panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix bitnami chart dependencies (#506)

Browse Source 
* Fix bitnami chart dependencies

There have been problems with the old style bitami repo. Bitnami is
suggesting users switch to oci for their charts.

Signed-off-by: Kevin Fox <[email protected]>

* Fix repos

Signed-off-by: Kevin Fox <[email protected]>

* Fix repos

Signed-off-by: Kevin Fox <[email protected]>

* Fix updater script

Signed-off-by: Kevin Fox <[email protected]>

---------

Signed-off-by: Kevin Fox <[email protected]>
This commit is contained in:
kfox1111
2024-12-12 12:15:35 -08:00
committed by GitHub
parent 36c6e7bdea
commit e307b51ad8
7 changed files with 17 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/scripts/update-versions.sh
+1 -1
View File
@@ -32,7 +32,7 @@ jq -r ".[].name" "${CHARTJSON}" | while read -r NAME; do
echo Processing: "${NAME}" echo Processing: "${NAME}"
echo " chart: ${REGISTRY}" echo " chart: ${REGISTRY}"
echo " current version: ${VERSION}" echo " current version: ${VERSION}"
LATEST_VERSION=$(crane ls "$REGISTRY" | grep 'v[0-9]*\.[0-9]*\.[0-9]\.*$' | sort -V -r | head -n 1) LATEST_VERSION=$(crane ls "$REGISTRY" | grep 'v\?[0-9]*\.[0-9]*\.[0-9]\.*$' | sort -V -r | head -n 1)
echo " latest version: ${LATEST_VERSION}" echo " latest version: ${LATEST_VERSION}"
if [ "x${VERSION}" != "x${LATEST_VERSION}" ]; then if [ "x${VERSION}" != "x${LATEST_VERSION}" ]; then
echo " New version found!" echo " New version found!"
.github/tests/charts.json
-10
View File
@@ -13,15 +13,5 @@
"name": "ingress-nginx", "name": "ingress-nginx",
"repo": "https://kubernetes.github.io/ingress-nginx", "repo": "https://kubernetes.github.io/ingress-nginx",
"version": "4.11.3" "version": "4.11.3"
},
{
"name": "mysql",
"repo": "https://charts.bitnami.com/bitnami",
"version": "12.0.0"
},
{
"name": "postgresql",
"repo": "https://charts.bitnami.com/bitnami",
"version": "16.2.1"
} }
] ]
.github/tests/oci-charts.json
+11 -1
View File
@@ -1,7 +1,17 @@
[ [
{
"name": "mysql",
"registry": "docker.io/bitnamicharts/mysql",
"version": "12.2.0"
},
{
"name": "postgresql",
"registry": "docker.io/bitnamicharts/postgresql",
"version": "16.3.0"
},
{ {
"name": "envoy-gateway", "name": "envoy-gateway",
"registry": "docker.io/envoyproxy/gateway-helm", "registry": "docker.io/envoyproxy/gateway-helm",
"version": "" "version": "v1.2.3"
} }
] ]
.github/tests/pre-install.sh
+2 -2
View File
@@ -37,13 +37,13 @@ kubectl wait --namespace ingress-nginx --for=condition=ready --timeout 60s pod -
# external database # external database
# mysql # mysql
"${helm_install[@]}" mysql mysql --version "$VERSION_MYSQL" --repo "$HELM_REPO_MYSQL" \ "${helm_install[@]}" mysql "${HELM_REGISTRY_MYSQL}" --version "$VERSION_MYSQL" \
--namespace mysql \ --namespace mysql \
--values "${DEPS}/mysql.yaml" \ --values "${DEPS}/mysql.yaml" \
--wait --wait
# postgres # postgres
"${helm_install[@]}" postgresql postgresql --version "$VERSION_POSTGRESQL" --repo "$HELM_REPO_POSTGRESQL" \ "${helm_install[@]}" postgresql "${HELM_REGISTRY_POSTGRESQL}" --version "$VERSION_POSTGRESQL" \
--namespace postgresql \ --namespace postgresql \
--values "${DEPS}/postgresql.yaml" \ --values "${DEPS}/postgresql.yaml" \
--wait --wait
examples/external-mysql/run-tests.sh
+1 -1
View File
@@ -48,7 +48,7 @@ kubectl label namespace spire-system pod-security.kubernetes.io/enforce=privileg
kubectl create namespace spire-server --dry-run=client -o yaml | kubectl apply -f - kubectl create namespace spire-server --dry-run=client -o yaml | kubectl apply -f -
kubectl label namespace spire-server pod-security.kubernetes.io/enforce=restricted || true kubectl label namespace spire-server pod-security.kubernetes.io/enforce=restricted || true
helm upgrade --install mysql mysql --version "$VERSION_MYSQL" --repo "$HELM_REPO_MYSQL" \ helm upgrade --install mysql "${HELM_REGISTRY_MYSQL}" --version "$VERSION_MYSQL" \
--namespace spire-server \ --namespace spire-server \
--values "${DEPS}/mysql.yaml" \ --values "${DEPS}/mysql.yaml" \
--wait --wait
examples/external-postgresql/run-tests.sh
+1 -1
View File
@@ -48,7 +48,7 @@ kubectl label namespace spire-system pod-security.kubernetes.io/enforce=privileg
kubectl create namespace spire-server --dry-run=client -o yaml | kubectl apply -f - kubectl create namespace spire-server --dry-run=client -o yaml | kubectl apply -f -
kubectl label namespace spire-server pod-security.kubernetes.io/enforce=restricted || true kubectl label namespace spire-server pod-security.kubernetes.io/enforce=restricted || true
helm upgrade --install postgresql postgresql --version "$VERSION_POSTGRESQL" --repo "$HELM_REPO_POSTGRESQL" \ helm upgrade --install postgresql "${HELM_REGISTRY_POSTGRESQL}" --version "$VERSION_POSTGRESQL" \
--namespace spire-server \ --namespace spire-server \
--values "${DEPS}/postgresql.yaml" \ --values "${DEPS}/postgresql.yaml" \
--wait --wait
examples/stateless-server/run-tests.sh
+1 -1
View File
@@ -48,7 +48,7 @@ kubectl label namespace spire-system pod-security.kubernetes.io/enforce=privileg
kubectl create namespace spire-server --dry-run=client -o yaml | kubectl apply -f - kubectl create namespace spire-server --dry-run=client -o yaml | kubectl apply -f -
kubectl label namespace spire-server pod-security.kubernetes.io/enforce=restricted || true kubectl label namespace spire-server pod-security.kubernetes.io/enforce=restricted || true
helm upgrade --install mysql mysql --version "$VERSION_MYSQL" --repo "$HELM_REPO_MYSQL" \ helm upgrade --install mysql "${HELM_REGISTRY_MYSQL}" --version "$VERSION_MYSQL" \
--namespace spire-server \ --namespace spire-server \
--values "${DEPS}/mysql.yaml" \ --values "${DEPS}/mysql.yaml" \
--wait --wait