[CI] Helm Chart Update sealed-secrets

Obmondo · Nov 11, 2024 · d504c2a · d504c2a
1 parent fb262a5
commit d504c2a
Show file tree

Hide file tree

Showing 7 changed files with 54 additions and 15 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -15,6 +15,7 @@ All releases and the changes included in them (pulled from git commits added sin
 - Updated argo-cd from version 7.6.12 to 7.7.0
 
 ### Patch Version Upgrades %%^^
+- Updated sealed-secrets from version 2.16.1 to 2.16.2
 - Updated rook-ceph-cluster from version v1.15.4 to v1.15.5
 - Updated rook-ceph from version v1.15.4 to v1.15.5
 - Updated redmine from version 30.0.2 to 30.0.4

diff --git a/argocd-helm-charts/sealed-secrets/Chart.lock b/argocd-helm-charts/sealed-secrets/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: sealed-secrets
   repository: https://bitnami-labs.github.io/sealed-secrets
-  version: 2.16.1
-digest: sha256:18087e5d5f654cdca8e78c29dd194f874145da362e62324b1048cbfe91e5c261
-generated: "2024-07-31T20:52:53.62960903+05:30"
+  version: 2.16.2
+digest: sha256:e722d34bd9105443714cb541ceb74251e18aba9eaab801da00bdc7c23e732449
+generated: "2024-11-11T12:30:19.433043384+05:30"
diff --git a/argocd-helm-charts/sealed-secrets/Chart.yaml b/argocd-helm-charts/sealed-secrets/Chart.yaml
@@ -4,6 +4,6 @@ version: 0.17.3
 # see latest chart (and appversion) here: https://github.com/bitnami-labs/sealed-secrets/tree/main/helm/sealed-secrets
 dependencies:
   - name: sealed-secrets
-    version: 2.16.1
+    version: 2.16.2
     repository: https://bitnami-labs.github.io/sealed-secrets
     #repository: "oci://ghcr.io/Obmondo"
diff --git a/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/Chart.yaml b/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/Chart.yaml
@@ -1,7 +1,7 @@
 annotations:
   category: DeveloperTools
 apiVersion: v2
-appVersion: 0.27.1
+appVersion: 0.27.2
 description: Helm chart for the sealed-secrets controller.
 home: https://github.com/bitnami-labs/sealed-secrets
 icon: https://bitnami.com/assets/stacks/sealed-secrets/img/sealed-secrets-stack-220x234.png
@@ -16,4 +16,4 @@ name: sealed-secrets
 sources:
 - https://github.com/bitnami-labs/sealed-secrets
 type: application
-version: 2.16.1
+version: 2.16.2
diff --git a/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/README.md b/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/README.md
@@ -86,7 +86,7 @@ The command removes all the Kubernetes components associated with the chart and
 | ------------------------------------------------- | ----------------------------------------------------------------------------------------------------- | ----------------------------------- |
 | `image.registry`                                  | Sealed Secrets image registry                                                                         | `docker.io`                         |
 | `image.repository`                                | Sealed Secrets image repository                                                                       | `bitnami/sealed-secrets-controller` |
-| `image.tag`                                       | Sealed Secrets image tag (immutable tags are recommended)                                             | `0.27.1`                            |
+| `image.tag`                                       | Sealed Secrets image tag (immutable tags are recommended)                                             | `0.27.2`                            |
 | `image.pullPolicy`                                | Sealed Secrets image pull policy                                                                      | `IfNotPresent`                      |
 | `image.pullSecrets`                               | Sealed Secrets image pull secrets                                                                     | `[]`                                |
 | `revisionHistoryLimit`                            | Number of old history to retain to allow rollback (If not set, default Kubernetes value is set to 10) | `""`                                |
@@ -145,14 +145,18 @@ The command removes all the Kubernetes components associated with the chart and
 | `additionalVolumes`                               | Extra Volumes for the Sealed Secrets Controller Deployment                                            | `{}`                                |
 | `additionalVolumeMounts`                          | Extra volumeMounts for the Sealed Secrets Controller container                                        | `{}`                                |
 | `hostNetwork`                                     | Sealed Secrets pods' hostNetwork                                                                      | `false`                             |
+| `containerPorts.http`                             | Controller HTTP Port on the Host and Container                                                        | `8080`                              |
+| `containerPorts.metrics`                          | Metrics HTTP Port on the Host and Container                                                           | `8081`                              |
+| `hostPorts.http`                                  | Controller HTTP Port on the Host                                                                      | `""`                                |
+| `hostPorts.metrics`                               | Metrics HTTP Port on the Host                                                                         | `""`                                |
 | `dnsPolicy`                                       | Sealed Secrets pods' dnsPolicy                                                                        | `""`                                |
 
 ### Traffic Exposure Parameters
 
 | Name                               | Description                                                                                                                      | Value                    |
 | ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------------- | ------------------------ |
 | `service.type`                     | Sealed Secret service type                                                                                                       | `ClusterIP`              |
-| `service.loadBalancerClass`        | Sealed Secret service loadBalancerClass                                                                                          | ``                       |
+| `service.loadBalancerClass`        | Sealed Secret service loadBalancerClass                                                                                          | `""`                     |
 | `service.port`                     | Sealed Secret service HTTP port                                                                                                  | `8080`                   |
 | `service.nodePort`                 | Node port for HTTP                                                                                                               | `""`                     |
 | `service.annotations`              | Additional custom annotations for Sealed Secret service                                                                          | `{}`                     |
@@ -214,7 +218,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `metrics.dashboards.annotations`           | Annotations to be added to the Grafana dashboard ConfigMap                             | `{}`        |
 | `metrics.dashboards.namespace`             | Namespace where Grafana dashboard ConfigMap is deployed                                | `""`        |
 | `metrics.service.type`                     | Sealed Secret Metrics service type                                                     | `ClusterIP` |
-| `metrics.service.loadBalancerClass`        | Sealed Secret service Metrics loadBalancerClass                                        | ``          |
+| `metrics.service.loadBalancerClass`        | Sealed Secret Metrics service loadBalancerClass                                        | `""`        |
 | `metrics.service.port`                     | Sealed Secret service Metrics HTTP port                                                | `8081`      |
 | `metrics.service.nodePort`                 | Node port for HTTP                                                                     | `""`        |
 | `metrics.service.annotations`              | Additional custom annotations for Sealed Secret Metrics service                        | `{}`        |

diff --git a/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/templates/deployment.yaml b/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/templates/deployment.yaml
@@ -129,6 +129,14 @@ spec:
             - --log-format
             - {{ .Values.logFormat }}
             {{- end }}
+            {{- if .Values.containerPorts.http }}
+            - --listen-addr
+            - {{ printf ":%s" (.Values.containerPorts.http | toString ) }}
+            {{- end }}
+            {{- if .Values.containerPorts.metrics }}
+            - --listen-metrics-addr
+            - {{ printf ":%s" (.Values.containerPorts.metrics | toString) }}
+            {{- end }}
           {{- end }}
           image: {{ printf "%s/%s:%s" .Values.image.registry .Values.image.repository .Values.image.tag }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
@@ -146,10 +154,20 @@ spec:
                   resource: limits.memory
             {{- end }}
           ports:
-            - containerPort: 8080
-              name: http
-            - containerPort: 8081
-              name: metrics
+            - name: http
+              containerPort: {{ .Values.containerPorts.http | default "8080" }}
+              {{- if .Values.hostNetwork }}
+              hostPort: {{ .Values.containerPorts.http }}
+              {{- else if .Values.hostPorts.http }}
+              hostPort: {{ .Values.hostPorts.http }}
+              {{- end }}
+            - name: metrics
+              containerPort: {{ .Values.containerPorts.metrics | default "8081" }}
+              {{- if .Values.hostNetwork }}
+              hostPort: {{ .Values.containerPorts.metrics }}
+              {{- else if .Values.hostPorts.metrics }}
+              hostPort: {{ .Values.hostPorts.metrics }}
+              {{- end }}
           {{- if .Values.startupProbe.enabled }}
           startupProbe: {{- include "sealed-secrets.render" (dict "value" (omit .Values.startupProbe "enabled") "context" $) | nindent 12 }}
             tcpSocket:

diff --git a/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/values.yaml b/argocd-helm-charts/sealed-secrets/charts/sealed-secrets/values.yaml
@@ -39,7 +39,7 @@ commonLabels: {}
 image:
   registry: docker.io
   repository: bitnami/sealed-secrets-controller
-  tag: 0.27.1
+  tag: 0.27.2
   ## Specify a imagePullPolicy
   ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
   ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -230,9 +230,25 @@ additionalVolumes: []
 additionalVolumeMounts: []
 ## @param hostNetwork Sealed Secrets pods' hostNetwork
 hostNetwork: false
+## Sealed Secrets controller ports to open
+## If hostNetwork true: the hostPort is set identical to the containerPort
+## @param containerPorts.http Controller HTTP Port on the Host and Container
+## @param containerPorts.metrics Metrics HTTP Port on the Host and Container
+##
+containerPorts:
+  http: 8080
+  metrics: 8081
+## Sealed Secrets controller ports to be exposed as hostPort
+## If hostNetwork is false, only the ports specified here will be exposed (or not if set to an empty string)
+## @param hostPorts.http Controller HTTP Port on the Host
+## @param hostPorts.metrics Metrics HTTP Port on the Host
+##
+hostPorts:
+  http: ""
+  metrics: ""
+
 ## @param dnsPolicy Sealed Secrets pods' dnsPolicy
 dnsPolicy: ""
-
 ## @section Traffic Exposure Parameters
 
 ## Sealed Secret service parameters