12 +148,12 @@ dependencies:
   version: 0.49.57
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.3014.0
+  version: 1.2944.1
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
   version: 0.1.13
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:60a898eb3e565b4a2620b806d837d5fe423ef4d352be1c02fa963daf504b7183
-generated: "2024-08-28T17:45:21.962105521+03:00"
+digest: sha256:363963ebc67be1dce86edd99b39c64cae221fb9dbe08f423c9a9f49a722db8fe
+generated: "2024-08-29T10:16:41.646394644+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index ddb13ab4f1..f4a78ea6b8 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -31,7 +31,7 @@ dependencies:
     version: 0.9.0
     condition: internal-gateway.enabled
   - name: consul
-    version: 11.3.5
+    version: 11.3.13
     repository: https://charts.bitnami.com/bitnami
     condition: consul.enabled
   - name: mongodb
@@ -47,7 +47,7 @@ dependencies:
     repository: oci://registry-1.docker.io/bitnamicharts
     condition: postgresql-ha.enabled
   - name: redis
-    version: 18.19.2
+    version: 20.0.3
     repository: https://charts.bitnami.com/bitnami
     condition: redis.enabled
   - name: redis-ha
@@ -55,11 +55,11 @@ dependencies:
     version: 4.26.1
     condition: redis-ha.enabled
   - name: rabbitmq
-    version: 12.15.0
+    version: 14.6.9
     repository: https://charts.bitnami.com/bitnami
     condition: rabbitmq.enabled
   - name: nats
-    version: 7.18.1
+    version: 8.3.2
     repository: https://charts.bitnami.com/bitnami
     condition: nats.enabled
   - name: builder
@@ -95,11 +95,11 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: tasker-kubernetes.enabled
   - name: context-manager
-    version: "~2.29.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: context-manager.enabled
   - name: pipeline-manager
-    version: "~3.134.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: pipeline-manager.enabled
   - name: gitops-dashboard-manager
@@ -108,96 +108,96 @@ dependencies:
     condition: gitops-dashboard-manager.enabled
   - name: cfapi
     alias: cfapi
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi.enabled
   - name: cfapi
     alias: cfapi-auth
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-auth.enabled
   - name: cfapi
     alias: cfapi-internal
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-internal.enabled
   - name: cfapi
     alias: cfapi-ws
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-ws.enabled
   - name: cfapi
     alias: cfapi-admin
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-admin.enabled
   - name: cfapi
     alias: cfapi-endpoints
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-endpoints.enabled
   - name: cfapi
     alias: cfapi-terminators
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-terminators.enabled
   - name: cfapi
     alias: cfapi-sso-group-synchronizer
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-sso-group-synchronizer.enabled
   - name: cfapi
     alias: cfapi-buildmanager
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-buildmanager.enabled
   - name: cfapi
     alias: cfapi-cacheevictmanager
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-cacheevictmanager.enabled
   - name: cfapi
     alias: cfapi-eventsmanagersubscriptions
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-eventsmanagersubscriptions.enabled
   - name: cfapi
     alias: cfapi-kubernetesresourcemonitor
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-kubernetesresourcemonitor.enabled
   - name: cfapi
     alias: cfapi-environments
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-environments.enabled
   - name: cfapi
     alias: cfapi-gitops-resource-receiver
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-gitops-resource-receiver.enabled
   - name: cfapi
     alias: cfapi-downloadlogmanager
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-downloadlogmanager.enabled
   - name: cfapi
     alias: cfapi-teams
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-teams.enabled
   - name: cfapi
     alias: cfapi-kubernetes-endpoints
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-kubernetes-endpoints.enabled
   - name: cfapi
     alias: cfapi-test-reporting
-    version: "~21.253.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-test-reporting.enabled
   - name: cfui
-    version: "~14.94.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: cfui.enabled
   - name: k8s-monitor
@@ -205,7 +205,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: k8s-monitor.enabled
   - name: runtime-environment-manager
-    version: "~3.35.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: runtime-environment-manager.enabled
   - name: cf-broadcaster
@@ -213,7 +213,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: cf-broadcaster.enabled
   - name: helm-repo-manager
-    version: "~0.15.0"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: helm-repo-manager.enabled
   - name: hermes

From 96fe235f516a900e76064bd02f6b96b1dab97e1e Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Thu, 29 Aug 2024 11:55:49 +0300
Subject: [PATCH 17/24] onprem: 2.5.0-rc.1

---
 codefresh/Chart.lock | 8 ++++----
 codefresh/README.md  | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 5e3fe5bbc3..271ef1d050 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -142,10 +142,10 @@ dependencies:
   version: 0.8.6
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.57
+  version: 0.49.58
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.57
+  version: 0.49.58
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
   version: 1.2944.1
@@ -155,5 +155,5 @@ dependencies:
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:363963ebc67be1dce86edd99b39c64cae221fb9dbe08f423c9a9f49a722db8fe
-generated: "2024-08-29T10:16:41.646394644+03:00"
+digest: sha256:222d852ef46d900cc163dc6aba23a0720d814f4c4425c6cc84d368b254c3ff23
+generated: "2024-08-29T11:54:02.458689567+03:00"
diff --git a/codefresh/README.md b/codefresh/README.md
index 910ab39ae9..7fc0162761 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.4.5](https://img.shields.io/badge/Version-2.4.5-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
+![Version: 2.5.0-rc.1](https://img.shields.io/badge/Version-2.5.0--rc.1-informational?style=flat-square) ![AppVersion: 2.5.0](https://img.shields.io/badge/AppVersion-2.5.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 

From f80aeae1829dd8ca7c9b7965d80d131bf6abc10b Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Thu, 29 Aug 2024 12:21:19 +0300
Subject: [PATCH 18/24] onprem: 2.5.0-rc.1

---
 codefresh/Chart.lock | 6 +++---
 codefresh/Chart.yaml | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 271ef1d050..86e48299ce 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -148,12 +148,12 @@ dependencies:
   version: 0.49.58
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.2944.1
+  version: 1.3017.0
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
   version: 0.1.13
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:222d852ef46d900cc163dc6aba23a0720d814f4c4425c6cc84d368b254c3ff23
-generated: "2024-08-29T11:54:02.458689567+03:00"
+digest: sha256:c5d01437db371810501be58b26c0c324caee273e42fca06b15564b1ef91f6138
+generated: "2024-08-29T12:19:39.620221528+03:00"
diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index f4a78ea6b8..d3989e2b6b 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -239,7 +239,7 @@ dependencies:
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-platform
-    version: "1.2944.1"
+    version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-hub-platform

From de199c064b74ab4d9a20586f4406daf5166fc183 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Thu, 29 Aug 2024 15:34:54 +0300
Subject: [PATCH 19/24] onprem: 2.5.0-rc.1

---
 codefresh/templates/seed-e2e/seed-e2e.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/codefresh/templates/seed-e2e/seed-e2e.yaml b/codefresh/templates/seed-e2e/seed-e2e.yaml
index 828975b3fe..5e8932c6ec 100644
--- a/codefresh/templates/seed-e2e/seed-e2e.yaml
+++ b/codefresh/templates/seed-e2e/seed-e2e.yaml
@@ -90,7 +90,7 @@ data:
     #!/bin/bash
     mongosh $MONGO_URI --eval "db.apikeynews.insertOne( $(cat /seed/api-token.json) )";
     mongosh $MONGO_URI --eval 'db.accounts.updateOne({"name": "admin-cf"},
-      { $set: { "systemType": "GITOPS_AND_CLASSIC", "limits.collaborators.limit" : 1000 } }
+      { $set: { "systemType": "PROJECT_ONE", "limits.collaborators.limit" : 1000 } }
     )'
     mongoimport --uri $MONGO_URI --collection accounts --type json --legacy --file /seed/e2e-account.json
     mongosh $MONGO_URI --eval 'db.users.updateOne({"userName": "AdminCF"}, { $push: {"account": "627e3aa3e62cd24ad1b66d21" }})'

From 4ad8ddb7c8fb67881c89ce071f479597a3ddbf06 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Mon, 2 Sep 2024 12:25:47 +0300
Subject: [PATCH 20/24] helm dep update

---
 codefresh/Chart.lock | 44 ++++++++++++++++++++++----------------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock
index 86e48299ce..afced27d84 100644
--- a/codefresh/Chart.lock
+++ b/codefresh/Chart.lock
@@ -64,61 +64,61 @@ dependencies:
   version: 1.14.14
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfapi
   repository: oci://quay.io/codefresh/charts
-  version: 21.260.26
+  version: 21.260.27
 - name: cfui
   repository: oci://quay.io/codefresh/charts
-  version: 14.95.62
+  version: 14.95.64
 - name: k8s-monitor
   repository: oci://quay.io/codefresh/charts
   version: 4.11.7
@@ -148,12 +148,12 @@ dependencies:
   version: 0.49.58
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.3017.0
+  version: 1.3023.0
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
   version: 0.1.13
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.15
-digest: sha256:c5d01437db371810501be58b26c0c324caee273e42fca06b15564b1ef91f6138
-generated: "2024-08-29T12:19:39.620221528+03:00"
+digest: sha256:731374532d64878803d860e007cae56fc7e7edbc33b4c4fca146106c3ef9ec9e
+generated: "2024-09-02T10:30:10.613371548+03:00"

From 4a81f96acf47aa80045e49d3640af6502df9b694 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Mon, 2 Sep 2024 12:57:40 +0300
Subject: [PATCH 21/24] wip

---
 codefresh/Chart.yaml                          |  2 ++
 codefresh/README.md                           |  1 +
 .../hooks/set-mongodb-compat-version.yaml     |  2 ++
 codefresh/values.yaml                         | 20 +++++++++++++++++++
 4 files changed, 25 insertions(+)

diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index d3989e2b6b..43706fbcef 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -22,6 +22,8 @@ annotations:
       description: "Initial onprem 2.5.0-rc.1 release"
     - kind: fixed
       description: "Fix global.mongodbPassword updates via values.yaml"
+    - kind: added
+      description: "Add checksum/secret annotation for argo-platform pods"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/codefresh/README.md b/codefresh/README.md
index 7fc0162761..e856aeb03b 100644
--- a/codefresh/README.md
+++ b/codefresh/README.md
@@ -2000,6 +2000,7 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server
 | argo-platform.api-graphql.kind | string | `"Deployment"` | Controller kind. Currently, only `Deployment` is supported |
 | argo-platform.api-graphql.pdb | object | `{"enabled":false}` | PDB |
 | argo-platform.api-graphql.pdb.enabled | bool | `false` | Enable pod disruption budget |
+| argo-platform.api-graphql.podAnnotations | object | `{"checksum/secret":"{{ include (print $.Template.BasePath \"/api-graphql/secret.yaml\") . | sha256sum }}"}` | Set pod's annotations |
 | argo-platform.api-graphql.resources | object | See below | Resource limits and requests |
 | argo-platform.api-graphql.secrets | object | See below | Secrets |
 | argo-platform.api-graphql.tolerations | list | `[]` | Set pod's tolerations |
diff --git a/codefresh/templates/hooks/set-mongodb-compat-version.yaml b/codefresh/templates/hooks/set-mongodb-compat-version.yaml
index 3932894876..788eea98ad 100644
--- a/codefresh/templates/hooks/set-mongodb-compat-version.yaml
+++ b/codefresh/templates/hooks/set-mongodb-compat-version.yaml
@@ -1,4 +1,5 @@
 {{ $libTemplateName := printf "cf-common-%s" (index .Subcharts "cf-common").Chart.Version }}
+{{- if .Values.mongodb.migration.enabled }}
 ---
 apiVersion: batch/v1
 kind: Job
@@ -68,3 +69,4 @@ spec:
       volumes:
       {{- include (printf "%s.volumes" $libTemplateName) (dict "Values" .Values.hooks.volumes "context" $) | indent 8 }}
       restartPolicy: Never
+{{- end }}
diff --git a/codefresh/values.yaml b/codefresh/values.yaml
index b52fa7a3ca..96cace63c0 100644
--- a/codefresh/values.yaml
+++ b/codefresh/values.yaml
@@ -1047,6 +1047,7 @@ mongodb:
       cpu: 200m
       memory: 256Mi
   migration:
+    enabled: false
     featureCompatibilityVersion: "5.0"
 
 # -- nats
@@ -1411,6 +1412,9 @@ argo-platform:
     affinity: {}
     # -- Set pod's tolerations
     tolerations: []
+    # -- Set pod's annotations
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/api-graphql/secret.yaml") . | sha256sum }}'
 
   # -- abac
   # @default -- See below
@@ -1445,6 +1449,8 @@ argo-platform:
       enabled: false
     affinity: {}
     tolerations: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/abac/secret.yaml") . | sha256sum }}'
 
   # -- analytics-reporter
   # @default -- See below
@@ -1492,6 +1498,8 @@ argo-platform:
     affinity: {}
     volumes: []
     volumeMounts: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/analytics-reporter/secret.yaml") . | sha256sum }}'
 
   # -- api-events
   # @default -- See below
@@ -1522,6 +1530,8 @@ argo-platform:
       enabled: false
     affinity: {}
     tolerations: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/api-events/secret.yaml") . | sha256sum }}'
 
   # -- argocd-hooks
   # @default -- See below
@@ -1569,6 +1579,8 @@ argo-platform:
       enabled: false
     affinity: {}
     tolerations: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/audit/secret.yaml") . | sha256sum }}'
 
   # -- cron-executor
   # @default -- See below
@@ -1610,6 +1622,8 @@ argo-platform:
       enabled: false
     affinity: {}
     tolerations: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/cron-executor/secret.yaml") . | sha256sum }}'
 
   # -- event-handler
   # @default -- See below
@@ -1649,6 +1663,8 @@ argo-platform:
       enabled: false
     affinity: {}
     tolerations: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/event-handler/secret.yaml") . | sha256sum }}'
 
   # -- runtime-manager
   # @default -- See below
@@ -1721,6 +1737,8 @@ argo-platform:
       enabled: false
     affinity: {}
     tolerations: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/broadcaster/secret.yaml") . | sha256sum }}'
 
   # -- promotion-orchestrator
   # @default -- See below
@@ -1763,6 +1781,8 @@ argo-platform:
       enabled: false
     affinity: {}
     tolerations: []
+    podAnnotations:
+      checksum/secret: '{{ include (print $.Template.BasePath "/promotion-orchestrator/secret.yaml") . | sha256sum }}'
 
 # -- cf-oidc-provider
 # @default -- See below

From 649e6e438835e96233d19ffc49c1a27744f09c95 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Mon, 2 Sep 2024 12:58:51 +0300
Subject: [PATCH 22/24] wip

---
 codefresh/Chart.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 43706fbcef..9577eae733 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -24,6 +24,8 @@ annotations:
       description: "Fix global.mongodbPassword updates via values.yaml"
     - kind: added
       description: "Add checksum/secret annotation for argo-platform pods"
+    - kind: fixed
+      description: "Make cf-codefresh-set-mongodb-compat-version job optional via .Values.mongodb.migration.enabled value"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts

From 3513dfd892dd5e278eeb0e497c4f4ff78c51f4a4 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Mon, 2 Sep 2024 14:02:22 +0300
Subject: [PATCH 23/24] wip

---
 codefresh/values.yaml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/codefresh/values.yaml b/codefresh/values.yaml
index 96cace63c0..e97f22c61e 100644
--- a/codefresh/values.yaml
+++ b/codefresh/values.yaml
@@ -454,19 +454,19 @@ postgresqlCleanJob:
 # -- runtimeImages
 # @default -- See below
 runtimeImages:
-  COMPOSE_IMAGE: quay.io/codefresh/compose:v2.20.3-1.4.0
-  CONTAINER_LOGGER_IMAGE: quay.io/codefresh/cf-container-logger:1.11.4
-  DIND_IMAGE: quay.io/codefresh/dind:26.0.0-1.28.6
-  DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.3.11
+  COMPOSE_IMAGE: quay.io/codefresh/compose:v2.28.1-1.5.0
+  CONTAINER_LOGGER_IMAGE: quay.io/codefresh/cf-container-logger:1.11.6
+  DIND_IMAGE: quay.io/codefresh/dind:26.1.4-1.28.7
+  DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.3.13
   DOCKER_PULLER_IMAGE: quay.io/codefresh/cf-docker-puller:8.0.17
-  DOCKER_PUSHER_IMAGE: quay.io/codefresh/cf-docker-pusher:6.0.13
-  DOCKER_TAG_PUSHER_IMAGE: quay.io/codefresh/cf-docker-tag-pusher:1.3.11
-  ENGINE_IMAGE: quay.io/codefresh/engine:1.171.3
+  DOCKER_PUSHER_IMAGE: quay.io/codefresh/cf-docker-pusher:6.0.16
+  DOCKER_TAG_PUSHER_IMAGE: quay.io/codefresh/cf-docker-tag-pusher:1.3.14
+  ENGINE_IMAGE: quay.io/codefresh/engine:1.174.7
   FS_OPS_IMAGE: quay.io/codefresh/fs-ops:1.2.7
-  GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.1.27
+  GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.1.28
   KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:16.2.6
   PIPELINE_DEBUGGER_IMAGE: quay.io/codefresh/cf-debugger:1.3.5
-  TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.14.0
+  TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.14.1
   CR_6177_FIXER: docker.io/library/alpine:edge
   GC_BUILDER_IMAGE: docker.io/library/alpine:edge
 

From 4d8f17c44bd960b0b939eeb0aa0d5f09a2d79ea7 Mon Sep 17 00:00:00 2001
From: mikhail-klimko <mklimko123@gmail.com>
Date: Mon, 2 Sep 2024 14:03:35 +0300
Subject: [PATCH 24/24] wip

---
 codefresh/Chart.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml
index 9577eae733..9375962dcd 100644
--- a/codefresh/Chart.yaml
+++ b/codefresh/Chart.yaml
@@ -26,6 +26,8 @@ annotations:
       description: "Add checksum/secret annotation for argo-platform pods"
     - kind: fixed
       description: "Make cf-codefresh-set-mongodb-compat-version job optional via .Values.mongodb.migration.enabled value"
+    - kind: changed
+      description: "Update runtime images"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts