build: promote runtime components (#689)

Co-authored-by: andrii-codefresh <andrii@codefresh.io>

Author: alinashklyar

charts/cf-runtime/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 description: A Helm chart for Codefresh Runner
 name: cf-runtime
-version: 10.0.18
+version: 10.1.0
 keywords:
   - codefresh
   - runner
@@ -18,33 +18,20 @@ annotations:
   # Supported kinds: `added`, `changed`, `deprecated`, `removed`, `fixed`, `security`:
   artifacthub.io/changes: |
     - kind: changed
-      description: 'update "runner" to 2.0.10'
+      description: 'update "cf-k8s-agent" to 1.3.35'
     - kind: changed
-      description: 'update "template-engine" to 0.15.1'
+      description: 'update "cf-deploy-kubernetes" to 18.0.0'
+    - kind: added
+      description: "add support for k8s 1.35 in \"deploy\" step"
+    - kind: deprecated
+      description: "remove support for k8s 1.32 in \"deploy\" step"
+      links:
+        - name: Codefresh Docs - Deploy
+          url: https://codefresh.io/docs/docs/pipelines/steps/deploy/
     - kind: changed
-      description: 'update "codefresh/cli" to 1.1.4-rootless'
+      description: 'update "dind-volume-utils" to 1.30.8'
     - kind: changed
-      description: 'update "pipeline-debugger" to 1.3.14'
-    - kind: changed
-      description: 'update "fs-ops" to 1.2.13'
-    - kind: changed
-      description: 'update "gc-builder" to 0.5.10'
-    - kind: changed
-      description: 'update "compose" to v5.1.3-1.6.4'
-    - kind: changed
-      description: 'update "dind" to 29.4.1-3.0.15'
-    - kind: changed
-      description: 'update "docker-builder" to 1.6.1'
-    - kind: changed
-      description: 'update "engine" to 3.2.8'
-    - kind: changed
-      description: 'update "git-cloner" to 10.3.11'
-    - kind: changed
-      description: 'update "docker-pusher" to 6.0.26'
-    - kind: changed
-      description: 'update "kubectl" to 1.35.4'
-    - kind: fixed
-      description: 'fix support for Git LFS in "clone" step'
+      description: 'update "cosign-image-signer" to 3.0.6-cf.2'
     - kind: security
       description: 'fix various security vulnerabilities in different runtime components'
 dependencies:

charts/cf-runtime/README.md

@@ -1,6 +1,6 @@
 ## Codefresh Runner
 
-![Version: 10.0.18](https://img.shields.io/badge/Version-10.0.18-informational?style=flat-square)
+![Version: 10.1.0](https://img.shields.io/badge/Version-10.1.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/installation/codefresh-runner/) to Kubernetes.
 
@@ -22,6 +22,7 @@ Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/insta
   - [To 8.x](#to-8-x)
   - [To 8.2.x](#to-8-2-x)
   - [To 9.x](#to-9-x)
+  - [To 10.1.x](#to-10-1-x)
 - [Architecture](#architecture)
 - [Configuration](#configuration)
   - [Runtime spec synchronization](#runtime-spec-synchronization)
@@ -346,6 +347,10 @@ runtime:
 
 * **Removed**: OTel metric `codefresh.classic.build.deprecated_images.pulled` emitted by the `engine` component is dropped.
 
+### To 10.1.x
+
+* **Removed**: `deploy` step ([docs](https://codefresh.io/docs/docs/pipelines/steps/deploy/)) drops support for 1.32 Kubernetes version. Supported versions are: 1.35, 1.34, 1.33.
+
 ## Architecture
 
 [Codefresh Runner architecture](https://codefresh.io/docs/docs/installation/codefresh-runner/#codefresh-runner-architecture)
@@ -1271,7 +1276,7 @@ Install the Helm chart
 | monitor.affinity | object | `{}` | Set affinity |
 | monitor.enabled | bool | `false` | Enable monitor Ref: https://codefresh.io/docs/docs/installation/codefresh-runner/#install-monitoring-component |
 | monitor.env | object | `{}` | Add additional env vars |
-| monitor.image | object | `{"digest":"sha256:3bea972f87f447b9872c1a309f834f3a6bb9651149b259cd7787e44f574fd574","registry":"quay.io","repository":"codefresh/cf-k8s-agent","tag":"1.3.34"}` | Set image |
+| monitor.image | object | `{"digest":"sha256:730c979cd8d47ccc45d9590985654acb1a1edfb24fcf410cc890c25de0d8c380","registry":"quay.io","repository":"codefresh/cf-k8s-agent","tag":"1.3.35"}` | Set image |
 | monitor.nodeSelector | object | `{}` | Set node selector |
 | monitor.podAnnotations | object | `{}` | Set pod annotations |
 | monitor.podSecurityContext | object | `{}` |  |
@@ -1352,7 +1357,7 @@ Install the Helm chart
 | runtime.dind.userVolumeMounts | object | `{}` | Add extra volume mounts |
 | runtime.dind.userVolumes | object | `{}` | Add extra volumes |
 | runtime.dindDaemon | object | See below | DinD pod daemon config |
-| runtime.engine | object | `{"affinity":{},"command":["node","dist/server/index.js"],"env":{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"},"image":{"digest":"sha256:2e3a64076bfd9b33432701a07d5b5a2c3ee8a74c5d2f4d6b1203d0deda8e7909","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.2.8"},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"resources":{"limits":{"cpu":"1000m","memory":"2048Mi"},"requests":{"cpu":"100m","memory":"128Mi"}},"runtimeImages":{"alpine":{"digest":"sha256:9a341ff2287c54b86425cbee0141114d811ae69d88a36019087be6d896cef241","registry":"docker.io","repository":"alpine","tag":"edge"},"compose":{"digest":"sha256:6b4413b99653b623112bd461f2c58ad30515b89254afe644f77474aa8325fbeb","registry":"quay.io","repository":"codefresh/compose","tag":"v5.1.3-1.6.4"},"container-logger":{"digest":"sha256:d666502f8bb95a00a1a598dd33ccdd10927ae73d32a5eed278d476bb1c7140a4","registry":"quay.io","repository":"codefresh/cf-container-logger","tag":"2.0.12"},"cosign-image-signer":{"digest":"sha256:85ce347ad7b11a7e324ca64e38b0701bc6fb739bfcbb67a3b4657ef36939e623","registry":"quay.io","repository":"codefresh/cf-cosign-image-signer","tag":"3.0.6-cf.1"},"default-qemu":{"digest":"sha256:d3b963f787999e6c0219a48dba02978769286ff61a5f4d26245cb6a6e5567ea3","registry":"docker.io","repository":"tonistiigi/binfmt","tag":"qemu-v10.2.1"},"docker-builder":{"digest":"sha256:817ebca78533e0bc3fd35e8c4498979fdd2f5435616ef0f2d495b94f8873563a","registry":"quay.io","repository":"codefresh/cf-docker-builder","tag":"1.6.1"},"docker-puller":{"digest":"sha256:818773818053553505afbaf109bf67f1b22bdb80307e155d27d4f06eab3c3246","registry":"quay.io","repository":"codefresh/cf-docker-puller","tag":"8.0.27"},"docker-pusher":{"digest":"sha256:fdd6d80b02d9464689984208045ad09f217002f463aa2e4af60f8ad41d2cf611","registry":"quay.io","repository":"codefresh/cf-docker-pusher","tag":"6.0.26"},"fs-ops":{"digest":"sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf","registry":"quay.io","repository":"codefresh/fs-ops","tag":"1.2.13"},"gc-builder":{"digest":"sha256:a6aa987aaa9c60d5728ab62c58914eb1fe5f62069eb53ff21803c24c488ea312","registry":"quay.io","repository":"codefresh/gcloud-builder","tag":"0.5.10"},"git-cloner":{"digest":"sha256:77cb980509199c83a4a3e8030945ef0e90653be74d3c4d831598e5b825dc399b","registry":"quay.io","repository":"codefresh/cf-git-cloner","tag":"10.3.11"},"kube-deploy":{"digest":"sha256:beb578bbe5bbf66c034c51937c909d16faf473225815ce416188176d363ec15d","registry":"quay.io","repository":"codefresh/cf-deploy-kubernetes","tag":"17.0.4"},"pipeline-debugger":{"digest":"sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7","registry":"quay.io","repository":"codefresh/cf-debugger","tag":"1.3.14"},"template-engine":{"digest":"sha256:fc273091b98392c447d90ab678fd9d217ccc9565701bd65708da3b2ec421798a","registry":"quay.io","repository":"codefresh/pikolo","tag":"0.15.1"}},"runtimeImagesRegistry":"","schedulerName":"","serviceAccount":"codefresh-engine","terminationGracePeriodSeconds":180,"tolerations":[],"userEnvVars":[],"workflowLimits":{"MAXIMUM_ALLOWED_TIME_BEFORE_PRE_STEPS_SUCCESS":600,"MAXIMUM_ALLOWED_WORKFLOW_AGE_BEFORE_TERMINATION":86400,"MAXIMUM_ELECTED_STATE_AGE_ALLOWED":900,"MAXIMUM_POST_STEPS_GRACE_PERIOD_MINUTES":30,"MAXIMUM_RETRY_ATTEMPTS_ALLOWED":20,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED":900,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED_WITHOUT_UPDATE":300,"TIME_ENGINE_INACTIVE_UNTIL_TERMINATION":300,"TIME_ENGINE_INACTIVE_UNTIL_UNHEALTHY":60,"TIME_INACTIVE_UNTIL_TERMINATION":2700}}` | Parameters for Engine pod (aka "pipeline" orchestrator). |
+| runtime.engine | object | `{"affinity":{},"command":["node","dist/server/index.js"],"env":{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"},"image":{"digest":"sha256:2e3a64076bfd9b33432701a07d5b5a2c3ee8a74c5d2f4d6b1203d0deda8e7909","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.2.8"},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"resources":{"limits":{"cpu":"1000m","memory":"2048Mi"},"requests":{"cpu":"100m","memory":"128Mi"}},"runtimeImages":{"alpine":{"digest":"sha256:9a341ff2287c54b86425cbee0141114d811ae69d88a36019087be6d896cef241","registry":"docker.io","repository":"alpine","tag":"edge"},"compose":{"digest":"sha256:6b4413b99653b623112bd461f2c58ad30515b89254afe644f77474aa8325fbeb","registry":"quay.io","repository":"codefresh/compose","tag":"v5.1.3-1.6.4"},"container-logger":{"digest":"sha256:d666502f8bb95a00a1a598dd33ccdd10927ae73d32a5eed278d476bb1c7140a4","registry":"quay.io","repository":"codefresh/cf-container-logger","tag":"2.0.12"},"cosign-image-signer":{"digest":"sha256:ab2c3b058d47db9725f8a5d921a36fd056cccffbb123c87a9e621ebe090af3b6","registry":"quay.io","repository":"codefresh/cf-cosign-image-signer","tag":"3.0.6-cf.2"},"default-qemu":{"digest":"sha256:d3b963f787999e6c0219a48dba02978769286ff61a5f4d26245cb6a6e5567ea3","registry":"docker.io","repository":"tonistiigi/binfmt","tag":"qemu-v10.2.1"},"docker-builder":{"digest":"sha256:817ebca78533e0bc3fd35e8c4498979fdd2f5435616ef0f2d495b94f8873563a","registry":"quay.io","repository":"codefresh/cf-docker-builder","tag":"1.6.1"},"docker-puller":{"digest":"sha256:818773818053553505afbaf109bf67f1b22bdb80307e155d27d4f06eab3c3246","registry":"quay.io","repository":"codefresh/cf-docker-puller","tag":"8.0.27"},"docker-pusher":{"digest":"sha256:fdd6d80b02d9464689984208045ad09f217002f463aa2e4af60f8ad41d2cf611","registry":"quay.io","repository":"codefresh/cf-docker-pusher","tag":"6.0.26"},"fs-ops":{"digest":"sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf","registry":"quay.io","repository":"codefresh/fs-ops","tag":"1.2.13"},"gc-builder":{"digest":"sha256:a6aa987aaa9c60d5728ab62c58914eb1fe5f62069eb53ff21803c24c488ea312","registry":"quay.io","repository":"codefresh/gcloud-builder","tag":"0.5.10"},"git-cloner":{"digest":"sha256:77cb980509199c83a4a3e8030945ef0e90653be74d3c4d831598e5b825dc399b","registry":"quay.io","repository":"codefresh/cf-git-cloner","tag":"10.3.11"},"kube-deploy":{"digest":"sha256:1fb0d3f5be3ece52c7ad47ebdb60533854c8a647f761c7ecc0d29e0ee441e14f","registry":"quay.io","repository":"codefresh/cf-deploy-kubernetes","tag":"18.0.0"},"pipeline-debugger":{"digest":"sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7","registry":"quay.io","repository":"codefresh/cf-debugger","tag":"1.3.14"},"template-engine":{"digest":"sha256:fc273091b98392c447d90ab678fd9d217ccc9565701bd65708da3b2ec421798a","registry":"quay.io","repository":"codefresh/pikolo","tag":"0.15.1"}},"runtimeImagesRegistry":"","schedulerName":"","serviceAccount":"codefresh-engine","terminationGracePeriodSeconds":180,"tolerations":[],"userEnvVars":[],"workflowLimits":{"MAXIMUM_ALLOWED_TIME_BEFORE_PRE_STEPS_SUCCESS":600,"MAXIMUM_ALLOWED_WORKFLOW_AGE_BEFORE_TERMINATION":86400,"MAXIMUM_ELECTED_STATE_AGE_ALLOWED":900,"MAXIMUM_POST_STEPS_GRACE_PERIOD_MINUTES":30,"MAXIMUM_RETRY_ATTEMPTS_ALLOWED":20,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED":900,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED_WITHOUT_UPDATE":300,"TIME_ENGINE_INACTIVE_UNTIL_TERMINATION":300,"TIME_ENGINE_INACTIVE_UNTIL_UNHEALTHY":60,"TIME_INACTIVE_UNTIL_TERMINATION":2700}}` | Parameters for Engine pod (aka "pipeline" orchestrator). |
 | runtime.engine.affinity | object | `{}` | Set affinity |
 | runtime.engine.command | list | `["node","dist/server/index.js"]` | Set container command. |
 | runtime.engine.env | object | `{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"}` | Set additional env vars. |

charts/cf-runtime/README.md.gotmpl

@@ -22,6 +22,7 @@ Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/insta
   - [To 8.x](#to-8-x)
   - [To 8.2.x](#to-8-2-x)
   - [To 9.x](#to-9-x)
+  - [To 10.1.x](#to-10-1-x)
 - [Architecture](#architecture)
 - [Configuration](#configuration)
   - [Runtime spec synchronization](#runtime-spec-synchronization)
@@ -346,6 +347,10 @@ runtime:
 
 * **Removed**: OTel metric `codefresh.classic.build.deprecated_images.pulled` emitted by the `engine` component is dropped.
 
+### To 10.1.x
+
+* **Removed**: `deploy` step ([docs](https://codefresh.io/docs/docs/pipelines/steps/deploy/)) drops support for 1.32 Kubernetes version. Supported versions are: 1.35, 1.34, 1.33.
+
 ## Architecture
 
 [Codefresh Runner architecture](https://codefresh.io/docs/docs/installation/codefresh-runner/#codefresh-runner-architecture)

charts/cf-runtime/values.yaml

@@ -201,8 +201,8 @@ volumeProvisioner:
     image:
       registry: quay.io
       repository: codefresh/dind-volume-utils
-      tag: 1.30.7
-      digest: sha256:0ad9a47d04b9e77308ddb18f452159990ff86770b27fd9338d4fa6d5fbac1682
+      tag: 1.30.8
+      digest: sha256:0e733b6ae2d619b85700d92ee5614b98fa30f79edf42c2a1be7c98ae3cd07e74
     podAnnotations: {}
     podSecurityContext:
       enabled: false
@@ -565,8 +565,8 @@ runtime:
       kube-deploy:
         registry: quay.io
         repository: codefresh/cf-deploy-kubernetes
-        tag: 17.0.4
-        digest: sha256:beb578bbe5bbf66c034c51937c909d16faf473225815ce416188176d363ec15d
+        tag: 18.0.0
+        digest: sha256:1fb0d3f5be3ece52c7ad47ebdb60533854c8a647f761c7ecc0d29e0ee441e14f
       pipeline-debugger:
         registry: quay.io
         repository: codefresh/cf-debugger
@@ -580,8 +580,8 @@ runtime:
       cosign-image-signer:
         registry: quay.io
         repository: codefresh/cf-cosign-image-signer
-        tag: 3.0.6-cf.1
-        digest: sha256:85ce347ad7b11a7e324ca64e38b0701bc6fb739bfcbb67a3b4657ef36939e623
+        tag: 3.0.6-cf.2
+        digest: sha256:ab2c3b058d47db9725f8a5d921a36fd056cccffbb123c87a9e621ebe090af3b6
       gc-builder:
         registry: quay.io
         repository: codefresh/gcloud-builder
@@ -900,8 +900,8 @@ monitor:
   image:
     registry: quay.io
     repository: codefresh/cf-k8s-agent
-    tag: 1.3.34
-    digest: sha256:3bea972f87f447b9872c1a309f834f3a6bb9651149b259cd7787e44f574fd574
+    tag: 1.3.35
+    digest: sha256:730c979cd8d47ccc45d9590985654acb1a1edfb24fcf410cc890c25de0d8c380
   # -- Add additional env vars
   env: {}
   # -- Service Account parameters