Renovate Update Authservice to v1.0.4

CHANGELOG.md

@@ -2,23 +2,38 @@
 
 ---
 
+## [1.0.4-bb.0] - 2025-02-07
+
+### Changed
+
+- ironbank/bitnami/redis updated from 7.4.1 to 7.4.2
+- ironbank/istio-ecosystem/authservice updated from 1.0.3-ubi9 to 1.0.4-ubi9
+
 ## [1.0.3-bb.0] - 2024-11-20
+
 ### Changed
+
 - ironbank/istio-ecosystem/authservice updated from 1.0.2 to 1.0.3
 - Update Redis chart to 20.2.1-bb.4
 - Added the maintenance track annotation and badge
 
 ## [1.0.2-bb.2] - 2024-11-04
+
 ### Changed
+
 - redis updated from 20.0.1-bb.1 to 20.2.1-bb.3
 - ironbank/bitnami/redis updated from 7.4.0 to 7.4.1
 
 ## [1.0.2-bb.1] - 2024-11-04
+
 ### Changed
+
 - Updated pod labels to use authservice.labels so version will be included
 
 ## [1.0.2-bb.0] - 2024-09-11
+
 ### Changed
+
 - redis updated from 19.5.0 to 20.0.1
 - ironbank/bitnami/redis updated from 7.2.5 to 7.4.0
 - ironbank/istio-ecosystem/authservice updated from 1.0.1 to 1.0.2

README.md

 <!-- Warning: Do not manually edit this file. See notes on gluon + helm-docs at the end of this file for more information. -->
 # authservice
 
-![Version: 1.0.3-bb.0](https://img.shields.io/badge/Version-1.0.3--bb.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.0.3](https://img.shields.io/badge/AppVersion-1.0.3-informational?style=flat-square) ![Maintenance Track: bb_integrated](https://img.shields.io/badge/Maintenance_Track-bb_integrated-green?style=flat-square)
+![Version: 1.0.4-bb.0](https://img.shields.io/badge/Version-1.0.4--bb.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.0.4](https://img.shields.io/badge/AppVersion-1.0.4-informational?style=flat-square) ![Maintenance Track: bb_integrated](https://img.shields.io/badge/Maintenance_Track-bb_integrated-green?style=flat-square)
 
 A Helm chart for Kubernetes
 
 ## Upstream References
 
-* <https://github.com/istio-ecosystem/authservice>
+- <https://github.com/istio-ecosystem/authservice>
 
 ## Upstream Release Notes
 
@@ -61,7 +61,7 @@ helm install authservice chart/
 | networkPolicies.additionalPolicies | list | `[]` |  |
 | image.repository | string | `"registry1.dso.mil/ironbank/istio-ecosystem/authservice"` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
-| image.tag | string | `"1.0.3-ubi9"` | Overrides the image tag whose default is the chart appVersion. |
+| image.tag | string | `"1.0.4-ubi9"` | Overrides the image tag whose default is the chart appVersion. |
 | imagePullSecrets | list | `[]` |  |
 | issuer_uri | string | `""` | Issuer and jwks URIs if not using Keycloak |
 | jwks_uri | string | `""` |  |

chart/Chart.lock

 dependencies:
 - name: redis
   repository: oci://registry1.dso.mil/bigbang
-  version: 20.2.1-bb.4
-digest: sha256:9bb1286170852a78747f928dd6457a5039e460897d18025b2903cb5169ac1b44
-generated: "2024-11-18T16:04:31.14306-05:00"
+  version: 20.6.2-bb.2
+digest: sha256:3ba50408f55db604b1244c7991be6ca2b42511c57848c0cfebe05ec7c79f0cb8
+generated: "2025-02-07T15:11:37.04655-05:00"

chart/Chart.yaml

@@ -15,15 +15,15 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.0.3-bb.0
+version: 1.0.4-bb.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: 1.0.3
+appVersion: 1.0.4
 dependencies:
   - name: redis
-    version: 20.2.1-bb.4
+    version: 20.6.2-bb.2
     repository: "oci://registry1.dso.mil/bigbang"
     condition: redis.enabled
     alias: redis-bb
@@ -32,12 +32,12 @@ sources:
 annotations:
   bigbang.dev/maintenanceTrack: bb_integrated
   bigbang.dev/applicationVersions: |
-    - Authservice: 1.0.3
+    - Authservice: 1.0.4
   helm.sh/images: |
     - name: authservice
-      image: registry1.dso.mil/ironbank/istio-ecosystem/authservice:1.0.3-ubi9
+      image: registry1.dso.mil/ironbank/istio-ecosystem/authservice:1.0.4-ubi9
     - name: redis
       condition: redis.enabled
-      image: registry1.dso.mil/ironbank/bitnami/redis:7.4.1
+      image: registry1.dso.mil/ironbank/bitnami/redis:7.4.2
   bigbang.dev/upstreamReleaseNotesMarkdown: |
     - [Find upstream chart's release notes and CHANGELOG here](https://github.com/istio-ecosystem/authservice/releases)

chart/values.yaml

@@ -11,7 +11,8 @@ istio:
   hardened:
     enabled: false
     outboundTrafficPolicyMode: "REGISTRY_ONLY"
-    customServiceEntries: []
+    customServiceEntries:
+      []
       # - name: "allow-google"
       #   enabled: true
       #   spec:
@@ -58,7 +59,7 @@ image:
   repository: registry1.dso.mil/ironbank/istio-ecosystem/authservice
   pullPolicy: IfNotPresent
   # -- Overrides the image tag whose default is the chart appVersion.
-  tag: "1.0.3-ubi9"
+  tag: "1.0.4-ubi9"
 imagePullSecrets: []
 
 # -- Issuer and jwks URIs if not using Keycloak
@@ -75,10 +76,9 @@ allow_unmatched_requests: true
 # See reference: https://istio.io/latest/docs/reference/config/security/authorization-policy/
 custom_authpolicy_rules:
   - when:
-    - key: request.headers[authorization]
-      notValues:
-      - '*'
-
+      - key: request.headers[authorization]
+        notValues:
+          - "*"
 
 global:
   # -- Global Authorization URI value to set if not using Keycloak
@@ -172,7 +172,6 @@ chains:
     callback_uri: https://localhost/login
     logout_path: "/local"
 
-
 nameOverride: "authservice"
 fullnameOverride: "authservice"
 
@@ -196,7 +195,7 @@ podSecurityContext:
 securityContext:
   capabilities:
     drop:
-    - ALL
+      - ALL
   readOnlyRootFilesystem: true
   runAsNonRoot: true
   runAsUser: 1000
@@ -291,7 +290,6 @@ redis-bb:
     maxmemory-policy allkeys-lru
     save ""
 
-
 openshift: false
 
 # -- Values to bypass OIDC chains in favor or using istio authorizationpolicies.security.istio.io