CHANGELOG.md

@@ -2,6 +2,10 @@
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.65.0-bb.1] - 2024-06-20
+### Fixed
+- Updated authorizationPolicy to properly reflect matchLabel selector and port for metrics
+
 ## [0.65.0-bb.0] - 2024-05-24
 
 ### Changed

README.md

 # gitlab-runner
 
-![Version: 0.65.0-bb.0](https://img.shields.io/badge/Version-0.65.0--bb.0-informational?style=flat-square) ![AppVersion: 17.0.0](https://img.shields.io/badge/AppVersion-17.0.0-informational?style=flat-square)
+![Version: 0.65.0-bb.1](https://img.shields.io/badge/Version-0.65.0--bb.1-informational?style=flat-square) ![AppVersion: 17.0.0](https://img.shields.io/badge/AppVersion-17.0.0-informational?style=flat-square)
 
 GitLab Runner
 
@@ -44,6 +44,7 @@ helm install gitlab-runner chart/
 | useTini | bool | `true` |  |
 | imagePullPolicy | string | `"IfNotPresent"` |  |
 | gitlabUrl | string | `"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181"` |  |
+| unregisterRunners | bool | `true` |  |
 | terminationGracePeriodSeconds | int | `3600` |  |
 | concurrent | int | `50` |  |
 | shutdown_timeout | int | `0` |  |
@@ -69,9 +70,7 @@ helm install gitlab-runner chart/
 | runners.helper.tag | string | `"v17.0.0"` |  |
 | runners.config | string | `"[[runners]]\n  clone_url = \"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181\"\n  cache_dir = \"/tmp/gitlab-runner/cache\"\n  [runners.kubernetes]\n    pull_policy = \"always\"\n    namespace = \"{{.Release.Namespace}}\"\n    image = \"{{ printf \"%s/%s:%s\" .Values.runners.job.registry .Values.runners.job.repository .Values.runners.job.tag }}\"\n    helper_image = \"{{ printf \"%s/%s:%s\" .Values.runners.helper.registry .Values.runners.helper.repository .Values.runners.helper.tag }}\"\n    image_pull_secrets = [\"private-registry\"]\n  [runners.kubernetes.pod_security_context]\n    run_as_non_root = true\n    run_as_user = 1001\n  [runners.kubernetes.helper_container_security_context]\n    run_as_non_root = true\n    run_as_user = 1001\n  [runners.kubernetes.pod_labels]\n    \"job_id\" = \"${CI_JOB_ID}\"\n    \"job_name\" = \"${CI_JOB_NAME}\"\n    \"pipeline_id\" = \"${CI_PIPELINE_ID}\"\n    \"app\" = \"gitlab-runner\"\n"` |  |
 | runners.configPath | string | `""` |  |
-| runners.locked | bool | `false` |  |
-| runners.runUntagged | bool | `true` |  |
-| runners.protected | bool | `true` |  |
+| runners.locked | bool | `true` |  |
 | runners.secret | string | `"gitlab-gitlab-runner-secret"` |  |
 | runners.cache | object | `{}` |  |
 | runners.builds | object | `{}` |  |

chart/Chart.yaml

 apiVersion: v2
 name: gitlab-runner
-version: 0.65.0-bb.0
+version: 0.65.0-bb.1
 appVersion: 17.0.0
 description: GitLab Runner
 keywords:

chart/templates/bigbang/istio/authorization-policies/monitoring-authz-policy.yaml

@@ -7,11 +7,14 @@ metadata:
 spec:
   selector:
     matchLabels:
-      app.kubernetes.io/name: {{ $.Release.Name }}
+      app: {{ $.Release.Name }}
   action: ALLOW
   rules:
   - from:
     - source:
         namespaces: {{ .Values.istio.hardened.monitoring.namespaces | toYaml | nindent 10 }}
         principals: {{ .Values.istio.hardened.monitoring.principals | toYaml | nindent 10 }}
+  - to:
+    - operation:
+        ports: ["{{ .Values.metrics.port }}"]
 {{- end }}