release: PR for v1.3.0

CHANGELOG/release-notes-v1.3.0.md

@@ -0,0 +1,37 @@
+## v1.3.0
+
+## Bugs
+- fix: panic fixes  (#6411)
+- fix: auto pre-cd not getting triggered (if cd is manual) after webhook ci event is captured (#6407)
+- fix: Base update (#6405)
+- fix: devtron apps deployed via helm showing in helm apps list (#6397)
+- fix: when a helm app is managed by argocd then skip argo app update when same name ext helm app is installed (#6389)
+- fix: upgraded to go-git/v5 v5.13.0 (#6388)
+- fix: fix for ci cd workflow fake success status and multiple post/pre cd success notifications (#6370)
+- fix: fix for while cloning app or workflow when external secret is present in any pipeline then that pipeline is not cloned (#6368)
+- fix: fix for while cloning app or workflow when external secret is present in any pipeline then that pipeline is not cloned (#6366)
+- fix: buildx driver opt using k8s driver even if not enabled (#6349)
+- fix: Auto trigger even if pre-cd fails (#6338)
+- fix: role group listing fix (#6343)
+- fix: sql injection fixes (#6334)
+- fix: role group k8s permissions duplication (#6336)
+## Enhancements
+- feat: hibernate devtron app (#6356)
+- feat: separate build worker status timeline (#6320)
+- feat: send notification with chosen config (#6331)
+- feat: sql script changes for operation audit  (#6342)
+## Documentation
+- doc: updated devtron user list in users.md (#6363)
+## Others
+- misc: pipeline listing in app Group (#6410)
+- misc: Notif back com (#6398)
+- sync: Main sync develop (#6396)
+- sync: vendor update on release 29 (#6395)
+- sync: Release candidate v0.29.0 (#6394)
+- sync: Main sync develop (#6375)
+- misc: common-lib change (#6347)
+- sync: Release candidate v0.28.0 (#6340)
+- misc: Fix typo: Cronjob → CronJob (#6335)
+- sync: Main sync develop  (#6358)
+
+

charts/devtron/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: devtron-operator
-appVersion: 1.2.2
+appVersion: 1.3.0
 description: Chart to configure and install Devtron. Devtron is a Kubernetes Orchestration system.
 keywords:
   - Devtron
@@ -11,7 +11,7 @@ keywords:
   - argocd
   - Hyperion
 engine: gotpl
-version: 0.22.82
+version: 0.22.83
 sources:
   - https://github.com/devtron-labs/charts
 dependencies:

charts/devtron/devtron-bom.yaml

@@ -10,7 +10,7 @@ global:
   containerRegistry: "quay.io/devtron"
 extraManifests: []
 installer:
-  release: "v1.2.2"
+  release: "v1.3.0"
   registry: ""
   image: "inception"
   tag: "473deaa4-185-21582"
@@ -34,17 +34,17 @@ components:
         FEATURE_USER_DEFINED_GITOPS_REPO_ENABLE: "true"
         ENABLE_RESOURCE_SCAN: "true"
     registry: ""
-    image: "dashboard:4eb1a17a-690-28956"
+    image: "dashboard:1c40d516-690-30089"
     imagePullPolicy: IfNotPresent
   devtron:
     registry: ""
-    image: "hyperion:a9968961-280-29449"
-    cicdImage: "devtron:a9968961-434-29448"
+    image: "hyperion:e67c3b76-280-30100"
+    cicdImage: "devtron:e67c3b76-434-30101"
     imagePullPolicy: IfNotPresent
     customOverrides: {}
   ciRunner:
     registry: ""
-    image: "ci-runner:343b24f5-138-29387"
+    image: "ci-runner:0dde3b1a-138-30091"
   argocdDexServer:
     registry: ""
     image: "dex:v2.30.2"
@@ -53,7 +53,7 @@ components:
       authenticator: "authenticator:e414faff-393-13273"
   kubelink:
     registry: ""
-    image: "kubelink:0a3d5e84-564-28948"
+    image: "kubelink:0dde3b1a-564-30082"
     imagePullPolicy: IfNotPresent
     configs:
       ENABLE_HELM_RELEASE_CACHE: "true"
@@ -71,7 +71,7 @@ components:
       keyName: postgresql-password
   kubewatch:
     registry: ""
-    image: "kubewatch:0a3d5e84-419-28949"
+    image: "kubewatch:0dde3b1a-419-30080"
     imagePullPolicy: IfNotPresent
     configs:
       devtroncd_NAMESPACE: "devtron-ci"
@@ -80,6 +80,14 @@ components:
       ACD_NAMESPACE: "devtroncd"
       ACD_INFORMER: "true"
       NATS_STREAM_MAX_AGE: "10800"
+      PG_ADDR: postgresql-postgresql.devtroncd
+      PG_DATABASE: orchestrator
+      PG_LOG_QUERY: "true"
+      PG_PORT: "5432"
+      PG_USER: postgres
+    dbconfig:
+      secretName: postgresql-postgresql
+      keyName: postgresql-password
   postgres:
     registry: ""
     image: "postgres:11.9.0-debian-10-r26"
@@ -91,7 +99,7 @@ components:
       armImage: postgres_exporter:v0.10.1
   gitsensor:
     registry: ""
-    image: "git-sensor:0a3d5e84-200-28960"
+    image: "git-sensor:0dde3b1a-200-30085"
     imagePullPolicy: IfNotPresent
     serviceMonitor:
       enabled: false
@@ -109,7 +117,7 @@ components:
   # Values for lens
   lens:
     registry: ""
-    image: "lens:0a3d5e84-333-28951"
+    image: "lens:0dde3b1a-333-30090"
     imagePullPolicy: IfNotPresent
     configs:
       GIT_SENSOR_PROTOCOL: GRPC
@@ -154,7 +162,7 @@ components:
         DB_NAME: "lens"
   chartSync:
     registry: ""
-    image: chart-sync:0a3d5e84-836-28979
+    image: chart-sync:0dde3b1a-836-30095
     schedule: "0 19 * * *"
     extraConfigs: {}
 # values for argocd integration
@@ -176,7 +184,7 @@ workflowController:
   IMDSv1ExecutorImage: "argoexec:v3.0.7"
 security:
   imageScanner:
-    image: "image-scanner:0a3d5e84-141-28953"
+    image: "image-scanner:0dde3b1a-141-30093"
     configs:
       TRIVY_DB_REPOSITORY: mirror.gcr.io/aquasec/trivy-db
       TRIVY_JAVA_DB_REPOSITORY: mirror.gcr.io/aquasec/trivy-java-db
@@ -186,7 +194,7 @@ security:
       tag: 4.3.6
 # Values for notifier integration
 notifier:
-  image: "notifier:9aa5e510-372-28961"
+  image: "notifier:5e9c010b-372-30094"
 minio:
   image: "minio:RELEASE.2021-02-14T04-01-33Z"
   mbImage: "minio-mc:RELEASE.2021-02-14T04-28-06Z"

charts/devtron/templates/_helpers.tpl

@@ -10,7 +10,7 @@ it randomly.
 {{- define "getOrGeneratePass" }}
 {{- $len := (default 32 .Length) | int -}}
 {{- $obj := (lookup "v1" .Kind .Namespace .Name).data -}}
-{{- if $obj }}
+{{- if and ($obj) (index $obj .Key) }}
 {{- index $obj .Key -}}
 {{- else if (eq (lower .Kind) "secret") -}}
 {{- randAlphaNum $len | b64enc -}}
@@ -85,4 +85,14 @@ Return full image
         {{- printf "%s" $imageName -}}
     {{- end }}
 {{- end -}}
-{{- end -}}
+{{- end -}}
+
+{{/*
+Get the storage class name.
+If storageClass is defined in values.yaml under global.storageClass, use that.
+*/}}
+{{- define "common.storageclass" -}}
+{{- if $.Values.global.storageClass }}
+storageClassName: {{ $.Values.global.storageClass }}
+{{- end }}
+{{- end -}}

charts/devtron/templates/app-sync-job.yaml

@@ -47,6 +47,8 @@ spec:
         envFrom:
         - secretRef:
             name: devtron-secret
+        - configMapRef:
+            name: devtron-common-cm
         {{- if .Values.components.migrator }}
         {{- if .Values.components.migrator.appSync }}
         {{- if .Values.components.migrator.appSync.resources }}
@@ -101,6 +103,8 @@ spec:
                 name: devtron-secret
             - configMapRef: 
                 name: app-sync-cm
+            - configMapRef:
+                name: devtron-common-cm
             {{- if .Values.components.migrator }}
             {{- if .Values.components.migrator.appSync }}
             {{- if .Values.components.migrator.appSync.resources }}

charts/devtron/templates/casbin.yaml

@@ -48,6 +48,8 @@ spec:
           envFrom:
             - configMapRef:
                 name: casbin-cm
+            - configMapRef:
+                name: devtron-common-cm
           livenessProbe:
             failureThreshold: 3
             httpGet:

charts/devtron/templates/configmap-secret.yaml

@@ -2,7 +2,7 @@
 {{- $minioAccessKey := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-minio" "Key" "accesskey") }}
 {{- $minioSecretKey := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-minio" "Key" "secretkey") }}
 {{- $EXTERNAL_CI_API_SECRET := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-secret" "Key" "EXTERNAL_CI_API_SECRET") }}
-{{- $ORCH_TOKEN := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-secret" "Key" "ORCH_TOKEN") }}
+{{- $ORCH_TOKEN := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-custom-secret" "Key" "ORCH_TOKEN") }}
 {{- $DEX_SECRET := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-secret" "Key" "DEX_SECRET") }}
 {{- $DEX_JWTKEY := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-secret" "Key" "DEX_JWTKEY") }}
 {{- $DEX_CSTOREKEY := include "getOrGeneratePass" (dict "Namespace" "devtroncd" "Kind" "Secret" "Name" "devtron-secret" "Key" "DEX_CSTOREKEY") }}
@@ -247,7 +247,6 @@ data:
   PG_PASSWORD: {{ $postgresPwd }}
 {{- if $.Values.installer.modules }}
 {{- if has "cicd" $.Values.installer.modules }}
-  ORCH_TOKEN: {{ $ORCH_TOKEN }}
   EXTERNAL_CI_API_SECRET: {{ $EXTERNAL_CI_API_SECRET }}
   WEBHOOK_TOKEN: {{ $WEBHOOK_TOKEN }}
   DEX_SECRET: {{ $DEX_SECRET }}
@@ -266,6 +265,7 @@ metadata:
   annotations:
     "helm.sh/hook": pre-install, pre-upgrade
 data:
+  ORCH_TOKEN: {{ $ORCH_TOKEN }}
   {{- if $.Values.installer.modules }}
   {{- if has "cicd" $.Values.installer.modules }}
   {{- if and ($.Values.minio.enabled) (not $.Values.configs.BLOB_STORAGE_PROVIDER) }}
@@ -289,6 +289,34 @@ data:
   {{- end }}
   {{- end }}
 type: Opaque
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: devtron-common-cm
+  namespace: devtroncd
+  labels:
+    release: devtron
+  annotations:
+    "helm.sh/resource-policy": keep
+data:
+{{- if $.Values.global.configs }}
+{{- toYaml $.Values.global.configs | nindent 2 }}
+{{- end }} 
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: devtron-common-cm
+  namespace: argo
+  labels:
+    release: devtron
+  annotations:
+    "helm.sh/resource-policy": keep
+data:
+{{- if $.Values.global.configs }}
+{{- toYaml $.Values.global.configs | nindent 2 }}
+{{- end }} 
 
 {{- if $.Values.imagePullSecret }}
 {{- if $.Values.imagePullSecret.create }}

charts/devtron/templates/dashboard.yaml

@@ -103,6 +103,8 @@ spec:
               name: dashboard-cm
           - secretRef:
               name: devtron-dashboard-secret
+          - configMapRef:
+              name: devtron-common-cm
           volumeMounts: []
           {{- if .resources }}
           resources:

charts/devtron/templates/devtron.yaml

@@ -287,13 +287,15 @@ spec:
                   fieldPath: metadata.name
           envFrom:
           - configMapRef:
-              name: "devtron-cm"
+              name: devtron-cm
           - secretRef:
-              name: "devtron-secret"
+              name: devtron-secret
           - configMapRef:
-              name: "devtron-custom-cm"
+              name: devtron-custom-cm
           - secretRef:
-              name: "devtron-custom-secret"
+              name: devtron-custom-secret
+          - configMapRef:
+              name: devtron-common-cm
           volumeMounts:
             - mountPath: /cluster/component
               name: devtron-cluster-components-vol

charts/devtron/templates/dex.yaml

@@ -88,6 +88,9 @@ spec:
         - containerPort: 5556
         - containerPort: 5557
         - containerPort: 5558
+        envFrom:
+        - configMapRef:
+            name: devtron-common-cm
         volumeMounts:
         - mountPath: /shared
           name: static-files
@@ -108,6 +111,9 @@ spec:
         securityContext:
 {{- toYaml $.Values.global.containerSecurityContext | nindent 10 }}
         {{- end }}
+        envFrom:
+        - configMapRef:
+            name: devtron-common-cm
         volumeMounts:
         - mountPath: /shared
           name: static-files

charts/devtron/templates/gitsensor.yaml

@@ -84,6 +84,9 @@ spec:
           imagePullPolicy: IfNotPresent
           name: chown-git-base
           resources: {}
+          envFrom:
+          - configMapRef:
+              name: devtron-common-cm
           securityContext:
             runAsUser: 0
           terminationMessagePath: /dev/termination-log
@@ -128,6 +131,8 @@ spec:
               name: git-sensor-secret
           - configMapRef: 
               name: git-sensor-cm
+          - configMapRef: 
+              name: devtron-common-cm
           {{- if .resources }}        
           resources:
           {{- toYaml .resources | nindent 12 }}
@@ -137,6 +142,7 @@ spec:
         name: git-volume
       spec:
         accessModes: [ "ReadWriteOnce" ]
+        {{- include "common.storageclass" $ | indent 8 }}
         resources:
           requests:
             storage: {{ .persistence.volumeSize }}