Merge pull request #488 from truefoundry/truefoundry-version-0.4.11

[CI] Publish truefoundry to version 0.4.11
truefoundry · Aug 1, 2024 · f83e2d5 · f83e2d5
2 parents e65cebd + 5066e16
commit f83e2d5
Show file tree

Hide file tree

Showing 35 changed files with 632 additions and 179 deletions.
diff --git a/charts/truefoundry/Chart.lock b/charts/truefoundry/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: tfy-configs
   repository: https://truefoundry.github.io/infra-charts
-  version: 0.1.0-rc.8
+  version: 0.1.0-rc.12
 - name: nats
   repository: https://nats-io.github.io/k8s/helm/charts/
   version: 0.19.1
@@ -11,5 +11,5 @@ dependencies:
 - name: tfy-buildkitd-service
   repository: https://truefoundry.github.io/infra-charts/
   version: 0.1.3
-digest: sha256:cb3b7e07cc70d408f91797d338d7d7d4b990eb74823342a70b242984a4adce40
-generated: "2024-06-21T10:57:48.48025+01:00"
+digest: sha256:e0a953bb0600281d896ae76eab004b871db9a3cd1ada83882cab10a28aeb8e95
+generated: "2024-07-17T18:39:59.745326+05:30"
diff --git a/charts/truefoundry/Chart.yaml b/charts/truefoundry/Chart.yaml
@@ -1,14 +1,14 @@
 apiVersion: v2
 name: truefoundry
-version: 0.4.6
+version: 0.4.11
 description: "Truefoundry applications"
 maintainers:
   - name: truefoundry
 dependencies:
   - condition: servicefoundryServer.enabled
     name: tfy-configs
     repository: https://truefoundry.github.io/infra-charts
-    version: 0.1.0-rc.8
+    version: 0.1.0-rc.12
   - condition: nats.enabled
     name: nats
     repository: https://nats-io.github.io/k8s/helm/charts/

diff --git a/charts/truefoundry/README.md b/charts/truefoundry/README.md
diff --git a/charts/truefoundry/templates/mlfoundry-server/deployment.yaml b/charts/truefoundry/templates/mlfoundry-server/deployment.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.mlfoundryServer.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -19,8 +20,16 @@ spec:
         {{- include "mlfoundry-server.labels" . | nindent 8 }}
     spec:
       serviceAccountName: {{ include "mlfoundry-server.serviceAccountName" . }}
+      {{- with .Values.mlfoundryServer.podSecurityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: "mlfoundry-server"
+          {{- with .Values.mlfoundryServer.securityContext }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           env:
             {{- include "mlfoundry-server.env" . | trim | nindent 12 }}
           image: "{{ .Values.mlfoundryServer.imageRepository }}:{{ .Values.mlfoundryServer.imageTag }}"
@@ -72,3 +81,4 @@ spec:
         {{- if .Values.mlfoundryServer.tolerations }}
         {{- .Values.mlfoundryServer.tolerations | toYaml | nindent 8 }}
         {{- end }}
+  {{- end }}
diff --git a/charts/truefoundry/templates/mlfoundry-server/service.yaml b/charts/truefoundry/templates/mlfoundry-server/service.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.mlfoundryServer.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -11,3 +12,4 @@ spec:
       protocol: TCP
       name: http
   selector: {{- include "mlfoundry-server.selectorLabels" . | nindent 4 }}
+{{- end }}
diff --git a/charts/truefoundry/templates/mlfoundry-server/serviceaccount.yaml b/charts/truefoundry/templates/mlfoundry-server/serviceaccount.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.mlfoundryServer.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -14,3 +15,4 @@ imagePullSecrets:
 {{- else }}
   - name: truefoundry-image-pull-secret
 {{- end }}
+{{- end }}
diff --git a/charts/truefoundry/templates/servicefoundry-server/deployment.yaml b/charts/truefoundry/templates/servicefoundry-server/deployment.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.servicefoundryServer.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -19,8 +20,16 @@ spec:
         {{- include "servicefoundry-server.labels" . | nindent 8 }}
     spec:
       serviceAccountName: {{ include "servicefoundry-server.serviceAccountName" . }}
+      {{- with .Values.servicefoundryServer.podSecurityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: "servicefoundry-server"
+          {{- with .Values.servicefoundryServer.securityContext }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           env:
             {{- include "servicefoundry-server.env" . | trim | nindent 12 }}
           image: "{{ .Values.servicefoundryServer.imageRepository }}:{{ .Values.servicefoundryServer.imageTag }}"
@@ -60,3 +69,4 @@ spec:
         {{- if .Values.servicefoundryServer.tolerations }}
         {{- .Values.servicefoundryServer.tolerations | toYaml | nindent 8 }}
         {{- end }}
+{{- end }}
diff --git a/charts/truefoundry/templates/servicefoundry-server/role.yaml b/charts/truefoundry/templates/servicefoundry-server/role.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.servicefoundryServer.rbac.enabled -}}
+{{- if and .Values.servicefoundryServer.rbac.enabled .Values.servicefoundryServer.enabled -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:

diff --git a/charts/truefoundry/templates/servicefoundry-server/rolebinding.yaml b/charts/truefoundry/templates/servicefoundry-server/rolebinding.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.servicefoundryServer.rbac.enabled -}}
+{{- if and .Values.servicefoundryServer.rbac.enabled .Values.servicefoundryServer.enabled -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:

diff --git a/charts/truefoundry/templates/servicefoundry-server/service.yaml b/charts/truefoundry/templates/servicefoundry-server/service.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.servicefoundryServer.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -12,3 +13,4 @@ spec:
       name: http
   selector:
     {{- include "servicefoundry-server.selectorLabels" . | nindent 4 }}
+{{- end }}
diff --git a/charts/truefoundry/templates/servicefoundry-server/serviceaccount.yaml b/charts/truefoundry/templates/servicefoundry-server/serviceaccount.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.servicefoundryServer.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -14,3 +15,4 @@ imagePullSecrets:
 {{- else }}
   - name: truefoundry-image-pull-secret
 {{- end }}
+{{- end }}
diff --git a/charts/truefoundry/templates/sfy-manifest-service/deployment.yaml b/charts/truefoundry/templates/sfy-manifest-service/deployment.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.sfyManifestService.enabled }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -19,8 +20,16 @@ spec:
         {{- include "sfy-manifest-service.labels" . | nindent 8 }}
     spec:
       serviceAccountName: {{ include "sfy-manifest-service.serviceAccountName" . }}
+      {{- with .Values.sfyManifestService.podSecurityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: "sfy-manifest-service"
+          {{- with .Values.sfyManifestService.securityContext }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           env:
             {{- include "sfy-manifest-service.env" . | trim | nindent 12 }}
           image: "{{ .Values.sfyManifestService.imageRepository }}:{{ .Values.sfyManifestService.imageTag }}"
@@ -60,3 +69,4 @@ spec:
         {{- if .Values.sfyManifestService.tolerations }}
         {{- .Values.sfyManifestService.tolerations | toYaml | nindent 8 }}
         {{- end }}
+{{- end }}
diff --git a/charts/truefoundry/templates/sfy-manifest-service/service.yaml b/charts/truefoundry/templates/sfy-manifest-service/service.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.sfyManifestService.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -12,3 +13,4 @@ spec:
       name: http
   selector:
     {{- include "sfy-manifest-service.selectorLabels" . | nindent 4 }}
+  {{- end }}
diff --git a/charts/truefoundry/templates/sfy-manifest-service/serviceaccount.yaml b/charts/truefoundry/templates/sfy-manifest-service/serviceaccount.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.sfyManifestService.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -14,3 +15,4 @@ imagePullSecrets:
 {{- else }}
   - name: truefoundry-image-pull-secret
 {{- end }}
+{{- end }}
diff --git a/charts/truefoundry/templates/tfy-build/build-workflow-role-binding.yaml b/charts/truefoundry/templates/tfy-build/build-workflow-role-binding.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.tfyBuild.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -9,4 +10,5 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     namespace: {{ .Release.Namespace }}
-    name: {{ include "tfy-build.serviceAccountName" . }}
+    name: {{ include "tfy-build.serviceAccountName" . }}
+{{- end }}
diff --git a/charts/truefoundry/templates/tfy-build/build-workflow-role.yaml b/charts/truefoundry/templates/tfy-build/build-workflow-role.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.tfyBuild.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -9,4 +10,5 @@ rules:
       - workflowtaskresults
     verbs:
       - create
-      - patch
+      - patch
+{{- end }}
diff --git a/charts/truefoundry/templates/tfy-build/build-workflow-service-account.yaml b/charts/truefoundry/templates/tfy-build/build-workflow-service-account.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.tfyBuild.enabled }}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -12,3 +13,4 @@ imagePullSecrets:
 {{- else }}
   - name: truefoundry-image-pull-secret
 {{- end }}
+{{- end }}