Skip to content

Commit f70aacb

Browse files
committedNov 6, 2024·
create release 0.14 draft
1 parent 3c96dac commit f70aacb

File tree

3 files changed

+145
-197
lines changed

3 files changed

+145
-197
lines changed
 

‎charts/gitops-runtime/Chart.yaml

+76-33
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
appVersion: 0.1.62
33
description: A Helm chart for Codefresh gitops runtime
44
name: gitops-runtime
5-
version: 0.0.0
5+
version: 0.14.0
66
home: https://github.com/codefresh-io/gitops-runtime-helm
77
icon: https://avatars1.githubusercontent.com/u/11412079?v=3
88
keywords:
@@ -13,36 +13,79 @@ maintainers:
1313
url: https://codefresh-io.github.io/
1414
annotations:
1515
artifacthub.io/alternativeName: "codefresh-gitops-runtime"
16+
artifacthub.io/changes: |-
17+
- kind: changed
18+
description: 'feat: bump app-proxy to `1.3142.0` with refresh in-cluster app after any related commit (#325)'
19+
- kind: changed
20+
description: 'chore(cr-25581): updating app proxy, (fixed vulnerabilities in expat, curl, openssl) (#322)'
21+
- kind: changed
22+
description: 'feat: bump app-proxy to `1.3138.0` (#324)'
23+
- kind: changed
24+
description: Update CODEOWNERS
25+
- kind: changed
26+
description: 'fix: use the rootpath from argo-cd config.params values, when injecting ARGO_CD_URL to gitops-operator (#323)'
27+
- kind: changed
28+
description: update cap-app-proxy to `1.3131.0` - improve locking around git operations (#320)
29+
- kind: changed
30+
description: Update CODEOWNERS (#319)
31+
- kind: changed
32+
description: 'chore: update argocd to 2.12.3-2024.10.28-20100fc54 (#318)'
33+
- kind: changed
34+
description: 'feat: app-proxy bump to `1.3127.1` (#316)'
35+
- kind: changed
36+
description: 'chore: update image-enrichment to 1.1.11 (#314)'
37+
- kind: changed
38+
description: update codefresh-gitops-operator to 0.3.6 (#313)
39+
- kind: changed
40+
description: fix:upgrade gitops operator to 0.3.1 to publish error to product release in case failed to create workflow (#312)
41+
- kind: changed
42+
description: inject the correct argo-cd server url into gitops-operator (#311)
43+
- kind: changed
44+
description: 'chore: update argocd to 7.4.7-5-cap-2.12-2024.10.17-36fb3f0d1 (#310)'
45+
- kind: changed
46+
description: 'fix: bump app-proxy to `1.3103.0` - fix failure to calculate diff when destApp is on a different branch from srcApp'
47+
- kind: changed
48+
description: Feat/cr 23204 synced version (#308)
49+
- kind: changed
50+
description: 'feat: Add Product Release Initiator functionality (#306)'
51+
- kind: changed
52+
description: 'chore: update kube-rbac-proxy, sealed-secrets-controller and argo-events nats to latest (#296)'
53+
- kind: changed
54+
description: 'feat: app-proxy with changeRevision fields support (#302)'
55+
- kind: changed
56+
description: 'feat: argo-cd with event-reporter update to report change revisions metadata in app annotations (#301)'
57+
- kind: changed
58+
description: fix:upgrade gitops operator to 0.3.1 to publish error to product release in case failed to create workflow (#299)
1659
dependencies:
17-
- name: argo-cd
18-
repository: https://codefresh-io.github.io/argo-helm
19-
version: 7.4.7-5-cap-2.12.3-2024.10.28-20100fc54
20-
- name: argo-events
21-
repository: https://codefresh-io.github.io/argo-helm
22-
version: 2.4.7-1-cap-CR-24607
23-
- name: argo-workflows
24-
repository: https://codefresh-io.github.io/argo-helm
25-
version: 0.41.12-v3.5.9-cap-CR-24929
26-
condition: argo-workflows.enabled
27-
- name: argo-rollouts
28-
repository: https://codefresh-io.github.io/argo-helm
29-
version: 2.37.3-1-v1.7.1-CR-24605
30-
condition: argo-rollouts.enabled
31-
- name: sealed-secrets
32-
repository: https://bitnami-labs.github.io/sealed-secrets/
33-
version: 2.16.1
34-
- name: codefresh-tunnel-client
35-
repository: oci://quay.io/codefresh/charts
36-
version: 0.1.17
37-
alias: tunnel-client
38-
condition: tunnel-client.enabled
39-
- name: codefresh-gitops-operator
40-
repository: oci://quay.io/codefresh/charts
41-
version: 0.3.6
42-
alias: gitops-operator
43-
condition: gitops-operator.enabled
44-
- name: garage
45-
repository: https://codefresh-io.github.io/garage
46-
alias: garage-workflows-artifact-storage
47-
version: 0.5.0-cf.1
48-
condition: garage-workflows-artifact-storage.enabled
60+
- name: argo-cd
61+
repository: https://codefresh-io.github.io/argo-helm
62+
version: 7.4.7-5-cap-2.12.3-2024.10.28-20100fc54
63+
- name: argo-events
64+
repository: https://codefresh-io.github.io/argo-helm
65+
version: 2.4.7-1-cap-CR-24607
66+
- name: argo-workflows
67+
repository: https://codefresh-io.github.io/argo-helm
68+
version: 0.41.12-v3.5.9-cap-CR-24929
69+
condition: argo-workflows.enabled
70+
- name: argo-rollouts
71+
repository: https://codefresh-io.github.io/argo-helm
72+
version: 2.37.3-1-v1.7.1-CR-24605
73+
condition: argo-rollouts.enabled
74+
- name: sealed-secrets
75+
repository: https://bitnami-labs.github.io/sealed-secrets/
76+
version: 2.16.1
77+
- name: codefresh-tunnel-client
78+
repository: oci://quay.io/codefresh/charts
79+
version: 0.1.17
80+
alias: tunnel-client
81+
condition: tunnel-client.enabled
82+
- name: codefresh-gitops-operator
83+
repository: oci://quay.io/codefresh/charts
84+
version: 0.3.6
85+
alias: gitops-operator
86+
condition: gitops-operator.enabled
87+
- name: garage
88+
repository: https://codefresh-io.github.io/garage
89+
alias: garage-workflows-artifact-storage
90+
version: 0.5.0-cf.1
91+
condition: garage-workflows-artifact-storage.enabled

‎charts/gitops-runtime/README.md

+15-61
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
## Codefresh gitops runtime
2-
![Version: 0.0.0](https://img.shields.io/badge/Version-0.0.0-informational?style=flat-square) ![AppVersion: 0.1.55](https://img.shields.io/badge/AppVersion-0.1.55-informational?style=flat-square)
2+
![Version: 0.14.0](https://img.shields.io/badge/Version-0.14.0-informational?style=flat-square) ![AppVersion: 0.1.62](https://img.shields.io/badge/AppVersion-0.1.62-informational?style=flat-square)
33

44
## Prerequisites
55

@@ -16,17 +16,6 @@ See [Use OCI-based registries](https://helm.sh/docs/topics/registries/)
1616
## Codefresh official documentation:
1717
Prior to running the installation please see the official documentation at: https://codefresh.io/docs/docs/installation/gitops/hybrid-gitops-helm-installation/
1818

19-
## WARNING! ARGO-CD 7.x.x CHART BREAKING CHANGE
20-
21-
In the runtime release `0.12.0` we upgraded to the latest argo-cd `7.x.x` helm chart which
22-
contains a breaking change in the values used for providing cluster credentials
23-
(in this chart it's located under the path `argo-cd.configs.clusterCredentials`).
24-
`clusterCredentials` used to be of type `list` -- now it's a `map` (`object`).
25-
See the [release notes](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-7.0.0).
26-
27-
Codefresh Gitops Runtime does NOT use these values directly -- so the runtimes
28-
with the default configuration are not affected.
29-
3019
## Using with private registries - Helper utility
3120
The GitOps Runtime comprises multiple subcharts and container images. Subcharts also vary in values structure, making it difficult to override image specific values to use private registries.
3221
We have created a helper utility to resolve this issue:
@@ -38,7 +27,7 @@ We have created a helper utility to resolve this issue:
3827
The utility is packaged in a container image. Below are instructions on executing the utility using Docker:
3928

4029
```
41-
docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.0.0 <local_registry>
30+
docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.14.0 <local_registry>
4231
```
4332
`output_dir` - is a local directory where the utility will output files. <br>
4433
`local_registry` - is your local registry where you want to mirror the images to
@@ -111,14 +100,14 @@ sealed-secrets:
111100
| app-proxy.image-enrichment.serviceAccount.name | string | `"codefresh-image-enrichment-sa"` | Name of the service account to create or the name of the existing one to use |
112101
| app-proxy.image.pullPolicy | string | `"IfNotPresent"` | |
113102
| app-proxy.image.repository | string | `"quay.io/codefresh/cap-app-proxy"` | |
114-
| app-proxy.image.tag | string | `"1.2969.0"` | |
103+
| app-proxy.image.tag | string | `"1.3142.0"` | |
115104
| app-proxy.imagePullSecrets | list | `[]` | |
116105
| app-proxy.initContainer.command[0] | string | `"./init.sh"` | |
117106
| app-proxy.initContainer.env | object | `{}` | |
118107
| app-proxy.initContainer.extraVolumeMounts | list | `[]` | Extra volume mounts for init container |
119108
| app-proxy.initContainer.image.pullPolicy | string | `"IfNotPresent"` | |
120109
| app-proxy.initContainer.image.repository | string | `"quay.io/codefresh/cap-app-proxy-init"` | |
121-
| app-proxy.initContainer.image.tag | string | `"1.2969.0"` | |
110+
| app-proxy.initContainer.image.tag | string | `"1.3142.0"` | |
122111
| app-proxy.initContainer.resources.limits.cpu | string | `"1"` | |
123112
| app-proxy.initContainer.resources.limits.memory | string | `"512Mi"` | |
124113
| app-proxy.initContainer.resources.requests.cpu | string | `"0.2"` | |
@@ -155,27 +144,16 @@ sealed-secrets:
155144
| app-proxy.serviceAccount.create | bool | `true` | |
156145
| app-proxy.serviceAccount.name | string | `"cap-app-proxy"` | |
157146
| app-proxy.tolerations | list | `[]` | |
147+
| argo-cd | object | `{"applicationVersioning":{"enabled":true,"useApplicationConfiguration":true},"configs":{"cm":{"accounts.admin":"apiKey,login","application.resourceTrackingMethod":"annotation+label","timeout.reconciliation":"20s"},"params":{"application.namespaces":"cf-*","server.insecure":true}},"crds":{"install":true},"eventReporter":{"enabled":true,"replicas":3,"version":"v2"},"fullnameOverride":"argo-cd"}` | ------------------------------------------------------------------------------------------------------------------- |
158148
| argo-cd.applicationVersioning.enabled | bool | `true` | Enable application versioning |
159149
| argo-cd.applicationVersioning.useApplicationConfiguration | bool | `true` | Extract application version based on ApplicationConfiguration CRD |
160-
| argo-cd.configs.cm."accounts.admin" | string | `"apiKey,login"` | |
161-
| argo-cd.configs.cm."application.resourceTrackingMethod" | string | `"annotation+label"` | |
162-
| argo-cd.configs.cm."timeout.reconciliation" | string | `"20s"` | |
163-
| argo-cd.configs.params."application.namespaces" | string | `"cf-*"` | |
164-
| argo-cd.configs.params."server.insecure" | bool | `true` | |
165-
| argo-cd.crds.install | bool | `true` | |
166150
| argo-cd.eventReporter.enabled | bool | `true` | Installs new event reporter component to cluster |
167151
| argo-cd.eventReporter.replicas | int | `3` | Amount of shards to handle applications events |
168152
| argo-cd.eventReporter.version | string | `"v2"` | Switches between old and new reporter version. Possible values: v1, v2. For v2 `argo-cd.eventReporter.enabled=true` is required |
169-
| argo-cd.fullnameOverride | string | `"argo-cd"` | |
170-
| argo-events.crds.install | bool | `false` | |
171-
| argo-events.fullnameOverride | string | `"argo-events"` | |
172-
| argo-rollouts.controller.replicas | int | `1` | |
173-
| argo-rollouts.enabled | bool | `true` | |
174-
| argo-rollouts.fullnameOverride | string | `"argo-rollouts"` | |
175-
| argo-rollouts.installCRDs | bool | `true` | |
153+
| argo-events | object | `{"configs":{"jetstream":{"versions":[{"configReloaderImage":"natsio/nats-server-config-reloader:0.16.0","metricsExporterImage":"natsio/prometheus-nats-exporter:0.15.0","natsImage":"nats:2.10.21","startCommand":"/nats-server","version":"latest"}]},"nats":{"versions":[{"metricsExporterImage":"natsio/prometheus-nats-exporter:0.15.0","natsStreamingImage":"nats-streaming:0.25.6","version":"0.22.1"}]}},"crds":{"install":false},"fullnameOverride":"argo-events"}` | ------------------------------------------------------------------------------------------------------------------- |
154+
| argo-rollouts | object | `{"controller":{"replicas":1},"enabled":true,"fullnameOverride":"argo-rollouts","installCRDs":true}` | ------------------------------------------------------------------------------------------------------------------- |
155+
| argo-workflows | object | `{"crds":{"install":true},"enabled":true,"fullnameOverride":"argo","server":{"authModes":["client"],"baseHref":"/workflows/"}}` | ------------------------------------------------------------------------------------------------------------------- |
176156
| argo-workflows.crds.install | bool | `true` | Install and upgrade CRDs |
177-
| argo-workflows.enabled | bool | `true` | |
178-
| argo-workflows.fullnameOverride | string | `"argo"` | |
179157
| argo-workflows.server.authModes | list | `["client"]` | auth-mode needs to be set to client to be able to see workflow logs from Codefresh UI |
180158
| argo-workflows.server.baseHref | string | `"/workflows/"` | Do not change. Workflows UI is only accessed through internal router, changing this values will break routing to workflows native UI from Codefresh. |
181159
| event-reporters.rollout.eventSource.affinity | object | `{}` | |
@@ -221,7 +199,7 @@ sealed-secrets:
221199
| garage-workflows-artifact-storage.persistence.meta | object | `{"size":"100Mi","storageClass":""}` | Volume that stores cluster metadata |
222200
| garage-workflows-artifact-storage.persistence.meta.storageClass | string | `""` | When empty value empty the default storage class for the cluster will be used |
223201
| garage-workflows-artifact-storage.resources | object | `{}` | Resources for garage pods. For smaller deployments at least 100m CPU and 1024Mi memory is reccommended. For larger deployments double this size. |
224-
| gitops-operator.affinity | object | `{}` | |
202+
| gitops-operator | object | `{"affinity":{},"argoCdNotifications":{"image":{},"imageOverride":false,"resources":{}},"crds":{"additionalLabels":{},"annotations":{},"install":true,"keep":false},"enabled":true,"env":{},"fullnameOverride":"","image":{},"imagePullSecrets":[],"kube-rbac-proxy":{"image":{"tag":"v0.16.0"},"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"100m","memory":"64Mi"}},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]}}},"libraryMode":true,"nameOverride":"","nodeSelector":{},"podAnnotations":{},"podLabels":{},"replicaCount":1,"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"100m","memory":"64Mi"}},"serviceAccount":{"annotations":{},"create":true,"name":"gitops-operator-controller-manager"},"tolerations":[]}` | ------------------------------------------------------------------------------------------------------------------- |
225203
| gitops-operator.argoCdNotifications | object | `{"image":{},"imageOverride":false,"resources":{}}` | Builtin notifications controller used by gitops-operator for promotion related notifications |
226204
| gitops-operator.argoCdNotifications.image | object | `{}` | Set image.repository and image.tag notifications image used by the gitops operator. Ignored unless imageOverride is set to true. |
227205
| gitops-operator.argoCdNotifications.imageOverride | bool | `false` | If set to true allows to override notifications image used by the gitops operator. When set to false the version of ArgoCD will be set to the version used for all other ArgoCD components. |
@@ -231,32 +209,7 @@ sealed-secrets:
231209
| gitops-operator.crds.annotations | object | `{}` | Annotations on gitops operator CRDs |
232210
| gitops-operator.crds.install | bool | `true` | Whether or not to install CRDs |
233211
| gitops-operator.crds.keep | bool | `false` | Keep CRDs if gitops runtime release is uninstalled |
234-
| gitops-operator.enabled | bool | `true` | |
235-
| gitops-operator.env | object | `{}` | |
236-
| gitops-operator.fullnameOverride | string | `""` | |
237-
| gitops-operator.image | object | `{}` | |
238-
| gitops-operator.imagePullSecrets | list | `[]` | |
239-
| gitops-operator.kube-rbac-proxy.image | object | `{}` | |
240-
| gitops-operator.kube-rbac-proxy.resources.limits.cpu | string | `"500m"` | |
241-
| gitops-operator.kube-rbac-proxy.resources.limits.memory | string | `"128Mi"` | |
242-
| gitops-operator.kube-rbac-proxy.resources.requests.cpu | string | `"100m"` | |
243-
| gitops-operator.kube-rbac-proxy.resources.requests.memory | string | `"64Mi"` | |
244-
| gitops-operator.kube-rbac-proxy.securityContext.allowPrivilegeEscalation | bool | `false` | |
245-
| gitops-operator.kube-rbac-proxy.securityContext.capabilities.drop[0] | string | `"ALL"` | |
246212
| gitops-operator.libraryMode | bool | `true` | Do not change unless instructed otherwise by Codefresh support |
247-
| gitops-operator.nameOverride | string | `""` | |
248-
| gitops-operator.nodeSelector | object | `{}` | |
249-
| gitops-operator.podAnnotations | object | `{}` | |
250-
| gitops-operator.podLabels | object | `{}` | |
251-
| gitops-operator.replicaCount | int | `1` | |
252-
| gitops-operator.resources.limits.cpu | string | `"500m"` | |
253-
| gitops-operator.resources.limits.memory | string | `"128Mi"` | |
254-
| gitops-operator.resources.requests.cpu | string | `"100m"` | |
255-
| gitops-operator.resources.requests.memory | string | `"64Mi"` | |
256-
| gitops-operator.serviceAccount.annotations | object | `{}` | |
257-
| gitops-operator.serviceAccount.create | bool | `true` | |
258-
| gitops-operator.serviceAccount.name | string | `"gitops-operator-controller-manager"` | |
259-
| gitops-operator.tolerations | list | `[]` | |
260213
| global.codefresh | object | `{"accountId":"","apiEventsPath":"/2.0/api/events","tls":{"caCerts":{"secret":{"annotations":{},"content":"","create":false,"key":"ca-bundle.crt"},"secretKeyRef":{}},"workflowPipelinesGitWebhooks":{"annotatins":{},"certificates":{}}},"url":"https://g.codefresh.io","userToken":{"secretKeyRef":{},"token":""}}` | Codefresh platform and account-related settings |
261214
| global.codefresh.accountId | string | `""` | Codefresh Account ID. |
262215
| global.codefresh.apiEventsPath | string | `"/2.0/api/events"` | Events API endpoint URL suffix. |
@@ -270,7 +223,7 @@ sealed-secrets:
270223
| global.codefresh.userToken | object | `{"secretKeyRef":{},"token":""}` | User token. Used for runtime registration against the patform. One of token (for plain text value) or secretKeyRef must be provided. |
271224
| global.codefresh.userToken.secretKeyRef | object | `{}` | User token that references an existing secret containing the token. |
272225
| global.codefresh.userToken.token | string | `""` | User token in plain text. The chart creates and manages the secret for this token. |
273-
| global.runtime | object | `{"cluster":"https://kubernetes.default.svc","codefreshHosted":false,"eventBus":{"annotations":{},"name":"codefresh-eventbus","nats":{"native":{"auth":"token","containerTemplate":{"resources":{"limits":{"cpu":"500m","ephemeral-storage":"2Gi","memory":"4Gi"},"requests":{"cpu":"200m","ephemeral-storage":"2Gi","memory":"1Gi"}}},"maxPayload":"4MB","replicas":3}},"pdb":{"enabled":true,"minAvailable":2}},"gitCredentials":{"password":{"secretKeyRef":{},"value":null},"username":"username"},"ingress":{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"protocol":"https","tls":[]},"ingressUrl":"","isConfigurationRuntime":false,"name":null}` | Runtime level settings |
226+
| global.runtime | object | `{"cluster":"https://kubernetes.default.svc","codefreshHosted":false,"eventBus":{"annotations":{},"name":"codefresh-eventbus","nats":{"native":{"auth":"token","containerTemplate":{"resources":{"limits":{"cpu":"500m","ephemeral-storage":"2Gi","memory":"4Gi"},"requests":{"cpu":"200m","ephemeral-storage":"2Gi","memory":"1Gi"}}},"maxPayload":"4MB","replicas":3}},"pdb":{"enabled":true,"minAvailable":2}},"gitCredentials":{"password":{"secretKeyRef":{},"value":null},"username":"username"},"ingress":{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"protocol":"https","skipValidation":false,"tls":[]},"ingressUrl":"","isConfigurationRuntime":false,"name":null}` | Runtime level settings |
274227
| global.runtime.cluster | string | `"https://kubernetes.default.svc"` | Runtime cluster. Should not be changed. |
275228
| global.runtime.codefreshHosted | bool | `false` | Defines whether this is a Codefresh hosted runtime. Should not be changed. |
276229
| global.runtime.eventBus.annotations | object | `{}` | Annotations on EventBus resource |
@@ -282,10 +235,11 @@ sealed-secrets:
282235
| global.runtime.gitCredentials.password.secretKeyRef | object | `{}` | secretKeyReference for Git credentials password. Provide name and key fields. |
283236
| global.runtime.gitCredentials.password.value | string | `nil` | Plain text password |
284237
| global.runtime.gitCredentials.username | string | `"username"` | Username. Optional when using token in password. |
285-
| global.runtime.ingress | object | `{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"protocol":"https","tls":[]}` | Ingress settings |
238+
| global.runtime.ingress | object | `{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"protocol":"https","skipValidation":false,"tls":[]}` | Ingress settings |
286239
| global.runtime.ingress.enabled | bool | `false` | Defines if ingress-based access mode is enabled for runtime. To use tunnel-based (ingressless) access mode, set to false. |
287240
| global.runtime.ingress.hosts | list | `[]` | Hosts for runtime ingress. Note that Codefresh platform will always use the first host in the list to access the runtime. |
288241
| global.runtime.ingress.protocol | string | `"https"` | The protocol that Codefresh platform will use to access the runtime ingress. Can be http or https. |
242+
| global.runtime.ingress.skipValidation | bool | `false` | if set to true, the pre-install hook will validate the existance of appropriate values, but *will not* attempt to make a web request to the ingress host |
289243
| global.runtime.ingressUrl | string | `""` | Explicit url for runtime ingress. Provide this value only if you don't want the chart to create and ingress (global.runtime.ingress.enabled=false) and tunnel-client is not used (tunnel-client.enabled=false) |
290244
| global.runtime.isConfigurationRuntime | bool | `false` | is the runtime set as a "configuration runtime". |
291245
| global.runtime.name | string | `nil` | Runtime name. Must be unique per platform account. |
@@ -299,7 +253,7 @@ sealed-secrets:
299253
| internal-router.fullnameOverride | string | `"internal-router"` | |
300254
| internal-router.image.pullPolicy | string | `"IfNotPresent"` | |
301255
| internal-router.image.repository | string | `"nginxinc/nginx-unprivileged"` | |
302-
| internal-router.image.tag | string | `"1.25-alpine"` | |
256+
| internal-router.image.tag | string | `"1.26-alpine3.20"` | |
303257
| internal-router.imagePullSecrets | list | `[]` | |
304258
| internal-router.ipv6 | object | `{"enabled":false}` | For ipv6 enabled clusters switch ipv6 enabled to true |
305259
| internal-router.nameOverride | string | `""` | |
@@ -323,7 +277,7 @@ sealed-secrets:
323277
| internal-router.serviceAccount.create | bool | `true` | |
324278
| internal-router.serviceAccount.name | string | `""` | |
325279
| internal-router.tolerations | list | `[]` | |
326-
| sealed-secrets | object | `{"fullnameOverride":"sealed-secrets-controller","image":{"registry":"quay.io","repository":"codefresh/sealed-secrets-controller","tag":"v0.24.5"},"keyrenewperiod":"720h","resources":{"limits":{"cpu":"500m","memory":"1Gi"},"requests":{"cpu":"200m","memory":"512Mi"}}}` | --------------------------------------------------------------------------------------------------------------------- |
327-
| tunnel-client | object | `{"enabled":true,"libraryMode":true,"tunnelServer":{"host":"register-tunnels.cf-cd.com","subdomainHost":"tunnels.cf-cd.com"}}` | Tunnel based runtime. Not supported for on-prem platform. In on-prem use ingress based runtimes. |
280+
| sealed-secrets | object | `{"fullnameOverride":"sealed-secrets-controller","image":{"registry":"quay.io","repository":"codefresh/sealed-secrets-controller","tag":"0.27.1"},"keyrenewperiod":"720h","resources":{"limits":{"cpu":"500m","memory":"1Gi"},"requests":{"cpu":"200m","memory":"512Mi"}}}` | ------------------------------------------------------------------------------------------------------------------- |
281+
| tunnel-client | object | `{"enabled":true,"libraryMode":true,"tunnelServer":{"host":"register-tunnels.cf-cd.com","subdomainHost":"tunnels.cf-cd.com"}}` | ------------------------------------------------------------------------------------------------------------------- |
328282
| tunnel-client.enabled | bool | `true` | Will only be used if global.runtime.ingress.enabled = false |
329283
| tunnel-client.libraryMode | bool | `true` | Do not change this value! Breaks chart logic |

‎charts/gitops-runtime/values.yaml

+54-103
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,6 @@ global:
1313
token: ""
1414
# -- User token that references an existing secret containing the token.
1515
secretKeyRef: {}
16-
1716
tls:
1817
# -- Custom CA certificates bundle for platform access with ssl
1918
caCerts:
@@ -32,18 +31,16 @@ global:
3231
# -----BEGIN CERTIFICATE-----
3332
# ... encoded certificate data here ...
3433
# -----END CERTIFICATE-----
35-
3634
# -- Certificates to be used in argo workflows pipelines created in Codefresh UI.
3735
# -- Those will be merged with the certificats defined in argo-cd.configs.tls.certificates - so if the certificates are already provided for ArgoCD, there is no need to provide them again.
3836
workflowPipelinesGitWebhooks:
3937
# Annotations on the secret resource
4038
annotatins: {}
4139
certificates: {}
42-
# server.example.com: |
43-
# -----BEGIN CERTIFICATE-----
44-
# ...
45-
# -----END CERTIFICATE-----
46-
40+
# server.example.com: |
41+
# -----BEGIN CERTIFICATE-----
42+
# ...
43+
# -----END CERTIFICATE-----
4744
# -- Runtime level settings
4845
runtime:
4946
# -- Runtime name. Must be unique per platform account.
@@ -80,10 +77,9 @@ global:
8077
value:
8178
# -- secretKeyReference for Git credentials password. Provide name and key fields.
8279
secretKeyRef: {}
83-
84-
# -- Runtime eventbus
80+
# -- Runtime eventbus
8581
eventBus:
86-
# -- Eventbus name
82+
# -- Eventbus name
8783
name: 'codefresh-eventbus'
8884
# -- Annotations on EventBus resource
8985
annotations: {}
@@ -107,7 +103,6 @@ global:
107103
cpu: 200m
108104
memory: 1Gi
109105
ephemeral-storage: 2Gi
110-
111106
# -------------------------------------------------------------------------------------------------------------------------
112107
# Installer
113108
# -------------------------------------------------------------------------------------------------------------------------
@@ -119,10 +114,9 @@ installer:
119114
repository: quay.io/codefresh/gitops-runtime-installer
120115
tag: ""
121116
pullPolicy: IfNotPresent
122-
123-
# -----------------------------------------------------------------------------------------------------------------------
124-
# Sealed secrets
125-
# -----------------------------------------------------------------------------------------------------------------------
117+
# ---------------------------------------------------------------------------------------------------------------------
118+
# DOCS: https://artifacthub.io/packages/helm/bitnami-labs/sealed-secrets/2.16.1?modal=values
119+
# ---------------------------------------------------------------------------------------------------------------------
126120
sealed-secrets:
127121
fullnameOverride: sealed-secrets-controller
128122
keyrenewperiod: "720h"
@@ -137,15 +131,13 @@ sealed-secrets:
137131
requests:
138132
cpu: 200m
139133
memory: 512Mi
140-
141-
#-----------------------------------------------------------------------------------------------------------------------
142-
# ArgoCD
143-
#-----------------------------------------------------------------------------------------------------------------------
134+
# ---------------------------------------------------------------------------------------------------------------------
135+
# DOCS: https://github.com/codefresh-io/argo-helm/blob/argo-cd-7.4.7-5-cap-2.12.3-2024.10.28-20100fc54/charts/argo-cd
136+
# ---------------------------------------------------------------------------------------------------------------------
144137
argo-cd:
145138
fullnameOverride: argo-cd
146139
crds:
147140
install: true
148-
149141
configs:
150142
cm:
151143
timeout.reconciliation: 20s
@@ -154,7 +146,6 @@ argo-cd:
154146
params:
155147
server.insecure: true
156148
application.namespaces: 'cf-*'
157-
158149
eventReporter:
159150
# -- Installs new event reporter component to cluster
160151
enabled: true
@@ -164,16 +155,14 @@ argo-cd:
164155
# Possible values: v1, v2.
165156
# For v2 `argo-cd.eventReporter.enabled=true` is required
166157
version: v2
167-
168158
applicationVersioning:
169159
# -- Enable application versioning
170160
enabled: true
171161
# -- Extract application version based on ApplicationConfiguration CRD
172162
useApplicationConfiguration: true
173-
174-
#-----------------------------------------------------------------------------------------------------------------------
175-
# Argo Events
176-
#-----------------------------------------------------------------------------------------------------------------------
163+
# ---------------------------------------------------------------------------------------------------------------------
164+
# DOCS: https://github.com/codefresh-io/argo-helm/blob/argo-events-2.4.7-1-cap-CR-24607/charts/argo-events
165+
# ---------------------------------------------------------------------------------------------------------------------
177166
argo-events:
178167
fullnameOverride: argo-events
179168
crds:
@@ -191,33 +180,30 @@ argo-events:
191180
metricsExporterImage: natsio/prometheus-nats-exporter:0.15.0
192181
configReloaderImage: natsio/nats-server-config-reloader:0.16.0
193182
startCommand: /nats-server
194-
195-
#-----------------------------------------------------------------------------------------------------------------------
196-
# Argo Workflows
197-
#-----------------------------------------------------------------------------------------------------------------------
183+
# ---------------------------------------------------------------------------------------------------------------------
184+
# DOCS: https://github.com/codefresh-io/argo-helm/blob/argo-workflows-0.41.12-v3.5.9-cap-CR-24929/charts/argo-workflows
185+
# ---------------------------------------------------------------------------------------------------------------------
198186
argo-workflows:
199187
fullnameOverride: argo
200188
enabled: true
201189
server:
202190
# -- auth-mode needs to be set to client to be able to see workflow logs from Codefresh UI
203191
authModes:
204-
- client
192+
- client
205193
# -- Do not change. Workflows UI is only accessed through internal router, changing this values will break routing to workflows native UI from Codefresh.
206194
baseHref: /workflows/
207195
crds:
208196
# -- Install and upgrade CRDs
209197
install: true
210-
211-
#-----------------------------------------------------------------------------------------------------------------------
212-
# Argo rollouts
213-
#-----------------------------------------------------------------------------------------------------------------------
198+
# ---------------------------------------------------------------------------------------------------------------------
199+
# DOCS: https://github.com/codefresh-io/argo-helm/blob/argo-rollouts-2.37.3-1-v1.7.1-CR-24605/charts/argo-rollouts
200+
# ---------------------------------------------------------------------------------------------------------------------
214201
argo-rollouts:
215202
enabled: true
216203
fullnameOverride: argo-rollouts
217204
controller:
218205
replicas: 1
219206
installCRDs: true
220-
221207
#-----------------------------------------------------------------------------------------------------------------------
222208
# Event reporters
223209
#-----------------------------------------------------------------------------------------------------------------------
@@ -284,7 +270,6 @@ event-reporters:
284270
tolerations: []
285271
nodeSelector: {}
286272
affinity: {}
287-
288273
#-----------------------------------------------------------------------------------------------------------------------
289274
# Internal router
290275
#-----------------------------------------------------------------------------------------------------------------------
@@ -309,53 +294,49 @@ internal-router:
309294
podSecurityContext: {}
310295
# -- Environment variables - see values.yaml inside the chart for usage
311296
env: {}
312-
# NAMESPACE:
313-
# valueFrom:
314-
# fieldRef:
315-
# fieldPath: metadata.namespace
316-
# VAR_NAME:
317-
# valueFrom:
318-
# secretKeyRef:
319-
# name: my-secret
320-
# key: my-secret-key
321-
# optional: true
322-
# VAR_NAME:
323-
# valueFrom:
324-
# configMapKeyRef:
325-
# name: my-config-map
326-
# key: my-config-map-key
327-
# optional: true
328-
# VAR_NANE: string-value
297+
# NAMESPACE:
298+
# valueFrom:
299+
# fieldRef:
300+
# fieldPath: metadata.namespace
301+
# VAR_NAME:
302+
# valueFrom:
303+
# secretKeyRef:
304+
# name: my-secret
305+
# key: my-secret-key
306+
# optional: true
307+
# VAR_NAME:
308+
# valueFrom:
309+
# configMapKeyRef:
310+
# name: my-config-map
311+
# key: my-config-map-key
312+
# optional: true
313+
# VAR_NANE: string-value
329314
securityContext: {}
330-
331315
service:
332316
type: ClusterIP
333317
port: 80
334-
335318
resources:
336319
limits:
337320
memory: 256Mi
338321
cpu: "1"
339322
requests:
340323
memory: 128Mi
341324
cpu: "0.2"
342-
343325
nodeSelector: {}
344326
tolerations: []
345327
affinity: {}
346328
# -- Internal routing settings. Do not change this unless you are absolutely certain - the values are determined by chart's logic.
347329
routing: {}
348330
# Example of values:
349-
# workflows:
350-
# enabled: true
351-
# internalUrl: "https://argo-server1:2746/"
352-
# app-proxy:
353-
# internalUrl: "http://cap-app-proxy:3017"
331+
# workflows:
332+
# enabled: true
333+
# internalUrl: "https://argo-server1:2746/"
334+
# app-proxy:
335+
# internalUrl: "http://cap-app-proxy:3017"
354336

355337
dnsService: kube-dns
356338
dnsNamespace: kube-system
357339
clusterDomain: cluster.local
358-
359340
## Internal-Router Pod Disruption Budget
360341
pdb:
361342
# -- Enable PDB
@@ -364,11 +345,9 @@ internal-router:
364345
minAvailable: 1
365346
# -- Set number of pods that are unavailable after eviction as number or percentage
366347
maxUnavailable: ""
367-
368-
#-----------------------------------------------------------------------------------------------------------------------
369-
# tunnel client
370-
#-----------------------------------------------------------------------------------------------------------------------
371-
# -- Tunnel based runtime. Not supported for on-prem platform. In on-prem use ingress based runtimes.
348+
# ---------------------------------------------------------------------------------------------------------------------
349+
# DOCS: https://github.com/codefresh-io/codefresh-tunnel-charts/blob/codefresh-tunnel-client-0.1.17-helm/codefresh-tunnel-client/values.yaml
350+
# ---------------------------------------------------------------------------------------------------------------------
372351
tunnel-client:
373352
# -- Will only be used if global.runtime.ingress.enabled = false
374353
enabled: true
@@ -377,7 +356,6 @@ tunnel-client:
377356
tunnelServer:
378357
host: "register-tunnels.cf-cd.com"
379358
subdomainHost: "tunnels.cf-cd.com"
380-
381359
#-----------------------------------------------------------------------------------------------------------------------
382360
# app-proxy
383361
#-----------------------------------------------------------------------------------------------------------------------
@@ -432,32 +410,26 @@ app-proxy:
432410
pullPolicy: IfNotPresent
433411
# -- Extra volume mounts for main container
434412
extraVolumeMounts: []
435-
436413
initContainer:
437414
image:
438415
repository: quay.io/codefresh/cap-app-proxy-init
439416
tag: 1.3142.0
440417
pullPolicy: IfNotPresent
441418
command:
442419
- ./init.sh
443-
444420
env: {}
445-
446421
resources:
447422
limits:
448423
memory: 512Mi
449424
cpu: '1'
450425
requests:
451426
memory: 256Mi
452427
cpu: '0.2'
453-
454428
# -- Extra volume mounts for init container
455429
extraVolumeMounts: []
456-
457430
imagePullSecrets: []
458431
nameOverride: ""
459432
fullnameOverride: "cap-app-proxy"
460-
461433
config:
462434
# -- ArgoCD user to be used by app-proxy
463435
argoCdUsername: "admin"
@@ -471,24 +443,18 @@ app-proxy:
471443
skipGitPermissionValidation: "false"
472444
# -- Log Level
473445
logLevel: "info"
474-
475446
env: {}
476-
477447
serviceAccount:
478448
create: true
479449
annotations: {}
480450
name: "cap-app-proxy"
481-
482451
podAnnotations: {}
483-
484452
podLabels: {}
485-
486453
podSecurityContext: {}
487-
# fsGroup: 2000
454+
# fsGroup: 2000
488455

489456
securityContext:
490457
allowPrivilegeEscalation: false
491-
492458
readinessProbe:
493459
# -- Minimum consecutive failures for the [probe] to be considered failed after having succeeded.
494460
failureThreshold: 3
@@ -500,7 +466,6 @@ app-proxy:
500466
successThreshold: 1
501467
# -- Number of seconds after which the [probe] times out.
502468
timeoutSeconds: 10
503-
504469
livenessProbe:
505470
# -- Minimum consecutive failures for the [probe] to be considered failed after having succeeded.
506471
failureThreshold: 10
@@ -512,11 +477,9 @@ app-proxy:
512477
successThreshold: 1
513478
# -- Number of seconds after which the [probe] times out.
514479
timeoutSeconds: 10
515-
516480
service:
517481
type: ClusterIP
518482
port: 3017
519-
520483
resources:
521484
requests:
522485
memory: '512Mi'
@@ -526,13 +489,11 @@ app-proxy:
526489
memory: '1Gi'
527490
ephemeral-storage: '6Gi'
528491
cpu: '1500m'
529-
530492
nodeSelector: {}
531493
tolerations: []
532494
affinity: {}
533495
# -- extra volumes
534496
extraVolumes: []
535-
536497
## App-Proxy Pod Disruption Budget
537498
pdb:
538499
# -- Enable PDB
@@ -542,15 +503,14 @@ app-proxy:
542503
# -- Set number of pods that are unavailable after eviction as number or percentage
543504
maxUnavailable: ""
544505

545-
#-----------------------------------------------------------------------------------------------------------------------
546-
# gitops-operator
547-
#-----------------------------------------------------------------------------------------------------------------------
506+
# ---------------------------------------------------------------------------------------------------------------------
507+
# DOCS: https://github.com/codefresh-io/codefresh-gitops-operator/tree/codefresh-gitops-operator-0.3.6-helm/charts/codefresh-gitops-operator
508+
# ---------------------------------------------------------------------------------------------------------------------
548509
gitops-operator:
549510
# -- Do not change unless instructed otherwise by Codefresh support
550511
libraryMode: true
551512
enabled: true
552513
replicaCount: 1
553-
554514
# -- Codefresh gitops operator crds
555515
crds:
556516
# -- Whether or not to install CRDs
@@ -561,18 +521,16 @@ gitops-operator:
561521
annotations: {}
562522
# -- Additional labels for gitops operator CRDs
563523
additionalLabels: {}
564-
565524
env: {}
566525
image: {}
567-
# -- defaults
568-
# repository: quay.io/codefresh/codefresh-gitops-operator
569-
# tag: 'v{{ .Chart.AppVersion }}'
526+
# -- defaults
527+
# repository: quay.io/codefresh/codefresh-gitops-operator
528+
# tag: 'v{{ .Chart.AppVersion }}'
570529

571530
serviceAccount:
572531
create: true
573532
annotations: {}
574533
name: "gitops-operator-controller-manager"
575-
576534
# -- Builtin notifications controller used by gitops-operator for promotion related notifications
577535
argoCdNotifications:
578536
# -- If set to true allows to override notifications image used by the gitops operator. When set to false the version of ArgoCD will be set to the version used for all other ArgoCD components.
@@ -581,39 +539,32 @@ gitops-operator:
581539
image: {}
582540
# -- Resources for notifications controller used by gitops-operator.
583541
resources: {}
584-
585542
imagePullSecrets: []
586543
nameOverride: ""
587544
fullnameOverride: ""
588-
589545
podAnnotations: {}
590546
podLabels: {}
591-
592547
nodeSelector: {}
593548
tolerations: []
594549
affinity: {}
595-
596550
resources:
597551
limits:
598552
cpu: 500m
599553
memory: 128Mi
600554
requests:
601555
cpu: 100m
602556
memory: 64Mi
603-
604557
kube-rbac-proxy:
605558
image:
606559
tag: v0.16.0
607560
# -- defaults
608561
# repository: gcr.io/kubebuilder/kube-rbac-proxy
609562
# tag: v0.14.1
610-
611563
securityContext:
612564
allowPrivilegeEscalation: false
613565
capabilities:
614566
drop:
615567
- "ALL"
616-
617568
resources:
618569
limits:
619570
cpu: 500m

0 commit comments

Comments
 (0)
Please sign in to comment.