diff --git a/components/pipeline-service/production/kflux-ocp-p01/deploy.yaml b/components/pipeline-service/production/kflux-ocp-p01/deploy.yaml index 77b2a421faf..d6986ad4373 100644 --- a/components/pipeline-service/production/kflux-ocp-p01/deploy.yaml +++ b/components/pipeline-service/production/kflux-ocp-p01/deploy.yaml @@ -17,16 +17,6 @@ metadata: --- apiVersion: v1 kind: Namespace -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - argocd.argoproj.io/sync-wave: "-1" - labels: - argocd.argoproj.io/managed-by: openshift-gitops - name: tekton-logging ---- -apiVersion: v1 -kind: Namespace metadata: annotations: argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true @@ -489,18 +479,6 @@ rules: - pods/log verbs: - get -- apiGroups: - - "" - resources: - - events - verbs: - - get - - list - - create - - update - - delete - - patch - - watch - apiGroups: - tekton.dev resources: @@ -985,7 +963,7 @@ data: LOGS_API=false LOGS_TYPE=File LOGS_BUFFER_SIZE=5242880 - LOGS_PATH=//logs + LOGS_PATH=/logs S3_BUCKET_NAME= S3_ENDPOINT= S3_HOSTNAME_IMMUTABLE=false @@ -997,18 +975,6 @@ data: STORAGE_EMULATOR_HOST= PROFILING=true PROFILING_PORT=6060 - CONVERTER_ENABLE=false - CONVERTER_DB_LIMIT=50 - LOGGING_PLUGIN_PROXY_PATH=/api/logs/v1/application - LOGGING_PLUGIN_TOKEN_PATH=/var/run/secrets/kubernetes.io/serviceaccount/token - LOGGING_PLUGIN_NAMESPACE_KEY=kubernetes_namespace_name - LOGGING_PLUGIN_STATIC_LABELS='log_type=application' - LOGGING_PLUGIN_CA_CERT= - LOGGING_PLUGIN_QUERY_LIMIT=1700 - LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE= - LOGGING_PLUGIN_FORWARDER_DELAY_DURATION=10 - LOGGING_PLUGIN_API_URL=s3://tekton-logs - LOGGING_PLUGIN_QUERY_PARAMS='v1alpha2LogType=true&use_path_style=true' kind: ConfigMap metadata: annotations: @@ -1150,21 +1116,6 @@ metadata: namespace: tekton-results --- apiVersion: v1 -data: - maxRetention: "30" - runAt: 5 5 * * 0 -kind: ConfigMap -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - labels: - app.kubernetes.io/name: tekton-results-retention-policy - app.kubernetes.io/part-of: tekton-results - app.kubernetes.io/version: devel - name: tekton-results-config-results-retention-policy - namespace: tekton-results ---- -apiVersion: v1 data: version: devel kind: ConfigMap @@ -1385,20 +1336,20 @@ spec: - name: LOGS_API value: "true" - name: LOGS_TYPE - value: blob + value: S3 - name: S3_HOSTNAME_IMMUTABLE value: "true" - - name: AWS_ACCESS_KEY_ID + - name: S3_ACCESS_KEY_ID valueFrom: secretKeyRef: key: aws_access_key_id name: tekton-results-s3 - - name: AWS_SECRET_ACCESS_KEY + - name: S3_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: aws_secret_access_key name: tekton-results-s3 - - name: AWS_REGION + - name: S3_REGION valueFrom: secretKeyRef: key: aws_region @@ -1408,16 +1359,11 @@ spec: secretKeyRef: key: bucket name: tekton-results-s3 - - name: AWS_ENDPOINT_URL + - name: S3_ENDPOINT valueFrom: secretKeyRef: key: endpoint name: tekton-results-s3 - - name: LOGGING_PLUGIN_API_URL - valueFrom: - secretKeyRef: - key: s3_url - name: tekton-results-s3 - name: DB_USER valueFrom: secretKeyRef: @@ -1438,7 +1384,7 @@ spec: secretKeyRef: key: db.name name: tekton-results-database - image: quay.io/konflux-ci/tekton-results-api:cc0e0ecfe4cd88c9e7537e23e4a2b159e397d59a + image: quay.io/redhat-appstudio/tekton-results-api:ed360eccc021ad5eedf8ea9c0732912ef602b15a livenessProbe: httpGet: path: /healthz @@ -1502,83 +1448,6 @@ spec: --- apiVersion: apps/v1 kind: Deployment -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - labels: - app.kubernetes.io/name: tekton-results-retention-policy-agent - app.kubernetes.io/part-of: tekton-results - app.kubernetes.io/version: devel - name: tekton-results-retention-policy-agent - namespace: tekton-results -spec: - replicas: 0 - selector: - matchLabels: - app.kubernetes.io/name: tekton-results-retention-policy-agent - template: - metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - cluster-autoscaler.kubernetes.io/safe-to-evict: "false" - labels: - app.kubernetes.io/name: tekton-results-retention-policy-agent - app.kubernetes.io/version: devel - spec: - containers: - - env: - - name: SYSTEM_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: CONFIG_LOGGING_NAME - value: tekton-results-config-logging - - name: DB_USER - valueFrom: - secretKeyRef: - key: POSTGRES_USER - name: tekton-results-postgres - - name: DB_PASSWORD - valueFrom: - secretKeyRef: - key: POSTGRES_PASSWORD - name: tekton-results-postgres - image: quay.io/konflux-ci/tekton-results-retention-policy-agent:cc0e0ecfe4cd88c9e7537e23e4a2b159e397d59a - name: retention-policy-agent - resources: - limits: - cpu: 500m - memory: 128Mi - requests: - cpu: 5m - memory: 64Mi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /etc/tekton/results - name: config - readOnly: true - - mountPath: /etc/tls - name: tls - readOnly: true - serviceAccountName: tekton-results-watcher - volumes: - - configMap: - name: tekton-results-api-config - name: config - - name: tls - secret: - secretName: tekton-results-tls ---- -apiVersion: apps/v1 -kind: Deployment metadata: annotations: argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true @@ -1657,7 +1526,6 @@ spec: - -completed_run_grace_period - 10m - -threadiness=32 - - -logs_api=true env: - name: SYSTEM_NAMESPACE valueFrom: @@ -1675,7 +1543,7 @@ spec: value: tekton-results-api-service.tekton-pipelines.svc.cluster.local:8080 - name: AUTH_MODE value: token - image: quay.io/konflux-ci/tekton-results-watcher:cc0e0ecfe4cd88c9e7537e23e4a2b159e397d59a + image: quay.io/redhat-appstudio/tekton-results-watcher:bae7851ff584423503af324200f52cd28ca99116 name: watcher ports: - containerPort: 9090 @@ -1708,150 +1576,6 @@ spec: secret: secretName: tekton-results-tls --- -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - name: vectors-tekton-logs-collector - namespace: openshift-gitops -spec: - destination: - namespace: tekton-logging - server: https://kubernetes.default.svc - project: default - source: - helm: - valueFiles: - - values.yaml - values: |- - role: Agent - customConfig: - data_dir: /vector-data-dir - api: - enabled: true - address: 127.0.0.1:8686 - playground: false - sources: - kubernetes_logs: - type: kubernetes_logs - rotate_wait_secs: 5 - glob_minimum_cooldown_ms: 15000 - auto_partial_merge: true - extra_label_selector: "app.kubernetes.io/managed-by in (tekton-pipelines,pipelinesascode.tekton.dev)" - internal_metrics: - type: internal_metrics - transforms: - remap_app_logs: - type: remap - inputs: [kubernetes_logs] - source: |- - .log_type = "application" - .kubernetes_namespace_name = .kubernetes.pod_namespace - if exists(.kubernetes.pod_labels."tekton.dev/taskRunUID") { - .taskRunUID = del(.kubernetes.pod_labels."tekton.dev/taskRunUID") - } else { - .taskRunUID = "none" - } - if exists(.kubernetes.pod_labels."tekton.dev/pipelineRunUID") { - .pipelineRunUID = del(.kubernetes.pod_labels."tekton.dev/pipelineRunUID") - .result = .pipelineRunUID - } else { - .result = .taskRunUID - } - if exists(.kubernetes.pod_labels."tekton.dev/task") { - .task = del(.kubernetes.pod_labels."tekton.dev/task") - } else { - .task = "none" - } - if exists(.kubernetes.pod_namespace) { - .namespace = del(.kubernetes.pod_namespace) - } else { - .namespace = "unlabeled" - } - .pod = .kubernetes.pod_name - .container = .kubernetes.container_name - sinks: - aws_s3: - type: "aws_s3" - bucket: ${BUCKET} - buffer: - type: "disk" - max_size: 1073741824 - inputs: ["remap_app_logs"] - compression: "none" - endpoint: ${ENDPOINT} - encoding: - codec: "text" - key_prefix: "/logs/{{ `{{ .namespace }}` }}/{{`{{ .result }}`}}/{{`{{ .taskRunUID }}`}}/{{`{{ .container }}`}}" - filename_time_format: "" - filename_append_uuid: false - env: - - name: AWS_ACCESS_KEY_ID - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: aws_access_key_id - - name: AWS_SECRET_ACCESS_KEY - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: aws_secret_access_key - - name: AWS_DEFAULT_REGION - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: aws_region - - name: BUCKET - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: bucket - - name: ENDPOINT - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: endpoint - tolerations: - - effect: NoSchedule - key: konflux-ci.dev/workload - operator: Equal - value: konflux-tenants - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - CHOWN - - DAC_OVERRIDE - - FOWNER - - FSETID - - KILL - - NET_BIND_SERVICE - - SETGID - - SETPCAP - - SETUID - readOnlyRootFilesystem: true - seLinuxOptions: - type: spc_t - seccompProfile: - type: RuntimeDefault - path: charts/vector - repoURL: https://github.com/vectordotdev/helm-charts - targetRevision: 08506fdc01c7cc3fcf2dd83102add7b44980ee23 - syncPolicy: - automated: - prune: true - selfHeal: true - retry: - backoff: - duration: 10s - factor: 2 - maxDuration: 3m - limit: -1 - syncOptions: - - CreateNamespace=false - - Validate=false ---- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: @@ -1925,35 +1649,6 @@ spec: --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - argocd.argoproj.io/sync-wave: "-1" - name: tekton-results-s3 - namespace: tekton-logging -spec: - dataFrom: - - extract: - key: integrations-output/terraform-resources/appsrep09ue1/kflux-ocp-p01/kflux-ocp-p01-plnsvc-s3 - refreshInterval: 1h - secretStoreRef: - kind: ClusterSecretStore - name: appsre-vault - target: - creationPolicy: Owner - deletionPolicy: Delete - name: tekton-results-s3 - template: - data: - aws_access_key_id: '{{ .aws_access_key_id }}' - aws_region: '{{ .aws_region }}' - aws_secret_access_key: '{{ .aws_secret_access_key }}' - bucket: '{{ .bucket }}' - endpoint: https://{{ .endpoint }} - s3_url: s3://{{ .bucket }} ---- -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret metadata: annotations: argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true @@ -2409,57 +2104,6 @@ spec: weight: 100 wildcardPolicy: None --- -allowHostDirVolumePlugin: true -allowHostIPC: false -allowHostNetwork: false -allowHostPID: false -allowHostPorts: false -allowPrivilegeEscalation: false -allowPrivilegedContainer: false -allowedCapabilities: null -apiVersion: security.openshift.io/v1 -defaultAddCapabilities: null -defaultAllowPrivilegeEscalation: false -forbiddenSysctls: -- '*' -fsGroup: - type: RunAsAny -groups: [] -kind: SecurityContextConstraints -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - name: logging-scc - namespace: tekton-logging -priority: null -readOnlyRootFilesystem: true -requiredDropCapabilities: -- CHOWN -- DAC_OVERRIDE -- FSETID -- FOWNER -- SETGID -- SETUID -- SETPCAP -- NET_BIND_SERVICE -- KILL -runAsUser: - type: RunAsAny -seLinuxContext: - type: RunAsAny -seccompProfiles: -- runtime/default -supplementalGroups: - type: RunAsAny -users: -- system:serviceaccount:tekton-logging:vectors-tekton-logs-collector -volumes: -- configMap -- emptyDir -- hostPath -- projected -- secret ---- allowHostDirVolumePlugin: false allowHostIPC: false allowHostNetwork: false diff --git a/components/pipeline-service/production/stone-prod-p02/deploy.yaml b/components/pipeline-service/production/stone-prod-p02/deploy.yaml index 8867e292e86..b1ec2da1320 100644 --- a/components/pipeline-service/production/stone-prod-p02/deploy.yaml +++ b/components/pipeline-service/production/stone-prod-p02/deploy.yaml @@ -17,16 +17,6 @@ metadata: --- apiVersion: v1 kind: Namespace -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - argocd.argoproj.io/sync-wave: "-1" - labels: - argocd.argoproj.io/managed-by: openshift-gitops - name: tekton-logging ---- -apiVersion: v1 -kind: Namespace metadata: annotations: argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true @@ -489,18 +479,6 @@ rules: - pods/log verbs: - get -- apiGroups: - - "" - resources: - - events - verbs: - - get - - list - - create - - update - - delete - - patch - - watch - apiGroups: - tekton.dev resources: @@ -985,7 +963,7 @@ data: LOGS_API=false LOGS_TYPE=File LOGS_BUFFER_SIZE=5242880 - LOGS_PATH=//logs + LOGS_PATH=/logs S3_BUCKET_NAME= S3_ENDPOINT= S3_HOSTNAME_IMMUTABLE=false @@ -997,18 +975,6 @@ data: STORAGE_EMULATOR_HOST= PROFILING=true PROFILING_PORT=6060 - CONVERTER_ENABLE=false - CONVERTER_DB_LIMIT=50 - LOGGING_PLUGIN_PROXY_PATH=/api/logs/v1/application - LOGGING_PLUGIN_TOKEN_PATH=/var/run/secrets/kubernetes.io/serviceaccount/token - LOGGING_PLUGIN_NAMESPACE_KEY=kubernetes_namespace_name - LOGGING_PLUGIN_STATIC_LABELS='log_type=application' - LOGGING_PLUGIN_CA_CERT= - LOGGING_PLUGIN_QUERY_LIMIT=1700 - LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE= - LOGGING_PLUGIN_FORWARDER_DELAY_DURATION=10 - LOGGING_PLUGIN_API_URL=s3://tekton-logs - LOGGING_PLUGIN_QUERY_PARAMS='v1alpha2LogType=true&use_path_style=true' kind: ConfigMap metadata: annotations: @@ -1150,21 +1116,6 @@ metadata: namespace: tekton-results --- apiVersion: v1 -data: - maxRetention: "30" - runAt: 5 5 * * 0 -kind: ConfigMap -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - labels: - app.kubernetes.io/name: tekton-results-retention-policy - app.kubernetes.io/part-of: tekton-results - app.kubernetes.io/version: devel - name: tekton-results-config-results-retention-policy - namespace: tekton-results ---- -apiVersion: v1 data: version: devel kind: ConfigMap @@ -1385,20 +1336,20 @@ spec: - name: LOGS_API value: "true" - name: LOGS_TYPE - value: blob + value: S3 - name: S3_HOSTNAME_IMMUTABLE value: "true" - - name: AWS_ACCESS_KEY_ID + - name: S3_ACCESS_KEY_ID valueFrom: secretKeyRef: key: aws_access_key_id name: tekton-results-s3 - - name: AWS_SECRET_ACCESS_KEY + - name: S3_SECRET_ACCESS_KEY valueFrom: secretKeyRef: key: aws_secret_access_key name: tekton-results-s3 - - name: AWS_REGION + - name: S3_REGION valueFrom: secretKeyRef: key: aws_region @@ -1408,16 +1359,11 @@ spec: secretKeyRef: key: bucket name: tekton-results-s3 - - name: AWS_ENDPOINT_URL + - name: S3_ENDPOINT valueFrom: secretKeyRef: key: endpoint name: tekton-results-s3 - - name: LOGGING_PLUGIN_API_URL - valueFrom: - secretKeyRef: - key: s3_url - name: tekton-results-s3 - name: DB_USER valueFrom: secretKeyRef: @@ -1438,7 +1384,7 @@ spec: secretKeyRef: key: db.name name: tekton-results-database - image: quay.io/konflux-ci/tekton-results-api:cc0e0ecfe4cd88c9e7537e23e4a2b159e397d59a + image: quay.io/redhat-appstudio/tekton-results-api:ed360eccc021ad5eedf8ea9c0732912ef602b15a livenessProbe: httpGet: path: /healthz @@ -1502,83 +1448,6 @@ spec: --- apiVersion: apps/v1 kind: Deployment -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - labels: - app.kubernetes.io/name: tekton-results-retention-policy-agent - app.kubernetes.io/part-of: tekton-results - app.kubernetes.io/version: devel - name: tekton-results-retention-policy-agent - namespace: tekton-results -spec: - replicas: 0 - selector: - matchLabels: - app.kubernetes.io/name: tekton-results-retention-policy-agent - template: - metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - cluster-autoscaler.kubernetes.io/safe-to-evict: "false" - labels: - app.kubernetes.io/name: tekton-results-retention-policy-agent - app.kubernetes.io/version: devel - spec: - containers: - - env: - - name: SYSTEM_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: CONFIG_LOGGING_NAME - value: tekton-results-config-logging - - name: DB_USER - valueFrom: - secretKeyRef: - key: POSTGRES_USER - name: tekton-results-postgres - - name: DB_PASSWORD - valueFrom: - secretKeyRef: - key: POSTGRES_PASSWORD - name: tekton-results-postgres - image: quay.io/konflux-ci/tekton-results-retention-policy-agent:cc0e0ecfe4cd88c9e7537e23e4a2b159e397d59a - name: retention-policy-agent - resources: - limits: - cpu: 500m - memory: 128Mi - requests: - cpu: 5m - memory: 64Mi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - volumeMounts: - - mountPath: /etc/tekton/results - name: config - readOnly: true - - mountPath: /etc/tls - name: tls - readOnly: true - serviceAccountName: tekton-results-watcher - volumes: - - configMap: - name: tekton-results-api-config - name: config - - name: tls - secret: - secretName: tekton-results-tls ---- -apiVersion: apps/v1 -kind: Deployment metadata: annotations: argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true @@ -1657,7 +1526,6 @@ spec: - -completed_run_grace_period - 10m - -threadiness=32 - - -logs_api=true env: - name: SYSTEM_NAMESPACE valueFrom: @@ -1675,7 +1543,7 @@ spec: value: tekton-results-api-service.tekton-pipelines.svc.cluster.local:8080 - name: AUTH_MODE value: token - image: quay.io/konflux-ci/tekton-results-watcher:cc0e0ecfe4cd88c9e7537e23e4a2b159e397d59a + image: quay.io/redhat-appstudio/tekton-results-watcher:bae7851ff584423503af324200f52cd28ca99116 name: watcher ports: - containerPort: 9090 @@ -1708,150 +1576,6 @@ spec: secret: secretName: tekton-results-tls --- -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - name: vectors-tekton-logs-collector - namespace: openshift-gitops -spec: - destination: - namespace: tekton-logging - server: https://kubernetes.default.svc - project: default - source: - helm: - valueFiles: - - values.yaml - values: |- - role: Agent - customConfig: - data_dir: /vector-data-dir - api: - enabled: true - address: 127.0.0.1:8686 - playground: false - sources: - kubernetes_logs: - type: kubernetes_logs - rotate_wait_secs: 5 - glob_minimum_cooldown_ms: 15000 - auto_partial_merge: true - extra_label_selector: "app.kubernetes.io/managed-by in (tekton-pipelines,pipelinesascode.tekton.dev)" - internal_metrics: - type: internal_metrics - transforms: - remap_app_logs: - type: remap - inputs: [kubernetes_logs] - source: |- - .log_type = "application" - .kubernetes_namespace_name = .kubernetes.pod_namespace - if exists(.kubernetes.pod_labels."tekton.dev/taskRunUID") { - .taskRunUID = del(.kubernetes.pod_labels."tekton.dev/taskRunUID") - } else { - .taskRunUID = "none" - } - if exists(.kubernetes.pod_labels."tekton.dev/pipelineRunUID") { - .pipelineRunUID = del(.kubernetes.pod_labels."tekton.dev/pipelineRunUID") - .result = .pipelineRunUID - } else { - .result = .taskRunUID - } - if exists(.kubernetes.pod_labels."tekton.dev/task") { - .task = del(.kubernetes.pod_labels."tekton.dev/task") - } else { - .task = "none" - } - if exists(.kubernetes.pod_namespace) { - .namespace = del(.kubernetes.pod_namespace) - } else { - .namespace = "unlabeled" - } - .pod = .kubernetes.pod_name - .container = .kubernetes.container_name - sinks: - aws_s3: - type: "aws_s3" - bucket: ${BUCKET} - buffer: - type: "disk" - max_size: 1073741824 - inputs: ["remap_app_logs"] - compression: "none" - endpoint: ${ENDPOINT} - encoding: - codec: "text" - key_prefix: "/logs/{{ `{{ .namespace }}` }}/{{`{{ .result }}`}}/{{`{{ .taskRunUID }}`}}/{{`{{ .container }}`}}" - filename_time_format: "" - filename_append_uuid: false - env: - - name: AWS_ACCESS_KEY_ID - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: aws_access_key_id - - name: AWS_SECRET_ACCESS_KEY - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: aws_secret_access_key - - name: AWS_DEFAULT_REGION - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: aws_region - - name: BUCKET - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: bucket - - name: ENDPOINT - valueFrom: - secretKeyRef: - name: tekton-results-s3 - key: endpoint - tolerations: - - effect: NoSchedule - key: konflux-ci.dev/workload - operator: Equal - value: konflux-tenants - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - CHOWN - - DAC_OVERRIDE - - FOWNER - - FSETID - - KILL - - NET_BIND_SERVICE - - SETGID - - SETPCAP - - SETUID - readOnlyRootFilesystem: true - seLinuxOptions: - type: spc_t - seccompProfile: - type: RuntimeDefault - path: charts/vector - repoURL: https://github.com/vectordotdev/helm-charts - targetRevision: 08506fdc01c7cc3fcf2dd83102add7b44980ee23 - syncPolicy: - automated: - prune: true - selfHeal: true - retry: - backoff: - duration: 10s - factor: 2 - maxDuration: 3m - limit: -1 - syncOptions: - - CreateNamespace=false - - Validate=false ---- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: @@ -1925,35 +1649,6 @@ spec: --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - argocd.argoproj.io/sync-wave: "-1" - name: tekton-results-s3 - namespace: tekton-logging -spec: - dataFrom: - - extract: - key: integrations-output/terraform-resources/appsrep09ue1/konflux-internal-prod/stone-prod-p02-plnsvc-s3 - refreshInterval: 1h - secretStoreRef: - kind: ClusterSecretStore - name: appsre-vault - target: - creationPolicy: Owner - deletionPolicy: Delete - name: tekton-results-s3 - template: - data: - aws_access_key_id: '{{ .aws_access_key_id }}' - aws_region: '{{ .aws_region }}' - aws_secret_access_key: '{{ .aws_secret_access_key }}' - bucket: '{{ .bucket }}' - endpoint: https://{{ .endpoint }} - s3_url: s3://{{ .bucket }} ---- -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret metadata: annotations: argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true @@ -2410,57 +2105,6 @@ spec: weight: 100 wildcardPolicy: None --- -allowHostDirVolumePlugin: true -allowHostIPC: false -allowHostNetwork: false -allowHostPID: false -allowHostPorts: false -allowPrivilegeEscalation: false -allowPrivilegedContainer: false -allowedCapabilities: null -apiVersion: security.openshift.io/v1 -defaultAddCapabilities: null -defaultAllowPrivilegeEscalation: false -forbiddenSysctls: -- '*' -fsGroup: - type: RunAsAny -groups: [] -kind: SecurityContextConstraints -metadata: - annotations: - argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true - name: logging-scc - namespace: tekton-logging -priority: null -readOnlyRootFilesystem: true -requiredDropCapabilities: -- CHOWN -- DAC_OVERRIDE -- FSETID -- FOWNER -- SETGID -- SETUID -- SETPCAP -- NET_BIND_SERVICE -- KILL -runAsUser: - type: RunAsAny -seLinuxContext: - type: RunAsAny -seccompProfiles: -- runtime/default -supplementalGroups: - type: RunAsAny -users: -- system:serviceaccount:tekton-logging:vectors-tekton-logs-collector -volumes: -- configMap -- emptyDir -- hostPath -- projected -- secret ---- allowHostDirVolumePlugin: false allowHostIPC: false allowHostNetwork: false diff --git a/components/ui/production/kflux-ocp-p01/kustomization.yaml b/components/ui/production/kflux-ocp-p01/kustomization.yaml index bc9c149bb51..11af7e2e85b 100644 --- a/components/ui/production/kflux-ocp-p01/kustomization.yaml +++ b/components/ui/production/kflux-ocp-p01/kustomization.yaml @@ -19,7 +19,7 @@ images: # hac-dev - name: quay.io/cloudservices/hac-dev-frontend newName: quay.io/cloudservices/hac-dev-frontend - newTag: de23e42 + newTag: 9522a36 configMapGenerator: - name: fed-modules diff --git a/components/ui/production/stone-prod-p02/kustomization.yaml b/components/ui/production/stone-prod-p02/kustomization.yaml index bc9c149bb51..11af7e2e85b 100644 --- a/components/ui/production/stone-prod-p02/kustomization.yaml +++ b/components/ui/production/stone-prod-p02/kustomization.yaml @@ -19,7 +19,7 @@ images: # hac-dev - name: quay.io/cloudservices/hac-dev-frontend newName: quay.io/cloudservices/hac-dev-frontend - newTag: de23e42 + newTag: 9522a36 configMapGenerator: - name: fed-modules