Release MCK 1.7.0 (#549)

* Release MCK 1.7.0

* After second try

---------

Co-authored-by: Evergreen <kubernetes-hosted-team@mongodb.com>
Co-authored-by: Vivek Singh <vivek.s@mongodb.com>

Author: 3 people

charts/mongodb-kubernetes/Chart.yaml

@@ -4,7 +4,7 @@ description: |
   MongoDB Controllers for Kubernetes translate the human knowledge of
   creating a MongoDB instance into a scalable, repeatable, and standardized
   method.
-version: 1.6.1
+version: 1.7.0
 kubeVersion: '>=1.16-0'
 type: application
 keywords:

charts/mongodb-kubernetes/crds/mongodb.com_mongodbsearch.yaml

@@ -52,6 +52,32 @@ spec:
             type: object
           spec:
             properties:
+              autoEmbedding:
+                description: |-
+                  Configure MongoDB Search's automatic generation of vector embeddings using an embedding model service.
+                  `embedding` field of mongot config is generated using the values provided here.
+                properties:
+                  embeddingModelAPIKeySecret:
+                    description: |-
+                      EmbeddingModelAPIKeySecret would have the name of the secret that has two keys
+                      query-key and indexing-key for embedding model's API keys.
+                    properties:
+                      name:
+                        default: ""
+                        description: |-
+                          Name of the referent.
+                          This field is effectively required, but due to backwards compatibility is
+                          allowed to be empty. Instances of this type with an empty value here are
+                          almost certainly wrong.
+                          More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                        type: string
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  providerEndpoint:
+                    type: string
+                required:
+                - embeddingModelAPIKeySecret
+                type: object
               logLevel:
                 description: Configure verbosity of mongot logs. Defaults to INFO
                   if not set.

charts/mongodb-kubernetes/crds/mongodb.com_opsmanagers.yaml

@@ -1283,6 +1283,11 @@ spec:
                           type: object
                         name:
                           type: string
+                        objectLockEnabled:
+                          description: |-
+                            ObjectLockEnabled indicates whether S3 Object Lock is enabled for the bucket.
+                            This should be enabled to leverage Immutable Backups.
+                          type: boolean
                         pathStyleAccessEnabled:
                           type: boolean
                         s3BucketEndpoint:
@@ -1375,6 +1380,11 @@ spec:
                           type: object
                         name:
                           type: string
+                        objectLockEnabled:
+                          description: |-
+                            ObjectLockEnabled indicates whether S3 Object Lock is enabled for the bucket.
+                            This should be enabled to leverage Immutable Backups.
+                          type: boolean
                         pathStyleAccessEnabled:
                           type: boolean
                         s3BucketEndpoint:

charts/mongodb-kubernetes/templates/operator.yaml

@@ -61,8 +61,10 @@ spec:
           command:
             - /usr/local/bin/mongodb-kubernetes-operator
           {{- end }}
-          {{- if .Values.multiCluster.clusters }}
           volumeMounts:
+            - mountPath: /tmp/k8s-webhook-server/serving-certs
+              name: webhook-server-dir
+          {{- if .Values.multiCluster.clusters }}
             - mountPath: /etc/config/kubeconfig
               name: kube-config-volume
           {{- end }}
@@ -213,6 +215,10 @@ spec:
             - name: MDB_WEBHOOK_REGISTER_CONFIGURATION
               value: "false"
     {{- end }}
+    {{- if .Values.operator.webhook.name }}
+            - name: MDB_WEBHOOK_NAME
+              value: {{ .Values.operator.webhook.name | quote }}
+    {{- end }}
     {{- if .Values.operator.maxConcurrentReconciles }}
             - name: MDB_MAX_CONCURRENT_RECONCILES
               value: "{{ .Values.operator.maxConcurrentReconciles }}"
@@ -278,13 +284,15 @@ spec:
               value: '{{ (splitn "=" 2 .)._1 }}'
       {{- end }}
     {{- end }}
-{{- if .Values.multiCluster.clusters }}
       volumes:
+        - name: webhook-server-dir
+          emptyDir: {}
+        {{- if .Values.multiCluster.clusters }}
         - name: kube-config-volume
           secret:
             defaultMode: 420
             secretName: {{ .Values.multiCluster.kubeConfigSecretName }}
-{{- end }}
+        {{- end }}
 
 {{- with .Values.operator }}
   {{- with .nodeSelector }}

charts/mongodb-kubernetes/tests/operator_security_context_test.yaml

@@ -140,3 +140,21 @@ tests:
       - equal:
           path: spec.template.spec.containers[?(@.name=="mongodb-kubernetes-operator-multi-cluster")].securityContext.capabilities.drop
           value: [ ALL ]
+  - it: webhook server certificate volume mount exists
+    asserts:
+      - exists:
+          path: spec.template.spec.containers[?(@.name=="mongodb-kubernetes-operator")].volumeMounts[?(@.name=="webhook-server-dir")]
+      - equal:
+          path: spec.template.spec.containers[?(@.name=="mongodb-kubernetes-operator")].volumeMounts[?(@.name=="webhook-server-dir")].mountPath
+          value: /tmp/k8s-webhook-server/serving-certs
+      - exists:
+          path: spec.template.spec.volumes[?(@.name=="webhook-server-dir")]
+  - it: webhook server certificate volume mount exists
+    asserts:
+      - exists:
+          path: spec.template.spec.containers[?(@.name=="mongodb-kubernetes-operator")].volumeMounts[?(@.name=="webhook-server-dir")]
+      - equal:
+          path: spec.template.spec.containers[?(@.name=="mongodb-kubernetes-operator")].volumeMounts[?(@.name=="webhook-server-dir")].mountPath
+          value: /tmp/k8s-webhook-server/serving-certs
+      - exists:
+          path: spec.template.spec.volumes[?(@.name=="webhook-server-dir")]

charts/mongodb-kubernetes/values-openshift.yaml

@@ -23,11 +23,18 @@ operator:
     #  - ValidatingWebhookConfigurations will be managed by the operator (requires cluster permissions)
     registerConfiguration: true
 
+    # name: Custom name for the ValidatingWebhookConfiguration resource.
+    # Default (when not set): "mdbpolicy.mongodb.com"
+    # Use this to allow multiple operator instances on the same cluster.
+    # Example:
+    #   name: "mdbpolicy.my-namespace.mongodb.com"
+    name: ''
+
   # Versions listed here are used to populate RELATED_IMAGE_ env variables in the operator deployment.
   # Environment variables prefixed with RELATED_IMAGE_ are used by operator-sdk to generate relatedImages section
   # with sha256 digests pinning for the certified operator bundle with disconnected environment feature enabled.
   # https://docs.openshift.com/container-platform/4.14/operators/operator_sdk/osdk-generating-csvs.html#olm-enabling-operator-for-restricted-network_osdk-generating-csvs
-  version: 1.6.1
+  version: 1.7.0
 relatedImages:
   opsManager:
   - 6.0.26
@@ -41,6 +48,8 @@ relatedImages:
   - 7.0.18
   - 7.0.19
   - 7.0.20
+  - 7.0.21
+  - 7.0.22
   - 8.0.0
   - 8.0.1
   - 8.0.2
@@ -56,6 +65,8 @@ relatedImages:
   - 8.0.15
   - 8.0.16
   - 8.0.17
+  - 8.0.18
+  - 8.0.19
   mongodb:
   - 4.4.0-ubi8
   - 4.4.1-ubi8
@@ -114,19 +125,23 @@ relatedImages:
   - 107.0.18.8784-1
   - 107.0.19.8805-1
   - 107.0.20.8807-1
+  - 107.0.21.8817-1
+  - 107.0.22.8828-1
   - 108.0.1.8718-1
   - 108.0.11.8830-1
   - 108.0.12.8846-1
   - 108.0.13.8870-1
   - 108.0.15.8888-1
   - 108.0.16.8895-1
+  - 108.0.18.8921-1
+  - 108.0.19.8941-1
   - 108.0.2.8729-1
   - 108.0.3.8758-1
   - 108.0.4.8770-1
   - 108.0.6.8796-1
   - 108.0.7.8810-1
   - 12.0.35.7911-1
-  - 13.44.0.10034-1
+  - 13.46.0.10171-1
   mongodbLegacyAppDb:
   - 4.2.11-ent
   - 4.2.2-ent

charts/mongodb-kubernetes/values.yaml

@@ -22,7 +22,7 @@ operator:
   deployment_name: mongodb-kubernetes-operator
 
   # Version of mongodb-kubernetes-operator
-  version: 1.6.1
+  version: 1.7.0
 
   # The Custom Resources that will be watched by the Operator. Needs to be changed if only some of the CRDs are installed
   watchedResources:
@@ -113,6 +113,13 @@ operator:
     #  - ValidatingWebhookConfigurations will be managed by the operator.
     registerConfiguration: true
 
+    # name: Custom name for the ValidatingWebhookConfiguration resource.
+    # Default (when not set): "mdbpolicy.mongodb.com"
+    # Use this to allow multiple operator instances on the same cluster.
+    # Example:
+    #   name: "mdbpolicy.my-namespace.mongodb.com"
+    name: ''
+
   telemetry:
     collection:
       clusters: {}
@@ -129,24 +136,24 @@ operator:
 ## Database
 database:
   name: mongodb-kubernetes-database
-  version: 1.6.1
+  version: 1.7.0
 
 initDatabase:
   name: mongodb-kubernetes-init-database
-  version: 1.6.1
+  version: 1.7.0
 
 ## Ops Manager
 opsManager:
   name: mongodb-enterprise-ops-manager-ubi
 
 initOpsManager:
   name: mongodb-kubernetes-init-ops-manager
-  version: 1.6.1
+  version: 1.7.0
 
 ## Application Database
 initAppDb:
   name: mongodb-kubernetes-init-appdb
-  version: 1.6.1
+  version: 1.7.0
 
 agent:
   name: mongodb-agent
@@ -227,4 +234,4 @@ search:
   repo: quay.io/mongodb
   name: mongodb-search
   # default MongoDB Search version used; can be overridden by setting MongoDBSearch.spec.version field.
-  version: 0.55.0
+  version: 0.60.1