fix: onprem 2.11.26 update engine with fixed dependency 'kube-integration' (#405)

* Update `ENGINE_IMAGE` to version 3.2.26 and revise security annotation

* Document `WEBHOOK_BASE_URL` usage and update `TEMPLATE_ENGINE` image to version 0.15.7

* Update security annotation and bump `engine` to 3.2.26, `pikolo` to 0.15.7

* Fix broken dependency in `kube-integration` and update `engine` to version 3.2.26

* Fix broken dependency in `kube-integration` and update `engine` to version 3.2.26

* Fix broken dependency in `kube-integration` and update `engine` to version 3.2.26

* Revise bug fix annotation for "pipeline runtime" in Helm chart metadata

* Update engine to 3.3.0. ECR integration with Service Account uses the region of integration

* helm-docs

* Document `WEBHOOK_BASE_URL` configuration for externally-reachable Git providers

* Refine `WEBHOOK_BASE_URL` documentation and update chart metadata with engine version 3.3.0 changes

* Update README: improve webhook configuration note formatting

* Add "Configure platform URL for Git webhooks" section to README

---------

Co-authored-by: andrii-codefresh <andrii@codefresh.io>
Co-authored-by: Zhenya Tikhonov <zhenya.tikhonov@octopus.com>

Author: 3 people

README.md

@@ -37,6 +37,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
   - [Projects pipelines limit](#projects-pipelines-limit)
   - [Enable session cookie](#enable-session-cookie)
   - [X-Frame-Options response header](#x-frame-options-response-header)
+  - [Configure platform URL for Git webhooks](#configure-platform-url-for-git-webhooks)
   - [Image digests in containers](#image-digests-in-containers)
   - [Hermes configuration](#hermes-configuration)
 - [Configuring OIDC Provider](#configuring-oidc-provider)
@@ -1448,6 +1449,20 @@ cfapi:
     USE_SHA256_GITHUB_SIGNATURE: "true"
 ```
 
+### Configure platform URL for Git webhooks
+
+By default Codefresh registers webhooks using CF_HOST_NAME/EXTERNAL_URL (the same hostname used for the UI/API).
+ If that hostname is internal-only and unreachable by the Git provider, set WEBHOOK_BASE_URL
+to an externally-reachable hostname; it is used only for webhook registration, everything else keeps using CF_HOST_NAME/EXTERNAL_URL.
+> [!IMPORTANT]
+> This only affects webhooks registered after the change - existing triggers must be deleted and recreated.
+
+```yaml
+cfapi:
+  env:
+    WEBHOOK_BASE_URL: "https://external.mydomain.com"
+```
+
 ### Image digests in containers
 
 In Codefresh On-Prem 2.6.x all Codefresh owner microservices include image digests in the default subchart values.

README.md.gotmpl

@@ -37,6 +37,7 @@ Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/
   - [Projects pipelines limit](#projects-pipelines-limit)
   - [Enable session cookie](#enable-session-cookie)
   - [X-Frame-Options response header](#x-frame-options-response-header)
+  - [Configure platform URL for Git webhooks](#configure-platform-url-for-git-webhooks)
   - [Image digests in containers](#image-digests-in-containers)
   - [Hermes configuration](#hermes-configuration)
 - [Configuring OIDC Provider](#configuring-oidc-provider)
@@ -1457,6 +1458,20 @@ cfapi:
     USE_SHA256_GITHUB_SIGNATURE: "true"
 ```
 
+### Configure platform URL for Git webhooks
+
+By default Codefresh registers webhooks using CF_HOST_NAME/EXTERNAL_URL (the same hostname used for the UI/API).
+ If that hostname is internal-only and unreachable by the Git provider, set WEBHOOK_BASE_URL
+to an externally-reachable hostname; it is used only for webhook registration, everything else keeps using CF_HOST_NAME/EXTERNAL_URL.
+> [!IMPORTANT]
+> This only affects webhooks registered after the change - existing triggers must be deleted and recreated.
+
+```yaml
+cfapi:
+  env:
+    WEBHOOK_BASE_URL: "https://external.mydomain.com"
+```
+
 ### Image digests in containers
 
 In Codefresh On-Prem 2.6.x all Codefresh owner microservices include image digests in the default subchart values.

charts/codefresh/Chart.yaml

@@ -21,10 +21,14 @@ annotations:
   #   - kind:
   #     description: ""
   artifacthub.io/changes: |-
-    - kind: changed
-      description: update cf-ui to 14.100.14
     - kind: fixed
-      description: added "nodes" section to accounts admin panel
+      description: 'Fixes the bug in the default Classic Runtime that was causing steps of type "deploy" to fail while pulling secrets.'
+    - kind: fixed
+      description: 'ECR integration with Service Account uses the region of integration.'
+    - kind: changed
+      description: 'Update "engine" to "3.3.0"'
+    - kind: security
+      description: 'Update "pikolo" to "0.15.7" tag. Security fixes.'
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts