chore(chart): add helm.sh/images to chart.yaml file, update Renovate image ref

General MR

Summary

• This MR adds the registry1.dso.mil haproxy image to the Chart.yaml file under .annotations.helm.sh/images, so this haproxy repository maintains consistency with our other charts.
• This MR is also updating the renovate.json to reference the v2.4 version of haproxy so Renovate can pick up the new dependency updates.

Note:

• Although this package is moving towards "deprecation," the linked issue was recently created to maintain consistency while it is still available and maintained.

Relevant logs/screenshots

• Logs and Screenshots are in the comments below .

Linked Issue

issue 46

Upgrade Notices

N/A

Closes #46 (closed)

changed milestone to %2.47.0

added kindchore priority5 statusdoing teamService Mesh labels

assigned to @dbaker1298

added 1 commit

• 0bd3c545 - fix(readme): update readme to remove markdown linting warning

Compare with previous version

changed the description

added 1 commit

• 6c3660f0 - chore(renovate): update the depNameTemplate to 2.4 version

Compare with previous version

added 1 commit

• f5f14f1b - chore(chart): bump chart version

Compare with previous version

added 1 commit

• adb11928 - chore(readme): update readme and add changelog entry

Compare with previous version

marked this merge request as ready

changed title from Draft: chore(chart): add helm.sh/images to chart.yaml file to chore(chart): add helm.sh/images to chart.yaml file, update Renovate image ref

changed the description

requested review from @zcallahan, @kipten, @stephen.galamb, @lgomez2, and @jimmy.bourque

added statusreview label and removed statusdoing label

Update

Moving this back to DRAFT to test the Renovate locally first.

marked this merge request as draft

Fork -> Renovate Job Run TESTING

• Following the docs in the https://repo1.dso.mil/big-bang/product/packages/renovate.git repo, I tested a local Renovate job run on these changes to a forked repository for HAProxy in my namespace. (dbaker1298)

Steps

• Standard BB Deployment with following params:

helm upgrade \
  -install bigbang ./chart \
  --create-namespace \
  --namespace bigbang \
  --values ~/src/bigbang/chart/ingress-certs.yaml \
  --values ~/src/bigbang/tests/test-values.yaml \
  --values ~/src/overrides/registry-values.yaml \
  --values ~/src/overrides/renovate-repo.yaml \
  --values ~/src/overrides/renovate-test-pkgs.yaml

renovate-repo.yaml

domain: bigbang.mil
istio:
  enabled: false
  mtls:
    # -- STRICT = Allow only mutual TLS traffic,
    # PERMISSIVE = Allow both plain text and mutual TLS traffic
    # PERMISSIVE is required for any action which redeploys pods because STRICT interferes with initContainers
    # Can be changed to STRICT after all initContainers have finished but will interfere with upgrades/pod deployments that have initContainers
    mode: PERMISSIVE

networkPolicies:
  enabled: false
  ingressLabels:
    app: istio-ingressgateway
    istio: ingressgateway
  # -- IP range of target deployment
  renovateTargetIpRange: ""

---

renovate-test-pkgs.yaml

packages:
  renovate:
    enabled: true
    gateways:
      - istio-system/public
    git:
      repo: https://repo1.dso.mil/big-bang/product/packages/renovate.git
      tag: null
      branch: main
    values:
      redis:
        enabled: true
      renovate:
        configIsSecret: true
        config: |
          {
            "repositories": ["dbaker1298/haproxy"],       # specific to my namespace
            "platform": 'gitlab',
            "endpoint": 'https://repo1.dso.mil/api/v4',
            "token": "<namespace Token here>",
            "autodiscover": false,
            "hostRules": [{
              "hostType": "docker",
              "matchHost": "registry1.dso.mil",
              "username": "<Registy1 user_name Here>",
              "password": "<Registry1 password Here>"
            }]
          }
      networkPolicies:
        enabled: "{{ $.Values.networkPolicies.enabled }}"
      istio:
        enabled: "{{ $.Values.istio.enabled }}"

kyvernoPolicies:
  values:
    policies:
      require-drop-all-capabilities:
        exclude:
          any:
            - resources:
                namespaces:
                  - renovate

---

Create manual Renovate Job

$ kubectl create job --from=cronjob/renovate renovate-job-updated -n renovate
---
# Logs
$ k logs -n renovate job/renovate-job-updated
---
 INFO: Repository started (repository=dbaker1298/haproxy)
       "renovateVersion": "39.122.0"
 INFO: Dependency extraction complete (repository=dbaker1298/haproxy, baseBranch=main)
       "stats": {
         "managers": {
           "helm-values": {"fileCount": 1, "depCount": 1},
           "regex": {"fileCount": 2, "depCount": 3}
         },
         "total": {"fileCount": 3, "depCount": 4}
       }
 INFO: Branch created (repository=dbaker1298/haproxy, baseBranch=main, branch=renovate/ironbank)
       "commitSha": "f0ed4754189e514f82f614f8721f16f819c12bbb"
 INFO: PR created (repository=dbaker1298/haproxy, baseBranch=main, branch=renovate/ironbank)
       "pr": 2,
       "prTitle": "chore(deps): update ironbank/opensource/haproxy/haproxy24 docker tag to v2.4.28"
 INFO: Repository finished (repository=dbaker1298/haproxy)
       "cloned": true,
       "durationMs": 4854
 INFO: Renovate was run at log level "info". Set LOG_LEVEL=debug in environment variables to see extended debug logs.

---

Subsequent MR from Renovate

marked this merge request as ready

changed the description

approved this merge request

LGTM

merged

mentioned in commit 95fb2b26

mentioned in merge request big-bang/bigbang!5747 (merged)