Merge release/0.20.0 to main

src/airgap/airgap_input.txt

@@ -35,7 +35,6 @@
     audit-event-streaming-signed
     queue-service-signed
     service-discovery-collector
-    service-discovery-k8s-lifecycle-agent
     ubuntu
     ng-dashboard-aggregator-signed
     ingress-nginx/controller
@@ -144,6 +143,8 @@
 [ssca]:
     ssca-plugin
     slsa-plugin
+    ssca-cdxgen-plugin
+    ssca-compliance-plugin
     ssca-manager-signed
     ssca-ui-signed
 

src/airgap/validate_airgap.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-MODULE_NAMES=("platform" "ccm" "cdng" "ci" "ce" "sto" "ff" "ssca" "db-devops")
+MODULE_NAMES=("platform" "ccm" "cdng" "ci" "ce" "sto" "ff" "ssca" "dbdevops")
 
 abort() {
     echo "Error: $1"

src/harness/Chart.lock

@@ -1,30 +1,36 @@
 dependencies:
+- name: harness-common
+  repository: https://harness.github.io/helm-common
+  version: 1.3.54
 - name: ccm
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: cd
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: chaos
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: ci
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: ff
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: platform
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: srm
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: sto
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
+  version: 0.20.0
 - name: ssca
   repository: https://harness.github.io/helm-charts
-  version: 0.15.0
-digest: sha256:9496745b2bdfe40d3da8ca6c1bba15774e3611fd7a963cb7a6dc88107e479b2f
-generated: "2024-03-29T06:55:54.749078238Z"
+  version: 0.20.0
+- name: db-devops
+  repository: https://harness.github.io/helm-charts
+  version: 0.20.0
+digest: sha256:5be4596b47b14223c8895546a006b6983f77a2c426ef5606234e3610f533f9b1
+generated: "2024-09-03T09:47:46.363071988Z"

src/harness/images.txt

@@ -1,91 +1,97 @@
 docker.io/bitnami/clickhouse:23.9.2-debian-11-r0
-docker.io/bitnami/minio:2023.10.7-debian-11-r2
+docker.io/bitnami/minio:2024.3.30-debian-12-r2
+docker.io/bitnami/mongodb:5.0.24
+docker.io/bitnami/postgresql:14.11.0-debian-11-r17
 docker.io/bitnami/postgresql:14.9.0-debian-11-r60
-docker.io/chaosnative/harness-chaos-log-watcher:1.22.0
-docker.io/chaosnative/smp-service-discovery-server:0.10.0
-docker.io/chaosnative/source-probe:ci
-docker.io/curlimages/curl:8.1.2
+docker.io/chaosnative/harness-chaos-log-watcher:1.41.0
+docker.io/curlimages/curl:8.7.1
 docker.io/haproxy:lts-alpine3.18
-docker.io/harness/accesscontrol-service-signed:1.35.5
-docker.io/harness/argocd:v2.9.4
-docker.io/harness/batch-processing-signed:1.8.3
+docker.io/harness/accesscontrol-service-signed:1.56.1
+docker.io/harness/argocd:v2.10.14
+docker.io/harness/audit-event-streaming-signed:1.9.0
+docker.io/harness/batch-processing-signed:1.24.12
 docker.io/harness/ccm-gcp-smp-signed:10057
-docker.io/harness/cdcdata-signed:1.5.3
+docker.io/harness/cdcdata-signed:1.25.1
 docker.io/harness/ce-anomaly-detection-signed:1.1.0
-docker.io/harness/ce-cloud-info-signed:1.3.1
-docker.io/harness/ce-nextgen-signed:1.8.2
+docker.io/harness/ce-cloud-info-signed:1.3.2
+docker.io/harness/ce-nextgen-signed:1.27.2
 docker.io/harness/chaos-argoexec:v3.4.16
-docker.io/harness/chaos-ddcr:1.32.0
-docker.io/harness/chaos-exporter:1.32.0
-docker.io/harness/chaos-go-runner-base:1.32.0
-docker.io/harness/chaos-go-runner-io:1.32.0
-docker.io/harness/chaos-go-runner-time:1.32.0
-docker.io/harness/chaos-go-runner:1.32.0
-docker.io/harness/chaos-k8s:1.32.0
-docker.io/harness/chaos-log-watcher:1.32.0
-docker.io/harness/chaos-operator:1.32.0
-docker.io/harness/chaos-runner:1.32.0
-docker.io/harness/chaos-subscriber:1.32.0
+docker.io/harness/chaos-ddcr:1.41.0
+docker.io/harness/chaos-exporter:1.41.0
+docker.io/harness/chaos-go-runner-base:1.41.0
+docker.io/harness/chaos-go-runner-io:1.41.0
+docker.io/harness/chaos-go-runner-time:1.41.0
+docker.io/harness/chaos-go-runner:1.41.0
+docker.io/harness/chaos-k8s:1.41.0
+docker.io/harness/chaos-log-watcher:1.41.0
+docker.io/harness/chaos-machine-ifc-signed:1.41.0
+docker.io/harness/chaos-machine-ifs-signed:1.41.0
+docker.io/harness/chaos-operator:1.41.0
+docker.io/harness/chaos-runner:1.41.0
+docker.io/harness/chaos-subscriber:1.41.0
 docker.io/harness/chaos-workflow-controller:v3.4.16
-docker.io/harness/ci-manager-signed:1.13.2
-docker.io/harness/ci-scm-signed:1.3.2
-docker.io/harness/cv-nextgen-signed:1.15.0
-docker.io/harness/dashboard-service-signed:1.60.1
-docker.io/harness/debezium-service-signed:1.0.1
+docker.io/harness/ci-manager-signed:1.41.3
+docker.io/harness/ci-scm-signed:1.7.1
+docker.io/harness/cv-nextgen-signed:1.23.0
+docker.io/harness/dashboard-service-signed:1.69.0
+docker.io/harness/db-devops-service-signed:1.4.2
+docker.io/harness/debezium-service-signed:1.16.1
 docker.io/harness/delegate-proxy-signed:81011_3
 docker.io/harness/delegate-proxy-signed:81011_minimal
-docker.io/harness/delegate:24.02.82402
-docker.io/harness/delegate:24.02.82402.minimal
+docker.io/harness/delegate:24.07.83611
+docker.io/harness/delegate:24.07.83611.minimal
 docker.io/harness/delegate:latest
-docker.io/harness/event-service-signed:79404-000
+docker.io/harness/event-service-signed:1.5.1
 docker.io/harness/ff-postgres-migration-signed:1.1094.0
 docker.io/harness/ff-pushpin-signed:1.0.11
 docker.io/harness/ff-pushpin-worker-signed:1.1079.1
 docker.io/harness/ff-server-signed:1.1094.0
 docker.io/harness/ff-timescale-migration-signed:1.1094.0
-docker.io/harness/gateway-signed:1.23.2
+docker.io/harness/gateway-signed:1.31.2
 docker.io/harness/gitops-agent-installer-helper:v0.0.1
-docker.io/harness/gitops-agent:v0.67.4
-docker.io/harness/gitops-service-signed:1.4.3
+docker.io/harness/gitops-agent:v0.78.0
+docker.io/harness/gitops-service-signed:1.15.2
 docker.io/harness/helm-init-container:latest
-docker.io/harness/k8s-chaos-infrastructure-upgrader:1.32.0
-docker.io/harness/le-nextgen-signed:1.1.0
-docker.io/harness/learning-engine-onprem-signed:1.1.0
-docker.io/harness/litmus-checker:1.32.0
-docker.io/harness/log-service-signed:1.2.0
-docker.io/harness/looker-signed:23.20.39
-docker.io/harness/manager-signed:1.18.9
-docker.io/harness/migrator-signed:1.31.0
-docker.io/harness/mongo:4.4.22
-docker.io/harness/nextgenui-signed:1.10.8
-docker.io/harness/ng-auth-ui-signed:1.19.0
-docker.io/harness/ng-ce-ui:1.6.1
-docker.io/harness/ng-dashboard-aggregator-signed:1.7.1
-docker.io/harness/ng-manager-signed:1.27.12
-docker.io/harness/pipeline-service-signed:1.64.2
-docker.io/harness/platform-service-signed:1.14.1
-docker.io/harness/policy-mgmt:v1.71.1
-docker.io/harness/smp-chaos-bg-processor:1.32.4
-docker.io/harness/smp-chaos-db-upgrade-agent-signed:1.32.4
-docker.io/harness/smp-chaos-k8s-ifs-signed:1.32.2
-docker.io/harness/smp-chaos-linux-infra-controller-signed:1.32.0
-docker.io/harness/smp-chaos-linux-infra-server-signed:1.32.0
-docker.io/harness/smp-chaos-manager-signed:1.32.4
-docker.io/harness/smp-chaos-web-signed:1.32.2
-docker.io/harness/srm-ui-signed:1.4.1
-docker.io/harness/ssca-manager-signed:1.9.1
-docker.io/harness/ssca-ui-signed:0.6.1
-docker.io/harness/stocore-signed:1.86.2
-docker.io/harness/stomanager-signed:1.13.0
+docker.io/harness/k8s-chaos-infrastructure-upgrader:1.41.0
+docker.io/harness/le-nextgen-signed:1.3.0
+docker.io/harness/learning-engine-onprem-signed:1.3.0
+docker.io/harness/litmus-checker:1.41.0
+docker.io/harness/log-service-signed:1.9.2
+docker.io/harness/looker-signed:1.1.0
+docker.io/harness/manager-signed:1.42.3
+docker.io/harness/migrator-signed:1.107.0
+docker.io/harness/nextgenui-signed:1.37.5
+docker.io/harness/ng-auth-ui-signed:1.27.0
+docker.io/harness/ng-ce-ui:1.24.1
+docker.io/harness/ng-dashboard-aggregator-signed:1.28.0
+docker.io/harness/ng-manager-signed:1.51.9
+docker.io/harness/pipeline-service-signed:1.89.2
+docker.io/harness/platform-service-signed:1.34.2
+docker.io/harness/policy-mgmt:1.8.2
+docker.io/harness/queue-service-signed:1.2.0
+docker.io/harness/service-discovery-collector:0.21.1
+docker.io/harness/smp-chaos-bg-processor-signed:1.41.7
+docker.io/harness/smp-chaos-db-upgrade-agent-signed:1.41.7
+docker.io/harness/smp-chaos-k8s-ifs-signed:1.41.1
+docker.io/harness/smp-chaos-linux-infra-controller-signed:1.41.2
+docker.io/harness/smp-chaos-linux-infra-server-signed:1.41.1
+docker.io/harness/smp-chaos-manager-signed:1.41.7
+docker.io/harness/smp-chaos-web-signed:1.41.1
+docker.io/harness/smp-service-discovery-server-signed:0.21.1
+docker.io/harness/source-probe:main-latest
+docker.io/harness/srm-ui-signed:1.5.0
+docker.io/harness/ssca-manager-signed:1.15.1
+docker.io/harness/ssca-ui-signed:0.12.1
+docker.io/harness/stocore-signed:1.106.0
+docker.io/harness/stomanager-signed:1.37.0
 docker.io/harness/telescopes-signed:1.1.0
-docker.io/harness/template-service-signed:1.29.0
-docker.io/harness/ti-service-signed:1.12.1
-docker.io/harness/ti-service-signed:release-223
-docker.io/harness/ui-signed:1.10.0
+docker.io/harness/template-service-signed:1.51.0
+docker.io/harness/ti-service-signed:1.27.0
+docker.io/harness/ui-signed:1.22.0
 docker.io/harness/upgrader:latest
-docker.io/harness/verification-service-signed:1.17.0
-docker.io/redis:6.2.12-alpine
+docker.io/harness/verification-service-signed:1.42.0
 docker.io/redis:6.2.14-alpine
+docker.io/redis:7.2.4-alpine
 docker.io/timescale/timescaledb-ha:pg13-ts2.9-oss-latest
 docker.io/ubuntu:20.04
 harness/anchore-job-runner:latest
@@ -98,34 +104,37 @@ harness/blackduckhub-job-runner:latest
 harness/brakeman-job-runner:latest
 harness/checkmarx-job-runner:latest
 harness/ci-addon:1.16.26
-harness/ci-addon:1.16.37
+harness/ci-addon:1.16.56
 harness/ci-lite-engine:1.16.26
-harness/ci-lite-engine:1.16.37
-harness/drone-git:1.5.0-rootless
+harness/ci-lite-engine:1.16.56
+harness/drone-git:1.5.8-rootless
 harness/fossa-job-runner:latest
 harness/grype-job-runner:latest
 harness/nikto-job-runner:latest
 harness/nmap-job-runner:latest
 harness/osv-job-runner:latest
 harness/owasp-dependency-check-job-runner:latest
 harness/prowler-job-runner:latest
-harness/slsa-plugin:0.18.0
+harness/slsa-plugin:0.20.1
 harness/snyk-job-runner:latest
 harness/sonarqube-agent-job-runner:latest
-harness/ssca-plugin:0.12.2
-harness/ssca-plugin:0.18.1
-harness/sto-plugin:1.25.0
+harness/ssca-cdxgen-plugin:0.20.2
+harness/ssca-compliance-plugin:latest
+harness/ssca-plugin:0.20.1
 harness/sto-plugin:latest
 harness/twistlock-job-runner:latest
 harness/veracode-agent-job-runner:latest
 harness/whitesource-agent-job-runner:latest
+harness/wiz-job-runner:latest
 harness/zap-job-runner:latest
-plugins/artifactory:1.5.1
-plugins/cache:1.6.7
-plugins/gcs:1.5.2
-plugins/kaniko-acr:1.8.8
-plugins/kaniko-ecr:1.8.8
-plugins/kaniko-gcr:1.8.8
-plugins/kaniko:1.8.8
+plugins/artifactory:1.6.0
+plugins/cache:1.7.2
+plugins/gcs:1.6.0
+plugins/kaniko-acr:1.10.0
+plugins/kaniko-ecr:1.10.0
+plugins/kaniko-gcr:1.10.0
+plugins/kaniko:1.10.0
 plugins/s3:1.2.7
-plugins/s3:1.3.0
+plugins/s3:1.4.0
+registry.k8s.io/defaultbackend-amd64:1.5
+registry.k8s.io/ingress-nginx/controller:v1.3.0

src/harness/values.yaml

@@ -182,9 +182,9 @@ global:
     enabled: true
   # -- Enable to install Next Generation Custom Dashboards (Beta)
   ngcustomdashboard:
-    enabled: false  
+    enabled: false
   servicediscoverymanager:
-  # -- Enable to install Service Discovery Manager (Beta)
+    # -- Enable to install Service Discovery Manager (Beta)
     enabled: false
   # -- Default Enabled, As required by multiple services now (OPA)
   opa:
@@ -306,7 +306,7 @@ chaos:
     installLinuxCRDs: false
   chaos-k8s-ifs:
     nodeSelector: {}
-    tolerations: [] 
+    tolerations: []
   chaos-linux-ifc:
     nodeSelector: {}
     tolerations: []

src/modules/ccm/Chart.lock

@@ -1,24 +1,24 @@
 dependencies:
 - name: event-service
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 0.9.2
+  version: 1.5.1
 - name: anomaly-detection
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
   version: 1.1.0
 - name: cloud-info
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.3.1
+  version: 1.3.2
 - name: telescopes
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
   version: 1.1.0
 - name: batch-processing
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.8.3
+  version: 1.24.12
 - name: ng-ce-ui
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.6.1
+  version: 1.24.1
 - name: ce-nextgen
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.8.2
-digest: sha256:76cf28a72a4041a471a7a968f99f4e1afc4b3cd041d11f9e6ecc580e33e78afa
-generated: "2024-03-29T06:39:08.564744478Z"
+  version: 1.27.2
+digest: sha256:cb5a292a480307e1321b9692af83bfb33085743fb10908542f2a0ab25e0782c4
+generated: "2024-09-03T09:28:00.264774738Z"

src/modules/ccm/Chart.yaml

@@ -3,25 +3,25 @@ appVersion: 1.546.0
 dependencies:
 - name: event-service
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 0.9.2
+  version: 1.5.1
 - name: anomaly-detection
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
   version: 1.1.0
 - name: cloud-info
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.3.1
+  version: 1.3.2
 - name: telescopes
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
   version: 1.1.0
 - name: batch-processing
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.8.3
+  version: 1.24.12
 - name: ng-ce-ui
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.6.1
+  version: 1.24.1
 - name: ce-nextgen
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.8.2
+  version: 1.27.2
 description: A Helm chart for Harness Cloud Cost Management (CCM) module
 name: ccm
 type: application

src/modules/cd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: gitops
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.4.3
-digest: sha256:7f0acb716165b7e120cc97375ff09ea2c22c13b8cc75e6cc16f30f2775c1b875
-generated: "2024-03-29T06:39:10.207676863Z"
+  version: 1.15.2
+digest: sha256:086ecf113dbf7999ac18139d41b1eb9a25ea408c7480690e4de4ca5950c05605
+generated: "2024-09-03T09:28:01.916663433Z"

src/modules/cd/Chart.yaml

@@ -4,7 +4,7 @@ dependencies:
 - condition: global.gitops.enabled
   name: gitops
   repository: oci://us-west1-docker.pkg.dev/gcr-prod/harness-helm-artifacts
-  version: 1.4.3
+  version: 1.15.2
 description: Helm chart for Harness CD
 name: cd
 type: application