feeds: image v5.7.0 update (#229)

.github/workflows/test.yaml

@@ -13,7 +13,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        kubernetesVersion: ["v1.24.17", "v1.25.16", "v1.26.14", "v1.27.11", "v1.28.7", "v1.29.2"]
+        kubernetesVersion: ["v1.24.17", "v1.25.16", "v1.26.14", "v1.27.11", "v1.28.7", "v1.29.2", "v1.30.0"]
     runs-on: ubuntu-latest
     steps:
     - name: Checkout

stable/feeds/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
 name: feeds
 type: application
-version: "2.6.0"
-appVersion: "5.6.0"
-kubeVersion: 1.23.x - 1.27.x || 1.23.x-x - 1.29.x-x
+version: "2.7.0"
+appVersion: "5.7.0"
+kubeVersion: 1.23.x - 1.30.x || 1.23.x-x - 1.30.x-x
 description: Anchore feeds service
 keywords:
   - "anchore"

stable/feeds/README.md

@@ -89,7 +89,8 @@ helm install feedsy anchore/feeds \
   --set securityContext.runAsGroup=null \
   --set securityContext.runAsUser=null \
   --set feeds-db.primary.containerSecurityContext.enabled=false \
-  --set feeds-db.primary.podSecurityContext.enabled=false
+  --set feeds-db.primary.podSecurityContext.enabled=false \
+  --set feeds-db.volumePermissions.enabled=true
 ```
 
 #### Example OpenShift values file
@@ -107,6 +108,8 @@ feeds-db:
       enabled: false
     podSecurityContext:
       enabled: false
+  volumePermissions:
+    enabled: true
 ```
 
 ## Upgrading the Chart
@@ -313,7 +316,7 @@ anchoreConfig:
 | `url`                                   | Set a custom feeds URL. Useful when using a feeds service endpoint that is external from the cluster. | `""`                                  |
 | `fullnameOverride`                      | overrides the fullname set on resources                                                               | `""`                                  |
 | `nameOverride`                          | overrides the name set on resources                                                                   | `""`                                  |
-| `image`                                 | Image used for feeds deployment                                                                       | `docker.io/anchore/enterprise:v5.6.0` |
+| `image`                                 | Image used for feeds deployment                                                                       | `docker.io/anchore/enterprise:v5.7.0` |
 | `imagePullPolicy`                       | Image pull policy used by all deployments                                                             | `IfNotPresent`                        |
 | `imagePullSecretName`                   | Name of Docker credentials secret for access to private repos                                         | `anchore-enterprise-pullcreds`        |
 | `serviceAccountName`                    | Name of a service account used to run all Feeds pods                                                  | `""`                                  |
@@ -502,6 +505,10 @@ For the latest updates and features in Anchore Enterprise, see the official [Rel
 - **Minor Chart Version Change (e.g., v0.1.2 -> v0.2.0)**: Indicates a significant change to the deployment that does not require manual intervention.
 - **Patch Chart Version Change (e.g., v0.1.2 -> v0.1.3)**: Indicates a backwards-compatible bug fix or documentation update.
 
+### v2.7.x
+
+- Update Anchore Feeds image to v5.7.0. See the [Release Notes](https://docs.anchore.com/current/docs/releasenotes/570/) for more information.
+
 ### v2.6.x
 
 - Update Anchore Feeds image to v5.6.0. See the [Release Notes](https://docs.anchore.com/current/docs/releasenotes/560/) for more information.

stable/feeds/templates/envvars_configmap.yaml

@@ -56,7 +56,7 @@ data:
   ANCHORE_FEEDS_DRIVER_WOLFI_ENABLED: "true"
   ANCHORE_FEEDS_EXTERNAL_URL: "{{ template "feeds.setGrypeProviderURL" . }}"
   ANCHORE_FEEDS_LOCAL_WORKSPACE: "{{ .Values.persistence.mountPath }}"
-  ANCHORE_FEEDS_GRYPEDB_PRELOAD_ENABLED: "true"
+  ANCHORE_FEEDS_GRYPEDB_PRELOAD_ENABLED: "false"
   ANCHORE_FEEDS_GRYPEDB_PRELOAD_PATH: "/preload/grype-db-workspace.tar.gz"
   ANCHORE_FEEDS_GRYPEDB_PERSIST_WORKSPACE: "true"
   ANCHORE_FEEDS_GRYPEDB_RESTORE_WORKSPACE: "true"

stable/feeds/tests/__snapshot__/configmap_test.yaml.snap

@@ -245,7 +245,7 @@ should render the configmaps:
       ANCHORE_FEEDS_DRIVER_WOLFI_ENABLED: "true"
       ANCHORE_FEEDS_EXTERNAL_URL: http://test-release-feeds:8448/v2/
       ANCHORE_FEEDS_GRYPEDB_PERSIST_WORKSPACE: "true"
-      ANCHORE_FEEDS_GRYPEDB_PRELOAD_ENABLED: "true"
+      ANCHORE_FEEDS_GRYPEDB_PRELOAD_ENABLED: "false"
       ANCHORE_FEEDS_GRYPEDB_PRELOAD_PATH: /preload/grype-db-workspace.tar.gz
       ANCHORE_FEEDS_GRYPEDB_RESTORE_WORKSPACE: "true"
       ANCHORE_FEEDS_LOCAL_WORKSPACE: /workspace

stable/feeds/tests/__snapshot__/prehook_upgrade_resources_test.yaml.snap

@@ -143,6 +143,6 @@ should render proper initContainers:
           value: test-release-feeds.test-namespace.svc.cluster.local
         - name: ANCHORE_PORT
           value: "8448"
-      image: docker.io/anchore/enterprise:v5.6.0
+      image: docker.io/anchore/enterprise:v5.7.0
       imagePullPolicy: IfNotPresent
       name: wait-for-db

stable/feeds/values.yaml

@@ -21,7 +21,7 @@ nameOverride: ""
 
 ## @param image Image used for feeds deployment
 ##
-image: docker.io/anchore/enterprise:v5.6.0
+image: docker.io/anchore/enterprise:v5.7.0
 
 ## @param imagePullPolicy Image pull policy used by all deployments
 ## ref: https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy