chore: update gitops operator to 0.8.6-832833c and prepare release 0.22.2

Author: kim-codefresh

charts/gitops-runtime/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: 0.1.74
 description: A Helm chart for Codefresh gitops runtime
 name: gitops-runtime
-version: 0.22.0
+version: 0.22.2
 home: https://github.com/codefresh-io/gitops-runtime-helm
 icon: https://avatars1.githubusercontent.com/u/11412079?v=3
 keywords:
@@ -14,30 +14,10 @@ maintainers:
 annotations:
   artifacthub.io/alternativeName: "codefresh-gitops-runtime"
   artifacthub.io/changes: |-
-    - kind: added
-      description: 'Expose GitHub API metrics and upgrade base Ubuntu image (#553)'
-    - kind: added
-      description: 'Initial component tests for chart validation (#567)'
     - kind: changed
-      description: 'Upgraded **codefresh-gitops-operator** to v0.8.6 (includes workflow-resume fix) (#595, #586, #584, #582, #575, #574)'
+      description: 'update app-proxy to 1.3636.0-6119302 - fix caching of github users info, interduce new env variable to control permissions and token checks'
     - kind: changed
-      description: 'Upgraded **argo-cd** dependency to 8.0.6-4-cap-v3.0.2-2025-07-06-e9fc72a9 for Argo CD 3.0 compatibility (#563)'
-    - kind: changed
-      description: 'Upgraded **app-proxy** to 1.3633.0 - adds *applicationLogs* filter/follow and prevents GitHub rate-limit errors (#564, #566, #570)'
-    - kind: changed
-      description: 'Updated REQUIRED_VERSION_CONSTRAINT logic for Argo CD 3.1+ runResourceAction adoption (#576)'
-    - kind: changed
-      description: 'Upgraded **cf-argocd-extras** to 0.5.7 (#561)'
-    - kind: changed
-      description: 'Updated image-enrichment service to 1.1.14 (#558)'
-    - kind: fixed
-      description: 'validate-values script no longer fails when custom values are omitted (#560)'
-    - kind: removed
-      description: 'Dropped unused environment variable from **app-proxy** (#565)'
-    - kind: security
-      description: 'Patched critical vulnerabilities in **Argo Rollouts** v1.7.2 (#562)'
-    - kind: security
-      description: 'Updated **nats-exporter** to resolve CVE-2025-30160 (#543)'
+      description: 'update gitops-oeprator to 0.8.6-832833c - optimize and batch calls to gitLog'
 dependencies:
   - name: argo-cd
     repository: https://codefresh-io.github.io/argo-helm

charts/gitops-runtime/README.md

@@ -1,5 +1,5 @@
 ## Codefresh gitops runtime
-![Version: 0.22.0](https://img.shields.io/badge/Version-0.22.0-informational?style=flat-square) ![AppVersion: 0.1.74](https://img.shields.io/badge/AppVersion-0.1.74-informational?style=flat-square)
+![Version: 0.22.2](https://img.shields.io/badge/Version-0.22.2-informational?style=flat-square) ![AppVersion: 0.1.74](https://img.shields.io/badge/AppVersion-0.1.74-informational?style=flat-square)
 
 ## Prerequisites
 
@@ -149,7 +149,7 @@ We have created a helper utility to resolve this issue:
 The utility is packaged in a container image. Below are instructions on executing the utility using Docker:
 
 ```
-docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.22.0 <local_registry>
+docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.22.2 <local_registry>
 ```
 `output_dir` - is a local directory where the utility will output files. <br>
 `local_registry` - is your local registry where you want to mirror the images to
@@ -162,7 +162,7 @@ The utility will output 4 files into the folder:
 
 For usage with external ArgoCD run the utility with `EXTERNAL_ARGOCD` environment variable set to `true`.
 ```
-docker run -e EXTERNAL_ARGOCD=true  -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.22.0 <local_registry>
+docker run -e EXTERNAL_ARGOCD=true  -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.22.2 <local_registry>
 ```
 
 ## Openshift
@@ -229,7 +229,7 @@ sealed-secrets:
 | app-proxy.image-enrichment.serviceAccount.name | string | `"codefresh-image-enrichment-sa"` | Name of the service account to create or the name of the existing one to use |
 | app-proxy.image.pullPolicy | string | `"IfNotPresent"` |  |
 | app-proxy.image.repository | string | `"quay.io/codefresh/cap-app-proxy"` |  |
-| app-proxy.image.tag | string | `"1.3636.0"` |  |
+| app-proxy.image.tag | string | `"1.3636.0-6119302"` |  |
 | app-proxy.imagePullSecrets | list | `[]` |  |
 | app-proxy.initContainer.command[0] | string | `"./init.sh"` |  |
 | app-proxy.initContainer.env | object | `{}` |  |
@@ -297,9 +297,16 @@ sealed-secrets:
 | event-reporters.rollout.eventSource.resources | object | `{}` |  |
 | event-reporters.rollout.eventSource.tolerations | list | `[]` |  |
 | event-reporters.rollout.sensor.affinity | object | `{}` |  |
+| event-reporters.rollout.sensor.atLeastOnce | bool | `true` | At Least Once |
 | event-reporters.rollout.sensor.env | object | `{}` | Environment variables for sensor pods - add DEBUG_LOG: "true" to add debug level logs |
 | event-reporters.rollout.sensor.logging | object | `{"enabled":false,"intervalSeconds":0}` | Set to true to enable logging. Set intervalSeconds to add logging interval to moderate log flow. |
 | event-reporters.rollout.sensor.nodeSelector | object | `{}` |  |
+| event-reporters.rollout.sensor.policy.status.allow[0] | int | `200` |  |
+| event-reporters.rollout.sensor.policy.status.allow[1] | int | `201` |  |
+| event-reporters.rollout.sensor.policy.status.allow[2] | int | `204` |  |
+| event-reporters.rollout.sensor.policy.status.allow[3] | int | `400` |  |
+| event-reporters.rollout.sensor.policy.status.allow[4] | int | `401` |  |
+| event-reporters.rollout.sensor.policy.status.allow[5] | int | `404` |  |
 | event-reporters.rollout.sensor.replicas | int | `1` |  |
 | event-reporters.rollout.sensor.resources | object | `{}` |  |
 | event-reporters.rollout.sensor.retryStrategy | object | `{"duration":0,"factor":1,"jitter":1,"steps":3}` | Retry strategy for events sent to Codefresh |
@@ -315,9 +322,16 @@ sealed-secrets:
 | event-reporters.workflow.eventSource.resources | object | `{}` |  |
 | event-reporters.workflow.eventSource.tolerations | list | `[]` |  |
 | event-reporters.workflow.sensor.affinity | object | `{}` |  |
+| event-reporters.workflow.sensor.atLeastOnce | bool | `true` | At Least Once |
 | event-reporters.workflow.sensor.env | object | `{}` | Environment variables for sensor pods - add DEBUG_LOG: "true" to add debug level logs |
 | event-reporters.workflow.sensor.logging | object | `{"enabled":false,"intervalSeconds":0}` | Set to true to enable logging. Set intervalSeconds to add logging interval to moderate log flow. |
 | event-reporters.workflow.sensor.nodeSelector | object | `{}` |  |
+| event-reporters.workflow.sensor.policy.status.allow[0] | int | `200` |  |
+| event-reporters.workflow.sensor.policy.status.allow[1] | int | `201` |  |
+| event-reporters.workflow.sensor.policy.status.allow[2] | int | `204` |  |
+| event-reporters.workflow.sensor.policy.status.allow[3] | int | `400` |  |
+| event-reporters.workflow.sensor.policy.status.allow[4] | int | `401` |  |
+| event-reporters.workflow.sensor.policy.status.allow[5] | int | `404` |  |
 | event-reporters.workflow.sensor.replicas | int | `1` |  |
 | event-reporters.workflow.sensor.resources | object | `{}` |  |
 | event-reporters.workflow.sensor.retryStrategy | object | `{"duration":0,"factor":1,"jitter":1,"steps":3}` | Retry strategy for events sent to Codefresh |
@@ -373,11 +387,11 @@ sealed-secrets:
 | global.external-argo-rollouts.rollout-reporter | object | `{"enabled":false}` | Rollout reporter settings |
 | global.external-argo-rollouts.rollout-reporter.enabled | bool | `false` | Enable or disable rollout reporter Configuration is defined at .Values.event-reporters.rollout |
 | global.nodeSelector | object | `{}` | Global nodeSelector for all components |
-| global.runtime | object | `{"cluster":"https://kubernetes.default.svc","codefreshHosted":false,"eventBus":{"annotations":{},"name":"codefresh-eventbus","nats":{"native":{"affinity":{},"auth":"token","containerTemplate":{"resources":{"limits":{"cpu":"500m","ephemeral-storage":"2Gi","memory":"4Gi"},"requests":{"cpu":"200m","ephemeral-storage":"2Gi","memory":"1Gi"}}},"maxPayload":"4MB","nodeSelector":{},"replicas":3,"tolerations":[]}},"pdb":{"enabled":true,"minAvailable":2}},"gitCredentials":{"password":{"secretKeyRef":{},"value":null},"username":"username"},"ingress":{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"labels":{},"protocol":"https","skipValidation":false,"tls":[]},"ingressUrl":"","isConfigurationRuntime":false,"name":null}` | Runtime level settings |
+| global.runtime | object | `{"cluster":"https://kubernetes.default.svc","codefreshHosted":false,"eventBus":{"annotations":{},"jetstream":{"affinity":{},"containerTemplate":{"resources":{"limits":{"cpu":"500m","ephemeral-storage":"2Gi","memory":"4Gi"},"requests":{"cpu":"200m","ephemeral-storage":"2Gi","memory":"1Gi"}}},"maxPayload":"4MB","nodeSelector":{},"replicas":3,"tolerations":[],"version":"latest"},"name":"","nats":{"native":{"affinity":{},"auth":"token","containerTemplate":{"resources":{"limits":{"cpu":"500m","ephemeral-storage":"2Gi","memory":"4Gi"},"requests":{"cpu":"200m","ephemeral-storage":"2Gi","memory":"1Gi"}}},"maxPayload":"4MB","nodeSelector":{},"replicas":3,"tolerations":[]}},"pdb":{"enabled":true,"minAvailable":2},"type":"nats"},"gitCredentials":{"password":{"secretKeyRef":{},"value":null},"username":"username"},"ingress":{"annotations":{},"className":"nginx","enabled":false,"hosts":[],"labels":{},"protocol":"https","skipValidation":false,"tls":[]},"ingressUrl":"","isConfigurationRuntime":false,"name":null}` | Runtime level settings |
 | global.runtime.cluster | string | `"https://kubernetes.default.svc"` | Runtime cluster. Should not be changed. |
 | global.runtime.codefreshHosted | bool | `false` | Defines whether this is a Codefresh hosted runtime. Should not be changed. |
 | global.runtime.eventBus.annotations | object | `{}` | Annotations on EventBus resource |
-| global.runtime.eventBus.name | string | `"codefresh-eventbus"` | Eventbus name |
+| global.runtime.eventBus.name | string | `""` | Eventbus name |
 | global.runtime.eventBus.pdb | object | `{"enabled":true,"minAvailable":2}` | Pod disruption budget for the eventbus |
 | global.runtime.eventBus.pdb.minAvailable | int | `2` | Minimum number of available eventbus pods. For eventbus to stay functional the majority of its replicas should always be available. |
 | global.runtime.gitCredentials | object | `{"password":{"secretKeyRef":{},"value":null},"username":"username"}` | Git credentials runtime. Runtime is not fully functional without those credentials. If not provided through the installation, they must be provided through the Codefresh UI. |

charts/gitops-runtime/values.yaml

@@ -125,7 +125,6 @@ global:
               cpu: 200m
               memory: 1Gi
               ephemeral-storage: 2Gi
-
   # -- Configuration for external ArgoCD
   # Should be used when `argo-cd.enabled` is set to false
   external-argo-cd:
@@ -663,7 +662,7 @@ app-proxy:
     maxUnavailable: ""
 
 # ---------------------------------------------------------------------------------------------------------------------
-# DOCS: https://github.com/codefresh-io/codefresh-gitops-operator/tree/codefresh-gitops-operator-0.8.5-helm/charts/codefresh-gitops-operator
+# DOCS: https://github.com/codefresh-io/codefresh-gitops-operator/tree/codefresh-gitops-operator-0.8.6-helm/charts/codefresh-gitops-operator
 # ---------------------------------------------------------------------------------------------------------------------
 gitops-operator:
   # -- Do not change unless instructed otherwise by Codefresh support
@@ -691,7 +690,8 @@ gitops-operator:
     maxConcurrentReleases: 100
     # -- An optional template for the promotion wrapper (empty default will use the embedded one)
     promotionWrapperTemplate: ''
-  image: {}
+  image:
+    tag: 0.8.6-832833c
   # -- defaults
   # repository: quay.io/codefresh/codefresh-gitops-operator
   # tag: 'v{{ .Chart.AppVersion }}'