Merge branch 'release-2.9' into add-zhenia-codeowner-2-9

Author: vitalii-codefresh

README.md

@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.9.1](https://img.shields.io/badge/Version-2.9.1-informational?style=flat-square) ![AppVersion: 0.0.0](https://img.shields.io/badge/AppVersion-0.0.0-informational?style=flat-square)
+![Version: 2.9.13](https://img.shields.io/badge/Version-2.9.13-informational?style=flat-square) ![AppVersion: 2.9.0](https://img.shields.io/badge/AppVersion-2.9.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 
@@ -50,6 +50,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
   - [To 2.7.0](#to-2-7-0)
   - [To 2.8.0](#to-2-8-0)
   - [To 2.9.0](#to-2-9-0)
+  - [To 2.9.9](#to-2-9-9)
 - [Rollback](#rollback)
 - [Troubleshooting](#troubleshooting)
 - [Values](#values)
@@ -2385,6 +2386,12 @@ For built-in RabbitMQ `bitnami/rabbitmq` subchart, pre-upgrade hook was added to
 >
 > Before upgrading Codefresh, please follow the instruction in [this doc](https://codefresh.io/docs/docs/kb/articles/upgrade-deprecated-docker-images/) to identify deprecated images, upgrade them, and then proceed with upgrading the platform.
 
+### To 2-9-9
+
+> **BREAKING CHANGES in Default Runtime**
+>
+> Default Runtime (`system/default`) drops support for Kubernetes versions older than 1.32 in `deploy` step ([docs](https://codefresh.io/docs/docs/pipelines/steps/deploy/)). Supported versions are: 1.34, 1.33, 1.32.
+
 ####  Affected values
 
 - `.Values.runner` is removed

README.md.gotmpl

@@ -50,6 +50,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
   - [To 2.7.0](#to-2-7-0)
   - [To 2.8.0](#to-2-8-0)
   - [To 2.9.0](#to-2-9-0)
+  - [To 2.9.9](#to-2-9-9)
 - [Rollback](#rollback)
 - [Troubleshooting](#troubleshooting)
 - [Values](#values)
@@ -2395,6 +2396,12 @@ For built-in RabbitMQ `bitnami/rabbitmq` subchart, pre-upgrade hook was added to
 >
 > Before upgrading Codefresh, please follow the instruction in [this doc](https://codefresh.io/docs/docs/kb/articles/upgrade-deprecated-docker-images/) to identify deprecated images, upgrade them, and then proceed with upgrading the platform.
 
+### To 2-9-9
+
+> **BREAKING CHANGES in Default Runtime**
+> 
+> Default Runtime (`system/default`) drops support for Kubernetes versions older than 1.32 in `deploy` step ([docs](https://codefresh.io/docs/docs/pipelines/steps/deploy/)). Supported versions are: 1.34, 1.33, 1.32.
+
 ####  Affected values
 
 - `.Values.runner` is removed

charts/codefresh/.ci/values/defaults.yaml

@@ -103,3 +103,7 @@ hooks:
   rabbitmq:
     nodeSelector:
       kubernetes.io/arch: amd64
+
+internal-gateway:
+  ipv6:
+    enabled: false

charts/codefresh/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.9.1
+version: 2.9.13
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -11,7 +11,7 @@ sources:
 maintainers:
   - name: codefresh
     url: https://codefresh-io.github.io/
-appVersion: 0.0.0
+appVersion: 2.9.0
 annotations:
   artifacthub.io/prerelease: "false"
   artifacthub.io/alternativeName: "codefresh-onprem"
@@ -21,15 +21,27 @@ annotations:
   #   - kind:
   #     description: ""
   artifacthub.io/changes: |-
+    - kind: changed
+      description: 'Update "dind" to 28.5.2-3.0.7.'
+    - kind: changed
+      description: 'Update "compose" to 2.40.3-1.5.8.'
+    - kind: changed
+      description: 'Update "cf-docker-builder" to 1.5.3.'
+    - kind: changed
+      description: 'Update "cf-debugger" to 1.3.12.'
+    - kind: changed
+      description: 'Update "cf-docker-tag-pusher" to 1.3.21.'
+    - kind: changed
+      description: 'Update "curl" to 8.17.0'
     - kind: security
-      description: 'fix: security vulnerability in cf-broadcaster'
+      description: 'Fix various security vulnerabilities in default Classic Runtime and "cfsign" service.'
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
     version: 0.18.1
   - name: internal-gateway
     repository: oci://quay.io/codefresh/charts
-    version: 0.11.0
+    version: 0.12.2
     condition: internal-gateway.enabled
   - name: consul
     version: 11.4.32
@@ -72,175 +84,175 @@ dependencies:
     repository: https://kubernetes.github.io/ingress-nginx
     condition: ingress-nginx.enabled
   - name: cluster-providers
-    version: 1.18.2-onprem-8125523
+    version: 1.18.3-2.9-onprem-267b1a1
     repository: oci://quay.io/codefresh/charts
     condition: cluster-providers.enabled
   - name: kube-integration
-    version: 1.32.2-onprem-b539a1d
+    version: 1.32.4-2.9-onprem-8d5d282
     repository: oci://quay.io/codefresh/charts
     condition: kube-integration.enabled
   - name: charts-manager
-    version: 1.25.1-onprem-104a844
+    version: 1.25.3-2.9-onprem-ff2738e
     repository: oci://quay.io/codefresh/charts
     condition: charts-manager.enabled
   - name: cfsign
-    version: 1.8.10
+    version: 1.8.11-onprem-1aece39
     repository: oci://quay.io/codefresh/charts
     condition: cfsign.enabled
   - name: tasker-kubernetes
-    version: 1.27.2-onprem-48f1754
+    version: 1.27.3-2.9-onprem-e23c7a9
     repository: oci://quay.io/codefresh/charts
     condition: tasker-kubernetes.enabled
   - name: context-manager
-    version: 2.36.2-onprem-f58347f
+    version: 2.36.3-2.9-onprem-8653952
     repository: oci://quay.io/codefresh/charts
     condition: context-manager.enabled
   - name: pipeline-manager
-    version: 3.141.1-onprem-732296d
+    version: 3.141.3-2.9-onprem-f2a2047
     repository: oci://quay.io/codefresh/charts
     condition: pipeline-manager.enabled
   - name: gitops-dashboard-manager
-    version: 1.15.2-onprem-ce2f390
+    version: 1.15.3-2.9-onprem-01a8176
     repository: oci://quay.io/codefresh/charts
     condition: gitops-dashboard-manager.enabled
   - name: cfapi
     alias: cfapi
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi.enabled
   - name: cfapi
     alias: cfapi-auth
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-auth.enabled
   - name: cfapi
     alias: cfapi-internal
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-internal.enabled
   - name: cfapi
     alias: cfapi-ws
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-ws.enabled
   - name: cfapi
     alias: cfapi-admin
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-admin.enabled
   - name: cfapi
     alias: cfapi-endpoints
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-endpoints.enabled
   - name: cfapi
     alias: cfapi-terminators
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-terminators.enabled
   - name: cfapi
     alias: cfapi-sso-group-synchronizer
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-sso-group-synchronizer.enabled
   - name: cfapi
     alias: cfapi-buildmanager
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-buildmanager.enabled
   - name: cfapi
     alias: cfapi-cacheevictmanager
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-cacheevictmanager.enabled
   - name: cfapi
     alias: cfapi-eventsmanagersubscriptions
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-eventsmanagersubscriptions.enabled
   - name: cfapi
     alias: cfapi-kubernetesresourcemonitor
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-kubernetesresourcemonitor.enabled
   - name: cfapi
     alias: cfapi-environments
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-environments.enabled
   - name: cfapi
     alias: cfapi-gitops-resource-receiver
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-gitops-resource-receiver.enabled
   - name: cfapi
     alias: cfapi-downloadlogmanager
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-downloadlogmanager.enabled
   - name: cfapi
     alias: cfapi-teams
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-teams.enabled
   - name: cfapi
     alias: cfapi-kubernetes-endpoints
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-kubernetes-endpoints.enabled
   - name: cfapi
     alias: cfapi-test-reporting
-    version: 21.291.19-onprem-6333fdb
+    version: 21.291.22-onprem-759dadf
     repository: oci://quay.io/codefresh/charts
     condition: cfapi-test-reporting.enabled
   - name: cfui
     version: 14.99.39
     repository: oci://quay.io/codefresh/charts
     condition: cfui.enabled
   - name: k8s-monitor
-    version: 4.11.16
+    version: 4.11.18-2.9-onprem-8587e92
     repository: oci://quay.io/codefresh/charts
     condition: k8s-monitor.enabled
   - name: runtime-environment-manager
-    version: 3.43.6-onprem-1c37f3d
+    version: 3.43.7-2.9-onprem-6acc833
     repository: oci://quay.io/codefresh/charts
     condition: runtime-environment-manager.enabled
   - name: cf-broadcaster
-    version: 1.14.1
+    version: 1.14.3-2.9-onprem-592a35e
     repository: oci://quay.io/codefresh/charts
     condition: cf-broadcaster.enabled
   - name: helm-repo-manager
-    version: 0.23.0
+    version: 0.23.1-onprem-ec77e8c
     repository: oci://quay.io/codefresh/charts
     condition: helm-repo-manager.enabled
   - name: hermes
-    version: 0.21.21
+    version: 0.21.22
     repository: oci://quay.io/codefresh/charts
     condition: hermes.enabled
   - name: nomios
-    version: 0.11.11
+    version: 0.11.12
     repository: oci://quay.io/codefresh/charts
     condition: hermes.enabled
   - name: cronus
-    version: 0.8.12
+    version: 0.8.13
     repository: oci://quay.io/codefresh/charts
     condition: hermes.enabled
   - name: cf-platform-analytics
     alias: cf-platform-analytics-platform
-    version: 0.51.1-onprem-b904655
+    version: 0.51.3-onprem-27a92a8
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: cf-platform-analytics
     alias: cf-platform-analytics-etlstarter
-    version: 0.51.1-onprem-b904655
+    version: 0.51.3-onprem-27a92a8
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-platform
-    version: 1.3750.1-onprem-fe7a3d3
+    version: 1.3750.1-onprem-3c27f8e
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: argo-hub-platform
-    version: 0.1.27
+    version: 0.1.29
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
   - name: cf-oidc-provider

charts/codefresh/templates/gencerts/cm-gencerts.yaml

@@ -1,7 +1,6 @@
 {{- $nameBuilder := printf "%s-%s" .Release.Name .Values.global.builderService }}
-{{- $nameRunner := printf "%s-%s" .Release.Name .Values.global.runnerService }}
 {{- $ns := .Release.Namespace }}
-{{- $namesList := list $nameBuilder $nameRunner }}
+{{- $namesList := list $nameBuilder }}
 ---
 {{- if or .Values.global.certsJobs .Values.gencerts.enabled }}
 apiVersion: v1
@@ -90,4 +89,4 @@ data:
     fi
   {{- end }}
 
-{{- end }}
+{{- end }}