Charts CI

``` Updated: jenkins/jenkins: - 5.2.1 kong/kong: - 2.39.0 ```
rancher · Jun 13, 2024 · 68ff238 · 68ff238
1 parent e4c0aa1
commit 68ff238
Show file tree

Hide file tree

Showing 32 changed files with 17,717 additions and 15,708 deletions.
diff --git a/assets/jenkins/jenkins-5.2.1.tgz b/assets/jenkins/jenkins-5.2.1.tgz
diff --git a/assets/kong/kong-2.39.0.tgz b/assets/kong/kong-2.39.0.tgz
diff --git a/charts/jenkins/jenkins/CHANGELOG.md b/charts/jenkins/jenkins/CHANGELOG.md
@@ -12,6 +12,10 @@ Use the following links to reference issues, PRs, and commits prior to v2.6.0.
 The changelog until v1.5.7 was auto-generated based on git commits.
 Those entries include a reference to the git commit to be able to get more details.
 
+## 5.2.1
+
+Update `jenkins/jenkins` to version `2.452.2-jdk17`
+
 ## 5.2.0
 
 Add `agent.inheritYamlMergeStrategy` to allow configuring this setting on the default agent pod template.

diff --git a/charts/jenkins/jenkins/Chart.yaml b/charts/jenkins/jenkins/Chart.yaml
@@ -1,10 +1,10 @@
 annotations:
   artifacthub.io/category: integration-delivery
   artifacthub.io/changes: |
-    - Add `agent.inheritYamlMergeStrategy` to allow configuring this setting on the default agent pod template.
+    - Update `jenkins/jenkins` to version `2.452.2-jdk17`
   artifacthub.io/images: |
     - name: jenkins
-      image: docker.io/jenkins/jenkins:2.452.1-jdk17
+      image: docker.io/jenkins/jenkins:2.452.2-jdk17
     - name: k8s-sidecar
       image: docker.io/kiwigrid/k8s-sidecar:1.27.4
     - name: inbound-agent
@@ -22,7 +22,7 @@ annotations:
   catalog.cattle.io/kube-version: '>=1.14-0'
   catalog.cattle.io/release-name: jenkins
 apiVersion: v2
-appVersion: 2.452.1
+appVersion: 2.452.2
 description: 'Jenkins - Build great things at any scale! As the leading open source
   automation server, Jenkins provides over 1800 plugins to support building, deploying
   and automating any project. '
@@ -50,4 +50,4 @@ sources:
 - https://github.com/maorfr/kube-tasks
 - https://github.com/jenkinsci/configuration-as-code-plugin
 type: application
-version: 5.2.0
+version: 5.2.1
diff --git a/charts/kong/kong/CHANGELOG.md b/charts/kong/kong/CHANGELOG.md
@@ -1,5 +1,31 @@
 # Changelog
 
+## 2.39.0
+
+### Changes
+
+* Updated handling of `session_conf_secret` to accommodate Kong 3.6.
+  It can now be omitted [when using OIDC](https://docs.konghq.com/gateway/3.6.x/kong-manager/auth/oidc/migrate/).
+  [#1033](https://github.com/Kong/charts/pull/1033)
+* Setting a Service's `servicePort` to 0 now disables that port on the Service,
+  for use when the external Service and container listens should differ, such
+  as when terminating TLS at a LoadBalancer.
+  [#1021](https://github.com/Kong/charts/pull/1021)
+* Added an `ingressController.admissionWebhook.filterSecrets` option. When
+  enabled, the webhook will only validate Secrets that have one of the
+  recognized KIC labels:
+
+  * `konghq.com/credential: <"key-auth", "jwt", etc. credential types>`
+  * `konghq.com/validate: <"plugin", "custom">`
+
+  Earlier versions checked all Secrets and did not require labels, interfering
+  with non-KIC labels. Requires KIC 3.0+.
+  [#1061](https://github.com/Kong/charts/pull/1061)
+* Add RBAC policy rules for Custom Entities
+  [#1081](https://github.com/Kong/charts/pull/1081)
+* Bumped default `kong/kubernetes-ingress-controller` image tag to 3.2.
+  [#1085](https://github.com/Kong/charts/pull/1085)
+
 ## 2.38.0
 
 ### Changes

diff --git a/charts/kong/kong/Chart.yaml b/charts/kong/kong/Chart.yaml
@@ -18,4 +18,4 @@ maintainers:
 name: kong
 sources:
 - https://github.com/Kong/charts/tree/main/charts/kong
-version: 2.38.0
+version: 2.39.0
diff --git a/charts/kong/kong/README.md b/charts/kong/kong/README.md
@@ -751,6 +751,7 @@ section of `values.yaml` file:
 | watchNamespaces                            | List of namespaces to watch. Watches all namespaces if empty                                                                                             | []                                 |
 | admissionWebhook.enabled                   | Whether to enable the validating admission webhook                                                                                                       | true                               |
 | admissionWebhook.failurePolicy             | How unrecognized errors from the admission endpoint are handled (Ignore or Fail)                                                                         | Ignore                             |
+| admissionWebhook.filterSecrets             | Limit the webhook to only Secrets with the appropriate KIC validation labels.                                                                            | false                              |
 | admissionWebhook.port                      | The port the ingress controller will listen on for admission webhooks                                                                                    | 8080                               |
 | admissionWebhook.address                   | The address the ingress controller will listen on for admission webhooks, if not 0.0.0.0                                                                 |                                    |
 | admissionWebhook.annotations               | Annotations for the Validation Webhook Configuration                                                                                                     |                                    |

diff --git a/charts/kong/kong/ci/.chartsnap.yaml b/charts/kong/kong/ci/.chartsnap.yaml
@@ -24,3 +24,5 @@ dynamicFields:
     name: chartsnap-kong-validations
     jsonPath:
       - /webhooks/0/clientConfig/caBundle
+      - /webhooks/1/clientConfig/caBundle
+      - /webhooks/2/clientConfig/caBundle