release: PR for v0.6.23

CHANGELOG/release-notes-v0.6.23.md

@@ -0,0 +1,74 @@
+## v0.6.23
+
+
+
+## Bugs
+- fix: DT19-v1 bug fixes (#3962)
+- fix: ci pod request correction (#3980)
+- fix: pipelineOverride id being sent instead of pipelineId (#3984)
+- fix: Iam role handling script for plugin pull image from CR (#3955)
+- fix: Deployment Template HCL parsing with % keyword (#4012)
+- fix: handled releaseNotExists case for helm type cd pipeline resource tree fetch (#4016)
+- fix: auto post cd not working in case of multiple parallel gitOps pipeline (#4018)
+- fix: handled error in bulk trigger deploy (#4034)
+- fix: The manager(non-admin user) of the application is unable to select a list of apps when assigning permissions (#4053)
+- fix: ci job handling in app create api (#4054)
+- fix: Deploying currently Active image using TriggerDeploy API from devtctl tool is broken (#4056)
+- fix: Unable to delete ci pipeline in case you configure multi git (#4072)
+- fix: env for specific deployment (#4085)
+- fix: update build configuration fix (#4093)
+- fix: Artifacts filter in CD trigger view (#4064)
+- fix: Bugathon DT-19 version-2 fixes (#4105)
+- fix: App Labels node selector not getting attach in ci-workflow (#4084)
+- fix: Update cd pipeline create empty pre post cd steps (#4113)
+- fix: normal Refresh after triggering gitops deployment to avoid sync delay in argo (#4066)
+- fix: helm chart delete when no rows are found (#4124)
+- fix: Unable to abort pre-cd and post-cd workflow (#4121)
+- fix: Helm Apps permissions do not allow Terminal or Logs view (#4110)
+- fix: port service mapping (#4132)
+## Enhancements
+- feat: Helm async install (#3856)
+- feat: handle CI success event auto trigger in batch (#3951)
+- feat: added env variable to skip gitops validation on create/update (#3956)
+- feat: added flag to configure ecr repo creation (#3963)
+- feat: Ability to change branch for all selected applications during bulk build from Application Groups (#3955)
+- feat: Variables support in pre-post CI, CD and Jobs (#3911)
+- feat: Poll Images from ECR Container Repository Plugin (#3971)
+- feat: resource groups CRUD and environment filtering (#3974)
+- feat: Scoped variables primitive handling (#4033)
+- feat: adding DEVTRON_APP_NAME system variable for deployment template (#4041)
+- feat: wf pod restart (#3892)
+- feat: added deduction for system variables (#4075)
+- feat: manifest comparision (#3844)
+- feat: multiple images handling for single workflow for ECR Plugin Poll Images (#4027)
+- feat: Jenkins plugin migration (#4039)
+- feat: clone cd pipelines while cloning app across project (#4087)
+## Documentation
+- doc: Glossary of jargonish terms for layman in the context of Devtron (#3820)
+- docs: Ephemeral Container Doc (#3912)
+- docs: New Image Alignment in Ephemeral doc (#3959)
+- docs: Snapshot updation in PVC docs + PreBuild CI-CD (#3964)
+- doc: Fixed issuer url in okta docs (#4062)
+- docs: Config Approval Draft (#3981)
+- docs: Modified Existing Container Registry Doc (#4048)
+- docs: Added OCI Pull in Usecases (#4112)
+## Others
+- chore: added workflow to escalate pager-duty issue (#3927)
+- chore: changed loop from for to while (#3928)
+- chore: scheduled escalate pager duty issue workflow (#3933)
+- chore: added log config for dev mode (#3953)
+- chore: minor correction in devtron reference charts (#3957)
+- chore: workflow refactoring (#3714)
+- chore: pr-issue-validator permissions fix (#3967)
+- chore: added CODEOWNERS (#3966)
+- chore: Scoped variable refactoring (#3977)
+- chore: modified labels of keda autoscale object in deployment chart (#3999)
+- chore: Update pr-issue-validator.yaml (#3854)
+- chore: refactoring around PipelineBuilder (#4043)
+- chore: moved k8s library to common-lib and added scripts for adding sshTunnel config to clusters (#3848)
+- chore: Add pager-duty issue template (#3988)
+- chore: first cut refactor ci-pipeline (#4091)
+- chore: refactored appartifact manager and cimaterialconfigservice (#4096)
+- chore: Remove the EnvVariablesFromFieldPath from values.yaml in refcharts (#4111)
+- chore: Updated schema for Scope Variable (#4079)
+- chore: skip validation for release PRs (#4128)

charts/devtron/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: devtron-operator
-appVersion: 0.6.22
+appVersion: 0.6.23
 description: Chart to configure and install Devtron. Devtron is a Kubernetes Orchestration system.
 keywords:
   - Devtron
@@ -11,7 +11,7 @@ keywords:
   - argocd
   - Hyperion
 engine: gotpl
-version: 0.22.61
+version: 0.22.62
 sources:
   - https://github.com/devtron-labs/charts
 dependencies:

charts/devtron/devtron-bom.yaml

@@ -9,32 +9,38 @@ global:
     runAsNonRoot: true
 
 installer:
-  release: "v0.6.22"
+  release: "v0.6.23"
   image: "quay.io/devtron/inception"
   tag: "44b30917-185-13275"
 
 components:
   dashboard:
-    image: "quay.io/devtron/dashboard:12717798-325-16265"
+    image: "quay.io/devtron/dashboard:ba04f4f4-325-18824"
     config:
       extraConfigs:
         USE_V2: "true"
         ENABLE_BUILD_CONTEXT: "true"
         ENABLE_RESTART_WORKLOAD: "true"
         HIDE_EXCLUDE_INCLUDE_GIT_COMMITS: "false"
+        ENABLE_SCOPED_VARIABLES: "true"
+        ENABLE_CI_JOB: "true"
   devtron:
-    image: "quay.io/devtron/hyperion:3c1ba1ad-280-16262"
-    cicdImage: "quay.io/devtron/devtron:3c1ba1ad-434-16260"
+    image: "quay.io/devtron/hyperion:65577374-280-18804"
+    cicdImage: "quay.io/devtron/devtron:50ac85e6-434-18829"
     customOverrides:
-      DEFAULT_CI_IMAGE: "quay.io/devtron/ci-runner:d8d774c3-138-16238"
+      DEFAULT_CI_IMAGE: "quay.io/devtron/ci-runner:ad3af321-138-18662"
   argocdDexServer:
     image: "ghcr.io/dexidp/dex:v2.30.2"
     initContainer:
       authenticator: "quay.io/devtron/authenticator:e414faff-393-13273"
   kubelink:
-    image: "quay.io/devtron/kubelink:aefc1baf-318-16208"
+    image: "quay.io/devtron/kubelink:25052130-318-18795"
     configs:
       ENABLE_HELM_RELEASE_CACHE: "true"
+      MANIFEST_FETCH_BATCH_SIZE: "2"
+      NATS_MSG_PROCESSING_BATCH_SIZE: "1"
+      NATS_SERVER_HOST: nats://devtron-nats.devtroncd:4222
+      RUN_HELM_INSTALL_IN_ASYNC_MODE: "true"
       PG_ADDR: postgresql-postgresql.devtroncd
       PG_DATABASE: orchestrator
       PG_LOG_QUERY: "true"
@@ -47,7 +53,34 @@ components:
     image: "quay.io/devtron/postgres:11.9.0-debian-10-r26"
     armImage: "quay.io/devtron/postgres:11.9"
   gitsensor:
-    image: "quay.io/devtron/git-sensor:46b8f0f1-200-16195"
+    image: "quay.io/devtron/git-sensor:b6c3ea0e-200-16327"
+    imagePullPolicy: "IfNotPresent"
+    serviceMonitor:
+      enabled: false
+    persistence:
+      volumeSize: 2Gi
+    configs:
+      PG_ADDR: postgresql-postgresql.devtroncd
+      PG_USER: postgres
+      COMMIT_STATS_TIMEOUT_IN_SEC: "2"
+      ENABLE_FILE_STATS: "true"
+    dbconfig:
+      secretName: postgresql-postgresql
+      keyName: postgresql-password
+  lens: 
+    image: "quay.io/devtron/lens:8803028b-333-16178"
+    imagePullPolicy: IfNotPresent
+    configs:
+      GIT_SENSOR_PROTOCOL: GRPC
+      GIT_SENSOR_URL: git-sensor-service.devtroncd:90
+      NATS_SERVER_HOST: nats://devtron-nats.devtroncd:4222
+      PG_ADDR: postgresql-postgresql.devtroncd
+      PG_PORT: "5432"
+      PG_USER: postgres
+      PG_DATABASE: lens
+    dbconfig:
+      secretName: postgresql-postgresql
+      keyName: postgresql-password
   migrator:
     image: "quay.io/devtron/migrator:v4.16.2"
     envVars:
@@ -66,13 +99,14 @@ argo-cd:
       repository: quay.io/argoproj/argocd
       tag: "v2.5.2"
       imagePullPolicy: IfNotPresent
-
-lens: 
-  image: "quay.io/devtron/lens:8803028b-333-16178"
+
+workflowController:
+  image: "quay.io/argoproj/workflow-controller:v3.4.3"
+  executorImage: "quay.io/argoproj/argoexec:v3.4.3"
 
 security:
   imageScanner:
     image: "quay.io/devtron/image-scanner:ea03b0af-334-15158"
 
 notifier:
-  image: "quay.io/devtron/notifier:d9c72180-372-14306"
+  image: "quay.io/devtron/notifier:d71bcbcd-372-18717"

charts/devtron/templates/NOTES.txt

@@ -55,3 +55,5 @@ Please wait for ~1 minute before running any of the following commands.
    2. "Applied" means installation is successful.
 
 {{- end }}
+
+Facing issues? Reach out to our team on Discord https://discord.devtron.ai for immediate assistance!

charts/devtron/templates/gitsensor.yaml

@@ -0,0 +1,160 @@
+{{- if $.Values.installer.modules }}
+{{- if has "cicd" $.Values.installer.modules }}
+{{- with .Values.components.gitsensor }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: git-sensor-secret
+  labels:
+    app: git-sensor
+    release: devtron
+{{- if .secrets }}
+data:
+{{- range $k, $v := .secrets }}
+  {{ $k }}: {{ $v | b64enc }}
+{{- end }}
+{{- end }}
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: git-sensor-cm
+  labels:
+    app: git-sensor
+    release: devtron
+{{- if .configs }}
+data:
+{{ toYaml .configs | indent 2 }}
+{{- end }}
+
+---
+# Source: gitsensor/templates/generic.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: git-sensor-service
+  labels:
+    app: git-sensor
+    release: devtron
+spec:
+  ports:
+    - name: sensor
+      port: 80
+      protocol: TCP
+      targetPort: 8080
+    - name: grpc
+      port: 90
+      protocol: TCP
+      targetPort: 8081
+  selector:
+    app: git-sensor
+---
+# Source: gitsensor/templates/generic.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: git-sensor
+  labels:
+    release: devtron
+    app: git-sensor
+spec:
+  selector:
+    matchLabels:
+      app: git-sensor # has to match .spec.template.metadata.labels
+  serviceName: git-sensor
+  replicas: 1 # by default is 1
+  template:
+    metadata:
+      labels:
+        app: git-sensor
+    spec:
+      terminationGracePeriodSeconds: 10
+      securityContext:
+        runAsGroup: 1000
+        runAsUser: 1000
+      initContainers:
+        - command:
+          - /bin/sh
+          - -c
+          - mkdir -p /git-base/ssh-keys && chown -R devtron:devtron /git-base && chmod 777 /git-base/ssh-keys
+          image: {{ .image }}
+          imagePullPolicy: IfNotPresent
+          name: chown-git-base
+          resources: {}
+          securityContext:
+            runAsUser: 0
+          terminationMessagePath: /dev/termination-log
+          terminationMessagePolicy: File
+          volumeMounts:
+          - mountPath: /git-base/
+            name: git-volume
+      containers:
+        - name: git-sensor
+          image: {{ .image }}
+          {{- if  .imagePullPolicy }}
+          imagePullPolicy: {{ .imagePullPolicy }}
+          {{- end }}
+          securityContext:
+            allowPrivilegeEscalation: false
+            runAsUser: 1000
+            runAsNonRoot: true
+          ports:
+            - containerPort: 8080
+              name: sensor
+            - containerPort: 8081
+              name: grpc
+          volumeMounts:
+            - name: git-volume
+              mountPath: /git-base/
+          env:
+            - name: DEVTRON_APP_NAME
+              value: git-sensor
+            - name: POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+            {{- if $.Values.components.gitsensor.dbconfig }}
+            - name: PG_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .dbconfig.secretName }}
+                  key: {{ .dbconfig.keyName }}
+            {{- end }}
+          envFrom:
+          - secretRef:
+              name: git-sensor-secret
+          - configMapRef: 
+              name: git-sensor-cm
+          {{- if .resources }}        
+          resources:
+          {{- toYaml .resources | nindent 12 }}
+          {{- end }}
+  volumeClaimTemplates:
+    - metadata:
+        name: git-volume
+      spec:
+        accessModes: [ "ReadWriteOnce" ]
+        resources:
+          requests:
+            storage: {{ .persistence.volumeSize }}
+---
+{{- if .serviceMonitor.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: git-sensor-sm
+  labels:
+    app: git-sensor
+    kind: Prometheus
+    release: devtron
+spec:
+  endpoints:
+    - port: app
+      path: /metrics
+  selector:
+    matchLabels:
+      app: git-sensor
+{{- end }}
+{{- end }}
+{{- end }}
+{{- end }}