diff --git a/codefresh/.ci/values/external-secrets.yaml b/codefresh/.ci/values/external-secrets.yaml index 7f82f184c5..75dc727633 100644 --- a/codefresh/.ci/values/external-secrets.yaml +++ b/codefresh/.ci/values/external-secrets.yaml @@ -22,7 +22,7 @@ secrets: ext-rabbitmq: enabled: true stringData: - rabbitmq-hostname: cf-rabbitmq:5672 + rabbitmq-hostname: my-rabbitmq:5672 rabbitmq-password: cVz9ZdJKYm7u rabbitmq-username: user ext-firebase: @@ -95,4 +95,7 @@ global: key: redis-password redisUrlSecretKeyRef: name: cf-codefresh-ext-redis - key: redis-url \ No newline at end of file + key: redis-url + +rabbitmq: + fullnameOverride: my-rabbitmq diff --git a/codefresh/Chart.lock b/codefresh/Chart.lock index 59c7269fab..c8f75f603c 100644 --- a/codefresh/Chart.lock +++ b/codefresh/Chart.lock @@ -4,10 +4,10 @@ dependencies: version: 0.18.1 - name: internal-gateway repository: oci://quay.io/codefresh/charts - version: 0.9.0 + version: 0.10.2 - name: consul repository: https://charts.bitnami.com/bitnami - version: 11.3.21 + version: 11.4.10 - name: mongodb repository: https://charts.bitnami.com/bitnami version: 14.4.1 @@ -19,141 +19,141 @@ dependencies: version: 12.0.4 - name: redis repository: https://charts.bitnami.com/bitnami - version: 20.3.0 + version: 20.11.3 - name: redis-ha repository: https://dandydeveloper.github.io/charts version: 4.26.1 - name: rabbitmq repository: https://charts.bitnami.com/bitnami - version: 14.7.0 + version: 15.3.3 - name: nats repository: https://charts.bitnami.com/bitnami - version: 8.4.9 + version: 9.0.6 - name: builder repository: oci://quay.io/codefresh/charts - version: 1.3.0 + version: 1.4.0 - name: runner repository: oci://quay.io/codefresh/charts - version: 1.3.0 + version: 1.4.0 - name: ingress-nginx repository: https://kubernetes.github.io/ingress-nginx version: 4.11.2 - name: cluster-providers repository: oci://quay.io/codefresh/charts - version: 1.17.10 + version: 1.17.14 - name: kube-integration repository: oci://quay.io/codefresh/charts - version: 1.31.11 + version: 1.31.17 - name: charts-manager repository: oci://quay.io/codefresh/charts - version: 1.19.2 + version: 1.22.2 - name: cfsign repository: oci://quay.io/codefresh/charts - version: 1.8.6 + version: 1.8.8 - name: tasker-kubernetes repository: oci://quay.io/codefresh/charts - version: 1.26.13 + version: 1.26.17 - name: context-manager repository: oci://quay.io/codefresh/charts - version: 2.31.2 + version: 2.33.6 - name: pipeline-manager repository: oci://quay.io/codefresh/charts - version: 3.137.5 + version: 3.138.3 - name: gitops-dashboard-manager repository: oci://quay.io/codefresh/charts - version: 1.14.16 + version: 1.14.20 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfapi repository: oci://quay.io/codefresh/charts - version: 21.268.1 + version: 21.274.9 - name: cfui repository: oci://quay.io/codefresh/charts - version: 14.96.72 + version: 14.97.50 - name: k8s-monitor repository: oci://quay.io/codefresh/charts - version: 4.11.10 + version: 4.11.13 - name: runtime-environment-manager repository: oci://quay.io/codefresh/charts - version: 3.38.2 + version: 3.39.3 - name: cf-broadcaster repository: oci://quay.io/codefresh/charts - version: 1.12.17 + version: 1.12.21 - name: helm-repo-manager repository: oci://quay.io/codefresh/charts - version: 0.17.1 + version: 0.20.2 - name: hermes repository: oci://quay.io/codefresh/charts - version: 0.21.14 + version: 0.21.18 - name: nomios repository: oci://quay.io/codefresh/charts - version: 0.11.8 + version: 0.11.10 - name: cronus repository: oci://quay.io/codefresh/charts - version: 0.8.8 + version: 0.8.10 - name: cf-platform-analytics repository: oci://quay.io/codefresh/charts - version: 0.49.72 + version: 0.49.77 - name: cf-platform-analytics repository: oci://quay.io/codefresh/charts - version: 0.49.72 + version: 0.49.77 - name: argo-platform repository: oci://quay.io/codefresh/charts - version: 1.3168.0 + version: 1.3344.0 - name: argo-hub-platform repository: oci://quay.io/codefresh/charts - version: 0.1.16 + version: 0.1.21 - name: cf-oidc-provider repository: oci://quay.io/codefresh/charts - version: 0.0.15 -digest: sha256:6dfa88dd2f583c13454e0e6d7c4a83ebeadd846f9f18a7ce99e8d6685ecfb1c6 -generated: "2024-12-03T16:51:41.402147+03:00" + version: 0.0.16 +digest: sha256:83072ee3b8654194f3fb06b189775de8f1220062dad9f8ec858c54641e3aeefb +generated: "2025-03-14T18:07:51.289296+03:00" diff --git a/codefresh/Chart.yaml b/codefresh/Chart.yaml index 81b453e39d..96af206c9d 100644 --- a/codefresh/Chart.yaml +++ b/codefresh/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 description: Helm Chart for Codefresh On-Prem name: codefresh -version: 2.6.0 +version: 2.7.0 keywords: - codefresh home: https://codefresh.io/ @@ -11,7 +11,7 @@ sources: maintainers: - name: codefresh url: https://codefresh-io.github.io/ -appVersion: 2.6.0 +appVersion: 2.7.0 annotations: artifacthub.io/prerelease: "true" artifacthub.io/alternativeName: "codefresh-onprem" @@ -19,17 +19,17 @@ annotations: # supported kinds are added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: changed - description: "Initial onprem 2.6 release" + description: "Initial 2.7 release" dependencies: - name: cf-common repository: oci://quay.io/codefresh/charts version: 0.18.1 - name: internal-gateway repository: oci://quay.io/codefresh/charts - version: 0.9.0 + version: 0.10.2 condition: internal-gateway.enabled - name: consul - version: 11.3.21 + version: 11.4.10 repository: https://charts.bitnami.com/bitnami condition: consul.enabled - name: mongodb @@ -45,7 +45,7 @@ dependencies: repository: oci://registry-1.docker.io/bitnamicharts condition: postgresql-ha.enabled - name: redis - version: 20.3.0 + version: 20.11.3 repository: https://charts.bitnami.com/bitnami condition: redis.enabled - name: redis-ha @@ -53,21 +53,21 @@ dependencies: version: 4.26.1 condition: redis-ha.enabled - name: rabbitmq - version: 14.7.0 + version: 15.3.3 repository: https://charts.bitnami.com/bitnami condition: rabbitmq.enabled - name: nats - version: 8.4.9 + version: 9.0.6 repository: https://charts.bitnami.com/bitnami condition: nats.enabled - name: builder repository: oci://quay.io/codefresh/charts condition: builder.enabled - version: 1.3.0 + version: 1.4.0 - name: runner repository: oci://quay.io/codefresh/charts condition: runner.enabled - version: 1.3.0 + version: 1.4.0 - name: ingress-nginx version: 4.11.2 repository: https://kubernetes.github.io/ingress-nginx diff --git a/codefresh/README.md b/codefresh/README.md index 0b0f59f6a0..2159cd66a8 100644 --- a/codefresh/README.md +++ b/codefresh/README.md @@ -1,6 +1,6 @@ ## Codefresh On-Premises -![Version: 2.6.0](https://img.shields.io/badge/Version-2.6.0-informational?style=flat-square) ![AppVersion: 2.6.0](https://img.shields.io/badge/AppVersion-2.6.0-informational?style=flat-square) +![Version: 2.7.0](https://img.shields.io/badge/Version-2.7.0-informational?style=flat-square) ![AppVersion: 2.7.0](https://img.shields.io/badge/AppVersion-2.7.0-informational?style=flat-square) Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes. @@ -33,6 +33,8 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/ - [Projects pipelines limit](#projects-pipelines-limit) - [Enable session cookie](#enable-session-cookie) - [X-Frame-Options response header](#x-frame-options-response-header) + - [Auto-index creation in MongoDB](#auto-index-creation-in-mongodb) + - [Image digests in containers](#image-digests-in-containers) - [Configuring OIDC Provider](#configuring-oidc-provider) - [Upgrading](#upgrading) - [To 2.0.0](#to-200) @@ -45,6 +47,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/ - [To 2.4.0](#to-240) - [To 2.5.0](#to-250) - [To 2.6.0](#to-260) + - [To 2.7.0](#to-270) - [Rollback](#rollback) - [Troubleshooting](#troubleshooting) - [Values](#values) @@ -203,7 +206,7 @@ However, you might need to use external services like [MongoDB Atlas Database](h #### External MongoDB -**Important:** Recommended version of Mongo is 4.4.x +**Important:** Recommended version of Mongo is 6.x ```yaml seed: @@ -1201,6 +1204,68 @@ cfapi: USE_SHA256_GITHUB_SIGNATURE: "true" ``` +### Auto-index creation in MongoDB + +In Codefresh On-Prem 2.6.x, the `cfapi` can create indexes in MongoDB automatically. This feature is disabled by default. To enable it, set the following environment variable: + +> **Note!** Enabling this feature can cause performance degradation during the index creation process. + +> **Note!** It is recommended to add indexes during a maintenance window. The indexes list is provided in `codefresh/files/indexes//.json` files. + +```yaml +cfapi: + container: + env: + MONGOOSE_AUTO_INDEX: "true" +``` + +```yaml +argo-platform: + api-graphql: + env: + MONGO_AUTOMATIC_INDEX_CREATION: "true" +``` + +Ref: +- [Create an Index in Atlas DB](https://www.mongodb.com/docs/atlas/atlas-ui/indexes/#create-an-index) +- [Create an Index with mongosh](https://www.mongodb.com/docs/manual/reference/method/db.collection.createIndex/) + +### Image digests in containers + +In Codefresh On-Prem 2.6.x all Codefresh owner microservices include image digests in the default subchart values. + +For example, default values for `cfapi` might look like this: + +```yaml +container: + image: + registry: us-docker.pkg.dev/codefresh-enterprise/gcr.io + repository: codefresh/cf-api + tag: 21.268.1 + digest: "sha256:bae42f8efc18facc2bf93690fce4ab03ef9607cec4443fada48292d1be12f5f8" + pullPolicy: IfNotPresent +``` + +this resulting in the following image reference in the pod spec: + +```yaml +spec: + containers: + - name: cfapi + image: us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-api:21.268.1@sha256:bae42f8efc18facc2bf93690fce4ab03ef9607cec4443fada48292d1be12f5f8 +``` + +> **Note!** When the `digest` is providerd, the `tag` is ignored! You can omit digest and use tag only like the following `values.yaml` example: + +```yaml +cfapi: + container: + image: + tag: 21.268.1 + # -- Set empty tag for digest + digest: "" +``` + ## Configuring OIDC Provider OpenID Connect (OIDC) allows Codefresh Builds to access resources in your cloud provider (such as AWS, Azure, GCP), without needing to store cloud credentials as long-lived pipeline secret variables. @@ -1928,6 +1993,45 @@ cfapi: ### [What's new in 2.6.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-26) +#### Affected values + +[Image digests in containers](#image-digests-in-containers) + +#### Auto-index creation in MongoDB + +[Auto-index creation in MongoDB](#auto-index-creation-in-mongodb) + +### To 2.7.0 + +### [What's new in 2.7.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-27) + +#### Affected values + +- Added option to provide global `tolerations`/`nodeSelector`/`affinity` for all Codefresh subcharts +> **Note!** These global settings will not be applied to Bitnami subcharts (e.g. `mongodb`, `redis`, `rabbitmq`, `postgres`. etc) + +```yaml +global: + tolerations: + - key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + + nodeSelector: + key: "value" + + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" +``` + ## Troubleshooting ### Error: Failed to validate connection to Docker daemon; caused by Error: certificate has expired @@ -1989,6 +2093,10 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server ./configure-dind-certs.sh -n $RUNTIME_NAMESPACE https://$CODEFRESH_HOST $CODEFRESH_API_TOKEN ``` +### Consul Error: Refusing to rejoin cluster because the server has been offline for more than the configured server_rejoin_age_max + +After platform upgrade, Consul fails with the error `refusing to rejoin cluster because the server has been offline for more than the configured server_rejoin_age_max - consider wiping your data dir`. There is [known issue](https://github.com/hashicorp/consul/issues/20722) of **hashicorp/consul** behaviour. Try to wipe out or delete the consul PV with config data and restart Consul StatefulSet. + ## Values | Key | Type | Default | Description | @@ -2024,7 +2132,7 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server | argo-platform.runtime-monitor | object | See below | runtime-monitor Don't enable! Not used in onprem! | | argo-platform.ui | object | See below | ui | | argo-platform.useExternalSecret | bool | `false` | Use regular k8s secret object. Keep `false`! | -| builder | object | `{"affinity":{},"container":{"image":{"registry":"docker.io","repository":"library/docker","tag":"27.3-dind"}},"enabled":true,"initContainers":{"register":{"image":{"registry":"quay.io","repository":"codefresh/curl","tag":"8.10.1"}}},"nodeSelector":{},"podSecurityContext":{},"resources":{},"tolerations":[]}` | builder | +| builder | object | `{"affinity":{},"container":{"image":{"registry":"docker.io","repository":"library/docker","tag":"28.0-dind"}},"enabled":true,"initContainers":{"register":{"image":{"registry":"quay.io","repository":"codefresh/curl","tag":"8.11.1"}}},"nodeSelector":{},"podSecurityContext":{},"resources":{},"tolerations":[]}` | builder | | cf-broadcaster | object | See below | broadcaster | | cf-oidc-provider | object | See below | cf-oidc-provider | | cf-platform-analytics-etlstarter | object | See below | etl-starter | @@ -2087,6 +2195,7 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server | gencerts | object | See below | Job to generate internal runtime secrets. Required at first install. | | gitops-dashboard-manager | object | See below | gitops-dashboard-manager | | global | object | See below | Global parameters | +| global.affinity | object | `{}` | Global affinity constraints Apply affinity to all Codefresh subcharts. Will not be applied on Bitnami subcharts. | | global.appProtocol | string | `"https"` | Application protocol. | | global.appUrl | string | `"onprem.codefresh.local"` | Application root url. Will be used in Ingress objects as hostname | | global.broadcasterPort | int | `80` | Default broadcaster service port. | @@ -2116,7 +2225,7 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server | global.gitopsDashboardManagerService | string | `"gitops-dashboard-manager"` | Default gitops-dashboarad-manager service name. | | global.helmRepoManagerService | string | `"helm-repo-manager"` | Default helm-repo-manager service name. | | global.hermesService | string | `"hermes"` | Default hermes service name. | -| global.imagePullSecrets | list | `[]` | Global Docker registry secret names as array | +| global.imagePullSecrets | list | `["codefresh-registry"]` | Global Docker registry secret names as array | | global.imageRegistry | string | `""` | Global Docker image registry | | global.kubeIntegrationPort | int | `9000` | Default kube-integration service port. | | global.kubeIntegrationService | string | `"kube-integration"` | Default kube-integration service name. | @@ -2134,6 +2243,7 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server | global.natsPort | int | `4222` | Default nats service port. | | global.natsService | string | `"nats"` | Default nats service name. | | global.newrelicLicenseKey | string | `""` | New Relic Key | +| global.nodeSelector | object | `{}` | Global nodeSelector constraints Apply nodeSelector to all Codefresh subcharts. Will not be applied on Bitnami subcharts. | | global.oidcProviderClientId | string | `nil` | Default OIDC Provider service client ID in plain text. | | global.oidcProviderClientSecret | string | `nil` | Default OIDC Provider service client secret in plain text. | | global.oidcProviderPort | int | `443` | Default OIDC Provider service port. | @@ -2170,9 +2280,11 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server | global.runnerService | string | `"runner"` | Default runner service name. | | global.runtimeEnvironmentManagerPort | int | `80` | Default runtime-environment-manager service port. | | global.runtimeEnvironmentManagerService | string | `"runtime-environment-manager"` | Default runtime-environment-manager service name. | +| global.security | object | `{"allowInsecureImages":true}` | Bitnami | | global.storageClass | string | `""` | Global StorageClass for Persistent Volume(s) | | global.tlsSignPort | int | `4999` | Default tls-sign service port. | | global.tlsSignService | string | `"cfsign"` | Default tls-sign service name. | +| global.tolerations | list | `[]` | Global tolerations constraints Apply toleratons to all Codefresh subcharts. Will not be applied on Bitnami subcharts. | | helm-repo-manager | object | See below | helm-repo-manager | | hermes | object | See below | hermes | | hooks | object | See below | Pre/post-upgrade Job hooks. Updates images in `system/default` runtime. | diff --git a/codefresh/README.md.gotmpl b/codefresh/README.md.gotmpl index 335079a251..295d908120 100644 --- a/codefresh/README.md.gotmpl +++ b/codefresh/README.md.gotmpl @@ -33,6 +33,8 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/ - [Projects pipelines limit](#projects-pipelines-limit) - [Enable session cookie](#enable-session-cookie) - [X-Frame-Options response header](#x-frame-options-response-header) + - [Auto-index creation in MongoDB](#auto-index-creation-in-mongodb) + - [Image digests in containers](#image-digests-in-containers) - [Configuring OIDC Provider](#configuring-oidc-provider) - [Upgrading](#upgrading) - [To 2.0.0](#to-200) @@ -45,6 +47,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/ - [To 2.4.0](#to-240) - [To 2.5.0](#to-250) - [To 2.6.0](#to-260) + - [To 2.7.0](#to-270) - [Rollback](#rollback) - [Troubleshooting](#troubleshooting) - [Values](#values) @@ -204,7 +207,7 @@ However, you might need to use external services like [MongoDB Atlas Database](h #### External MongoDB -**Important:** Recommended version of Mongo is 4.4.x +**Important:** Recommended version of Mongo is 6.x ```yaml seed: @@ -1206,6 +1209,69 @@ cfapi: USE_SHA256_GITHUB_SIGNATURE: "true" ``` +### Auto-index creation in MongoDB + +In Codefresh On-Prem 2.6.x, the `cfapi` can create indexes in MongoDB automatically. This feature is disabled by default. To enable it, set the following environment variable: + +> **Note!** Enabling this feature can cause performance degradation during the index creation process. + +> **Note!** It is recommended to add indexes during a maintenance window. The indexes list is provided in `codefresh/files/indexes//.json` files. + +```yaml +cfapi: + container: + env: + MONGOOSE_AUTO_INDEX: "true" +``` + +```yaml +argo-platform: + api-graphql: + env: + MONGO_AUTOMATIC_INDEX_CREATION: "true" +``` + +Ref: +- [Create an Index in Atlas DB](https://www.mongodb.com/docs/atlas/atlas-ui/indexes/#create-an-index) +- [Create an Index with mongosh](https://www.mongodb.com/docs/manual/reference/method/db.collection.createIndex/) + +### Image digests in containers + +In Codefresh On-Prem 2.6.x all Codefresh owner microservices include image digests in the default subchart values. + +For example, default values for `cfapi` might look like this: + +```yaml +container: + image: + registry: us-docker.pkg.dev/codefresh-enterprise/gcr.io + repository: codefresh/cf-api + tag: 21.268.1 + digest: "sha256:bae42f8efc18facc2bf93690fce4ab03ef9607cec4443fada48292d1be12f5f8" + pullPolicy: IfNotPresent +``` + +this resulting in the following image reference in the pod spec: + +```yaml +spec: + containers: + - name: cfapi + image: us-docker.pkg.dev/codefresh-enterprise/gcr.io/codefresh/cf-api:21.268.1@sha256:bae42f8efc18facc2bf93690fce4ab03ef9607cec4443fada48292d1be12f5f8 +``` + +> **Note!** When the `digest` is providerd, the `tag` is ignored! You can omit digest and use tag only like the following `values.yaml` example: + +```yaml +cfapi: + container: + image: + tag: 21.268.1 + # -- Set empty tag for digest + digest: "" +``` + + ## Configuring OIDC Provider OpenID Connect (OIDC) allows Codefresh Builds to access resources in your cloud provider (such as AWS, Azure, GCP), without needing to store cloud credentials as long-lived pipeline secret variables. @@ -1936,6 +2002,45 @@ cfapi: ### [What's new in 2.6.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-26) +#### Affected values + +[Image digests in containers](#image-digests-in-containers) + +#### Auto-index creation in MongoDB + +[Auto-index creation in MongoDB](#auto-index-creation-in-mongodb) + +### To 2.7.0 + +### [What's new in 2.7.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-27) + +#### Affected values + +- Added option to provide global `tolerations`/`nodeSelector`/`affinity` for all Codefresh subcharts +> **Note!** These global settings will not be applied to Bitnami subcharts (e.g. `mongodb`, `redis`, `rabbitmq`, `postgres`. etc) + +```yaml +global: + tolerations: + - key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + + nodeSelector: + key: "value" + + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" +``` + ## Troubleshooting ### Error: Failed to validate connection to Docker daemon; caused by Error: certificate has expired @@ -1997,4 +2102,8 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server ./configure-dind-certs.sh -n $RUNTIME_NAMESPACE https://$CODEFRESH_HOST $CODEFRESH_API_TOKEN ``` +### Consul Error: Refusing to rejoin cluster because the server has been offline for more than the configured server_rejoin_age_max + +After platform upgrade, Consul fails with the error `refusing to rejoin cluster because the server has been offline for more than the configured server_rejoin_age_max - consider wiping your data dir`. There is [known issue](https://github.com/hashicorp/consul/issues/20722) of **hashicorp/consul** behaviour. Try to wipe out or delete the consul PV with config data and restart Consul StatefulSet. + {{ template "chart.valuesSection" . }} diff --git a/codefresh/files/indexes/2.6/agenttasks.json b/codefresh/files/indexes/2.6/agenttasks.json new file mode 100644 index 0000000000..8c761fcd02 --- /dev/null +++ b/codefresh/files/indexes/2.6/agenttasks.json @@ -0,0 +1,29 @@ +[ + { + "v" : 2.0, + "key" : { + "_id" : 1.0 + }, + "name" : "_id_" + }, + { + "v" : 2.0, + "key" : { + "metadata.accountId" : 1, + "metadata.reIdentifier" : 1, + "metadata.shouldExecute" : 1, + "metadata.startAt" : 1, + "metadata.status" : 1, + "metadata.expireAt" : 1 + }, + "name" : "metadata.accountId_1_metadata.reIdentifier_1_metadata.shouldExecute_1_metadata.startAt_1_metadata.status_1_metadata.expireAt_1" + }, + { + "v" : 2.0, + "key" : { + "metadata.expireAt" : 1 + }, + "name" : "metadata.expireAt_1", + "expireAfterSeconds" : 0.0 + } +] diff --git a/codefresh/files/indexes/2.6/analysisruns.json b/codefresh/files/indexes/2.6/analysisruns.json new file mode 100644 index 0000000000..2a5c937527 --- /dev/null +++ b/codefresh/files/indexes/2.6/analysisruns.json @@ -0,0 +1,332 @@ +[ + { + "v" : 2.0, + "key" : { + "_id" : 1.0 + }, + "name" : "_id_" + }, + { + "v" : 2.0, + "key" : { + "__passiveReferencedBy.name" : 1.0 + }, + "name" : "__passiveReferencedBy.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__passiveReferencedBy.name" : 1.0, + "__passiveReferencedBy.kind" : 1.0, + "__passiveReferencedBy.namespace" : 1.0, + "__passiveReferencedBy.group" : 1.0, + "__passiveReferencedBy.version" : 1.0 + }, + "name" : "__passiveReferencedBy.name_1___passiveReferencedBy.kind_1___passiveReferencedBy.namespace_1___passiveReferencedBy.group_1___passiveReferencedBy.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__passiveReferences.name" : 1.0 + }, + "name" : "__passiveReferences.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__passiveReferences.name" : 1.0, + "__passiveReferences.kind" : 1.0, + "__passiveReferences.namespace" : 1.0, + "__passiveReferences.group" : 1.0, + "__passiveReferences.version" : 1.0 + }, + "name" : "__passiveReferences.name_1___passiveReferences.kind_1___passiveReferences.namespace_1___passiveReferences.group_1___passiveReferences.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferencedBy.name" : 1.0 + }, + "name" : "__inferredReferencedBy.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferencedBy.name" : 1.0, + "__inferredReferencedBy.kind" : 1.0, + "__inferredReferencedBy.namespace" : 1.0, + "__inferredReferencedBy.group" : 1.0, + "__inferredReferencedBy.version" : 1.0 + }, + "name" : "__inferredReferencedBy.name_1___inferredReferencedBy.kind_1___inferredReferencedBy.namespace_1___inferredReferencedBy.group_1___inferredReferencedBy.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferences.name" : 1.0 + }, + "name" : "__inferredReferences.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferences.name" : 1.0, + "__inferredReferences.kind" : 1.0, + "__inferredReferences.namespace" : 1.0, + "__inferredReferences.group" : 1.0, + "__inferredReferences.version" : 1.0 + }, + "name" : "__inferredReferences.name_1___inferredReferences.kind_1___inferredReferences.namespace_1___inferredReferences.group_1___inferredReferences.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "updatedAt" : 1.0 + }, + "name" : "updatedAt_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "projects" : 1.0 + }, + "name" : "projects_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.name" : 1.0 + }, + "name" : "metadata.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.labels" : 1.0 + }, + "name" : "metadata.labels_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.accountId" : 1.0, + "metadata.runtime" : 1.0, + "metadata.cluster" : 1.0, + "metadata.namespace" : 1.0, + "metadata.group" : 1.0, + "metadata.version" : 1.0, + "metadata.kind" : 1.0, + "metadata.name" : 1.0, + "metadata.uid" : 1.0, + "metadata.revision" : 1.0 + }, + "name" : "metadata.accountId_1_metadata.runtime_1_metadata.cluster_1_metadata.namespace_1_metadata.group_1_metadata.version_1_metadata.kind_1_metadata.name_1_metadata.uid_1_metadata.revision_1", + "unique" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.accountId" : 1, + "revision" : 1, + "metadata.labels.rollout-type" : 1, + "metadata.runtime" : 1, + "metadata.labels.step-index" : 1 + }, + "name" : "metadata.accountId_1_revision_1_metadata.labels.rollout-type_1_metadata.runtime_1_metadata.labels.step-index_1" + }, + { + "v" : 2.0, + "key" : { + "metadata.accountId" : 1, + "revision" : 1, + "metadata.labels.rollout-type" : 1, + "metadata.runtime" : 1, + "metadata.creationTimestamp" : -1 + }, + "name" : "metadata.accountId_1_revision_1_metadata.labels.rollout-type_1_metadata.runtime_1_metadata.creationTimestamp_-1" + }, + { + "v" : 2.0, + "key" : { + "ownerReferences.uid" : 1, + "revision" : 1 + }, + "name" : "ownerReferences.uid_1_revision_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + } +] diff --git a/codefresh/files/indexes/2.6/images-binaries.json b/codefresh/files/indexes/2.6/images-binaries.json new file mode 100644 index 0000000000..338df48e63 --- /dev/null +++ b/codefresh/files/indexes/2.6/images-binaries.json @@ -0,0 +1,95 @@ +[ + { + "v" : 2.0, + "key" : { + "_id" : 1.0 + }, + "name" : "_id_" + }, + { + "v" : 2.0, + "key" : { + "accountId" : 1.0, + "imageName" : 1.0, + "repositoryName" : 1.0 + }, + "name" : "accountId_1_imageName_1_repositoryName_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "accountId" : 1.0, + "repositoryName" : 1.0, + "gitRepository" : 1.0 + }, + "name" : "accountId_1_repositoryName_1_gitRepository_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "accountId" : 1.0, + "repositoryName" : 1.0, + "branch" : 1.0 + }, + "name" : "accountId_1_repositoryName_1_branch_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "runtime.name" : 1.0 + }, + "name" : "runtime.name_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "accountId" : 1.0, + "repoDigest" : 1.0 + }, + "name" : "accountId_1_repoDigest_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "accountId" : 1.0, + "internalImageId" : 1.0 + }, + "name" : "accountId_1_internalImageId_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "accountId" : 1, + "binaryId" : 1, + "lastUpdate" : -1, + "_id" : -1 + }, + "name" : "accountId_1_binaryId_1_lastUpdate_-1__id_-1" + }, + { + "v" : 2.0, + "key" : { + "accountId" : 1, + "imageName" : 1 + }, + "name" : "accountId_1_imageName_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + } +] diff --git a/codefresh/files/indexes/2.6/releases.json b/codefresh/files/indexes/2.6/releases.json new file mode 100644 index 0000000000..e48f117e5a --- /dev/null +++ b/codefresh/files/indexes/2.6/releases.json @@ -0,0 +1,196 @@ +[ + { + "v" : 2.0, + "key" : { + "_id" : 1.0 + }, + "name" : "_id_" + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.name" : 1.0 + }, + "name" : "applicationMetadata.name_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.labels" : 1.0 + }, + "name" : "applicationMetadata.labels_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "application.prs.type" : 1.0 + }, + "name" : "application.prs.type_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "application.prs.key" : 1.0 + }, + "name" : "application.prs.key_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "application.prs.accountId" : 1.0 + }, + "name" : "application.prs.accountId_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "application.issues.type" : 1.0 + }, + "name" : "application.issues.type_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "application.issues.key" : 1.0 + }, + "name" : "application.issues.key_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "application.issues.accountId" : 1.0 + }, + "name" : "application.issues.accountId_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.accountId" : 1.0, + "applicationMetadata.runtime" : 1.0, + "applicationMetadata.name" : 1.0, + "applicationMetadata.namespace" : 1.0, + "application.issues.key" : 1.0 + }, + "name" : "applicationMetadata.accountId_1_applicationMetadata.runtime_1_applicationMetadata.name_1_applicationMetadata.namespace_1_application.issues.key_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.accountId" : 1.0, + "applicationMetadata.runtime" : 1.0, + "applicationMetadata.name" : 1.0, + "applicationMetadata.namespace" : 1.0, + "application.prs.key" : 1.0 + }, + "name" : "applicationMetadata.accountId_1_applicationMetadata.runtime_1_applicationMetadata.name_1_applicationMetadata.namespace_1_application.prs.key_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.accountId" : 1.0, + "applicationMetadata.runtime" : 1.0, + "applicationMetadata.name" : 1.0, + "applicationMetadata.namespace" : 1.0, + "application.committers.userName" : 1.0 + }, + "name" : "applicationMetadata.accountId_1_applicationMetadata.runtime_1_applicationMetadata.name_1_applicationMetadata.namespace_1_application.committers.userName_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.accountId" : 1.0, + "applicationMetadata.runtime" : 1.0, + "applicationMetadata.name" : 1.0, + "applicationMetadata.namespace" : 1.0, + "applicationMetadata.group" : 1.0, + "applicationMetadata.version" : 1.0, + "applicationMetadata.kind" : 1.0, + "historyId" : -1.0 + }, + "name" : "applicationMetadata.accountId_1_applicationMetadata.runtime_1_applicationMetadata.name_1_applicationMetadata.namespace_1_applicationMetadata.group_1_applicationMetadata.version_1_applicationMetadata.kind_1_historyId_-1", + "background" : true, + "unique" : true + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.accountId" : 1.0, + "applicationMetadata.runtime" : 1.0, + "applicationMetadata.name" : 1.0, + "applicationMetadata.namespace" : 1.0, + "applicationMetadata.group" : 1.0, + "applicationMetadata.version" : 1.0, + "reportedToJira" : 1.0, + "historyId" : 1.0, + "application.status.syncStartedAt" : 1.0 + }, + "name" : "applicationMetadata.accountId_1_applicationMetadata.runtime_1_applicationMetadata.name_1_applicationMetadata.namespace_1_applicationMetadata.group_1_applicationMetadata.version_1_reportedToJira_1_historyId_1_application.status.syncStartedAt_1", + "background" : true + }, + { + "v" : 2.0, + "key" : { + "fromState.services.revision" : 1, + "fromState.services.name" : 1, + "applicationMetadata.accountId" : 1 + }, + "name" : "fromState.services.revision_1_fromState.services.name_1_applicationMetadata.accountId_1" + }, + { + "v" : 2.0, + "key" : { + "syncOperationRevision" : 1, + "applicationMetadata.name" : 1, + "applicationMetadata.accountId" : 1, + "historyId" : -1 + }, + "name" : "syncOperationRevision_1_applicationMetadata.name_1_applicationMetadata.accountId_1_historyId_-1" + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.name" : 1, + "applicationMetadata.accountId" : 1, + "historyId" : -1 + }, + "name" : "applicationMetadata.name_1_applicationMetadata.accountId_1_historyId_-1" + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.name" : 1, + "applicationMetadata.accountId" : 1, + "application.status.healthStatus" : 1 + }, + "name" : "applicationMetadata.name_1_applicationMetadata.accountId_1_application.status.healthStatus_1" + }, + { + "v" : 2.0, + "key" : { + "applicationMetadata.name" : 1, + "applicationMetadata.accountId" : 1, + "current" : 1 + }, + "name" : "applicationMetadata.name_1_applicationMetadata.accountId_1_current_1" + }, + { + "v" : 2.0, + "key" : { + "application.status.revision" : 1, + "applicationMetadata.name" : 1, + "applicationMetadata.accountId" : 1 + }, + "name" : "application.status.revision_1_applicationMetadata.name_1_applicationMetadata.accountId_1" + } +] diff --git a/codefresh/files/indexes/2.6/rollouts.json b/codefresh/files/indexes/2.6/rollouts.json new file mode 100644 index 0000000000..7d4519f149 --- /dev/null +++ b/codefresh/files/indexes/2.6/rollouts.json @@ -0,0 +1,393 @@ +[ + { + "v" : 2.0, + "key" : { + "_id" : 1.0 + }, + "name" : "_id_" + }, + { + "v" : 2.0, + "key" : { + "__passiveReferencedBy.name" : 1.0 + }, + "name" : "__passiveReferencedBy.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__passiveReferencedBy.name" : 1.0, + "__passiveReferencedBy.kind" : 1.0, + "__passiveReferencedBy.namespace" : 1.0, + "__passiveReferencedBy.group" : 1.0, + "__passiveReferencedBy.version" : 1.0 + }, + "name" : "__passiveReferencedBy.name_1___passiveReferencedBy.kind_1___passiveReferencedBy.namespace_1___passiveReferencedBy.group_1___passiveReferencedBy.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__passiveReferences.name" : 1.0 + }, + "name" : "__passiveReferences.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__passiveReferences.name" : 1.0, + "__passiveReferences.kind" : 1.0, + "__passiveReferences.namespace" : 1.0, + "__passiveReferences.group" : 1.0, + "__passiveReferences.version" : 1.0 + }, + "name" : "__passiveReferences.name_1___passiveReferences.kind_1___passiveReferences.namespace_1___passiveReferences.group_1___passiveReferences.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferencedBy.name" : 1.0 + }, + "name" : "__inferredReferencedBy.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferencedBy.name" : 1.0, + "__inferredReferencedBy.kind" : 1.0, + "__inferredReferencedBy.namespace" : 1.0, + "__inferredReferencedBy.group" : 1.0, + "__inferredReferencedBy.version" : 1.0 + }, + "name" : "__inferredReferencedBy.name_1___inferredReferencedBy.kind_1___inferredReferencedBy.namespace_1___inferredReferencedBy.group_1___inferredReferencedBy.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferences.name" : 1.0 + }, + "name" : "__inferredReferences.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "__inferredReferences.name" : 1.0, + "__inferredReferences.kind" : 1.0, + "__inferredReferences.namespace" : 1.0, + "__inferredReferences.group" : 1.0, + "__inferredReferences.version" : 1.0 + }, + "name" : "__inferredReferences.name_1___inferredReferences.kind_1___inferredReferences.namespace_1___inferredReferences.group_1___inferredReferences.version_1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "updatedAt" : 1.0 + }, + "name" : "updatedAt_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "projects" : 1.0 + }, + "name" : "projects_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.name" : 1.0 + }, + "name" : "metadata.name_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.labels" : 1.0 + }, + "name" : "metadata.labels_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "source.syncStartedAt" : 1.0 + }, + "name" : "source.syncStartedAt_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "source.gitSource" : 1.0 + }, + "name" : "source.gitSource_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.accountId" : 1.0, + "metadata.runtime" : 1.0, + "metadata.cluster" : 1.0, + "metadata.namespace" : 1.0, + "metadata.group" : 1.0, + "metadata.version" : 1.0, + "metadata.kind" : 1.0, + "metadata.name" : 1.0, + "metadata.revision" : 1.0, + "metadata.uid" : 1.0, + "metadata.labels.app\\u002ekubernetes\\u002eio/instance" : 1.0 + }, + "name" : "metadata.accountId_1_metadata.runtime_1_metadata.cluster_1_metadata.namespace_1_metadata.group_1_metadata.version_1_metadata.kind_1_metadata.name_1_metadata.revision_1_metadata.uid_1_metadata.labels.app\\u002ekubernetes\\u002eio/instance_1", + "unique" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "source.gitSourceUID" : 1.0 + }, + "name" : "source.gitSourceUID_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "source.gitSourceNamespace" : 1.0 + }, + "name" : "source.gitSourceNamespace_1", + "background" : true, + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + }, + { + "v" : 2.0, + "key" : { + "metadata.appName" : 1, + "metadata.accountId" : 1, + "metadata.runtime" : 1, + "_id" : -1 + }, + "name" : "metadata.appName_1_metadata.accountId_1_metadata.runtime_1__id_-1", + "collation" : { + "locale" : "en_US", + "caseLevel" : false, + "caseFirst" : "off", + "strength" : 1.0, + "numericOrdering" : false, + "alternate" : "non-ignorable", + "maxVariable" : "punct", + "normalization" : false, + "backwards" : false, + "version" : "57.1" + } + } +] diff --git a/codefresh/files/indexes/2.6/workflowprocesses.json b/codefresh/files/indexes/2.6/workflowprocesses.json new file mode 100644 index 0000000000..e2e6e65a32 --- /dev/null +++ b/codefresh/files/indexes/2.6/workflowprocesses.json @@ -0,0 +1,460 @@ +[ + { + "v" : 1.0, + "key" : { + "account" : 1.0, + "pendingLicense" : 1.0, + "created" : 1.0 + }, + "name" : "account_1_pendingLicense_1_created_1" + }, + { + "v" : 1.0, + "key" : { + "pipeline" : 1.0, + "status" : 1.0 + }, + "name" : "pipeline_1_status_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1.0, + "triggerType" : 1.0 + }, + "name" : "account_1_triggerType_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1.0, + "pipelineInfo.pipelineId" : 1.0 + }, + "name" : "account_1_pipelineInfo.pipelineId_1" + }, + { + "v" : 1.0, + "key" : { + "account" : 1.0, + "startImmediately" : 1.0, + "status" : 1.0 + }, + "name" : "account_1_startImmediately_1_status_1" + }, + { + "v" : 1.0, + "key" : { + "account" : 1.0, + "scmMetadata.repoName" : 1.0, + "scmMetadata.repoOwner" : 1.0, + "trigger" : 1.0, + "service" : 1.0 + }, + "name" : "account_1_scmMetadata.repoName_1_scmMetadata.repoOwner_1_trigger_1_service_1" + }, + { + "v" : 1.0, + "key" : { + "isPublic" : 1.0 + }, + "name" : "isPublic_1" + }, + { + "v" : 2.0, + "key" : { + "codefreshEnv" : 1, + "status" : 1, + "shouldPerformFinishSystem" : 1, + "_id" : 1 + }, + "name" : "codefreshEnv_1_status_1_shouldPerformFinishSystem_1__id_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "helmInfo.boardId" : 1 + }, + "name" : "account_1_helmInfo.boardId_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1.0, + "environs" : 1.0 + }, + "name" : "account_1_environs_1" + }, + { + "v" : 1.0, + "key" : { + "account" : 1.0, + "status" : 1.0, + "trigger" : 1.0 + }, + "name" : "account_1_status_1_trigger_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "pipeline" : 1, + "trigger" : 1, + "_id" : -1 + }, + "name" : "account_1_pipeline_1_trigger_1__id_-1" + }, + { + "v" : 1.0, + "key" : { + "scmMetadata.branchName" : 1.0, + "account" : 1.0, + "pipeline" : 1.0, + "created" : -1.0, + "finished" : 1.0 + }, + "name" : "scmMetadata.branchName_1_account_1_pipeline_1_created_-1_finished_1" + }, + { + "v" : 2.0, + "key" : { + "trigger" : 1.0, + "account" : 1.0, + "status" : 1.0, + "_id" : -1.0 + }, + "name" : "trigger_1_account_1_status_1__id_-1" + }, + { + "v" : 1.0, + "key" : { + "account" : 1.0, + "trigger" : 1.0, + "scmMetadata.repoName" : 1.0, + "service" : 1.0 + }, + "name" : "account_1_trigger_1_scmMetadata.repoName_1_service_1" + }, + { + "v" : 1.0, + "key" : { + "service" : 1.0, + "status" : 1.0 + }, + "name" : "service_1_status_1" + }, + { + "v" : 1.0, + "key" : { + "finished" : 1.0 + }, + "name" : "finished_1" + }, + { + "v" : 2.0, + "key" : { + "healthStatus.engine.status" : 1.0 + }, + "name" : "healthStatus.engine.status_1" + }, + { + "v" : 2.0, + "key" : { + "codefreshEnv" : 1, + "status" : 1, + "_id" : 1 + }, + "name" : "codefreshEnv_1_status_1__id_1" + }, + { + "v" : 1.0, + "key" : { + "account" : 1.0, + "service" : 1.0, + "trigger" : 1.0 + }, + "name" : "account_1_service_1_trigger_1" + }, + { + "v" : 1.0, + "key" : { + "scmMetadata.branchName" : 1.0, + "service" : 1.0, + "status" : 1.0, + "created" : -1.0 + }, + "name" : "scmMetadata.branchName_1_service_1_status_1_created_-1" + }, + { + "v" : 1.0, + "key" : { + "status" : 1.0, + "trigger" : 1.0 + }, + "name" : "status_1_trigger_1" + }, + { + "v" : 2.0, + "key" : { + "pipeline" : 1.0, + "finished" : -1.0 + }, + "name" : "pipeline_1_finished_-1" + }, + { + "v" : 1.0, + "key" : { + "progress" : 1.0 + }, + "name" : "progress_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1.0, + "environ" : 1.0 + }, + "name" : "account_1_environ_1" + }, + { + "v" : 2.0, + "key" : { + "status" : 1, + "created" : -1 + }, + "name" : "status_1_created_-1" + }, + { + "v" : 2.0, + "key" : { + "createdAt" : 1.0 + }, + "name" : "createdAt_1" + }, + { + "v" : 1.0, + "key" : { + "request" : 1.0 + }, + "name" : "request_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "_id" : 1, + "scmMetadata.repoName" : 1 + }, + "name" : "account_1__id_1_scmMetadata.repoName_1" + }, + { + "v" : 2.0, + "key" : { + "pipeline" : 1, + "created" : -1 + }, + "name" : "pipeline_1_created_-1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "status" : 1, + "created" : 1 + }, + "name" : "account_1_status_1_created_1" + }, + { + "v" : 2.0, + "key" : { + "status" : 1, + "runtimeEnvironmentMetadata.agent" : 1, + "created" : 1 + }, + "name" : "status_1_runtimeEnvironmentMetadata.agent_1_created_1" + }, + { + "v" : 2.0, + "key" : { + "created" : 1 + }, + "name" : "created_1", + "expireAfterSeconds" : 31536000.0 + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "status" : 1, + "trigger" : 1, + "pipeline" : 1, + "keepPVCsForPendingApproval" : 1 + }, + "name" : "account_1_status_1_trigger_1_pipeline_1_keepPVCsForPendingApproval_1", + "partialFilterExpression" : { + "status" : { + "$in" : [ + "pending", + "delayed", + "elected", + "running", + "terminating", + "pending-approval" + ] + } + } + }, + { + "v" : 2.0, + "key" : { + "_id" : 1.0 + }, + "name" : "_id_" + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "scmMetadata.revision" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_scmMetadata.revision_1__id_-1_pipeline_1", + "partialFilterExpression" : { + "scmMetadata.revision" : { + "$exists" : true + } + } + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "scmMetadata.userName" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1_scmMetadata.userName_1__id_-1_pipeline_1", + "partialFilterExpression" : { + "scmMetadata.userName" : { + "$exists" : true + } + } + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "annotations.key" : 1, + "annotations.value" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1_annotations.key_1_annotations.value_1__id_-1_pipeline_1", + "sparse" : true + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "pipelineTrigger" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1_pipelineTrigger_1__id_-1_pipeline_1", + "partialFilterExpression" : { + "pipelineTrigger" : { + "$exists" : true + } + } + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "scmMetadata.branchName" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1_scmMetadata.branchName_1__id_-1_pipeline_1", + "partialFilterExpression" : { + "scmMetadata.branchName" : { + "$exists" : true + } + } + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1__id_-1_pipeline_1" + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "scmMetadata.provider" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1_scmMetadata.provider_1__id_-1_pipeline_1", + "partialFilterExpression" : { + "scmMetadata.provider" : { + "$exists" : true + } + } + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "scmMetadata.repoName" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1_scmMetadata.repoName_1__id_-1_pipeline_1", + "partialFilterExpression" : { + "scmMetadata.repoName" : { + "$exists" : true + } + } + }, + { + "v" : 2.0, + "key" : { + "account" : 1, + "trigger" : 1, + "scmMetadata.provider" : 1, + "scmMetadata.event" : 1, + "_id" : -1, + "pipeline" : 1 + }, + "name" : "account_1_trigger_1_scmMetadata.provider_1_scmMetadata.event_1__id_-1_pipeline_1", + "partialFilterExpression" : { + "scmMetadata.event" : { + "$exists" : true + }, + "scmMetadata.provider" : { + "$exists" : true + } + } + }, + { + "v" : 2.0, + "key" : { + "pipeline" : 1, + "_id" : -1 + }, + "name" : "pipeline_1__id_-1" + } +] diff --git a/codefresh/templates/secrets/regsecret.yaml b/codefresh/templates/secrets/regsecret.yaml index 50a060885d..40624470c1 100644 --- a/codefresh/templates/secrets/regsecret.yaml +++ b/codefresh/templates/secrets/regsecret.yaml @@ -1,23 +1,10 @@ -{{ $name := printf "%v-%v-%v" .Release.Name .Values.global.codefresh "registry" }} --- apiVersion: v1 kind: Secret metadata: - name: {{ $name }} + name: codefresh-registry labels: {{ include "codefresh.labels" . | nindent 4 }} type: kubernetes.io/dockerconfigjson data: .dockerconfigjson: {{ include "codefresh.imagePullSecret" . }} ---- -{{- if index .Values "argo-platform" "enabled" }} -apiVersion: v1 -kind: Secret -metadata: - name: {{ .Release.Name }}-registry - labels: - {{ include "codefresh.labels" . | nindent 4 }} -type: kubernetes.io/dockerconfigjson -data: - .dockerconfigjson: {{ include "codefresh.imagePullSecret" . }} -{{- end }} \ No newline at end of file diff --git a/codefresh/tests/misc/global_constrains_test.yaml b/codefresh/tests/misc/global_constrains_test.yaml new file mode 100644 index 0000000000..55fdc75a3b --- /dev/null +++ b/codefresh/tests/misc/global_constrains_test.yaml @@ -0,0 +1,1065 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/quintush/helm-unittest/master/schema/helm-testsuite.json +suite: Should test global tolerations/nodeSelector/affinity/imagePullSecret +templates: + - charts/**/*.yaml + - internal-gateway.yaml +tests: + - it: argo-platform-abac should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/abac/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + + - it: argo-platform-analytics-reporter should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/analytics-reporter/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-api-events should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/api-events/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-api-graphql should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/api-graphql/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-audit should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/audit/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-broadcaster should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/broadcaster/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-cron-executor should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/cron-executor/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-event-handler should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/event-handler/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-promotion-orchestrator should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/promotion-orchestrator/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-platform-ui should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-platform/templates/ui/workload.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: argo-hub-platform should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/argo-hub-platform/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cf-builder should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/builder/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cf-runner should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/runner/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cf-broadcaster should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cf-broadcaster/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cfapi should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cfapi/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cfsign should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cfsign/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cfui should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cfui/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: charts-manager should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/charts-manager/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cluster-providers should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cluster-providers/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: context-manager should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/context-manager/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: cronus should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cronus/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: gitops-dashboard-manager should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/gitops-dashboard-manager/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: helm-repo-manager should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/helm-repo-manager/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: hermes should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/hermes/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: internal-gateway should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: internal-gateway.yaml + documentSelector: + path: kind + value: Deployment + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: k8s-monitor should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/k8s-monitor/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: kube-integration should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/kube-integration/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: nomios should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/nomios/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: pipeline-manager should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/pipeline-manager/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: platform-analytics should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cf-platform-analytics-platform/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: platform-analytics-etl should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/cf-platform-analytics-etlstarter/templates/etl/system-etl-postgres/controller.yaml + asserts: + - contains: + path: spec.jobTemplate.spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.jobTemplate.spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.jobTemplate.spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.jobTemplate.spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: runtime-environment-manager should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/runtime-environment-manager/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" + + - it: tasker-kubernetes should have global tolerations/nodeSelector/affinity/imagePullSecret + values: + - ../values/global.yaml + template: charts/tasker-kubernetes/templates/controller.yaml + asserts: + - contains: + path: spec.template.spec.imagePullSecrets + content: + name: my-secret + - contains: + path: spec.template.spec.tolerations + content: + key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + - equal: + path: spec.template.spec.nodeSelector + value: + key: "value" + - equal: + path: spec.template.spec.affinity + value: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" diff --git a/codefresh/tests/misc/misc_test.yaml b/codefresh/tests/misc/misc_test.yaml new file mode 100644 index 0000000000..b454c3d005 --- /dev/null +++ b/codefresh/tests/misc/misc_test.yaml @@ -0,0 +1,27 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/helm-unittest/helm-unittest/master/schema/helm-testsuite.json +suite: Misc tests +templates: + - charts/argo-platform/templates/**/*.yaml +tests: + - it: argo-platform api-graphql should have empty CACHE_PASSWORD when no .Values.global.redisPassword or .Values.global.redisPasswordSecretKeyRef is provided + template: charts/argo-platform/templates/api-graphql/workload.yaml + set: + global.redisPassword: "" + asserts: + - notContains: + path: spec.template.spec.containers[0].env + content: + name: CACHE_PASSWORD + any: true + + - it: argo-platform promotion-orchestrator should have empty CACHE_PASSWORD when no .Values.global.redisPassword or .Values.global.redisPasswordSecretKeyRef is provided + template: charts/argo-platform/templates/promotion-orchestrator/workload.yaml + set: + global.redisPassword: "" + asserts: + - notContains: + path: spec.template.spec.containers[0].env + content: + name: CACHE_PASSWORD + any: true + diff --git a/codefresh/tests/values/global.yaml b/codefresh/tests/values/global.yaml new file mode 100644 index 0000000000..a0a98dffc0 --- /dev/null +++ b/codefresh/tests/values/global.yaml @@ -0,0 +1,22 @@ +global: + imagePullSecrets: + - my-secret + + tolerations: + - key: "key" + operator: "Equal" + value: "value" + effect: "NoSchedule" + + nodeSelector: + key: "value" + + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: "key" + operator: "In" + values: + - "value" diff --git a/codefresh/values.yaml b/codefresh/values.yaml index 1c3ca5f26e..ad2c636989 100644 --- a/codefresh/values.yaml +++ b/codefresh/values.yaml @@ -36,7 +36,7 @@ seed: image: registry: quay.io repository: codefresh/mongosh - tag: 2.3.1 + tag: 2.3.7 # -- Root user in plain text (required ONLY for seed job!). mongodbRootUser: "root" # -- Root user from existing secret @@ -156,7 +156,8 @@ global: imageRegistry: "" # -- Global Docker registry secret names as array - imagePullSecrets: [] + imagePullSecrets: + - 'codefresh-registry' # -- Global StorageClass for Persistent Volume(s) storageClass: "" @@ -164,6 +165,18 @@ global: # -- Global Env vars env: {} + # -- Global tolerations constraints + # Apply toleratons to all Codefresh subcharts. Will not be applied on Bitnami subcharts. + tolerations: [] + + # -- Global affinity constraints + # Apply affinity to all Codefresh subcharts. Will not be applied on Bitnami subcharts. + affinity: {} + + # -- Global nodeSelector constraints + # Apply nodeSelector to all Codefresh subcharts. Will not be applied on Bitnami subcharts. + nodeSelector: {} + # -- New Relic Key newrelicLicenseKey: "" @@ -417,6 +430,10 @@ global: # Use `.Values.seed.postgresSeedJob` instead postgresSeedJob: {} + # -- Bitnami + security: + allowInsecureImages: true + # -- Pre/post-upgrade Job hooks. # Updates images in `system/default` runtime. # @default -- See below @@ -425,7 +442,7 @@ hooks: image: registry: quay.io repository: codefresh/mongosh - tag: 2.3.1 + tag: 2.3.7 affinity: {} nodeSelector: {} podSecurityContext: {} @@ -454,21 +471,21 @@ postgresqlCleanJob: # -- runtimeImages # @default -- See below runtimeImages: - COMPOSE_IMAGE: quay.io/codefresh/compose:v2.28.1-1.5.0 - CONTAINER_LOGGER_IMAGE: us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/cf-container-logger:1.11.7 - DIND_IMAGE: us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/dind:26.1.4-1.28.8 - DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.3.17 + COMPOSE_IMAGE: quay.io/codefresh/compose:v2.32.2-1.5.2 + CONTAINER_LOGGER_IMAGE: quay.io/codefresh/cf-container-logger:1.12.2 + DIND_IMAGE: quay.io/codefresh/dind:26.1.4-1.28.8 + DOCKER_BUILDER_IMAGE: quay.io/codefresh/cf-docker-builder:1.4.2 DOCKER_PULLER_IMAGE: quay.io/codefresh/cf-docker-puller:8.0.18 - DOCKER_PUSHER_IMAGE: us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/cf-docker-pusher:6.0.16 + DOCKER_PUSHER_IMAGE: quay.io/codefresh/cf-docker-pusher:6.0.16 DOCKER_TAG_PUSHER_IMAGE: quay.io/codefresh/cf-docker-tag-pusher:1.3.15 - ENGINE_IMAGE: us-docker.pkg.dev/codefresh-inc/public-gcr-io/codefresh/engine:1.174.19 - FS_OPS_IMAGE: quay.io/codefresh/fs-ops:1.2.7 + ENGINE_IMAGE: quay.io/codefresh/engine:1.177.4 + FS_OPS_IMAGE: quay.io/codefresh/fs-ops:1.2.8 GIT_CLONE_IMAGE: quay.io/codefresh/cf-git-cloner:10.2.0 KUBE_DEPLOY: quay.io/codefresh/cf-deploy-kubernetes:16.2.6 - PIPELINE_DEBUGGER_IMAGE: quay.io/codefresh/cf-debugger:1.3.6 - TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.14.1 - CR_6177_FIXER: docker.io/library/alpine:3.20 - GC_BUILDER_IMAGE: docker.io/library/alpine:3.20 + PIPELINE_DEBUGGER_IMAGE: quay.io/codefresh/cf-debugger:1.3.7 + TEMPLATE_ENGINE: quay.io/codefresh/pikolo:0.14.2 + CR_6177_FIXER: docker.io/library/alpine:3.21 + GC_BUILDER_IMAGE: docker.io/library/alpine:3.21 #-------------------- # Codefresh subcharts @@ -612,6 +629,7 @@ cfapi-test-reporting: # @default -- See below internal-gateway: enabled: true + libraryMode: true controller: replicas: 2 container: @@ -766,7 +784,7 @@ cfsign: image: registry: quay.io repository: codefresh/curl - tag: 8.10.1 + tag: 8.11.1 affinity: {} nodeSelector: {} podSecurityContext: {} @@ -919,13 +937,15 @@ helm-repo-manager: image: registry: us-docker.pkg.dev/codefresh-enterprise/gcr.io repository: codefresh/helm-repo-manager + env: + POSTGRES_DBNAME: codefresh chartmuseum: publicHelmRepo: true ingress: enabled: false image: repository: quay.io/codefresh/chartmuseum - tag: a02769a5 + tag: 8795e993 resources: requests: cpu: 100m @@ -994,7 +1014,7 @@ k8s-monitor: container: image: registry: us-docker.pkg.dev/codefresh-enterprise/gcr.io - repository: codefresh/cf-k8s-monitor + repository: codefresh/k8s-monitor resources: requests: cpu: 100m @@ -1171,6 +1191,8 @@ redis-ha: # Ref: https://github.com/bitnami/charts/blob/main/bitnami/rabbitmq/values.yaml rabbitmq: enabled: true + image: + tag: 3.13.7-debian-12-r5 replicaCount: 1 auth: username: user @@ -1189,12 +1211,12 @@ builder: image: registry: quay.io repository: codefresh/curl - tag: 8.10.1 + tag: 8.11.1 container: image: registry: docker.io repository: library/docker - tag: 27.3-dind + tag: 28.0-dind affinity: {} nodeSelector: {} podSecurityContext: {} @@ -1210,12 +1232,12 @@ runner: image: registry: quay.io repository: codefresh/curl - tag: 8.10.1 + tag: 8.11.1 container: image: registry: docker.io repository: library/docker - tag: 27.3-dind + tag: 28.0-dind affinity: {} nodeSelector: {} podSecurityContext: {} @@ -1786,6 +1808,9 @@ argo-platform: podAnnotations: checksum/secret: '{{ include (print $.Template.BasePath "/promotion-orchestrator/secret.yaml") . | sha256sum }}' + classic-event-bridge: + enabled: false + # -- cf-oidc-provider # @default -- See below cf-oidc-provider: diff --git a/scripts/update_re_images.sh b/scripts/update_re_images.sh index dfed0a8db5..b87405f9dd 100755 --- a/scripts/update_re_images.sh +++ b/scripts/update_re_images.sh @@ -58,5 +58,7 @@ done sed -i 's|us-docker.pkg.dev/codefresh-inc/public-gcr-io|quay.io|' $CHARTDIR/values.yaml +sed -i 's/!!merge //g' $CHARTDIR/values.yaml + msg "The list of updated runtime images:\n" echo -e "\e[33m$(cat $CHARTDIR/values.yaml)\e[0m"