bump dind-volume-cleanup (#335)

* bump dind-volume-cleanup

* bump dind-volume-cleanup and fix rbac

Author: roi-codefresh

.deploy/cf-runtime/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: cf-runtime
 description: A Helm chart for Codefresh Runner
 type: application
-version: 1.9.11
-appVersion: "1.9.11"
+version: 1.9.12
+appVersion: "1.9.12"

.deploy/cf-runtime/templates/volume-provisioner/_helpers.tpl

@@ -83,7 +83,7 @@ codefresh.io/application: pv-cleanup
 
 {{- define "cf-vp.docker-image-cleanup-cron" -}}
 {{- if ne .Values.dockerRegistry ""}}
-{{- .Values.dockerRegistry }}/codefresh/dind-volume-cleanup
-{{- else }}codefresh/dind-volume-cleanup
+{{- .Values.dockerRegistry }}/codefresh/dind-volume-cleanup:1.2.0
+{{- else }}codefresh/dind-volume-cleanup:1.2.0
 {{- end}}
 {{- end }}

.deploy/cf-runtime/templates/volume-provisioner/cluster-role.dind-volume-provisioner.vp.yaml

@@ -9,7 +9,7 @@ rules:
     verbs: [ "get", "list", "watch", "create", "delete", "patch" ]
   - apiGroups: [ "" ]
     resources: [ "persistentvolumeclaims" ]
-    verbs: [ "get", "list", "watch", "update" ]
+    verbs: [ "get", "list", "watch", "update", "delete" ]
   - apiGroups: [ "storage.k8s.io" ]
     resources: [ "storageclasses" ]
     verbs: [ "get", "list", "watch" ]

.deploy/cf-runtime/templates/volume-provisioner/cron-job.dind-volume-cleanup.vp.yaml

@@ -22,4 +22,8 @@ spec:
               env:
                 - name: PROVISIONED_BY
                   value: {{ include "cf-vp.volumeProvisionerName" . }}
+          securityContext:
+            fsGroup: 3000
+            runAsGroup: 3000
+            runAsUser: 3000
   {{- end }}

.deploy/cf-runtime/values.yaml

@@ -24,7 +24,7 @@ dockerRegistry: "quay.io" # Registry prefix for the runtime images (default quay
 newRelicLicense: "" # NEWRELIC_LICENSE_KEY (for app-proxy and runner deployments)
 
 runner: # Runner Deployment
-  image: "codefresh/venona:1.9.11"
+  image: "codefresh/venona:1.9.12"
   env: {}
   ## e.g:
   # env:

venona/VERSION

@@ -1 +1 @@
-1.9.11
+1.9.12

venonactl/VERSION

@@ -1 +1 @@
-1.9.11
+1.9.12

venonactl/pkg/store/store.go

@@ -180,6 +180,12 @@ func (s *Values) BuildValues() map[string]interface{} {
 				"MountAzureJson": false,
 			},
 			"LocalVolumeMonitor": s.LocalVolumeMonitor.Resources,
+			"VolumeCleaner": map[string]interface{}{
+				"Image": map[string]string{
+					"Name": "codefresh/dind-volume-cleanup",
+					"Tag":  "1.2.0",
+				},
+			},
 		},
 		"Monitor": map[string]interface{}{
 			"Enabled":              true,

venonactl/pkg/templates/kubernetes/cluster-role.dind-volume-provisioner.vp.yaml

@@ -11,7 +11,7 @@ rules:
     verbs: ["get", "list", "watch", "create", "delete", "patch"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "update"]
+    verbs: ["get", "list", "watch", "update", "delete"]
   - apiGroups: ["storage.k8s.io"]
     resources: ["storageclasses"]
     verbs: ["get", "list", "watch"]

venonactl/pkg/templates/kubernetes/cron-job.dind-volume-cleanup.vp.yaml

@@ -20,8 +20,12 @@ spec:
           restartPolicy: Never
           containers:
             - name: dind-volume-cleanup
-              image: {{ if ne .DockerRegistry ""}} {{- .DockerRegistry }}/codefresh/dind-volume-cleanup {{- else }}codefresh/dind-volume-cleanup {{- end}}
+              image: {{ if ne .DockerRegistry ""}} {{- .DockerRegistry }}/{{ .Storage.VolumeCleaner.Image.Name }}:{{ .Storage.VolumeCleaner.Image.Tag }} {{- else }}{{- .Storage.VolumeCleaner.Image.Name }}:{{ .Storage.VolumeCleaner.Image.Tag }} {{- end}}
               env:
               - name: PROVISIONED_BY
                 value: codefresh.io/dind-volume-provisioner-{{ .AppName }}-{{ .Namespace }}
+          securityContext:
+            fsGroup: 3000
+            runAsGroup: 3000
+            runAsUser: 3000
 {{- end }}