Skip to content

Conversation

@vbontempi
Copy link
Member

@vbontempi vbontempi commented May 28, 2025

Description

Upgrade manifest version from v1beta to v1 for cluster secret store, secret store and external secret before upgrading eso chart 0.17

This fix include the following renovate PR content

This PR contains the following updates:

Package Type Update Change
terraform-ibm-modules/base-ocp-vpc/ibm (source) module minor 3.46.17 -> 3.48.3
terraform-ibm-modules/secrets-manager-private-cert-engine/ibm (source) module minor 1.4.0 -> 1.5.2
terraform-ibm-modules/secrets-manager-secret-group/ibm (source) module patch 1.3.5 -> 1.3.7

Upgrade test skipped due to the manifest changes.
Example of upgrade test difference in helm release

Before: 
        	            		{"metadata":"SECURE_VALUE_HIDDEN_HASH:-65e5b99b9881b62bd3aa39deca9e9ee1fdaecbaf474a31a9d15b991e","values":"SECURE_VALUE_HIDDEN_HASH:-9db1cad1070a584a34257542623d6f82e83d8960cd335db1c8d4b987"}
        	            	  After: 
        	            		{"values":"SECURE_VALUE_HIDDEN_HASH:-f3703aefaa11878c1a71294669aa1e110465768f2ecc04a28260f5b8"}
        	            	
        	            	  "after_sensitive": {
        	            	    "metadata": [],
        	            	    "postrender": [],
        	            	    "repository_password": true,
        	            	    "set": [],
        	            	    "set_list": [],
        	            	    "set_sensitive": [],
        	            	    "values": [
        	            	      false
        	            	    ]
        	            	  },
        	            	  "after_unknown": {
        	            	    "metadata": true,
        	            	    "postrender": [],
        	            	    "set": [],
        	            	    "set_list": [],
        	            	    "set_sensitive": [],
        	            	    "values": [
        	            	      false
        	            	    ]
        	            	  },
        	            	  "before": {
        	            	    "atomic": false,
        	            	    "chart": "../../modules/eso-secretstore/../../chart/raw",
        	            	    "cleanup_on_fail": false,
        	            	    "create_namespace": false,
        	            	    "dependency_update": false,
        	            	    "description": null,
        	            	    "devel": null,
        	            	    "disable_crd_hooks": false,
        	            	    "disable_openapi_validation": false,
        	            	    "disable_webhooks": false,
        	            	    "force_update": false,
        	            	    "id": "tpnspace2-es-store-1",
        	            	    "keyring": null,
        	            	    "lint": false,
        	            	    "manifest": null,
        	            	    "max_history": 0,
        	            	    "metadata": "SECURE_VALUE_HIDDEN_HASH:-a2ecb7bc9b86936adce8e6fde3b77d34be54a498c2492ab6e8197ea6",
        	            	    "name": "tpnspace2-es-store-1",
        	            	    "namespace": "tpnspace2",
        	            	    "pass_credentials": false,
        	            	    "postrender": "SECURE_VALUE_HIDDEN_HASH:-e02ee5d61e02f6056f180d5878e59d4c704e4875dff8a43c7db38869",
        	            	    "recreate_pods": false,
        	            	    "render_subchart_notes": true,
        	            	    "replace": false,
        	            	    "repository": null,
        	            	    "repository_ca_file": null,
        	            	    "repository_cert_file": null,
        	            	    "repository_key_file": null,
        	            	    "repository_password": "SECURE_VALUE_HIDDEN_HASH:-334202dc05ad1276501964711fbe5c975c89bc4678e8b5da2142857d",
        	            	    "repository_username": null,
        	            	    "reset_values": false,
        	            	    "reuse_values": false,
        	            	    "set": "SECURE_VALUE_HIDDEN_HASH:-302a27ffca71bc776ca22c6d2bd591ea3306aacf3853cb486e49bc20",
        	            	    "set_list": "SECURE_VALUE_HIDDEN_HASH:-d9246c08ff0bfc934039b5b088de3e82d0010d963e1e2ae6455437a2",
        	            	    "set_sensitive": "SECURE_VALUE_HIDDEN_HASH:-a131da067c349a3fe41875a656a12e865878270afdcb7e96b86cda46",
        	            	    "skip_crds": false,
        	            	    "status": "deployed",
        	            	    "timeout": 600,
        	            	    "upgrade_install": null,
        	            	    "values": "SECURE_VALUE_HIDDEN_HASH:-34ddd27c9d287d07e223f07e04768ecc08e4416ee4b4bd5d628eeec3",
        	            	    "verify": false,
        	            	    "version": "v0.2.5",
        	            	    "wait": true,
        	            	    "wait_for_jobs": false
        	            	  },
        	            	  "before_sensitive": {
        	            	    "metadata": [
        	            	      {}
        	            	    ],
        	            	    "postrender": [],
        	            	    "repository_password": true,
        	            	    "set": [],
        	            	    "set_list": [],
        	            	    "set_sensitive": [],
        	            	    "values": [
        	            	      false
        	            	    ]
        	            	  }
        	            	}

Release required?

  • No release
  • Patch release (x.x.X)
  • Minor release (x.X.x)
  • Major release (X.x.x)

Release Notes

Upgrade manifest version from v1beta to v1 for cluster secret store, secret store and external secret, preparing for the upgrade for the ESO chart version 0.17 coming with the next version
Includes the following renovate changes

terraform-ibm-modules/terraform-ibm-base-ocp-vpc (terraform-ibm-modules/base-ocp-vpc/ibm)

v3.48.3

Compare Source

Bug Fixes

v3.48.2

Compare Source

Bug Fixes

v3.48.1

Compare Source

Bug Fixes
  • display error code and error message when api call fails in reset_iks_api_key.sh (#​696) (813a0c7)

v3.48.0

Compare Source

Features
  • added support to enable Secrets Manager integration using new input enable_secrets_manager_integration so you can centrally manage Ingress subdomain certificates and other secrets (#​672) (21e9aaf)

v3.47.4

Compare Source

Bug Fixes

v3.47.3

Compare Source

Bug Fixes

v3.47.2

Compare Source

Bug Fixes
  • deps: update terraform terraform-ibm-modules/landing-zone-vpc/ibm to v7.23.10 (#​688) (50ca4c2)

v3.47.1

Compare Source

Bug Fixes

v3.47.0

Compare Source

Features
  • DA updates:
    - the logic to handle various kinds of machine_types has been improved to help prevent failures in certain use cases
    - the default_secondary_storage input is now removed. As GPUs will be included in additional worker pools, secondary storage can be provided there. (#​683) (7765d40)

v3.46.19

Compare Source

Bug Fixes
  • deps: update terraform ibm to latest for deployable architectures (#​677) (b551b72)

v3.46.18

Compare Source

Bug Fixes
  • deps: updated required ibm provider to >=1.78.2, <2.0.0 to pull in a fix for this provider issue. The workaround for this issue has now been removed from the module, so if upgrading from a previous version you will see an expected destroy of the null_resource.confirm_lb_active resource. Only applies if passing a value for the additional_lb_security_group_ids input. (#​684) (0d6fce6)
terraform-ibm-modules/terraform-ibm-secrets-manager-private-cert-engine (terraform-ibm-modules/secrets-manager-private-cert-engine/ibm)

v1.5.2

Compare Source

Bug Fixes

v1.5.1

Compare Source

Bug Fixes
  • deps: update terraform ibm to latest for deployable architectures (#​315) (b60b911)

v1.5.0

Compare Source

Features
terraform-ibm-modules/terraform-ibm-secrets-manager-secret-group (terraform-ibm-modules/secrets-manager-secret-group/ibm)

v1.3.7

Compare Source

Bug Fixes

v1.3.6

Compare Source

Bug Fixes

Run the pipeline

If the CI pipeline doesn't run when you create the PR, the PR requires a user with GitHub collaborators access to run the pipeline.

Run the CI pipeline when the PR is ready for review and you expect tests to pass. Add a comment to the PR with the following text:

/run pipeline

Checklist for reviewers

  • If relevant, a test for the change is included or updated with this PR.
  • If relevant, documentation for the change is included or updated with this PR.

For mergers

  • Use a conventional commit message to set the release level. Follow the guidelines.
  • Include information that users need to know about the PR in the commit message. The commit message becomes part of the GitHub release notes.
  • Use the Squash and merge option.

@vbontempi
Copy link
Member Author

/run pipeline

@vbontempi vbontempi requested a review from ocofaigh May 30, 2025 14:12
@vbontempi vbontempi changed the title Fix renovate and upgrade eso helm release manifest version from v1beta to v1 Fix renovate and upgrade release manifest version from v1beta to v1 for ESO Custom resources May 30, 2025
@vbontempi
Copy link
Member Author

/run pipeline

@vbontempi
Copy link
Member Author

/run pipeline

@vbontempi vbontempi requested a review from shemau June 3, 2025 05:40
@ocofaigh ocofaigh merged commit 1a4b712 into main Jun 3, 2025
5 checks passed
@ocofaigh ocofaigh deleted the fix_renovate branch June 3, 2025 08:18
@terraform-ibm-modules-ops
Copy link
Contributor

🎉 This PR is included in version 1.5.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants