release: update manifest and helm charts for v0.7.0 (#299)

Co-authored-by: chewong <chewong@users.noreply.github.com>
2021-12-14 23:05:30 +00:00 · 2021-12-14 23:05:30 +00:00 · 5ef06e09bf
--- a/2
+++ b/2
@ -2,7 +2,7 @@ REGISTRY ?= mcr.microsoft.com/oss/azure/workload-identity
 PROXY_IMAGE_NAME := proxy
 INIT_IMAGE_NAME := proxy-init
 WEBHOOK_IMAGE_NAME := webhook
-IMAGE_VERSION ?= v0.6.0
+IMAGE_VERSION ?= v0.7.0

 ORG_PATH := github.com/Azure
 PROJECT_NAME := azure-workload-identity
--- a/charts/workload-identity-webhook/Chart.yaml
+++ b/charts/workload-identity-webhook/Chart.yaml
@ -2,8 +2,8 @@ apiVersion: v2
 name: workload-identity-webhook
 description: A Helm chart to install the azure-workload-identity webhook
 type: application
-version: 0.6.0
-appVersion: v0.6.0
+version: 0.7.0
+appVersion: v0.7.0
 home: https://github.com/Azure/azure-workload-identity
 sources:
  - https://github.com/Azure/azure-workload-identity
--- a/charts/workload-identity-webhook/README.md
+++ b/charts/workload-identity-webhook/README.md
@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
 | replicaCount       | The number of azure-workload-identity replicas to deploy for the webhook | `2`                                                     |
 | image.repository   | Image repository                                                         | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
 | image.pullPolicy   | Image pullPolicy                                                         | `IfNotPresent`                                          |
-| image.release      | The image release tag to use                                             | Current release version: `v0.6.0`                       |
+| image.release      | The image release tag to use                                             | Current release version: `v0.7.0`                       |
 | nodeSelector       | The node selector to use for pod scheduling                              | `kubernetes.io/os: linux`                               |
 | arcCluster         | Specify if it runs on Arc cluster                                        | `false`                                                 |
 | resources          | The resource request/limits for the container image                      | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi        |
--- a/charts/workload-identity-webhook/values.yaml
+++ b/charts/workload-identity-webhook/values.yaml
@ -9,7 +9,7 @@ image:
  repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
-  release: v0.6.0
+  release: v0.7.0
 nodeSelector:
  kubernetes.io/os: linux
 arcCluster: false
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@ -5,7 +5,7 @@ kind: Kustomization
 images:
 - name: manager
  newName: mcr.microsoft.com/oss/azure/workload-identity/webhook
-  newTag: v0.6.0
+  newTag: v0.7.0
 configMapGenerator:
 - literals:
  - AZURE_TENANT_ID="${AZURE_TENANT_ID}"
--- a/deploy/azure-wi-webhook.yaml
+++ b/deploy/azure-wi-webhook.yaml
@ -100,8 +100,8 @@ subjects:
 ---
 apiVersion: v1
 data:
-  AZURE_ENVIRONMENT: <replace with Azure Environment Name>
-  AZURE_TENANT_ID: <replace with Azure Tenant ID>
+  AZURE_ENVIRONMENT: ${AZURE_ENVIRONMENT:-AzurePublicCloud}
+  AZURE_TENANT_ID: ${AZURE_TENANT_ID}
 kind: ConfigMap
 metadata:
  labels:
@ -150,7 +150,7 @@ spec:
    spec:
      containers:
      - args:
-        - --arc-cluster=false
+        - --arc-cluster=${ARC_CLUSTER:-false}
        command:
        - /manager
        env:
@ -162,7 +162,7 @@ spec:
        envFrom:
        - configMapRef:
            name: azure-wi-webhook-config
-        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.6.0
+        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.7.0
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
--- a/docs/book/src/installation/azwi.md
+++ b/docs/book/src/installation/azwi.md
@ -12,7 +12,7 @@
 ### `go install`

 ```bash
-go install github.com/Azure/azure-workload-identity/cmd/azwi@v0.6.0
+go install github.com/Azure/azure-workload-identity/cmd/azwi@v0.7.0
 ```

 ### Homebrew (MacOS only)
--- a/docs/book/src/installation/mutating-admission-webhook.md
+++ b/docs/book/src/installation/mutating-admission-webhook.md
@ -71,7 +71,7 @@ The deployment YAML contains the environment variables we defined above and we r
 Install the webhook using the deployment YAML via `kubectl apply -f` and `envsubst`:

 ```bash
-curl -s https://github.com/Azure/azure-workload-identity/releases/download/v0.6.0/azure-wi-webhook.yaml | envsubst | kubectl apply -f -
+curl -s https://github.com/Azure/azure-workload-identity/releases/download/v0.7.0/azure-wi-webhook.yaml | envsubst | kubectl apply -f -
 ```

 <details>
--- a/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml
+++ b/examples/migration/pod-with-proxy-init-and-proxy-sidecar.yaml
@ -8,7 +8,7 @@ spec:
  serviceAccountName: workload-identity-sa
  initContainers:
  - name: init-networking
-    image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.6.0
+    image: mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.7.0
    securityContext:
      capabilities:
        add:
@ -26,6 +26,6 @@ spec:
    ports:
    - containerPort: 80
  - name: proxy
-    image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.6.0
+    image: mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.7.0
    ports:
    - containerPort: 8000
--- a/manifest_staging/charts/workload-identity-webhook/Chart.yaml
+++ b/manifest_staging/charts/workload-identity-webhook/Chart.yaml
@ -2,8 +2,8 @@ apiVersion: v2
 name: workload-identity-webhook
 description: A Helm chart to install the azure-workload-identity webhook
 type: application
-version: 0.6.0
-appVersion: v0.6.0
+version: 0.7.0
+appVersion: v0.7.0
 home: https://github.com/Azure/azure-workload-identity
 sources:
  - https://github.com/Azure/azure-workload-identity
--- a/manifest_staging/charts/workload-identity-webhook/README.md
+++ b/manifest_staging/charts/workload-identity-webhook/README.md
@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
 | replicaCount       | The number of azure-workload-identity replicas to deploy for the webhook | `2`                                                     |
 | image.repository   | Image repository                                                         | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
 | image.pullPolicy   | Image pullPolicy                                                         | `IfNotPresent`                                          |
-| image.release      | The image release tag to use                                             | Current release version: `v0.6.0`                       |
+| image.release      | The image release tag to use                                             | Current release version: `v0.7.0`                       |
 | nodeSelector       | The node selector to use for pod scheduling                              | `kubernetes.io/os: linux`                               |
 | arcCluster         | Specify if it runs on Arc cluster                                        | `false`                                                 |
 | resources          | The resource request/limits for the container image                      | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi        |
--- a/manifest_staging/charts/workload-identity-webhook/values.yaml
+++ b/manifest_staging/charts/workload-identity-webhook/values.yaml
@ -9,7 +9,7 @@ image:
  repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
-  release: v0.6.0
+  release: v0.7.0
 nodeSelector:
  kubernetes.io/os: linux
 arcCluster: false
--- a/manifest_staging/deploy/azure-wi-webhook.yaml
+++ b/manifest_staging/deploy/azure-wi-webhook.yaml
@ -162,7 +162,7 @@ spec:
        envFrom:
        - configMapRef:
            name: azure-wi-webhook-config
-        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.6.0
+        image: mcr.microsoft.com/oss/azure/workload-identity/webhook:v0.7.0
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
--- a/test/e2e/e2e_test.go
+++ b/test/e2e/e2e_test.go
@ -17,8 +17,8 @@ import (
 func init() {
 	flag.BoolVar(&arcCluster, "e2e.arc-cluster", false, "Running on an arc-enabled cluster")
 	flag.StringVar(&tokenExchangeE2EImage, "e2e.token-exchange-image", "aramase/msal-go:v0.6.0", "The image to use for token exchange tests")
-	flag.StringVar(&proxyInitImage, "e2e.proxy-init-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.6.0", "The proxy-init image")
-	flag.StringVar(&proxyImage, "e2e.proxy-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.6.0", "The proxy image")
+	flag.StringVar(&proxyInitImage, "e2e.proxy-init-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy-init:v0.7.0", "The proxy-init image")
+	flag.StringVar(&proxyImage, "e2e.proxy-image", "mcr.microsoft.com/oss/azure/workload-identity/proxy:v0.7.0", "The proxy image")
 	// This is only required because webhook v0.6.0 uses 86400 for default token expiration and we are running upgrade tests.
 	// TODO(aramase): remove this flag after v0.7.0 release
 	flag.DurationVar(&serviceAccountTokenExpiration, "e2e.service-account-token-expiration", time.Duration(webhook.DefaultServiceAccountTokenExpiration)*time.Second, "The service account token expiration")
--- a/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml
+++ b/third_party/open-policy-agent/gatekeeper/helmify/static/Chart.yaml
@ -2,8 +2,8 @@ apiVersion: v2
 name: workload-identity-webhook
 description: A Helm chart to install the azure-workload-identity webhook
 type: application
-version: 0.6.0
-appVersion: v0.6.0
+version: 0.7.0
+appVersion: v0.7.0
 home: https://github.com/Azure/azure-workload-identity
 sources:
  - https://github.com/Azure/azure-workload-identity
--- a/third_party/open-policy-agent/gatekeeper/helmify/static/README.md
+++ b/third_party/open-policy-agent/gatekeeper/helmify/static/README.md
@ -35,7 +35,7 @@ helm upgrade -n azure-workload-identity-system [RELEASE_NAME] azure-workload-ide
 | replicaCount       | The number of azure-workload-identity replicas to deploy for the webhook | `2`                                                     |
 | image.repository   | Image repository                                                         | `mcr.microsoft.com/oss/azure/workload-identity/webhook` |
 | image.pullPolicy   | Image pullPolicy                                                         | `IfNotPresent`                                          |
-| image.release      | The image release tag to use                                             | Current release version: `v0.6.0`                       |
+| image.release      | The image release tag to use                                             | Current release version: `v0.7.0`                       |
 | nodeSelector       | The node selector to use for pod scheduling                              | `kubernetes.io/os: linux`                               |
 | arcCluster         | Specify if it runs on Arc cluster                                        | `false`                                                 |
 | resources          | The resource request/limits for the container image                      | limits: 100m CPU, 30Mi, requests: 100m CPU, 20Mi        |
--- a/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml
+++ b/third_party/open-policy-agent/gatekeeper/helmify/static/values.yaml
@ -9,7 +9,7 @@ image:
  repository: mcr.microsoft.com/oss/azure/workload-identity/webhook
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
-  release: v0.6.0
+  release: v0.7.0
 nodeSelector:
  kubernetes.io/os: linux
 arcCluster: false