Release-0.7.1 (#203)

* updated codefresh-gitops-operator chart to 1.0.17
  * BREAKING CHANGE: no longer checking commit message for [promotion:<flow>] in operator side. making the check according to Product definition in the platform side
  * added argocd-notifications-controller as sidecar in gitops-operator pod
  * allow empty Release label on promotion-wrapper Workflow
* updated cap-app-proxy to 1.2835.0
* Add garage for workflow artifacts and logs (disabled by default)
* support multi-arch in tunnel-client

Author: ATGardner

charts/gitops-runtime/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v2
-appVersion: 0.1.48
+appVersion: 0.1.49
 description: A Helm chart for Codefresh gitops runtime
 name: gitops-runtime
-version: 0.7.0
+version: 0.7.1
 home: https://github.com/codefresh-io/gitops-runtime-helm
 icon: https://avatars1.githubusercontent.com/u/11412079?v=3
 keywords:
@@ -14,10 +14,16 @@ maintainers:
 annotations:
   artifacthub.io/alternativeName: "codefresh-gitops-runtime"
   artifacthub.io/changes: |
-    - kind: security
-      description: "Add redis authentication to ArgoCD"
     - kind: changed
-      description: "Updated ArgoCD templates - please note that this version of the ArgoCD templates contains a breaking change for ArgoCD server ingress value structure - runtime ingress is not affected. Only relevant if argo-cd.server.ingress.enabled is true. For the new ingress value structure please see: https://github.com/codefresh-io/argo-helm/blob/f98f2f4d4aca081e7b26cbb1a3fcec138bb3d4ac/charts/argo-cd/values.yaml#L2126-L2329"
+      description: "update codefresh-gitops-operator chart to 1.0.17 to allow missing promotion flow label"
+    - kind: changed
+      description: "updated cap-app-proxy to 1.2835.0"
+    - kind: added
+      description: garage as optional dependency for Argo workflows artifact and log storage
+    - kind: fixed
+      description: multiarch image for installer image used in hooks
+    - kind: fixed
+      description: multiarch frpc (codefresh-tunnel-client) image
 dependencies:
 - name: argo-cd
   repository: https://codefresh-io.github.io/argo-helm
@@ -38,11 +44,16 @@ dependencies:
   version: 2.14.1
 - name: codefresh-tunnel-client
   repository: oci://quay.io/codefresh/charts
-  version: 0.1.15
+  version: 0.1.16
   alias: tunnel-client
   condition: tunnel-client.enabled
 - name: codefresh-gitops-operator
   repository: oci://quay.io/codefresh/charts
-  version: 1.0.13
+  version: 1.0.17
   alias: gitops-operator
   condition: gitops-operator.enabled
+- name: garage
+  repository: https://codefresh-io.github.io/garage
+  alias: garage-workflows-artifact-storage
+  version: 0.5.0-cf.1
+  condition: garage-workflows-artifact-storage.enabled

charts/gitops-runtime/README.md

@@ -1,5 +1,5 @@
 ## Codefresh gitops runtime
-![Version: 0.7.0](https://img.shields.io/badge/Version-0.7.0-informational?style=flat-square) ![AppVersion: 0.1.48](https://img.shields.io/badge/AppVersion-0.1.48-informational?style=flat-square)
+![Version: 0.7.1](https://img.shields.io/badge/Version-0.7.1-informational?style=flat-square) ![AppVersion: 0.1.49](https://img.shields.io/badge/AppVersion-0.1.49-informational?style=flat-square)
 
 ## Prerequisites
 
@@ -27,7 +27,7 @@ We have created a helper utility to resolve this issue:
 The utility is packaged in a container image. Below are instructions on executing the utility using Docker:
 
 ```
-docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.7.0 <local_registry>
+docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.7.1 <local_registry>
 ```
 `output_dir` - is a local directory where the utility will output files. <br>
 `local_registry` - is your local registry where you want to mirror the images to
@@ -100,14 +100,14 @@ sealed-secrets:
 | app-proxy.image-enrichment.serviceAccount.name | string | `"codefresh-image-enrichment-sa"` | Name of the service account to create or the name of the existing one to use |
 | app-proxy.image.pullPolicy | string | `"IfNotPresent"` |  |
 | app-proxy.image.repository | string | `"quay.io/codefresh/cap-app-proxy"` |  |
-| app-proxy.image.tag | string | `"1.2825.1"` |  |
+| app-proxy.image.tag | string | `"1.2835.0"` |  |
 | app-proxy.imagePullSecrets | list | `[]` |  |
 | app-proxy.initContainer.command[0] | string | `"./init.sh"` |  |
 | app-proxy.initContainer.env | object | `{}` |  |
 | app-proxy.initContainer.extraVolumeMounts | list | `[]` | Extra volume mounts for init container |
 | app-proxy.initContainer.image.pullPolicy | string | `"IfNotPresent"` |  |
 | app-proxy.initContainer.image.repository | string | `"quay.io/codefresh/cap-app-proxy-init"` |  |
-| app-proxy.initContainer.image.tag | string | `"1.2825.1"` |  |
+| app-proxy.initContainer.image.tag | string | `"1.2835.0"` |  |
 | app-proxy.initContainer.resources.limits.cpu | string | `"1"` |  |
 | app-proxy.initContainer.resources.limits.memory | string | `"512Mi"` |  |
 | app-proxy.initContainer.resources.requests.cpu | string | `"0.2"` |  |
@@ -233,6 +233,13 @@ sealed-secrets:
 | event-reporters.workflow.sensor.retryStrategy.steps | int | `3` | Number of retries |
 | event-reporters.workflow.sensor.tolerations | list | `[]` |  |
 | event-reporters.workflow.serviceAccount.create | bool | `true` |  |
+| garage-workflows-artifact-storage | object | `{"deployment":{"kind":"StatefulSet","replicaCount":3},"enabled":false,"fullnameOverride":"garage","garage":{"replicationMode":3},"persistence":{"data":{"size":"100Mi","storageClass":""},"enabled":true,"meta":{"size":"100Mi","storageClass":""}},"resources":{}}` | Builtin Workflows artifacts storage solution. Local S3 backed by local persistence with (PV and PVC) |
+| garage-workflows-artifact-storage.deployment.kind | string | `"StatefulSet"` | Only statefulset is supported for Codefresh gitops runtime. Do not change this |
+| garage-workflows-artifact-storage.persistence.data | object | `{"size":"100Mi","storageClass":""}` | Volume that stores artifacts and logs for workflows |
+| garage-workflows-artifact-storage.persistence.data.storageClass | string | `""` | When empty value empty the default storage class for the cluster will be used |
+| garage-workflows-artifact-storage.persistence.meta | object | `{"size":"100Mi","storageClass":""}` | Volume that stores cluster metadata |
+| garage-workflows-artifact-storage.persistence.meta.storageClass | string | `""` | When empty value empty the default storage class for the cluster will be used |
+| garage-workflows-artifact-storage.resources | object | `{}` | Resources for garage pods. For smaller deployments at least 100m CPU and 1024Mi memory is reccommended. For larger deployments double this size. |
 | gitops-operator.affinity | object | `{}` |  |
 | gitops-operator.crds | object | `{"additionalLabels":{},"annotations":{},"install":true,"keep":false}` | Codefresh gitops operator crds |
 | gitops-operator.crds.additionalLabels | object | `{}` | Additional labels for gitops operator CRDs |

charts/gitops-runtime/ci/values-all-images.yaml

@@ -35,4 +35,7 @@ argo-cd:
       enabled: true
   redis:
     exporter:
-      enabled: true
+      enabled: true
+
+garage-workflows-artifact-storage:
+  enabled: true

charts/gitops-runtime/tests/values/mandatory-values-ingress.yaml

@@ -1,6 +1,6 @@
 global:
   codefresh:
-    accountId: 628a80b693a15c0f9c13ab75 # Codefresh Account id for ilia-codefresh for now, needs to be some test account
+    accountId: 628a80b693a15c0f9c13ab75
     userToken:
       token: 'dummy'
 
@@ -10,4 +10,4 @@ global:
     ingress:
       enabled: true
       hosts:
-      - test.example.com
+      - test.example.com

charts/gitops-runtime/tests/values/mandatory-values-no-token.yaml

@@ -1,9 +1,9 @@
 global:
   codefresh:
-    accountId: 628a80b693a15c0f9c13ab75 # Codefresh Account id for ilia-codefresh for now, needs to be some test account
+    accountId: 628a80b693a15c0f9c13ab75
 
   runtime:
     name: test-runtime1
 
     ingress:
-      enabled: false
+      enabled: false

charts/gitops-runtime/tests/values/mandatory-values.yaml

@@ -1,10 +1,10 @@
 global:
   codefresh:
-    accountId: 628a80b693a15c0f9c13ab75 # Codefresh Account id for ilia-codefresh for now, needs to be some test account
+    accountId: 628a80b693a15c0f9c13ab75
     userToken:
       token: 'dummy'
 
   runtime:
     name: test-runtime1
     ingress:
-      enabled: false
+      enabled: false

charts/gitops-runtime/values.yaml

@@ -494,15 +494,15 @@ app-proxy:
           tag: 1.1.10-main
   image:
     repository: quay.io/codefresh/cap-app-proxy
-    tag: 1.2825.1
+    tag: 1.2835.0
     pullPolicy: IfNotPresent
   # -- Extra volume mounts for main container
   extraVolumeMounts: []
 
   initContainer:
     image:
       repository: quay.io/codefresh/cap-app-proxy-init
-      tag: 1.2825.1
+      tag: 1.2835.0
       pullPolicy: IfNotPresent
     command:
       - ./init.sh
@@ -675,3 +675,28 @@ gitops-operator:
       requests:
         cpu: 100m
         memory: 64Mi
+# -- Builtin Workflows artifacts storage solution. Local S3 backed by local persistence with (PV and PVC)
+garage-workflows-artifact-storage:
+  fullnameOverride: garage
+  enabled: false
+  deployment:
+    # -- Only statefulset is supported for Codefresh gitops runtime. Do not change this
+    kind: StatefulSet
+    replicaCount: 3
+  garage:
+    #-- Default to 3 replicas, see the replication_mode section at https://garagehq.deuxfleurs.fr/documentation/reference-manual/configuration/#replication-mode
+    replicationMode: 3
+  persistence:
+    enabled: true
+    # -- Volume that stores cluster metadata
+    meta:
+      # -- When empty value empty the default storage class for the cluster will be used
+      storageClass: ""
+      size: 100Mi
+    # -- Volume that stores artifacts and logs for workflows
+    data:
+      # -- When empty value empty the default storage class for the cluster will be used
+      storageClass: ""
+      size: 100Mi
+  # -- Resources for garage pods. For smaller deployments at least 100m CPU and 1024Mi memory is reccommended. For larger deployments double this size.
+  resources: {}

installer-image/Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM debian:bullseye-slim
+FROM debian:bullseye-slim
 
 ARG CF_CLI_VERSION=v0.1.60
 ARG KUBECTL_VERSION=v1.27.2

scripts/private-registry-utils/Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM python:3.11.3-slim-bullseye
+FROM python:3.11.3-slim-bullseye
 ARG TARGETARCH
 RUN cd /tmp && python3 -c "from urllib.request import urlretrieve; urlretrieve('https://get.helm.sh/helm-v3.12.0-linux-${TARGETARCH}.tar.gz', 'helm-v3.12.0-linux-${TARGETARCH}.tar.gz')"  && tar -xvf helm-v3.12.0-linux-${TARGETARCH}.tar.gz && chmod +x linux-${TARGETARCH}/helm && mv linux-${TARGETARCH}/helm /usr/local/bin/helm && rm -rf /tmp/*
 COPY charts/gitops-runtime /chart