diff --git a/bitnami/ejbca/Chart.lock b/bitnami/ejbca/Chart.lock index 99a06b18fa..90892108c8 100644 --- a/bitnami/ejbca/Chart.lock +++ b/bitnami/ejbca/Chart.lock @@ -1,9 +1,9 @@ dependencies: - name: mariadb repository: https://charts.bitnami.com/bitnami - version: 11.4.2 + version: 11.4.4 - name: common repository: https://charts.bitnami.com/bitnami version: 2.2.2 -digest: sha256:9a961fcfa5c306560c01dc65de663d012b5ac37471192d2850a1818c71f6ea39 -generated: "2022-12-25T04:05:08.566083284Z" +digest: sha256:25abf0179a86ffc133606d01b3c7f7d3a1056fba8143a5f6e94f4c0a789f3e26 +generated: "2023-01-20T09:04:29.093659486Z" diff --git a/bitnami/ejbca/Chart.yaml b/bitnami/ejbca/Chart.yaml index ba9dc3c65f..d5d6f74c49 100644 --- a/bitnami/ejbca/Chart.yaml +++ b/bitnami/ejbca/Chart.yaml @@ -2,7 +2,7 @@ annotations: category: CertificateAuthority licenses: Apache-2.0 apiVersion: v2 -appVersion: 7.10.0-2 +appVersion: 7.11.0 dependencies: - condition: mariadb.enabled name: mariadb @@ -30,4 +30,4 @@ name: ejbca sources: - https://github.com/bitnami/containers/tree/main/bitnami/ejbca - https://www.ejbca.org/ -version: 6.3.10 +version: 6.3.11 diff --git a/bitnami/ejbca/README.md b/bitnami/ejbca/README.md index 0d5a2cc11a..cb98e81e6d 100644 --- a/bitnami/ejbca/README.md +++ b/bitnami/ejbca/README.md @@ -80,83 +80,83 @@ The command removes all the Kubernetes components associated with the chart and ### EJBCA parameters -| Name | Description | Value | -| --------------------------------------- | ----------------------------------------------------------------------------------------------------------- | ------------------------ | -| `image.registry` | EJBCA image registry | `docker.io` | -| `image.repository` | EJBCA image name | `bitnami/ejbca` | -| `image.tag` | EJBCA image tag | `7.10.0-2-debian-11-r19` | -| `image.digest` | EJBCA image image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` | -| `image.pullPolicy` | EJBCA image pull policy | `IfNotPresent` | -| `image.pullSecrets` | Specify docker-registry secret names as an array | `[]` | -| `image.debug` | Enable image debug mode | `false` | -| `replicaCount` | Number of EJBCA replicas to deploy | `1` | -| `extraVolumeMounts` | Additional volume mounts (used along with `extraVolumes`) | `[]` | -| `extraVolumes` | Array of extra volumes to be added deployment. Requires setting `extraVolumeMounts` | `[]` | -| `podAnnotations` | Additional pod annotations | `{}` | -| `podLabels` | Additional pod labels | `{}` | -| `podSecurityContext.enabled` | Enable security context for EJBCA container | `true` | -| `podSecurityContext.fsGroup` | Group ID for the volumes of the pod | `1001` | -| `podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` | -| `podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` | -| `nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` | -| `nodeAffinityPreset.key` | Node label key to match Ignored if `affinity` is set. | `""` | -| `nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set. | `[]` | -| `affinity` | Affinity for pod assignment | `{}` | -| `nodeSelector` | Node labels for pod assignment | `{}` | -| `tolerations` | Tolerations for pod assignment | `[]` | -| `updateStrategy.type` | EJBCA deployment strategy type. | `RollingUpdate` | -| `persistence.enabled` | Whether to enable persistence based on Persistent Volume Claims | `true` | -| `persistence.accessModes` | Persistent Volume access modes | `[]` | -| `persistence.size` | Size of the PVC to request | `2Gi` | -| `persistence.storageClass` | PVC Storage Class | `""` | -| `persistence.existingClaim` | Name of an existing PVC to reuse | `""` | -| `persistence.annotations` | Persistent Volume Claim annotations | `{}` | -| `sidecars` | Attach additional sidecar containers to the pod | `[]` | -| `initContainers` | Additional init containers to add to the pods | `[]` | -| `hostAliases` | Add deployment host aliases | `[]` | -| `priorityClassName` | EJBCA pods' priorityClassName | `""` | -| `schedulerName` | Name of the k8s scheduler (other than default) | `""` | -| `topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` | -| `ejbcaAdminUsername` | EJBCA administrator username | `bitnami` | -| `ejbcaAdminPassword` | Password for the administrator account | `""` | -| `existingSecret` | Alternatively, you can provide the name of an existing secret containing | `""` | -| `ejbcaJavaOpts` | Options used to launch the WildFly server | `""` | -| `ejbcaCA.name` | Name of the CA EJBCA will instantiate by default | `ManagementCA` | -| `ejbcaCA.baseDN` | Base DomainName of the CA EJBCA will instantiate by default | `""` | -| `ejbcaKeystoreExistingSecret` | Name of an existing Secret containing a Keystore object | `""` | -| `extraEnvVars` | Array with extra environment variables to add to EJBCA nodes | `[]` | -| `extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for EJBCA nodes | `""` | -| `extraEnvVarsSecret` | Name of existing Secret containing extra env vars for EJBCA nodes | `""` | -| `command` | Custom command to override image cmd | `[]` | -| `args` | Custom args for the custom command | `[]` | -| `lifecycleHooks` | for the EJBCA container(s) to automate configuration before or after startup | `{}` | -| `resources.limits` | The resources limits for the container | `{}` | -| `resources.requests` | The requested resources for the container | `{}` | -| `containerSecurityContext.enabled` | Enabled EJBCA containers' Security Context | `true` | -| `containerSecurityContext.runAsUser` | Set EJBCA containers' Security Context runAsUser | `1001` | -| `containerSecurityContext.runAsNonRoot` | Set EJBCA container's Security Context runAsNonRoot | `true` | -| `startupProbe.enabled` | Enable/disable startupProbe | `false` | -| `startupProbe.initialDelaySeconds` | Delay before startup probe is initiated | `500` | -| `startupProbe.periodSeconds` | How often to perform the probe | `10` | -| `startupProbe.timeoutSeconds` | When the probe times out | `5` | -| `startupProbe.failureThreshold` | Minimum consecutive failures for the probe | `6` | -| `startupProbe.successThreshold` | Minimum consecutive successes for the probe | `1` | -| `livenessProbe.enabled` | Enable/disable livenessProbe | `true` | -| `livenessProbe.initialDelaySeconds` | Delay before liveness probe is initiated | `500` | -| `livenessProbe.periodSeconds` | How often to perform the probe | `10` | -| `livenessProbe.timeoutSeconds` | When the probe times out | `5` | -| `livenessProbe.failureThreshold` | Minimum consecutive failures for the probe | `6` | -| `livenessProbe.successThreshold` | Minimum consecutive successes for the probe | `1` | -| `readinessProbe.enabled` | Enable/disable readinessProbe | `true` | -| `readinessProbe.initialDelaySeconds` | Delay before readiness probe is initiated | `500` | -| `readinessProbe.periodSeconds` | How often to perform the probe | `10` | -| `readinessProbe.timeoutSeconds` | When the probe times out | `5` | -| `readinessProbe.failureThreshold` | Minimum consecutive failures for the probe | `6` | -| `readinessProbe.successThreshold` | Minimum consecutive successes for the probe | `1` | -| `customStartupProbe` | Custom startup probe to execute (when the main one is disabled) | `{}` | -| `customLivenessProbe` | Custom liveness probe to execute (when the main one is disabled) | `{}` | -| `customReadinessProbe` | Custom readiness probe to execute (when the main one is disabled) | `{}` | -| `containerPorts` | EJBCA Container ports to open | `{}` | +| Name | Description | Value | +| --------------------------------------- | ----------------------------------------------------------------------------------------------------------- | --------------------- | +| `image.registry` | EJBCA image registry | `docker.io` | +| `image.repository` | EJBCA image name | `bitnami/ejbca` | +| `image.tag` | EJBCA image tag | `7.11.0-debian-11-r0` | +| `image.digest` | EJBCA image image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` | +| `image.pullPolicy` | EJBCA image pull policy | `IfNotPresent` | +| `image.pullSecrets` | Specify docker-registry secret names as an array | `[]` | +| `image.debug` | Enable image debug mode | `false` | +| `replicaCount` | Number of EJBCA replicas to deploy | `1` | +| `extraVolumeMounts` | Additional volume mounts (used along with `extraVolumes`) | `[]` | +| `extraVolumes` | Array of extra volumes to be added deployment. Requires setting `extraVolumeMounts` | `[]` | +| `podAnnotations` | Additional pod annotations | `{}` | +| `podLabels` | Additional pod labels | `{}` | +| `podSecurityContext.enabled` | Enable security context for EJBCA container | `true` | +| `podSecurityContext.fsGroup` | Group ID for the volumes of the pod | `1001` | +| `podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` | +| `podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` | +| `nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` | +| `nodeAffinityPreset.key` | Node label key to match Ignored if `affinity` is set. | `""` | +| `nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set. | `[]` | +| `affinity` | Affinity for pod assignment | `{}` | +| `nodeSelector` | Node labels for pod assignment | `{}` | +| `tolerations` | Tolerations for pod assignment | `[]` | +| `updateStrategy.type` | EJBCA deployment strategy type. | `RollingUpdate` | +| `persistence.enabled` | Whether to enable persistence based on Persistent Volume Claims | `true` | +| `persistence.accessModes` | Persistent Volume access modes | `[]` | +| `persistence.size` | Size of the PVC to request | `2Gi` | +| `persistence.storageClass` | PVC Storage Class | `""` | +| `persistence.existingClaim` | Name of an existing PVC to reuse | `""` | +| `persistence.annotations` | Persistent Volume Claim annotations | `{}` | +| `sidecars` | Attach additional sidecar containers to the pod | `[]` | +| `initContainers` | Additional init containers to add to the pods | `[]` | +| `hostAliases` | Add deployment host aliases | `[]` | +| `priorityClassName` | EJBCA pods' priorityClassName | `""` | +| `schedulerName` | Name of the k8s scheduler (other than default) | `""` | +| `topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` | +| `ejbcaAdminUsername` | EJBCA administrator username | `bitnami` | +| `ejbcaAdminPassword` | Password for the administrator account | `""` | +| `existingSecret` | Alternatively, you can provide the name of an existing secret containing | `""` | +| `ejbcaJavaOpts` | Options used to launch the WildFly server | `""` | +| `ejbcaCA.name` | Name of the CA EJBCA will instantiate by default | `ManagementCA` | +| `ejbcaCA.baseDN` | Base DomainName of the CA EJBCA will instantiate by default | `""` | +| `ejbcaKeystoreExistingSecret` | Name of an existing Secret containing a Keystore object | `""` | +| `extraEnvVars` | Array with extra environment variables to add to EJBCA nodes | `[]` | +| `extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for EJBCA nodes | `""` | +| `extraEnvVarsSecret` | Name of existing Secret containing extra env vars for EJBCA nodes | `""` | +| `command` | Custom command to override image cmd | `[]` | +| `args` | Custom args for the custom command | `[]` | +| `lifecycleHooks` | for the EJBCA container(s) to automate configuration before or after startup | `{}` | +| `resources.limits` | The resources limits for the container | `{}` | +| `resources.requests` | The requested resources for the container | `{}` | +| `containerSecurityContext.enabled` | Enabled EJBCA containers' Security Context | `true` | +| `containerSecurityContext.runAsUser` | Set EJBCA containers' Security Context runAsUser | `1001` | +| `containerSecurityContext.runAsNonRoot` | Set EJBCA container's Security Context runAsNonRoot | `true` | +| `startupProbe.enabled` | Enable/disable startupProbe | `false` | +| `startupProbe.initialDelaySeconds` | Delay before startup probe is initiated | `500` | +| `startupProbe.periodSeconds` | How often to perform the probe | `10` | +| `startupProbe.timeoutSeconds` | When the probe times out | `5` | +| `startupProbe.failureThreshold` | Minimum consecutive failures for the probe | `6` | +| `startupProbe.successThreshold` | Minimum consecutive successes for the probe | `1` | +| `livenessProbe.enabled` | Enable/disable livenessProbe | `true` | +| `livenessProbe.initialDelaySeconds` | Delay before liveness probe is initiated | `500` | +| `livenessProbe.periodSeconds` | How often to perform the probe | `10` | +| `livenessProbe.timeoutSeconds` | When the probe times out | `5` | +| `livenessProbe.failureThreshold` | Minimum consecutive failures for the probe | `6` | +| `livenessProbe.successThreshold` | Minimum consecutive successes for the probe | `1` | +| `readinessProbe.enabled` | Enable/disable readinessProbe | `true` | +| `readinessProbe.initialDelaySeconds` | Delay before readiness probe is initiated | `500` | +| `readinessProbe.periodSeconds` | How often to perform the probe | `10` | +| `readinessProbe.timeoutSeconds` | When the probe times out | `5` | +| `readinessProbe.failureThreshold` | Minimum consecutive failures for the probe | `6` | +| `readinessProbe.successThreshold` | Minimum consecutive successes for the probe | `1` | +| `customStartupProbe` | Custom startup probe to execute (when the main one is disabled) | `{}` | +| `customLivenessProbe` | Custom liveness probe to execute (when the main one is disabled) | `{}` | +| `customReadinessProbe` | Custom readiness probe to execute (when the main one is disabled) | `{}` | +| `containerPorts` | EJBCA Container ports to open | `{}` | ### Service parameters diff --git a/bitnami/ejbca/values.yaml b/bitnami/ejbca/values.yaml index cb40301a9e..c8747e92e3 100644 --- a/bitnami/ejbca/values.yaml +++ b/bitnami/ejbca/values.yaml @@ -70,7 +70,7 @@ diagnosticMode: image: registry: docker.io repository: bitnami/ejbca - tag: 7.10.0-2-debian-11-r19 + tag: 7.11.0-debian-11-r0 digest: "" ## Specify a imagePullPolicy ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'