onprem: 2.6.0 (#15)

codefresh/.ci/runtime-images.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+set -eux
+MYDIR=$(dirname $0)
+REPO_ROOT="${MYDIR}/../.."
+
+echo $REPO_ROOT
+
+echo "Update value with system/root runtime images"
+docker run \
+    -v "$REPO_ROOT:/codefresh" \
+    -v $HOME/.cfconfig:/.cfconfig \
+    -u $(id -u) \
+    --rm \
+    quay.io/codefresh/codefresh-shell:0.0.20 \
+    /bin/bash /codefresh/scripts/update_re_images.sh

codefresh/.ci/values/defaults-hpa.yaml

@@ -1,105 +1,8 @@
 seed-e2e:
   enabled: true
 
-# kinda external secrets
-secrets:
-  ext-mongo:
-    enabled: true
-    stringData:
-      mongodb-host: cf-mongodb:27017
-      mongodb-password: mTiXcU2wafr9
-      mongodb-user: cfuser
-      mongodb-root-user: root
-      mongodb-root-password: XT9nmM8dZD
-  ext-postgres:
-    enabled: true
-    stringData:
-      postgres-hostname: cf-postgresql
-      postgres-password: eC9arYka4ZbH
-      postgres-user: postgres
-  ext-redis:
-    enabled: true
-    stringData:
-      redis-url: cf-redis-master
-      redis-password: hoC9szf7NtrU
-  ext-rabbitmq:
-    enabled: true
-    stringData:
-      rabbitmq-hostname: cf-rabbitmq:5672
-      rabbitmq-password: cVz9ZdJKYm7u
-      rabbitmq-username: user
-  ext-firebase:
-    enabled: true
-    stringData:
-      firebase-url: "" # placeholder for ${FIRBASE_URL}
-      firebase-secret: ""  # placeholder for ${FIREBASE_SECRET}
-  e2e-mongo-uri:
-    enabled: true
-    stringData:
-      mongo-uri: mongodb://cfuser:mTiXcU2wafr9@cf-mongodb:27017/codefresh
-
-seed:
-  mongoSeedJob:
-    mongodbRootUserSecretKeyRef:
-      name: cf-codefresh-ext-mongo
-      key: mongodb-root-user
-    mongodbRootPasswordSecretKeyRef:
-      name: cf-codefresh-ext-mongo
-      key: mongodb-root-password
-
-  postgresSeedJob:
-    postgresUserSecretKeyRef:
-      name: cf-codefresh-ext-postgres
-      key: postgres-user
-    postgresPasswordSecretKeyRef:
-      name: cf-codefresh-ext-postgres
-      key: postgres-password
-
 global:
   appUrl: "" # placeholder
-  firebaseUrlSecretKeyRef:
-    name: cf-codefresh-ext-firebase
-    key: firebase-url
-  firebaseSecretSecretKeyRef:
-    name: cf-codefresh-ext-firebase
-    key: firebase-secret
-
-  mongodbUserSecretKeyRef:
-    name: cf-codefresh-ext-mongo
-    key: mongodb-user
-  mongodbPasswordSecretKeyRef:
-    name: cf-codefresh-ext-mongo
-    key: mongodb-password
-  mongodbHostSecretKeyRef:
-    name: cf-codefresh-ext-mongo
-    key: mongodb-host
-
-  postgresHostnameSecretKeyRef:
-    name: cf-codefresh-ext-postgres
-    key: postgres-hostname
-  postgresPasswordSecretKeyRef:
-    name: cf-codefresh-ext-postgres
-    key: postgres-password
-  postgresUserSecretKeyRef:
-    name: cf-codefresh-ext-postgres
-    key: postgres-user
-
-  rabbitmqHostnameSecretKeyRef:
-    name: cf-codefresh-ext-rabbitmq
-    key: rabbitmq-hostname
-  rabbitmqPasswordSecretKeyRef:
-    name: cf-codefresh-ext-rabbitmq
-    key: rabbitmq-password
-  rabbitmqUsernameSecretKeyRef:
-    name: cf-codefresh-ext-rabbitmq
-    key: rabbitmq-username
-
-  redisPasswordSecretKeyRef:
-    name: cf-codefresh-ext-redis
-    key: redis-password
-  redisUrlSecretKeyRef:
-    name: cf-codefresh-ext-redis
-    key: redis-url
 
 cfapi:
   rbac:

codefresh/.ci/values/external-secrets.yaml

@@ -0,0 +1,98 @@
+# values to emulate external secrets
+secrets:
+  ext-mongo:
+    enabled: true
+    stringData:
+      mongodb-host: cf-mongodb:27017
+      mongodb-password: mTiXcU2wafr9
+      mongodb-user: cfuser
+      mongodb-root-user: root
+      mongodb-root-password: XT9nmM8dZD
+  ext-postgres:
+    enabled: true
+    stringData:
+      postgres-hostname: cf-postgresql
+      postgres-password: eC9arYka4ZbH
+      postgres-user: postgres
+  ext-redis:
+    enabled: true
+    stringData:
+      redis-url: cf-redis-master
+      redis-password: hoC9szf7NtrU
+  ext-rabbitmq:
+    enabled: true
+    stringData:
+      rabbitmq-hostname: cf-rabbitmq:5672
+      rabbitmq-password: cVz9ZdJKYm7u
+      rabbitmq-username: user
+  ext-firebase:
+    enabled: true
+    stringData:
+      firebase-url: "" # placeholder for ${FIRBASE_URL}
+      firebase-secret: ""  # placeholder for ${FIREBASE_SECRET}
+  e2e-mongo-uri:
+    enabled: true
+    stringData:
+      mongo-uri: mongodb://cfuser:mTiXcU2wafr9@cf-mongodb:27017/codefresh
+
+seed:
+  mongoSeedJob:
+    mongodbRootUserSecretKeyRef:
+      name: cf-codefresh-ext-mongo
+      key: mongodb-root-user
+    mongodbRootPasswordSecretKeyRef:
+      name: cf-codefresh-ext-mongo
+      key: mongodb-root-password
+
+  postgresSeedJob:
+    postgresUserSecretKeyRef:
+      name: cf-codefresh-ext-postgres
+      key: postgres-user
+    postgresPasswordSecretKeyRef:
+      name: cf-codefresh-ext-postgres
+      key: postgres-password
+
+global:
+  firebaseUrlSecretKeyRef:
+    name: cf-codefresh-ext-firebase
+    key: firebase-url
+  firebaseSecretSecretKeyRef:
+    name: cf-codefresh-ext-firebase
+    key: firebase-secret
+
+  mongodbUserSecretKeyRef:
+    name: cf-codefresh-ext-mongo
+    key: mongodb-user
+  mongodbPasswordSecretKeyRef:
+    name: cf-codefresh-ext-mongo
+    key: mongodb-password
+  mongodbHostSecretKeyRef:
+    name: cf-codefresh-ext-mongo
+    key: mongodb-host
+
+  postgresHostnameSecretKeyRef:
+    name: cf-codefresh-ext-postgres
+    key: postgres-hostname
+  postgresPasswordSecretKeyRef:
+    name: cf-codefresh-ext-postgres
+    key: postgres-password
+  postgresUserSecretKeyRef:
+    name: cf-codefresh-ext-postgres
+    key: postgres-user
+
+  rabbitmqHostnameSecretKeyRef:
+    name: cf-codefresh-ext-rabbitmq
+    key: rabbitmq-hostname
+  rabbitmqPasswordSecretKeyRef:
+    name: cf-codefresh-ext-rabbitmq
+    key: rabbitmq-password
+  rabbitmqUsernameSecretKeyRef:
+    name: cf-codefresh-ext-rabbitmq
+    key: rabbitmq-username
+
+  redisPasswordSecretKeyRef:
+    name: cf-codefresh-ext-redis
+    key: redis-password
+  redisUrlSecretKeyRef:
+    name: cf-codefresh-ext-redis
+    key: redis-url

codefresh/.ci/values/mtls-mongodb-redis.yaml

@@ -137,7 +137,6 @@ extraResources:
   kind: Service
   metadata:
     name: cf-redis
-    namespace: codefresh-mtls
   spec:
     ports:
     - name: tcp-redis

codefresh/.ci/values/values-install-only.yaml

@@ -0,0 +1,11 @@
+# -- checking postgresql password with special characters
+postgresql:
+  auth:
+    postgresPassword: "()e%C9ar$Yka4Zb!H"
+
+global:
+  postgresPassword: "()e%C9ar$Yka4Zb!H"
+
+seed:
+  postgresSeedJob:
+    postgresPassword: "()e%C9ar$Yka4Zb!H"

codefresh/.ci/values/values-openshift.yaml

@@ -0,0 +1,4 @@
+# values provided for openshift cluster
+cfapi:
+  podSecurityContext:
+    runAsUser: 1000620000

codefresh/.ci/values/values-upgrade-only.yaml

@@ -0,0 +1,4 @@
+# -- test change passwords on upgrade
+global:
+  mongodbPassword: 9rfa2UcXiTm
+