62 Commits
Author SHA1 Message Date
Matt Farina dc7e5997de Revert "Updating to new repo locations (#24419)" (#24420)
This reverts commit e2ecc4d816.
2020-11-13 18:28:12 -05:00
Matt Farina e2ecc4d816 Updating to new repo locations (#24419)
Signed-off-by: Matt Farina <matt@mattfarina.com>
2020-11-13 18:21:11 -05:00
Matt Farina 4a04b6f964 Removed old owners files (#24416)
Signed-off-by: Matt Farina <matt@mattfarina.com>
2020-11-13 17:06:05 -05:00
Brady Todhunter 8736171868 [stable/anchore-engine] deprecate chart (#23509)
* deprecate this chart & add note pointing to charts.anchore.io

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* build requirements.lock with helm2

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* vendor in postgres chart to use apiVersion: apps/v1 for deployments to k8s v1.15+

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-08-13 10:10:14 -07:00
Brady Todhunter e2b517b7f7 fix msrc feeds value (#22746)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-06-12 15:51:57 -07:00
Brady Todhunter 26a47a01ae add UI configs for 2.3.1 features (#22692)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-06-05 13:35:46 -07:00
Brady Todhunter fce2e4b1fb Update images to latest versions (#22679)
anchore/anchore-engine:v0.7.2
anchore/enterprise:v2.3.1
anchore/enterprise-ui:v2.3.1

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-06-05 01:35:43 -07:00
Brady Todhunter bd048b272a [stable/anchore-engine] Fix upgrade jobs (#22451)
* set rollingUpdate to null for helm 2 compatibility

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* pass /bin/bash -c to entrypoint to fix upgrade job failures

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-05-19 22:56:18 -07:00
Brady Todhunter 4e3359a3b7 [stable/anchore-engine] Allow loading custom CA certificate (#22440)
* pass anchore-manager to entrypoint

instead of overwriting the entrypoint with anchore-manager pass it to
the entrypoint to be executed. This will allow custom SSL certs to
loaded by the entrypoint.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add custom certs volume to upgrade jobs

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* bump chart version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-05-18 22:17:36 -07:00
David J. M. Karlsen 15839f5638 [stable/anchore-engine] use capabilities in order to support older in… (#22319)
* [stable/anchore-engine] use capabilities in order to support older ingress api

Signed-off-by: David Karlsen <david@davidkarlsen.com>

* fix chomping

Signed-off-by: David Karlsen <david@davidkarlsen.com>
2020-05-13 10:20:26 -07:00
Stefan Hacker c645249bc7 [stable/anchor-engine] Fix broken update bash command (#22193)
Fixes mistakes in update bash command which trigger
when the database connection uses SSL. One was
improper escaping of the ampersand leading to bash
misinterpreting the command. The other was incorrect
use of helm's whitespace chomping leading to the
upload argument being smushed onto the URL.

Signed-off-by: Stefan Hacker <mail@hacst.net>
2020-05-04 15:39:08 -07:00
Brady Todhunter f0bb4e6728 change UI version to v2.3.0 (#22194)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-04-29 12:34:17 -07:00
Stefan Hacker e487e49ea7 Fix connectionPoolMaxOverflow in anchor helm chart (#21813)
Was incorrectly set to connectionPoolSize while the actual value
in connectionPoolMaxOverflow was ignored. This prevents the proper
use of connection limits using the chart.

Signed-off-by: Stefan Hacker <mail@hacst.net>
2020-04-29 11:50:25 -07:00
Brady Todhunter f31183bd57 Update to enterprise v2.3.0 & engine v0.7.1 (#22173)
add pre-upgrade hook for updating DB
Use enterprise image, pullPolicy & imagePullSecret when appropriate
Use recreate deployment strategy for upgrade hook
add global timeout to engine & enterprise
add license to engine components when enterprise is enabled
add license to engine configmap for enterprise installs
use anchore-enterprise-manager for all services when enterprise is enabled
update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-04-28 23:26:25 -07:00
Piotr Parczewski ea19f066fd Update apiVersion for ingress (#21443)
Signed-off-by: Piotr Parczewski <piotr.parczewski@nokia.com>
2020-04-15 08:16:03 -07:00
Bradley Massey d2980bab11 [anchore/stable] fix environment setting from existingSecret (#21764)
Signed-off-by: Bradley Massey <massey.bradley@gmail.com>
2020-04-06 10:41:46 -07:00
Brady Todhunter b82e36f9a6 Update chart for anchore-engine:v0.7.0 (#21668)
enabled github feeds configuration
Use anchore-engine:v0.6.1 image when enterprise is enabled
add imagePullSecret configuration for private anchore-engine images
bump chart minor version
update feeds read timeout to 180
update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-03-29 08:37:53 -07:00
Brady Todhunter e66967b67c [stable/anchore-engine] bump enterprise image to v0.6.2 (#20856)
* bump enterprise image to v0.6.2

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* bump chart version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-02-18 22:26:25 -08:00
Bradley Massey 2d4ccf5e34 [stable/anchore-engine] added default admin password helper (#20524)
* [stable/anchore-engine] added default admin password helper

Signed-off-by: Bradley Massey <bradley.massey@yields.io>

* [stable/anchore-engine] bump chart version

Signed-off-by: Bradley Massey <bradley.massey@yields.io>
2020-02-11 14:00:11 -08:00
Brady Todhunter c561ea4e39 [stable/anchore-engine] update to anchore-engine v0.6.1 (#20459)
* update readme with helm3 installation instructions

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* bug fix

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update anchore-engine to v0.6.1 & bump chart version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update ingress to include feeds api

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* mount an emptydir volume to anchore temp directory on policy engine for feeds sync

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2020-01-30 20:36:19 -08:00
Bradley Massey 69ef199c9a [stable/anchore-engine] Split environment variables configMap (#20239)
* [stable/anchore-engine] Split environment variables configMap

Signed-off-by: Bradley Massey <bradley.massey@yields.io>

* [ref] bump chart version

Signed-off-by: Bradley Massey <bradley.massey@yields.io>

* [stable/anchore-engine] Split enterprise feeds environment variables configMap

Signed-off-by: Bradley Massey <bradley.massey@yields.io>

* [stable/anchore-engine] fixed enterprise feeds environment configmap

Signed-off-by: Bradley Massey <bradley.massey@yields.io>
2020-01-23 15:08:31 -08:00
Brady Todhunter fc3426108a Anchore Engine Enterprise 2.2 (#19575)
add notifications service

set services.catalog.cycle_timers.notifications to 0 when Enterprise notifications service is enabled

update chart & app version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-12-12 21:28:55 -08:00
Brady Todhunter 409b7af1b1 update anchore-engine to v0.5.2 (#18927)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-11-15 15:19:41 -08:00
Brady Todhunter 367299e6f9 set default image_analyze_timeout_seconds to 36000 (#18785)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-11-11 12:18:05 -08:00
Brady Todhunter 9a8bd41ad0 make image_analyze_timeout_seconds configurable (#18644)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-11-11 04:03:41 -08:00
Joseph (Jy) Yaworski c10b86a886 [stable/anchore-engine] Fix templating for anchore catalog service annotations (#18054)
Signed-off-by: Joseph (Jy) Yaworski <jyaworski@carotid.us>
2019-10-16 16:18:38 -07:00
Brady Todhunter 8558ba35b4 [stable/anchore-engine] update chart to anchore engine v0.5.1 (#17905)
* add securityContext to all deployments to run as anchore:anchore

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* version bump to anchore-engine v0.5.1

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-10-11 10:15:43 -07:00
Brady Todhunter 304cc943e6 add openshift deployment option (#17321)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-09-25 00:39:59 -07:00
Nicolas Simonds 65e0a1c74b [stable/anchore-engine] Configure external_hostname / port for Anchore API (#17191)
Fixes: https://github.com/helm/charts/issues/17189
Signed-off-by: Nicolas Simonds <nisimond@cisco.com>
2019-09-24 10:53:27 -07:00
Brady Todhunter be0dbfa9da [stable/anchore-engine] Enterprise 2.1 update (#16864)
* remove |trim from all toYaml statements

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update configmaps to support new feed drivers

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update db configurations to allow sslmode: verify-full & specifying a custom root ca cert

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* allow customizable analyzer_config.yaml

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add _secret to ui config file name to clarify the k8s resource type

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add saml support, custom ssl ca certificate support, & cleanup minor implementation bugs

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* fix internal ssl configuration

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update image versions

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add https to readiness & liveness checks when anchoreGlobal.internalServicesSsl.enabed=true

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* always use -k with curl health check on auth-manager, localhost will never match cert hostname

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* remove SSL config from auth handler & make all engine endpoints use https when anchoreGlobal.internalServicesSsl.enabled=true

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add ssl_verify config to feed section

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-09-04 15:44:22 -07:00
Brady Todhunter f69e237983 update anchore engine image to v0.4.2 (#16103)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-08-06 05:35:55 -07:00
Brady Todhunter 595f51dda8 [stable/anchore-engine] Engine Release v0.4.1 (#15195)
* remove unnecessary quotes from templates

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update ui to v0.3.4 & add policy hub config. Update engine & enterprise to v0.4.1

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update Chart & app version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-07-01 20:51:08 -07:00
Brady Todhunter bf53797903 [stable/anchore-engine] update enterprise version to v0.4.1 (#14718)
* update enterprise version to v0.4.1

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* version bump chart to 1.1.1

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-06-13 12:04:17 -07:00
Philippe Dagenais 01ca361c8e [stable/anchore-engine] Ability to add custom labels (#14549)
* Add unused quotes in the analyzer deployment

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Remove unused quotes

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Add the ability to specify additionnal labels

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Bump chart version to 1.1.0

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* Fix value name

Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com>

* with scope instead of conditional block. Same convention as annotations etc.

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Add feeds labels to the feeds configmap

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Code cleanup

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Allow the user to add custom labels to all kubernetes resources deployed by the anchore-engine chart

Signed-off-by: pgdagenais <pgdagenais@gmail.com>

* Remove invalid values

Signed-off-by: pgdagenais <pgdagenais@gmail.com>
2019-06-11 23:33:28 -07:00
sT331h0rs3 4469c956d3 Add ability to use existing service account for CloudSQL. (#14246)
Signed-off-by: sT331h0rs3 <sT331h0rs3@gmail.com>
2019-05-31 18:16:36 -07:00
Philippe Dagenais 2551d5f3e4 Fix simplequeue template (#14219)
Signed-off-by: Dagenais, Philippe <pdagenais@nuglif.com>
2019-05-28 14:59:33 -07:00
Brady Todhunter e278402230 [stable/anchore-engine] Fix for helm 2.14 (#13891)
* set postgres.persistence.resourcePolicy to nill to fix helm v2.14.0 errors

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* bump chart version to 1.0.3

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-05-15 22:03:42 -07:00
Brady Todhunter 9fecdb0ebc [stable/anchore-engine] Fix feedsdb password (#13881)
* add ANCHORE_DB_PASSWORD env var mapping

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* bump chart version to 1.0.2

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-05-15 13:16:21 -07:00
Carlos Tadeu Panato Junior e9d3c7ec73 add apiVersion (#13770)
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
2019-05-14 12:27:15 -07:00
Brady Todhunter cce3116dae Enterprise 2.0 (#13636)
* UI LDAP functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Enterprise Reports functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* prepare deployments for rootless UBI image

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* cleanup toYaml blocks to use nindent

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* lock redis to v6 chart, due to breaking upgrade changes

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* provide configuration for analyzer image layer caching

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* update readme & chart version

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* fix whitespace issues for linter

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-05-08 23:38:47 -07:00
Gabor Kozma 2733615628 [stable/anchore-engine] Small improvement about secret end env (#12996)
* extraEnv vars change

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>

* bump version

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>

* add existing secret support

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>

* extraEnv map to array in values.yaml

Signed-off-by: Gabor Kozma <gabo@kozmagabor.com>
2019-04-22 10:39:46 -07:00
Peter Balogh 4c71ec3926 add gce-proxy support for anchore-engine (#12529)
Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com>
2019-04-15 15:51:03 -07:00
Brady Todhunter f185521db1 Temporary fix for enterprise UI session bloat (#12469)
* update liveness & remove readiness probes on UI pod.
* add config secret & mount to UI pod.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-03-22 21:23:06 -07:00
Brady Todhunter 2c651a910a Update to Anchore Engine v0.3.3 (#12014)
* Update anchore engine image to use v0.3.3
* Consolidate all ingress resource values
* Upgrade to latest Redis chart version
* Increase postgres persistence to 20Gi
* Allow additional env vars from values

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-03-13 18:00:53 -07:00
Brady Todhunter 41c48b60a0 Update anchore-engine version (#10911)
* Updated Anchore Engine image to v0.3.2

* Updated Anchore Enterprise image to v0.3.3

* Changed image values from image.name, image.tag, & image.pullPolicy
to image & imagePullPolicy

* Removed unnecessary quotes from templates

* Updated chart version to v0.11.0

* Update README

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2019-01-30 09:32:15 -08:00
Brady Todhunter d0e80c76e2 service config changes (#9765)
* initial service config changes

update readiness & liveness probes

update chart app version. update redis chart version. update readme/notes.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Update ingress resource to work directly with NGINX ingress controller

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Update readme

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* revert default ports in values.yaml back to original chart values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2018-12-18 15:16:59 -08:00
Brady Todhunter 8eb06375ba Upgrade to v0.3.0 & add Enterprise (#9287)
* ui functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* enterprise feeds service functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* rbac functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* distributed services functional

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* Add more comments to values.yml. Clean up feeds configuration. Make internal ssl configuration global.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* use /health for all readiness & liveness probes

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* config rbac authorizer on external APIs. Move k8s webhook to core pod. Fix ssl configs to use anchoreGlobal values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add values.yaml snippet & install instructions to README. Default anchoreEnterpriseGlobal.enabled to false

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* be explicit about license secret creation

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* organize values.yaml. Add additional cycle timers. Set image info to non-dev.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* make service port values global. Remove k8s webhook pod. Default more feeds values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* remove alias for base postgresql dependency

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* add upgrade info to README. update chart version to 0.9.0

Signed-off-by: Brady Todhunter <bradyt@anchore.com>

* fix requirements.lock. Remove inline comments. Change case of true/false values.

Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2018-11-14 22:22:39 -08:00
Brady Todhunter 6f35327d75 add brady todhunter as approver to anchore-engine (#8614)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2018-10-22 15:15:03 -07:00
Brady Todhunter 3f615516c7 add brady todhunter as review/maintainer to anchore-engine (#8514)
Signed-off-by: Brady Todhunter <bradyt@anchore.com>
2018-10-16 13:24:29 -07:00
Raza Jhaveri e6793d764a allowing annotations on core and worker deployments (#8306)
Signed-off-by: Raza Jhaveri <razajhaveri@googlemail.com>
2018-10-16 11:07:41 -07:00