Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 12 additions & 25 deletions charts/cf-runtime/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
apiVersion: v2
description: A Helm chart for Codefresh Runner
name: cf-runtime
version: 10.0.18
version: 10.1.0
keywords:
- codefresh
- runner
Expand All @@ -18,33 +18,20 @@ annotations:
# Supported kinds: `added`, `changed`, `deprecated`, `removed`, `fixed`, `security`:
artifacthub.io/changes: |
- kind: changed
description: 'update "runner" to 2.0.10'
description: 'update "cf-k8s-agent" to 1.3.35'
- kind: changed
description: 'update "template-engine" to 0.15.1'
description: 'update "cf-deploy-kubernetes" to 18.0.0'
- kind: added
description: "add support for k8s 1.35 in \"deploy\" step"
- kind: deprecated
description: "remove support for k8s 1.32 in \"deploy\" step"
links:
- name: Codefresh Docs - Deploy
url: https://codefresh.io/docs/docs/pipelines/steps/deploy/
- kind: changed
description: 'update "codefresh/cli" to 1.1.4-rootless'
description: 'update "dind-volume-utils" to 1.30.8'
- kind: changed
description: 'update "pipeline-debugger" to 1.3.14'
- kind: changed
description: 'update "fs-ops" to 1.2.13'
- kind: changed
description: 'update "gc-builder" to 0.5.10'
- kind: changed
description: 'update "compose" to v5.1.3-1.6.4'
- kind: changed
description: 'update "dind" to 29.4.1-3.0.15'
- kind: changed
description: 'update "docker-builder" to 1.6.1'
- kind: changed
description: 'update "engine" to 3.2.8'
- kind: changed
description: 'update "git-cloner" to 10.3.11'
- kind: changed
description: 'update "docker-pusher" to 6.0.26'
- kind: changed
description: 'update "kubectl" to 1.35.4'
- kind: fixed
description: 'fix support for Git LFS in "clone" step'
description: 'update "cosign-image-signer" to 3.0.6-cf.2'
- kind: security
description: 'fix various security vulnerabilities in different runtime components'
dependencies:
Expand Down
11 changes: 8 additions & 3 deletions charts/cf-runtime/README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Codefresh Runner

![Version: 10.0.18](https://img.shields.io/badge/Version-10.0.18-informational?style=flat-square)
![Version: 10.1.0](https://img.shields.io/badge/Version-10.1.0-informational?style=flat-square)

Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/installation/codefresh-runner/) to Kubernetes.

Expand All @@ -22,6 +22,7 @@ Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/insta
- [To 8.x](#to-8-x)
- [To 8.2.x](#to-8-2-x)
- [To 9.x](#to-9-x)
- [To 10.1.x](#to-10-1-x)
- [Architecture](#architecture)
- [Configuration](#configuration)
- [Runtime spec synchronization](#runtime-spec-synchronization)
Expand Down Expand Up @@ -346,6 +347,10 @@ runtime:

* **Removed**: OTel metric `codefresh.classic.build.deprecated_images.pulled` emitted by the `engine` component is dropped.

### To 10.1.x

* **Removed**: `deploy` step ([docs](https://codefresh.io/docs/docs/pipelines/steps/deploy/)) drops support for 1.32 Kubernetes version. Supported versions are: 1.35, 1.34, 1.33.

## Architecture

[Codefresh Runner architecture](https://codefresh.io/docs/docs/installation/codefresh-runner/#codefresh-runner-architecture)
Expand Down Expand Up @@ -1271,7 +1276,7 @@ Install the Helm chart
| monitor.affinity | object | `{}` | Set affinity |
| monitor.enabled | bool | `false` | Enable monitor Ref: https://codefresh.io/docs/docs/installation/codefresh-runner/#install-monitoring-component |
| monitor.env | object | `{}` | Add additional env vars |
| monitor.image | object | `{"digest":"sha256:3bea972f87f447b9872c1a309f834f3a6bb9651149b259cd7787e44f574fd574","registry":"quay.io","repository":"codefresh/cf-k8s-agent","tag":"1.3.34"}` | Set image |
| monitor.image | object | `{"digest":"sha256:730c979cd8d47ccc45d9590985654acb1a1edfb24fcf410cc890c25de0d8c380","registry":"quay.io","repository":"codefresh/cf-k8s-agent","tag":"1.3.35"}` | Set image |
| monitor.nodeSelector | object | `{}` | Set node selector |
| monitor.podAnnotations | object | `{}` | Set pod annotations |
| monitor.podSecurityContext | object | `{}` | |
Expand Down Expand Up @@ -1352,7 +1357,7 @@ Install the Helm chart
| runtime.dind.userVolumeMounts | object | `{}` | Add extra volume mounts |
| runtime.dind.userVolumes | object | `{}` | Add extra volumes |
| runtime.dindDaemon | object | See below | DinD pod daemon config |
| runtime.engine | object | `{"affinity":{},"command":["node","dist/server/index.js"],"env":{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"},"image":{"digest":"sha256:2e3a64076bfd9b33432701a07d5b5a2c3ee8a74c5d2f4d6b1203d0deda8e7909","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.2.8"},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"resources":{"limits":{"cpu":"1000m","memory":"2048Mi"},"requests":{"cpu":"100m","memory":"128Mi"}},"runtimeImages":{"alpine":{"digest":"sha256:9a341ff2287c54b86425cbee0141114d811ae69d88a36019087be6d896cef241","registry":"docker.io","repository":"alpine","tag":"edge"},"compose":{"digest":"sha256:6b4413b99653b623112bd461f2c58ad30515b89254afe644f77474aa8325fbeb","registry":"quay.io","repository":"codefresh/compose","tag":"v5.1.3-1.6.4"},"container-logger":{"digest":"sha256:d666502f8bb95a00a1a598dd33ccdd10927ae73d32a5eed278d476bb1c7140a4","registry":"quay.io","repository":"codefresh/cf-container-logger","tag":"2.0.12"},"cosign-image-signer":{"digest":"sha256:85ce347ad7b11a7e324ca64e38b0701bc6fb739bfcbb67a3b4657ef36939e623","registry":"quay.io","repository":"codefresh/cf-cosign-image-signer","tag":"3.0.6-cf.1"},"default-qemu":{"digest":"sha256:d3b963f787999e6c0219a48dba02978769286ff61a5f4d26245cb6a6e5567ea3","registry":"docker.io","repository":"tonistiigi/binfmt","tag":"qemu-v10.2.1"},"docker-builder":{"digest":"sha256:817ebca78533e0bc3fd35e8c4498979fdd2f5435616ef0f2d495b94f8873563a","registry":"quay.io","repository":"codefresh/cf-docker-builder","tag":"1.6.1"},"docker-puller":{"digest":"sha256:818773818053553505afbaf109bf67f1b22bdb80307e155d27d4f06eab3c3246","registry":"quay.io","repository":"codefresh/cf-docker-puller","tag":"8.0.27"},"docker-pusher":{"digest":"sha256:fdd6d80b02d9464689984208045ad09f217002f463aa2e4af60f8ad41d2cf611","registry":"quay.io","repository":"codefresh/cf-docker-pusher","tag":"6.0.26"},"fs-ops":{"digest":"sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf","registry":"quay.io","repository":"codefresh/fs-ops","tag":"1.2.13"},"gc-builder":{"digest":"sha256:a6aa987aaa9c60d5728ab62c58914eb1fe5f62069eb53ff21803c24c488ea312","registry":"quay.io","repository":"codefresh/gcloud-builder","tag":"0.5.10"},"git-cloner":{"digest":"sha256:77cb980509199c83a4a3e8030945ef0e90653be74d3c4d831598e5b825dc399b","registry":"quay.io","repository":"codefresh/cf-git-cloner","tag":"10.3.11"},"kube-deploy":{"digest":"sha256:beb578bbe5bbf66c034c51937c909d16faf473225815ce416188176d363ec15d","registry":"quay.io","repository":"codefresh/cf-deploy-kubernetes","tag":"17.0.4"},"pipeline-debugger":{"digest":"sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7","registry":"quay.io","repository":"codefresh/cf-debugger","tag":"1.3.14"},"template-engine":{"digest":"sha256:fc273091b98392c447d90ab678fd9d217ccc9565701bd65708da3b2ec421798a","registry":"quay.io","repository":"codefresh/pikolo","tag":"0.15.1"}},"runtimeImagesRegistry":"","schedulerName":"","serviceAccount":"codefresh-engine","terminationGracePeriodSeconds":180,"tolerations":[],"userEnvVars":[],"workflowLimits":{"MAXIMUM_ALLOWED_TIME_BEFORE_PRE_STEPS_SUCCESS":600,"MAXIMUM_ALLOWED_WORKFLOW_AGE_BEFORE_TERMINATION":86400,"MAXIMUM_ELECTED_STATE_AGE_ALLOWED":900,"MAXIMUM_POST_STEPS_GRACE_PERIOD_MINUTES":30,"MAXIMUM_RETRY_ATTEMPTS_ALLOWED":20,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED":900,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED_WITHOUT_UPDATE":300,"TIME_ENGINE_INACTIVE_UNTIL_TERMINATION":300,"TIME_ENGINE_INACTIVE_UNTIL_UNHEALTHY":60,"TIME_INACTIVE_UNTIL_TERMINATION":2700}}` | Parameters for Engine pod (aka "pipeline" orchestrator). |
| runtime.engine | object | `{"affinity":{},"command":["node","dist/server/index.js"],"env":{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"},"image":{"digest":"sha256:2e3a64076bfd9b33432701a07d5b5a2c3ee8a74c5d2f4d6b1203d0deda8e7909","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.2.8"},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"resources":{"limits":{"cpu":"1000m","memory":"2048Mi"},"requests":{"cpu":"100m","memory":"128Mi"}},"runtimeImages":{"alpine":{"digest":"sha256:9a341ff2287c54b86425cbee0141114d811ae69d88a36019087be6d896cef241","registry":"docker.io","repository":"alpine","tag":"edge"},"compose":{"digest":"sha256:6b4413b99653b623112bd461f2c58ad30515b89254afe644f77474aa8325fbeb","registry":"quay.io","repository":"codefresh/compose","tag":"v5.1.3-1.6.4"},"container-logger":{"digest":"sha256:d666502f8bb95a00a1a598dd33ccdd10927ae73d32a5eed278d476bb1c7140a4","registry":"quay.io","repository":"codefresh/cf-container-logger","tag":"2.0.12"},"cosign-image-signer":{"digest":"sha256:ab2c3b058d47db9725f8a5d921a36fd056cccffbb123c87a9e621ebe090af3b6","registry":"quay.io","repository":"codefresh/cf-cosign-image-signer","tag":"3.0.6-cf.2"},"default-qemu":{"digest":"sha256:d3b963f787999e6c0219a48dba02978769286ff61a5f4d26245cb6a6e5567ea3","registry":"docker.io","repository":"tonistiigi/binfmt","tag":"qemu-v10.2.1"},"docker-builder":{"digest":"sha256:817ebca78533e0bc3fd35e8c4498979fdd2f5435616ef0f2d495b94f8873563a","registry":"quay.io","repository":"codefresh/cf-docker-builder","tag":"1.6.1"},"docker-puller":{"digest":"sha256:818773818053553505afbaf109bf67f1b22bdb80307e155d27d4f06eab3c3246","registry":"quay.io","repository":"codefresh/cf-docker-puller","tag":"8.0.27"},"docker-pusher":{"digest":"sha256:fdd6d80b02d9464689984208045ad09f217002f463aa2e4af60f8ad41d2cf611","registry":"quay.io","repository":"codefresh/cf-docker-pusher","tag":"6.0.26"},"fs-ops":{"digest":"sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf","registry":"quay.io","repository":"codefresh/fs-ops","tag":"1.2.13"},"gc-builder":{"digest":"sha256:a6aa987aaa9c60d5728ab62c58914eb1fe5f62069eb53ff21803c24c488ea312","registry":"quay.io","repository":"codefresh/gcloud-builder","tag":"0.5.10"},"git-cloner":{"digest":"sha256:77cb980509199c83a4a3e8030945ef0e90653be74d3c4d831598e5b825dc399b","registry":"quay.io","repository":"codefresh/cf-git-cloner","tag":"10.3.11"},"kube-deploy":{"digest":"sha256:1fb0d3f5be3ece52c7ad47ebdb60533854c8a647f761c7ecc0d29e0ee441e14f","registry":"quay.io","repository":"codefresh/cf-deploy-kubernetes","tag":"18.0.0"},"pipeline-debugger":{"digest":"sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7","registry":"quay.io","repository":"codefresh/cf-debugger","tag":"1.3.14"},"template-engine":{"digest":"sha256:fc273091b98392c447d90ab678fd9d217ccc9565701bd65708da3b2ec421798a","registry":"quay.io","repository":"codefresh/pikolo","tag":"0.15.1"}},"runtimeImagesRegistry":"","schedulerName":"","serviceAccount":"codefresh-engine","terminationGracePeriodSeconds":180,"tolerations":[],"userEnvVars":[],"workflowLimits":{"MAXIMUM_ALLOWED_TIME_BEFORE_PRE_STEPS_SUCCESS":600,"MAXIMUM_ALLOWED_WORKFLOW_AGE_BEFORE_TERMINATION":86400,"MAXIMUM_ELECTED_STATE_AGE_ALLOWED":900,"MAXIMUM_POST_STEPS_GRACE_PERIOD_MINUTES":30,"MAXIMUM_RETRY_ATTEMPTS_ALLOWED":20,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED":900,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED_WITHOUT_UPDATE":300,"TIME_ENGINE_INACTIVE_UNTIL_TERMINATION":300,"TIME_ENGINE_INACTIVE_UNTIL_UNHEALTHY":60,"TIME_INACTIVE_UNTIL_TERMINATION":2700}}` | Parameters for Engine pod (aka "pipeline" orchestrator). |
| runtime.engine.affinity | object | `{}` | Set affinity |
| runtime.engine.command | list | `["node","dist/server/index.js"]` | Set container command. |
| runtime.engine.env | object | `{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"}` | Set additional env vars. |
Expand Down
5 changes: 5 additions & 0 deletions charts/cf-runtime/README.md.gotmpl
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@ Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/insta
- [To 8.x](#to-8-x)
- [To 8.2.x](#to-8-2-x)
- [To 9.x](#to-9-x)
- [To 10.1.x](#to-10-1-x)
- [Architecture](#architecture)
- [Configuration](#configuration)
- [Runtime spec synchronization](#runtime-spec-synchronization)
Expand Down Expand Up @@ -346,6 +347,10 @@ runtime:

* **Removed**: OTel metric `codefresh.classic.build.deprecated_images.pulled` emitted by the `engine` component is dropped.

### To 10.1.x

* **Removed**: `deploy` step ([docs](https://codefresh.io/docs/docs/pipelines/steps/deploy/)) drops support for 1.32 Kubernetes version. Supported versions are: 1.35, 1.34, 1.33.

## Architecture

[Codefresh Runner architecture](https://codefresh.io/docs/docs/installation/codefresh-runner/#codefresh-runner-architecture)
Expand Down
16 changes: 8 additions & 8 deletions charts/cf-runtime/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -201,8 +201,8 @@ volumeProvisioner:
image:
registry: quay.io
repository: codefresh/dind-volume-utils
tag: 1.30.7
digest: sha256:0ad9a47d04b9e77308ddb18f452159990ff86770b27fd9338d4fa6d5fbac1682
tag: 1.30.8
digest: sha256:0e733b6ae2d619b85700d92ee5614b98fa30f79edf42c2a1be7c98ae3cd07e74
podAnnotations: {}
podSecurityContext:
enabled: false
Expand Down Expand Up @@ -565,8 +565,8 @@ runtime:
kube-deploy:
registry: quay.io
repository: codefresh/cf-deploy-kubernetes
tag: 17.0.4
digest: sha256:beb578bbe5bbf66c034c51937c909d16faf473225815ce416188176d363ec15d
tag: 18.0.0
digest: sha256:1fb0d3f5be3ece52c7ad47ebdb60533854c8a647f761c7ecc0d29e0ee441e14f
pipeline-debugger:
registry: quay.io
repository: codefresh/cf-debugger
Expand All @@ -580,8 +580,8 @@ runtime:
cosign-image-signer:
registry: quay.io
repository: codefresh/cf-cosign-image-signer
tag: 3.0.6-cf.1
digest: sha256:85ce347ad7b11a7e324ca64e38b0701bc6fb739bfcbb67a3b4657ef36939e623
tag: 3.0.6-cf.2
digest: sha256:ab2c3b058d47db9725f8a5d921a36fd056cccffbb123c87a9e621ebe090af3b6
gc-builder:
registry: quay.io
repository: codefresh/gcloud-builder
Expand Down Expand Up @@ -900,8 +900,8 @@ monitor:
image:
registry: quay.io
repository: codefresh/cf-k8s-agent
tag: 1.3.34
digest: sha256:3bea972f87f447b9872c1a309f834f3a6bb9651149b259cd7787e44f574fd574
tag: 1.3.35
digest: sha256:730c979cd8d47ccc45d9590985654acb1a1edfb24fcf410cc890c25de0d8c380
# -- Add additional env vars
env: {}
# -- Service Account parameters
Expand Down
Loading