From 4f2a2a8ae9524b71c79574299ef9020101685ad4 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 5 Mar 2024 16:33:38 +0000 Subject: [PATCH] Update Helm release postgresql to v14 Signed-off-by: Renovate Bot --- class/defaults.yml | 2 +- .../templates/primary/networkpolicy.yaml | 18 +++---- .../templates/primary/statefulset.yaml | 43 ++++++++++++----- .../templates/primary/svc-headless.yaml | 4 +- .../postgresql/templates/primary/svc.yaml | 4 +- .../postgresql/templates/serviceaccount.yaml | 12 +++++ .../postgresql/templates/serviceaccount.yaml | 12 +++++ .../templates/primary/networkpolicy.yaml | 18 +++---- .../templates/primary/statefulset.yaml | 47 +++++++++++++------ .../templates/primary/svc-headless.yaml | 4 +- .../postgresql/templates/primary/svc.yaml | 4 +- .../postgresql/templates/serviceaccount.yaml | 12 +++++ .../postgresql/templates/serviceaccount.yaml | 12 +++++ 13 files changed, 137 insertions(+), 55 deletions(-) create mode 100644 tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml create mode 100644 tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml create mode 100644 tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml create mode 100644 tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml diff --git a/class/defaults.yml b/class/defaults.yml index 787a68bb..b5efb4cf 100644 --- a/class/defaults.yml +++ b/class/defaults.yml @@ -62,7 +62,7 @@ parameters: version: v2.3.0 postgresql: source: https://charts.bitnami.com/bitnami - version: 12.12.10 + version: 14.3.0 # FQDN should be overwritten on the cluster level fqdn: keycloak.example.com # Disables dynamically resolving the hostname from request headers. diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml index a10253f6..0a26e41d 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml @@ -6,21 +6,21 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 - name: keycloak-postgresql-ingress + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 + name: keycloak-postgresql namespace: syn-builtin spec: + egress: + - {} ingress: - - from: - - podSelector: - matchLabels: - app.kubernetes.io/instance: keycloakx - app.kubernetes.io/name: keycloakx - ports: + - ports: - port: 5432 podSelector: matchLabels: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/name: postgresql + policyTypes: + - Ingress + - Egress diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml index a102b7c9..0381b319 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: builtin app.kubernetes.io/managed-by: commodore app.kubernetes.io/name: keycloak - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql namespace: syn-builtin spec: @@ -29,8 +29,8 @@ spec: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql spec: affinity: @@ -46,6 +46,7 @@ spec: app.kubernetes.io/name: postgresql topologyKey: kubernetes.io/hostname weight: 1 + automountServiceAccountToken: false containers: - env: - name: BITNAMI_DEBUG @@ -124,21 +125,31 @@ spec: periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 - resources: - limits: {} - requests: - cpu: 250m - memory: 256Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL + privileged: false + readOnlyRootFilesystem: false runAsNonRoot: true runAsUser: 1001 + seLinuxOptions: null seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir + - mountPath: /opt/bitnami/postgresql/conf + name: empty-dir + subPath: app-conf-dir + - mountPath: /opt/bitnami/postgresql/tmp + name: empty-dir + subPath: app-tmp-dir + - mountPath: /opt/bitnami/postgresql/logs + name: empty-dir + subPath: app-logs-dir - mountPath: /opt/bitnami/postgresql/certs name: postgresql-certificates readOnly: true @@ -165,16 +176,17 @@ spec: image: docker.io/bitnami/os-shell:11-debian-11-r93 imagePullPolicy: IfNotPresent name: init-chmod-data - resources: - limits: {} - requests: {} securityContext: runAsGroup: 0 runAsNonRoot: false runAsUser: 0 + seLinuxOptions: null seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir - mountPath: /bitnami/postgresql name: data - mountPath: /dev/shm @@ -185,8 +197,13 @@ spec: name: postgresql-certificates securityContext: fsGroup: 1001 - serviceAccountName: default + fsGroupChangePolicy: Always + supplementalGroups: [] + sysctls: [] + serviceAccountName: keycloak-postgresql volumes: + - emptyDir: {} + name: empty-dir - name: raw-certificates secret: secretName: keycloak-postgresql-tls diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml index 654cd220..1ea765e3 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml @@ -8,8 +8,8 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql-hl namespace: syn-builtin spec: diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml index bdfb944c..1f593fd6 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql namespace: syn-builtin spec: diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 00000000..27a7b880 --- /dev/null +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 + name: keycloak-postgresql + namespace: syn-builtin diff --git a/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 00000000..f062f886 --- /dev/null +++ b/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 + name: keycloak-postgresql + namespace: syn-external diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml index 6c6d127c..2a0ea3ef 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml @@ -6,21 +6,21 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 - name: keycloak-postgresql-ingress + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 + name: keycloak-postgresql namespace: syn-openshift-postgres spec: + egress: + - {} ingress: - - from: - - podSelector: - matchLabels: - app.kubernetes.io/instance: keycloakx - app.kubernetes.io/name: keycloakx - ports: + - ports: - port: 5432 podSelector: matchLabels: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/name: postgresql + policyTypes: + - Ingress + - Egress diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml index 3c5fbeb0..267c0fa4 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: openshift-postgres app.kubernetes.io/managed-by: commodore app.kubernetes.io/name: keycloak - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql namespace: syn-openshift-postgres spec: @@ -29,8 +29,8 @@ spec: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql spec: affinity: @@ -46,6 +46,7 @@ spec: app.kubernetes.io/name: postgresql topologyKey: kubernetes.io/hostname weight: 1 + automountServiceAccountToken: false containers: - env: - name: BITNAMI_DEBUG @@ -124,20 +125,30 @@ spec: periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 - resources: - limits: {} - requests: - cpu: 250m - memory: 256Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL + privileged: false + readOnlyRootFilesystem: false runAsNonRoot: true + seLinuxOptions: null seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir + - mountPath: /opt/bitnami/postgresql/conf + name: empty-dir + subPath: app-conf-dir + - mountPath: /opt/bitnami/postgresql/tmp + name: empty-dir + subPath: app-tmp-dir + - mountPath: /opt/bitnami/postgresql/logs + name: empty-dir + subPath: app-logs-dir - mountPath: /opt/bitnami/postgresql/certs name: postgresql-certificates readOnly: true @@ -155,29 +166,35 @@ spec: image: docker.io/bitnami/os-shell:11-debian-11-r93 imagePullPolicy: IfNotPresent name: copy-certs - resources: - limits: {} - requests: - cpu: 250m - memory: 256Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL + privileged: false + readOnlyRootFilesystem: false runAsNonRoot: true + seLinuxOptions: null seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir - mountPath: /tmp/certs name: raw-certificates - mountPath: /opt/bitnami/postgresql/certs name: postgresql-certificates securityContext: + fsGroupChangePolicy: Always seccompProfile: type: RuntimeDefault - serviceAccountName: default + supplementalGroups: [] + sysctls: [] + serviceAccountName: keycloak-postgresql volumes: + - emptyDir: {} + name: empty-dir - name: raw-certificates secret: secretName: keycloak-postgresql-tls diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml index 416f3ed7..698e17f7 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml @@ -8,8 +8,8 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql-hl namespace: syn-openshift-postgres spec: diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml index 7c73c82a..40958160 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 name: keycloak-postgresql namespace: syn-openshift-postgres spec: diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 00000000..f7f73281 --- /dev/null +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 + name: keycloak-postgresql + namespace: syn-openshift-postgres diff --git a/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 00000000..2dabdb42 --- /dev/null +++ b/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 16.2.0 + helm.sh/chart: postgresql-14.3.0 + name: keycloak-postgresql + namespace: keycloak-dev