Bump eks-operator to 1.1.1-rc7

charts/rancher-aks-operator-crd/rancher-aks-operator-crd/100.0.0+up1.0.1-rc15/Chart.yaml

@@ -5,7 +5,7 @@ annotations:
   catalog.cattle.io/os: linux
   catalog.cattle.io/release-name: rancher-aks-operator-crd
 apiVersion: v2
-appVersion: 1.0.1-rc14
+appVersion: 1.0.1-rc15
 description: AKS Operator CustomResourceDefinitions
 name: rancher-aks-operator-crd
-version: 100.0.0+up1.0.1-rc14
+version: 100.0.0+up1.0.1-rc15

charts/rancher-aks-operator/rancher-aks-operator/100.0.0+up1.0.1-rc15/Chart.yaml

@@ -9,10 +9,10 @@ annotations:
   catalog.cattle.io/release-name: rancher-aks-operator
   catalog.cattle.io/scope: management
 apiVersion: v2
-appVersion: 1.0.1-rc14
+appVersion: 1.0.1-rc15
 description: A Helm chart for provisioning AKS clusters
 home: https://github.com/rancher/aks-operator
 name: rancher-aks-operator
 sources:
 - https://github.com/rancher/aks-operator
-version: 100.0.0+up1.0.1-rc14
+version: 100.0.0+up1.0.1-rc15

charts/rancher-aks-operator/rancher-aks-operator/100.0.0+up1.0.1-rc15/templates/deployment.yaml

@@ -14,6 +14,9 @@ spec:
         ke.cattle.io/operator: aks
     spec:
       serviceAccountName: aks-operator
+      securityContext:
+        fsGroup: 1007
+        runAsUser: 1007
       containers:
       - name: aks-operator
         image: {{ template "system_default_registry" . }}{{ .Values.aksOperator.image.repository }}:{{ .Values.aksOperator.image.tag }}
@@ -26,8 +29,16 @@ spec:
         - name: NO_PROXY
           value: {{ .Values.noProxy }}
 {{- if .Values.additionalTrustedCAs }}
+        # aks-operator mounts the additional CAs in two places:
         volumeMounts:
-          - mountPath: /etc/ssl/certs/ca-additional.pem
+            # This directory is owned by the aks-operator user so c_rehash works here.
+          - mountPath: /etc/rancher/ssl/ca-additional.pem
+            name: tls-ca-additional-volume
+            subPath: ca-additional.pem
+            readOnly: true
+            # This directory is root-owned so c_rehash doesn't work here,
+            # but the cert is here in case update-ca-certificates is called in the future or by the OS.
+          - mountPath: /etc/pki/trust/anchors/ca-additional.pem
             name: tls-ca-additional-volume
             subPath: ca-additional.pem
             readOnly: true

charts/rancher-aks-operator/rancher-aks-operator/100.0.0+up1.0.1-rc15/values.yaml

@@ -4,7 +4,7 @@ global:
 aksOperator:
   image:
     repository: rancher/aks-operator
-    tag: v1.0.1-rc14
+    tag: v1.0.1-rc15
 
 httpProxy: ""
 httpsProxy: ""

charts/rancher-eks-operator-crd/rancher-eks-operator-crd/100.0.0+up1.1.1-rc7/Chart.yaml

@@ -5,7 +5,7 @@ annotations:
   catalog.cattle.io/os: linux
   catalog.cattle.io/release-name: rancher-eks-operator-crd
 apiVersion: v2
-appVersion: 1.1.1-rc5
+appVersion: 1.1.1-rc7
 description: EKS Operator CustomResourceDefinitions
 name: rancher-eks-operator-crd
-version: 100.0.0+up1.1.1-rc5
+version: 100.0.0+up1.1.1-rc7

charts/rancher-eks-operator/rancher-eks-operator/100.0.0+up1.1.1-rc7/Chart.yaml

@@ -9,10 +9,10 @@ annotations:
   catalog.cattle.io/release-name: rancher-eks-operator
   catalog.cattle.io/scope: management
 apiVersion: v2
-appVersion: 1.1.1-rc5
+appVersion: 1.1.1-rc7
 description: A Helm chart for provisioning EKS clusters
 home: https://github.com/rancher/eks-operator
 name: rancher-eks-operator
 sources:
 - https://github.com/rancher/eks-operator
-version: 100.0.0+up1.1.1-rc5
+version: 100.0.0+up1.1.1-rc7

charts/rancher-eks-operator/rancher-eks-operator/100.0.0+up1.1.1-rc7/templates/deployment.yaml

@@ -14,6 +14,9 @@ spec:
         ke.cattle.io/operator: eks
     spec:
       serviceAccountName: eks-operator
+      securityContext:
+        fsGroup: 1007
+        runAsUser: 1007
       containers:
       - name: eks-operator
         image: {{ template "system_default_registry" . }}{{ .Values.eksOperator.image.repository }}:{{ .Values.eksOperator.image.tag }}
@@ -26,8 +29,16 @@ spec:
         - name: NO_PROXY
           value: {{ .Values.noProxy }}
 {{- if .Values.additionalTrustedCAs }}
+        # eks-operator mounts the additional CAs in two places:
         volumeMounts:
-          - mountPath: /etc/ssl/certs/ca-additional.pem
+            # This directory is owned by the eks-operator user so c_rehash works here.
+          - mountPath: /etc/rancher/ssl/ca-additional.pem
+            name: tls-ca-additional-volume
+            subPath: ca-additional.pem
+            readOnly: true
+            # This directory is root-owned so c_rehash doesn't work here,
+            # but the cert is here in case update-ca-certificates is called in the future or by the OS.
+          - mountPath: /etc/pki/trust/anchors/ca-additional.pem
             name: tls-ca-additional-volume
             subPath: ca-additional.pem
             readOnly: true

charts/rancher-eks-operator/rancher-eks-operator/100.0.0+up1.1.1-rc7/values.yaml

@@ -4,7 +4,7 @@ global:
 eksOperator:
   image:
     repository: rancher/eks-operator
-    tag: v1.1.1-rc5
+    tag: v1.1.1-rc7
 
 httpProxy: ""
 httpsProxy: ""

charts/rancher-gke-operator-crd/rancher-gke-operator-crd/100.0.0+up1.1.1-rc8/Chart.yaml

@@ -5,7 +5,7 @@ annotations:
   catalog.cattle.io/os: linux
   catalog.cattle.io/release-name: rancher-gke-operator-crd
 apiVersion: v2
-appVersion: 1.1.1-rc7
+appVersion: 1.1.1-rc8
 description: GKE Operator CustomResourceDefinitions
 name: rancher-gke-operator-crd
-version: 100.0.0+up1.1.1-rc7
+version: 100.0.0+up1.1.1-rc8

charts/rancher-gke-operator/rancher-gke-operator/100.0.0+up1.1.1-rc8/Chart.yaml

@@ -9,10 +9,10 @@ annotations:
   catalog.cattle.io/release-name: rancher-gke-operator
   catalog.cattle.io/scope: management
 apiVersion: v2
-appVersion: 1.1.1-rc7
+appVersion: 1.1.1-rc8
 description: A Helm chart for provisioning GKE clusters
 home: https://github.com/rancher/gke-operator
 name: rancher-gke-operator
 sources:
 - https://github.com/rancher/gke-operator
-version: 100.0.0+up1.1.1-rc7
+version: 100.0.0+up1.1.1-rc8

charts/rancher-gke-operator/rancher-gke-operator/100.0.0+up1.1.1-rc8/templates/deployment.yaml

@@ -14,6 +14,9 @@ spec:
         ke.cattle.io/operator: gke
     spec:
       serviceAccountName: gke-operator
+      securityContext:
+        fsGroup: 1007
+        runAsUser: 1007
       containers:
       - name: rancher-gke-operator
         image: {{ template "system_default_registry" . }}{{ .Values.gkeOperator.image.repository }}:{{ .Values.gkeOperator.image.tag }}
@@ -26,8 +29,16 @@ spec:
         - name: NO_PROXY
           value: {{ .Values.noProxy }}
 {{- if .Values.additionalTrustedCAs }}
+        # gke-operator mounts the additional CAs in two places:
         volumeMounts:
-          - mountPath: /etc/ssl/certs/ca-additional.pem
+            # This directory is owned by the gke-operator user so c_rehash works here.
+          - mountPath: /etc/rancher/ssl/ca-additional.pem
+            name: tls-ca-additional-volume
+            subPath: ca-additional.pem
+            readOnly: true
+            # This directory is root-owned so c_rehash doesn't work here,
+            # but the cert is here in case update-ca-certificates is called in the future or by the OS.
+          - mountPath: /etc/pki/trust/anchors/ca-additional.pem
             name: tls-ca-additional-volume
             subPath: ca-additional.pem
             readOnly: true

charts/rancher-gke-operator/rancher-gke-operator/100.0.0+up1.1.1-rc8/values.yaml

@@ -4,7 +4,7 @@ global:
 gkeOperator:
   image:
     repository: rancher/gke-operator
-    tag: v1.1.1-rc7
+    tag: v1.1.1-rc8
 
 httpProxy: ""
 httpsProxy: ""

index.yaml

@@ -703,17 +703,17 @@ entries:
       catalog.cattle.io/release-name: rancher-aks-operator
       catalog.cattle.io/scope: management
     apiVersion: v2
-    appVersion: 1.0.1-rc14
-    created: "2021-07-07T20:44:06.900904-07:00"
+    appVersion: 1.0.1-rc15
+    created: "2021-07-13T11:36:00.910913-07:00"
     description: A Helm chart for provisioning AKS clusters
-    digest: 81ea234ec7c6d0442ca6b359990dd5cf11e8ab3e3bcbfe0b44f963e62d50186c
+    digest: 15990f025dc259b8e861616fdead59505a247dc390bf682599b206be02e05dcd
     home: https://github.com/rancher/aks-operator
     name: rancher-aks-operator
     sources:
     - https://github.com/rancher/aks-operator
     urls:
-    - assets/rancher-aks-operator/rancher-aks-operator-100.0.0+up1.0.1-rc14.tgz
-    version: 100.0.0+up1.0.1-rc14
+    - assets/rancher-aks-operator/rancher-aks-operator-100.0.0+up1.0.1-rc15.tgz
+    version: 100.0.0+up1.0.1-rc15
   rancher-aks-operator-crd:
   - annotations:
       catalog.cattle.io/certified: rancher
@@ -722,14 +722,14 @@ entries:
       catalog.cattle.io/os: linux
       catalog.cattle.io/release-name: rancher-aks-operator-crd
     apiVersion: v2
-    appVersion: 1.0.1-rc14
-    created: "2021-07-07T20:44:06.90126-07:00"
+    appVersion: 1.0.1-rc15
+    created: "2021-07-13T11:36:00.911092-07:00"
     description: AKS Operator CustomResourceDefinitions
-    digest: f5b03e1613eca14c2acfb983995e22fc077a57671984b8cbf8e42f44b853d299
+    digest: 700a472838b8102747d87776fb7e3b2ff62d1b48aa993ea141757f842e796a6a
     name: rancher-aks-operator-crd
     urls:
-    - assets/rancher-aks-operator-crd/rancher-aks-operator-crd-100.0.0+up1.0.1-rc14.tgz
-    version: 100.0.0+up1.0.1-rc14
+    - assets/rancher-aks-operator-crd/rancher-aks-operator-crd-100.0.0+up1.0.1-rc15.tgz
+    version: 100.0.0+up1.0.1-rc15
   rancher-alerting-drivers:
   - annotations:
       catalog.cattle.io/certified: rancher
@@ -1244,17 +1244,17 @@ entries:
       catalog.cattle.io/release-name: rancher-eks-operator
       catalog.cattle.io/scope: management
     apiVersion: v2
-    appVersion: 1.1.1-rc5
-    created: "2021-07-07T20:44:06.9195-07:00"
+    appVersion: 1.1.1-rc7
+    created: "2021-07-13T11:29:13.631182-07:00"
     description: A Helm chart for provisioning EKS clusters
-    digest: f6491cfaf9335fc6d928bb569982249eb13b3e9d1e58b48fde778b00ac19b49b
+    digest: e860747ed1252d46efe539d8f700dcc2478d7c5c4c3effcbb5f38098cca750f4
     home: https://github.com/rancher/eks-operator
     name: rancher-eks-operator
     sources:
     - https://github.com/rancher/eks-operator
     urls:
-    - assets/rancher-eks-operator/rancher-eks-operator-100.0.0+up1.1.1-rc5.tgz
-    version: 100.0.0+up1.1.1-rc5
+    - assets/rancher-eks-operator/rancher-eks-operator-100.0.0+up1.1.1-rc7.tgz
+    version: 100.0.0+up1.1.1-rc7
   rancher-eks-operator-crd:
   - annotations:
       catalog.cattle.io/certified: rancher
@@ -1263,14 +1263,14 @@ entries:
       catalog.cattle.io/os: linux
       catalog.cattle.io/release-name: rancher-eks-operator-crd
     apiVersion: v2
-    appVersion: 1.1.1-rc5
-    created: "2021-07-07T20:44:06.919898-07:00"
+    appVersion: 1.1.1-rc7
+    created: "2021-07-13T11:29:13.631392-07:00"
     description: EKS Operator CustomResourceDefinitions
-    digest: 5c165bc23dac261521a9cbe8bbbe8f5be3d462f2425a4c016e91ace799745fcc
+    digest: b2220b8d258d4a959a7e2a068d360b7835b0d1869738ff2c1042da569e448df2
     name: rancher-eks-operator-crd
     urls:
-    - assets/rancher-eks-operator-crd/rancher-eks-operator-crd-100.0.0+up1.1.1-rc5.tgz
-    version: 100.0.0+up1.1.1-rc5
+    - assets/rancher-eks-operator-crd/rancher-eks-operator-crd-100.0.0+up1.1.1-rc7.tgz
+    version: 100.0.0+up1.1.1-rc7
   rancher-external-ip-webhook:
   - annotations:
       catalog.cattle.io/certified: rancher
@@ -1613,17 +1613,17 @@ entries:
       catalog.cattle.io/release-name: rancher-gke-operator
       catalog.cattle.io/scope: management
     apiVersion: v2
-    appVersion: 1.1.1-rc7
-    created: "2021-07-06T20:16:27.132025181-07:00"
+    appVersion: 1.1.1-rc8
+    created: "2021-07-13T11:32:29.248464-07:00"
     description: A Helm chart for provisioning GKE clusters
-    digest: a878a0c00e492ca35b2a71b0e6d1363ecb105b0cc3ee74bcafe83a3eece523e1
+    digest: a92ffcae967e0d2b494b04cbfa41be46f33916d5c4811c52f94e5df8fc844fb1
     home: https://github.com/rancher/gke-operator
     name: rancher-gke-operator
     sources:
     - https://github.com/rancher/gke-operator
     urls:
-    - assets/rancher-gke-operator/rancher-gke-operator-100.0.0+up1.1.1-rc7.tgz
-    version: 100.0.0+up1.1.1-rc7
+    - assets/rancher-gke-operator/rancher-gke-operator-100.0.0+up1.1.1-rc8.tgz
+    version: 100.0.0+up1.1.1-rc8
   rancher-gke-operator-crd:
   - annotations:
       catalog.cattle.io/certified: rancher
@@ -1632,14 +1632,14 @@ entries:
       catalog.cattle.io/os: linux
       catalog.cattle.io/release-name: rancher-gke-operator-crd
     apiVersion: v2
-    appVersion: 1.1.1-rc7
-    created: "2021-07-06T20:16:27.132285563-07:00"
+    appVersion: 1.1.1-rc8
+    created: "2021-07-13T11:32:29.24893-07:00"
     description: GKE Operator CustomResourceDefinitions
-    digest: cd4dc046f2b983ca1d8ed23b1e285e86fdd65ad5c4db37a9f7eedcb9cd91c7eb
+    digest: f2ed68cc7ee282269385f09ca3a584cdf0312a7adaf9c9f1c91c7b6fd4738d6a
     name: rancher-gke-operator-crd
     urls:
-    - assets/rancher-gke-operator-crd/rancher-gke-operator-crd-100.0.0+up1.1.1-rc7.tgz
-    version: 100.0.0+up1.1.1-rc7
+    - assets/rancher-gke-operator-crd/rancher-gke-operator-crd-100.0.0+up1.1.1-rc8.tgz
+    version: 100.0.0+up1.1.1-rc8
   rancher-grafana:
   - annotations:
       catalog.cattle.io/hidden: "true"

packages/rancher-aks-operator-crd/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/aks-operator/releases/download/v1.0.1-rc14/rancher-aks-operator-crd-1.0.1-rc14.tgz
+url: https://github.com/rancher/aks-operator/releases/download/v1.0.1-rc15/rancher-aks-operator-crd-1.0.1-rc15.tgz
 version: 100.0.0

packages/rancher-aks-operator/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/aks-operator/releases/download/v1.0.1-rc14/rancher-aks-operator-1.0.1-rc14.tgz
+url: https://github.com/rancher/aks-operator/releases/download/v1.0.1-rc15/rancher-aks-operator-1.0.1-rc15.tgz
 version: 100.0.0

packages/rancher-eks-operator-crd/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/eks-operator/releases/download/v1.1.1-rc5/rancher-eks-operator-crd-1.1.1-rc5.tgz
+url: https://github.com/rancher/eks-operator/releases/download/v1.1.1-rc7/rancher-eks-operator-crd-1.1.1-rc7.tgz
 version: 100.0.0

packages/rancher-eks-operator/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/eks-operator/releases/download/v1.1.1-rc5/rancher-eks-operator-1.1.1-rc5.tgz
+url: https://github.com/rancher/eks-operator/releases/download/v1.1.1-rc7/rancher-eks-operator-1.1.1-rc7.tgz
 version: 100.0.0

packages/rancher-gke-operator-crd/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/gke-operator/releases/download/v1.1.1-rc7/rancher-gke-operator-crd-1.1.1-rc7.tgz
+url: https://github.com/rancher/gke-operator/releases/download/v1.1.1-rc8/rancher-gke-operator-crd-1.1.1-rc8.tgz
 version: 100.0.0

packages/rancher-gke-operator/package.yaml

@@ -1,2 +1,2 @@
-url: https://github.com/rancher/gke-operator/releases/download/v1.1.1-rc7/rancher-gke-operator-1.1.1-rc7.tgz
+url: https://github.com/rancher/gke-operator/releases/download/v1.1.1-rc8/rancher-gke-operator-1.1.1-rc8.tgz
 version: 100.0.0