diff --git a/CHANGELOG.md b/CHANGELOG.md index 9da16b0a0da5b807018b30691eb0834837032214..aa20855dcf4ed43f9df4dad305eb1dc0230289a5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,10 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) +## [1.55.0-bb.0] - 2022-11-17 +### Changed +- Updated from upstream CDI v1.55.0 + ## [1.53.0-bb.0] - 2022-08-12 ### Changed - Updated from upstream CDI v1.53.0 diff --git a/README.md b/README.md index 286e4a5426ac51c6ad3a05c2e8c0d3cd418cd728..632642432782f93028612b5125a2c7d3c7f4ca3c 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # cdi-operator -   +   Containerized Data Importer helm chart package @@ -33,25 +33,25 @@ helm install cdi-operator chart/ | deployment.spec.replicas | int | `1` | | | deployment.spec.template.spec.containers.operator.image.name | string | `"cdi-operator"` | | | deployment.spec.template.spec.containers.operator.image.registry | string | `"registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi"` | | -| deployment.spec.template.spec.containers.operator.image.version | string | `"v1.53.0"` | | +| deployment.spec.template.spec.containers.operator.image.version | string | `"v1.55.0"` | | | deployment.spec.template.spec.containers.controller.image.name | string | `"cdi-controller"` | | | deployment.spec.template.spec.containers.controller.image.registry | string | `"registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi"` | | -| deployment.spec.template.spec.containers.controller.image.version | string | `"v1.53.0"` | | +| deployment.spec.template.spec.containers.controller.image.version | string | `"v1.55.0"` | | | deployment.spec.template.spec.containers.importer.image.name | string | `"cdi-importer"` | | | deployment.spec.template.spec.containers.importer.image.registry | string | `"registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi"` | | -| deployment.spec.template.spec.containers.importer.image.version | string | `"v1.53.0"` | | +| deployment.spec.template.spec.containers.importer.image.version | string | `"v1.55.0"` | | | deployment.spec.template.spec.containers.cloner.image.name | string | `"cdi-cloner"` | | | deployment.spec.template.spec.containers.cloner.image.registry | string | `"registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi"` | | -| deployment.spec.template.spec.containers.cloner.image.version | string | `"v1.53.0"` | | +| deployment.spec.template.spec.containers.cloner.image.version | string | `"v1.55.0"` | | | deployment.spec.template.spec.containers.apiserver.image.name | string | `"cdi-apiserver"` | | | deployment.spec.template.spec.containers.apiserver.image.registry | string | `"registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi"` | | -| deployment.spec.template.spec.containers.apiserver.image.version | string | `"v1.53.0"` | | +| deployment.spec.template.spec.containers.apiserver.image.version | string | `"v1.55.0"` | | | deployment.spec.template.spec.containers.uploadServer.image.name | string | `"cdi-uploadserver"` | | | deployment.spec.template.spec.containers.uploadServer.image.registry | string | `"registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi"` | | -| deployment.spec.template.spec.containers.uploadServer.image.version | string | `"v1.53.0"` | | +| deployment.spec.template.spec.containers.uploadServer.image.version | string | `"v1.55.0"` | | | deployment.spec.template.spec.containers.uploadProxy.image.name | string | `"cdi-uploadproxy"` | | | deployment.spec.template.spec.containers.uploadProxy.image.registry | string | `"registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi"` | | -| deployment.spec.template.spec.containers.uploadProxy.image.version | string | `"v1.53.0"` | | +| deployment.spec.template.spec.containers.uploadProxy.image.version | string | `"v1.55.0"` | | | deployment.spec.template.spec.containers.ports.metricsPort | int | `8443` | | | deployment.spec.template.spec.containers.resources.requests.cpu | string | `"10m"` | | | deployment.spec.template.spec.containers.resources.requests.memory | string | `"150Mi"` | | diff --git a/chart/Chart.yaml b/chart/Chart.yaml index bf1ca27870070381e08fcdfa765d931caa1796f2..5ce046d392128d85844d7ba0fab0ce8e4365fca9 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -2,5 +2,5 @@ apiVersion: v2 name: cdi-operator description: Containerized Data Importer helm chart package type: application -version: 1.53.0-bb.0 -appVersion: "1.53.0" +version: 1.55.0-bb.0 +appVersion: "1.55.0" diff --git a/chart/crds/apiextensions.k8s.io_v1_customresourcedefinition_cdis.cdi.kubevirt.io.yaml b/chart/crds/apiextensions.k8s.io_v1_customresourcedefinition_cdis.cdi.kubevirt.io.yaml index 643414056c69eb199b89265edd25b0ee299d1d21..d65cf33d9075ff3d2f88bef7eb566f9f6bdd6496 100644 --- a/chart/crds/apiextensions.k8s.io_v1_customresourcedefinition_cdis.cdi.kubevirt.io.yaml +++ b/chart/crds/apiextensions.k8s.io_v1_customresourcedefinition_cdis.cdi.kubevirt.io.yaml @@ -2201,8 +2201,9 @@ spec: description: CDIConfig at CDI level properties: dataVolumeTTLSeconds: - description: dataVolumeTTLSeconds is the time in seconds after - DataVolume completion it can be garbage collected. + description: DataVolumeTTLSeconds is the time in seconds after + DataVolume completion it can be garbage collected. The default + is 0 sec. To disable GC use -1. format: int32 type: integer featureGates: diff --git a/chart/templates/cdi_apps_v1_deployment_cdi-operator.yaml b/chart/templates/cdi_apps_v1_deployment_cdi-operator.yaml index 2e7d5ca7633bc931441c6ec705bae413c88508cf..71383830c3f2619ca804e71b3029e2d040be4542 100644 --- a/chart/templates/cdi_apps_v1_deployment_cdi-operator.yaml +++ b/chart/templates/cdi_apps_v1_deployment_cdi-operator.yaml @@ -5,11 +5,6 @@ metadata: name: cdi-operator operator.cdi.kubevirt.io: "" prometheus.cdi.kubevirt.io: "true" - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: "cdi" - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/managed-by: {{ .Release.Service }} name: cdi-operator namespace: {{ .Release.Namespace }} spec: @@ -32,7 +27,7 @@ spec: - name: DEPLOY_CLUSTER_RESOURCES value: "true" - name: OPERATOR_VERSION - value: v1.53.0 + value: {{ .controller.image.version }} - name: CONTROLLER_IMAGE value: {{ .controller.image.registry }}/{{ .controller.image.name }}:{{ .controller.image.version }} - name: IMPORTER_IMAGE @@ -52,7 +47,7 @@ spec: - name: MONITORING_NAMESPACE image: {{ .operator.image.registry }}/{{ .operator.image.name }}:{{ .operator.image.version }} imagePullPolicy: IfNotPresent - name: cdi-operator + name: {{ .operator.image.name }} ports: - containerPort: {{ .ports.metricsPort }} name: metrics @@ -62,6 +57,14 @@ spec: cpu: {{ .resources.requests.cpu }} memory: {{ .resources.requests.memory }} {{- end }} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault nodeSelector: kubernetes.io/os: linux securityContext: diff --git a/chart/templates/cdi_rbac.authorization.k8s.io_v1_role_cdi-operator.yaml b/chart/templates/cdi_rbac.authorization.k8s.io_v1_role_cdi-operator.yaml index 52ca857d2613e0df8d05ddc99b07cb27a0b62e2f..07c30197f2e3d0605224266367d7578cd055cd49 100644 --- a/chart/templates/cdi_rbac.authorization.k8s.io_v1_role_cdi-operator.yaml +++ b/chart/templates/cdi_rbac.authorization.k8s.io_v1_role_cdi-operator.yaml @@ -3,12 +3,8 @@ kind: Role metadata: labels: app.kubernetes.io/component: storage - cdi.kubevirt.io: "" - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: "cdi" - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/managed-by: {{ .Release.Service | default "cdi-operator"}} + cdi.kubevirt.io: "" name: cdi-operator namespace: {{ .Release.Namespace }} rules: diff --git a/chart/templates/cdi_rbac.authorization.k8s.io_v1_rolebinding_cdi-operator.yaml b/chart/templates/cdi_rbac.authorization.k8s.io_v1_rolebinding_cdi-operator.yaml index 2c13f81c420fec5d6853dc3ffe655c1b85d3d8d8..4d07bd4d9f7afea2c27b7db350ec72b7168a097e 100644 --- a/chart/templates/cdi_rbac.authorization.k8s.io_v1_rolebinding_cdi-operator.yaml +++ b/chart/templates/cdi_rbac.authorization.k8s.io_v1_rolebinding_cdi-operator.yaml @@ -3,12 +3,8 @@ kind: RoleBinding metadata: labels: app.kubernetes.io/component: storage - cdi.kubevirt.io: "" - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: {{ .Chart.Name }} - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/managed-by: {{ .Release.Service | default "cdi-operator"}} + cdi.kubevirt.io: "" name: {{ .Chart.Name }} namespace: {{ .Release.Namespace }} roleRef: diff --git a/chart/templates/cdi_v1_configmap_cdi-operator-leader-election-helper.yaml b/chart/templates/cdi_v1_configmap_cdi-operator-leader-election-helper.yaml index bab662b28cf81101fda4f57e1d6a17f4d4f13300..7daae772b0861c358c4895863b437e6de26ce566 100644 --- a/chart/templates/cdi_v1_configmap_cdi-operator-leader-election-helper.yaml +++ b/chart/templates/cdi_v1_configmap_cdi-operator-leader-election-helper.yaml @@ -3,10 +3,5 @@ kind: ConfigMap metadata: labels: operator.cdi.kubevirt.io: "" - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: "cdi" - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/managed-by: {{ .Release.Service | default "cdi-operator"}} name: cdi-operator-leader-election-helper namespace: {{ .Release.Namespace }} diff --git a/chart/templates/cdi_v1_serviceaccount_cdi-operator.yaml b/chart/templates/cdi_v1_serviceaccount_cdi-operator.yaml index 1c68a4ef6e87e10ac0e2e3e978b11703e0477b95..5803b1e14ed336e19a2105ec433a03fc0587156e 100644 --- a/chart/templates/cdi_v1_serviceaccount_cdi-operator.yaml +++ b/chart/templates/cdi_v1_serviceaccount_cdi-operator.yaml @@ -3,10 +3,5 @@ kind: ServiceAccount metadata: labels: operator.cdi.kubevirt.io: "" - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: "cdi" - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/managed-by: {{ .Release.Service | default "cdi-operator" }} name: cdi-operator namespace: {{ .Release.Namespace }} diff --git a/chart/templates/default_cdi.kubevirt.io_v1beta1_cdi_cdi.yaml b/chart/templates/default_cdi.kubevirt.io_v1beta1_cdi_cdi.yaml index 40212c00417acdb72f6f5833b4a6b2ecb69eb765..9e78f1a5b2485df53e2f15d333c6ed7ac9fc7024 100644 --- a/chart/templates/default_cdi.kubevirt.io_v1beta1_cdi_cdi.yaml +++ b/chart/templates/default_cdi.kubevirt.io_v1beta1_cdi_cdi.yaml @@ -2,13 +2,6 @@ apiVersion: cdi.kubevirt.io/v1beta1 kind: CDI metadata: name: cdi - namespace: {{ .Release.Namespace }} - labels: - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: "cdi" - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/managed-by: {{ .Release.Service }} spec: imagePullPolicy: IfNotPresent infra: diff --git a/chart/templates/rbac.authorization.k8s.io_v1_clusterrole_cdi-operator-cluster.yaml b/chart/templates/rbac.authorization.k8s.io_v1_clusterrole_cdi-operator-cluster.yaml index b1d3ff8ee3d8b19271993f64b5b55d447ea498b8..5990c777e98d0111fe251f6ff07cb4461f29cd66 100644 --- a/chart/templates/rbac.authorization.k8s.io_v1_clusterrole_cdi-operator-cluster.yaml +++ b/chart/templates/rbac.authorization.k8s.io_v1_clusterrole_cdi-operator-cluster.yaml @@ -3,11 +3,6 @@ kind: ClusterRole metadata: labels: operator.cdi.kubevirt.io: "" - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: "cdi" - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/managed-by: {{ .Release.Service | default "cdi-operator"}} name: cdi-operator-cluster rules: - apiGroups: @@ -233,6 +228,12 @@ rules: verbs: - list - watch +- apiGroups: + - kubevirt.io + resources: + - virtualmachines/finalizers + verbs: + - update - apiGroups: - "" resources: diff --git a/chart/templates/rbac.authorization.k8s.io_v1_clusterrolebinding_cdi-operator.yaml b/chart/templates/rbac.authorization.k8s.io_v1_clusterrolebinding_cdi-operator.yaml index 3c89e6ed831fef689e5b0415693637f00e12ec30..2596ea9b627e6e9120e01fca8ca0b258a565a6b7 100644 --- a/chart/templates/rbac.authorization.k8s.io_v1_clusterrolebinding_cdi-operator.yaml +++ b/chart/templates/rbac.authorization.k8s.io_v1_clusterrolebinding_cdi-operator.yaml @@ -3,11 +3,6 @@ kind: ClusterRoleBinding metadata: labels: operator.cdi.kubevirt.io: "" - helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }} - app.kubernetes.io/name: "cdi" - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/managed-by: {{ .Release.Service | default "cdi-operator"}} name: cdi-operator roleRef: apiGroup: rbac.authorization.k8s.io diff --git a/chart/values.yaml b/chart/values.yaml index 004ee4e658b52f534ddf8b48e6b25726758d8bda..ee9853740d35cb45ccd07f9a82179e7427e71e35 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -8,37 +8,37 @@ deployment: image: name: cdi-operator registry: registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi - version: v1.53.0 + version: v1.55.0 controller: image: name: cdi-controller registry: registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi - version: v1.53.0 + version: v1.55.0 importer: image: name: cdi-importer registry: registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi - version: v1.53.0 + version: v1.55.0 cloner: image: name: cdi-cloner registry: registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi - version: v1.53.0 + version: v1.55.0 apiserver: image: name: cdi-apiserver registry: registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi - version: v1.53.0 + version: v1.55.0 uploadServer: image: name: cdi-uploadserver registry: registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi - version: v1.53.0 + version: v1.55.0 uploadProxy: image: name: cdi-uploadproxy registry: registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi - version: v1.53.0 + version: v1.55.0 ports: metricsPort: 8443 resources: diff --git a/scripts/update-chart.sh b/scripts/update-chart.sh index 1b2c9f13af74247f32892020a67b4c53f89ac517..31053e2b00fbd121ba6fa688f6a01a66c1d57fa4 100755 --- a/scripts/update-chart.sh +++ b/scripts/update-chart.sh @@ -1,6 +1,6 @@ #!/bin/sh -export VERSION=v1.53.0 +export VERSION=v1.55.0 echo "Downloading manifests for $VERSION" curl -sSLO https://github.com/kubevirt/containerized-data-importer/releases/download/${VERSION}/cdi-operator.yaml curl -sSLO https://github.com/kubevirt/containerized-data-importer/releases/download/${VERSION}/cdi-cr.yaml diff --git a/utils/skopeo-cdi-sync.yaml b/utils/skopeo-cdi-sync.yaml index 25a762a10e00a601c1e1cea4f504ef7adb81489d..483cd010d14ce9bbe7663ca39ec4719f9340e9c7 100644 --- a/utils/skopeo-cdi-sync.yaml +++ b/utils/skopeo-cdi-sync.yaml @@ -1,23 +1,30 @@ quay.io/kubevirt: images: cdi-operator: + - v1.55.0 - v1.53.0 - v1.52.0 cdi-controller: + - v1.55.0 - v1.53.0 - v1.52.0 cdi-importer: + - v1.55.0 - v1.53.0 - v1.52.0 cdi-cloner: + - v1.55.0 - v1.53.0 - v1.52.0 cdi-apiserver: + - v1.55.0 - v1.53.0 - v1.52.0 cdi-uploadserver: + - v1.55.0 - v1.53.0 - v1.52.0 cdi-uploadproxy: + - v1.55.0 - v1.53.0 - v1.52.0 \ No newline at end of file diff --git a/zarf.yaml b/zarf.yaml index 6777496f3d38e5cda0fd5836a98b06ef327a9470..8370c53e005e282b8ff118396a5ce7f33ee39226 100644 --- a/zarf.yaml +++ b/zarf.yaml @@ -10,17 +10,17 @@ components: charts: - name: cdi url: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/cdi.git - version: 0.0.1-bb.1 + version: 1.55.0-bb.0 gitPath: chart namespace: cdi valuesFiles: - chart/values.yaml images: - - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-operator:v1.52.0 - - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-controller:v1.52.0 - - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-importer:v1.52.0 - - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-cloner:v1.52.0 - - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-apiserver:v1.52.0 - - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-uploadserver:v1.52.0 - - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-uploadproxy:v1.52.0 + - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-operator:v1.55.0 + - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-controller:v1.55.0 + - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-importer:v1.55.0 + - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-cloner:v1.55.0 + - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-apiserver:v1.55.0 + - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-uploadserver:v1.55.0 + - registry.dso.mil/platform-one/big-bang/apps/sandbox/cdi/cdi-uploadproxy:v1.55.0