Skip to content

Commit 2914a1a

Browse files
kartik-579prakarsh-dtjatin-jangir-0220jatin-jangirpawan-mehta-dt
authored
Oss sync : 4f731fc33 (#102)
* release: PR for v0.6.14 (#3194) * Updated release-notes files * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * Updated release notes * chore: Security Context for pods and container in chart/devtron and manifest/yaml (#3193) * Added changes for securityContext * change position of global * Update devtron-bom.yaml --------- Co-authored-by: jatin jangir <[email protected]> * Updated latest image of ci-runner in installer * Updated latest image of git-sensor in installer * Updated latest image of kubewatch in installer * Updated latest image of lens in installer * Updated latest image of git-sensor in installer * Updated latest image of lens in installer * Updated latest image of image-scanner in installer * Updated latest image of kubelink in installer * Updated latest image of devtron in installer * Updated latest image of hyperion in installer * Updated latest image of authenticator in installer * Updated latest image of dashboard in installer * Removed securityContext from casbin initContainer * Updated latest image of inception in installer * Update Chart.yaml * Update devtron-bom.yaml * Update devtron-installer.yaml * Update installation-script * Updated latest image of chart-sync in installer * Updated latest image of migrator in installer * Update migrator.yaml * Update values.yaml * Update devtron-bom.yaml * Updated securityContext in initContainer of casbin * Update migrator.yaml * Updated release-notes files * Fixed security context for inception * Added initcontainer to chown permissions * Updated release-notes files * Update release-notes-v0.6.14.md * Update releasenotes.md * enable application groups --------- Co-authored-by: jatin-jangir-0220 <[email protected]> Co-authored-by: jatin jangir <[email protected]> Co-authored-by: pawan-mehta-dt <[email protected]> * fix - handled nil pointer access, fixed not null constraint for material deletion (#3199) --------- Co-authored-by: Prakarsh <[email protected]> Co-authored-by: jatin-jangir-0220 <[email protected]> Co-authored-by: jatin jangir <[email protected]> Co-authored-by: pawan-mehta-dt <[email protected]>
1 parent c9fa434 commit 2914a1a

29 files changed

+413
-61
lines changed

‎CHANGELOG/release-notes-v0.6.14.md‎

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
## v0.6.14
2+
3+
## Bugs
4+
- fix: scale workloads for helm app created on Devtron (#3131)
5+
- fix: select image not working for external webhook (#3187)
6+
- fix: eks nodegroup label added (#3184)
7+
- fix:http status fix for access to jobs (#3176)
8+
- fix:wire issue fixed (#3179)
9+
- fix:notes.txt throws error when charts require special KubeVersion (#3170)
10+
- fix: Gitops validate and update with empty token (#3168)
11+
- fix:Manifest output throws error when charts require special KubeVersion (#3162)
12+
- fix: onlyDevtronCharts flag changed type from boolean to integer (#3161)
13+
- fix: Optimize app grouping apis (#3125)
14+
- fix: log api panic (#3156)
15+
- fix: kubernetes external secret not accessible (#3143)
16+
- fix: apps in progressing state indefinitely (#3137)
17+
- fix: ci artifacts not coming for linked CI pipeline (#3134)
18+
- fix: Helm repository deleted from argocd-cm when deleted from UI (Github Issue #1399) (#2970)
19+
- fix: pg prom metrics not getting exported when pg query logging is disabled (#3124)
20+
- fix: Send webhook data(source value and source type) in pipeline api response (#3120)
21+
- fix: updated condition for adding kubectl apply synced timeline (#3115)
22+
- fix: json unmarshal panic error temperory fix. (#3095)
23+
- fix: added otel for deployment history info api (#3107)
24+
- fix:showing right image imagetags in multiplecolons in registry url (#3103)
25+
- fix: cd metrics nil ptr fix (#3099)
26+
- fix: getting all environmets for super admin only (#3096)
27+
- fix: logs issue for init containers (#3076)
28+
- fix: pod resources not visible even if user have access on those pods. (#3071)
29+
- fix: unable to create container registry with deleted name (#2963)
30+
- fix: helm app deployment failure (#3060)
31+
- fix: logs file path issue fix and docker file update for non root user (#3024)
32+
- fix: urls pipeline fetching bug fix (#3063)
33+
- fix: app grouping appid appname (#3058)
34+
## Enhancements
35+
- feat:migration files for notes.txt (#3192)
36+
- feat:store notes.txt in db and fetch from db (#3183)
37+
- feat: Add timer telemetry for App List (#3185)
38+
- feat:Sorting applist according to deployed time (#3108)
39+
- feat:git material source type editable (#3015)
40+
- feat: Using server url in application object (#3175)
41+
- feat: Add timer/counter telemetry for GitOps (#3119)
42+
- feat: show notes txt for helmapps deployed by helm (#2966)
43+
- feat: enable auto deployment trigger option after deployment app change (#3110)
44+
- feat: jobs feature (#3074)
45+
- feat: Disabling global secrets for application environment. (#3126)
46+
- feat: Review config changes before deployment (#3077)
47+
- feat: global secrets for pre/post cd (#3073)
48+
- feat: export pg query metrics to prometheus (#3118)
49+
- feat: Add timer/counter telemetry for CI process (#3081)
50+
- feat: Git, GitOps, Container Registries and SSO login token hide from dashboard (#2952)
51+
- feat:show notes for gitops app (#3082)
52+
- feat: autoselect node,error messaging improvement , node group and custom shell support (#2925)
53+
- feat: Option to run post-ci scripts even if build fails (#3065)
54+
- feat: branch name field added in API response for a cd Artifact material (#3064)
55+
- feat: github PR updater plugin added (#3051)
56+
## Documentation
57+
- docs: added jobs section (#3097)
58+
- docs: added K8s client doc (#3028)
59+
- docs: doc for GCP external secret (#3029)
60+
## Others
61+
- chore: ADO sync action changes (#3167)
62+
- chore: Enterprise repo sync (#3146)
63+
- chore: version upgrade of github action (ado-sync) (#3160)
64+
- chore: ado-sync workflow (#3153)
65+
- chore: ado-sync workflow changes (#3151)
66+
- chore: ADO-sync github action changes (#3149)
67+
- chore: Helm lint mechanism and azure ADO sync github action (#3138)
68+
- chore: enterprise-repo-sync.yaml (#3127)
69+
- task: restricted deployment status updation cron to fetch pipelines deployed within hours (#3104)
70+
- chore: upgrade common-lib dependency (#3052)
71+
- feat - Use cluster-name instead of server url in Argo cd application objects (#2958)
72+
73+

‎api/restHandler/app/BuildPipelineRestHandler.go‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -277,12 +277,14 @@ func (handler PipelineConfigRestHandlerImpl) PatchCiPipelines(w http.ResponseWri
277277
}
278278

279279
createResp, err := handler.pipelineBuilder.PatchCiPipeline(&patchRequest)
280-
createResp.AppName = app.AppName
281280
if err != nil {
282281
handler.Logger.Errorw("service err, PatchCiPipelines", "err", err, "PatchCiPipelines", patchRequest)
283282
common.WriteJsonResp(w, err, nil, http.StatusInternalServerError)
284283
return
285284
}
285+
if createResp != nil && app != nil {
286+
createResp.AppName = app.AppName
287+
}
286288
common.WriteJsonResp(w, err, createResp, http.StatusOK)
287289
}
288290

‎charts/devtron/Chart.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
apiVersion: v2
22
name: devtron-operator
3-
appVersion: 0.6.13
3+
appVersion: 0.6.14
44
description: Chart to configure and install Devtron. Devtron is a Kubernetes Orchestration system.
55
keywords:
66
- Devtron
@@ -11,7 +11,7 @@ keywords:
1111
- argocd
1212
- Hyperion
1313
engine: gotpl
14-
version: 0.22.51
14+
version: 0.22.52
1515
sources:
1616
- https://github.com/devtron-labs/charts
1717
dependencies:

‎charts/devtron/devtron-bom.yaml‎

Lines changed: 24 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,33 +1,43 @@
1+
global:
2+
podSecurityContext:
3+
fsGroup: 1000
4+
runAsGroup: 1000
5+
runAsUser: 1000
6+
containerSecurityContext:
7+
allowPrivilegeEscalation: false
8+
runAsUser: 1000
9+
runAsNonRoot: true
10+
111
installer:
2-
release: "v0.6.13"
12+
release: "v0.6.14"
313
image: "quay.io/devtron/inception"
4-
tag: "1d2b87e5-185-11095"
14+
tag: "44b30917-185-13275"
515

616
components:
717
dashboard:
8-
image: "quay.io/devtron/dashboard:de186b14-325-12876"
18+
image: "quay.io/devtron/dashboard:be354866-325-13271"
919
devtron:
10-
image: "quay.io/devtron/hyperion:e3c5a3a2-280-12878"
11-
cicdImage: "quay.io/devtron/devtron:e3c5a3a2-434-12877"
20+
image: "quay.io/devtron/hyperion:85c4a6d7-280-13270"
21+
cicdImage: "quay.io/devtron/devtron:85c4a6d7-434-13269"
1222
argocdDexServer:
13-
image: "ghcr.io/dexidp/dex:v2.35.3"
23+
image: "ghcr.io/dexidp/dex:v2.30.2"
1424
initContainer:
15-
authenticator: "quay.io/devtron/authenticator:6e466830-393-11943"
25+
authenticator: "quay.io/devtron/authenticator:e414faff-393-13273"
1626
kubelink:
17-
image: "quay.io/devtron/kubelink:a5e179d4-318-12564"
27+
image: "quay.io/devtron/kubelink:d2406e8a-318-13263"
1828
postgres:
1929
image: "quay.io/devtron/postgres:11.9.0-debian-10-r26"
2030
armImage: "quay.io/devtron/postgres:11.9"
2131

2232
migrator:
23-
image: "quay.io/devtron/migrator:71748de9-149-11112"
33+
image: "quay.io/devtron/migrator:ec1dcab8-149-13278"
2434
envVars:
2535
devtron:
2636
GIT_BRANCH: "main"
27-
GIT_HASH: "e3c5a3a2893f7e00b9cb482abe2ac76f5038de13"
37+
GIT_HASH: "85c4a6d76492f9a1cc45360dd910f03fabac1b13"
2838
casbin:
2939
GIT_BRANCH: "main"
30-
GIT_HASH: "e3c5a3a2893f7e00b9cb482abe2ac76f5038de13"
40+
GIT_HASH: "85c4a6d76492f9a1cc45360dd910f03fabac1b13"
3141

3242
argo-cd:
3343
global:
@@ -36,5 +46,8 @@ argo-cd:
3646
tag: "v2.5.2"
3747
imagePullPolicy: IfNotPresent
3848

49+
security:
50+
image: "quay.io/devtron/image-scanner:b7873c95-334-13266"
51+
3952
notifier:
4053
image: "quay.io/devtron/notifier:6c7a356a-372-11107"

‎charts/devtron/templates/app-sync-job.yaml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,9 +25,17 @@ spec:
2525
{{- end }}
2626
{{- end }}
2727
{{- end }}
28+
{{- if and $.Values.global $.Values.global.podSecurityContext }}
29+
securityContext:
30+
{{- toYaml $.Values.global.podSecurityContext | nindent 8 }}
31+
{{- end }}
2832
containers:
2933
- name: chart-sync
30-
image: quay.io/devtron/chart-sync:07ac8fd7-150-11120
34+
image: quay.io/devtron/chart-sync:6bdaa674-150-13276
35+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
36+
securityContext:
37+
{{- toYaml $.Values.global.containerSecurityContext | nindent 10 }}
38+
{{- end }}
3139
env:
3240
- name: PG_ADDR
3341
value: postgresql-postgresql.devtroncd
@@ -66,9 +74,17 @@ spec:
6674
spec:
6775
template:
6876
spec:
77+
{{- if and $.Values.global $.Values.global.podSecurityContext }}
78+
securityContext:
79+
{{- toYaml $.Values.global.podSecurityContext | nindent 12 }}
80+
{{- end }}
6981
containers:
7082
- name: chart-sync
71-
image: quay.io/devtron/chart-sync:07ac8fd7-150-11120
83+
image: quay.io/devtron/chart-sync:6bdaa674-150-13276
84+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
85+
securityContext:
86+
{{- toYaml $.Values.global.containerSecurityContext | nindent 14 }}
87+
{{- end }}
7288
env:
7389
- name: PG_ADDR
7490
value: postgresql-postgresql.devtroncd

‎charts/devtron/templates/dashboard.yaml‎

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ data:
2424
SENTRY_ENABLED: {{ .config.sentry | default "false" | quote }}
2525
SENTRY_ENV: {{ .config.sentryEnv | default "PRODUCTION" | quote }}
2626
APPLICATION_METRICS_ENABLED: {{ .config.applicationMetrics | default "true" | quote }}
27+
HIDE_APPLICATION_GROUPS: {{ .config.hideApplicationGroups | default "false" | quote }}
2728
{{- end }}
2829
---
2930
apiVersion: v1
@@ -69,13 +70,21 @@ spec:
6970
spec:
7071
terminationGracePeriodSeconds: 30
7172
restartPolicy: Always
73+
{{- if and $.Values.global $.Values.global.podSecurityContext }}
74+
securityContext:
75+
{{- toYaml $.Values.global.podSecurityContext | nindent 8 }}
76+
{{- end }}
7277
containers:
7378
- name: dashboard
7479
image: {{ .image }}
7580
imagePullPolicy: {{ .imagePullPolicy }}
81+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
82+
securityContext:
83+
{{- toYaml $.Values.global.containerSecurityContext | nindent 12 }}
84+
{{- end }}
7685
ports:
7786
- name: app
78-
containerPort: 80
87+
containerPort: 8080
7988
protocol: TCP
8089
env:
8190
- name: DEVTRON_APP_NAME

‎charts/devtron/templates/devtron.yaml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,10 @@ spec:
9797
terminationGracePeriodSeconds: 30
9898
restartPolicy: Always
9999
serviceAccountName: devtron
100+
{{- if and $.Values.global $.Values.global.podSecurityContext }}
101+
securityContext:
102+
{{- toYaml $.Values.global.podSecurityContext | nindent 8 }}
103+
{{- end }}
100104
containers:
101105
- name: devtron
102106
{{- if $.Values.installer.modules }}
@@ -109,6 +113,10 @@ spec:
109113
image: {{ $.Values.components.devtron.image }}
110114
{{- end }}
111115
imagePullPolicy: {{ .imagePullPolicy }}
116+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
117+
securityContext:
118+
{{- toYaml $.Values.global.containerSecurityContext | nindent 12 }}
119+
{{- end }}
112120
lifecycle:
113121
preStop:
114122
exec:

‎charts/devtron/templates/dex.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -68,13 +68,21 @@ spec:
6868
app.kubernetes.io/part-of: argocd
6969
topologyKey: kubernetes.io/hostname
7070
weight: 5
71+
{{- if and $.Values.global $.Values.global.podSecurityContext }}
72+
securityContext:
73+
{{- toYaml $.Values.global.podSecurityContext | nindent 8 }}
74+
{{- end }}
7175
containers:
7276
- command:
7377
- /shared/authenticator
7478
- rundex
7579
image: {{ .image }}
7680
imagePullPolicy: {{ .imagePullPolicy }}
7781
name: dex
82+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
83+
securityContext:
84+
{{- toYaml $.Values.global.containerSecurityContext | nindent 10 }}
85+
{{- end }}
7886
ports:
7987
- containerPort: 5556
8088
- containerPort: 5557
@@ -95,6 +103,10 @@ spec:
95103
image: {{ .initContainer.authenticator }}
96104
imagePullPolicy: IfNotPresent
97105
name: copyutil
106+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
107+
securityContext:
108+
{{- toYaml $.Values.global.containerSecurityContext | nindent 10 }}
109+
{{- end }}
98110
volumeMounts:
99111
- mountPath: /shared
100112
name: static-files

‎charts/devtron/templates/install.yaml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,10 @@ spec:
8080
labels:
8181
app: inception
8282
spec:
83+
{{- if and $.Values.global $.Values.global.podSecurityContext }}
84+
securityContext:
85+
{{- toYaml $.Values.global.podSecurityContext | nindent 8 }}
86+
{{- end }}
8387
containers:
8488
-
8589
{{- if $.Values.installer.tag }}
@@ -89,6 +93,10 @@ spec:
8993
{{- end }}
9094
imagePullPolicy: IfNotPresent
9195
name: inception
96+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
97+
securityContext:
98+
{{- toYaml $.Values.global.containerSecurityContext | nindent 12 }}
99+
{{- end }}
92100
ports:
93101
-
94102
containerPort: 8080

‎charts/devtron/templates/kubelink.yaml‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,18 @@ spec:
2222
terminationGracePeriodSeconds: 30
2323
restartPolicy: Always
2424
serviceAccount: devtron
25+
{{- if and $.Values.global $.Values.global.podSecurityContext }}
26+
securityContext:
27+
{{- toYaml $.Values.global.podSecurityContext | nindent 8 }}
28+
{{- end }}
2529
containers:
2630
- name: kubelink
2731
image: {{ .image }}
2832
imagePullPolicy: {{ .imagePullPolicy }}
33+
{{- if and $.Values.global $.Values.global.containerSecurityContext }}
34+
securityContext:
35+
{{- toYaml $.Values.global.containerSecurityContext | nindent 12 }}
36+
{{- end }}
2937
ports:
3038
- name: app
3139
containerPort: 50051
@@ -62,4 +70,4 @@ spec:
6270
app: kubelink
6371
sessionAffinity: None
6472
type: ClusterIP
65-
{{- end }}
73+
{{- end }}

0 commit comments

Comments
 (0)