Merge branch 'renovate/ironbank' into 'main'

SKIP UPDATE CHECK Update gluon Docker tag to v0.5.14

Closes #195

See merge request big-bang/apps/sandbox/podinfo!74

CHANGELOG.md

@@ -4,6 +4,15 @@
 
 ---
 
+## [6.7.1-bb.0] - 2025-01-30
+
+### Changed
+
+- Updated chart from upstream 6.6.2 to 6.7.1
+- Updated gluon from 0.5.12 to 0.5.14
+- Added subchart update configuration to renovate.json
+- Replaced requirements.lock with Chart.lock for use with helm v3
+
 ## [6.6.2-bb.1] - 2024-12-30
 
 ### Changed

README.md

 <!-- Warning: Do not manually edit this file. See notes on gluon + helm-docs at the end of this file for more information. -->
 # podinfo
 
-![Version: 6.6.2-bb.1](https://img.shields.io/badge/Version-6.6.2--bb.1-informational?style=flat-square) ![AppVersion: 6.6.2](https://img.shields.io/badge/AppVersion-6.6.2-informational?style=flat-square) ![Maintenance Track: bb_maintainted](https://img.shields.io/badge/Maintenance_Track-bb_maintainted-red?style=flat-square)
+![Version: 6.7.1-bb.0](https://img.shields.io/badge/Version-6.7.1--bb.0-informational?style=flat-square) ![AppVersion: 6.7.1](https://img.shields.io/badge/AppVersion-6.7.1-informational?style=flat-square) ![Maintenance Track: bb_maintainted](https://img.shields.io/badge/Maintenance_Track-bb_maintainted-red?style=flat-square)
 
 Podinfo Helm chart for Kubernetes
 
 ## Upstream References
-- <https://github.com/stefanprodan/podinfo>
 
-* <https://github.com/stefanprodan/podinfo>
+- <https://github.com/stefanprodan/podinfo>
+- <https://github.com/stefanprodan/podinfo>
 
 ## Upstream Release Notes
 
@@ -57,7 +57,7 @@ helm install podinfo chart/
 | backend | string | `nil` |  |
 | backends | list | `[]` |  |
 | image.repository | string | `"ghcr.io/stefanprodan/podinfo"` |  |
-| image.tag | string | `"6.6.2"` |  |
+| image.tag | string | `"6.7.1"` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | ui.color | string | `"#34577c"` |  |
 | ui.message | string | `""` |  |
@@ -107,6 +107,7 @@ helm install podinfo chart/
 | securityContext.runAsGroup | int | `1001` |  |
 | securityContext.runAsNonRoot | bool | `true` |  |
 | securityContext.capabilities.drop[0] | string | `"ALL"` |  |
+| podSecurityContext | object | `{}` |  |
 | ingress.enabled | bool | `false` |  |
 | ingress.className | string | `""` |  |
 | ingress.additionalLabels | object | `{}` |  |

chart/requirements.lock → chart/Chart.lock

 dependencies:
 - name: gluon
   repository: oci://registry1.dso.mil/bigbang
-  version: 0.5.0
-digest: sha256:4562fda1edaeb3791ea813cd8e071709b2ccaf67105d7292c18a3e95b6a88c33
-generated: "2024-05-21T10:57:44.555565141-06:00"
+  version: 0.5.14
+digest: sha256:ca97065348736cfb1457f4d0e53021d2329c81bd34d3a489fd122493be4fa875
+generated: "2025-01-30T11:41:23.589333-05:00"

chart/Chart.yaml

-apiVersion: v2
+apiVersion: v1
 icon: https://kubernetes.io/icons/icon-128x128.png
-version: 6.6.2-bb.1
-appVersion: 6.6.2
+version: 6.7.1-bb.0
+appVersion: 6.7.1
 name: podinfo
 engine: gotpl
 description: Podinfo Helm chart for Kubernetes
@@ -14,7 +14,7 @@ sources:
 kubeVersion: ">=1.23.0-0"
 dependencies:
 - name: gluon
-  version: "0.5.12"
+  version: "0.5.14"
   repository: "oci://registry1.dso.mil/bigbang"
 annotations: 
   bigbang.dev/maintenanceTrack: bb_maintainted

chart/Kptfile

@@ -5,7 +5,7 @@ metadata:
 upstream:
   type: git
   git:
-    commit: 8d010c498e79f499d1b37480507ca1ffb81a3bf7
+    commit: 6b7aab8a10d6ee8b895b0a5048f4ab0966ed29ff
     repo: https://github.com/stefanprodan/podinfo
     directory: charts/podinfo
-    ref: 6.6.2
+    ref: 6.7.1

chart/README.md

@@ -92,6 +92,7 @@ The following tables lists the configurable parameters of the podinfo chart and
 | `serviceAccount.name`             | `None`                 | The name of the service account to use, if not set and create is true, a name is generated using the fullname template |
 | `serviceAccount.imagePullSecrets` | `[]`                   | List of image pull secrets if pulling from private registries.                                                         |
 | `securityContext`                 | `{}`                   | The security context to be set on the podinfo container                                                                |
+| `podSecurityContext`              | `{}`                   | The security context to be set on the pod                                                                              |
 | `linkerd.profile.enabled`         | `false`                | Create Linkerd service profile                                                                                         |
 | `serviceMonitor.enabled`          | `false`                | Whether a Prometheus Operator service monitor should be created                                                        |
 | `serviceMonitor.interval`         | `15s`                  | Prometheus scraping interval                                                                                           |

chart/templates/deployment.yaml

@@ -198,6 +198,10 @@ spec:
           {{- end }}
           resources:
 {{ toYaml .Values.resources | indent 12 }}
+    {{- with .Values.podSecurityContext }}
+      securityContext:
+{{ toYaml . | indent 8 }}
+    {{- end }}
     {{- with .Values.nodeSelector }}
       nodeSelector:
 {{ toYaml . | indent 8 }}

chart/values-prod.yaml

@@ -8,7 +8,7 @@ backends: []
 
 image:
   repository: ghcr.io/stefanprodan/podinfo
-  tag: 6.6.2
+  tag: 6.7.1
   pullPolicy: IfNotPresent
 
 ui:
@@ -107,6 +107,9 @@ serviceAccount:
 # set container security context
 securityContext: {}
 
+# set pod security context
+podSecurityContext: {}
+
 ingress:
   enabled: false
   className: ""

chart/values.yaml

@@ -8,7 +8,7 @@ backends: []
 
 image:
   repository: ghcr.io/stefanprodan/podinfo
-  tag: 6.6.2
+  tag: 6.7.1
   pullPolicy: IfNotPresent
 
 ui:
@@ -119,6 +119,9 @@ securityContext:
     drop:
     - ALL
 
+# set pod security context
+podSecurityContext: {}
+
 ingress:
   enabled: false
   className: ""

renovate.json

@@ -6,7 +6,7 @@
     "dependencyDashboardTitle": "Renovate: Upgrade Podinfo Dependencies",
     "draftPR": true,
     "enabledManagers": ["regex", "helmv3"],
-    "labels": ["kind::maintenance"],
+    "labels": ["kind::maintenance", "team::Tools & Automation"],
     "commitMessagePrefix": "SKIP UPDATE CHECK",
     "packageRules": [
         {
@@ -45,5 +45,8 @@
             "versioningTemplate": "regex:^RELEASE\\.(?<major>\\d+)-(?<minor>\\d+)-(?<patch>\\d+)T.*Z$"
         }
     ],
-    "separateMajorMinor": false
+    "separateMajorMinor": false,
+    "postUpdateOptions": [
+        "helmUpdateSubChartArchives"
+    ]
 }