From b0dd5f9b335ca0b617a7407c5b83f39290dcb339 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 13 Aug 2024 11:46:14 +1000 Subject: [PATCH] Prepare release 1.21.0 (#859) Co-authored-by: yzha645 --- src/main/charts/bamboo-agent/Changelog.md | 11 + src/main/charts/bamboo-agent/Chart.yaml | 5 +- src/main/charts/bamboo-agent/README.md | 4 +- src/main/charts/bamboo/Changelog.md | 19 ++ src/main/charts/bamboo/Chart.yaml | 14 +- src/main/charts/bamboo/README.md | 5 +- src/main/charts/bitbucket/Changelog.md | 18 ++ src/main/charts/bitbucket/Chart.yaml | 12 +- src/main/charts/bitbucket/README.md | 6 +- src/main/charts/confluence/Changelog.md | 19 ++ src/main/charts/confluence/Chart.yaml | 14 +- src/main/charts/confluence/README.md | 6 +- src/main/charts/crowd/Changelog.md | 18 ++ src/main/charts/crowd/Chart.yaml | 13 +- src/main/charts/crowd/README.md | 5 +- src/main/charts/jira/Changelog.md | 20 ++ src/main/charts/jira/Chart.yaml | 15 +- src/main/charts/jira/README.md | 5 +- .../bamboo-agent/output.yaml | 8 +- .../expected_helm_output/bamboo/output.yaml | 22 +- .../bitbucket/output.yaml | 240 ++++++++++++++++-- .../confluence/output.yaml | 233 ++++++++++++++++- .../expected_helm_output/crowd/output.yaml | 20 +- .../expected_helm_output/jira/output.yaml | 20 +- 24 files changed, 660 insertions(+), 92 deletions(-) diff --git a/src/main/charts/bamboo-agent/Changelog.md b/src/main/charts/bamboo-agent/Changelog.md index 7c6e05c28..6a0c387b6 100644 --- a/src/main/charts/bamboo-agent/Changelog.md +++ b/src/main/charts/bamboo-agent/Changelog.md @@ -12,6 +12,17 @@ * Update appVersions for DC apps (#762) * Added pvc retention policy to Bitbucket Mesh StatefulSet (#755) +## 1.21.0 + +**Release date:** 2024-8-13 + +![AppVersion: 9.6.4](https://img.shields.io/static/v1?label=AppVersion&message=9.6.4&color=success&logo=) +![Kubernetes: >=1.21.x-0](https://img.shields.io/static/v1?label=Kubernetes&message=>=1.21.x-0&color=informational&logo=kubernetes) +![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm) + +* Update appVersions for DC apps (#858) +* Make shared home pvc access mode configurable (#855) + ## 1.20.1 **Release date:** 2024-7-7 diff --git a/src/main/charts/bamboo-agent/Chart.yaml b/src/main/charts/bamboo-agent/Chart.yaml index 3ed822b26..90f0296c6 100644 --- a/src/main/charts/bamboo-agent/Chart.yaml +++ b/src/main/charts/bamboo-agent/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: bamboo-agent description: A chart for installing Bamboo Data Center remote agents on Kubernetes type: application -version: '1.20.1' +version: '1.21.0' appVersion: 9.6.4 kubeVersion: ">=1.21.x-0" keywords: @@ -20,7 +20,8 @@ deprecated: false annotations: artifacthub.io/containsSecurityUpdates: "false" artifacthub.io/changes: |- - - "Update appVersions for DC apps (#823)" + - "Update appVersions for DC apps (#858)" + - "Make shared home pvc access mode configurable (#855)" dependencies: - name: common version: 1.2.6 diff --git a/src/main/charts/bamboo-agent/README.md b/src/main/charts/bamboo-agent/README.md index be1f4325d..d9ae01416 100644 --- a/src/main/charts/bamboo-agent/README.md +++ b/src/main/charts/bamboo-agent/README.md @@ -1,6 +1,6 @@ # bamboo-agent -![Version: 1.20.1](https://img.shields.io/badge/Version-1.20.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.6.4](https://img.shields.io/badge/AppVersion-9.6.4-informational?style=flat-square) +![Version: 1.21.0](https://img.shields.io/badge/Version-1.21.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.6.4](https://img.shields.io/badge/AppVersion-9.6.4-informational?style=flat-square) A chart for installing Bamboo Data Center remote agents on Kubernetes @@ -72,4 +72,4 @@ Kubernetes: `>=1.21.x-0` | volumes | object | `{"additional":null}` | Defines additional volumes that should be applied to all Bamboo agent pods. Note that this will not create any corresponding volume mounts which need to be defined in bamboo.additionalVolumeMounts | ---------------------------------------------- -Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0) +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/src/main/charts/bamboo/Changelog.md b/src/main/charts/bamboo/Changelog.md index 6b2fa215f..cbd2b8102 100644 --- a/src/main/charts/bamboo/Changelog.md +++ b/src/main/charts/bamboo/Changelog.md @@ -15,6 +15,25 @@ * Relabel instance name on jmx service monitor (#757) * Added pvc retention policy to Bitbucket Mesh StatefulSet (#755) +## 1.21.0 + +**Release date:** 2024-8-13 + +![AppVersion: 9.6.4](https://img.shields.io/static/v1?label=AppVersion&message=9.6.4&color=success&logo=) +![Kubernetes: >=1.21.x-0](https://img.shields.io/static/v1?label=Kubernetes&message=>=1.21.x-0&color=informational&logo=kubernetes) +![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm) + +* Added annotations to the StatefulSets (#857) +* Update appVersions for DC apps (#858) +* Make shared home pvc access mode configurable (#855) +* Allow referencing multiple secrets in additionalCertificates (#852) +* Make it possible to define resources for import-certs init container (#851) +* Move update strategy to root level (#849) +* Add helm value for custom jmx jar location when using other jmx init container images (#846) +* feat: add appProtocol for service meshes (#847) +* Make StatefulSet updateStrategy configurable (#845) +* Fix default for acceptCount (#832) + ## 1.20.1 **Release date:** 2024-7-7 diff --git a/src/main/charts/bamboo/Chart.yaml b/src/main/charts/bamboo/Chart.yaml index 2cfb3112e..e9be68613 100644 --- a/src/main/charts/bamboo/Chart.yaml +++ b/src/main/charts/bamboo/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: bamboo description: A chart for installing Bamboo Data Center on Kubernetes type: application -version: '1.20.1' +version: '1.21.0' appVersion: 9.6.4 kubeVersion: ">=1.21.x-0" keywords: @@ -20,8 +20,16 @@ deprecated: false annotations: artifacthub.io/containsSecurityUpdates: "false" artifacthub.io/changes: |- - - "Make it possible to override proxy settings (#822)" - - "Update appVersions for DC apps (#823)" + - "Added annotations to the StatefulSets (#857)" + - "Update appVersions for DC apps (#858)" + - "Make shared home pvc access mode configurable (#855)" + - "Allow referencing multiple secrets in additionalCertificates (#852)" + - "Make it possible to define resources for import-certs init container (#851)" + - "Move update strategy to root level (#849)" + - "Add helm value for custom jmx jar location when using other jmx init container images (#846)" + - "feat: add appProtocol for service meshes (#847)" + - "Make StatefulSet updateStrategy configurable (#845)" + - "Fix default for acceptCount (#832)" dependencies: - name: common version: 1.2.6 diff --git a/src/main/charts/bamboo/README.md b/src/main/charts/bamboo/README.md index ed1f94109..9faa07c3e 100644 --- a/src/main/charts/bamboo/README.md +++ b/src/main/charts/bamboo/README.md @@ -1,6 +1,6 @@ # bamboo -![Version: 1.20.1](https://img.shields.io/badge/Version-1.20.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.6.4](https://img.shields.io/badge/AppVersion-9.6.4-informational?style=flat-square) +![Version: 1.21.0](https://img.shields.io/badge/Version-1.21.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.6.4](https://img.shields.io/badge/AppVersion-9.6.4-informational?style=flat-square) A chart for installing Bamboo Data Center on Kubernetes @@ -33,6 +33,7 @@ Kubernetes: `>=1.21.x-0` | atlassianAnalyticsAndSupport.helmValues.enabled | bool | `true` | Mount ConfigMap with selected Helm chart values as a YAML file which can be optionally including to support.zip | | bamboo.accessLog.localHomeSubPath | string | `"log"` | The subdirectory within the local-home volume where access logs should be stored. | | bamboo.accessLog.mountPath | string | `"/opt/atlassian/bamboo/logs"` | The path within the Bamboo container where the local-home volume should be mounted in order to capture access logs. | +| bamboo.additionalAnnotations | object | `{}` | Defines additional annotations to the Bamboo StateFulSet. This might be required when deploying using a GitOps approach | | bamboo.additionalBundledPlugins | list | `[]` | Specifies a list of additional Bamboo plugins that should be added to the Bamboo container. Note plugins installed via this method will appear as bundled plugins rather than user plugins. These should be specified in the same manner as the 'additionalLibraries' property. Additional details: https://atlassian.github.io/data-center-helm-charts/examples/external_libraries/EXTERNAL_LIBS/ NOTE: only .jar files can be loaded using this approach. OBR's can be extracted (unzipped) to access the associated .jar An alternative to this method is to install the plugins via "Manage Apps" in the product system administration UI. | | bamboo.additionalCertificates | object | `{"customCmd":null,"initContainer":{"resources":{}},"secretList":[],"secretName":null}` | Certificates to be added to Java truststore. Provide reference to a secret that contains the certificates | | bamboo.additionalCertificates.secretList | list | `[]` | A list of secrets with their respective keys holding certificates to be added to the Java truststore. It is mandatory to specify which keys from secret data need to be mounted as files to the init container. | @@ -205,4 +206,4 @@ Kubernetes: `>=1.21.x-0` | volumes.sharedHome.subPath | string | `nil` | Specifies the sub-directory of the shared-home volume that will be mounted in to the Bamboo container. | ---------------------------------------------- -Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0) +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/src/main/charts/bitbucket/Changelog.md b/src/main/charts/bitbucket/Changelog.md index 560b36b09..d5c6d5b24 100644 --- a/src/main/charts/bitbucket/Changelog.md +++ b/src/main/charts/bitbucket/Changelog.md @@ -15,6 +15,24 @@ * Relabel instance name on jmx service monitor (#757) * Added pvc retention policy to Bitbucket Mesh StatefulSet (#755) +## 1.21.0 + +**Release date:** 2024-8-13 + +![AppVersion: 8.19.6](https://img.shields.io/static/v1?label=AppVersion&message=8.19.6&color=success&logo=) +![Kubernetes: >=1.21.x-0](https://img.shields.io/static/v1?label=Kubernetes&message=>=1.21.x-0&color=informational&logo=kubernetes) +![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm) + +* Added annotations to the StatefulSets (#857) +* Update appVersions for DC apps (#858) +* Make shared home pvc access mode configurable (#855) +* Allow referencing multiple secrets in additionalCertificates (#852) +* Make it possible to define resources for import-certs init container (#851) +* Move update strategy to root level (#849) +* Add helm value for custom jmx jar location when using other jmx init container images (#846) +* feat: add appProtocol for service meshes (#847) +* Make StatefulSet updateStrategy configurable (#845) + ## 1.20.1 **Release date:** 2024-7-7 diff --git a/src/main/charts/bitbucket/Chart.yaml b/src/main/charts/bitbucket/Chart.yaml index 641ffcdb3..735c0ff01 100644 --- a/src/main/charts/bitbucket/Chart.yaml +++ b/src/main/charts/bitbucket/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: bitbucket description: A chart for installing Bitbucket Data Center on Kubernetes type: application -version: '1.20.1' +version: '1.21.0' appVersion: 8.19.6 kubeVersion: ">=1.21.x-0" keywords: @@ -20,7 +20,15 @@ deprecated: false annotations: artifacthub.io/containsSecurityUpdates: "false" artifacthub.io/changes: |- - - "Update appVersions for DC apps (#823)" + - "Added annotations to the StatefulSets (#857)" + - "Update appVersions for DC apps (#858)" + - "Make shared home pvc access mode configurable (#855)" + - "Allow referencing multiple secrets in additionalCertificates (#852)" + - "Make it possible to define resources for import-certs init container (#851)" + - "Move update strategy to root level (#849)" + - "Add helm value for custom jmx jar location when using other jmx init container images (#846)" + - "feat: add appProtocol for service meshes (#847)" + - "Make StatefulSet updateStrategy configurable (#845)" dependencies: - name: common diff --git a/src/main/charts/bitbucket/README.md b/src/main/charts/bitbucket/README.md index 39edb3ee6..5666e00df 100644 --- a/src/main/charts/bitbucket/README.md +++ b/src/main/charts/bitbucket/README.md @@ -1,6 +1,6 @@ # bitbucket -![Version: 1.20.1](https://img.shields.io/badge/Version-1.20.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 8.19.6](https://img.shields.io/badge/AppVersion-8.19.6-informational?style=flat-square) +![Version: 1.21.0](https://img.shields.io/badge/Version-1.21.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 8.19.6](https://img.shields.io/badge/AppVersion-8.19.6-informational?style=flat-square) A chart for installing Bitbucket Data Center on Kubernetes @@ -33,6 +33,7 @@ Kubernetes: `>=1.21.x-0` | affinity | object | `{}` | Standard Kubernetes affinities that will be applied to all Bitbucket pods Due to the performance requirements it is highly recommended running all Bitbucket pods in the same availability zone as your dedicated NFS server. To achieve this, you can define `affinity` and `podAffinity` rules that will place all pods into the same zone, and therefore minimise the real distance between the application pods and the shared storage. More specific documentation can be found in the official Affinity and Anti-affinity documentation: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#affinity-and-anti-affinity This is an example on how to ensure the pods are in the same zone as NFS server that is labeled with `role=nfs-server`: podAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: role operator: In values: - nfs-server # needs to be the same value as NFS server deployment topologyKey: topology.kubernetes.io/zone | | atlassianAnalyticsAndSupport.analytics.enabled | bool | `true` | Mount ConfigMap with selected Helm chart values as a JSON which DC products will read and send analytics events to Atlassian data pipelines | | atlassianAnalyticsAndSupport.helmValues.enabled | bool | `true` | Mount ConfigMap with selected Helm chart values as a YAML file which can be optionally including to support.zip | +| bitbucket.additionalAnnotations | object | `{}` | Defines additional annotations to the Bitbucket StateFulSet. This might be required when deploying using a GitOps approach | | bitbucket.additionalBundledPlugins | list | `[]` | Specifies a list of additional Bitbucket plugins that should be added to the Bitbucket container. Note plugins installed via this method will appear as bundled plugins rather than user plugins. These should be specified in the same manner as the 'additionalLibraries' property. Additional details: https://atlassian.github.io/data-center-helm-charts/examples/external_libraries/EXTERNAL_LIBS/ NOTE: only .jar files can be loaded using this approach. OBR's can be extracted (unzipped) to access the associated .jar An alternative to this method is to install the plugins via "Manage Apps" in the product system administration UI. | | bitbucket.additionalCertificates | object | `{"customCmd":null,"initContainer":{"resources":{}},"secretList":[],"secretName":null}` | Certificates to be added to Java truststore. Provide reference to a secret that contains the certificates | | bitbucket.additionalCertificates.secretList | list | `[]` | A list of secrets with their respective keys holding certificates to be added to the Java truststore. It is mandatory to specify which keys from secret data need to be mounted as files to the init container. | @@ -66,6 +67,7 @@ Kubernetes: `>=1.21.x-0` | bitbucket.livenessProbe.initialDelaySeconds | int | `60` | Time to wait before starting the first probe | | bitbucket.livenessProbe.periodSeconds | int | `5` | How often (in seconds) the Bitbucket container liveness probe will run | | bitbucket.livenessProbe.timeoutSeconds | int | `1` | Number of seconds after which the probe times out | +| bitbucket.mesh.additionalAnnotations | object | `{}` | Defines additional annotations to the Bitbucket Mesh StateFulSet. This might be required when deploying using a GitOps approach | | bitbucket.mesh.additionalCertificates | object | `{"customCmd":null,"initContainer":{"resources":{}},"secretList":[],"secretName":null}` | Certificates to be added to Java truststore. Provide reference to a secret that contains the certificates | | bitbucket.mesh.additionalCertificates.secretList | list | `[]` | A list of secrets with their respective keys holding certificates to be added to the Java truststore. It is mandatory to specify which keys from secret data need to be mounted as files to the init container. | | bitbucket.mesh.additionalCertificates.secretName | string | `nil` | Name of the Kubernetes secret with certificates in its data. All secret keys in the secret data will be treated as certificates to be added to Java truststore. If defined, this takes precedence over secretList. | @@ -259,4 +261,4 @@ Kubernetes: `>=1.21.x-0` | volumes.sharedHome.subPath | string | `nil` | Specifies the sub-directory of the shared-home volume that will be mounted in to the Bitbucket container. | ---------------------------------------------- -Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0) +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/src/main/charts/confluence/Changelog.md b/src/main/charts/confluence/Changelog.md index 5a08f1ed9..92a63c5f7 100644 --- a/src/main/charts/confluence/Changelog.md +++ b/src/main/charts/confluence/Changelog.md @@ -17,6 +17,25 @@ * Relabel instance name on jmx service monitor (#757) * Added pvc retention policy to Bitbucket Mesh StatefulSet (#755) +## 1.21.0 + +**Release date:** 2024-8-13 + +![AppVersion: 8.5.14](https://img.shields.io/static/v1?label=AppVersion&message=8.5.14&color=success&logo=) +![Kubernetes: >=1.21.x-0](https://img.shields.io/static/v1?label=Kubernetes&message=>=1.21.x-0&color=informational&logo=kubernetes) +![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm) + +* Added annotations to the StatefulSets (#857) +* Update appVersions for DC apps (#858) +* Make shared home pvc access mode configurable (#855) +* Allow referencing multiple secrets in additionalCertificates (#852) +* Make it possible to define resources for import-certs init container (#851) +* Move update strategy to root level (#849) +* Add helm value for custom jmx jar location when using other jmx init container images (#846) +* feat: add appProtocol for service meshes (#847) +* Make StatefulSet updateStrategy configurable (#845) +* Fix default for acceptCount (#832) + ## 1.20.1 **Release date:** 2024-7-7 diff --git a/src/main/charts/confluence/Chart.yaml b/src/main/charts/confluence/Chart.yaml index f6b81001f..45b7e3d14 100644 --- a/src/main/charts/confluence/Chart.yaml +++ b/src/main/charts/confluence/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: confluence description: A chart for installing Confluence Data Center on Kubernetes type: application -version: '1.20.1' +version: '1.21.0' appVersion: 8.5.14 kubeVersion: ">=1.21.x-0" keywords: @@ -20,8 +20,16 @@ deprecated: false annotations: artifacthub.io/containsSecurityUpdates: "true" artifacthub.io/changes: |- - - "Update appVersions for DC apps (#825)" - - "Make it possible to override proxy settings (#822)" + - "Added annotations to the StatefulSets (#857)" + - "Update appVersions for DC apps (#858)" + - "Make shared home pvc access mode configurable (#855)" + - "Allow referencing multiple secrets in additionalCertificates (#852)" + - "Make it possible to define resources for import-certs init container (#851)" + - "Move update strategy to root level (#849)" + - "Add helm value for custom jmx jar location when using other jmx init container images (#846)" + - "feat: add appProtocol for service meshes (#847)" + - "Make StatefulSet updateStrategy configurable (#845)" + - "Fix default for acceptCount (#832)" dependencies: - name: common diff --git a/src/main/charts/confluence/README.md b/src/main/charts/confluence/README.md index a2aff62e3..748b3569e 100644 --- a/src/main/charts/confluence/README.md +++ b/src/main/charts/confluence/README.md @@ -1,6 +1,6 @@ # confluence -![Version: 1.20.1](https://img.shields.io/badge/Version-1.20.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 8.5.14](https://img.shields.io/badge/AppVersion-8.5.14-informational?style=flat-square) +![Version: 1.21.0](https://img.shields.io/badge/Version-1.21.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 8.5.14](https://img.shields.io/badge/AppVersion-8.5.14-informational?style=flat-square) A chart for installing Confluence Data Center on Kubernetes @@ -36,6 +36,7 @@ Kubernetes: `>=1.21.x-0` | confluence.accessLog.enabled | bool | `true` | Set to 'true' if access logging should be enabled. | | confluence.accessLog.localHomeSubPath | string | `"logs"` | The subdirectory within the local-home volume where access logs should be stored. | | confluence.accessLog.mountPath | string | `"/opt/atlassian/confluence/logs"` | The path within the Confluence container where the local-home volume should be mounted in order to capture access logs. | +| confluence.additionalAnnotations | object | `{}` | Defines additional annotations to the Confluence StateFulSet. This might be required when deploying using a GitOps approach | | confluence.additionalBundledPlugins | list | `[]` | Specifies a list of additional Confluence plugins that should be added to the Confluence container. Note plugins installed via this method will appear as bundled plugins rather than user plugins. These should be specified in the same manner as the 'additionalLibraries' property. Additional details: https://atlassian.github.io/data-center-helm-charts/examples/external_libraries/EXTERNAL_LIBS/ NOTE: only .jar files can be loaded using this approach. OBR's can be extracted (unzipped) to access the associated .jar An alternative to this method is to install the plugins via "Manage Apps" in the product system administration UI. | | confluence.additionalCertificates | object | `{"customCmd":null,"initContainer":{"resources":{}},"secretList":[],"secretName":null}` | Certificates to be added to Java truststore. Provide reference to a secret that contains the certificates | | confluence.additionalCertificates.secretList | list | `[]` | A list of secrets with their respective keys holding certificates to be added to the Java truststore. It is mandatory to specify which keys from secret data need to be mounted as files to the init container. | @@ -191,6 +192,7 @@ Kubernetes: `>=1.21.x-0` | serviceAccount.name | string | `nil` | The name of the ServiceAccount to be used by the pods. If not specified, but the "serviceAccount.create" flag is set to 'true', then the ServiceAccount name will be auto-generated, otherwise the 'default' ServiceAccount will be used. https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#use-the-default-service-account-to-access-the-api-server | | serviceAccount.role.create | bool | `true` | Create a role for Hazelcast client with privileges to get and list pods and endpoints in the namespace. Set to false if you need to create a Role and RoleBinding manually | | serviceAccount.roleBinding | object | `{"create":true}` | Grant permissions defined in Role (list and get pods and endpoints) to a service account. | +| synchrony.additionalAnnotations | string | `nil` | Defines additional annotations to the Synchrony StateFulSet. This might be required when deploying using a GitOps approach | | synchrony.additionalCertificates | object | `{"customCmd":null,"initContainer":{"resources":{}},"secretList":[],"secretName":null}` | Certificates to be added to Java truststore. Provide reference to a secret that contains the certificates | | synchrony.additionalCertificates.secretList | list | `[]` | A list of secrets with their respective keys holding certificates to be added to the Java truststore. It is mandatory to specify which keys from secret data need to be mounted as files to the init container. | | synchrony.additionalCertificates.secretName | string | `nil` | Name of the Kubernetes secret with certificates in its data. All secret keys in the secret data will be treated as certificates to be added to Java truststore. If defined, this takes precedence over secretList. | @@ -257,4 +259,4 @@ Kubernetes: `>=1.21.x-0` | volumes.synchronyHome.persistentVolumeClaimRetentionPolicy.whenScaled | string | `nil` | Configures the volume retention behavior that applies when the replica count of the StatefulSet is reduced. | ---------------------------------------------- -Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0) +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/src/main/charts/crowd/Changelog.md b/src/main/charts/crowd/Changelog.md index 2359ea46e..ce5a09963 100644 --- a/src/main/charts/crowd/Changelog.md +++ b/src/main/charts/crowd/Changelog.md @@ -16,6 +16,24 @@ * Relabel instance name on jmx service monitor (#757) * Added pvc retention policy to Bitbucket Mesh StatefulSet (#755) +## 1.21.0 + +**Release date:** 2024-8-13 + +![AppVersion: 6.0.0](https://img.shields.io/static/v1?label=AppVersion&message=6.0.0&color=success&logo=) +![Kubernetes: >=1.21.x-0](https://img.shields.io/static/v1?label=Kubernetes&message=>=1.21.x-0&color=informational&logo=kubernetes) +![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm) + +* Added annotations to the StatefulSets (#857) +* Update appVersions for DC apps (#858) +* Make shared home pvc access mode configurable (#855) +* Allow referencing multiple secrets in additionalCertificates (#852) +* Make it possible to define resources for import-certs init container (#851) +* Move update strategy to root level (#849) +* Add helm value for custom jmx jar location when using other jmx init container images (#846) +* feat: add appProtocol for service meshes (#847) +* Make StatefulSet updateStrategy configurable (#845) + ## 1.20.1 **Release date:** 2024-7-7 diff --git a/src/main/charts/crowd/Chart.yaml b/src/main/charts/crowd/Chart.yaml index 8112b098b..63ac67ef5 100644 --- a/src/main/charts/crowd/Chart.yaml +++ b/src/main/charts/crowd/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: crowd description: A chart for installing Crowd Data Center on Kubernetes type: application -version: '1.20.1' +version: '1.21.0' appVersion: 6.0.0 kubeVersion: ">=1.21.x-0" keywords: @@ -20,8 +20,15 @@ deprecated: false annotations: artifacthub.io/containsSecurityUpdates: "false" artifacthub.io/changes: |- - - "Update appVersions for DC apps (#825)" - - "Make it possible to override proxy settings (#822)" + - "Added annotations to the StatefulSets (#857)" + - "Update appVersions for DC apps (#858)" + - "Make shared home pvc access mode configurable (#855)" + - "Allow referencing multiple secrets in additionalCertificates (#852)" + - "Make it possible to define resources for import-certs init container (#851)" + - "Move update strategy to root level (#849)" + - "Add helm value for custom jmx jar location when using other jmx init container images (#846)" + - "feat: add appProtocol for service meshes (#847)" + - "Make StatefulSet updateStrategy configurable (#845)" dependencies: - name: common diff --git a/src/main/charts/crowd/README.md b/src/main/charts/crowd/README.md index df656830f..ec6638ba1 100644 --- a/src/main/charts/crowd/README.md +++ b/src/main/charts/crowd/README.md @@ -1,6 +1,6 @@ # crowd -![Version: 1.20.1](https://img.shields.io/badge/Version-1.20.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 6.0.0](https://img.shields.io/badge/AppVersion-6.0.0-informational?style=flat-square) +![Version: 1.21.0](https://img.shields.io/badge/Version-1.21.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 6.0.0](https://img.shields.io/badge/AppVersion-6.0.0-informational?style=flat-square) A chart for installing Crowd Data Center on Kubernetes @@ -35,6 +35,7 @@ Kubernetes: `>=1.21.x-0` | crowd.accessLog.enabled | bool | `true` | Set to 'true' if access logging should be enabled. | | crowd.accessLog.localHomeSubPath | string | `"logs"` | The subdirectory within the local-home volume where access logs should be stored. | | crowd.accessLog.mountPath | string | `"/opt/atlassian/crowd/apache-tomcat/logs"` | The path within the Crowd container where the local-home volume should be mounted in order to capture access logs. | +| crowd.additionalAnnotations | object | `{}` | Defines additional annotations to the Bamboo StateFulSet. This might be required when deploying using a GitOps approach | | crowd.additionalBundledPlugins | list | `[]` | Specifies a list of additional Crowd plugins that should be added to the Crowd container. Note plugins installed via this method will appear as bundled plugins rather than user plugins. These should be specified in the same manner as the 'additionalLibraries' property. Additional details: https://atlassian.github.io/data-center-helm-charts/examples/external_libraries/EXTERNAL_LIBS/ NOTE: only .jar files can be loaded using this approach. OBR's can be extracted (unzipped) to access the associated .jar An alternative to this method is to install the plugins via "Manage Apps" in the product system administration UI. | | crowd.additionalCertificates | object | `{"customCmd":null,"initContainer":{"resources":{}},"secretList":[],"secretName":null}` | Certificates to be added to Java truststore. Provide reference to a secret that contains the certificates | | crowd.additionalCertificates.secretList | list | `[]` | A list of secrets with their respective keys holding certificates to be added to the Java truststore. It is mandatory to specify which keys from secret data need to be mounted as files to the init container | @@ -192,4 +193,4 @@ Kubernetes: `>=1.21.x-0` | volumes.sharedHome.subPath | string | `nil` | Specifies the sub-directory of the shared-home volume that will be mounted in to the Crowd container. | ---------------------------------------------- -Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0) +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/src/main/charts/jira/Changelog.md b/src/main/charts/jira/Changelog.md index 0015782a5..66e348e04 100644 --- a/src/main/charts/jira/Changelog.md +++ b/src/main/charts/jira/Changelog.md @@ -15,6 +15,26 @@ * Relabel instance name on jmx service monitor (#757) * Added pvc retention policy to Bitbucket Mesh StatefulSet (#755) +## 1.21.0 + +**Release date:** 2024-8-13 + +![AppVersion: 9.12.12](https://img.shields.io/static/v1?label=AppVersion&message=9.12.12&color=success&logo=) +![Kubernetes: >=1.21.x-0](https://img.shields.io/static/v1?label=Kubernetes&message=>=1.21.x-0&color=informational&logo=kubernetes) +![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm) + +* Added annotations to the StatefulSets (#857) +* Update appVersions for DC apps (#858) +* Add a dedicated helm values stanza for s3 attachments (#854) +* Make shared home pvc access mode configurable (#855) +* Allow referencing multiple secrets in additionalCertificates (#852) +* Make it possible to define resources for import-certs init container (#851) +* Move update strategy to root level (#849) +* Add helm value for custom jmx jar location when using other jmx init container images (#846) +* feat: add appProtocol for service meshes (#847) +* Make StatefulSet updateStrategy configurable (#845) +* Fix default for acceptCount (#832) + ## 1.20.1 **Release date:** 2024-7-7 diff --git a/src/main/charts/jira/Chart.yaml b/src/main/charts/jira/Chart.yaml index f7fe5dd24..6a1504b64 100644 --- a/src/main/charts/jira/Chart.yaml +++ b/src/main/charts/jira/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: jira description: A chart for installing Jira Data Center on Kubernetes type: application -version: '1.20.1' +version: '1.21.0' appVersion: 9.12.12 kubeVersion: ">=1.21.x-0" keywords: @@ -21,8 +21,17 @@ deprecated: false annotations: artifacthub.io/containsSecurityUpdates: "false" artifacthub.io/changes: |- - - "Update appVersions for DC apps (#825)" - - "Make it possible to override proxy settings (#822)" + - "Added annotations to the StatefulSets (#857)" + - "Update appVersions for DC apps (#858)" + - "Add a dedicated helm values stanza for s3 attachments (#854)" + - "Make shared home pvc access mode configurable (#855)" + - "Allow referencing multiple secrets in additionalCertificates (#852)" + - "Make it possible to define resources for import-certs init container (#851)" + - "Move update strategy to root level (#849)" + - "Add helm value for custom jmx jar location when using other jmx init container images (#846)" + - "feat: add appProtocol for service meshes (#847)" + - "Make StatefulSet updateStrategy configurable (#845)" + - "Fix default for acceptCount (#832)" dependencies: - name: common diff --git a/src/main/charts/jira/README.md b/src/main/charts/jira/README.md index 6cb182f6c..1fed2ac1c 100644 --- a/src/main/charts/jira/README.md +++ b/src/main/charts/jira/README.md @@ -1,6 +1,6 @@ # jira -![Version: 1.20.1](https://img.shields.io/badge/Version-1.20.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.12.12](https://img.shields.io/badge/AppVersion-9.12.12-informational?style=flat-square) +![Version: 1.21.0](https://img.shields.io/badge/Version-1.21.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 9.12.12](https://img.shields.io/badge/AppVersion-9.12.12-informational?style=flat-square) A chart for installing Jira Data Center on Kubernetes @@ -69,6 +69,7 @@ Kubernetes: `>=1.21.x-0` | ingress.tlsSecretName | string | `nil` | The name of the K8s Secret that contains the TLS private key and corresponding certificate. When utilised, TLS termination occurs at the ingress point where traffic to the Service, and it's Pods is in plaintext. Usage is optional and depends on your use case. The Ingress Controller itself can also be configured with a TLS secret for all Ingress Resources. https://kubernetes.io/docs/concepts/configuration/secret/#tls-secrets https://kubernetes.io/docs/concepts/services-networking/ingress/#tls | | jira.accessLog.localHomeSubPath | string | `"log"` | The subdirectory within the local-home volume where access logs should be stored. | | jira.accessLog.mountPath | string | `"/opt/atlassian/jira/logs"` | The path within the Jira container where the local-home volume should be mounted in order to capture access logs. | +| jira.additionalAnnotations | object | `{}` | Defines additional annotations to the Jira StateFulSet. This might be required when deploying using a GitOps approach | | jira.additionalBundledPlugins | list | `[]` | Specifies a list of additional Jira plugins that should be added to the Jira container. Note plugins installed via this method will appear as bundled plugins rather than user plugins. These should be specified in the same manner as the 'additionalLibraries' property. Additional details: https://atlassian.github.io/data-center-helm-charts/examples/external_libraries/EXTERNAL_LIBS/ NOTE: only .jar files can be loaded using this approach. OBR's can be extracted (unzipped) to access the associated .jar An alternative to this method is to install the plugins via "Manage Apps" in the product system administration UI. | | jira.additionalCertificates | object | `{"customCmd":null,"initContainer":{"resources":{}},"secretList":[],"secretName":null}` | Certificates to be added to Java truststore. Provide reference to a secret that contains the certificates | | jira.additionalCertificates.initContainer.resources | object | `{}` | Resources requests and limits for the import-certs init container | @@ -196,4 +197,4 @@ Kubernetes: `>=1.21.x-0` | volumes.sharedHome.subPath | string | `nil` | Specifies the sub-directory of the shared-home volume that will be mounted in to the Jira container. | ---------------------------------------------- -Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0) +Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) diff --git a/src/test/resources/expected_helm_output/bamboo-agent/output.yaml b/src/test/resources/expected_helm_output/bamboo-agent/output.yaml index 6e048f5cc..08c29988c 100644 --- a/src/test/resources/expected_helm_output/bamboo-agent/output.yaml +++ b/src/test/resources/expected_helm_output/bamboo-agent/output.yaml @@ -5,7 +5,7 @@ kind: ServiceAccount metadata: name: unittest-bamboo-agent labels: - helm.sh/chart: bamboo-agent-1.20.1 + helm.sh/chart: bamboo-agent-1.21.0 app.kubernetes.io/name: bamboo-agent app.kubernetes.io/instance: unittest-bamboo-agent app.kubernetes.io/version: "9.6.4" @@ -17,7 +17,7 @@ kind: ConfigMap metadata: name: unittest-bamboo-agent-jvm-config labels: - helm.sh/chart: bamboo-agent-1.20.1 + helm.sh/chart: bamboo-agent-1.21.0 app.kubernetes.io/name: bamboo-agent app.kubernetes.io/instance: unittest-bamboo-agent app.kubernetes.io/version: "9.6.4" @@ -32,7 +32,7 @@ kind: Deployment metadata: name: unittest-bamboo-agent labels: - helm.sh/chart: bamboo-agent-1.20.1 + helm.sh/chart: bamboo-agent-1.21.0 app.kubernetes.io/name: bamboo-agent app.kubernetes.io/instance: unittest-bamboo-agent app.kubernetes.io/version: "9.6.4" @@ -46,7 +46,7 @@ spec: template: metadata: annotations: - checksum/config-jvm: 6b6be5f51edc885f5b5ea92a5b42dc9a150011dc6faf6d1337c142c367369eb0 + checksum/config-jvm: f63b599888e3b0d62e5558a202afbed5d07dd4fcf02c61bd2f9daa54d3cb4e9f labels: app.kubernetes.io/name: bamboo-agent app.kubernetes.io/instance: unittest-bamboo-agent diff --git a/src/test/resources/expected_helm_output/bamboo/output.yaml b/src/test/resources/expected_helm_output/bamboo/output.yaml index a3a5088ac..a7ca2fa86 100644 --- a/src/test/resources/expected_helm_output/bamboo/output.yaml +++ b/src/test/resources/expected_helm_output/bamboo/output.yaml @@ -5,7 +5,7 @@ kind: ServiceAccount metadata: name: unittest-bamboo labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -17,7 +17,7 @@ kind: ConfigMap metadata: name: unittest-bamboo-jvm-config labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -35,7 +35,7 @@ kind: ConfigMap metadata: name: unittest-bamboo-jmx-config labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -63,7 +63,7 @@ kind: ConfigMap metadata: name: unittest-bamboo-helm-values labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -363,7 +363,7 @@ kind: Service metadata: name: unittest-bamboo-jms labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -386,7 +386,7 @@ kind: Service metadata: name: unittest-bamboo-jmx labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -409,7 +409,7 @@ kind: Service metadata: name: unittest-bamboo labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -433,7 +433,7 @@ kind: StatefulSet metadata: name: unittest-bamboo labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -450,7 +450,7 @@ spec: template: metadata: annotations: - checksum/config-jvm: e742d2253278aa23591596b959247bb63f0b8c32a3bb9a411cd0f5d2946fe5ab + checksum/config-jvm: efc7e4e556cba05d222c85de3bda401c066cb38b8bac1243fa98a41a9c2b7c1d labels: app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo @@ -613,7 +613,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" @@ -657,7 +657,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: bamboo-1.20.1 + helm.sh/chart: bamboo-1.21.0 app.kubernetes.io/name: bamboo app.kubernetes.io/instance: unittest-bamboo app.kubernetes.io/version: "9.6.4" diff --git a/src/test/resources/expected_helm_output/bitbucket/output.yaml b/src/test/resources/expected_helm_output/bitbucket/output.yaml index 32e60012f..5225bd973 100644 --- a/src/test/resources/expected_helm_output/bitbucket/output.yaml +++ b/src/test/resources/expected_helm_output/bitbucket/output.yaml @@ -5,7 +5,7 @@ kind: ServiceAccount metadata: name: unittest-bitbucket labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -17,7 +17,7 @@ kind: ConfigMap metadata: name: unittest-bitbucket-jvm-config-mesh labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -35,7 +35,7 @@ kind: ConfigMap metadata: name: unittest-bitbucket-jvm-config labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -54,7 +54,7 @@ kind: ConfigMap metadata: name: unittest-bitbucket-jmx-config labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -76,7 +76,7 @@ kind: ConfigMap metadata: name: unittest-bitbucket-helm-values labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -329,27 +329,233 @@ data: scrapeIntervalSeconds: 30 nodeSelector: {} opensearch: + antiAffinity: soft + antiAffinityTopologyKey: kubernetes.io/hostname baseUrl: null + clusterName: opensearch-cluster + config: + opensearch.yml: | + cluster.name: opensearch-cluster + # Bind to all interfaces because we don't know what IP address Docker will assign to us. + network.host: 0.0.0.0 + # Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again. + # Implicitly done if ".singleNode" is set to "true". + # discovery.type: single-node + # Start OpenSearch Security Demo Configuration + # WARNING: revise all the lines below before you go into production + plugins: + security: + ssl: + transport: + pemcert_filepath: esnode.pem + pemkey_filepath: esnode-key.pem + pemtrustedcas_filepath: root-ca.pem + enforce_hostname_verification: false + http: + enabled: true + pemcert_filepath: esnode.pem + pemkey_filepath: esnode-key.pem + pemtrustedcas_filepath: root-ca.pem + allow_unsafe_democertificates: true + allow_default_init_securityindex: true + authcz: + admin_dn: + - CN=kirk,OU=client,O=client,L=test,C=de + audit.type: internal_opensearch + enable_snapshot_restore_privilege: true + check_snapshot_restore_write_privileges: true + restapi: + roles_enabled: ["all_access", "security_rest_api_access"] + system_indices: + enabled: true + indices: + [ + ".opendistro-alerting-config", + ".opendistro-alerting-alert*", + ".opendistro-anomaly-results*", + ".opendistro-anomaly-detector*", + ".opendistro-anomaly-checkpoints", + ".opendistro-anomaly-detection-state", + ".opendistro-reports-*", + ".opendistro-notifications-*", + ".opendistro-notebooks", + ".opendistro-asynchronous-search-response*", + ] + ######## End OpenSearch Security Demo Configuration ######## credentials: passwordSecretKey: password secretName: null usernameSecretKey: username + customAntiAffinity: {} + enableServiceLinks: true envFrom: - secretRef: name: opensearch-initial-password + extraContainers: [] extraEnvs: - name: plugins.security.ssl.http.enabled value: "false" + extraInitContainers: [] + extraObjects: [] + extraVolumeMounts: [] + extraVolumes: [] + fsGroup: "" + fullnameOverride: "" + global: + dockerRegistry: "" + hostAliases: [] + httpHostPort: "" + httpPort: 9200 + image: + pullPolicy: IfNotPresent + repository: opensearchproject/opensearch + tag: "" + imagePullSecrets: [] + ingress: + annotations: {} + enabled: false + hosts: + - chart-example.local + ingressLabels: {} + path: / + tls: [] + initResources: {} install: false + keystore: [] + labels: {} + lifecycle: {} + livenessProbe: {} + majorVersion: "" + masterService: opensearch-cluster-master + masterTerminationFix: false + maxUnavailable: 1 + metricsPort: 9600 + nameOverride: "" + networkHost: 0.0.0.0 + networkPolicy: + create: false + http: + enabled: false + nodeAffinity: {} + nodeGroup: master + nodeSelector: {} + openSearchAnnotations: {} + opensearchHome: /usr/share/opensearch + opensearchJavaOpts: -Xmx512M -Xms512M + opensearchLifecycle: {} persistence: + accessModes: + - ReadWriteOnce + annotations: {} + enableInitChown: true + enabled: true + labels: + enabled: false size: 10Gi + plugins: + enabled: false + installList: [] + podAffinity: {} + podAnnotations: {} + podManagementPolicy: Parallel + podSecurityContext: + fsGroup: 1000 + runAsUser: 1000 + podSecurityPolicy: + create: false + name: "" + spec: + fsGroup: + rule: RunAsAny + privileged: true + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny + volumes: + - secret + - configMap + - persistentVolumeClaim + - emptyDir + priorityClassName: "" + protocol: https + rbac: + automountServiceAccountToken: false + create: false + serviceAccountAnnotations: {} + serviceAccountName: "" + readinessProbe: + failureThreshold: 3 + periodSeconds: 5 + tcpSocket: + port: 9200 + timeoutSeconds: 3 + replicas: 3 resources: requests: cpu: 1 memory: 1Gi + roles: + - master + - ingest + - data + - remote_cluster_client + schedulerName: "" + secretMounts: [] securityConfig: - internalUsersSecret: null + actionGroupsSecret: null + config: + data: {} + dataComplete: true + securityConfigSecret: "" + configSecret: null + enabled: true + path: /usr/share/opensearch/config/opensearch-security + rolesMappingSecret: null + rolesSecret: null + tenantsSecret: null + securityContext: + capabilities: + drop: + - ALL + runAsNonRoot: true + runAsUser: 1000 + service: + annotations: {} + externalTrafficPolicy: "" + headless: + annotations: {} + httpPortName: http + labels: {} + labelsHeadless: {} + loadBalancerIP: "" + loadBalancerSourceRanges: [] + metricsPortName: metrics + nodePort: "" + transportPortName: transport + type: ClusterIP + sidecarResources: {} singleNode: true + startupProbe: + failureThreshold: 30 + initialDelaySeconds: 5 + periodSeconds: 10 + tcpSocket: + port: 9200 + timeoutSeconds: 3 + sysctl: + enabled: false + sysctlInit: + enabled: false + sysctlVmMaxMapCount: 262144 + terminationGracePeriod: 120 + tolerations: [] + topologySpreadConstraints: [] + transportHostPort: "" + transportPort: 9300 + updateStrategy: RollingUpdate openshift: runWithRestrictedSCC: false ordinals: @@ -439,7 +645,7 @@ kind: Service metadata: name: unittest-bitbucket-jmx labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -465,7 +671,7 @@ kind: Service metadata: name: unittest-bitbucket-mesh-0 labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -491,7 +697,7 @@ kind: Service metadata: name: unittest-bitbucket-mesh-1 labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -517,7 +723,7 @@ kind: Service metadata: name: unittest-bitbucket-mesh-2 labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -543,7 +749,7 @@ kind: Service metadata: name: unittest-bitbucket labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -575,7 +781,7 @@ kind: StatefulSet metadata: name: unittest-bitbucket-mesh labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -593,7 +799,7 @@ spec: template: metadata: annotations: - checksum/config-jvm: 181b3e6cefd7ac8f0db885749fc9ff0807fac4112d79b112676977cdac8a8970 + checksum/config-jvm: 4f41693928ba5caf9d811b89392133af8e5ffda821e6c6ef5670fd70c2ef4f66 labels: app.kubernetes.io/name: bitbucket-mesh app.kubernetes.io/instance: unittest-bitbucket @@ -696,7 +902,7 @@ kind: StatefulSet metadata: name: unittest-bitbucket labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -714,7 +920,7 @@ spec: template: metadata: annotations: - checksum/config-jvm: 5afa854bf2e6923ea0fdd790b78f94f108f6bd8352de4bd53bae0ef176b4f6ec + checksum/config-jvm: 3f753a675c928a7ac84e43eacbbeef095d787eced1cbf2b8c315c7e8a6a7794f labels: app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket @@ -836,7 +1042,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" @@ -868,7 +1074,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: bitbucket-1.20.1 + helm.sh/chart: bitbucket-1.21.0 app.kubernetes.io/name: bitbucket app.kubernetes.io/instance: unittest-bitbucket app.kubernetes.io/version: "8.19.6" diff --git a/src/test/resources/expected_helm_output/confluence/output.yaml b/src/test/resources/expected_helm_output/confluence/output.yaml index ec003a7ea..c9edbe35b 100644 --- a/src/test/resources/expected_helm_output/confluence/output.yaml +++ b/src/test/resources/expected_helm_output/confluence/output.yaml @@ -5,7 +5,7 @@ kind: ServiceAccount metadata: name: unittest-confluence labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -17,7 +17,7 @@ kind: ConfigMap metadata: name: unittest-confluence-jvm-config labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -41,7 +41,7 @@ kind: ConfigMap metadata: name: unittest-confluence-jmx-config labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -63,7 +63,7 @@ kind: ConfigMap metadata: name: unittest-confluence-helm-values labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -268,24 +268,233 @@ data: scrapeIntervalSeconds: 30 nodeSelector: {} opensearch: + antiAffinity: soft + antiAffinityTopologyKey: kubernetes.io/hostname + clusterName: opensearch-cluster + config: + opensearch.yml: | + cluster.name: opensearch-cluster + # Bind to all interfaces because we don't know what IP address Docker will assign to us. + network.host: 0.0.0.0 + # Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again. + # Implicitly done if ".singleNode" is set to "true". + # discovery.type: single-node + # Start OpenSearch Security Demo Configuration + # WARNING: revise all the lines below before you go into production + plugins: + security: + ssl: + transport: + pemcert_filepath: esnode.pem + pemkey_filepath: esnode-key.pem + pemtrustedcas_filepath: root-ca.pem + enforce_hostname_verification: false + http: + enabled: true + pemcert_filepath: esnode.pem + pemkey_filepath: esnode-key.pem + pemtrustedcas_filepath: root-ca.pem + allow_unsafe_democertificates: true + allow_default_init_securityindex: true + authcz: + admin_dn: + - CN=kirk,OU=client,O=client,L=test,C=de + audit.type: internal_opensearch + enable_snapshot_restore_privilege: true + check_snapshot_restore_write_privileges: true + restapi: + roles_enabled: ["all_access", "security_rest_api_access"] + system_indices: + enabled: true + indices: + [ + ".opendistro-alerting-config", + ".opendistro-alerting-alert*", + ".opendistro-anomaly-results*", + ".opendistro-anomaly-detector*", + ".opendistro-anomaly-checkpoints", + ".opendistro-anomaly-detection-state", + ".opendistro-reports-*", + ".opendistro-notifications-*", + ".opendistro-notebooks", + ".opendistro-asynchronous-search-response*", + ] + ######## End OpenSearch Security Demo Configuration ######## credentials: createSecret: true existingSecretRef: name: null + customAntiAffinity: {} + enableServiceLinks: true enabled: false envFrom: - secretRef: name: opensearch-initial-password + extraContainers: [] extraEnvs: - name: plugins.security.ssl.http.enabled value: "false" + extraInitContainers: [] + extraObjects: [] + extraVolumeMounts: [] + extraVolumes: [] + fsGroup: "" + fullnameOverride: "" + global: + dockerRegistry: "" + hostAliases: [] + httpHostPort: "" + httpPort: 9200 + image: + pullPolicy: IfNotPresent + repository: opensearchproject/opensearch + tag: "" + imagePullSecrets: [] + ingress: + annotations: {} + enabled: false + hosts: + - chart-example.local + ingressLabels: {} + path: / + tls: [] + initResources: {} + keystore: [] + labels: {} + lifecycle: {} + livenessProbe: {} + majorVersion: "" + masterService: opensearch-cluster-master + masterTerminationFix: false + maxUnavailable: 1 + metricsPort: 9600 + nameOverride: "" + networkHost: 0.0.0.0 + networkPolicy: + create: false + http: + enabled: false + nodeAffinity: {} + nodeGroup: master + nodeSelector: {} + openSearchAnnotations: {} + opensearchHome: /usr/share/opensearch + opensearchJavaOpts: -Xmx512M -Xms512M + opensearchLifecycle: {} persistence: + accessModes: + - ReadWriteOnce + annotations: {} + enableInitChown: true + enabled: true + labels: + enabled: false size: 10Gi + plugins: + enabled: false + installList: [] + podAffinity: {} + podAnnotations: {} + podManagementPolicy: Parallel + podSecurityContext: + fsGroup: 1000 + runAsUser: 1000 + podSecurityPolicy: + create: false + name: "" + spec: + fsGroup: + rule: RunAsAny + privileged: true + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny + volumes: + - secret + - configMap + - persistentVolumeClaim + - emptyDir + priorityClassName: "" + protocol: https + rbac: + automountServiceAccountToken: false + create: false + serviceAccountAnnotations: {} + serviceAccountName: "" + readinessProbe: + failureThreshold: 3 + periodSeconds: 5 + tcpSocket: + port: 9200 + timeoutSeconds: 3 + replicas: 3 resources: requests: cpu: 1 memory: 1Gi + roles: + - master + - ingest + - data + - remote_cluster_client + schedulerName: "" + secretMounts: [] + securityConfig: + actionGroupsSecret: null + config: + data: {} + dataComplete: true + securityConfigSecret: "" + configSecret: null + enabled: true + internalUsersSecret: null + path: /usr/share/opensearch/config/opensearch-security + rolesMappingSecret: null + rolesSecret: null + tenantsSecret: null + securityContext: + capabilities: + drop: + - ALL + runAsNonRoot: true + runAsUser: 1000 + service: + annotations: {} + externalTrafficPolicy: "" + headless: + annotations: {} + httpPortName: http + labels: {} + labelsHeadless: {} + loadBalancerIP: "" + loadBalancerSourceRanges: [] + metricsPortName: metrics + nodePort: "" + transportPortName: transport + type: ClusterIP + sidecarResources: {} singleNode: true + startupProbe: + failureThreshold: 30 + initialDelaySeconds: 5 + periodSeconds: 10 + tcpSocket: + port: 9200 + timeoutSeconds: 3 + sysctl: + enabled: false + sysctlInit: + enabled: false + sysctlVmMaxMapCount: 262144 + terminationGracePeriod: 120 + tolerations: [] + topologySpreadConstraints: [] + transportHostPort: "" + transportPort: 9300 + updateStrategy: RollingUpdate openshift: runWithRestrictedSCC: false ordinals: @@ -453,7 +662,7 @@ kind: Service metadata: name: unittest-confluence-jmx labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -476,7 +685,7 @@ kind: Service metadata: name: unittest-confluence-synchrony labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence-synchrony app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -503,7 +712,7 @@ kind: Service metadata: name: unittest-confluence labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -531,7 +740,7 @@ kind: StatefulSet metadata: name: unittest-confluence-synchrony labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence-synchrony app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -613,7 +822,7 @@ kind: StatefulSet metadata: name: unittest-confluence labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -630,7 +839,7 @@ spec: template: metadata: annotations: - checksum/config-jvm: a47976a0429405564e76ef046691a3da0b15cee3d9b45d523f1cfa6def699df6 + checksum/config-jvm: 18de1548008b2573cb595ce8ac81fc30d13b0816d0a3afe63c07b1b442e13b6b labels: app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence @@ -761,7 +970,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" @@ -792,7 +1001,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: confluence-1.20.1 + helm.sh/chart: confluence-1.21.0 app.kubernetes.io/name: confluence app.kubernetes.io/instance: unittest-confluence app.kubernetes.io/version: "8.5.14" diff --git a/src/test/resources/expected_helm_output/crowd/output.yaml b/src/test/resources/expected_helm_output/crowd/output.yaml index 3ab4d7604..ac4f13768 100644 --- a/src/test/resources/expected_helm_output/crowd/output.yaml +++ b/src/test/resources/expected_helm_output/crowd/output.yaml @@ -5,7 +5,7 @@ kind: ServiceAccount metadata: name: unittest-crowd labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -17,7 +17,7 @@ kind: ConfigMap metadata: name: unittest-crowd-jvm-config labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -37,7 +37,7 @@ kind: ConfigMap metadata: name: unittest-crowd-jmx-config labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -65,7 +65,7 @@ kind: ConfigMap metadata: name: unittest-crowd-helm-values labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -310,7 +310,7 @@ kind: Service metadata: name: unittest-crowd-jmx labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -333,7 +333,7 @@ kind: Service metadata: name: unittest-crowd labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -357,7 +357,7 @@ kind: StatefulSet metadata: name: unittest-crowd labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -374,7 +374,7 @@ spec: template: metadata: annotations: - checksum/config-jvm: 1e200c10a1739dfe1fe0f298124d0a7337946a7f7e85ec04b7ca69f56ff470c5 + checksum/config-jvm: 3e4049000dbf2e255eccd91330b3c8eacabc6d44fc346531d411bdbcef515a68 labels: app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd @@ -502,7 +502,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" @@ -533,7 +533,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: crowd-1.20.1 + helm.sh/chart: crowd-1.21.0 app.kubernetes.io/name: crowd app.kubernetes.io/instance: unittest-crowd app.kubernetes.io/version: "6.0.0" diff --git a/src/test/resources/expected_helm_output/jira/output.yaml b/src/test/resources/expected_helm_output/jira/output.yaml index 3fb58c5cc..db52fd7ba 100644 --- a/src/test/resources/expected_helm_output/jira/output.yaml +++ b/src/test/resources/expected_helm_output/jira/output.yaml @@ -5,7 +5,7 @@ kind: ServiceAccount metadata: name: unittest-jira labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -17,7 +17,7 @@ kind: ConfigMap metadata: name: unittest-jira-jvm-config labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -37,7 +37,7 @@ kind: ConfigMap metadata: name: unittest-jira-jmx-config labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -63,7 +63,7 @@ kind: ConfigMap metadata: name: unittest-jira-helm-values labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -333,7 +333,7 @@ kind: Service metadata: name: unittest-jira-jmx labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -356,7 +356,7 @@ kind: Service metadata: name: unittest-jira labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -380,7 +380,7 @@ kind: StatefulSet metadata: name: unittest-jira labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -397,7 +397,7 @@ spec: template: metadata: annotations: - checksum/config-jvm: 38f23038a49bdac882b3e9130fa64b85f26fc2128687538bf138b714b4b5da07 + checksum/config-jvm: 77b48fa643f6f53bc4ade79e50eb75ea1220ea01660d8b56f8514fb9d126120f labels: app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira @@ -528,7 +528,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12" @@ -560,7 +560,7 @@ metadata: "helm.sh/hook": test "helm.sh/hook-delete-policy": "before-hook-creation,hook-succeeded" labels: - helm.sh/chart: jira-1.20.1 + helm.sh/chart: jira-1.21.0 app.kubernetes.io/name: jira app.kubernetes.io/instance: unittest-jira app.kubernetes.io/version: "9.12.12"