Update keptn-cert-manager Helm chart (#160)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Signed-off-by: odubajDT <[email protected]> Co-authored-by: odubajDT <[email protected]> Co-authored-by: odubajDT <[email protected]>
keptn · Apr 24, 2024 · 8a05187 · 8a05187
1 parent 9b1cd5b
commit 8a05187
Show file tree

Hide file tree

Showing 5 changed files with 59 additions and 8 deletions.
diff --git a/charts/keptn-cert-manager/Chart.yaml b/charts/keptn-cert-manager/Chart.yaml
@@ -1,10 +1,11 @@
 apiVersion: v2
 name: keptn-cert-manager
 description: A Helm chart for Keptn Certificate Manager, a subproject of Keptn
-icon: "https://raw.githubusercontent.com/cncf/artwork/master/projects/keptn/icon/color/keptn-icon-color.svg"
+icon: >-
+  https://raw.githubusercontent.com/cncf/artwork/master/projects/keptn/icon/color/keptn-icon-color.svg
 home: https://keptn.sh
 sources:
-  - "https://github.com/keptn/lifecycle-toolkit"
+  - https://github.com/keptn/lifecycle-toolkit
 keywords:
   - cloud-native
   - keptn
@@ -31,14 +32,14 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.3
+version: 0.2.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v2.1.1" # x-release-please-version
+appVersion: "v2.2.0" # x-release-please-version
 dependencies:
   - name: common
-    repository: "https://charts.lifecycle.keptn.sh"
+    repository: https://charts.lifecycle.keptn.sh
     version: 0.2.1
diff --git a/charts/keptn-cert-manager/README.md b/charts/keptn-cert-manager/README.md
@@ -16,6 +16,7 @@ resource.
 | `global.commonLabels`           | Common labels to add to all Keptn resources. Evaluated as a template      | `{}`      |
 | `global.commonAnnotations`      | Common annotations to add to all Keptn resources. Evaluated as a template | `{}`      |
 | `global.caInjectionAnnotations` | CA injection annotations for cert-manager.io configuration                | `{}`      |
+| `global.openShift.enabled`      | Enable this value to install on Openshift                                 | `false`   |
 
 ### Keptn Certificate Operator common
 
@@ -38,7 +39,7 @@ resource.
 | `env.labelSelectorValue`   | specify the value for the label selector                                  | `true`                       |
 | `image.registry`           | specify the container registry for the certificate-operator image         | `""`                         |
 | `image.repository`         | specify repo for manager image                                            | `keptn/certificate-operator` |
-| `image.tag`                | select tag for manager container                                          | `v2.1.1`                     |
+| `image.tag`                | select tag for manager container                                          | `v2.2.0`                     |
 | `image.imagePullPolicy`    | specify pull policy for the manager image. This overrides global values   | `""`                         |
 | `livenessProbe`            | custom RBAC proxy liveness probe                                          |                              |
 | `readinessProbe`           | custom manager readiness probe                                            |                              |

diff --git a/charts/keptn-cert-manager/templates/certificate-operator-leader-election-rbac.yaml b/charts/keptn-cert-manager/templates/certificate-operator-leader-election-rbac.yaml
@@ -1,4 +1,48 @@
 apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: certificate-operator-leader-election-role
+  namespace: {{ .Release.Namespace | quote }}
+  {{- $annotations := include "common.annotations" (dict "context" .) }}
+  {{- with $annotations }}
+  annotations: {{- . -}}
+  {{- end }}
+  labels:
+{{- include "common.labels.standard" ( dict "context" . ) | nindent 4 }}
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: certificate-operator-leader-election-rolebinding
@@ -16,7 +60,7 @@ metadata:
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: 'leader-election-role'
+  name: 'certificate-operator-leader-election-role'
 subjects:
 - kind: ServiceAccount
   name: 'certificate-operator'

diff --git a/charts/keptn-cert-manager/templates/deployment.yaml b/charts/keptn-cert-manager/templates/deployment.yaml
@@ -56,10 +56,12 @@ spec:
             capabilities: {{- include "common.tplvalues.render" (dict "value" .Values.containerSecurityContext.capabilities "context" $) | nindent 14 }}
             readOnlyRootFilesystem: {{ .Values.containerSecurityContext.readOnlyRootFilesystem
             }}
+            {{- if not .Values.global.openShift.enabled }}
             runAsGroup: {{ .Values.containerSecurityContext.runAsGroup
             }}
             runAsUser: {{ .Values.containerSecurityContext.runAsUser
             }}
+            {{- end }}
             seccompProfile: {{- include "common.tplvalues.render" (dict "value" .Values.containerSecurityContext.seccompProfile
             "context" $) | nindent 14 }}
         {{- if .Values.livenessProbe }}

diff --git a/charts/keptn-cert-manager/values.yaml b/charts/keptn-cert-manager/values.yaml
@@ -20,6 +20,9 @@ global:
   commonAnnotations: {}
   ## @param global.caInjectionAnnotations CA injection annotations for cert-manager.io configuration
   caInjectionAnnotations: { }
+  openShift:
+    ## @param global.openShift.enabled Enable this value to install on Openshift
+    enabled: false
 
 
 # yamllint disable rule:line-length
@@ -69,7 +72,7 @@ image:
 ## @param     image.repository specify repo for manager image
   repository: keptn/certificate-operator
 ## @param     image.tag select tag for manager container
-  tag: v2.1.1 # x-release-please-version
+  tag: v2.2.0 # x-release-please-version
 ## @param   image.imagePullPolicy specify pull policy for the manager image. This overrides global values
   imagePullPolicy: ""
 ## @extra     livenessProbe custom RBAC proxy liveness probe