diff --git a/chart/templates/kyverno-policies/values.yaml b/chart/templates/kyverno-policies/values.yaml index d59b02bde5dd9c08cda2b71497352cf5a52ce563..65e5f4039b2bea20b352388995074171f428f573 100644 --- a/chart/templates/kyverno-policies/values.yaml +++ b/chart/templates/kyverno-policies/values.yaml @@ -146,20 +146,9 @@ policies: require-drop-all-capabilities: validationFailureAction: audit - {{- if or .Values.addons.gitlab.enabled .Values.neuvector.enabled }} + {{- if .Values.neuvector.enabled }} exclude: any: - {{- if .Values.addons.gitlab.enabled }} - # Gitlab Redis sub-chart does not have configurable securityContext values from upstream. An issue has been opened - # upstream to add these capabilities: https://gitlab.com/gitlab-org/charts/gitlab/-/issues/3375 - - resources: - namespaces: - - gitlab - names: - - gitlab-redis-* - - gitlab-postgresql* - {{- end }} - {{- if .Values.neuvector.enabled }} # Neuvector needs access to host to inspect network traffic - resources: namespaces: @@ -167,7 +156,6 @@ policies: names: - neuvector-enforcer-pod* - neuvector-prometheus-exporter-pod* - {{- end }} {{- end }} # Kyverno Beta feature - https://kyverno.io/docs/writing-policies/verify-images/ @@ -196,7 +184,7 @@ policies: require-non-root-group: validationFailureAction: audit - {{- if or $deployNodeAgent .Values.twistlock.enabled .Values.fluentbit.enabled .Values.promtail.enabled .Values.addons.gitlab.enabled }} + {{- if or $deployNodeAgent .Values.twistlock.enabled .Values.fluentbit.enabled .Values.promtail.enabled }} exclude: any: {{- if $deployNodeAgent }} @@ -240,15 +228,6 @@ policies: names: - promtail-promtail* {{- end }} - {{- if .Values.addons.gitlab.enabled }} - # Gitlab Redis sub-chart does not have configurable securityContext values from upstream. An issue has been opened - # upstream to add these capabilities: https://gitlab.com/gitlab-org/charts/gitlab/-/issues/3375 - - resources: - namespaces: - - gitlab - names: - - gitlab-redis-* - {{- end }} {{- end }} require-non-root-user: @@ -258,7 +237,7 @@ policies: excludeContainers: - istio-init {{- end }} - {{- if or $deployNodeAgent .Values.twistlock.enabled .Values.fluentbit.enabled .Values.promtail.enabled .Values.addons.gitlab.enabled }} + {{- if or $deployNodeAgent .Values.twistlock.enabled .Values.fluentbit.enabled .Values.promtail.enabled }} exclude: any: {{- if $deployNodeAgent }} @@ -302,15 +281,6 @@ policies: names: - promtail-promtail* {{- end }} - {{- if .Values.addons.gitlab.enabled }} - # Gitlab Redis sub-chart does not have configurable securityContext values from upstream. An issue has been opened - # upstream to add these capabilities: https://gitlab.com/gitlab-org/charts/gitlab/-/issues/3375 - - resources: - namespaces: - - gitlab - names: - - gitlab-redis-* - {{- end }} {{- end }} {{- if .Values.twistlock.enabled }} diff --git a/chart/values.yaml b/chart/values.yaml index 5a096b37fbf4779b73837e4660bfddcf458a2e39..45574c736f42ffa385add02ba376967213dd5c01 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -1156,11 +1156,11 @@ addons: git: repo: https://repo1.dso.mil/big-bang/product/packages/gitlab.git path: "./chart" - tag: "7.2.2-bb.0" + tag: "7.2.2-bb.1" helmRepo: repoName: "registry1" chartName: "gitlab" - tag: "7.2.2-bb.0" + tag: "7.2.2-bb.1" # -- Flux reconciliation overrides specifically for the Gitlab Package flux: {}