[bitnami/kubeapps] Release Kubeapps 2.9.0 and bump bitnami/postgresql to its latest version (#19806)

* Update in preparation for the next chart release.

Signed-off-by: Michael Nelson <minelson@vmware.com>

* Revert two changes that we overwrote with our dev changes.

Signed-off-by: Michael Nelson <minelson@vmware.com>

* Avoid empty envFrom

Co-authored-by: Juan Ariza Toledano <jariza@vmware.com>
Signed-off-by: Michael Nelson <absoludity@gmail.com>

* Update param comment for ociCatalog.

Co-authored-by: Juan Ariza Toledano <jariza@vmware.com>
Signed-off-by: Michael Nelson <absoludity@gmail.com>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Update oci-catalog tag.

Signed-off-by: Michael Nelson <absoludity@gmail.com>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Bump PostgreSQL subchart major version

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>

* Update tests for the new version

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>

* Update container images version

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

---------

Signed-off-by: Michael Nelson <minelson@vmware.com>
Signed-off-by: Michael Nelson <absoludity@gmail.com>
Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>
Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>
Co-authored-by: Michael Nelson <minelson@vmware.com>
Co-authored-by: Michael Nelson <absoludity@gmail.com>
Co-authored-by: Juan Ariza Toledano <jariza@vmware.com>
Co-authored-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
Carlos Rodríguez Hernández
2023-10-12 10:17:59 +02:00
committed by GitHub
co-authored by Juan Ariza Toledano Michael Nelson Michael Nelson Bitnami Containers
parent bc39d28075
commit 311b9dad30
11 changed files with 497 additions and 141 deletions
@@ -22,7 +22,7 @@ it('allows managing a helm chart release', () => {
cy.contains('Deploy').click();
cy.get('#releaseName').type(releaseName);
cy.contains('Deploy').click();
cy.contains('cds-button', 'Deploy').click();
cy.get('.application-status-pie-chart-title', { timeout: (Cypress.config('defaultCommandTimeout') * 3) }).should(
'have.text',
'Ready'
+5 -5
View File
@@ -1,12 +1,12 @@
dependencies:
- name: redis
repository: oci://registry-1.docker.io/bitnamicharts
version: 18.0.2
version: 18.1.2
- name: postgresql
repository: oci://registry-1.docker.io/bitnamicharts
version: 12.10.0
version: 13.1.0
- name: common
repository: oci://registry-1.docker.io/bitnamicharts
version: 2.10.0
digest: sha256:36780b160705f0d3de795cc7af1970f191582a6c3ae5f78df130cd7e6e0f7ae3
generated: "2023-09-05T11:33:52.073525+02:00"
version: 2.13.2
digest: sha256:f69ab959143602e192356fffbde1d77a6e441b921f3fcee8772cb986f6e53204
generated: "2023-10-06T07:44:24.923185+02:00"
+31 -29
View File
@@ -6,48 +6,50 @@ annotations:
licenses: Apache-2.0
images: |
- name: kubeapps-apis
image: docker.io/bitnami/kubeapps-apis:2.8.0-debian-11-r49
image: docker.io/bitnami/kubeapps-apis:2.9.0-debian-11-r7
- name: kubeapps-apprepository-controller
image: docker.io/bitnami/kubeapps-apprepository-controller:2.8.0-debian-11-r20
image: docker.io/bitnami/kubeapps-apprepository-controller:2.9.0-debian-11-r7
- name: kubeapps-asset-syncer
image: docker.io/bitnami/kubeapps-asset-syncer:2.8.0-debian-11-r20
image: docker.io/bitnami/kubeapps-asset-syncer:2.9.0-debian-11-r7
- name: kubeapps-oci-catalog
image: docker.io/bitnami/kubeapps-oci-catalog:2.9.0-debian-11-r4
- name: kubeapps-pinniped-proxy
image: docker.io/bitnami/kubeapps-pinniped-proxy:2.8.0-debian-11-r49
image: docker.io/bitnami/kubeapps-pinniped-proxy:2.9.0-debian-11-r8
- name: kubeapps-dashboard
image: docker.io/bitnami/kubeapps-dashboard:2.8.0-debian-11-r50
image: docker.io/bitnami/kubeapps-dashboard:2.9.0-debian-11-r11
- name: nginx
image: docker.io/bitnami/nginx:1.25.2-debian-11-r8
image: docker.io/bitnami/nginx:1.25.2-debian-11-r45
- name: oauth2-proxy
image: docker.io/bitnami/oauth2-proxy:7.4.0-debian-11-r281
image: docker.io/bitnami/oauth2-proxy:7.5.1-debian-11-r7
apiVersion: v2
appVersion: 2.8.0
appVersion: 2.9.0
dependencies:
- condition: packaging.flux.enabled
name: redis
repository: oci://registry-1.docker.io/bitnamicharts
version: 18.x.x
- condition: packaging.helm.enabled
name: postgresql
repository: oci://registry-1.docker.io/bitnamicharts
version: 12.x.x
- name: common
repository: oci://registry-1.docker.io/bitnamicharts
tags:
- bitnami-common
version: 2.x.x
- condition: packaging.flux.enabled
name: redis
repository: oci://registry-1.docker.io/bitnamicharts
version: 18.x.x
- condition: packaging.helm.enabled
name: postgresql
repository: oci://registry-1.docker.io/bitnamicharts
version: 13.x.x
- name: common
repository: oci://registry-1.docker.io/bitnamicharts
tags:
- bitnami-common
version: 2.x.x
description: Kubeapps is a web-based UI for launching and managing applications on Kubernetes. It allows users to deploy trusted applications and operators to control users access to the cluster.
home: https://bitnami.com
icon: https://bitnami.com/assets/stacks/kubeapps/img/kubeapps-stack-220x234.png
keywords:
- helm
- dashboard
- service catalog
- deployment
- helm
- dashboard
- service catalog
- deployment
kubeVersion: '>=1.21.0-0'
maintainers:
- name: VMware, Inc.
url: https://github.com/bitnami/charts
- name: VMware, Inc.
url: https://github.com/bitnami/charts
name: kubeapps
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/kubeapps
version: 13.1.1
- https://github.com/bitnami/charts/tree/main/bitnami/kubeapps
version: 14.0.0
+142 -87
View File
@@ -108,86 +108,86 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
### Frontend parameters
| Name | Description | Value |
| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------- | --------------------- |
| `frontend.image.registry` | NGINX image registry | `docker.io` |
| `frontend.image.repository` | NGINX image repository | `bitnami/nginx` |
| `frontend.image.tag` | NGINX image tag (immutable tags are recommended) | `1.25.2-debian-11-r8` |
| `frontend.image.digest` | NGINX image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `frontend.image.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
| `frontend.image.pullSecrets` | NGINX image pull secrets | `[]` |
| `frontend.image.debug` | Enable image debug mode | `false` |
| `frontend.proxypassAccessTokenAsBearer` | Use access_token as the Bearer when talking to the k8s api server | `false` |
| `frontend.proxypassExtraSetHeader` | Set an additional proxy header for all requests proxied via NGINX | `""` |
| `frontend.largeClientHeaderBuffers` | Set large_client_header_buffers in NGINX config | `4 32k` |
| `frontend.replicaCount` | Number of frontend replicas to deploy | `2` |
| `frontend.updateStrategy.type` | Frontend deployment strategy type. | `RollingUpdate` |
| `frontend.resources.limits.cpu` | The CPU limits for the NGINX container | `250m` |
| `frontend.resources.limits.memory` | The memory limits for the NGINX container | `128Mi` |
| `frontend.resources.requests.cpu` | The requested CPU for the NGINX container | `25m` |
| `frontend.resources.requests.memory` | The requested memory for the NGINX container | `32Mi` |
| `frontend.extraEnvVars` | Array with extra environment variables to add to the NGINX container | `[]` |
| `frontend.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the NGINX container | `""` |
| `frontend.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the NGINX container | `""` |
| `frontend.containerPorts.http` | NGINX HTTP container port | `8080` |
| `frontend.podSecurityContext.enabled` | Enabled frontend pods' Security Context | `true` |
| `frontend.podSecurityContext.fsGroup` | Set frontend pod's Security Context fsGroup | `1001` |
| `frontend.containerSecurityContext.enabled` | Enabled NGINX containers' Security Context | `true` |
| `frontend.containerSecurityContext.runAsUser` | Set NGINX container's Security Context runAsUser | `1001` |
| `frontend.containerSecurityContext.runAsNonRoot` | Set NGINX container's Security Context runAsNonRoot | `true` |
| `frontend.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `frontend.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
| `frontend.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `frontend.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `frontend.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `frontend.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `frontend.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `frontend.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
| `frontend.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `frontend.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `frontend.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `frontend.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `frontend.startupProbe.enabled` | Enable startupProbe | `false` |
| `frontend.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `0` |
| `frontend.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `frontend.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `frontend.startupProbe.failureThreshold` | Failure threshold for startupProbe | `6` |
| `frontend.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `frontend.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
| `frontend.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
| `frontend.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
| `frontend.lifecycleHooks` | Custom lifecycle hooks for frontend containers | `{}` |
| `frontend.command` | Override default container command (useful when using custom images) | `[]` |
| `frontend.args` | Override default container args (useful when using custom images) | `[]` |
| `frontend.podLabels` | Extra labels for frontend pods | `{}` |
| `frontend.podAnnotations` | Annotations for frontend pods | `{}` |
| `frontend.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `frontend.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `frontend.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `frontend.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
| `frontend.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
| `frontend.affinity` | Affinity for pod assignment | `{}` |
| `frontend.nodeSelector` | Node labels for pod assignment | `{}` |
| `frontend.tolerations` | Tolerations for pod assignment | `[]` |
| `frontend.priorityClassName` | Priority class name for frontend pods | `""` |
| `frontend.schedulerName` | Name of the k8s scheduler (other than default) | `""` |
| `frontend.topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` |
| `frontend.hostAliases` | Custom host aliases for frontend pods | `[]` |
| `frontend.extraVolumes` | Optionally specify extra list of additional volumes for frontend pods | `[]` |
| `frontend.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for frontend container(s) | `[]` |
| `frontend.sidecars` | Add additional sidecar containers to the frontend pod | `[]` |
| `frontend.initContainers` | Add additional init containers to the frontend pods | `[]` |
| `frontend.service.type` | Frontend service type | `ClusterIP` |
| `frontend.service.ports.http` | Frontend service HTTP port | `80` |
| `frontend.service.nodePorts.http` | Node port for HTTP | `""` |
| `frontend.service.clusterIP` | Frontend service Cluster IP | `""` |
| `frontend.service.loadBalancerIP` | Frontend service Load Balancer IP | `""` |
| `frontend.service.loadBalancerSourceRanges` | Frontend service Load Balancer sources | `[]` |
| `frontend.service.externalTrafficPolicy` | Frontend service external traffic policy | `Cluster` |
| `frontend.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
| `frontend.service.annotations` | Additional custom annotations for frontend service | `{}` |
| `frontend.service.sessionAffinity` | Session Affinity for Kubernetes service, can be "None" or "ClientIP" | `None` |
| `frontend.service.sessionAffinityConfig` | Additional settings for the sessionAffinity | `{}` |
| Name | Description | Value |
| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------- | ---------------------- |
| `frontend.image.registry` | NGINX image registry | `docker.io` |
| `frontend.image.repository` | NGINX image repository | `bitnami/nginx` |
| `frontend.image.tag` | NGINX image tag (immutable tags are recommended) | `1.25.2-debian-11-r45` |
| `frontend.image.digest` | NGINX image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `frontend.image.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
| `frontend.image.pullSecrets` | NGINX image pull secrets | `[]` |
| `frontend.image.debug` | Enable image debug mode | `false` |
| `frontend.proxypassAccessTokenAsBearer` | Use access_token as the Bearer when talking to the k8s api server | `false` |
| `frontend.proxypassExtraSetHeader` | Set an additional proxy header for all requests proxied via NGINX | `""` |
| `frontend.largeClientHeaderBuffers` | Set large_client_header_buffers in NGINX config | `4 32k` |
| `frontend.replicaCount` | Number of frontend replicas to deploy | `2` |
| `frontend.updateStrategy.type` | Frontend deployment strategy type. | `RollingUpdate` |
| `frontend.resources.limits.cpu` | The CPU limits for the NGINX container | `250m` |
| `frontend.resources.limits.memory` | The memory limits for the NGINX container | `128Mi` |
| `frontend.resources.requests.cpu` | The requested CPU for the NGINX container | `25m` |
| `frontend.resources.requests.memory` | The requested memory for the NGINX container | `32Mi` |
| `frontend.extraEnvVars` | Array with extra environment variables to add to the NGINX container | `[]` |
| `frontend.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the NGINX container | `""` |
| `frontend.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the NGINX container | `""` |
| `frontend.containerPorts.http` | NGINX HTTP container port | `8080` |
| `frontend.podSecurityContext.enabled` | Enabled frontend pods' Security Context | `true` |
| `frontend.podSecurityContext.fsGroup` | Set frontend pod's Security Context fsGroup | `1001` |
| `frontend.containerSecurityContext.enabled` | Enabled NGINX containers' Security Context | `true` |
| `frontend.containerSecurityContext.runAsUser` | Set NGINX container's Security Context runAsUser | `1001` |
| `frontend.containerSecurityContext.runAsNonRoot` | Set NGINX container's Security Context runAsNonRoot | `true` |
| `frontend.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `frontend.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
| `frontend.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `frontend.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `frontend.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `frontend.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `frontend.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `frontend.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
| `frontend.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `frontend.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `frontend.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `frontend.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `frontend.startupProbe.enabled` | Enable startupProbe | `false` |
| `frontend.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `0` |
| `frontend.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `frontend.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `frontend.startupProbe.failureThreshold` | Failure threshold for startupProbe | `6` |
| `frontend.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `frontend.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
| `frontend.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
| `frontend.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
| `frontend.lifecycleHooks` | Custom lifecycle hooks for frontend containers | `{}` |
| `frontend.command` | Override default container command (useful when using custom images) | `[]` |
| `frontend.args` | Override default container args (useful when using custom images) | `[]` |
| `frontend.podLabels` | Extra labels for frontend pods | `{}` |
| `frontend.podAnnotations` | Annotations for frontend pods | `{}` |
| `frontend.podAffinityPreset` | Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `frontend.podAntiAffinityPreset` | Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
| `frontend.nodeAffinityPreset.type` | Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
| `frontend.nodeAffinityPreset.key` | Node label key to match. Ignored if `affinity` is set | `""` |
| `frontend.nodeAffinityPreset.values` | Node label values to match. Ignored if `affinity` is set | `[]` |
| `frontend.affinity` | Affinity for pod assignment | `{}` |
| `frontend.nodeSelector` | Node labels for pod assignment | `{}` |
| `frontend.tolerations` | Tolerations for pod assignment | `[]` |
| `frontend.priorityClassName` | Priority class name for frontend pods | `""` |
| `frontend.schedulerName` | Name of the k8s scheduler (other than default) | `""` |
| `frontend.topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` |
| `frontend.hostAliases` | Custom host aliases for frontend pods | `[]` |
| `frontend.extraVolumes` | Optionally specify extra list of additional volumes for frontend pods | `[]` |
| `frontend.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for frontend container(s) | `[]` |
| `frontend.sidecars` | Add additional sidecar containers to the frontend pod | `[]` |
| `frontend.initContainers` | Add additional init containers to the frontend pods | `[]` |
| `frontend.service.type` | Frontend service type | `ClusterIP` |
| `frontend.service.ports.http` | Frontend service HTTP port | `80` |
| `frontend.service.nodePorts.http` | Node port for HTTP | `""` |
| `frontend.service.clusterIP` | Frontend service Cluster IP | `""` |
| `frontend.service.loadBalancerIP` | Frontend service Load Balancer IP | `""` |
| `frontend.service.loadBalancerSourceRanges` | Frontend service Load Balancer sources | `[]` |
| `frontend.service.externalTrafficPolicy` | Frontend service external traffic policy | `Cluster` |
| `frontend.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
| `frontend.service.annotations` | Additional custom annotations for frontend service | `{}` |
| `frontend.service.sessionAffinity` | Session Affinity for Kubernetes service, can be "None" or "ClientIP" | `None` |
| `frontend.service.sessionAffinityConfig` | Additional settings for the sessionAffinity | `{}` |
### Dashboard parameters
@@ -196,7 +196,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `dashboard.enabled` | Specifies whether Kubeapps Dashboard should be deployed or not | `true` |
| `dashboard.image.registry` | Dashboard image registry | `docker.io` |
| `dashboard.image.repository` | Dashboard image repository | `bitnami/kubeapps-dashboard` |
| `dashboard.image.tag` | Dashboard image tag (immutable tags are recommended) | `2.8.0-debian-11-r50` |
| `dashboard.image.tag` | Dashboard image tag (immutable tags are recommended) | `2.9.0-debian-11-r11` |
| `dashboard.image.digest` | Dashboard image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `dashboard.image.pullPolicy` | Dashboard image pull policy | `IfNotPresent` |
| `dashboard.image.pullSecrets` | Dashboard image pull secrets | `[]` |
@@ -275,13 +275,13 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| ----------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------- |
| `apprepository.image.registry` | Kubeapps AppRepository Controller image registry | `docker.io` |
| `apprepository.image.repository` | Kubeapps AppRepository Controller image repository | `bitnami/kubeapps-apprepository-controller` |
| `apprepository.image.tag` | Kubeapps AppRepository Controller image tag (immutable tags are recommended) | `2.8.0-debian-11-r20` |
| `apprepository.image.tag` | Kubeapps AppRepository Controller image tag (immutable tags are recommended) | `2.9.0-debian-11-r7` |
| `apprepository.image.digest` | Kubeapps AppRepository Controller image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `apprepository.image.pullPolicy` | Kubeapps AppRepository Controller image pull policy | `IfNotPresent` |
| `apprepository.image.pullSecrets` | Kubeapps AppRepository Controller image pull secrets | `[]` |
| `apprepository.syncImage.registry` | Kubeapps Asset Syncer image registry | `docker.io` |
| `apprepository.syncImage.repository` | Kubeapps Asset Syncer image repository | `bitnami/kubeapps-asset-syncer` |
| `apprepository.syncImage.tag` | Kubeapps Asset Syncer image tag (immutable tags are recommended) | `2.8.0-debian-11-r20` |
| `apprepository.syncImage.tag` | Kubeapps Asset Syncer image tag (immutable tags are recommended) | `2.9.0-debian-11-r7` |
| `apprepository.syncImage.digest` | Kubeapps Asset Syncer image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `apprepository.syncImage.pullPolicy` | Kubeapps Asset Syncer image pull policy | `IfNotPresent` |
| `apprepository.syncImage.pullSecrets` | Kubeapps Asset Syncer image pull secrets | `[]` |
@@ -343,7 +343,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `authProxy.enabled` | Specifies whether Kubeapps should configure OAuth login/logout | `false` |
| `authProxy.image.registry` | OAuth2 Proxy image registry | `docker.io` |
| `authProxy.image.repository` | OAuth2 Proxy image repository | `bitnami/oauth2-proxy` |
| `authProxy.image.tag` | OAuth2 Proxy image tag (immutable tags are recommended) | `7.4.0-debian-11-r281` |
| `authProxy.image.tag` | OAuth2 Proxy image tag (immutable tags are recommended) | `7.5.1-debian-11-r7` |
| `authProxy.image.digest` | OAuth2 Proxy image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `authProxy.image.pullPolicy` | OAuth2 Proxy image pull policy | `IfNotPresent` |
| `authProxy.image.pullSecrets` | OAuth2 Proxy image pull secrets | `[]` |
@@ -383,7 +383,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `pinnipedProxy.enabled` | Specifies whether Kubeapps should configure Pinniped Proxy | `false` |
| `pinnipedProxy.image.registry` | Pinniped Proxy image registry | `docker.io` |
| `pinnipedProxy.image.repository` | Pinniped Proxy image repository | `bitnami/kubeapps-pinniped-proxy` |
| `pinnipedProxy.image.tag` | Pinniped Proxy image tag (immutable tags are recommended) | `2.8.0-debian-11-r49` |
| `pinnipedProxy.image.tag` | Pinniped Proxy image tag (immutable tags are recommended) | `2.9.0-debian-11-r8` |
| `pinnipedProxy.image.digest` | Pinniped Proxy image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `pinnipedProxy.image.pullPolicy` | Pinniped Proxy image pull policy | `IfNotPresent` |
| `pinnipedProxy.image.pullSecrets` | Pinniped Proxy image pull secrets | `[]` |
@@ -463,7 +463,7 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `kubeappsapis.pluginConfig.resources.packages.v1alpha1.trustedNamespaces.headerPattern` | Optional header pattern for trusted namespaces | `""` |
| `kubeappsapis.image.registry` | Kubeapps-APIs image registry | `docker.io` |
| `kubeappsapis.image.repository` | Kubeapps-APIs image repository | `bitnami/kubeapps-apis` |
| `kubeappsapis.image.tag` | Kubeapps-APIs image tag (immutable tags are recommended) | `2.8.0-debian-11-r49` |
| `kubeappsapis.image.tag` | Kubeapps-APIs image tag (immutable tags are recommended) | `2.9.0-debian-11-r7` |
| `kubeappsapis.image.digest` | Kubeapps-APIs image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `kubeappsapis.image.pullPolicy` | Kubeapps-APIs image pull policy | `IfNotPresent` |
| `kubeappsapis.image.pullSecrets` | Kubeapps-APIs image pull secrets | `[]` |
@@ -535,6 +535,57 @@ Once you have installed Kubeapps follow the [Getting Started Guide](https://gith
| `kubeappsapis.serviceAccount.automountServiceAccountToken` | Automount service account token for the server service account | `true` |
| `kubeappsapis.serviceAccount.annotations` | Annotations for service account. Evaluated as a template. Only used if `create` is `true`. | `{}` |
### OCI Catalog chart configuration
| Name | Description | Value |
| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- | ------------------------------ |
| `ociCatalog.enabled` | Enable the OCI catalog gRPC service for cataloging | `false` |
| `ociCatalog.image.registry` | OCI Catalog image registry | `docker.io` |
| `ociCatalog.image.repository` | OCI Catalog image repository | `bitnami/kubeapps-oci-catalog` |
| `ociCatalog.image.tag` | OCI Catalog image tag (immutable tags are recommended) | `2.9.0-debian-11-r4` |
| `ociCatalog.image.digest` | OCI Catalog image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
| `ociCatalog.image.pullPolicy` | OCI Catalog image pull policy | `IfNotPresent` |
| `ociCatalog.image.pullSecrets` | OCI Catalog image pull secrets | `[]` |
| `ociCatalog.image.debug` | Enable image debug mode | `false` |
| `ociCatalog.extraFlags` | Additional command line flags for OCI Catalog | `[]` |
| `ociCatalog.extraEnvVars` | Array with extra environment variables to add to the oci-catalog container | `[]` |
| `ociCatalog.extraEnvVarsCM` | Name of existing ConfigMap containing extra env vars for the OCI Catalog container | `""` |
| `ociCatalog.extraEnvVarsSecret` | Name of existing Secret containing extra env vars for the OCI Catalog container | `""` |
| `ociCatalog.containerPorts.grpc` | OCI Catalog gRPC container port | `50061` |
| `ociCatalog.resources.limits.cpu` | The CPU limits for the OCI Catalog container | `250m` |
| `ociCatalog.resources.limits.memory` | The memory limits for the OCI Catalog container | `256Mi` |
| `ociCatalog.resources.requests.cpu` | The requested CPU for the OCI Catalog container | `25m` |
| `ociCatalog.resources.requests.memory` | The requested memory for the OCI Catalog container | `32Mi` |
| `ociCatalog.containerSecurityContext.enabled` | Enabled OCI Catalog containers' Security Context | `true` |
| `ociCatalog.containerSecurityContext.runAsUser` | Set OCI Catalog container's Security Context runAsUser | `1001` |
| `ociCatalog.containerSecurityContext.runAsNonRoot` | Set OCI Catalog container's Security Context runAsNonRoot | `true` |
| `ociCatalog.livenessProbe.enabled` | Enable livenessProbe | `true` |
| `ociCatalog.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `60` |
| `ociCatalog.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `ociCatalog.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `ociCatalog.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
| `ociCatalog.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
| `ociCatalog.readinessProbe.enabled` | Enable readinessProbe | `true` |
| `ociCatalog.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `0` |
| `ociCatalog.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `ociCatalog.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `ociCatalog.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
| `ociCatalog.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
| `ociCatalog.startupProbe.enabled` | Enable startupProbe | `false` |
| `ociCatalog.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `0` |
| `ociCatalog.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
| `ociCatalog.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `5` |
| `ociCatalog.startupProbe.failureThreshold` | Failure threshold for startupProbe | `6` |
| `ociCatalog.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
| `ociCatalog.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
| `ociCatalog.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
| `ociCatalog.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
| `ociCatalog.lifecycleHooks` | Custom lifecycle hooks for OCI Catalog containers | `{}` |
| `ociCatalog.command` | Override default container command (useful when using custom images) | `[]` |
| `ociCatalog.args` | Override default container args (useful when using custom images) | `[]` |
| `ociCatalog.extraVolumes` | Optionally specify extra list of additional volumes for the OCI Catalog pod(s) | `[]` |
| `ociCatalog.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the OCI Catalog container(s) | `[]` |
### Redis&reg; chart configuration
| Name | Description | Value |
@@ -658,6 +709,10 @@ helm upgrade $RELEASE_NAME oci://registry-1.docker.io/bitnamicharts/kubeapps
If you find issues upgrading Kubeapps, check the [troubleshooting](#error-while-upgrading-the-chart) section.
### To 14.0.0
This major updates the PostgreSQL subchart to its newest major, 13.0.0. [Here](https://github.com/bitnami/charts/tree/master/bitnami/postgresql#to-1300) you can find more information about the changes introduced in that version.
### To 13.0.0
This major updates the Redis&reg; subchart to its newest major, 18.0.0. [Here](https://github.com/bitnami/charts/tree/main/bitnami/redis#to-1800) you can find more information about the changes introduced in that version.
@@ -1042,4 +1097,4 @@ Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
limitations under the License.
+14
View File
@@ -61,6 +61,13 @@ Return the proper kubeappsapis image name
{{- include "common.images.image" (dict "imageRoot" .Values.kubeappsapis.image "global" .Values.global) -}}
{{- end -}}
{{/*
Return the proper oci-catalog image name
*/}}
{{- define "kubeapps.ociCatalog.image" -}}
{{- include "common.images.image" (dict "imageRoot" .Values.ociCatalog.image "global" .Values.global) -}}
{{- end -}}
{{/*
Create a default fully qualified app name for PostgreSQL dependency.
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
@@ -110,6 +117,13 @@ Create name for the apprepository-controller based on the fullname
{{- printf "%s-internal-apprepository-controller" (include "common.names.fullname" .) | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{/*
Create name for the apprepository-controller based on the namespace
*/}}
{{- define "kubeapps.apprepository.fullname.namespace" -}}
{{- printf "%s-internal-apprepository-controller" (include "common.names.fullname.namespace" .) | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{/*
Create name for the dashboard based on the fullname
*/}}
@@ -23,12 +23,14 @@ spec:
- {{ . }}
{{- end }}
{{- end }}
{{- if or $.Values.apprepository.containerSecurityContext.enabled $.Values.apprepository.initialReposProxy.enabled .nodeSelector }}
{{- if or $.Values.apprepository.podSecurityContext.enabled $.Values.apprepository.containerSecurityContext.enabled $.Values.apprepository.initialReposProxy.enabled .nodeSelector .tolerations}}
syncJobPodTemplate:
spec:
{{- if $.Values.apprepository.initialReposProxy.enabled }}
{{- if or $.Values.apprepository.initialReposProxy.enabled $.Values.apprepository.containerSecurityContext.enabled }}
containers:
- env:
-
{{- if $.Values.apprepository.initialReposProxy.enabled }}
env:
- name: https_proxy
value: {{ $.Values.apprepository.initialReposProxy.httpsProxy }}
- name: http_proxy
@@ -37,8 +39,11 @@ spec:
value: {{ $.Values.apprepository.initialReposProxy.noProxy }}
{{- end }}
{{- if $.Values.apprepository.containerSecurityContext.enabled }}
securityContext:
runAsUser: {{ $.Values.apprepository.containerSecurityContext.runAsUser }}
securityContext: {{- omit $.Values.apprepository.containerSecurityContext "enabled" | toYaml | nindent 12 }}
{{- end }}
{{- end }}
{{- if $.Values.apprepository.podSecurityContext.enabled }}
securityContext: {{- omit $.Values.apprepository.podSecurityContext "enabled" | toYaml | nindent 8 }}
{{- end }}
{{- if .nodeSelector }}
nodeSelector: {{- toYaml .nodeSelector | nindent 8 }}
@@ -123,6 +123,10 @@ spec:
env:
- name: REPO_SYNC_IMAGE
value: {{ include "kubeapps.apprepository.syncImage" . }}
{{- if .Values.ociCatalog.enabled }}
- name: OCI_CATALOG_URL
value: {{ printf "%s:%d" (include "kubeapps.kubeappsapis.fullname" .) (int .Values.ociCatalog.containerPorts.grpc) | quote }}
{{- end }}
{{- if .Values.apprepository.extraEnvVars }}
{{- include "common.tplvalues.render" (dict "value" .Values.apprepository.extraEnvVars "context" $) | nindent 12 }}
{{- end }}
@@ -5,6 +5,7 @@ SPDX-License-Identifier: APACHE-2.0
{{- if .Values.packaging.helm.enabled }}
{{- if .Values.rbac.create -}}
# Role for managing events, jobs and cronjobs in the release namespace
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: Role
metadata:
@@ -40,6 +41,19 @@ rules:
- jobs
verbs:
- create
---
# ClusterRole for managing AppRepository objects in every namespace,
# so that we can update the finalizers on AppRepository objects
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: ClusterRole
metadata:
name: {{ template "kubeapps.apprepository.fullname.namespace" . }}
labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
app.kubernetes.io/component: apprepository
{{- if .Values.commonAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
rules:
- apiGroups:
- kubeapps.com
resources:
@@ -48,8 +62,10 @@ rules:
verbs:
- get
- list
- update
- watch
- create
- update
- patch
---
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: RoleBinding
@@ -70,6 +86,25 @@ subjects:
name: {{ template "kubeapps.apprepository.serviceAccountName" . }}
namespace: {{ .Release.Namespace }}
---
# ClusterRoleBinding for the apprepository controller SA
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: ClusterRoleBinding
metadata:
name: {{ template "kubeapps.apprepository.fullname.namespace" . }}
labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
app.kubernetes.io/component: apprepository
{{- if .Values.commonAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{ template "kubeapps.apprepository.fullname.namespace" . }}
subjects:
- kind: ServiceAccount
name: {{ template "kubeapps.apprepository.serviceAccountName" . }}
namespace: {{ .Release.Namespace }}
---
# Define role, but no binding, so users can be bound to this role
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: Role
@@ -161,6 +161,10 @@ spec:
secretKeyRef:
key: postgres-password
name: {{ include "kubeapps.postgresql.secretName" . }}
{{- if .Values.ociCatalog.enabled }}
- name: OCI_CATALOG_URL
value: {{ printf ":%d" (int .Values.ociCatalog.containerPorts.grpc) | quote }}
{{- end }}
{{- end }}
{{- if .Values.kubeappsapis.extraEnvVars }}
{{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.extraEnvVars "context" $) | nindent 12 }}
@@ -184,7 +188,6 @@ spec:
livenessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.kubeappsapis.livenessProbe "enabled") "context" $) | nindent 12 }}
exec:
command: ["grpc_health_probe", "-addr=:{{ .Values.kubeappsapis.containerPorts.http }}"]
initialDelaySeconds: 10
{{- end }}
{{- if .Values.kubeappsapis.customReadinessProbe }}
readinessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.customReadinessProbe "context" $) | nindent 12 }}
@@ -192,7 +195,6 @@ spec:
readinessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.kubeappsapis.readinessProbe "enabled") "context" $) | nindent 12 }}
exec:
command: ["grpc_health_probe", "-addr=:{{ .Values.kubeappsapis.containerPorts.http }}"]
initialDelaySeconds: 5
{{- end }}
{{- if .Values.kubeappsapis.customStartupProbe }}
startupProbe: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.customStartupProbe "context" $) | nindent 12 }}
@@ -223,6 +225,88 @@ spec:
{{- if .Values.kubeappsapis.extraVolumeMounts }}
{{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.extraVolumeMounts "context" $) | nindent 12 }}
{{- end }}
{{- if .Values.ociCatalog.enabled }}
- name: oci-catalog
image: {{ include "kubeapps.ociCatalog.image" . }}
imagePullPolicy: {{ .Values.ociCatalog.image.pullPolicy | quote }}
{{- if .Values.ociCatalog.containerSecurityContext.enabled }}
securityContext: {{- omit .Values.ociCatalog.containerSecurityContext "enabled" | toYaml | nindent 12 }}
{{- end }}
{{- if .Values.kubeappsapis.lifecycleHooks }}
lifecycle: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.lifecycleHooks "context" $) | nindent 12 }}
{{- end }}
{{- if .Values.diagnosticMode.enabled }}
command: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.command "context" $) | nindent 12 }}
{{- else if .Values.ociCatalog.command }}
command: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.command "context" $) | nindent 12 }}
{{- else }}
command:
- /oci-catalog
{{- end }}
{{- if .Values.diagnosticMode.enabled }}
args: {{- include "common.tplvalues.render" (dict "value" .Values.diagnosticMode.args "context" $) | nindent 12 }}
{{- else if .Values.ociCatalog.args }}
args: {{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.args "context" $) | nindent 12 }}
{{- else }}
args:
{{- range .Values.ociCatalog.extraFlags }}
- {{ . }}
{{- end }}
{{- end }}
env:
- name: OCI_CATALOG_PORT
value: {{ .Values.ociCatalog.containerPorts.grpc | quote }}
- name: RUST_LOG
# Use info,pinniped_proxy::pinniped=debug for module control.
value: info
{{- if .Values.ociCatalog.extraEnvVars }}
{{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraEnvVars "context" $) | nindent 12 }}
{{- end }}
{{- if or .Values.ociCatalog.extraEnvVarsCM .Values.ociCatalog.extraEnvVarsSecret }}
envFrom:
{{- if .Values.ociCatalog.extraEnvVarsCM }}
- configMapRef:
name: {{ include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraEnvVarsCM "context" $) }}
{{- end }}
{{- if .Values.ociCatalog.extraEnvVarsSecret }}
- secretRef:
name: {{ include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraEnvVarsSecret "context" $) }}
{{- end }}
{{- end }}
ports:
- name: grpc
containerPort: {{ .Values.ociCatalog.containerPorts.grpc }}
{{- if not .Values.diagnosticMode.enabled }}
{{- if .Values.ociCatalog.customLivenessProbe }}
livenessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.customLivenessProbe "context" $) | nindent 12 }}
{{- else if .Values.ociCatalog.livenessProbe.enabled }}
livenessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.kubeappsapis.livenessProbe "enabled") "context" $) | nindent 12 }}
exec:
command: ["grpc_health_probe", "-addr=:{{ .Values.ociCatalog.containerPorts.grpc }}"]
{{- end }}
{{- if .Values.ociCatalog.customReadinessProbe }}
readinessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.customReadinessProbe "context" $) | nindent 12 }}
{{- else if .Values.ociCatalog.readinessProbe.enabled }}
readinessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.ociCatalog.readinessProbe "enabled") "context" $) | nindent 12 }}
exec:
command: ["grpc_health_probe", "-addr=:{{ .Values.ociCatalog.containerPorts.grpc }}"]
{{- end }}
{{- if .Values.ociCatalog.customStartupProbe }}
startupProbe: {{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.customStartupProbe "context" $) | nindent 12 }}
{{- else if .Values.ociCatalog.startupProbe.enabled }}
startupProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.ociCatalog.startupProbe "enabled") "context" $) | nindent 12 }}
tcpSocket:
port: grpc-http
{{- end }}
{{- end }}
{{- if .Values.ociCatalog.resources }}
resources: {{- toYaml .Values.ociCatalog.resources | nindent 12 }}
{{- end }}
volumeMounts:
{{- if .Values.ociCatalog.extraVolumeMounts }}
{{- include "common.tplvalues.render" (dict "value" .Values.ociCatalog.extraVolumeMounts "context" $) | nindent 12 }}
{{- end }}
{{- end }}
{{- if .Values.kubeappsapis.sidecars }}
{{- include "common.tplvalues.render" (dict "value" .Values.kubeappsapis.sidecars "context" $) | trim | nindent 8 }}
{{- end }}
@@ -22,5 +22,11 @@ spec:
protocol: TCP
name: grpc-http
{{- $podLabels := include "common.tplvalues.merge" ( dict "values" ( list .Values.kubeappsapis.podLabels .Values.commonLabels ) "context" . ) }}
{{- if .Values.ociCatalog.enabled }}
- port: {{ .Values.ociCatalog.containerPorts.grpc }}
targetPort: grpc
protocol: TCP
name: grpc
{{- end }}
selector: {{- include "common.labels.matchLabels" ( dict "customLabels" $podLabels "context" $ ) | nindent 4 }}
app.kubernetes.io/component: kubeappsapis
+162 -11
View File
@@ -208,7 +208,7 @@ frontend:
image:
registry: docker.io
repository: bitnami/nginx
tag: 1.25.2-debian-11-r8
tag: 1.25.2-debian-11-r45
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -292,7 +292,7 @@ frontend:
podSecurityContext:
enabled: true
fsGroup: 1001
## Configure Container Security Context (only main container)
## Configure Container Security Context for NGINX
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param frontend.containerSecurityContext.enabled Enabled NGINX containers' Security Context
## @param frontend.containerSecurityContext.runAsUser Set NGINX container's Security Context runAsUser
@@ -527,7 +527,7 @@ dashboard:
image:
registry: docker.io
repository: bitnami/kubeapps-dashboard
tag: 2.8.0-debian-11-r50
tag: 2.9.0-debian-11-r11
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -643,7 +643,7 @@ dashboard:
podSecurityContext:
enabled: true
fsGroup: 1001
## Configure Container Security Context (only main container)
## Configure Container Security Context for Dashboard
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param dashboard.containerSecurityContext.enabled Enabled Dashboard containers' Security Context
## @param dashboard.containerSecurityContext.runAsUser Set Dashboard container's Security Context runAsUser
@@ -834,7 +834,7 @@ apprepository:
image:
registry: docker.io
repository: bitnami/kubeapps-apprepository-controller
tag: 2.8.0-debian-11-r20
tag: 2.9.0-debian-11-r7
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -861,7 +861,7 @@ apprepository:
syncImage:
registry: docker.io
repository: bitnami/kubeapps-asset-syncer
tag: 2.8.0-debian-11-r20
tag: 2.9.0-debian-11-r7
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -990,7 +990,7 @@ apprepository:
podSecurityContext:
enabled: true
fsGroup: 1001
## Configure Container Security Context (only main container)
## Configure Container Security Context for App Repository jobs
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param apprepository.containerSecurityContext.enabled Enabled AppRepository Controller containers' Security Context
## @param apprepository.containerSecurityContext.runAsUser Set AppRepository Controller container's Security Context runAsUser
@@ -1145,7 +1145,7 @@ authProxy:
image:
registry: docker.io
repository: bitnami/oauth2-proxy
tag: 7.4.0-debian-11-r281
tag: 7.5.1-debian-11-r7
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -1283,7 +1283,7 @@ pinnipedProxy:
image:
registry: docker.io
repository: bitnami/kubeapps-pinniped-proxy
tag: 2.8.0-debian-11-r49
tag: 2.9.0-debian-11-r8
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -1576,7 +1576,7 @@ kubeappsapis:
image:
registry: docker.io
repository: bitnami/kubeapps-apis
tag: 2.8.0-debian-11-r49
tag: 2.9.0-debian-11-r7
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -1657,7 +1657,7 @@ kubeappsapis:
podSecurityContext:
enabled: true
fsGroup: 1001
## Configure Container Security Context (only main container)
## Configure Container Security Context for Kubeapps APIs
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param kubeappsapis.containerSecurityContext.enabled Enabled KubeappsAPIs containers' Security Context
## @param kubeappsapis.containerSecurityContext.runAsUser Set KubeappsAPIs container's Security Context runAsUser
@@ -1843,6 +1843,157 @@ kubeappsapis:
automountServiceAccountToken: true
annotations: {}
## @section OCI Catalog chart configuration
ociCatalog:
## @param ociCatalog.enabled Enable the OCI catalog gRPC service for cataloging
## OCI repositories
enabled: false
## Bitnami Kubeapps OCI Catalog image
## ref: https://hub.docker.com/r/bitnami/kubeapps-ocicatalog/
## @param ociCatalog.image.registry OCI Catalog image registry
## @param ociCatalog.image.repository OCI Catalog image repository
## @param ociCatalog.image.tag OCI Catalog image tag (immutable tags are recommended)
## @param ociCatalog.image.digest OCI Catalog image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
## @param ociCatalog.image.pullPolicy OCI Catalog image pull policy
## @param ociCatalog.image.pullSecrets OCI Catalog image pull secrets
## @param ociCatalog.image.debug Enable image debug mode
##
image:
registry: docker.io
repository: bitnami/kubeapps-oci-catalog
tag: 2.9.0-debian-11-r4
digest: ""
## Specify a imagePullPolicy
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
## ref: https://kubernetes.io/docs/user-guide/images/#pre-pulling-images
##
pullPolicy: IfNotPresent
## Optionally specify an array of imagePullSecrets.
## Secrets must be manually created in the namespace.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
## e.g:
## pullSecrets:
## - myRegistryKeySecretName
##
pullSecrets: []
## Enable debug mode
##
debug: false
## @param ociCatalog.extraFlags Additional command line flags for OCI Catalog
##
extraFlags: []
## @param ociCatalog.extraEnvVars Array with extra environment variables to add to the oci-catalog container
## e.g:
## extraEnvVars:
## - name: FOO
## value: "bar"
##
extraEnvVars: []
## @param ociCatalog.extraEnvVarsCM Name of existing ConfigMap containing extra env vars for the OCI Catalog container
##
extraEnvVarsCM: ""
## @param ociCatalog.extraEnvVarsSecret Name of existing Secret containing extra env vars for the OCI Catalog container
##
extraEnvVarsSecret: ""
## @param ociCatalog.containerPorts.grpc OCI Catalog gRPC container port
##
containerPorts:
grpc: 50061
## OCI Catalog containers' resource requests and limits
## ref: https://kubernetes.io/docs/user-guide/compute-resources/
## @param ociCatalog.resources.limits.cpu The CPU limits for the OCI Catalog container
## @param ociCatalog.resources.limits.memory The memory limits for the OCI Catalog container
## @param ociCatalog.resources.requests.cpu The requested CPU for the OCI Catalog container
## @param ociCatalog.resources.requests.memory The requested memory for the OCI Catalog container
##
resources:
limits:
cpu: 250m
memory: 256Mi
requests:
cpu: 25m
memory: 32Mi
## Configure Container Security Context (only main container)
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param ociCatalog.containerSecurityContext.enabled Enabled OCI Catalog containers' Security Context
## @param ociCatalog.containerSecurityContext.runAsUser Set OCI Catalog container's Security Context runAsUser
## @param ociCatalog.containerSecurityContext.runAsNonRoot Set OCI Catalog container's Security Context runAsNonRoot
##
containerSecurityContext:
enabled: true
runAsUser: 1001
runAsNonRoot: true
## Configure extra options for OCI Catalog containers' liveness and readiness probes
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
## @param ociCatalog.livenessProbe.enabled Enable livenessProbe
## @param ociCatalog.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
## @param ociCatalog.livenessProbe.periodSeconds Period seconds for livenessProbe
## @param ociCatalog.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
## @param ociCatalog.livenessProbe.failureThreshold Failure threshold for livenessProbe
## @param ociCatalog.livenessProbe.successThreshold Success threshold for livenessProbe
## OCI Catalog containers' liveness and readiness probes
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
##
livenessProbe:
enabled: true
initialDelaySeconds: 60
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 6
successThreshold: 1
## @param ociCatalog.readinessProbe.enabled Enable readinessProbe
## @param ociCatalog.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
## @param ociCatalog.readinessProbe.periodSeconds Period seconds for readinessProbe
## @param ociCatalog.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
## @param ociCatalog.readinessProbe.failureThreshold Failure threshold for readinessProbe
## @param ociCatalog.readinessProbe.successThreshold Success threshold for readinessProbe
##
readinessProbe:
enabled: true
initialDelaySeconds: 0
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 6
successThreshold: 1
## @param ociCatalog.startupProbe.enabled Enable startupProbe
## @param ociCatalog.startupProbe.initialDelaySeconds Initial delay seconds for startupProbe
## @param ociCatalog.startupProbe.periodSeconds Period seconds for startupProbe
## @param ociCatalog.startupProbe.timeoutSeconds Timeout seconds for startupProbe
## @param ociCatalog.startupProbe.failureThreshold Failure threshold for startupProbe
## @param ociCatalog.startupProbe.successThreshold Success threshold for startupProbe
##
startupProbe:
enabled: false
initialDelaySeconds: 0
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 6
successThreshold: 1
## @param ociCatalog.customLivenessProbe Custom livenessProbe that overrides the default one
##
customLivenessProbe: {}
## @param ociCatalog.customReadinessProbe Custom readinessProbe that overrides the default one
##
customReadinessProbe: {}
## @param ociCatalog.customStartupProbe Custom startupProbe that overrides the default one
##
customStartupProbe: {}
## @param ociCatalog.lifecycleHooks Custom lifecycle hooks for OCI Catalog containers
##
lifecycleHooks: {}
## @param ociCatalog.command Override default container command (useful when using custom images)
##
command: []
## @param ociCatalog.args Override default container args (useful when using custom images)
##
args: []
## @param ociCatalog.extraVolumes Optionally specify extra list of additional volumes for the OCI Catalog pod(s)
##
extraVolumes: []
## @param ociCatalog.extraVolumeMounts Optionally specify extra list of additional volumeMounts for the OCI Catalog container(s)
##
extraVolumeMounts: []
## @section Redis&reg; chart configuration
## ref: https://github.com/bitnami/charts/blob/main/bitnami/redis/values.yaml
##