Skip to content

Commit 93b0ae6

Browse files
codefresh-v2-pipelines[bot]cf-ci-bot-v2vitalii-codefreshvasil-cf
authored
prepare-version(0.26.6): prepare chart content for release (#1034)
* Update Chart.yaml and changelog for 0.26.6 release * Update Chart.yaml and changelog for 0.26.6 release * updated docs * Update Chart.yaml and changelog for 0.26.6 release * Update Chart.yaml and changelog for 0.26.6 release * Update Chart.yaml and changelog for 0.26.6 release * fix: updated release notes * chore: ran ./scripts/helm-docs.sh --------- Co-authored-by: cf-ci-bot-v2 <[email protected]> Co-authored-by: vitalii-codefresh <[email protected]> Co-authored-by: Vasil Sudakou <[email protected]> Co-authored-by: Vasil Sudakou <[email protected]>
1 parent f29eb87 commit 93b0ae6

File tree

3 files changed

+22
-12
lines changed

3 files changed

+22
-12
lines changed

charts/gitops-runtime/Chart.yaml

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,17 @@ annotations:
1616
artifacthub.io/alternativeName: "codefresh-gitops-runtime"
1717
artifacthub.io/changes: |-
1818
- kind: changed
19-
description: 'fix(codefresh-gitops-operator): security vulnerability CVE-2025-66626 (#1026)'
19+
description: 'updated argo-cd to 3.2.3'
20+
- kind: security
21+
description: 'app-proxy: fixed security vulnerabilities CVE-2025-61729 and CVE-2025-61727'
22+
- kind: security
23+
description: 'app-proxy-init: fixed security vulnerabilities CVE-2016-2781 and CVE-2024-10041'
24+
- kind: security
25+
description: 'cf-argocd-extras: fixed security vulnerabilities CVE-2025-58181, CVE-2025-13281, CVE-2025-61727 and CVE-2025-61729'
26+
- kind: security
27+
description: 'kubectl: fixed security vulnerabilities CVE-2025-47912, CVE-2025-61724, CVE-2025-58187, CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189 and CVE-2025-61723 for redis-secret-init job'
28+
- kind: security
29+
description: 'sealed-secrets-controller: fixed security vulnerabilities CVE-2025-47912, CVE-2025-58181, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61727 and CVE-2025-61729'
2030
dependencies:
2131
- name: argo-cd
2232
repository: https://argoproj.github.io/argo-helm

charts/gitops-runtime/README.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
## Codefresh gitops runtime
2-
![Version: 0.26.5](https://img.shields.io/badge/Version-0.26.5-informational?style=flat-square) ![AppVersion: 0.2.0](https://img.shields.io/badge/AppVersion-0.2.0-informational?style=flat-square)
2+
![Version: 0.26.6](https://img.shields.io/badge/Version-0.26.6-informational?style=flat-square) ![AppVersion: 0.2.0](https://img.shields.io/badge/AppVersion-0.2.0-informational?style=flat-square)
33

44
## Table of Content
55

@@ -222,7 +222,7 @@ We have created a helper utility to resolve this issue:
222222
The utility is packaged in a container image. Below are instructions on executing the utility using Docker:
223223

224224
```
225-
docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.26.5 <local_registry>
225+
docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.26.6 <local_registry>
226226
```
227227
`output_dir` - is a local directory where the utility will output files. <br>
228228
`local_registry` - is your local registry where you want to mirror the images to
@@ -235,7 +235,7 @@ The utility will output 4 files into the folder:
235235

236236
For usage with external ArgoCD run the utility with `EXTERNAL_ARGOCD` environment variable set to `true`.
237237
```
238-
docker run -e EXTERNAL_ARGOCD=true -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.26.5 <local_registry>
238+
docker run -e EXTERNAL_ARGOCD=true -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.26.6 <local_registry>
239239
```
240240
241241
## Openshift
@@ -546,14 +546,14 @@ global:
546546
| app-proxy.image-enrichment.serviceAccount.name | string | `"codefresh-image-enrichment-sa"` | Name of the service account to create or the name of the existing one to use |
547547
| app-proxy.image.pullPolicy | string | `"IfNotPresent"` | |
548548
| app-proxy.image.repository | string | `"quay.io/codefresh/cap-app-proxy"` | |
549-
| app-proxy.image.tag | string | `"5f0a3d5"` | |
549+
| app-proxy.image.tag | string | `"8765bbd"` | |
550550
| app-proxy.imagePullSecrets | list | `[]` | |
551551
| app-proxy.initContainer.command[0] | string | `"./init.sh"` | |
552552
| app-proxy.initContainer.env | object | `{}` | |
553553
| app-proxy.initContainer.extraVolumeMounts | list | `[]` | Extra volume mounts for init container |
554554
| app-proxy.initContainer.image.pullPolicy | string | `"IfNotPresent"` | |
555555
| app-proxy.initContainer.image.repository | string | `"quay.io/codefresh/cap-app-proxy-init"` | |
556-
| app-proxy.initContainer.image.tag | string | `"5f0a3d5"` | |
556+
| app-proxy.initContainer.image.tag | string | `"8765bbd"` | |
557557
| app-proxy.initContainer.resources.limits | object | `{}` | |
558558
| app-proxy.initContainer.resources.requests.cpu | string | `"0.2"` | |
559559
| app-proxy.initContainer.resources.requests.memory | string | `"256Mi"` | |
@@ -634,7 +634,7 @@ global:
634634
| argo-events.crds.install | bool | `false` | |
635635
| argo-events.enabled | bool | `true` | |
636636
| argo-events.fullnameOverride | string | `"argo-events"` | |
637-
| argo-gateway | object | `{"affinity":{},"hpa":{"enabled":true,"maxReplicas":10,"minReplicas":1,"targetCPUUtilizationPercentage":70},"image":{"registry":"quay.io","repository":"codefresh/cf-argocd-extras","tag":"5ad6886"},"livenessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"nodeSelector":{},"pdb":{"enabled":true,"maxUnavailable":"","minAvailable":"50%"},"readinessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"resources":{"requests":{"cpu":"100m","memory":"128Mi"}},"service":{"type":"ClusterIP"},"serviceAccount":{"create":true},"serviceMonitor":{"enabled":false,"interval":"30s","labels":{},"scrapeTimeout":"10s"},"tolerations":[]}` | Argo Gateway Argo Gateway is used to perform operations on ArgoCD from Codefresh platform |
637+
| argo-gateway | object | `{"affinity":{},"hpa":{"enabled":true,"maxReplicas":10,"minReplicas":1,"targetCPUUtilizationPercentage":70},"image":{"registry":"quay.io","repository":"codefresh/cf-argocd-extras","tag":"0.26-023fa0f"},"livenessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"nodeSelector":{},"pdb":{"enabled":true,"maxUnavailable":"","minAvailable":"50%"},"readinessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"resources":{"requests":{"cpu":"100m","memory":"128Mi"}},"service":{"type":"ClusterIP"},"serviceAccount":{"create":true},"serviceMonitor":{"enabled":false,"interval":"30s","labels":{},"scrapeTimeout":"10s"},"tolerations":[]}` | Argo Gateway Argo Gateway is used to perform operations on ArgoCD from Codefresh platform |
638638
| argo-rollouts.controller.replicas | int | `1` | |
639639
| argo-rollouts.enabled | bool | `false` | |
640640
| argo-rollouts.fullnameOverride | string | `"argo-rollouts"` | |
@@ -730,7 +730,7 @@ global:
730730
| global.codefresh.userToken | object | `{"secretKeyRef":{},"token":""}` | User token. Used for runtime registration against the patform. One of token (for plain text value) or secretKeyRef must be provided. |
731731
| global.codefresh.userToken.secretKeyRef | object | `{}` | User token that references an existing secret containing the token. |
732732
| global.codefresh.userToken.token | string | `""` | User token in plain text. The chart creates and manages the secret for this token. |
733-
| global.event-reporters | object | `{"affinity":{},"config":{},"image":{"registry":"quay.io","repository":"codefresh/cf-argocd-extras","tag":"aca2645"},"livenessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"nodeSelector":{},"pdb":{"enabled":true,"maxUnavailable":"","minAvailable":"50%"},"readinessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"replicaCount":2,"resources":{"requests":{"cpu":"100m","memory":"128Mi"}},"service":{"ports":{"http":{"port":8088,"targetPort":8088},"metrics":{"port":8087,"targetPort":8087}},"type":"ClusterIP"},"serviceAccount":{"create":true},"serviceMonitor":{"enabled":false,"interval":"30s","labels":{},"scrapeTimeout":"10s"},"tolerations":[]}` | Global settings for event reporters Event reporters are used for reporting runtime and cluster resources to Codefresh platform |
733+
| global.event-reporters | object | `{"affinity":{},"config":{},"image":{"registry":"quay.io","repository":"codefresh/cf-argocd-extras","tag":"0.26-023fa0f"},"livenessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"nodeSelector":{},"pdb":{"enabled":true,"maxUnavailable":"","minAvailable":"50%"},"readinessProbe":{"failureThreshold":3,"initialDelaySeconds":10,"periodSeconds":10,"successThreshold":1,"timeoutSeconds":10},"replicaCount":2,"resources":{"requests":{"cpu":"100m","memory":"128Mi"}},"service":{"ports":{"http":{"port":8088,"targetPort":8088},"metrics":{"port":8087,"targetPort":8087}},"type":"ClusterIP"},"serviceAccount":{"create":true},"serviceMonitor":{"enabled":false,"interval":"30s","labels":{},"scrapeTimeout":"10s"},"tolerations":[]}` | Global settings for event reporters Event reporters are used for reporting runtime and cluster resources to Codefresh platform |
734734
| global.external-argo-rollouts | object | `{"rollout-reporter":{"enabled":false}}` | Configuration for external Argo Rollouts |
735735
| global.external-argo-rollouts.rollout-reporter | object | `{"enabled":false}` | Rollout reporter settings |
736736
| global.external-argo-rollouts.rollout-reporter.enabled | bool | `false` | Enable or disable rollout reporter Configuration is defined at .Values.event-reporters.rollout |
@@ -836,7 +836,7 @@ global:
836836
| redis-ha.topologySpreadConstraints.maxSkew | string | `""` (defaults to `1`) | Max skew of pods tolerated |
837837
| redis-ha.topologySpreadConstraints.topologyKey | string | `""` (defaults to `topology.kubernetes.io/zone`) | Topology key for spread |
838838
| redis-ha.topologySpreadConstraints.whenUnsatisfiable | string | `""` (defaults to `ScheduleAnyway`) | Enforcement policy, hard or soft |
839-
| redis-secret-init | object | `{"affinity":{},"image":{"registry":"docker.io","repository":"alpine/kubectl","tag":"1.34.1"},"nodeSelector":{},"tolerations":[]}` | Enable hook job to create redis secret |
839+
| redis-secret-init | object | `{"affinity":{},"image":{"registry":"docker.io","repository":"alpine/kubectl","tag":"1.35.0"},"nodeSelector":{},"tolerations":[]}` | Enable hook job to create redis secret |
840840
| redis.image | object | `{"registry":"public.ecr.aws","repository":"docker/library/redis","tag":"8.2.1-alpine"}` | Redis image |
841841
| redis.metrics | object | `{"enabled":true,"env":{},"envFrom":[],"image":{"registry":"ghcr.io","repository":"oliver006/redis_exporter","tag":"v1.72.1"},"livenessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"readinessProbe":{"enabled":true,"failureThreshold":5,"initialDelaySeconds":30,"periodSeconds":15,"successThreshold":1,"timeoutSeconds":15},"resources":{},"serviceMonitor":{"enabled":false}}` | Enable metrics sidecar |
842842
| redis.metrics.serviceMonitor | object | `{"enabled":false}` | Enable a prometheus ServiceMonitor |
@@ -847,7 +847,7 @@ global:
847847
| sealed-secrets.fullnameOverride | string | `"sealed-secrets-controller"` | |
848848
| sealed-secrets.image.registry | string | `"quay.io"` | |
849849
| sealed-secrets.image.repository | string | `"codefresh/sealed-secrets-controller"` | |
850-
| sealed-secrets.image.tag | string | `"0.32.0"` | |
850+
| sealed-secrets.image.tag | string | `"0.34.0"` | |
851851
| sealed-secrets.keyrenewperiod | string | `"720h"` | |
852852
| sealed-secrets.resources.limits.cpu | string | `"500m"` | |
853853
| sealed-secrets.resources.limits.memory | string | `"1Gi"` | |

charts/gitops-runtime/values.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -243,7 +243,7 @@ installer:
243243
tolerations: []
244244
affinity: {}
245245
# *********************************************************************************************************************
246-
# DOCS: https://artifacthub.io/packages/helm/bitnami-labs/sealed-secrets/2.17.2?modal=values
246+
# DOCS: https://artifacthub.io/packages/helm/bitnami-labs/sealed-secrets/2.18.0?modal=values
247247
# *********************************************************************************************************************
248248
sealed-secrets:
249249
fullnameOverride: sealed-secrets-controller
@@ -260,7 +260,7 @@ sealed-secrets:
260260
cpu: 200m
261261
memory: 512Mi
262262
# *********************************************************************************************************************
263-
# DOCS: https://artifacthub.io/packages/helm/argo/argo-cd/9.1.9?modal=values
263+
# DOCS: https://artifacthub.io/packages/helm/argo/argo-cd/9.3.0?modal=values
264264
# *********************************************************************************************************************
265265
argo-cd:
266266
enabled: true

0 commit comments

Comments
 (0)