From 5ef06e09bf628beaa14f61634b15ce7aa163641c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 14 Dec 2021 23:05:30 +0000 Subject: [PATCH] release: update manifest and helm charts for v0.7.0 (#299) Co-authored-by: chewong --- Makefile | 2 +- charts/workload-identity-webhook/Chart.yaml | 4 ++-- charts/workload-identity-webhook/README.md | 2 +- charts/workload-identity-webhook/values.yaml | 2 +- config/manager/kustomization.yaml | 2 +- deploy/azure-wi-webhook.yaml | 8 ++++---- docs/book/src/installation/azwi.md | 2 +- docs/book/src/installation/mutating-admission-webhook.md | 2 +- .../migration/pod-with-proxy-init-and-proxy-sidecar.yaml | 4 ++-- .../charts/workload-identity-webhook/Chart.yaml | 4 ++-- .../charts/workload-identity-webhook/README.md | 2 +- .../charts/workload-identity-webhook/values.yaml | 2 +- manifest_staging/deploy/azure-wi-webhook.yaml | 2 +- test/e2e/e2e_test.go | 4 ++-- .../gatekeeper/helmify/static/Chart.yaml | 4 ++-- .../open-policy-agent/gatekeeper/helmify/static/README.md | 2 +- .../gatekeeper/helmify/static/values.yaml | 2 +- 17 files changed, 25 insertions(+), 25 deletions(-) diff --git a/Makefile b/Makefile index d0dabb7..c7642a2 100644 --- a/Makefile +++ b/Makefile @@ -2,7 +2,7 @@ REGISTRY ?= mcr.microsoft.com/oss/azure/workload-identity PROXY_IMAGE_NAME := proxy INIT_IMAGE_NAME := proxy-init WEBHOOK_IMAGE_NAME := webhook -IMAGE_VERSION ?= v0.6.0 +IMAGE_VERSION ?= v0.7.0 ORG_PATH := github.com/Azure PROJECT_NAME := azure-workload-identity diff --git a/charts/workload-identity-webhook/Chart.yaml b/charts/workload-identity-webhook/Chart.yaml index 7052a20..fad1071 100644 --- a/charts/workload-identity-webhook/Chart.yaml +++ b/charts/workload-identity-webhook/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 name: workload-identity-webhook description: A Helm chart to install the azure-workload-identity webhook type: application -version: 0.6.0 -appVersion: v0.6.0 +version: 0.7.0 +appVersion: v0.7.0 home: https://github.com/Azure/azure-workload-identity sources: - https://github.com/Azure/azure-workload-identity diff --git a/charts/workload-identity-webhook/README.md b/charts/workload-identity-webhook/README.md index 0f24336..35c5746 100644 --- a/charts/workload-identity-webhook/README.md +++ b/charts/workload-identity-webhook/README.md @@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide | replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` | | image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` | | image.pullPolicy | Image pullPolicy | `IfNotPresent` | -| image.release | The image release tag to use | Current release version: `v0.6.0` | +| image.release | The image release tag to use | Current release version: `v0.7.0` | | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` | | arcCluster | Specify if it runs on Arc cluster | `false` | | resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi | diff --git a/charts/workload-identity-webhook/values.yaml b/charts/workload-identity-webhook/values.yaml index 36587ff..19c4282 100644 --- a/charts/workload-identity-webhook/values.yaml +++ b/charts/workload-identity-webhook/values.yaml @@ -9,7 +9,7 @@ image: repository: mcr.microsoft.com/oss/azure/workload-identity/webhook pullPolicy: IfNotPresent # Overrides the image tag whose default is the chart appVersion. - release: v0.6.0 + release: v0.7.0 nodeSelector: kubernetes.io/os: linux arcCluster: false diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml index 5d6a870..8693414 100644 --- a/config/manager/kustomization.yaml +++ b/config/manager/kustomization.yaml @@ -5,7 +5,7 @@ kind: Kustomization images: - name: manager newName: mcr.microsoft.com/oss/azure/workload-identity/webhook - newTag: v0.6.0 + newTag: v0.7.0 configMapGenerator: - literals: - AZURE_TENANT_ID="${AZURE_TENANT_ID}" diff --git a/deploy/azure-wi-webhook.yaml b/deploy/azure-wi-webhook.yaml index a8bf949..0118a17 100644 --- a/deploy/azure-wi-webhook.yaml +++ b/deploy/azure-wi-webhook.yaml @@ -100,8 +100,8 @@ subjects: --- apiVersion: v1 data: - AZURE_ENVIRONMENT: - AZURE_TENANT_ID: + AZURE_ENVIRONMENT: ${AZURE_ENVIRONMENT:-AzurePublicCloud} + AZURE_TENANT_ID: ${AZURE_TENANT_ID} kind: ConfigMap metadata: labels: @@ -150,7 +150,7 @@ spec: spec: containers: - args: - - --arc-cluster=false + - --arc-cluster=${ARC_CLUSTER:-false} command: - /manager env: @@ -162,7 +162,7 @@ spec: envFrom: - configMapRef: name: azure-wi-webhook-config - image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.6.0 + image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.7.0 imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/docs/book/src/installation/azwi.md b/docs/book/src/installation/azwi.md index 4508d67..a2f7823 100644 --- a/docs/book/src/installation/azwi.md +++ b/docs/book/src/installation/azwi.md @@ -12,7 +12,7 @@ ### `go install` ```bash -go install github.com/Azure/azure-workload-identity/cmd/azwi@v0.6.0 +go install github.com/Azure/azure-workload-identity/cmd/azwi@v0.7.0 ``` ### Homebrew (MacOS only) diff --git a/docs/book/src/installation/mutating-admission-webhook.md b/docs/book/src/installation/mutating-admission-webhook.md index c70ff3c..dd785ce 100644 --- a/docs/book/src/installation/mutating-admission-webhook.md +++ b/docs/book/src/installation/mutating-admission-webhook.md @@ -71,7 +71,7 @@ The deployment YAML contains the environment variables we defined above and we r Install the webhook using the deployment YAML via `kubectl apply -f` and `envsubst`: ```bash -curl -s https://github.com/Azure/azure-workload-identity/releases/download/v0.6.0/azure-wi-webhook.yaml | envsubst | kubectl apply -f - +curl -s https://github.com/Azure/azure-workload-identity/releases/download/v0.7.0/azure-wi-webhook.yaml | envsubst | kubectl apply -f - ```
diff --git a/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml b/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml index 8aca161..0916688 100644 --- a/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml +++ b/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml @@ -8,7 +8,7 @@ spec: serviceAccountName: workload-identity-sa initContainers: - name: init-networking - image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.6.0 + image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.7.0 securityContext: capabilities: add: @@ -26,6 +26,6 @@ spec: ports: - containerPort: 80 - name: proxy - image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.6.0 + image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.7.0 ports: - containerPort: 8000 diff --git a/manifest_staging/charts/workload-identity-webhook/Chart.yaml b/manifest_staging/charts/workload-identity-webhook/Chart.yaml index 7052a20..fad1071 100644 --- a/manifest_staging/charts/workload-identity-webhook/Chart.yaml +++ b/manifest_staging/charts/workload-identity-webhook/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 name: workload-identity-webhook description: A Helm chart to install the azure-workload-identity webhook type: application -version: 0.6.0 -appVersion: v0.6.0 +version: 0.7.0 +appVersion: v0.7.0 home: https://github.com/Azure/azure-workload-identity sources: - https://github.com/Azure/azure-workload-identity diff --git a/manifest_staging/charts/workload-identity-webhook/README.md b/manifest_staging/charts/workload-identity-webhook/README.md index 0f24336..35c5746 100644 --- a/manifest_staging/charts/workload-identity-webhook/README.md +++ b/manifest_staging/charts/workload-identity-webhook/README.md @@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide | replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` | | image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` | | image.pullPolicy | Image pullPolicy | `IfNotPresent` | -| image.release | The image release tag to use | Current release version: `v0.6.0` | +| image.release | The image release tag to use | Current release version: `v0.7.0` | | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` | | arcCluster | Specify if it runs on Arc cluster | `false` | | resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi | diff --git a/manifest_staging/charts/workload-identity-webhook/values.yaml b/manifest_staging/charts/workload-identity-webhook/values.yaml index 36587ff..19c4282 100644 --- a/manifest_staging/charts/workload-identity-webhook/values.yaml +++ b/manifest_staging/charts/workload-identity-webhook/values.yaml @@ -9,7 +9,7 @@ image: repository: mcr.microsoft.com/oss/azure/workload-identity/webhook pullPolicy: IfNotPresent # Overrides the image tag whose default is the chart appVersion. - release: v0.6.0 + release: v0.7.0 nodeSelector: kubernetes.io/os: linux arcCluster: false diff --git a/manifest_staging/deploy/azure-wi-webhook.yaml b/manifest_staging/deploy/azure-wi-webhook.yaml index db4a2a0..0118a17 100644 --- a/manifest_staging/deploy/azure-wi-webhook.yaml +++ b/manifest_staging/deploy/azure-wi-webhook.yaml @@ -162,7 +162,7 @@ spec: envFrom: - configMapRef: name: azure-wi-webhook-config - image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.6.0 + image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.7.0 imagePullPolicy: IfNotPresent livenessProbe: httpGet: diff --git a/test/e2e/e2e_test.go b/test/e2e/e2e_test.go index f517b31..e907ba9 100644 --- a/test/e2e/e2e_test.go +++ b/test/e2e/e2e_test.go @@ -17,8 +17,8 @@ import ( func init() { flag.BoolVar(&arcCluster, "e2e.arc-cluster", false, "Running on an arc-enabled cluster") flag.StringVar(&tokenExchangeE2EImage, "e2e.token-exchange-image", "aramase/msal-go:v0.6.0", "The image to use for token exchange tests") - flag.StringVar(&proxyInitImage, "e2e.proxy-init-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.6.0", "The proxy-init image") - flag.StringVar(&proxyImage, "e2e.proxy-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.6.0", "The proxy image") + flag.StringVar(&proxyInitImage, "e2e.proxy-init-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.7.0", "The proxy-init image") + flag.StringVar(&proxyImage, "e2e.proxy-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.7.0", "The proxy image") // This is only required because webhook v0.6.0 uses 86400 for default token expiration and we are running upgrade tests. // TODO(aramase): remove this flag after v0.7.0 release flag.DurationVar(&serviceAccountTokenExpiration, "e2e.service-account-token-expiration", time.Duration(webhook.DefaultServiceAccountTokenExpiration)*time.Second, "The service account token expiration") diff --git a/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml b/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml index 7052a20..fad1071 100644 --- a/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml +++ b/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml @@ -2,8 +2,8 @@ apiVersion: v2 name: workload-identity-webhook description: A Helm chart to install the azure-workload-identity webhook type: application -version: 0.6.0 -appVersion: v0.6.0 +version: 0.7.0 +appVersion: v0.7.0 home: https://github.com/Azure/azure-workload-identity sources: - https://github.com/Azure/azure-workload-identity diff --git a/third_party/open-policy-agent/gatekeeper/helmify/static/README.md b/third_party/open-policy-agent/gatekeeper/helmify/static/README.md index 0f24336..35c5746 100644 --- a/third_party/open-policy-agent/gatekeeper/helmify/static/README.md +++ b/third_party/open-policy-agent/gatekeeper/helmify/static/README.md @@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide | replicaCount | The number of azure-workload-identity replicas to deploy for the webhook | `2` | | image.repository | Image repository | `mcr.microsoft.com/oss/azure/workload-identity/webhook` | | image.pullPolicy | Image pullPolicy | `IfNotPresent` | -| image.release | The image release tag to use | Current release version: `v0.6.0` | +| image.release | The image release tag to use | Current release version: `v0.7.0` | | nodeSelector | The node selector to use for pod scheduling | `kubernetes.io/os: linux` | | arcCluster | Specify if it runs on Arc cluster | `false` | | resources | The resource request/limits for the container image | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi | diff --git a/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml b/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml index 36587ff..19c4282 100644 --- a/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml +++ b/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml @@ -9,7 +9,7 @@ image: repository: mcr.microsoft.com/oss/azure/workload-identity/webhook pullPolicy: IfNotPresent # Overrides the image tag whose default is the chart appVersion. - release: v0.6.0 + release: v0.7.0 nodeSelector: kubernetes.io/os: linux arcCluster: false