update redis

CHANGELOG.md

@@ -7,6 +7,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ## [1.13.0-bb.5]
 ### Changed
 - updated bb-test-lib dependency to gluon
+- updated Redis dependency to `14.1.0-bb.3` to resolve OPA Gatekeeper violations
 
 ## [1.13.0-bb.4]
 ### Fixed

chart/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 1.0.1
 - name: redis
   repository: file://./deps/redis
-  version: 14.1.0-bb.2
+  version: 14.1.0-bb.3
 - name: gluon
   repository: file://./deps/gluon
   version: 0.2.3
-digest: sha256:3183ed9ea355aa741d2742dbd30ffa1e1be57abbaa2efcef77361d82d6f09c97
-generated: "2021-08-12T12:56:11.468072-04:00"
+digest: sha256:b19e1b838f724aa412b23a4280cffbb93cd7d313c0ec0218cff90c5da8e328b4
+generated: "2021-08-16T13:05:01.510081-04:00"

chart/Chart.yaml

@@ -33,7 +33,7 @@ dependencies:
    condition: anchore-feeds-db.enabled,anchoreEnterpriseGlobal.enabled
    alias: anchore-feeds-db
  - name: redis
-   version: "14.1.0-bb.2"
+   version: "14.1.0-bb.3"
    repository: "file://./deps/redis"
    condition: anchore-ui-redis.enabled,anchoreEnterpriseGlobal.enabled
    alias: anchore-ui-redis

chart/deps/redis/Chart.yaml

@@ -25,4 +25,4 @@ name: redis
 sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
-version: 14.1.0-bb.2
+version: 14.1.0-bb.3

chart/deps/redis/Kptfile

@@ -5,7 +5,7 @@ metadata:
 upstream:
   type: git
   git:
-    commit: ca398b827ba384da78213d9b2f21abf83a9eea8a
+    commit: 4f50d9ece5d5c6e4d5d25e7457cba67295b73b13
     repo: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/redis
     directory: /chart
-    ref: 14.1.0-bb.2
+    ref: container-resources

chart/deps/redis/templates/bigbang/redis-upgrade.yaml

@@ -124,4 +124,15 @@ spec:
                 echo "No PVCs to clean up."
               fi
               echo "Done with upgrade steps."
+          {{- if .Values.cleanUpgrade.resources }}
+          resources: {{- toYaml .Values.cleanUpgrade.resources | nindent 12 }}
+          {{- else }}
+          resources:
+            requests:
+              memory: 256Mi
+              cpu: 100m
+            limits:
+              memory: 256Mi
+              cpu: 100m
+          {{- end }}
 {{- end }}

chart/deps/redis/values.yaml

@@ -23,6 +23,13 @@ monitoring:
 cleanUpgrade:
   enabled: true
   image: "registry1.dso.mil/ironbank/big-bang/base:8.4"
+  resources:
+    requests:
+      memory: 256Mi
+      cpu: 100m
+    limits:
+      memory: 256Mi
+      cpu: 100m
 
 # NOTE: We default this to true in case packages consuming Redis forget to turn it on and have API traffic blocked
 networkPolicies:
@@ -879,8 +886,12 @@ sentinel:
   ## @param sentinel.resources.requests The requested resources for the Redis(TM) Sentinel containers
   ##
   resources:
-    limits: {}
-    requests: {}
+    requests:
+      memory: 256Mi
+      cpu: 100m
+    limits:
+      memory: 256Mi
+      cpu: 100m
   ## Configure Container Security Context
   ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
   ## @param sentinel.containerSecurityContext.enabled Enabled Redis(TM) Sentinel containers' Security Context
@@ -1123,8 +1134,12 @@ metrics:
   ## @param metrics.resources.requests The requested resources for the Redis(TM) exporter container
   ##
   resources:
-    limits: {}
-    requests: {}
+    requests:
+      memory: 256Mi
+      cpu: 100m
+    limits:
+      memory: 256Mi
+      cpu: 100m
   ## @param metrics.podLabels Extra labels for Redis(TM) exporter pods
   ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
   ##
@@ -1209,8 +1224,12 @@ metrics:
     ## @param metrics.sentinel.resources.requests The requested resources for the Redis(TM) Sentinel exporter container
     ##
     resources:
-      limits: {}
-      requests: {}
+      requests:
+        memory: 256Mi
+        cpu: 100m
+      limits:
+        memory: 256Mi
+        cpu: 100m
     ## Redis(TM) Sentinel exporter service parameters
     ##
     service:
@@ -1364,8 +1383,12 @@ volumePermissions:
   ## @param volumePermissions.resources.requests The requested resources for the init container
   ##
   resources:
-    limits: {}
-    requests: {}
+    requests:
+      memory: 256Mi
+      cpu: 100m
+    limits:
+      memory: 256Mi
+      cpu: 100m
   ## Init container Container Security Context
   ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
   ## @param volumePermissions.containerSecurityContext.runAsUser Set init container's Security Context runAsUser
@@ -1416,5 +1439,9 @@ sysctl:
   ## @param sysctl.resources.requests The requested resources for the init container
   ##
   resources:
-    limits: {}
-    requests: {}
+    requests:
+      memory: 256Mi
+      cpu: 100m
+    limits:
+      memory: 256Mi
+      cpu: 100m