Kpt update for chart

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 ---
+## [1.19.0-bb.1] - 2023-09-27
+### Added
+- Updated deployment template
+
 ## [1.19.0-bb.0]
 ### Added
 - Updated repo1 image to `1.19.0`

README.md

 # istio-operator
 
-![Version: 1.19.0-bb.0](https://img.shields.io/badge/Version-1.19.0--bb.0-informational?style=flat-square) ![AppVersion: 1.19.0](https://img.shields.io/badge/AppVersion-1.19.0-informational?style=flat-square)
+![Version: 1.19.0-bb.1](https://img.shields.io/badge/Version-1.19.0--bb.1-informational?style=flat-square) ![AppVersion: 1.19.0](https://img.shields.io/badge/AppVersion-1.19.0-informational?style=flat-square)
 
 Helm chart for deploying Istio operator
 
@@ -41,7 +41,7 @@ helm install istio-operator chart/
 | tidHub | string | `"registry1.dso.mil/ironbank/tetrate/istio"` |  |
 | tidTag | string | `"1.18.2-tetratefips-v0"` |  |
 | imagePullSecrets | list | `[]` |  |
-| imagePullPolicy | string | `"IfNotPresent"` |  |
+| imagePullPolicy | string | `""` |  |
 | watchedNamespaces | string | `"istio-system"` |  |
 | waitForResourcesTimeout | string | `"300s"` |  |
 | enableCRDTemplates | bool | `false` |  |
@@ -53,6 +53,7 @@ helm install istio-operator chart/
 | operator.resources.limits.memory | string | `"256Mi"` |  |
 | operator.resources.requests.cpu | string | `"200m"` |  |
 | operator.resources.requests.memory | string | `"256Mi"` |  |
+| operator.seccompProfile | object | `{}` |  |
 | nodeSelector | object | `{}` |  |
 | tolerations | list | `[]` |  |
 | affinity | object | `{}` |  |

chart/Chart.yaml

 apiVersion: v1
 name: istio-operator
-version: 1.19.0-bb.0
+# This version is never actually shipped. istio/release-builder will replace it at build-time
+# with the appropriate version
+version: 1.19.0-bb.1
 appVersion: 1.19.0
 tillerVersion: ">=2.7.2"
 description: Helm chart for deploying Istio operator

chart/Kptfile

 apiVersion: kpt.dev/v1alpha1
 kind: Kptfile
 metadata:
-  name: istio-operator
+    name: chart
 upstream:
-  type: git
-  git:
-    commit: 3b3ca8ec1632961e355f398f7357ebed9b13aa43
-    repo: https://github.com/istio/istio
-    directory: /manifests/charts/istio-operator
-    ref: 1.19.0
+    type: git
+    git:
+        commit: 3b3ca8ec1632961e355f398f7357ebed9b13aa43
+        repo: https://github.com/istio/istio
+        directory: /manifests/charts/istio-operator
+        ref: 1.19.0

chart/templates/deployment.yaml

@@ -26,7 +26,7 @@ spec:
       serviceAccountName: istio-operator{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }}
       containers:
         - name: istio-operator
-          ## Added by Big Bang
+                    ## Added by Big Bang
           {{- if .Values.enterprise }}
           image: {{.Values.tidHub}}/{{.Values.image | default "operator" }}:{{.Values.tidTag}}
           {{ else }}
@@ -47,11 +47,13 @@ spec:
             runAsGroup: 1337
             runAsUser: 1337
             runAsNonRoot: true
-          imagePullPolicy: {{ .Values.imagePullPolicy }}
-          {{- if .Values.operator.seccompProfile }}
+{{- if .Values.operator.seccompProfile }}
             seccompProfile:
-            {{ toYaml .Values.operator.seccompProfile | trim | indent 14 }}
-          {{- end }}
+{{ toYaml .Values.operator.seccompProfile | trim | indent 14 }}
+{{- end }}
+{{- if .Values.imagePullPolicy }}
+          imagePullPolicy: {{ .Values.imagePullPolicy }}
+{{- end }}
           resources:
 {{ toYaml .Values.operator.resources | trim | indent 12 }}
           env:

chart/values.yaml

@@ -16,7 +16,7 @@ imagePullSecrets: []
 
 # Specify image pull policy if default behavior isn't desired.
 # Default behavior: latest images will be Always else IfNotPresent.
-imagePullPolicy: IfNotPresent
+imagePullPolicy: ""
 
 # Used to replace istioNamespace to support operator watch multiple namespaces.
 watchedNamespaces: istio-system
@@ -43,6 +43,8 @@ operator:
     requests:
       cpu: 200m
       memory: 256Mi
+  # Set to `type: RuntimeDefault` to use the default profile if available.
+  seccompProfile: {}
 
 # Node labels for pod assignment
 nodeSelector: {}