feature: conditional registration of the rgs controller

.github/workflows/component-test.yaml

@@ -5,15 +5,9 @@ on:
   push:
     branches:
       - main
-    paths-ignore:
-      - "*.md"
-      - charts/**
   pull_request:
     branches:
       - main
-    paths-ignore:
-      - "*.md"
-      - charts/**
 
 jobs:
   component-test:

charts/gitops-runtime/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v2
-appVersion: 0.1.72
+appVersion: 0.1.75
 description: A Helm chart for Codefresh gitops runtime
 name: gitops-runtime
-version: 0.0.0
+version: '0.23.3'
 home: https://github.com/codefresh-io/gitops-runtime-helm
 icon: https://avatars1.githubusercontent.com/u/11412079?v=3
 keywords:
@@ -13,11 +13,16 @@ maintainers:
     url: https://codefresh-io.github.io/
 annotations:
   artifacthub.io/alternativeName: "codefresh-gitops-runtime"
+  artifacthub.io/changes: |-
+    - kind: changed
+      description: 'update cli-v2 in installer - fix token validation code (#696)'
+    - kind: changed
+      description: 'chore(app-proxy): update cap-app-proxy image tags to 1.3727.0 (#692) - fix: remote-cluster application fails to sync due to its project'
 dependencies:
 - name: argo-cd
   repository: https://codefresh-io.github.io/argo-helm
   condition: argo-cd.enabled
-  version: 8.0.6-6-cap-v3.0.2-2025-07-06-e9fc72a9
+  version: 8.0.6-8-cap-v3.0.2-2025-08-12-9c8dfae9
 - name: argo-events
   repository: https://codefresh-io.github.io/argo-helm
   version: 2.4.8-cap-CR-29689

charts/gitops-runtime/README.md.gotmpl

@@ -193,8 +193,170 @@ sealed-secrets:
     enabled: false
 ```
 
+## High Availability
+
+This chart installs the non-HA version of GitOps Runtime by default. If you want to run GitOps Runtime in HA mode, you can use the example values below:
+
+> **Warning:**
+> You need at least 3 worker nodes for HA mode
+
+### HA mode with autoscaling
+
+```yaml
+global:
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: kubernetes.io/hostname
+      whenUnsatisfiable: DoNotSchedule
+
+app-proxy:
+  replicaCount: 2
+  pdb:
+    enabled: true
+    minAvailable: 1
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: kubernetes.io/hostname
+      whenUnsatisfiable: DoNotSchedule
+      labelSelector:
+        matchLabels:
+          app: cap-app-proxy
+
+gitops-operator:
+  replicaCount: 2
+  pdb:
+    enabled: true
+    minAvailable: 1
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: kubernetes.io/hostname
+      whenUnsatisfiable: DoNotSchedule
+      labelSelector:
+        matchLabels:
+          app: gitops-operator
+
+internal-router:
+  replicaCount: 2
+  pdb:
+    enabled: true
+    minAvailable: 1
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: kubernetes.io/hostname
+      whenUnsatisfiable: DoNotSchedule
+      labelSelector:
+        matchLabels:
+          app: internal-router
+
+cf-argocd-extras:
+  sourcesServer:
+    hpa:
+      enabled: true
+      minReplicas: 2
+    pdb:
+      enabled: true
+      minAvailable: 1
+    topologySpreadConstraints:
+      - maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+        labelSelector:
+          matchLabels:
+            app.kubernetes.io/component: sources-server
+  eventReporter:
+    topologySpreadConstraints:
+      - maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+        labelSelector:
+          matchLabels:
+            app.kubernetes.io/component: event-reporter
+
+argo-cd:
+  redis-ha:
+    enabled: true
+
+  controller:
+    replicas: 1
+
+  server:
+    autoscaling:
+      enabled: true
+      minReplicas: 2
+    pdb:
+      enabled: true
+      minAvailable: 1
+
+  repoServer:
+    autoscaling:
+      enabled: true
+      minReplicas: 2
+    pdb:
+      enabled: true
+      minAvailable: 1
+
+  applicationSet:
+    replicas: 2
+
+argo-workflows:
+  controller:
+    replicas: 2
+    pdb:
+      enabled: true
+      minAvailable: 1
+  server:
+    autoscaling:
+      enabled: true
+      minReplicas: 2
+    pdb:
+      enabled: true
+      minAvailable: 1
+
+event-reporters:
+  workflow:
+    sensor:
+      replicas: 2
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: sensor-name
+                    operator: In
+                    values:
+                      - workflow-reporter
+              topologyKey: "kubernetes.io/hostname"
+  rollout:
+    sensor:
+      replicas: 2
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: sensor-name
+                    operator: In
+                    values:
+                      - rollout-reporter
+              topologyKey: "kubernetes.io/hostname"
+```
+
 ## Upgrading
 
+### To >=0.23.3
+
+#### Manual fix in the ISC repository
+
+If the ISC repository already contains the resources/app-projects/cf-runtime-app-project.yaml file it should be manually updated:
+```yaml
+...
+spec:
+  destinations:
+  - namespace: '*'
+    server: "*" # <-- replace 'https://kubernetes.default.svc' with "*" here
+...
+```
+
 ### To 0.23.x
 
 ####  Affected values

charts/gitops-runtime/tests/cf-argocd-extras_test.yaml

@@ -310,51 +310,6 @@ tests:
             mountPath: /app/config/codefresh-tls-certs
             readOnly: true
 
-  - it: Event Reporter checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/event-reporter/statefulset.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.eventReporter.configMaps.cmd-params-cm.data.foo: bar
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "747ba21145c84900dd029f20a15e73096e090da7865b67b86601135d10d8cc18"
-
-
-  - it: Event Reporter checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/event-reporter/statefulset.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.eventReporter.configMaps.cmd-params-cm.data.alice: bob
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "42a0e8eee09a1a411447be59e5b5a078d699560b4d93b62d388a1b622a463b18"
-
-  - it: Sources Server checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/sources-server/deployment.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.sourcesServer.configMaps.cmd-params-cm.data.foo: bar
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "1aac0bdcb473209b67afca0d5ff7cb1d9b849748f82c76e53fd9a43c51456dc2"
-
-  - it: Sources Server checksum annotation should be changed when configmap is updated
-    template: cf-argocd-extras/sources-server/deployment.yaml
-    values:
-      - ./values/mandatory-values-ingress.yaml
-    set:
-      cf-argocd-extras.sourcesServer.configMaps.cmd-params-cm.data.alice: bob
-    asserts:
-      - equal:
-          path: spec.template.metadata.annotations["checksum/config"]
-          value: "cf799238e8fa77132860698833bfe00a6dce93ec57d994da59aa8be3909e61b5"
-
   - it: Sources Server with external redis
     template: cf-argocd-extras/sources-server/deployment.yaml
     values:

charts/gitops-runtime/values-ha.yaml

@@ -5,8 +5,7 @@ global:
       whenUnsatisfiable: DoNotSchedule
 
 app-proxy:
-  # -- Set to 1 until https://codefresh-io.atlassian.net/browse/CR-29338 is resolved
-  replicaCount: 1
+  replicaCount: 2
   pdb:
     enabled: true
     minAvailable: 1