Skip to content

Commit b5c6505

Browse files
mikhail-klimkomikhail-klimko
authored
onprem: 2.4.0-rc.3 (#1310)
1 parent fcc5e78 commit b5c6505

File tree

5 files changed

+163
-38
lines changed

5 files changed

+163
-38
lines changed

‎codefresh/.ci/values/cfapi-roles-no-rbac.yaml

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
cfapi: &cf-api
2+
enabled: false
3+
rbac:
4+
namespaced: true
5+
6+
cfapi-auth:
7+
<<: *cf-api
8+
enabled: true
9+
cfapi-internal:
10+
<<: *cf-api
11+
enabled: true
12+
cfapi-ws:
13+
<<: *cf-api
14+
enabled: true
15+
cfapi-admin:
16+
<<: *cf-api
17+
enabled: true
18+
cfapi-endpoints:
19+
<<: *cf-api
20+
enabled: true
21+
cfapi-terminators:
22+
<<: *cf-api
23+
enabled: true
24+
cfapi-sso-group-synchronizer:
25+
<<: *cf-api
26+
enabled: true
27+
cfapi-buildmanager:
28+
<<: *cf-api
29+
enabled: true
30+
cfapi-cacheevictmanager:
31+
<<: *cf-api
32+
enabled: true
33+
cfapi-eventsmanagersubscriptions:
34+
<<: *cf-api
35+
enabled: true
36+
cfapi-kubernetesresourcemonitor:
37+
<<: *cf-api
38+
enabled: true
39+
cfapi-environments:
40+
<<: *cf-api
41+
enabled: true
42+
cfapi-gitops-resource-receiver:
43+
<<: *cf-api
44+
enabled: true
45+
cfapi-downloadlogmanager:
46+
<<: *cf-api
47+
enabled: true
48+
cfapi-teams:
49+
<<: *cf-api
50+
enabled: true
51+
cfapi-kubernetes-endpoints:
52+
<<: *cf-api
53+
enabled: true
54+
cfapi-test-reporting:
55+
<<: *cf-api
56+
enabled: true

‎codefresh/.ci/values/values-upgrade.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
cfapi:
2+
rbac:
3+
namespaced: true

‎codefresh/Chart.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
apiVersion: v2
22
description: Helm Chart for Codefresh On-Prem
33
name: codefresh
4-
version: 2.4.0-rc.2
4+
version: 2.4.0-rc.3
55
keywords:
66
- codefresh
77
home: https://codefresh.io/
@@ -17,8 +17,8 @@ annotations:
1717
artifacthub.io/alternativeName: "codefresh-onprem"
1818
# artifacthub.io/containsSecurityUpdates: "true"
1919
artifacthub.io/changes: |
20-
- kind: changed
21-
description: Change default SYSTEM_TYPE for accounts to PROJECT_ONE
20+
- kind: added
21+
description: Update docs for 2.4.x upgrade
2222
dependencies:
2323
- name: cf-common
2424
repository: oci://quay.io/codefresh/charts

‎codefresh/README.md

Lines changed: 51 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
## Codefresh On-Premises
22

3-
![Version: 2.4.0-rc.2](https://img.shields.io/badge/Version-2.4.0--rc.2-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
3+
![Version: 2.4.0-rc.3](https://img.shields.io/badge/Version-2.4.0--rc.3-informational?style=flat-square) ![AppVersion: 2.4.0](https://img.shields.io/badge/AppVersion-2.4.0-informational?style=flat-square)
44

55
Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
66

@@ -42,6 +42,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
4242
- [To 2.1.7](#to-2-1-7)
4343
- [To 2.2.0](#to-2-2-0)
4444
- [To 2.3.0](#to-2-3-0)
45+
- [To 2.4.0](#to-2-4-0)
4546
- [Rollback](#rollback)
4647
- [Troubleshooting](#troubleshooting)
4748
- [Values](#values)
@@ -722,53 +723,56 @@ cfapi: &cf-api
722723
hpa:
723724
enabled: true
724725
# Enable cf-api roles
726+
cfapi-auth:
727+
<<: *cf-api
728+
enabled: true
725729
cfapi-internal:
726-
!!merge <<: *cf-api
730+
<<: *cf-api
727731
enabled: true
728732
cfapi-ws:
729-
!!merge <<: *cf-api
733+
<<: *cf-api
730734
enabled: true
731735
cfapi-admin:
732-
!!merge <<: *cf-api
736+
<<: *cf-api
733737
enabled: true
734738
cfapi-endpoints:
735-
!!merge <<: *cf-api
739+
<<: *cf-api
736740
enabled: true
737741
cfapi-terminators:
738-
!!merge <<: *cf-api
742+
<<: *cf-api
739743
enabled: true
740744
cfapi-sso-group-synchronizer:
741-
!!merge <<: *cf-api
745+
<<: *cf-api
742746
enabled: true
743747
cfapi-buildmanager:
744-
!!merge <<: *cf-api
748+
<<: *cf-api
745749
enabled: true
746750
cfapi-cacheevictmanager:
747-
!!merge <<: *cf-api
751+
<<: *cf-api
748752
enabled: true
749753
cfapi-eventsmanagersubscriptions:
750-
!!merge <<: *cf-api
754+
<<: *cf-api
751755
enabled: true
752756
cfapi-kubernetesresourcemonitor:
753-
!!merge <<: *cf-api
757+
<<: *cf-api
754758
enabled: true
755759
cfapi-environments:
756-
!!merge <<: *cf-api
760+
<<: *cf-api
757761
enabled: true
758762
cfapi-gitops-resource-receiver:
759-
!!merge <<: *cf-api
763+
<<: *cf-api
760764
enabled: true
761765
cfapi-downloadlogmanager:
762-
!!merge <<: *cf-api
766+
<<: *cf-api
763767
enabled: true
764768
cfapi-teams:
765-
!!merge <<: *cf-api
769+
<<: *cf-api
766770
enabled: true
767771
cfapi-kubernetes-endpoints:
768-
!!merge <<: *cf-api
772+
<<: *cf-api
769773
enabled: true
770774
cfapi-test-reporting:
771-
!!merge <<: *cf-api
775+
<<: *cf-api
772776
enabled: true
773777
```
774778
@@ -1885,6 +1889,35 @@ helm rollback $RELEASE_NAME $RELEASE_NUMBER \
18851889
--wait
18861890
```
18871891

1892+
### To 2.4.0
1893+
1894+
### [What's new in 2.4.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-24)
1895+
1896+
#### New cfapi-auth role
1897+
1898+
New `cfapi-auth` role is introduced in 2.4.x.
1899+
1900+
If you run onprem with [multi-role cfapi configuration](#configuration-with-multi-role-cf-api), make sure to **enable** `cfapi-auth` role:
1901+
1902+
```yaml
1903+
cfapi-auth:
1904+
<<: *cf-api
1905+
enabled: true
1906+
```
1907+
1908+
#### Default SYSTEM_TYPE for acccounts
1909+
1910+
Since 2.4.x, `SYSTEM_TYPE` is changed to `PROJECT_ONE` by default.
1911+
1912+
If you want to preserve original `CLASSIC` values, update cfapi environment variables:
1913+
1914+
```yaml
1915+
cfapi:
1916+
container:
1917+
env:
1918+
DEFAULT_SYSTEM_TYPE: CLASSIC
1919+
```
1920+
18881921
## Troubleshooting
18891922

18901923
### Error: Failed to validate connection to Docker daemon; caused by Error: certificate has expired
@@ -2175,4 +2208,4 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server
21752208
| seed.postgresSeedJob.postgresUser | optional | `""` | "postgres" admin user in plain text (required ONLY for seed job!) Must be a privileged user allowed to create databases and grant roles. If omitted, username and password from `.Values.global.postgresUser/postgresPassword` will be used. |
21762209
| seed.postgresSeedJob.postgresUserSecretKeyRef | optional | `{}` | "postgres" admin user from exising secret |
21772210
| tasker-kubernetes | object | `{"affinity":{},"container":{"image":{"registry":"us-docker.pkg.dev/codefresh-enterprise/gcr.io","repository":"codefresh/tasker-kubernetes"}},"enabled":true,"hpa":{"enabled":false},"nodeSelector":{},"pdb":{"enabled":false},"podSecurityContext":{},"resources":{"limits":{},"requests":{"cpu":"100m","memory":"128Mi"}},"tolerations":[]}` | tasker-kubernetes |
2178-
| webTLS | object | `{"cert":"","enabled":false,"key":"","secretName":"star.codefresh.io"}` | DEPRECATED - Use `.Values.ingress.tls` instead TLS secret for Ingress |
2211+
| webTLS | object | `{"cert":"","enabled":false,"key":"","secretName":"star.codefresh.io"}` | DEPRECATED - Use `.Values.ingress.tls` instead TLS secret for Ingress |

‎codefresh/README.md.gotmpl

Lines changed: 50 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
4242
- [To 2.1.7](#to-2-1-7)
4343
- [To 2.2.0](#to-2-2-0)
4444
- [To 2.3.0](#to-2-3-0)
45+
- [To 2.4.0](#to-2-4-0)
4546
- [Rollback](#rollback)
4647
- [Troubleshooting](#troubleshooting)
4748
- [Values](#values)
@@ -725,53 +726,56 @@ cfapi: &cf-api
725726
hpa:
726727
enabled: true
727728
# Enable cf-api roles
729+
cfapi-auth:
730+
<<: *cf-api
731+
enabled: true
728732
cfapi-internal:
729-
!!merge <<: *cf-api
733+
<<: *cf-api
730734
enabled: true
731735
cfapi-ws:
732-
!!merge <<: *cf-api
736+
<<: *cf-api
733737
enabled: true
734738
cfapi-admin:
735-
!!merge <<: *cf-api
739+
<<: *cf-api
736740
enabled: true
737741
cfapi-endpoints:
738-
!!merge <<: *cf-api
742+
<<: *cf-api
739743
enabled: true
740744
cfapi-terminators:
741-
!!merge <<: *cf-api
745+
<<: *cf-api
742746
enabled: true
743747
cfapi-sso-group-synchronizer:
744-
!!merge <<: *cf-api
748+
<<: *cf-api
745749
enabled: true
746750
cfapi-buildmanager:
747-
!!merge <<: *cf-api
751+
<<: *cf-api
748752
enabled: true
749753
cfapi-cacheevictmanager:
750-
!!merge <<: *cf-api
754+
<<: *cf-api
751755
enabled: true
752756
cfapi-eventsmanagersubscriptions:
753-
!!merge <<: *cf-api
757+
<<: *cf-api
754758
enabled: true
755759
cfapi-kubernetesresourcemonitor:
756-
!!merge <<: *cf-api
760+
<<: *cf-api
757761
enabled: true
758762
cfapi-environments:
759-
!!merge <<: *cf-api
763+
<<: *cf-api
760764
enabled: true
761765
cfapi-gitops-resource-receiver:
762-
!!merge <<: *cf-api
766+
<<: *cf-api
763767
enabled: true
764768
cfapi-downloadlogmanager:
765-
!!merge <<: *cf-api
769+
<<: *cf-api
766770
enabled: true
767771
cfapi-teams:
768-
!!merge <<: *cf-api
772+
<<: *cf-api
769773
enabled: true
770774
cfapi-kubernetes-endpoints:
771-
!!merge <<: *cf-api
775+
<<: *cf-api
772776
enabled: true
773777
cfapi-test-reporting:
774-
!!merge <<: *cf-api
778+
<<: *cf-api
775779
enabled: true
776780
```
777781

@@ -1893,6 +1897,35 @@ helm rollback $RELEASE_NAME $RELEASE_NUMBER \
18931897
--wait
18941898
```
18951899

1900+
### To 2.4.0
1901+
1902+
### [What's new in 2.4.x](https://codefresh.io/docs/docs/whats-new/on-prem-release-notes/#on-premises-version-24)
1903+
1904+
#### New cfapi-auth role
1905+
1906+
New `cfapi-auth` role is introduced in 2.4.x.
1907+
1908+
If you run onprem with [multi-role cfapi configuration](#configuration-with-multi-role-cf-api), make sure to **enable** `cfapi-auth` role:
1909+
1910+
```yaml
1911+
cfapi-auth:
1912+
<<: *cf-api
1913+
enabled: true
1914+
```
1915+
1916+
#### Default SYSTEM_TYPE for acccounts
1917+
1918+
Since 2.4.x, `SYSTEM_TYPE` is changed to `PROJECT_ONE` by default.
1919+
1920+
If you want to preserve original `CLASSIC` values, update cfapi environment variables:
1921+
1922+
```yaml
1923+
cfapi:
1924+
container:
1925+
env:
1926+
DEFAULT_SYSTEM_TYPE: CLASSIC
1927+
```
1928+
18961929
## Troubleshooting
18971930

18981931
### Error: Failed to validate connection to Docker daemon; caused by Error: certificate has expired
@@ -1954,4 +1987,4 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server
19541987
./configure-dind-certs.sh -n $RUNTIME_NAMESPACE https://$CODEFRESH_HOST $CODEFRESH_API_TOKEN
19551988
```
19561989

1957-
{{ template "chart.valuesSection" . }}
1990+
{{ template "chart.valuesSection" . }}

0 commit comments

Comments
 (0)