Commit Graph

1347 Commits (fc4a6b1ccb3263844e8615857e518f365c39ba53)

Author SHA1 Message Date
fleet-bot f69836cfad Updating to Fleet v0.6.0-rc.5 2023-03-02 16:38:02 +00:00
Geet Samra e7b0abfbac
Merge pull request #2448 from nflynt/grafana-react-nginx-subfilter
Update nginx proxy configuration to unbreak grafana UI
2023-03-01 08:17:58 -08:00
Vardhaman Surana 3a251dc3d6
Merge pull request #2443 from vardhaman22/cis-rbac-fix-for-rke-hardened-cluster
cis rbac fix for rke hardened cluster
2023-03-01 10:36:14 +05:30
Nicholas Flynt 0abb957377 Remove two subfilter URL rewriting rules from grafana nginx config
With the switch from AngularJS to ReactJS, grafana is now using
/absolute/url style hrefs in its templates and its JavaScript assets,
but these URLs are passed directly into React's clientside routing
engine rather than hitting the proxy on the backend. Thus, rewriting
these URLs is inappropriate, confuses the clientside router, and breaks
interlink between several tabs in the UI, and a few dashboards, among
other things.

Attempts to address #2445
2023-02-28 15:06:17 -05:00
Kevin Joiner cf37abab66 Bump rancher-webhook to v0.3.2-rc19 2023-02-27 13:17:17 -05:00
vardhaman 44e6e8e5e3 CIS: added network policy related permissions to cis-scan-ns clusterrole 2023-02-24 21:48:09 +05:30
Eliyam Levy 7ed1850c05 updated release and package yamls 2023-02-23 17:44:17 -05:00
Steven Crespo 06b145070a Update ui-plugin-operator commit ref 2023-02-23 11:58:18 -08:00
Arvind Iyengar c9930db8b3
Bump Prometheus Federator 2023-02-22 11:49:17 -08:00
Rayan Das fd5aaacdd1 bump CIS Benchmark version to include new security-scan image 2023-02-22 16:33:26 +05:30
Prachi Damle 7ab8882b74
Merge pull request #2427 from mjura/aks-operator-1.1.0-rc5
[dev-2.7] Update aks-operator chart to 102.0.0
2023-02-21 14:10:07 -08:00
thomasferrandiz 382d4aeb9c
Update sriov chart to 102.0.0 (#2419) 2023-02-21 16:44:02 -05:00
Michal Jura efcbf97af4
Bump aks-operator major version 2023-02-20 08:15:28 +01:00
Jake Hyde 85b889cf2a Bump Rancher-webhook to v0.3.2-rc18 2023-02-17 17:06:58 -05:00
Prachi Damle f5bc3aa4df
Merge pull request #2385 from PhanLe1010/dev-v2.7
Dev v2.7: Update rancher-charts/longhorn chart to support updated approach for PSPs
2023-02-17 11:41:13 -08:00
Tim Hardeck 4a94f4e96b
Updating to Fleet v0.6.0-rc.4 2023-02-17 16:27:10 +01:00
Tim Hardeck 19504ad197
Updating to Fleet v0.6.0-rc.3 2023-02-16 10:54:36 +01:00
Arvind Iyengar 2587c841d4
Fix system_default_registry references in rancher-monitoring chart
(cherry picked from commit 6ad8e16d30)
2023-02-15 17:29:35 -08:00
Anna Blendermann 495e4b44a7
Bump vSphere CSI/CPI major version to track k8s 1.25 support (#2418) 2023-02-14 17:24:41 -05:00
Caleb Bron 8249d2d753
Merge pull request #2395 from selvamt94/neuvector
Add NeuVector chart version 2.4.2
2023-02-14 12:32:32 -07:00
Harrison 0fb5c73769
Merge pull request #2417 from HarrisonWAffel/bump-suc-major
Bump System Upgrade Controller Major Version for 1.25
2023-02-14 12:53:15 -05:00
Harrison Affel e23873b8d1 bump SUC major version 2023-02-14 11:48:55 -05:00
Michal Jura 709e1a399a
[dev-v2.7] Bump rancher-aks-operator v1.1.0-rc4 2023-02-14 15:06:08 +01:00
Phan Le f7e9bc5322 updated approach for PSPs: make prepare/patch: release longhorn v1.4.0 into Rancher 2.7
Signed-off-by: Phan Le <phan.le@suse.com>
2023-02-13 15:01:28 -08:00
Vardhaman Surana 12321ddd7b
Merge pull request #2367 from vardhaman22/fix-gatekeeper
added additional permissions to cluster roles used by gatekeeper chart jobs
2023-02-13 12:56:01 +05:30
Arvind Iyengar 1dee9705f7
Merge pull request #2411 from aiyengar2/add_prometheus_federator
Bring in Project Monitoring charts with PSP issues fixed
2023-02-10 20:13:49 -08:00
Arvind Iyengar 39242d51de
Update prometheus-federator to 0.2.0 2023-02-10 15:47:25 -08:00
Arvind Iyengar dc0ee9733c
Update rancher-project-monitoring to 0.2.0 2023-02-10 15:44:42 -08:00
Arvind Iyengar 1cf7b1a468
Remove faulty .Capabilities check for kube-state-metrics 2023-02-10 15:33:53 -08:00
Arvind Iyengar 6bde4c49aa
Remove faulty .Capabilities check for node-exporter 2023-02-10 15:33:53 -08:00
Arvind Iyengar dd63ae66f4
Ensure all references of 9100 are removed 2023-02-10 15:11:30 -08:00
Jiaqi Luo e889dacf68 bump rancher-webhook to 0.3.2-rc17 2023-02-10 11:33:06 -07:00
Michael Bolot b00a6cfc6a
Merge pull request #2408 from MbolotSuse/wh-0.3.2-rc16
Bump rancher webhook to v0.3.2-rc16
2023-02-10 11:01:17 -06:00
Michael Bolot 93b27d2b6a bump rancher-webhook to v0.3.2-rc16 2023-02-10 09:44:18 -06:00
Harrison Affel 7d447d4e43 change commit 2023-02-10 10:21:37 -05:00
Olivier Vernin 737bb9980c
Merge pull request #2401 from epinio/epinio-1-6-2
Epinio 1.6.2, replaces 1.6.1
2023-02-10 15:38:25 +01:00
Mauren Berti ef7a8848dc
Merge pull request #2380 from stormqueen1990/feat/new-psp-approach-cis-benchmark
[rancher-cis-benchmark] Update chart for new PSP approach
2023-02-09 17:39:55 -05:00
Arvind Iyengar 3db170070d
Fix rancher-monitoring-crd chart uninstall failure
It seems like the order of parameters in the CRD uninstall Job are incorrect.

```
arvindiyengar: ~/Rancher/charts/src/github.com/rancher/charts
$ kubectl apply -f charts/rancher-monitoring-crd/101.0.0+up19.0.3/crd-manifest
customresourcedefinition.apiextensions.k8s.io/alertmanagerconfigs.monitoring.coreos.com created
customresourcedefinition.apiextensions.k8s.io/alertmanagers.monitoring.coreos.com created
customresourcedefinition.apiextensions.k8s.io/podmonitors.monitoring.coreos.com created
customresourcedefinition.apiextensions.k8s.io/probes.monitoring.coreos.com created
customresourcedefinition.apiextensions.k8s.io/prometheuses.monitoring.coreos.com created
customresourcedefinition.apiextensions.k8s.io/prometheusrules.monitoring.coreos.com created
customresourcedefinition.apiextensions.k8s.io/servicemonitors.monitoring.coreos.com created
customresourcedefinition.apiextensions.k8s.io/thanosrulers.monitoring.coreos.com created
arvindiyengar: ~/Rancher/charts/src/github.com/rancher/charts
$ kubectl delete -Rf --ignore-not-found=true charts/rancher-monitoring-crd/101.0.0+up19.0.3/crd-manifest
the path "--ignore-not-found=true" does not exist
arguments in resource/name form may not have more than one slash
```

Since it is invalid to place `--ignore-not-found=true` after `-Rf`, I'm just switching the order to be successful.
2023-02-09 12:44:55 -08:00
Arvind Iyengar 8d416da04e
Fix typo with metricRelabelings 2023-02-09 12:08:54 -08:00
selvamt94 3defafcd46 Merge remote-tracking branch 'upstream/dev-v2.7' into neuvector 2023-02-09 10:04:55 -08:00
Harrison Affel 37fb302542 update rancher-k3s-upgrader commit 2023-02-09 11:01:17 -05:00
Mauren Berti ce1769a6f0
make charts 2023-02-09 09:45:25 -05:00
Mauren Berti 79a977493b
Update PSP approach for rancher-cis-benchmark.
* Remove all previous capabilities checks.
* Bump version from 3.0.1-rc6 to 4.0.0-rc1.
* Add new flag global.cattle.psp.enabled to control installation of PodSecurityPolicies.
* Add new validate-psp-install.yaml file to check whether PSPs can be installed.
* Update app-readme.md with PSP notice.
* Bump Kubernetes compatibility versions to < 1.26.0.
2023-02-09 09:22:06 -05:00
Andreas Kupries e2b07fd4e5 bump epinio to 1.6.2, bugfixes `app export`, `app portforward`
ref https://github.com/epinio/epinio/releases/tag/v1.6.2
2023-02-09 14:11:15 +01:00
Eliyam Levy 8047e91c2d
Merge pull request #2365 from dbason/dev-v2.7
[rancher-logging] Various minor fixes
2023-02-08 17:21:57 -05:00
Dan Bason 4616a28c8a
[rancher-logging] Update for psp setting 2023-02-09 10:56:33 +13:00
selvamt94 aa5ca49867 Add NeuVector chart version 2.4.2 2023-02-08 12:13:57 -08:00
Harrison Affel 5de59ad611 update system-charts commit 2023-02-08 12:39:18 -05:00
vardhaman 1cfe8a9154 added security context values for gatekeeper crd chart
this is needed so that these jobs can be run in the namespace with restricted psa labels applied
2023-02-08 20:12:45 +05:30
Vardhaman Surana 4cccf56734
Merge pull request #2394 from vardhaman22/fix-cis-rbac
fix cis rbac
2023-02-08 09:59:48 +05:30