[dev-v2.10] fleet 104.0.3+up0.10.3 update (#4507)

Co-authored-by: fleet-bot <fleet@suse.de>

charts/fleet-agent/104.0.3+up0.10.3/Chart.yaml

@@ -8,8 +8,8 @@ annotations:
   catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
   catalog.cattle.io/release-name: fleet-agent
 apiVersion: v2
-appVersion: 0.10.1-rc.1
+appVersion: 0.10.3
 description: Fleet Manager Agent - GitOps at Scale
 icon: https://charts.rancher.io/assets/logos/fleet.svg
 name: fleet-agent
-version: 104.0.1+up0.10.1-rc.1
+version: 104.0.3+up0.10.3

charts/fleet-agent/104.0.3+up0.10.3/templates/configmap.yaml

@@ -10,4 +10,7 @@ data:
       {{ end }}
       "clientID":"{{.Values.clientID}}",
       "agentTLSMode": "{{.Values.agentTLSMode}}"
+      {{ if .Values.garbageCollectionInterval }}
+      "garbageCollectionInterval": "{{.Values.garbageCollectionInterval}}"
+      {{ end }}
     }

charts/fleet-agent/104.0.3+up0.10.3/values.yaml

@@ -1,7 +1,7 @@
 image:
   os: "windows,linux"
   repository: rancher/fleet-agent
-  tag: v0.10.1-rc.1
+  tag: v0.10.3
 
 # The public URL of the Kubernetes API server running the Fleet Manager must be set here
 # Example: https://example.com:6443

charts/fleet-crd/104.0.3+up0.10.3/Chart.yaml

@@ -6,8 +6,8 @@ annotations:
   catalog.cattle.io/permits-os: linux,windows
   catalog.cattle.io/release-name: fleet-crd
 apiVersion: v2
-appVersion: 0.10.1-rc.1
+appVersion: 0.10.3
 description: Fleet Manager CustomResourceDefinitions
 icon: https://charts.rancher.io/assets/logos/fleet.svg
 name: fleet-crd
-version: 104.0.1+up0.10.1-rc.1
+version: 104.0.3+up0.10.3

charts/fleet-crd/104.0.3+up0.10.3/templates/crds.yaml

@@ -5656,6 +5656,10 @@ spec:
                       nullable: true
                       type: string
                   type: object
+                garbageCollectionInterval:
+                  description: GarbageCollectionInterval determines how often agents
+                    clean up obsolete Helm releases.
+                  type: string
                 namespace:
                   description: 'Namespace is the cluster namespace, it contains the
                     clusters service

charts/fleet/104.0.3+up0.10.3/Chart.yaml

@@ -11,8 +11,8 @@ annotations:
   catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
   catalog.cattle.io/release-name: fleet
 apiVersion: v2
-appVersion: 0.10.1-rc.1
+appVersion: 0.10.3
 description: Fleet Manager - GitOps at Scale
 icon: https://charts.rancher.io/assets/logos/fleet.svg
 name: fleet
-version: 104.0.1+up0.10.1-rc.1
+version: 104.0.3+up0.10.3

charts/fleet/104.0.3+up0.10.3/templates/configmap.yaml

@@ -12,6 +12,9 @@ data:
       "apiServerCA": "{{b64enc .Values.apiServerCA}}",
       "agentCheckinInterval": "{{.Values.agentCheckinInterval}}",
       "agentTLSMode": "{{.Values.agentTLSMode}}",
+      {{ if .Values.garbageCollectionInterval }}
+      "garbageCollectionInterval": "{{.Values.garbageCollectionInterval}}",
+      {{ end }}
       "ignoreClusterRegistrationLabels": {{.Values.ignoreClusterRegistrationLabels}},
       "bootstrap": {
         "paths": "{{.Values.bootstrap.paths}}",

charts/fleet/104.0.3+up0.10.3/templates/deployment.yaml

@@ -69,10 +69,6 @@ spec:
         - name: CATTLE_DEV_MODE
           value: "true"
         {{- end }}
-        {{- if $.Values.controller.reconciler.workers.gitrepo }}
-        - name: GITREPO_RECONCILER_WORKERS
-          value: {{ quote $.Values.controller.reconciler.workers.gitrepo }}
-        {{- end }}
         {{- if $.Values.controller.reconciler.workers.bundle }}
         - name: BUNDLE_RECONCILER_WORKERS
           value: {{ quote $.Values.controller.reconciler.workers.bundle }}

charts/fleet/104.0.3+up0.10.3/templates/deployment_gitjob.yaml

@@ -51,6 +51,10 @@ spec:
           - --shard-id
           - {{ quote $shard.id }}
           {{- end }}
+          {{- if $shard.nodeSelector }}
+          - --shard-node-selector
+          - {{ toJson $shard.nodeSelector | squote }}
+          {{- end }}
           {{- if not $.Values.metrics.enabled }}
           - --disable-metrics
           {{- end }}
@@ -98,6 +102,9 @@ spec:
                 drop:
                 - ALL
           {{- end }}
+          volumeMounts:
+            - mountPath: /tmp
+              name: tmp
       nodeSelector: {{ include "linux-node-selector" $shard.id | nindent 8 }}
 {{- if $.Values.nodeSelector }}
 {{ toYaml $.Values.nodeSelector | indent 8 }}
@@ -121,6 +128,9 @@ spec:
         runAsUser: 1000
         runAsGroup: 1000
 {{- end }}
+      volumes:
+        - name: tmp
+          emptyDir: {}
 {{- end }}
 ---
 {{- end }}

charts/fleet/104.0.3+up0.10.3/templates/job_cleanup_clusterregistrations.yaml

@@ -34,6 +34,7 @@ spec:
         - fleet
         args:
         - cleanup
+        - clusterregistration
       nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
       tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
   backoffLimit: 1

charts/fleet/104.0.3+up0.10.3/templates/job_cleanup_gitrepojobs.yaml

@@ -0,0 +1,47 @@
+{{- if .Values.migrations.gitrepoJobsCleanup }}
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: fleet-cleanup-gitrepo-jobs
+  annotations:
+    "helm.sh/hook": post-install, post-upgrade
+    "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation
+spec:
+  schedule: "@daily"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 0
+  failedJobsHistoryLimit: 1
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          labels:
+            app: fleet-job
+        spec:
+          serviceAccountName: fleet-controller
+          restartPolicy: Never
+          securityContext:
+            runAsNonRoot: true
+            runAsGroup: 1000
+            runAsUser: 1000
+          containers:
+          - name: cleanup
+            image: "{{ template "system_default_registry" . }}{{.Values.image.repository}}:{{.Values.image.tag}}"
+            imagePullPolicy: {{ .Values.global.imagePullPolicy }}
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                - ALL
+              readOnlyRootFilesystem: false
+              privileged: false
+            command:
+            - fleet
+            args:
+            - cleanup
+            - gitjob
+          nodeSelector: {{ include "linux-node-selector" . | nindent 12 }}
+          tolerations: {{ include "linux-node-tolerations" . | nindent 12 }}
+      backoffLimit: 1
+{{- end }}

charts/fleet/104.0.3+up0.10.3/templates/rbac_gitjob.yaml

@@ -51,6 +51,7 @@ rules:
       - "bundles"
       - "bundledeployments"
       - "imagescans"
+      - "contents"
     verbs:
       - list
       - delete

charts/fleet/104.0.3+up0.10.3/values.yaml

@@ -1,11 +1,11 @@
 image:
   repository: rancher/fleet
-  tag: v0.10.1-rc.1
+  tag: v0.10.3
   imagePullPolicy: IfNotPresent
 
 agentImage:
   repository: rancher/fleet-agent
-  tag: v0.10.1-rc.1
+  tag: v0.10.3
   imagePullPolicy: IfNotPresent
 
 # For cluster registration the public URL of the Kubernetes API server must be set here
@@ -87,6 +87,7 @@ propagateDebugSettingsToAgents: true
 
 migrations:
   clusterRegistrationCleanup: true
+  gitrepoJobsCleanup: true
 
 ## Leader election configuration
 leaderElection:
@@ -99,9 +100,9 @@ controller:
   reconciler:
     # The number of workers that are allowed to each type of reconciler
     workers:
-      gitrepo: "1"
-      bundle: "1"
-      bundledeployment: "1"
+      gitrepo: "50"
+      bundle: "50"
+      bundledeployment: "50"
 
 # Extra environment variables passed to the fleet pods.
 # extraEnv:

index.yaml

@@ -702,15 +702,15 @@ entries:
       catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
       catalog.cattle.io/release-name: fleet
     apiVersion: v2
-    appVersion: 0.10.1-rc.1
-    created: "2024-07-24T09:20:05.438695448Z"
+    appVersion: 0.10.3
+    created: "2024-09-30T16:18:57.199155563Z"
     description: Fleet Manager - GitOps at Scale
-    digest: 355033b328ac6cc15303ea5a52da845f4a91f1f6257e0c1e9bb97fc420202983
+    digest: 994d2e6c7a1d1ae734c04cd7e9358db1fb0f83f922e0c17491495ffc39dcc068
     icon: https://charts.rancher.io/assets/logos/fleet.svg
     name: fleet
     urls:
-    - assets/fleet/fleet-104.0.1+up0.10.1-rc.1.tgz
-    version: 104.0.1+up0.10.1-rc.1
+    - assets/fleet/fleet-104.0.3+up0.10.3.tgz
+    version: 104.0.3+up0.10.3
   - annotations:
       catalog.cattle.io/auto-install: fleet-crd=match
       catalog.cattle.io/certified: rancher
@@ -1160,15 +1160,15 @@ entries:
       catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
       catalog.cattle.io/release-name: fleet-agent
     apiVersion: v2
-    appVersion: 0.10.1-rc.1
-    created: "2024-07-24T09:20:07.275725484Z"
+    appVersion: 0.10.3
+    created: "2024-09-30T16:18:58.581796221Z"
     description: Fleet Manager Agent - GitOps at Scale
-    digest: 87809ae1fcfdcb892c2a5c8b6ee0da60b2e35688e1735577c32d58d8dd97f3ff
+    digest: f707d47e0eaf38f316d99de611e074bf693abd2a27bb56ab069afceb75546ba6
     icon: https://charts.rancher.io/assets/logos/fleet.svg
     name: fleet-agent
     urls:
-    - assets/fleet-agent/fleet-agent-104.0.1+up0.10.1-rc.1.tgz
-    version: 104.0.1+up0.10.1-rc.1
+    - assets/fleet-agent/fleet-agent-104.0.3+up0.10.3.tgz
+    version: 104.0.3+up0.10.3
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"
@@ -1501,15 +1501,15 @@ entries:
       catalog.cattle.io/permits-os: linux,windows
       catalog.cattle.io/release-name: fleet-crd
     apiVersion: v2
-    appVersion: 0.10.1-rc.1
-    created: "2024-07-24T09:20:09.149798766Z"
+    appVersion: 0.10.3
+    created: "2024-09-30T16:19:00.114184192Z"
     description: Fleet Manager CustomResourceDefinitions
-    digest: beb894d38286b52e05ea9b8d14a062124724cae840e02b030332fdee64633d67
+    digest: d7602d3e64faf8d76b10055da3a85292eb265667d9b9e7ea4754073eb97a971f
     icon: https://charts.rancher.io/assets/logos/fleet.svg
     name: fleet-crd
     urls:
-    - assets/fleet-crd/fleet-crd-104.0.1+up0.10.1-rc.1.tgz
-    version: 104.0.1+up0.10.1-rc.1
+    - assets/fleet-crd/fleet-crd-104.0.3+up0.10.3.tgz
+    version: 104.0.3+up0.10.3
   - annotations:
       catalog.cattle.io/certified: rancher
       catalog.cattle.io/hidden: "true"

packages/fleet/fleet-agent/generated-changes/patch/Chart.yaml.patch

@@ -11,4 +11,4 @@
 +  catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
    catalog.cattle.io/release-name: fleet-agent
  apiVersion: v2
- appVersion: 0.10.1-rc.1
+ appVersion: 0.10.3

packages/fleet/fleet-agent/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/fleet/releases/download/v0.10.1-rc.1/fleet-agent-0.10.1-rc.1.tgz
-version: 104.0.1
+url: https://github.com/rancher/fleet/releases/download/v0.10.3/fleet-agent-0.10.3.tgz
+version: 104.0.3

packages/fleet/fleet-crd/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/fleet/releases/download/v0.10.1-rc.1/fleet-crd-0.10.1-rc.1.tgz
-version: 104.0.1
+url: https://github.com/rancher/fleet/releases/download/v0.10.3/fleet-crd-0.10.3.tgz
+version: 104.0.3

packages/fleet/fleet/generated-changes/patch/Chart.yaml.patch

@@ -12,4 +12,4 @@
 +  catalog.cattle.io/rancher-version: '>= 2.9.0-0 < 2.10.0-0'
    catalog.cattle.io/release-name: fleet
  apiVersion: v2
- appVersion: 0.10.1-rc.1
+ appVersion: 0.10.3

packages/fleet/fleet/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/fleet/releases/download/v0.10.1-rc.1/fleet-0.10.1-rc.1.tgz
-version: 104.0.1
+url: https://github.com/rancher/fleet/releases/download/v0.10.3/fleet-0.10.3.tgz
+version: 104.0.3

release.yaml

@@ -1,9 +1,9 @@
 fleet-agent:
-  - 104.0.1+up0.10.1-rc.1
+  - 104.0.3+up0.10.3
 fleet:
-  - 104.0.1+up0.10.1-rc.1
+  - 104.0.3+up0.10.3
 fleet-crd:
-  - 104.0.1+up0.10.1-rc.1
+  - 104.0.3+up0.10.3
 rancher-aks-operator:
   - 104.1.0+up1.9.1-rc.4
 rancher-aks-operator-crd: