Skip to content

Commit 388e7a7

Browse files
ilia-medvedev-codefreshilia-medvedev-codefresh
committed
prepare release
1 parent 073577a commit 388e7a7

File tree

3 files changed

+109
-184
lines changed

3 files changed

+109
-184
lines changed

‎charts/gitops-runtime/Chart.yaml

Lines changed: 42 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
appVersion: 0.1.53
33
description: A Helm chart for Codefresh gitops runtime
44
name: gitops-runtime
5-
version: 0.0.0
5+
version: 0.9.0
66
home: https://github.com/codefresh-io/gitops-runtime-helm
77
icon: https://avatars1.githubusercontent.com/u/11412079?v=3
88
keywords:
@@ -13,37 +13,45 @@ maintainers:
1313
url: https://codefresh-io.github.io/
1414
annotations:
1515
artifacthub.io/alternativeName: "codefresh-gitops-runtime"
16-
artifacthub.io/changes: ""
16+
artifacthub.io/changes: |-
17+
- type: security
18+
description: ArgoCD webhook processing
19+
- type: security
20+
description: gitops-operator update with critical and high vulnerabilities fixes
21+
- type: fixed
22+
description: ArgoCD event reporter servicemonitor selector lables
23+
- type: changed
24+
description: disable ipv6 by default in internal router
1725
dependencies:
18-
- name: argo-cd
19-
repository: https://codefresh-io.github.io/argo-helm
20-
version: 6.11.1-5-cap-2.11-2024.7.20-8eb51f7a6
21-
- name: argo-events
22-
repository: https://codefresh-io.github.io/argo-helm
23-
version: 2.0.9-1-cap-CR-19893
24-
- name: argo-workflows
25-
repository: https://codefresh-io.github.io/argo-helm
26-
version: 0.40.9-1-v3.5.4-cap-CR-22243
27-
condition: argo-workflows.enabled
28-
- name: argo-rollouts
29-
repository: https://codefresh-io.github.io/argo-helm
30-
version: 2.32.5-4-additional-logs
31-
condition: argo-rollouts.enabled
32-
- name: sealed-secrets
33-
repository: https://bitnami-labs.github.io/sealed-secrets/
34-
version: 2.14.1
35-
- name: codefresh-tunnel-client
36-
repository: oci://quay.io/codefresh/charts
37-
version: 0.1.17
38-
alias: tunnel-client
39-
condition: tunnel-client.enabled
40-
- name: codefresh-gitops-operator
41-
repository: oci://quay.io/codefresh/charts
42-
version: 0.1.5
43-
alias: gitops-operator
44-
condition: gitops-operator.enabled
45-
- name: garage
46-
repository: https://codefresh-io.github.io/garage
47-
alias: garage-workflows-artifact-storage
48-
version: 0.5.0-cf.1
49-
condition: garage-workflows-artifact-storage.enabled
26+
- name: argo-cd
27+
repository: https://codefresh-io.github.io/argo-helm
28+
version: 6.11.1-5-cap-2.11-2024.7.20-8eb51f7a6
29+
- name: argo-events
30+
repository: https://codefresh-io.github.io/argo-helm
31+
version: 2.0.9-1-cap-CR-19893
32+
- name: argo-workflows
33+
repository: https://codefresh-io.github.io/argo-helm
34+
version: 0.40.9-1-v3.5.4-cap-CR-22243
35+
condition: argo-workflows.enabled
36+
- name: argo-rollouts
37+
repository: https://codefresh-io.github.io/argo-helm
38+
version: 2.32.5-4-additional-logs
39+
condition: argo-rollouts.enabled
40+
- name: sealed-secrets
41+
repository: https://bitnami-labs.github.io/sealed-secrets/
42+
version: 2.14.1
43+
- name: codefresh-tunnel-client
44+
repository: oci://quay.io/codefresh/charts
45+
version: 0.1.17
46+
alias: tunnel-client
47+
condition: tunnel-client.enabled
48+
- name: codefresh-gitops-operator
49+
repository: oci://quay.io/codefresh/charts
50+
version: 0.1.5
51+
alias: gitops-operator
52+
condition: gitops-operator.enabled
53+
- name: garage
54+
repository: https://codefresh-io.github.io/garage
55+
alias: garage-workflows-artifact-storage
56+
version: 0.5.0-cf.1
57+
condition: garage-workflows-artifact-storage.enabled

‎charts/gitops-runtime/README.md

Lines changed: 10 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
## Codefresh gitops runtime
2-
![Version: 0.8.1](https://img.shields.io/badge/Version-0.8.1-informational?style=flat-square) ![AppVersion: 0.1.52](https://img.shields.io/badge/AppVersion-0.1.52-informational?style=flat-square)
2+
![Version: 0.9.0](https://img.shields.io/badge/Version-0.9.0-informational?style=flat-square) ![AppVersion: 0.1.53](https://img.shields.io/badge/AppVersion-0.1.53-informational?style=flat-square)
33

44
## Prerequisites
55

@@ -27,7 +27,7 @@ We have created a helper utility to resolve this issue:
2727
The utility is packaged in a container image. Below are instructions on executing the utility using Docker:
2828

2929
```
30-
docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.8.1 <local_registry>
30+
docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.9.0 <local_registry>
3131
```
3232
`output_dir` - is a local directory where the utility will output files. <br>
3333
`local_registry` - is your local registry where you want to mirror the images to
@@ -144,27 +144,16 @@ sealed-secrets:
144144
| app-proxy.serviceAccount.create | bool | `true` | |
145145
| app-proxy.serviceAccount.name | string | `"cap-app-proxy"` | |
146146
| app-proxy.tolerations | list | `[]` | |
147+
| argo-cd | object | `{"applicationVersioning":{"enabled":true,"useApplicationConfiguration":true},"configs":{"cm":{"accounts.admin":"apiKey,login","application.resourceTrackingMethod":"annotation+label","timeout.reconciliation":"20s"},"params":{"application.namespaces":"cf-*","server.insecure":true}},"crds":{"install":true},"eventReporter":{"enabled":true,"replicas":3,"version":"v2"},"fullnameOverride":"argo-cd"}` | ------------------------------------------------------------------------------------------------------------------- |
147148
| argo-cd.applicationVersioning.enabled | bool | `true` | Enable application versioning |
148149
| argo-cd.applicationVersioning.useApplicationConfiguration | bool | `true` | Extract application version based on ApplicationConfiguration CRD |
149-
| argo-cd.configs.cm."accounts.admin" | string | `"apiKey,login"` | |
150-
| argo-cd.configs.cm."application.resourceTrackingMethod" | string | `"annotation+label"` | |
151-
| argo-cd.configs.cm."timeout.reconciliation" | string | `"20s"` | |
152-
| argo-cd.configs.params."application.namespaces" | string | `"cf-*"` | |
153-
| argo-cd.configs.params."server.insecure" | bool | `true` | |
154-
| argo-cd.crds.install | bool | `true` | |
155150
| argo-cd.eventReporter.enabled | bool | `true` | Installs new event reporter component to cluster |
156151
| argo-cd.eventReporter.replicas | int | `3` | Amount of shards to handle applications events |
157152
| argo-cd.eventReporter.version | string | `"v2"` | Switches between old and new reporter version. Possible values: v1, v2. For v2 `argo-cd.eventReporter.enabled=true` is required |
158-
| argo-cd.fullnameOverride | string | `"argo-cd"` | |
159-
| argo-events.crds.install | bool | `false` | |
160-
| argo-events.fullnameOverride | string | `"argo-events"` | |
161-
| argo-rollouts.controller.replicas | int | `1` | |
162-
| argo-rollouts.enabled | bool | `true` | |
163-
| argo-rollouts.fullnameOverride | string | `"argo-rollouts"` | |
164-
| argo-rollouts.installCRDs | bool | `true` | |
153+
| argo-events | object | `{"crds":{"install":false},"fullnameOverride":"argo-events"}` | ------------------------------------------------------------------------------------------------------------------- |
154+
| argo-rollouts | object | `{"controller":{"replicas":1},"enabled":true,"fullnameOverride":"argo-rollouts","installCRDs":true}` | ------------------------------------------------------------------------------------------------------------------- |
155+
| argo-workflows | object | `{"crds":{"install":true},"enabled":true,"fullnameOverride":"argo","server":{"authModes":["client"],"baseHref":"/workflows/"}}` | ------------------------------------------------------------------------------------------------------------------- |
165156
| argo-workflows.crds.install | bool | `true` | Install and upgrade CRDs |
166-
| argo-workflows.enabled | bool | `true` | |
167-
| argo-workflows.fullnameOverride | string | `"argo"` | |
168157
| argo-workflows.server.authModes | list | `["client"]` | auth-mode needs to be set to client to be able to see workflow logs from Codefresh UI |
169158
| argo-workflows.server.baseHref | string | `"/workflows/"` | Do not change. Workflows UI is only accessed through internal router, changing this values will break routing to workflows native UI from Codefresh. |
170159
| event-reporters.events.argoCDServerServiceName | string | `nil` | LEAVE EMPTY and let the chart logic determine the name. Change only if you are totally sure you need to override ArgoCD service name. |
@@ -230,7 +219,7 @@ sealed-secrets:
230219
| garage-workflows-artifact-storage.persistence.meta | object | `{"size":"100Mi","storageClass":""}` | Volume that stores cluster metadata |
231220
| garage-workflows-artifact-storage.persistence.meta.storageClass | string | `""` | When empty value empty the default storage class for the cluster will be used |
232221
| garage-workflows-artifact-storage.resources | object | `{}` | Resources for garage pods. For smaller deployments at least 100m CPU and 1024Mi memory is reccommended. For larger deployments double this size. |
233-
| gitops-operator.affinity | object | `{}` | |
222+
| gitops-operator | object | `{"affinity":{},"argoCdNotifications":{"image":{},"imageOverride":false,"resources":{}},"crds":{"additionalLabels":{},"annotations":{},"install":true,"keep":false},"enabled":true,"env":{},"fullnameOverride":"","image":{},"imagePullSecrets":[],"kube-rbac-proxy":{"image":{},"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"100m","memory":"64Mi"}},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]}}},"libraryMode":true,"nameOverride":"","nodeSelector":{},"podAnnotations":{},"podLabels":{},"replicaCount":1,"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"100m","memory":"64Mi"}},"serviceAccount":{"annotations":{},"create":true,"name":"gitops-operator-controller-manager"},"tolerations":[]}` | ------------------------------------------------------------------------------------------------------------------- |
234223
| gitops-operator.argoCdNotifications | object | `{"image":{},"imageOverride":false,"resources":{}}` | Builtin notifications controller used by gitops-operator for promotion related notifications |
235224
| gitops-operator.argoCdNotifications.image | object | `{}` | Set image.repository and image.tag notifications image used by the gitops operator. Ignored unless imageOverride is set to true. |
236225
| gitops-operator.argoCdNotifications.imageOverride | bool | `false` | If set to true allows to override notifications image used by the gitops operator. When set to false the version of ArgoCD will be set to the version used for all other ArgoCD components. |
@@ -240,32 +229,7 @@ sealed-secrets:
240229
| gitops-operator.crds.annotations | object | `{}` | Annotations on gitops operator CRDs |
241230
| gitops-operator.crds.install | bool | `true` | Whether or not to install CRDs |
242231
| gitops-operator.crds.keep | bool | `false` | Keep CRDs if gitops runtime release is uninstalled |
243-
| gitops-operator.enabled | bool | `true` | |
244-
| gitops-operator.env | object | `{}` | |
245-
| gitops-operator.fullnameOverride | string | `""` | |
246-
| gitops-operator.image | object | `{}` | |
247-
| gitops-operator.imagePullSecrets | list | `[]` | |
248-
| gitops-operator.kube-rbac-proxy.image | object | `{}` | |
249-
| gitops-operator.kube-rbac-proxy.resources.limits.cpu | string | `"500m"` | |
250-
| gitops-operator.kube-rbac-proxy.resources.limits.memory | string | `"128Mi"` | |
251-
| gitops-operator.kube-rbac-proxy.resources.requests.cpu | string | `"100m"` | |
252-
| gitops-operator.kube-rbac-proxy.resources.requests.memory | string | `"64Mi"` | |
253-
| gitops-operator.kube-rbac-proxy.securityContext.allowPrivilegeEscalation | bool | `false` | |
254-
| gitops-operator.kube-rbac-proxy.securityContext.capabilities.drop[0] | string | `"ALL"` | |
255232
| gitops-operator.libraryMode | bool | `true` | Do not change unless instructed otherwise by Codefresh support |
256-
| gitops-operator.nameOverride | string | `""` | |
257-
| gitops-operator.nodeSelector | object | `{}` | |
258-
| gitops-operator.podAnnotations | object | `{}` | |
259-
| gitops-operator.podLabels | object | `{}` | |
260-
| gitops-operator.replicaCount | int | `1` | |
261-
| gitops-operator.resources.limits.cpu | string | `"500m"` | |
262-
| gitops-operator.resources.limits.memory | string | `"128Mi"` | |
263-
| gitops-operator.resources.requests.cpu | string | `"100m"` | |
264-
| gitops-operator.resources.requests.memory | string | `"64Mi"` | |
265-
| gitops-operator.serviceAccount.annotations | object | `{}` | |
266-
| gitops-operator.serviceAccount.create | bool | `true` | |
267-
| gitops-operator.serviceAccount.name | string | `"gitops-operator-controller-manager"` | |
268-
| gitops-operator.tolerations | list | `[]` | |
269233
| global.codefresh | object | `{"accountId":"","apiEventsPath":"/2.0/api/events","tls":{"caCerts":{"secret":{"annotations":{},"content":"","create":false,"key":"ca-bundle.crt"},"secretKeyRef":{}},"workflowPipelinesGitWebhooks":{"annotatins":{},"certificates":{}}},"url":"https://g.codefresh.io","userToken":{"secretKeyRef":{},"token":""}}` | Codefresh platform and account-related settings |
270234
| global.codefresh.accountId | string | `""` | Codefresh Account ID. |
271235
| global.codefresh.apiEventsPath | string | `"/2.0/api/events"` | Events API endpoint URL suffix. |
@@ -310,6 +274,7 @@ sealed-secrets:
310274
| internal-router.image.repository | string | `"nginxinc/nginx-unprivileged"` | |
311275
| internal-router.image.tag | string | `"1.25-alpine"` | |
312276
| internal-router.imagePullSecrets | list | `[]` | |
277+
| internal-router.ipv6 | object | `{"enabled":false}` | For ipv6 enabled clusters switch ipv6 enabled to true |
313278
| internal-router.nameOverride | string | `""` | |
314279
| internal-router.nodeSelector | object | `{}` | |
315280
| internal-router.pdb.enabled | bool | `false` | Enable PDB |
@@ -331,7 +296,7 @@ sealed-secrets:
331296
| internal-router.serviceAccount.create | bool | `true` | |
332297
| internal-router.serviceAccount.name | string | `""` | |
333298
| internal-router.tolerations | list | `[]` | |
334-
| sealed-secrets | object | `{"fullnameOverride":"sealed-secrets-controller","image":{"registry":"quay.io","repository":"codefresh/sealed-secrets-controller","tag":"v0.24.5"},"keyrenewperiod":"720h","resources":{"limits":{"cpu":"500m","memory":"1Gi"},"requests":{"cpu":"200m","memory":"512Mi"}}}` | --------------------------------------------------------------------------------------------------------------------- |
335-
| tunnel-client | object | `{"enabled":true,"libraryMode":true,"tunnelServer":{"host":"register-tunnels.cf-cd.com","subdomainHost":"tunnels.cf-cd.com"}}` | Tunnel based runtime. Not supported for on-prem platform. In on-prem use ingress based runtimes. |
299+
| sealed-secrets | object | `{"fullnameOverride":"sealed-secrets-controller","image":{"registry":"quay.io","repository":"codefresh/sealed-secrets-controller","tag":"v0.24.5"},"keyrenewperiod":"720h","resources":{"limits":{"cpu":"500m","memory":"1Gi"},"requests":{"cpu":"200m","memory":"512Mi"}}}` | ------------------------------------------------------------------------------------------------------------------- |
300+
| tunnel-client | object | `{"enabled":true,"libraryMode":true,"tunnelServer":{"host":"register-tunnels.cf-cd.com","subdomainHost":"tunnels.cf-cd.com"}}` | ------------------------------------------------------------------------------------------------------------------- |
336301
| tunnel-client.enabled | bool | `true` | Will only be used if global.runtime.ingress.enabled = false |
337302
| tunnel-client.libraryMode | bool | `true` | Do not change this value! Breaks chart logic |

0 commit comments

Comments
 (0)