Merge pull request 'Weekly Helm Update' (#433) from Helm_Update_20241…

…007_NDk0Nwo= into master Reviewed-on: https://gitea.obmondo.com/EnableIT/KubeAid/pulls/433
Obmondo · Oct 7, 2024 · 6994617 · 6994617
2 parents 23b4a0a + 1f83f37
commit 6994617
Show file tree

Hide file tree

Showing 146 changed files with 8,562 additions and 1,529 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,34 @@
 # Changelog
 All releases and the changes included in them (pulled from git commits added since last release) will be detailed in this file.
 
+## 4.0.0
+### Major Version Upgrades
+- Updated redmine from version 29.0.6 to 30.0.0
+
+### Minor Version Upgrades
+- Updated traefik from version 32.0.0 to 32.1.0
+- Updated sonarqube from version 10.6.1+3163 to 10.7.0+3598
+- Updated opensearch-dashboards from version 2.23.0 to 2.24.0
+- Updated opensearch from version 2.25.0 to 2.26.0
+- Updated oncall from version 1.9.30 to 1.10.2
+- Updated kubernetes-dashboard from version 7.6.1 to 7.7.0
+- Updated cluster-autoscaler from version 9.41.0 to 9.43.0
+- Updated cert-manager from version v1.15.3 to v1.16.0
+
+### Patch Version Upgrades
+- Updated rook-ceph-cluster from version v1.15.2 to v1.15.3
+- Updated rook-ceph from version v1.15.2 to v1.15.3
+- Updated rabbitmq-cluster-operator from version 4.3.23 to 4.3.24
+- Updated metallb from version 6.3.12 to 6.3.13
+- Updated fluent-bit from version 0.47.9 to 0.47.10
+- Updated external-dns from version 8.3.8 to 8.3.9
+- Updated argo-cd from version 7.6.5 to 7.6.8
+
+### Improvements
+- 85759c07 MachinePool annotation required for the AWS native autoscaler to autoscale it
+- f43f1e77 bootstrap crossplane
+- 84054ce6 Change deployment.revisionHistoryLimit type to int from string for Traefik KubeAid app
+
 ## 3.0.0
 ### Major Version Upgrades
 - Updated traefik from version 31.1.1 to 32.0.0

diff --git a/argocd-helm-charts/argo-cd/Chart.yaml b/argocd-helm-charts/argo-cd/Chart.yaml
@@ -7,5 +7,5 @@ dependencies:
     # 2.3v argocd failes with remote value files
     # 3.35.4v helm chart fails also with bad path of the values files (this is the last release for 2.2.x argocd)
     # please stick to 3.29.5, why ? cause its a tested and the last working helm chart version
-    version: "7.6.5"
+    version: "7.6.8"
     repository: https://argoproj.github.io/argo-helm
diff --git a/argocd-helm-charts/argo-cd/charts/argo-cd/Chart.yaml b/argocd-helm-charts/argo-cd/charts/argo-cd/Chart.yaml
@@ -1,7 +1,7 @@
 annotations:
   artifacthub.io/changes: |
-    - kind: changed
-      description: Bump argo-cd to v2.12.4
+    - kind: added
+      description: Set affinity in redis secret-init job.
   artifacthub.io/signKey: |
     fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
     url: https://argoproj.github.io/argo-helm/pgp_keys.asc
@@ -28,4 +28,4 @@ name: argo-cd
 sources:
 - https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
 - https://github.com/argoproj/argo-cd
-version: 7.6.5
+version: 7.6.8
diff --git a/argocd-helm-charts/argo-cd/charts/argo-cd/README.md b/argocd-helm-charts/argo-cd/charts/argo-cd/README.md
@@ -742,7 +742,7 @@ NAME: my-release
 | configs.gpg.keys | object | `{}` (See [values.yaml]) | [GnuPG] public keys to add to the keyring |
 | configs.params."application.namespaces" | string | `""` | Enables [Applications in any namespace] |
 | configs.params."applicationsetcontroller.enable.progressive.syncs" | bool | `false` | Enables use of the Progressive Syncs capability |
-| configs.params."applicationsetcontroller.namespaces" | string | `""` | A list of glob patterns specifying where to look for ApplicationSet resources. (e.g. `"namespace1, namespace2"`) |
+| configs.params."applicationsetcontroller.namespaces" | string | `""` (default is only the ns where the controller is installed) | A list of glob patterns specifying where to look for ApplicationSet resources. (e.g. `"argocd,argocd-appsets-*"`) |
 | configs.params."applicationsetcontroller.policy" | string | `"sync"` | Modify how application is synced between the generator and the cluster. One of: `sync`, `create-only`, `create-update`, `create-delete` |
 | configs.params."controller.ignore.normalizer.jq.timeout" | string | `"1s"` | JQ Path expression timeout |
 | configs.params."controller.operation.processors" | int | `10` | Number of application operation processors |
@@ -754,6 +754,7 @@ NAME: my-release
 | configs.params."server.basehref" | string | `"/"` | Value for base href in index.html. Used if Argo CD is running behind reverse proxy under subpath different from / |
 | configs.params."server.disable.auth" | bool | `false` | Disable Argo CD RBAC for user authentication |
 | configs.params."server.enable.gzip" | bool | `true` | Enable GZIP compression |
+| configs.params."server.enable.proxy.extension" | bool | `false` | Enable proxy extension feature. (proxy extension is in Alpha phase) |
 | configs.params."server.insecure" | bool | `false` | Run server without TLS |
 | configs.params."server.rootpath" | string | `""` | Used if Argo CD is running behind reverse proxy under subpath different from / |
 | configs.params."server.staticassets" | string | `"/shared/app"` | Directory path that contains additional static assets |
@@ -1393,6 +1394,7 @@ If you use an External Redis (See Option 3 above), this Job is not deployed.
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| redisSecretInit.affinity | object | `{}` | Assign custom [affinity] rules to the Redis secret-init Job |
 | redisSecretInit.containerSecurityContext | object | See [values.yaml] | Application controller container-level security context |
 | redisSecretInit.enabled | bool | `true` | Enable Redis secret initialization. If disabled, secret must be provisioned by alternative methods |
 | redisSecretInit.image.imagePullPolicy | string | `""` (defaults to global.image.imagePullPolicy) | Image pull policy for the Redis secret-init Job |

diff --git a/...elm-charts/argo-cd/charts/argo-cd/templates/argocd-applicationset/clusterrolebinding.yaml b/...elm-charts/argo-cd/charts/argo-cd/templates/argocd-applicationset/clusterrolebinding.yaml
@@ -13,12 +13,4 @@ subjects:
   - kind: ServiceAccount
     name: {{ template "argo-cd.applicationSet.serviceAccountName" . }}
     namespace: {{ include "argo-cd.namespace" . }}
-{{- $namespaces := index .Values.configs.params "applicationsetcontroller.namespaces" -}}
-{{- range $namespace := (split "," $namespaces) }}
-  {{- if $namespace }}
-  - kind: ServiceAccount
-    name: {{ include "argo-cd.applicationSet.serviceAccountName" $ }}
-    namespace: {{ $namespace | trim | quote }}
-  {{- end }}
-{{- end }}
 {{- end }}
diff --git a/argocd-helm-charts/argo-cd/charts/argo-cd/templates/redis-secret-init/job.yaml b/argocd-helm-charts/argo-cd/charts/argo-cd/templates/redis-secret-init/job.yaml
@@ -54,6 +54,10 @@ spec:
       priorityClassName: {{ . }}
       {{- end }}
       restartPolicy: OnFailure
+      {{- with include "argo-cd.affinity" (dict "context" . "component" .Values.redisSecretInit) }}
+      affinity:
+        {{- trim . | nindent 8 }}
+      {{- end }}
       {{- with .Values.redisSecretInit.nodeSelector | default .Values.global.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}

diff --git a/argocd-helm-charts/argo-cd/charts/argo-cd/values.yaml b/argocd-helm-charts/argo-cd/charts/argo-cd/values.yaml
@@ -228,6 +228,25 @@ configs:
     #     - profile
     #     - email
 
+    # Extension Configuration
+    ## Ref: https://argo-cd.readthedocs.io/en/latest/developer-guide/extensions/proxy-extensions/
+    # extension.config: |
+    #   extensions:
+    #   - name: httpbin
+    #     backend:
+    #       connectionTimeout: 2s
+    #       keepAlive: 15s
+    #       idleConnectionTimeout: 60s
+    #       maxIdleConnections: 30
+    #       services:
+    #       - url: http://httpbin.org
+    #         headers:
+    #         - name: some-header
+    #           value: '$some.argocd.secret.key'
+    #         cluster:
+    #           name: some-cluster
+    #           server: https://some-cluster
+
   # Argo CD configuration parameters
   ## Ref: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/argocd-cmd-params-cm.yaml
   params:
@@ -266,6 +285,8 @@ configs:
     server.disable.auth: false
     # -- Enable GZIP compression
     server.enable.gzip: true
+    # -- Enable proxy extension feature. (proxy extension is in Alpha phase)
+    server.enable.proxy.extension: false
     # -- Set X-Frame-Options header in HTTP responses to value. To disable, set to "".
     server.x.frame.options: sameorigin
 
@@ -278,7 +299,9 @@ configs:
     applicationsetcontroller.policy: sync
     # -- Enables use of the Progressive Syncs capability
     applicationsetcontroller.enable.progressive.syncs: false
-    # -- A list of glob patterns specifying where to look for ApplicationSet resources. (e.g. `"namespace1, namespace2"`)
+    # -- A list of glob patterns specifying where to look for ApplicationSet resources. (e.g. `"argocd,argocd-appsets-*"`)
+    # @default -- `""` (default is only the ns where the controller is installed)
+    ## For more information: https://argo-cd.readthedocs.io/en/stable/operator-manual/applicationset/Appset-Any-Namespace/
     applicationsetcontroller.namespaces: ""
 
     # -- Enables [Applications in any namespace]
@@ -1702,6 +1725,9 @@ redisSecretInit:
   # @default -- `""` (defaults to global.priorityClassName)
   priorityClassName: ""
 
+  # -- Assign custom [affinity] rules to the Redis secret-init Job
+  affinity: {}
+
   # -- Node selector to be added to the Redis secret-init Job
   # @default -- `{}` (defaults to global.nodeSelector)
   nodeSelector: {}

diff --git a/argocd-helm-charts/argo-cd/requirements.lock b/argocd-helm-charts/argo-cd/requirements.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 7.6.5
-digest: sha256:627c267a384b5f57bc1b95a9710e503884be0cbc2c3ba5644ef3be14cea3d000
-generated: "2024-09-30T20:21:44.703235133+05:30"
+  version: 7.6.8
+digest: sha256:0d876f5e6fea53d69d26a95277318855517b6e3235ea1f7bb8e4938b35751943
+generated: "2024-10-07T12:42:32.268980602+05:30"
diff --git a/argocd-helm-charts/cert-manager/Chart.lock b/argocd-helm-charts/cert-manager/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.15.3
-digest: sha256:f750753e30c9738b5ce11f1ded7842d1808685f59391ed2b896508d2d8db6f93
-generated: "2024-08-23T23:46:48.049569112+05:30"
+  version: v1.16.0
+digest: sha256:59590787a7a7a4b4e15c20af04b03933ad00feff48bc38a8cdbf17a5f058e020
+generated: "2024-10-07T12:44:46.13298375+05:30"
diff --git a/argocd-helm-charts/cert-manager/Chart.yaml b/argocd-helm-charts/cert-manager/Chart.yaml
@@ -4,5 +4,5 @@ version: 1.6.1
 # see latest chart here: https://artifacthub.io/packages/search?org=cert-manager
 dependencies:
   - name: cert-manager
-    version: v1.15.3
+    version: v1.16.0
     repository: https://charts.jetstack.io
diff --git a/argocd-helm-charts/cert-manager/charts/cert-manager/Chart.yaml b/argocd-helm-charts/cert-manager/charts/cert-manager/Chart.yaml
@@ -6,7 +6,7 @@ annotations:
     fingerprint: 1020CF3C033D4F35BAE1C19E1226061C665DF13E
     url: https://cert-manager.io/public-keys/cert-manager-keyring-2021-09-20-1020CF3C033D4F35BAE1C19E1226061C665DF13E.gpg
 apiVersion: v2
-appVersion: v1.15.3
+appVersion: v1.16.0
 description: A Helm chart for cert-manager
 home: https://cert-manager.io
 icon: https://raw.githubusercontent.com/cert-manager/community/4d35a69437d21b76322157e6284be4cd64e6d2b7/logo/logo-small.png
@@ -23,4 +23,4 @@ maintainers:
 name: cert-manager
 sources:
 - https://github.com/cert-manager/cert-manager
-version: v1.15.3
+version: v1.16.0