diff --git a/.github/ct/install.yaml b/.github/ct/install.yaml index 6c880b7b..4df11bb9 100644 --- a/.github/ct/install.yaml +++ b/.github/ct/install.yaml @@ -6,3 +6,4 @@ chart-repos: debug: true remote: origin helm-extra-args: --timeout 600s +target-branch: master diff --git a/README.md b/README.md index aa794714..ca641c70 100644 --- a/README.md +++ b/README.md @@ -33,7 +33,7 @@ helm repo update 1. Mount the folder in the [kube-powertools](https://github.com/chgl/kube-powertools) container to easily run linters and checks ```sh - docker run --rm -it -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.8 + docker run --rm -it -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.16 ``` 1. Run chart-testing and the `chart-powerlint.sh` script to lint the chart @@ -45,7 +45,7 @@ helm repo update 1. (Optional) View the results of the [polaris audit check](https://github.com/FairwindsOps/polaris) in your browser ```sh - $ docker run --rm -it -p 9090:8080 -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.8 + $ docker run --rm -it -p 9090:8080 -v $PWD:/root/workspace ghcr.io/chgl/kube-powertools:v2.3.16 bash-5.0: helm template charts/fhir-gateway/ | polaris dashboard --config .polaris.yaml --audit-path - ``` diff --git a/charts/blaze/Chart.lock b/charts/blaze/Chart.lock index c4742ac6..db2f3471 100644 --- a/charts/blaze/Chart.lock +++ b/charts/blaze/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 -digest: sha256:ad193e27dedbfcbc2ca49c25af386d80820bdc5b988df79c7d4abe4d47b40949 -generated: "2024-07-06T18:35:51.949178151+02:00" + version: 2.20.5 +digest: sha256:6a506765da77ec972be172c85f52a7b574e489a6660b9091afad27409f00882f +generated: "2024-08-05T13:11:23.967406349Z" diff --git a/charts/blaze/Chart.yaml b/charts/blaze/Chart.yaml index f84b9cb9..1fdf8b04 100644 --- a/charts/blaze/Chart.yaml +++ b/charts/blaze/Chart.yaml @@ -13,10 +13,10 @@ maintainers: dependencies: - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 + version: 2.20.5 deprecated: false kubeVersion: ">= 1.19.0" -version: 0.5.0 +version: 0.5.1 appVersion: "0.x" annotations: artifacthub.io/license: Apache-2.0 @@ -29,8 +29,4 @@ annotations: # added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: changed - description: "Set default resource requests and limits for all containers using presets" - - kind: changed - description: "added service account settings" - - kind: changed - description: "BREAKING CHANGE: move `serviceMonitor` below a `metrics` section" + description: "dependency updates" diff --git a/charts/blaze/values.yaml b/charts/blaze/values.yaml index 05bd10de..a011781d 100644 --- a/charts/blaze/values.yaml +++ b/charts/blaze/values.yaml @@ -5,7 +5,7 @@ replicaCount: 1 image: registry: ghcr.io repository: samply/blaze - tag: 0.28.0@sha256:fb9216a1e6a1db8f1a357fb8ed617283aa0b7fc47e78f4066caf4cd36e297e77 + tag: 0.29.3@sha256:c6f9232cbcacead7c94d9a9220f319ea86a3f8fb1bc5adce90624033b06a0914 pullPolicy: IfNotPresent # -- set the server base URL. Evaluated as a template. Equivalent to setting the `BASE_URL` environment variable. @@ -197,7 +197,7 @@ curl: image: registry: docker.io repository: curlimages/curl - tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd + tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4 # -- configuration for the server persistence persistence: diff --git a/charts/datashield/Chart.lock b/charts/datashield/Chart.lock index f844318f..748f7833 100644 --- a/charts/datashield/Chart.lock +++ b/charts/datashield/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: postgresql repository: oci://registry-1.docker.io/bitnamicharts - version: 15.5.14 -digest: sha256:9f20fde1d2870bc524dcfedfdbaa68addaa0974631c2b22ce31067e3f00df9ab -generated: "2024-07-05T14:09:08.023030262Z" + version: 15.5.20 +digest: sha256:fa28791d6a669ccb1c04be8dd4dce32693ae1699ba318338f5ee8abadf40e0f2 +generated: "2024-08-05T13:11:35.762420912Z" diff --git a/charts/datashield/Chart.yaml b/charts/datashield/Chart.yaml index f45a1933..6fbc0ce6 100644 --- a/charts/datashield/Chart.yaml +++ b/charts/datashield/Chart.yaml @@ -15,12 +15,12 @@ maintainers: - name: miracum dependencies: - name: postgresql - version: 15.5.14 + version: 15.5.20 repository: oci://registry-1.docker.io/bitnamicharts condition: postgresql.enabled deprecated: false kubeVersion: ">= 1.19.0" -version: 0.6.0 +version: 0.6.1 annotations: artifacthub.io/license: Apache-2.0 artifacthub.io/containsSecurityUpdates: "false" @@ -32,6 +32,4 @@ annotations: # added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: changed - description: "Set default resource requests and limits for all containers using presets" - - kind: changed - description: "added service account settings" + description: "dependency updates" diff --git a/charts/datashield/values.yaml b/charts/datashield/values.yaml index cf47c429..1550e9fc 100644 --- a/charts/datashield/values.yaml +++ b/charts/datashield/values.yaml @@ -211,7 +211,7 @@ waitForDatabaseInitContainer: image: registry: docker.io repository: bitnami/postgresql - tag: 16.3.0-debian-12-r19@sha256:b0248a5e2bf4fda5208183d4a6203287828666823a7a57431cfa4d31688bae97 + tag: 16.3.0-debian-12-r23@sha256:865e341baf49006e32b3e72254a15a81c939178cb9c48fcd9faf1c0ac4b49664 pullPolicy: IfNotPresent # -- container security context applied to init containers and the Helm test pods @@ -391,7 +391,7 @@ curl: image: registry: docker.io repository: curlimages/curl - tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd + tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4 tests: automountServiceAccountToken: false diff --git a/charts/fhir-gateway/Chart.lock b/charts/fhir-gateway/Chart.lock index 1b72cc56..27cad62f 100644 --- a/charts/fhir-gateway/Chart.lock +++ b/charts/fhir-gateway/Chart.lock @@ -1,12 +1,12 @@ dependencies: - name: postgresql repository: oci://registry-1.docker.io/bitnamicharts - version: 15.5.14 + version: 15.5.20 - name: fhir-pseudonymizer repository: oci://ghcr.io/miracum/charts - version: 0.7.0 + version: 0.7.1 - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 -digest: sha256:baae36cc408b121d9a593214b52390460903a816aa3c257d193b8702e35f4577 -generated: "2024-07-07T13:28:55.919833754Z" + version: 2.20.5 +digest: sha256:495edc51f1bf5073fe370c8fd1e65422f852209eb28c0243e895d6f509093bab +generated: "2024-08-05T13:11:10.342143226Z" diff --git a/charts/fhir-gateway/Chart.yaml b/charts/fhir-gateway/Chart.yaml index 661f0244..abcba9bb 100644 --- a/charts/fhir-gateway/Chart.yaml +++ b/charts/fhir-gateway/Chart.yaml @@ -7,20 +7,20 @@ sources: home: https://github.com/miracum/fhir-gateway dependencies: - name: postgresql - version: 15.5.14 + version: 15.5.20 repository: oci://registry-1.docker.io/bitnamicharts condition: postgresql.enabled - name: fhir-pseudonymizer condition: fhir-pseudonymizer.enabled - version: 0.7.0 + version: 0.7.1 repository: oci://ghcr.io/miracum/charts - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 -version: 6.3.1 + version: 2.20.5 +version: 6.3.2 annotations: # When using the list of objects option the valid supported kinds are # added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: changed - description: updated fhir-pseudonymizer sub-chart to 0.7.0 + description: "dependency updates" diff --git a/charts/fhir-gateway/README.md b/charts/fhir-gateway/README.md index afc3e7ed..988c97f8 100644 --- a/charts/fhir-gateway/README.md +++ b/charts/fhir-gateway/README.md @@ -59,7 +59,7 @@ The following table lists the configurable parameters of the `fhir-gateway` char | service | the service used to expose the FHIR GW REST endpoint | {"metricsPort":8081,"port":8080,"type":"ClusterIP"} | | ingress.enabled | if enabled, create an Ingress to expose the FHIR Gateway outside the cluster | false | | ingress.ingressClassName | kubernetes.io/ingress.class: nginx kubernetes.io/tls-acme: "true" ingressClassName field | "" | -| resourcesPreset | set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if primary.resources is set (primary.resources is recommended for production). More information: | "medium" | +| resourcesPreset | set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if primary.resources is set (primary.resources is recommended for production). More information: | "small" | | metrics.serviceMonitor.enabled | if enabled, creates a ServiceMonitor instance for Prometheus Operator-based monitoring | false | | serviceAccount.create | -- Specifies whether a service account should be created. | false | | serviceAccount.name | -- The name of the service account to use. If not set and create is true, a name is generated using the fullname template | "" | diff --git a/charts/fhir-gateway/values.yaml b/charts/fhir-gateway/values.yaml index 0daa0f96..42b9c1f9 100644 --- a/charts/fhir-gateway/values.yaml +++ b/charts/fhir-gateway/values.yaml @@ -15,7 +15,7 @@ replicaCount: 1 image: # +doc-gen:ignore registry: ghcr.io repository: miracum/fhir-gateway - tag: v3.13.1@sha256:7046c3b9d59ff848a63c2e793fcb388b687ade06204594af14931d4f599079ae + tag: v3.13.2@sha256:e90e73bf62c64022ab0f180fbbb924056cdd0ae8d7829368bd7346c82f44d3b0 pullPolicy: IfNotPresent # image pull secrets for the pod @@ -58,7 +58,7 @@ waitForPostgresInitContainer: image: # +doc-gen:ignore registry: docker.io repository: bitnami/postgresql - tag: 16.3.0-debian-12-r19@sha256:b0248a5e2bf4fda5208183d4a6203287828666823a7a57431cfa4d31688bae97 + tag: 16.3.0-debian-12-r23@sha256:865e341baf49006e32b3e72254a15a81c939178cb9c48fcd9faf1c0ac4b49664 pullPolicy: IfNotPresent # the service used to expose the FHIR GW REST endpoint @@ -89,7 +89,7 @@ ingress: # set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if primary.resources is set (primary.resources is recommended for production). # More information: -resourcesPreset: "medium" +resourcesPreset: "small" # -- configure the resources used by the log collector sidecar container used to tail the # filesystem-stored log files resources: {} @@ -335,7 +335,7 @@ curl: # +doc-gen:ignore image: registry: docker.io repository: curlimages/curl - tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd + tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4 # container security context applied to init containers used by the query, list, and notify modules. # also used by the Helm test job pods diff --git a/charts/fhir-pseudonymizer/Chart.lock b/charts/fhir-pseudonymizer/Chart.lock index 8e3fc93d..0e24ab40 100644 --- a/charts/fhir-pseudonymizer/Chart.lock +++ b/charts/fhir-pseudonymizer/Chart.lock @@ -4,6 +4,6 @@ dependencies: version: 2.1.0 - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 -digest: sha256:b94bb37516dcdd7c503b9cafd15fbd9d21c7f5a0685e08568d16b9faaf12b58c -generated: "2024-07-07T13:29:10.241403004Z" + version: 2.20.5 +digest: sha256:439d517fb023acc69976ec9b4259d25111eaf3630e8e6c25bbbf371fe4308844 +generated: "2024-08-05T13:10:58.368817484Z" diff --git a/charts/fhir-pseudonymizer/Chart.yaml b/charts/fhir-pseudonymizer/Chart.yaml index d49dc20e..3de6b8b2 100644 --- a/charts/fhir-pseudonymizer/Chart.yaml +++ b/charts/fhir-pseudonymizer/Chart.yaml @@ -12,8 +12,8 @@ dependencies: condition: vfps.enabled - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 -version: 0.7.1 + version: 2.20.5 +version: 0.7.2 annotations: artifacthub.io/license: Apache-2.0 artifacthub.io/containsSecurityUpdates: "false" @@ -25,4 +25,4 @@ annotations: # added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: changed - description: "updated vfps sub-chart to 2.1.0" + description: "dependency updates" diff --git a/charts/fhir-pseudonymizer/values.yaml b/charts/fhir-pseudonymizer/values.yaml index 86ceac59..58640f46 100644 --- a/charts/fhir-pseudonymizer/values.yaml +++ b/charts/fhir-pseudonymizer/values.yaml @@ -34,7 +34,7 @@ gpas: image: # +doc-gen:ignore registry: ghcr.io repository: miracum/fhir-pseudonymizer - tag: v2.21.11@sha256:f39519ea6c62964711a62ac12f1a44720e29ab75c258c225db614935ff8d7bcf + tag: v2.21.14@sha256:413a2aab3b62e9ca6ff1e0a546f9c1f06dc27a83c9289d746210d0634cb90114 pullPolicy: IfNotPresent metrics: @@ -223,7 +223,7 @@ curl: # +doc-gen:ignore image: registry: docker.io repository: curlimages/curl - tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd + tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4 # container security context applied to init containers and the Helm test pods restrictedContainerSecurityContext: # +doc-gen:ignore diff --git a/charts/stream-processors/Chart.lock b/charts/stream-processors/Chart.lock index 20941c0f..25ce776e 100644 --- a/charts/stream-processors/Chart.lock +++ b/charts/stream-processors/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 -digest: sha256:ad193e27dedbfcbc2ca49c25af386d80820bdc5b988df79c7d4abe4d47b40949 -generated: "2024-07-01T17:31:18.056235016Z" + version: 2.20.5 +digest: sha256:6a506765da77ec972be172c85f52a7b574e489a6660b9091afad27409f00882f +generated: "2024-08-05T13:10:44.762926036Z" diff --git a/charts/stream-processors/Chart.yaml b/charts/stream-processors/Chart.yaml index 891d7c09..6c18c057 100644 --- a/charts/stream-processors/Chart.yaml +++ b/charts/stream-processors/Chart.yaml @@ -8,10 +8,10 @@ keywords: - kafka - strimzi kafka operator - stream processing -version: 1.7.4 +version: 1.7.5 dependencies: - name: common - version: 2.20.3 + version: 2.20.5 repository: oci://registry-1.docker.io/bitnamicharts annotations: artifacthub.io/recommendations: | @@ -21,4 +21,4 @@ annotations: # added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: changed - description: dependency updates + description: "dependency updates" diff --git a/charts/vfps/Chart.lock b/charts/vfps/Chart.lock index 7581a0e5..c717328a 100644 --- a/charts/vfps/Chart.lock +++ b/charts/vfps/Chart.lock @@ -1,9 +1,9 @@ dependencies: - name: postgresql repository: oci://registry-1.docker.io/bitnamicharts - version: 15.5.14 + version: 15.5.20 - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 -digest: sha256:3a7ad37d2f0e668ef2794992fc5c89d6c90163e16fdc5dac102e707506b3aec6 -generated: "2024-07-06T21:31:28.057836775+02:00" + version: 2.20.5 +digest: sha256:fdb5d33d9e41a07a8b81839dbf45f34dcc2358fec921a255625608f21c482d80 +generated: "2024-08-05T13:10:31.734411918Z" diff --git a/charts/vfps/Chart.yaml b/charts/vfps/Chart.yaml index b7b53ec3..0e6ab214 100644 --- a/charts/vfps/Chart.yaml +++ b/charts/vfps/Chart.yaml @@ -15,15 +15,15 @@ maintainers: - name: miracum dependencies: - name: postgresql - version: 15.5.14 + version: 15.5.20 repository: oci://registry-1.docker.io/bitnamicharts condition: postgresql.enabled - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.20.3 + version: 2.20.5 deprecated: false kubeVersion: ">= 1.19.0" -version: 2.1.0 +version: 2.1.1 appVersion: "1.x" annotations: artifacthub.io/license: Apache-2.0 @@ -40,6 +40,4 @@ annotations: # added, changed, deprecated, removed, fixed and security. artifacthub.io/changes: | - kind: changed - description: "Set default resource requests and limits for all containers using presets" - - kind: changed - description: "added service account settings" + description: "dependency updates" diff --git a/charts/vfps/values.yaml b/charts/vfps/values.yaml index 51cd9733..fe0cedc0 100644 --- a/charts/vfps/values.yaml +++ b/charts/vfps/values.yaml @@ -182,7 +182,7 @@ waitForDatabaseInitContainer: image: registry: docker.io repository: bitnami/postgresql - tag: 16.3.0-debian-12-r19@sha256:b0248a5e2bf4fda5208183d4a6203287828666823a7a57431cfa4d31688bae97 + tag: 16.3.0-debian-12-r23@sha256:865e341baf49006e32b3e72254a15a81c939178cb9c48fcd9faf1c0ac4b49664 pullPolicy: IfNotPresent # -- container security context applied to init containers and the Helm test pods @@ -241,7 +241,7 @@ curl: image: registry: docker.io repository: curlimages/curl - tag: 8.8.0@sha256:73e4d532ea62d7505c5865b517d3704966ffe916609bedc22af6833dc9969bcd + tag: 8.9.1@sha256:8addc281f0ea517409209f76832b6ddc2cabc3264feb1ebbec2a2521ffad24e4 # -- a JSON configuration object which is mounted as `appsettings.Production.json` inside the container. # useful to define namespaces to create as part of the application startup.