chore(release): Camunda Platform Helm Chart 8.2.32, 8.3.17, 9.4.0, 10…

….4.0 (#2231) Co-authored-by: distro-ci[bot] <122795778+distro-ci[bot]@users.noreply.github.com> Co-authored-by: hamza-m-masood <hamzamasood183@gmail.com> Co-authored-by: Ahmed AbouZaid <6760103+aabouzaid@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
camunda · Sep 9, 2024 · d6f10b5 · d6f10b5
1 parent 24765e1
commit d6f10b5
Show file tree

Hide file tree

Showing 80 changed files with 401 additions and 185 deletions.
diff --git a/.github/config/release-please/.release-please-manifest.json b/.github/config/release-please/.release-please-manifest.json
@@ -1,6 +1,6 @@
 {
-  "charts/camunda-platform-8.2": "8.2.31",
-  "charts/camunda-platform-8.3": "8.3.16",
-  "charts/camunda-platform-8.4": "9.3.9",
-  "charts/camunda-platform-latest": "10.3.2"
+  "charts/camunda-platform-8.2": "8.2.32",
+  "charts/camunda-platform-8.3": "8.3.17",
+  "charts/camunda-platform-8.4": "9.4.0",
+  "charts/camunda-platform-latest": "10.4.0"
 }
diff --git a/.github/workflows/chart-release.yaml b/.github/workflows/chart-release.yaml
@@ -5,7 +5,7 @@ on:
   workflow_dispatch:
     inputs:
       trigger:
-        description: 'Trigger release manually'
+        description: "Trigger release manually"
         required: false
         default: false
         type: boolean
@@ -19,7 +19,7 @@ concurrency:
 
 permissions:
   contents: read
-  
+
 jobs:
   release:
     if: ${{ (contains(github.event.*.labels.*.name, 'release') && github.event.pull_request.merged == false) || github.event.inputs.trigger }}
@@ -79,13 +79,13 @@ jobs:
           # Clean up badges from readme to avoid showing them in Artifact Hub.
           sed -ri '/Badge .+/d' charts/camunda-platform-latest/README.md
           mkdir release-packages
-
+  
       #
       # We run Chart Releaser twice as a workaround because it's not possible to control the release order.
       # CR by default will release "camunda-platform-10.x.x" first then "camunda-platform-8.x.x",
       # however, we want the latest version to show as the latest release in GitHub releases.
       #
-
+  
       # Release previous versions.
       - name: Pre-Release - Previous versions
         run: |
@@ -102,7 +102,7 @@ jobs:
         run: |
           mv .cr-release-packages/* release-packages/
           git checkout :/
-
+  
       # Release the latest version.
       - name: Pre-Release - Latest version
         run: |
@@ -119,7 +119,7 @@ jobs:
         run: |
           mv .cr-release-packages/* release-packages/
           git checkout :/
-
+  
       # Sign and upload the signature of the chart package.
       - name: Set Helm chart vars
         run: |
@@ -158,10 +158,12 @@ jobs:
 
   post-release:
     if: ${{ (contains(github.event.*.labels.*.name, 'release') && github.event.pull_request.merged == false) || github.event.inputs.trigger }}
-    needs: release
+    # needs: release
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      pull-requests: write
+      issues: write
     steps:
       - name: Checkout
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
@@ -171,14 +173,16 @@ jobs:
           ref: release-please--branches--main
       - name: Install env dependencies
         uses: asdf-vm/actions/install@05e0d2ed97b598bfce82fd30daf324ae0c4570e6 # v3
-      - name: Simple smoke test
-        uses: nick-fields/retry@7152eba30c6575329ac0576536151aca5a72780e # v3
-        with:
-          max_attempts: 3
-          timeout_minutes: 5
-          retry_wait_seconds: 10
-          command: make release.verify-components-version
+      # - name: Simple smoke test
+      #   uses: nick-fields/retry@7152eba30c6575329ac0576536151aca5a72780e # v3
+      #   with:
+      #     max_attempts: 3
+      #     timeout_minutes: 5
+      #     retry_wait_seconds: 10
+      #     command: make release.verify-components-version
       - name: Label PRs with app and chart version
+        env:
+          GH_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
         run: |
           make release.set-prs-version-label
       - name: Generate version matrix

diff --git a/.github/workflows/chart-update-readme-and-golden-files.yaml b/.github/workflows/chart-update-readme-and-golden-files.yaml
@@ -15,7 +15,8 @@ permissions:
 jobs:
   init:
     # The workflow shouldn't run on renovatebot branches, we have another workflow for renovatebot.
-    if: ${{ !contains(github.head_ref, 'renovate/') }}
+    if: ${{ !contains(github.head_ref, 'renovate/') }} ||
+        ${{ !contains(github.head_ref, 'release-please--') }}
     name: Check conditions
     runs-on: ubuntu-latest
     steps:

diff --git a/.tool-versions b/.tool-versions
@@ -1,4 +1,4 @@
-git-cliff 2.4.0
+git-cliff 2.5.0
 golang 1.23.1
 gomplate v4.1.0
 helm 3.15.4

diff --git a/charts/camunda-platform-8.2/Chart.yaml b/charts/camunda-platform-8.2/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: camunda-platform
-version: 8.2.31
+version: 8.2.32
 appVersion: 8.2.x
 description: |
   Camunda Platform 8 Self-Managed Helm charts.
@@ -71,5 +71,11 @@ annotations:
     - name: Camunda Platform 8 Self-Managed Helm charts
       url: https://github.com/camunda/camunda-platform-helm
   artifacthub.io/containsSecurityUpdates: "false"
-  artifacthub.io/changes: ""
-  camunda.io/helmCLIVersion: 3.15.3
+  artifacthub.io/changes: |
+    - kind: added
+      description: "Add optimize migration init container"
+    - kind: fixed
+      description: "Enable secrets deprecation flag in alpha by default"
+    - kind: fixed
+      description: "Correct ingress nginx annotation to activate proxy buffering by default"
+  camunda.io/helmCLIVersion: 3.15.4
diff --git a/charts/camunda-platform-8.2/RELEASE-NOTES.md b/charts/camunda-platform-8.2/RELEASE-NOTES.md
@@ -1,24 +1,36 @@
 The changelog is automatically generated and it follows [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) format.
+
+## [camunda-platform-8.2.32](https://github.com/camunda/camunda-platform-helm/releases/tag/camunda-platform-8.2.32) (2024-09-09)
+
+### Features
+
+- Add optimize migration init container
+
+### Fixes
+
+- Enable secrets deprecation flag in alpha by default (#2081)
+- Correct ingress nginx annotation to activate proxy buffering by default (#2304)
+
 <!-- generated by git-cliff -->
 ### Release Info
 
 Supported versions:
 
 - Camunda applications: [8.2](https://github.com/camunda/camunda-platform/releases?q=tag%3A8.2&expanded=true)
-- Helm values: [8.2.31](https://artifacthub.io/packages/helm/camunda/camunda-platform/8.2.31#parameters)
-- Helm CLI: [3.15.3](https://github.com/helm/helm/releases/tag/v3.15.3)
+- Helm values: [8.2.32](https://artifacthub.io/packages/helm/camunda/camunda-platform/8.2.32#parameters)
+- Helm CLI: [3.15.4](https://github.com/helm/helm/releases/tag/v3.15.4)
 
 Camunda images:
 
 - docker.io/camunda/connectors-bundle:0.23.2
-- docker.io/camunda/identity:8.2.30
-- docker.io/camunda/operate:8.2.29
-- docker.io/camunda/optimize:8.2.13
-- docker.io/camunda/tasklist:8.2.30
-- docker.io/camunda/zeebe:8.2.30
-- registry.camunda.cloud/web-modeler-ee/modeler-restapi:8.2.17
-- registry.camunda.cloud/web-modeler-ee/modeler-webapp:8.2.17
-- registry.camunda.cloud/web-modeler-ee/modeler-websockets:8.2.17
+- docker.io/camunda/identity:8.2.31
+- docker.io/camunda/operate:8.2.30
+- docker.io/camunda/optimize:8.2.14
+- docker.io/camunda/tasklist:8.2.31
+- docker.io/camunda/zeebe:8.2.31
+- registry.camunda.cloud/web-modeler-ee/modeler-restapi:8.2.19
+- registry.camunda.cloud/web-modeler-ee/modeler-webapp:8.2.19
+- registry.camunda.cloud/web-modeler-ee/modeler-websockets:8.2.19
 
 Non-Camunda images:
 
@@ -32,8 +44,8 @@ Non-Camunda images:
 To verify the integrity of the Helm chart using [Cosign](https://docs.sigstore.dev/signing/quickstart/):
 
 ```shell
-cosign verify-blob camunda-platform-8.2.31.tgz \
-  --bundle camunda-platform-8.2.31.cosign.bundle \
+cosign verify-blob camunda-platform-8.2.32.tgz \
+  --bundle camunda-platform-8.2.32.cosign.bundle \
   --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
-  --certificate-identity "https://github.com/camunda/camunda-platform-helm/.github/workflows/chart-release-chores.yml@refs/pull/2154/merge"
+  --certificate-identity "https://github.com/camunda/camunda-platform-helm/.github/workflows/chart-release-chores.yml@refs/pull/2231/merge"
 ```
diff --git a/charts/camunda-platform-8.2/charts/identity/Chart.yaml b/charts/camunda-platform-8.2/charts/identity/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Identity Helm Chart for Kubernetes
 name: identity
-version: 8.2.31
+version: 8.2.32
 type: application
 icon: https://helm.camunda.io/imgs/camunda.svg
 dependencies:

diff --git a/charts/camunda-platform-8.2/charts/operate/Chart.yaml b/charts/camunda-platform-8.2/charts/operate/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 description: Operate Helm Chart for Kubernetes
 name: operate
-version: 8.2.31
+version: 8.2.32
 type: application
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform-8.2/charts/optimize/Chart.yaml b/charts/camunda-platform-8.2/charts/optimize/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
 description: Optimize Helm Chart for Kubernetes
 name: optimize
-version: 8.2.31
+version: 8.2.32
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform-8.2/charts/tasklist/Chart.yaml b/charts/camunda-platform-8.2/charts/tasklist/Chart.yaml
@@ -1,5 +1,5 @@
 apiVersion: v2
 description: Zeebe TaskList Helm Chart for Kubernetes
 name: tasklist
-version: 8.2.31
+version: 8.2.32
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform-8.2/charts/zeebe-gateway/Chart.yaml b/charts/camunda-platform-8.2/charts/zeebe-gateway/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 description: Zeebe Gateway Helm Chart for Kubernetes
 name: zeebe-gateway
 type: application
-version: 8.2.31
+version: 8.2.32
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform-8.2/charts/zeebe/Chart.yaml b/charts/camunda-platform-8.2/charts/zeebe/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 description: Zeebe Helm Chart for Kubernetes
 name: zeebe
 type: application
-version: 8.2.31
+version: 8.2.32
 icon: https://helm.camunda.io/imgs/camunda.svg
diff --git a/charts/camunda-platform-8.2/test/unit/connectors/golden/deployment.golden.yaml b/charts/camunda-platform-8.2/test/unit/connectors/golden/deployment.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
     app.kubernetes.io/component: connectors
   annotations:
     {}
@@ -34,7 +34,7 @@ spec:
         app.kubernetes.io/instance: camunda-platform-test
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: camunda-platform
-        app.kubernetes.io/version: "8.2.31"
+        app.kubernetes.io/version: "8.2.32"
         app.kubernetes.io/component: connectors
     spec:
       imagePullSecrets:

diff --git a/charts/camunda-platform-8.2/test/unit/connectors/golden/ingress-all-enabled.golden.yaml b/charts/camunda-platform-8.2/test/unit/connectors/golden/ingress-all-enabled.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
     app.kubernetes.io/component: connectors
   annotations: 
     ingress.kubernetes.io/rewrite-target: /

diff --git a/charts/camunda-platform-8.2/test/unit/connectors/golden/ingress.golden.yaml b/charts/camunda-platform-8.2/test/unit/connectors/golden/ingress.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
     app.kubernetes.io/component: connectors
   annotations: 
     ingress.kubernetes.io/rewrite-target: /

diff --git a/charts/camunda-platform-8.2/test/unit/connectors/golden/service.golden.yaml b/charts/camunda-platform-8.2/test/unit/connectors/golden/service.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
     app.kubernetes.io/component: connectors
   annotations:
 spec:

diff --git a/charts/camunda-platform-8.2/test/unit/connectors/golden/serviceaccount.golden.yaml b/charts/camunda-platform-8.2/test/unit/connectors/golden/serviceaccount.golden.yaml
@@ -10,5 +10,5 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
     app.kubernetes.io/component: connectors
diff --git a/charts/camunda-platform-8.2/test/unit/golden/curator-configmap.golden.yaml b/charts/camunda-platform-8.2/test/unit/golden/curator-configmap.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
 data:
   action_file.yml: |-
     ---

diff --git a/charts/camunda-platform-8.2/test/unit/golden/curator-cronjob.golden.yaml b/charts/camunda-platform-8.2/test/unit/golden/curator-cronjob.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
 spec:
   schedule: "0 0 * * *"
   successfulJobsHistoryLimit: 1

diff --git a/charts/camunda-platform-8.2/test/unit/golden/service-monitor.golden.yaml b/charts/camunda-platform-8.2/test/unit/golden/service-monitor.golden.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/instance: camunda-platform-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: camunda-platform
-    app.kubernetes.io/version: "8.2.31"
+    app.kubernetes.io/version: "8.2.32"
     release: metrics
 spec:
   selector:

diff --git a/charts/camunda-platform-8.3/Chart.yaml b/charts/camunda-platform-8.3/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: camunda-platform
-version: 8.3.16
+version: 8.3.17
 appVersion: 8.3.x
 description: |
   Camunda 8 Self-Managed Helm charts.
@@ -56,5 +56,9 @@ annotations:
     - name: Camunda 8 Self-Managed Helm charts
       url: https://github.com/camunda/camunda-platform-helm
   artifacthub.io/containsSecurityUpdates: "false"
-  artifacthub.io/changes: ""
-  camunda.io/helmCLIVersion: 3.15.3
+  artifacthub.io/changes: |
+    - kind: fixed
+      description: "Enable secrets deprecation flag in alpha by default"
+    - kind: fixed
+      description: "Correct ingress nginx annotation to activate proxy buffering by default"
+  camunda.io/helmCLIVersion: 3.15.4
diff --git a/charts/camunda-platform-8.3/RELEASE-NOTES.md b/charts/camunda-platform-8.3/RELEASE-NOTES.md
@@ -1,24 +1,32 @@
 The changelog is automatically generated and it follows [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) format.
+
+## [camunda-platform-8.3.17](https://github.com/camunda/camunda-platform-helm/releases/tag/camunda-platform-8.3.17) (2024-09-09)
+
+### Fixes
+
+- Enable secrets deprecation flag in alpha by default (#2081)
+- Correct ingress nginx annotation to activate proxy buffering by default (#2304)
+
 <!-- generated by git-cliff -->
 ### Release Info
 
 Supported versions:
 
 - Camunda applications: [8.3](https://github.com/camunda/camunda-platform/releases?q=tag%3A8.3&expanded=true)
-- Helm values: [8.3.16](https://artifacthub.io/packages/helm/camunda/camunda-platform/8.3.16#parameters)
-- Helm CLI: [3.15.3](https://github.com/helm/helm/releases/tag/v3.15.3)
+- Helm values: [8.3.17](https://artifacthub.io/packages/helm/camunda/camunda-platform/8.3.17#parameters)
+- Helm CLI: [3.15.4](https://github.com/helm/helm/releases/tag/v3.15.4)
 
 Camunda images:
 
-- docker.io/camunda/connectors-bundle:8.3.15
+- docker.io/camunda/connectors-bundle:8.3.16
 - docker.io/camunda/identity:8.3.15
-- docker.io/camunda/operate:8.3.14
-- docker.io/camunda/optimize:8.3.12
-- docker.io/camunda/tasklist:8.3.15
-- docker.io/camunda/zeebe:8.3.14
-- registry.camunda.cloud/web-modeler-ee/modeler-restapi:8.3.10
-- registry.camunda.cloud/web-modeler-ee/modeler-webapp:8.3.10
-- registry.camunda.cloud/web-modeler-ee/modeler-websockets:8.3.10
+- docker.io/camunda/operate:8.3.15
+- docker.io/camunda/optimize:8.3.13
+- docker.io/camunda/tasklist:8.3.16
+- docker.io/camunda/zeebe:8.3.15
+- registry.camunda.cloud/web-modeler-ee/modeler-restapi:8.3.11
+- registry.camunda.cloud/web-modeler-ee/modeler-webapp:8.3.11
+- registry.camunda.cloud/web-modeler-ee/modeler-websockets:8.3.11
 
 Non-Camunda images:
 
@@ -33,8 +41,8 @@ Non-Camunda images:
 To verify the integrity of the Helm chart using [Cosign](https://docs.sigstore.dev/signing/quickstart/):
 
 ```shell
-cosign verify-blob camunda-platform-8.3.16.tgz \
-  --bundle camunda-platform-8.3.16.cosign.bundle \
+cosign verify-blob camunda-platform-8.3.17.tgz \
+  --bundle camunda-platform-8.3.17.cosign.bundle \
   --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
-  --certificate-identity "https://github.com/camunda/camunda-platform-helm/.github/workflows/chart-release-chores.yml@refs/pull/2154/merge"
+  --certificate-identity "https://github.com/camunda/camunda-platform-helm/.github/workflows/chart-release-chores.yml@refs/pull/2231/merge"
 ```