Matt Farina
dc7e5997de
Revert "Updating to new repo locations ( #24419 )" ( #24420 )
...
This reverts commit e2ecc4d816 .
2020-11-13 18:28:12 -05:00
Matt Farina
e2ecc4d816
Updating to new repo locations ( #24419 )
...
Signed-off-by: Matt Farina <matt@mattfarina.com >
2020-11-13 18:21:11 -05:00
Matt Farina
4a04b6f964
Removed old owners files ( #24416 )
...
Signed-off-by: Matt Farina <matt@mattfarina.com >
2020-11-13 17:06:05 -05:00
Brady Todhunter
8736171868
[stable/anchore-engine] deprecate chart ( #23509 )
...
* deprecate this chart & add note pointing to charts.anchore.io
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* build requirements.lock with helm2
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* vendor in postgres chart to use apiVersion: apps/v1 for deployments to k8s v1.15+
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-08-13 10:10:14 -07:00
Brady Todhunter
e2b517b7f7
fix msrc feeds value ( #22746 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-06-12 15:51:57 -07:00
Brady Todhunter
26a47a01ae
add UI configs for 2.3.1 features ( #22692 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-06-05 13:35:46 -07:00
Brady Todhunter
fce2e4b1fb
Update images to latest versions ( #22679 )
...
anchore/anchore-engine:v0.7.2
anchore/enterprise:v2.3.1
anchore/enterprise-ui:v2.3.1
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-06-05 01:35:43 -07:00
Brady Todhunter
bd048b272a
[stable/anchore-engine] Fix upgrade jobs ( #22451 )
...
* set rollingUpdate to null for helm 2 compatibility
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* pass /bin/bash -c to entrypoint to fix upgrade job failures
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-05-19 22:56:18 -07:00
Brady Todhunter
4e3359a3b7
[stable/anchore-engine] Allow loading custom CA certificate ( #22440 )
...
* pass anchore-manager to entrypoint
instead of overwriting the entrypoint with anchore-manager pass it to
the entrypoint to be executed. This will allow custom SSL certs to
loaded by the entrypoint.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add custom certs volume to upgrade jobs
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* bump chart version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-05-18 22:17:36 -07:00
David J. M. Karlsen
15839f5638
[stable/anchore-engine] use capabilities in order to support older in… ( #22319 )
...
* [stable/anchore-engine] use capabilities in order to support older ingress api
Signed-off-by: David Karlsen <david@davidkarlsen.com >
* fix chomping
Signed-off-by: David Karlsen <david@davidkarlsen.com >
2020-05-13 10:20:26 -07:00
Stefan Hacker
c645249bc7
[stable/anchor-engine] Fix broken update bash command ( #22193 )
...
Fixes mistakes in update bash command which trigger
when the database connection uses SSL. One was
improper escaping of the ampersand leading to bash
misinterpreting the command. The other was incorrect
use of helm's whitespace chomping leading to the
upload argument being smushed onto the URL.
Signed-off-by: Stefan Hacker <mail@hacst.net >
2020-05-04 15:39:08 -07:00
Brady Todhunter
f0bb4e6728
change UI version to v2.3.0 ( #22194 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-04-29 12:34:17 -07:00
Stefan Hacker
e487e49ea7
Fix connectionPoolMaxOverflow in anchor helm chart ( #21813 )
...
Was incorrectly set to connectionPoolSize while the actual value
in connectionPoolMaxOverflow was ignored. This prevents the proper
use of connection limits using the chart.
Signed-off-by: Stefan Hacker <mail@hacst.net >
2020-04-29 11:50:25 -07:00
Brady Todhunter
f31183bd57
Update to enterprise v2.3.0 & engine v0.7.1 ( #22173 )
...
add pre-upgrade hook for updating DB
Use enterprise image, pullPolicy & imagePullSecret when appropriate
Use recreate deployment strategy for upgrade hook
add global timeout to engine & enterprise
add license to engine components when enterprise is enabled
add license to engine configmap for enterprise installs
use anchore-enterprise-manager for all services when enterprise is enabled
update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-04-28 23:26:25 -07:00
Piotr Parczewski
ea19f066fd
Update apiVersion for ingress ( #21443 )
...
Signed-off-by: Piotr Parczewski <piotr.parczewski@nokia.com >
2020-04-15 08:16:03 -07:00
Bradley Massey
d2980bab11
[anchore/stable] fix environment setting from existingSecret ( #21764 )
...
Signed-off-by: Bradley Massey <massey.bradley@gmail.com >
2020-04-06 10:41:46 -07:00
Brady Todhunter
b82e36f9a6
Update chart for anchore-engine:v0.7.0 ( #21668 )
...
enabled github feeds configuration
Use anchore-engine:v0.6.1 image when enterprise is enabled
add imagePullSecret configuration for private anchore-engine images
bump chart minor version
update feeds read timeout to 180
update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-03-29 08:37:53 -07:00
Brady Todhunter
e66967b67c
[stable/anchore-engine] bump enterprise image to v0.6.2 ( #20856 )
...
* bump enterprise image to v0.6.2
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* bump chart version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-02-18 22:26:25 -08:00
Bradley Massey
2d4ccf5e34
[stable/anchore-engine] added default admin password helper ( #20524 )
...
* [stable/anchore-engine] added default admin password helper
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
* [stable/anchore-engine] bump chart version
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
2020-02-11 14:00:11 -08:00
Brady Todhunter
c561ea4e39
[stable/anchore-engine] update to anchore-engine v0.6.1 ( #20459 )
...
* update readme with helm3 installation instructions
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* bug fix
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update anchore-engine to v0.6.1 & bump chart version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update ingress to include feeds api
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* mount an emptydir volume to anchore temp directory on policy engine for feeds sync
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2020-01-30 20:36:19 -08:00
Bradley Massey
69ef199c9a
[stable/anchore-engine] Split environment variables configMap ( #20239 )
...
* [stable/anchore-engine] Split environment variables configMap
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
* [ref] bump chart version
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
* [stable/anchore-engine] Split enterprise feeds environment variables configMap
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
* [stable/anchore-engine] fixed enterprise feeds environment configmap
Signed-off-by: Bradley Massey <bradley.massey@yields.io >
2020-01-23 15:08:31 -08:00
Brady Todhunter
fc3426108a
Anchore Engine Enterprise 2.2 ( #19575 )
...
add notifications service
set services.catalog.cycle_timers.notifications to 0 when Enterprise notifications service is enabled
update chart & app version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-12-12 21:28:55 -08:00
Brady Todhunter
409b7af1b1
update anchore-engine to v0.5.2 ( #18927 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-11-15 15:19:41 -08:00
Brady Todhunter
367299e6f9
set default image_analyze_timeout_seconds to 36000 ( #18785 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-11-11 12:18:05 -08:00
Brady Todhunter
9a8bd41ad0
make image_analyze_timeout_seconds configurable ( #18644 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-11-11 04:03:41 -08:00
Joseph (Jy) Yaworski
c10b86a886
[stable/anchore-engine] Fix templating for anchore catalog service annotations ( #18054 )
...
Signed-off-by: Joseph (Jy) Yaworski <jyaworski@carotid.us >
2019-10-16 16:18:38 -07:00
Brady Todhunter
8558ba35b4
[stable/anchore-engine] update chart to anchore engine v0.5.1 ( #17905 )
...
* add securityContext to all deployments to run as anchore:anchore
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* version bump to anchore-engine v0.5.1
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-10-11 10:15:43 -07:00
Brady Todhunter
304cc943e6
add openshift deployment option ( #17321 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-09-25 00:39:59 -07:00
Nicolas Simonds
65e0a1c74b
[stable/anchore-engine] Configure external_hostname / port for Anchore API ( #17191 )
...
Fixes: https://github.com/helm/charts/issues/17189
Signed-off-by: Nicolas Simonds <nisimond@cisco.com >
2019-09-24 10:53:27 -07:00
Brady Todhunter
be0dbfa9da
[stable/anchore-engine] Enterprise 2.1 update ( #16864 )
...
* remove |trim from all toYaml statements
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update configmaps to support new feed drivers
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update db configurations to allow sslmode: verify-full & specifying a custom root ca cert
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* allow customizable analyzer_config.yaml
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add _secret to ui config file name to clarify the k8s resource type
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add saml support, custom ssl ca certificate support, & cleanup minor implementation bugs
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* fix internal ssl configuration
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update image versions
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add https to readiness & liveness checks when anchoreGlobal.internalServicesSsl.enabed=true
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* always use -k with curl health check on auth-manager, localhost will never match cert hostname
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* remove SSL config from auth handler & make all engine endpoints use https when anchoreGlobal.internalServicesSsl.enabled=true
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add ssl_verify config to feed section
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-09-04 15:44:22 -07:00
Brady Todhunter
f69e237983
update anchore engine image to v0.4.2 ( #16103 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-08-06 05:35:55 -07:00
Brady Todhunter
595f51dda8
[stable/anchore-engine] Engine Release v0.4.1 ( #15195 )
...
* remove unnecessary quotes from templates
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update ui to v0.3.4 & add policy hub config. Update engine & enterprise to v0.4.1
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update Chart & app version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-07-01 20:51:08 -07:00
Brady Todhunter
bf53797903
[stable/anchore-engine] update enterprise version to v0.4.1 ( #14718 )
...
* update enterprise version to v0.4.1
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* version bump chart to 1.1.1
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-06-13 12:04:17 -07:00
Philippe Dagenais
01ca361c8e
[stable/anchore-engine] Ability to add custom labels ( #14549 )
...
* Add unused quotes in the analyzer deployment
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Remove unused quotes
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Add the ability to specify additionnal labels
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Bump chart version to 1.1.0
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* Fix value name
Signed-off-by: Philippe Dagenais <pgdagenais@gmail.com >
* with scope instead of conditional block. Same convention as annotations etc.
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Add feeds labels to the feeds configmap
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Code cleanup
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Allow the user to add custom labels to all kubernetes resources deployed by the anchore-engine chart
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
* Remove invalid values
Signed-off-by: pgdagenais <pgdagenais@gmail.com >
2019-06-11 23:33:28 -07:00
sT331h0rs3
4469c956d3
Add ability to use existing service account for CloudSQL. ( #14246 )
...
Signed-off-by: sT331h0rs3 <sT331h0rs3@gmail.com >
2019-05-31 18:16:36 -07:00
Philippe Dagenais
2551d5f3e4
Fix simplequeue template ( #14219 )
...
Signed-off-by: Dagenais, Philippe <pdagenais@nuglif.com >
2019-05-28 14:59:33 -07:00
Brady Todhunter
e278402230
[stable/anchore-engine] Fix for helm 2.14 ( #13891 )
...
* set postgres.persistence.resourcePolicy to nill to fix helm v2.14.0 errors
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* bump chart version to 1.0.3
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-05-15 22:03:42 -07:00
Brady Todhunter
9fecdb0ebc
[stable/anchore-engine] Fix feedsdb password ( #13881 )
...
* add ANCHORE_DB_PASSWORD env var mapping
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* bump chart version to 1.0.2
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-05-15 13:16:21 -07:00
Carlos Tadeu Panato Junior
e9d3c7ec73
add apiVersion ( #13770 )
...
Signed-off-by: Carlos Panato <ctadeu@gmail.com >
2019-05-14 12:27:15 -07:00
Brady Todhunter
cce3116dae
Enterprise 2.0 ( #13636 )
...
* UI LDAP functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Enterprise Reports functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* prepare deployments for rootless UBI image
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* cleanup toYaml blocks to use nindent
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* lock redis to v6 chart, due to breaking upgrade changes
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* provide configuration for analyzer image layer caching
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* update readme & chart version
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* fix whitespace issues for linter
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-05-08 23:38:47 -07:00
Gabor Kozma
2733615628
[stable/anchore-engine] Small improvement about secret end env ( #12996 )
...
* extraEnv vars change
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
* bump version
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
* add existing secret support
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
* extraEnv map to array in values.yaml
Signed-off-by: Gabor Kozma <gabo@kozmagabor.com >
2019-04-22 10:39:46 -07:00
Peter Balogh
4c71ec3926
add gce-proxy support for anchore-engine ( #12529 )
...
Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com >
2019-04-15 15:51:03 -07:00
Brady Todhunter
f185521db1
Temporary fix for enterprise UI session bloat ( #12469 )
...
* update liveness & remove readiness probes on UI pod.
* add config secret & mount to UI pod.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-03-22 21:23:06 -07:00
Brady Todhunter
2c651a910a
Update to Anchore Engine v0.3.3 ( #12014 )
...
* Update anchore engine image to use v0.3.3
* Consolidate all ingress resource values
* Upgrade to latest Redis chart version
* Increase postgres persistence to 20Gi
* Allow additional env vars from values
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-03-13 18:00:53 -07:00
Brady Todhunter
41c48b60a0
Update anchore-engine version ( #10911 )
...
* Updated Anchore Engine image to v0.3.2
* Updated Anchore Enterprise image to v0.3.3
* Changed image values from image.name, image.tag, & image.pullPolicy
to image & imagePullPolicy
* Removed unnecessary quotes from templates
* Updated chart version to v0.11.0
* Update README
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2019-01-30 09:32:15 -08:00
Brady Todhunter
d0e80c76e2
service config changes ( #9765 )
...
* initial service config changes
update readiness & liveness probes
update chart app version. update redis chart version. update readme/notes.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Update ingress resource to work directly with NGINX ingress controller
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Update readme
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* revert default ports in values.yaml back to original chart values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2018-12-18 15:16:59 -08:00
Brady Todhunter
8eb06375ba
Upgrade to v0.3.0 & add Enterprise ( #9287 )
...
* ui functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* enterprise feeds service functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* rbac functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* distributed services functional
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* Add more comments to values.yml. Clean up feeds configuration. Make internal ssl configuration global.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* use /health for all readiness & liveness probes
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* config rbac authorizer on external APIs. Move k8s webhook to core pod. Fix ssl configs to use anchoreGlobal values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add values.yaml snippet & install instructions to README. Default anchoreEnterpriseGlobal.enabled to false
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* be explicit about license secret creation
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* organize values.yaml. Add additional cycle timers. Set image info to non-dev.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* make service port values global. Remove k8s webhook pod. Default more feeds values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* remove alias for base postgresql dependency
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* add upgrade info to README. update chart version to 0.9.0
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
* fix requirements.lock. Remove inline comments. Change case of true/false values.
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2018-11-14 22:22:39 -08:00
Brady Todhunter
6f35327d75
add brady todhunter as approver to anchore-engine ( #8614 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2018-10-22 15:15:03 -07:00
Brady Todhunter
3f615516c7
add brady todhunter as review/maintainer to anchore-engine ( #8514 )
...
Signed-off-by: Brady Todhunter <bradyt@anchore.com >
2018-10-16 13:24:29 -07:00
Raza Jhaveri
e6793d764a
allowing annotations on core and worker deployments ( #8306 )
...
Signed-off-by: Raza Jhaveri <razajhaveri@googlemail.com >
2018-10-16 11:07:41 -07:00