Merge pull request 'Weekly Helm Update' (#447) from Helm_Update_20241…

…022_MjMzOTIK into master Reviewed-on: https://gitea.obmondo.com/EnableIT/KubeAid/pulls/447
Obmondo · Oct 24, 2024 · 5d4b98b · 5d4b98b
2 parents fa900f0 + 25a77b2
commit 5d4b98b
Show file tree

Hide file tree

Showing 126 changed files with 731 additions and 944 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,28 @@
 # Changelog
 All releases and the changes included in them (pulled from git commits added since last release) will be detailed in this file.
 
+## 4.2.0
+### Minor Version Upgrades
+- Updated gitlab-runner from version 0.69.0 to 0.70.1
+- Updated aws-ebs-csi-driver from version 2.35.1 to 2.36.0
+
+### Patch Version Upgrades
+- Updated teleport-kube-agent from version 16.4.2 to 16.4.3
+- Updated teleport-cluster from version 16.4.2 to 16.4.3
+- Updated rook-ceph-cluster from version v1.15.3 to v1.15.4
+- Updated rook-ceph from version v1.15.3 to v1.15.4
+- Updated rabbitmq-cluster-operator from version 4.3.24 to 4.3.25
+- Updated oncall from version 1.11.0 to 1.11.3
+- Updated mattermost-team-edition from version 6.6.63 to 6.6.64
+- Updated keda from version 2.15.1 to 2.15.2
+- Updated cluster-autoscaler from version 9.43.0 to 9.43.1
+- Updated cloudnative-pg from version 0.22.0 to 0.22.1
+- Updated cilium from version 1.16.2 to 1.16.3
+- Updated argo-cd from version 7.6.8 to 7.6.12
+
+### Improvements
+- 2c76119b Adding KubeAid demo blog (Part 1)
+
 ## 4.1.0
 ### Minor Version Upgrades
 - Updated oncall from version 1.10.2 to 1.11.0

diff --git a/argocd-helm-charts/argo-cd/Chart.yaml b/argocd-helm-charts/argo-cd/Chart.yaml
@@ -7,5 +7,5 @@ dependencies:
     # 2.3v argocd failes with remote value files
     # 3.35.4v helm chart fails also with bad path of the values files (this is the last release for 2.2.x argocd)
     # please stick to 3.29.5, why ? cause its a tested and the last working helm chart version
-    version: "7.6.8"
+    version: "7.6.12"
     repository: https://argoproj.github.io/argo-helm
diff --git a/argocd-helm-charts/argo-cd/charts/argo-cd/Chart.yaml b/argocd-helm-charts/argo-cd/charts/argo-cd/Chart.yaml
@@ -1,12 +1,12 @@
 annotations:
   artifacthub.io/changes: |
-    - kind: added
-      description: Set affinity in redis secret-init job.
+    - kind: changed
+      description: Bump argo-cd to v2.12.6
   artifacthub.io/signKey: |
     fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
     url: https://argoproj.github.io/argo-helm/pgp_keys.asc
 apiVersion: v2
-appVersion: v2.12.4
+appVersion: v2.12.6
 dependencies:
 - condition: redis-ha.enabled
   name: redis-ha
@@ -28,4 +28,4 @@ name: argo-cd
 sources:
 - https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
 - https://github.com/argoproj/argo-cd
-version: 7.6.8
+version: 7.6.12
diff --git a/argocd-helm-charts/argo-cd/charts/argo-cd/templates/argocd-configs/cluster-secrets.yaml b/argocd-helm-charts/argo-cd/charts/argo-cd/templates/argocd-configs/cluster-secrets.yaml
@@ -20,7 +20,7 @@ metadata:
 type: Opaque
 stringData:
   {{- if $cluster_value.shard }}
-  shard: {{ $cluster_value.shard }}
+  shard: {{ $cluster_value.shard | quote }}
   {{- end }}
   name: {{ required "A valid .Values.configs.clusterCredentials.CLUSTERNAME.name entry is required!" $cluster_key }}
   server: {{ required "A valid .Values.configs.clusterCredentials.CLUSTERNAME.server entry is required!" $cluster_value.server }}

diff --git a/argocd-helm-charts/argo-cd/charts/argo-cd/templates/argocd-server/clusterrole.yaml b/argocd-helm-charts/argo-cd/charts/argo-cd/templates/argocd-server/clusterrole.yaml
@@ -23,9 +23,7 @@ rules:
       - events
     verbs:
       - list
-      {{- if (index .Values.configs.params "application.namespaces") }}
       - create
-      {{- end }}
   - apiGroups:
       - ""
     resources:

diff --git a/argocd-helm-charts/argo-cd/requirements.lock b/argocd-helm-charts/argo-cd/requirements.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 7.6.8
-digest: sha256:0d876f5e6fea53d69d26a95277318855517b6e3235ea1f7bb8e4938b35751943
-generated: "2024-10-07T12:42:32.268980602+05:30"
+  version: 7.6.12
+digest: sha256:2a3c5f1457e9a1b6dc9f1271bb3803b83248d6fa52799fa1ab21fbc4a906c00e
+generated: "2024-10-22T13:22:41.759683426+05:30"
diff --git a/argocd-helm-charts/aws-ebs-csi-driver/Chart.lock b/argocd-helm-charts/aws-ebs-csi-driver/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: aws-ebs-csi-driver
   repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
-  version: 2.35.1
-digest: sha256:77fd5e8a584980ce172a2e979e998965d2a7acea8b847c04f6a9256b219de5dc
-generated: "2024-09-23T13:11:00.774761399+05:30"
+  version: 2.36.0
+digest: sha256:e3c7530ffb8def7755944cd94fe374a68e26608e152dad8dd65123b18b3de7d5
+generated: "2024-10-22T13:23:33.907887206+05:30"
diff --git a/argocd-helm-charts/aws-ebs-csi-driver/Chart.yaml b/argocd-helm-charts/aws-ebs-csi-driver/Chart.yaml
@@ -3,5 +3,5 @@ name: aws-ebs-csi-driver
 version: 1.0.0
 dependencies:
   - name: aws-ebs-csi-driver
-    version: 2.35.1
+    version: 2.36.0
     repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
diff --git a/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/CHANGELOG.md b/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/CHANGELOG.md
@@ -1,4 +1,9 @@
 # Helm chart
+## v2.36.0
+* Bump driver version to `v1.36.0`
+* Add recommended autoscalar Tolerations to driver DaemonSet ([#2165](https://github.com/kubernetes-sigs/aws-ebs-csi-driver/pull/2165), [@AndrewSirenko](https://github.com/AndrewSirenko))
+* Add support for unhealthyPodEvictionPolicy on PodDisruptionBudget ([#2159](https://github.com/kubernetes-sigs/aws-ebs-csi-driver/pull/2159), [@peterabarr](https://github.com/peterabarr))
+
 ## v2.35.1
 * Fix an issue causing the `csi-attacher` container to get stuck in `CrashLoopBackoff` on clusters with VAC enabled. Users with a VAC-enabled cluster are strongly encouraged to skip `v2.35.0` and/or upgrade directly to `v2.35.1` or later.
 

diff --git a/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/Chart.yaml b/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.35.0
+appVersion: 1.36.0
 description: A Helm chart for AWS EBS CSI Driver
 home: https://github.com/kubernetes-sigs/aws-ebs-csi-driver
 keywords:
@@ -13,4 +13,4 @@ maintainers:
 name: aws-ebs-csi-driver
 sources:
 - https://github.com/kubernetes-sigs/aws-ebs-csi-driver
-version: 2.35.1
+version: 2.36.0
diff --git a/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/_helpers.tpl b/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/_helpers.tpl
@@ -83,3 +83,21 @@ Handle http proxy env vars
 - name: NO_PROXY
   value: {{ .Values.proxy.no_proxy | quote }}
 {{- end -}}
+
+{{/*
+Recommended daemonset tolerations
+*/}}
+{{- define "aws-ebs-csi-driver.daemonset-tolerations" -}}
+# Prevents stateful workloads from being scheduled to node before CSI Driver reports volume attachment limit
+- key: "ebs.csi.aws.com/agent-not-ready"
+  operator: "Exists"
+# Prevents undesired eviction by Cluster Autoscalar
+- key: "ToBeDeletedByClusterAutoscaler"
+  operator: Exists
+# Prevents undesired eviction by v1 Karpenter
+- key: "karpenter.sh/disrupted"
+  operator: Exists
+# Prevents undesired eviction by v1beta1 Karpenter
+- key: "karpenter.sh/disruption"
+  operator: Exists
+{{- end -}}
diff --git a/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/_node-windows.tpl b/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/_node-windows.tpl
@@ -49,6 +49,7 @@ spec:
         {{- with .Values.node.tolerations }}
         {{- toYaml . | nindent 8 }}
         {{- end }}
+        {{- include "aws-ebs-csi-driver.daemonset-tolerations" . | nindent 8 }}
         {{- end }}
       {{- if .Values.node.windowsHostProcess }}
       securityContext:

diff --git a/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/_node.tpl b/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/_node.tpl
@@ -53,8 +53,7 @@ spec:
         {{- with .Values.node.tolerations }}
         {{- toYaml . | nindent 8 }}
         {{- end }}
-        - key: "ebs.csi.aws.com/agent-not-ready"
-          operator: "Exists"
+        {{- include "aws-ebs-csi-driver.daemonset-tolerations" . | nindent 8 }}
         {{- end }}
       hostNetwork: {{ .Values.node.hostNetwork }}
       {{- with .Values.node.securityContext }}

diff --git a/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/controller.yaml b/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/controller.yaml
@@ -74,11 +74,7 @@ spec:
           image: {{ printf "%s%s:%s" (default "" .Values.image.containerRegistry) .Values.image.repository (default (printf "v%s" .Chart.AppVersion) (.Values.image.tag | toString)) }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           args:
-            {{- if ne .Release.Name "kustomize" }}
             - controller
-            {{- else }}
-            # - {all,controller,node} # specify the driver mode
-            {{- end }}
             - --endpoint=$(CSI_ENDPOINT)
             {{- if .Values.controller.extraVolumeTags }}
               {{- include "aws-ebs-csi-driver.extra-volume-tags" . | nindent 12 }}

diff --git a/...ws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/poddisruptionbudget-controller.yaml b/...ws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/poddisruptionbudget-controller.yaml
@@ -11,6 +11,9 @@ spec:
     matchLabels:
       app: ebs-csi-controller
       {{- include "aws-ebs-csi-driver.selectorLabels" . | nindent 6 }}
+  {{- if .Values.controller.podDisruptionBudget.unhealthyPodEvictionPolicy }}
+  unhealthyPodEvictionPolicy: {{ .Values.controller.podDisruptionBudget.unhealthyPodEvictionPolicy }}
+  {{- end }}
   {{- if le (.Values.controller.replicaCount | int) 2 }}
   maxUnavailable: 1
   {{- else }}

diff --git a/...aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/serviceaccount-csi-controller.yaml b/...aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/serviceaccount-csi-controller.yaml
@@ -10,11 +10,6 @@ metadata:
   annotations:
     {{- toYaml . | nindent 4 }}
   {{- end }}
-  {{- if eq .Release.Name "kustomize" }}
-  #Enable if EKS IAM roles for service accounts (IRSA) is used. See https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html for details.
-  #annotations:
-  #  eks.amazonaws.com/role-arn: arn:<partition>:iam::<account>:role/ebs-csi-role
-  {{- end }}
 {{- if .Values.controller.serviceAccount.automountServiceAccountToken }}
 automountServiceAccountToken: {{ .Values.controller.serviceAccount.automountServiceAccountToken }}
 {{- end }}

diff --git a/...helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/tests/helm-tester.yaml b/...helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/templates/tests/helm-tester.yaml
@@ -225,10 +225,8 @@ spec:
       volumeMounts:
       - name: config-vol
         mountPath: /etc/config
-  # kubekins-e2e v1 image is linux amd64 only.
   nodeSelector:
     kubernetes.io/os: linux
-    kubernetes.io/arch: amd64
   serviceAccountName: ebs-csi-driver-test
   volumes:
     - name: config-vol

diff --git a/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/values.yaml b/argocd-helm-charts/aws-ebs-csi-driver/charts/aws-ebs-csi-driver/values.yaml
@@ -17,7 +17,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner
-      tag: "v5.1.0-eks-1-31-3"
+      tag: "v5.1.0-eks-1-31-5"
     logLevel: 2
     # Additional parameters provided by external-provisioner.
     additionalArgs: []
@@ -44,7 +44,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: public.ecr.aws/eks-distro/kubernetes-csi/external-attacher
-      tag: "v4.7.0-eks-1-31-3"
+      tag: "v4.7.0-eks-1-31-5"
     # Tune leader lease election for csi-attacher.
     # Leader election is on by default.
     leaderElection:
@@ -73,7 +73,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: public.ecr.aws/eks-distro/kubernetes-csi/external-snapshotter/csi-snapshotter
-      tag: "v8.0.1-eks-1-31-3"
+      tag: "v8.1.0-eks-1-31-5"
     logLevel: 2
     # Additional parameters provided by csi-snapshotter.
     additionalArgs: []
@@ -89,7 +89,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe
-      tag: "v2.14.0-eks-1-31-3"
+      tag: "v2.14.0-eks-1-31-5"
     # Additional parameters provided by livenessprobe.
     additionalArgs: []
     resources: {}
@@ -101,7 +101,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: public.ecr.aws/eks-distro/kubernetes-csi/external-resizer
-      tag: "v1.12.0-eks-1-31-3"
+      tag: "v1.12.0-eks-1-31-5"
     # Tune leader lease election for csi-resizer.
     # Leader election is on by default.
     leaderElection:
@@ -128,7 +128,7 @@ sidecars:
     image:
       pullPolicy: IfNotPresent
       repository: public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar
-      tag: "v2.12.0-eks-1-31-3"
+      tag: "v2.12.0-eks-1-31-5"
     logLevel: 2
     # Additional parameters provided by node-driver-registrar.
     additionalArgs: []
@@ -249,6 +249,7 @@ controller:
     # Warning: Disabling PodDisruptionBudget may lead to delays in stateful workloads starting due to controller
     # pod restarts or evictions.
     enabled: true
+    # unhealthyPodEvictionPolicy:
   priorityClassName: system-cluster-critical
   # AWS region to use. If not specified then the region will be looked up via the AWS EC2 metadata
   # service.
@@ -489,4 +490,4 @@ nodeComponentOnly: false
 helmTester:
   enabled: true
   # Supply a custom image to the ebs-csi-driver-test pod in helm-tester.yaml
-  image: "gcr.io/k8s-staging-test-infra/kubekins-e2e:v20240903-6a352c5344-master"
+  image: "us-central1-docker.pkg.dev/k8s-staging-test-infra/images/kubekins-e2e:v20241011-e8871c079d-master"
diff --git a/argocd-helm-charts/cilium/Chart.lock b/argocd-helm-charts/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.16.2
-digest: sha256:4df71027a1b97908a5d72e1e19f32b5ad31a0efd173c106c99b687ffe75a6106
-generated: "2024-09-30T20:24:02.916013146+05:30"
+  version: 1.16.3
+digest: sha256:d14420bef27e2f6259e52a581ff8e5a2cd6e975706bf92e2f9f3ed001e1fd6f6
+generated: "2024-10-22T13:25:21.253716398+05:30"
diff --git a/argocd-helm-charts/cilium/Chart.yaml b/argocd-helm-charts/cilium/Chart.yaml
@@ -3,5 +3,5 @@ name: cilium
 version: 1.0.0
 dependencies:
   - name: cilium
-    version: 1.16.2
+    version: 1.16.3
     repository: https://helm.cilium.io/
diff --git a/argocd-helm-charts/cilium/charts/cilium/Chart.yaml b/argocd-helm-charts/cilium/charts/cilium/Chart.yaml
@@ -79,7 +79,7 @@ annotations:
     Pod IP Pool\n  description: |\n    CiliumPodIPPool defines an IP pool that can
     be used for pooled IPAM (i.e. the multi-pool IPAM mode).\n"
 apiVersion: v2
-appVersion: 1.16.2
+appVersion: 1.16.3
 description: eBPF-based Networking, Security, and Observability
 home: https://cilium.io/
 icon: https://cdn.jsdelivr.net/gh/cilium/cilium@main/Documentation/images/logo-solo.svg
@@ -95,4 +95,4 @@ kubeVersion: '>= 1.21.0-0'
 name: cilium
 sources:
 - https://github.com/cilium/cilium
-version: 1.16.2
+version: 1.16.3