Merge pull request #644 from nflondo/main-source

Charts CI [modified charts]

charts/argo/argo-cd/Chart.yaml

@@ -1,12 +1,14 @@
 annotations:
   artifacthub.io/changes: |
-    - "[Changed]: Upgrade Redis exporter image to 1.45.0"
+    - "[Changed]: Disable Redis exporter by default"
+    - "[Changed]: Use bitnami Redis exporter image for redis-ha"
+    - "[Docs]: Fixed defaults for Redis exporter"
   catalog.cattle.io/certified: partner
   catalog.cattle.io/display-name: Argo CD
   catalog.cattle.io/kube-version: '>=1.22.0-0'
   catalog.cattle.io/release-name: argo-cd
 apiVersion: v2
-appVersion: v2.5.7
+appVersion: v2.5.8
 dependencies:
 - condition: redis-ha.enabled
   name: redis-ha
@@ -28,4 +30,4 @@ name: argo-cd
 sources:
 - https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
 - https://github.com/argoproj/argo-cd
-version: 5.19.6
+version: 5.19.8

charts/argo/argo-cd/README.md

@@ -865,14 +865,14 @@ server:
 | redis.env | list | `[]` | Environment variables to pass to the Redis server |
 | redis.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to the Redis server |
 | redis.exporter.containerSecurityContext | object | See [values.yaml] | Redis exporter security context |
-| redis.exporter.enabled | bool | `true` | Enable Prometheus redis-exporter sidecar |
-| redis.exporter.image.imagePullPolicy | string | `""` (defaults to global.image.imagePullPolicy) | Image pull policy for the Redis exporter |
-| redis.exporter.image.repository | string | `"public.ecr.aws/bitnami/redis-exporter"` | redis-exporter image repository |
-| redis.exporter.image.tag | string | `"1.45.0"` | redis-exporter image tag |
+| redis.exporter.enabled | bool | `false` | Enable Prometheus redis-exporter sidecar |
+| redis.exporter.image.imagePullPolicy | string | `""` (defaults to global.image.imagePullPolicy) | Image pull policy for the redis-exporter |
+| redis.exporter.image.repository | string | `"public.ecr.aws/bitnami/redis-exporter"` | Repository to use for the redis-exporter |
+| redis.exporter.image.tag | string | `"1.45.0"` | Tag to use for the redis-exporter |
 | redis.exporter.resources | object | `{}` | Resource limits and requests for redis-exporter sidecar |
 | redis.extraArgs | list | `[]` | Additional command line arguments to pass to redis-server |
 | redis.extraContainers | list | `[]` | Additional containers to be added to the redis pod |
-| redis.image.imagePullPolicy | string | `"IfNotPresent"` | Redis imagePullPolicy |
+| redis.image.imagePullPolicy | string | `""` (defaults to global.image.imagePullPolicy) | Redis image pull policy |
 | redis.image.repository | string | `"public.ecr.aws/docker/library/redis"` | Redis repository |
 | redis.image.tag | string | `"7.0.5-alpine"` | Redis tag |
 | redis.imagePullSecrets | list | `[]` (defaults to global.imagePullSecrets) | Secrets with credentials to pull images from a private registry |
@@ -927,7 +927,9 @@ The main options are listed here:
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | redis-ha.enabled | bool | `false` | Enables the Redis HA subchart and disables the custom Redis single node deployment |
-| redis-ha.exporter.enabled | bool | `true` | If `true`, the prometheus exporter sidecar is enabled |
+| redis-ha.exporter.enabled | bool | `false` | Enable Prometheus redis-exporter sidecar |
+| redis-ha.exporter.image | string | `"public.ecr.aws/bitnami/redis-exporter"` | Repository to use for the redis-exporter |
+| redis-ha.exporter.tag | string | `"1.45.0"` | Tag to use for the redis-exporter |
 | redis-ha.haproxy.enabled | bool | `true` | Enabled HAProxy LoadBalancing/Proxy |
 | redis-ha.haproxy.metrics.enabled | bool | `true` | HAProxy enable prometheus metric scraping |
 | redis-ha.image.tag | string | `"7.0.5-alpine"` | Redis tag |

charts/argo/argo-cd/values.yaml

@@ -988,21 +988,21 @@ redis:
     repository: public.ecr.aws/docker/library/redis
     # -- Redis tag
     tag: 7.0.5-alpine
-    # -- Redis imagePullPolicy
-    imagePullPolicy: IfNotPresent
+    # -- Redis image pull policy
+    # @default -- `""` (defaults to global.image.imagePullPolicy)
+    imagePullPolicy: ""
 
-  # Prometheus redis-exporter sidecar
+  ## Prometheus redis-exporter sidecar
   exporter:
     # -- Enable Prometheus redis-exporter sidecar
-    enabled: true
-
-    # Prometheus redis-exporter image
+    enabled: false
+    ## Prometheus redis-exporter image
     image:
-      # -- redis-exporter image repository
+      # -- Repository to use for the redis-exporter
       repository: public.ecr.aws/bitnami/redis-exporter
-      # -- redis-exporter image tag
+      # -- Tag to use for the redis-exporter
       tag: 1.45.0
-      # -- Image pull policy for the Redis exporter
+      # -- Image pull policy for the redis-exporter
       # @default -- `""` (defaults to global.image.imagePullPolicy)
       imagePullPolicy: ""
 
@@ -1190,9 +1190,14 @@ redis:
 redis-ha:
   # -- Enables the Redis HA subchart and disables the custom Redis single node deployment
   enabled: false
+  ## Prometheus redis-exporter sidecar
   exporter:
-    # -- If `true`, the prometheus exporter sidecar is enabled
-    enabled: true
+    # -- Enable Prometheus redis-exporter sidecar
+    enabled: false
+    # -- Repository to use for the redis-exporter
+    image: public.ecr.aws/bitnami/redis-exporter
+    # -- Tag to use for the redis-exporter
+    tag: 1.45.0
   persistentVolume:
     # -- Configures persistency on Redis nodes
     enabled: false

charts/bitnami/airflow/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: redis
   repository: https://charts.bitnami.com/bitnami
-  version: 17.5.1
+  version: 17.6.0
 - name: postgresql
   repository: https://charts.bitnami.com/bitnami
-  version: 12.1.9
+  version: 12.1.10
 - name: common
   repository: https://charts.bitnami.com/bitnami
   version: 2.2.2
-digest: sha256:fc4142cd500d4b294c35cb5eb77d66f902fe6f2f566a68e6011f2c5842da102d
-generated: "2023-01-21T00:58:20.340613943Z"
+digest: sha256:ee18c87bfd8a3bd8527b9644a0e51112762fe1722d7b1e1a81f7c55617a4cf74
+generated: "2023-01-26T12:25:32.085167719Z"

charts/bitnami/airflow/Chart.yaml

@@ -38,4 +38,4 @@ name: airflow
 sources:
 - https://github.com/bitnami/containers/tree/main/bitnami/airflow
 - https://airflow.apache.org/
-version: 14.0.8
+version: 14.0.9

charts/bitnami/airflow/README.md

@@ -92,7 +92,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `dags.existingConfigmap` | Name of an existing ConfigMap with all the DAGs files you want to load in Airflow                                                                                         | `""`                    |
 | `dags.image.registry`    | Init container load-dags image registry                                                                                                                                   | `docker.io`             |
 | `dags.image.repository`  | Init container load-dags image repository                                                                                                                                 | `bitnami/bitnami-shell` |
-| `dags.image.tag`         | Init container load-dags image tag (immutable tags are recommended)                                                                                                       | `11-debian-11-r74`      |
+| `dags.image.tag`         | Init container load-dags image tag (immutable tags are recommended)                                                                                                       | `11-debian-11-r76`      |
 | `dags.image.digest`      | Init container load-dags image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag                                                  | `""`                    |
 | `dags.image.pullPolicy`  | Init container load-dags image pull policy                                                                                                                                | `IfNotPresent`          |
 | `dags.image.pullSecrets` | Init container load-dags image pull secrets                                                                                                                               | `[]`                    |
@@ -112,7 +112,7 @@ The command removes all the Kubernetes components associated with the chart and
 | ------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | -------------------- |
 | `web.image.registry`                        | Airflow image registry                                                                                                   | `docker.io`          |
 | `web.image.repository`                      | Airflow image repository                                                                                                 | `bitnami/airflow`    |
-| `web.image.tag`                             | Airflow image tag (immutable tags are recommended)                                                                       | `2.5.1-debian-11-r0` |
+| `web.image.tag`                             | Airflow image tag (immutable tags are recommended)                                                                       | `2.5.1-debian-11-r2` |
 | `web.image.digest`                          | Airflow image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag                  | `""`                 |
 | `web.image.pullPolicy`                      | Airflow image pull policy                                                                                                | `IfNotPresent`       |
 | `web.image.pullSecrets`                     | Airflow image pull secrets                                                                                               | `[]`                 |
@@ -188,7 +188,7 @@ The command removes all the Kubernetes components associated with the chart and
 | ------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | --------------------------- |
 | `scheduler.image.registry`                        | Airflow Scheduler image registry                                                                                         | `docker.io`                 |
 | `scheduler.image.repository`                      | Airflow Scheduler image repository                                                                                       | `bitnami/airflow-scheduler` |
-| `scheduler.image.tag`                             | Airflow Scheduler image tag (immutable tags are recommended)                                                             | `2.5.1-debian-11-r0`        |
+| `scheduler.image.tag`                             | Airflow Scheduler image tag (immutable tags are recommended)                                                             | `2.5.1-debian-11-r1`        |
 | `scheduler.image.digest`                          | Airflow Schefuler image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag        | `""`                        |
 | `scheduler.image.pullPolicy`                      | Airflow Scheduler image pull policy                                                                                      | `IfNotPresent`              |
 | `scheduler.image.pullSecrets`                     | Airflow Scheduler image pull secrets                                                                                     | `[]`                        |
@@ -243,7 +243,7 @@ The command removes all the Kubernetes components associated with the chart and
 | ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | ------------------------ |
 | `worker.image.registry`                        | Airflow Worker image registry                                                                                            | `docker.io`              |
 | `worker.image.repository`                      | Airflow Worker image repository                                                                                          | `bitnami/airflow-worker` |
-| `worker.image.tag`                             | Airflow Worker image tag (immutable tags are recommended)                                                                | `2.5.1-debian-11-r0`     |
+| `worker.image.tag`                             | Airflow Worker image tag (immutable tags are recommended)                                                                | `2.5.1-debian-11-r1`     |
 | `worker.image.digest`                          | Airflow Worker image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag           | `""`                     |
 | `worker.image.pullPolicy`                      | Airflow Worker image pull policy                                                                                         | `IfNotPresent`           |
 | `worker.image.pullSecrets`                     | Airflow Worker image pull secrets                                                                                        | `[]`                     |
@@ -324,7 +324,7 @@ The command removes all the Kubernetes components associated with the chart and
 | ------------------------------ | --------------------------------------------------------------------------------------------------- | --------------------- |
 | `git.image.registry`           | Git image registry                                                                                  | `docker.io`           |
 | `git.image.repository`         | Git image repository                                                                                | `bitnami/git`         |
-| `git.image.tag`                | Git image tag (immutable tags are recommended)                                                      | `2.39.1-debian-11-r1` |
+| `git.image.tag`                | Git image tag (immutable tags are recommended)                                                      | `2.39.1-debian-11-r3` |
 | `git.image.digest`             | Git image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""`                  |
 | `git.image.pullPolicy`         | Git image pull policy                                                                               | `IfNotPresent`        |
 | `git.image.pullSecrets`        | Git image pull secrets                                                                              | `[]`                  |
@@ -420,7 +420,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `metrics.enabled`                               | Whether or not to create a standalone Airflow exporter to expose Airflow metrics                                 | `false`                      |
 | `metrics.image.registry`                        | Airflow exporter image registry                                                                                  | `docker.io`                  |
 | `metrics.image.repository`                      | Airflow exporter image repository                                                                                | `bitnami/airflow-exporter`   |
-| `metrics.image.tag`                             | Airflow exporter image tag (immutable tags are recommended)                                                      | `0.20220314.0-debian-11-r82` |
+| `metrics.image.tag`                             | Airflow exporter image tag (immutable tags are recommended)                                                      | `0.20220314.0-debian-11-r84` |
 | `metrics.image.digest`                          | Airflow exporter image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""`                         |
 | `metrics.image.pullPolicy`                      | Airflow exporter image pull policy                                                                               | `IfNotPresent`               |
 | `metrics.image.pullSecrets`                     | Airflow exporter image pull secrets                                                                              | `[]`                         |

charts/bitnami/airflow/charts/postgresql/Chart.yaml

@@ -1,5 +1,6 @@
 annotations:
   category: Database
+  licenses: Apache-2.0
 apiVersion: v2
 appVersion: 15.1.0
 dependencies:
@@ -27,4 +28,4 @@ name: postgresql
 sources:
 - https://github.com/bitnami/containers/tree/main/bitnami/postgresql
 - https://www.postgresql.org/
-version: 12.1.9
+version: 12.1.10

charts/bitnami/airflow/charts/postgresql/README.md

@@ -10,9 +10,9 @@ Trademarks: This software listing is packaged by Bitnami. The respective tradema
 
 ## TL;DR
 
-```bash
-helm repo add my-repo https://charts.bitnami.com/bitnami
-helm install my-release my-repo/postgresql
+```console
+$ helm repo add my-repo https://charts.bitnami.com/bitnami
+$ helm install my-release my-repo/postgresql
 ```
 
 ## Introduction
@@ -33,8 +33,9 @@ Bitnami charts can be used with [Kubeapps](https://kubeapps.dev/) for deployment
 
 To install the chart with the release name `my-release`:
 
-```bash
-helm install my-release my-repo/postgresql
+```console
+$ helm repo add my-repo https://charts.bitnami.com/bitnami
+$ helm install my-release my-repo/postgresql
 ```
 
 The command deploys PostgreSQL on the Kubernetes cluster in the default configuration. The [Parameters](#parameters) section lists the parameters that can be configured during installation.
@@ -46,15 +47,15 @@ The command deploys PostgreSQL on the Kubernetes cluster in the default configur
 To uninstall/delete the `my-release` deployment:
 
 ```console
-helm delete my-release
+$ helm delete my-release
 ```
 
 The command removes all the Kubernetes components but PVC's associated with the chart and deletes the release.
 
 To delete the PVC's associated with `my-release`:
 
-```bash
-kubectl delete pvc -l release=my-release
+```console
+$ kubectl delete pvc -l release=my-release
 ```
 
 > **Note**: Deleting the PVC's will delete postgresql data as well. Please be cautious before doing it.
@@ -466,7 +467,7 @@ kubectl delete pvc -l release=my-release
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
 
-```bash
+```console
 $ helm install my-release \
     --set auth.postgresPassword=secretpassword
     my-repo/postgresql
@@ -480,8 +481,8 @@ The above command sets the PostgreSQL `postgres` account password to `secretpass
 
 Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example,
 
-```bash
-helm install my-release -f values.yaml my-repo/postgresql
+```console
+$ helm install my-release -f values.yaml my-repo/postgresql
 ```
 
 > **Tip**: You can use the default [values.yaml](values.yaml)
@@ -639,8 +640,8 @@ To enable network policy for PostgreSQL, install [a networking plugin that imple
 
 For Kubernetes v1.5 & v1.6, you must also turn on NetworkPolicy by setting the DefaultDeny namespace annotation. Note: this will enforce policy for _all_ pods in the namespace:
 
-```bash
-kubectl annotate namespace default "net.beta.kubernetes.io/network-policy={\"ingress\":{\"isolation\":\"DefaultDeny\"}}"
+```console
+$ kubectl annotate namespace default "net.beta.kubernetes.io/network-policy={\"ingress\":{\"isolation\":\"DefaultDeny\"}}"
 ```
 
 With NetworkPolicy enabled, traffic will be limited to just port 5432.

charts/bitnami/airflow/charts/postgresql/templates/NOTES.txt

@@ -84,6 +84,8 @@ To connect to your database from outside the cluster execute the following comma
 {{- end }}
 {{- end }}
 
+WARNING: The configured password will be ignored on new installation in case when previous Posgresql release was deleted through the helm command. In that case, old PVC will have an old password, and setting it through helm won't take effect. Deleting persistent volumes (PVs) will solve the issue.
+
 {{- include "postgresql.validateValues" . -}}
 {{- include "common.warnings.rollingTag" .Values.image -}}
 {{- include "common.warnings.rollingTag" .Values.volumePermissions.image }}

charts/bitnami/airflow/charts/redis/Chart.yaml

@@ -24,4 +24,4 @@ maintainers:
 name: redis
 sources:
 - https://github.com/bitnami/containers/tree/main/bitnami/redis
-version: 17.5.1
+version: 17.6.0

charts/bitnami/airflow/charts/redis/README.md

@@ -389,6 +389,7 @@ The command removes all the Kubernetes components associated with the chart and
 | `sentinel.persistence.selector`               | Additional labels to match for the PVC                                                                                                      | `{}`                     |
 | `sentinel.persistence.dataSource`             | Custom PVC data source                                                                                                                      | `{}`                     |
 | `sentinel.persistence.medium`                 | Provide a medium for `emptyDir` volumes.                                                                                                    | `""`                     |
+| `sentinel.persistence.sizeLimit`              | Set this to enable a size limit for `emptyDir` volumes.                                                                                     | `""`                     |
 | `sentinel.resources.limits`                   | The resources limits for the Redis® Sentinel containers                                                                                 | `{}`                     |
 | `sentinel.resources.requests`                 | The requested resources for the Redis® Sentinel containers                                                                              | `{}`                     |
 | `sentinel.containerSecurityContext.enabled`   | Enabled Redis® Sentinel containers' Security Context                                                                                    | `true`                   |

charts/bitnami/airflow/charts/redis/templates/master/application.yaml

@@ -432,9 +432,11 @@ spec:
             path: /sys
         {{- end }}
         - name: redis-tmp-conf
-          {{- if .Values.master.persistence.medium }}
+          {{- if or .Values.master.persistence.medium .Values.master.persistence.sizeLimit }}
           emptyDir:
+            {{- if .Values.master.persistence.medium }}
             medium: {{ .Values.master.persistence.medium | quote }}
+            {{- end }}
             {{- if .Values.master.persistence.sizeLimit }}
             sizeLimit: {{ .Values.master.persistence.sizeLimit | quote }}
             {{- end }}
@@ -442,9 +444,11 @@ spec:
           emptyDir: {}
           {{- end }}
         - name: tmp
-          {{- if .Values.master.persistence.medium }}
+          {{- if or .Values.master.persistence.medium .Values.master.persistence.sizeLimit }}
           emptyDir:
+            {{- if .Values.master.persistence.medium }}
             medium: {{ .Values.master.persistence.medium | quote }}
+            {{- end }}
             {{- if .Values.master.persistence.sizeLimit }}
             sizeLimit: {{ .Values.master.persistence.sizeLimit | quote }}
             {{- end }}
@@ -465,10 +469,14 @@ spec:
         {{- end }}
   {{- if not .Values.master.persistence.enabled }}
         - name: redis-data
+          {{- if or .Values.master.persistence.medium .Values.master.persistence.sizeLimit }}
+          emptyDir:
             {{- if .Values.master.persistence.medium }}
-          emptyDir: {
             medium: {{ .Values.master.persistence.medium | quote }}
-          }
+            {{- end }}
+            {{- if .Values.master.persistence.sizeLimit }}
+            sizeLimit: {{ .Values.master.persistence.sizeLimit | quote }}
+            {{- end }}
           {{- else }}
           emptyDir: {}
           {{- end }}

charts/bitnami/airflow/charts/redis/templates/replicas/statefulset.yaml

@@ -447,9 +447,11 @@ spec:
             path: /sys
         {{- end }}
         - name: redis-tmp-conf
-          {{- if .Values.replica.persistence.medium }}
+          {{- if or .Values.replica.persistence.medium .Values.replica.persistence.sizeLimit }}
           emptyDir:
+            {{- if .Values.replica.persistence.medium }}
             medium: {{ .Values.replica.persistence.medium | quote }}
+            {{- end }}
             {{- if .Values.replica.persistence.sizeLimit }}
             sizeLimit: {{ .Values.replica.persistence.sizeLimit | quote }}
             {{- end }}
@@ -470,10 +472,14 @@ spec:
         {{- end }}
   {{- if not .Values.replica.persistence.enabled }}
         - name: redis-data
+          {{- if or .Values.replica.persistence.medium .Values.replica.persistence.sizeLimit }}
+          emptyDir:
             {{- if .Values.replica.persistence.medium }}
-          emptyDir: {
             medium: {{ .Values.replica.persistence.medium | quote }}
-          }
+            {{- end }}
+            {{- if .Values.replica.persistence.sizeLimit }}
+            sizeLimit: {{ .Values.replica.persistence.sizeLimit | quote }}
+            {{- end }}
           {{- else }}
           emptyDir: {}
           {{- end }}

charts/bitnami/airflow/charts/redis/templates/sentinel/statefulset.yaml

@@ -656,27 +656,39 @@ spec:
         {{- end }}
         {{- if not .Values.sentinel.persistence.enabled }}
         - name: sentinel-data
+          {{- if or .Values.sentinel.persistence.medium .Values.sentinel.persistence.sizeLimit }}
+          emptyDir:
             {{- if .Values.sentinel.persistence.medium }}
-          emptyDir: {
             medium: {{ .Values.sentinel.persistence.medium | quote }}
-          }
+            {{- end }}
+            {{- if .Values.sentinel.persistence.sizeLimit }}
+            sizeLimit: {{ .Values.sentinel.persistence.sizeLimit | quote }}
+            {{- end }}
           {{- else }}
           emptyDir: {}
           {{- end }}
         {{- end }}
         - name: redis-tmp-conf
-          {{- if .Values.replica.persistence.medium }}
-          emptyDir: {
-            medium: {{ .Values.replica.persistence.medium | quote }}
-          }
+          {{- if or .Values.sentinel.persistence.medium .Values.sentinel.persistence.sizeLimit }}
+          emptyDir:
+            {{- if .Values.sentinel.persistence.medium }}
+            medium: {{ .Values.sentinel.persistence.medium | quote }}
+            {{- end }}
+            {{- if .Values.sentinel.persistence.sizeLimit }}
+            sizeLimit: {{ .Values.sentinel.persistence.sizeLimit | quote }}
+            {{- end }}
           {{- else }}
           emptyDir: {}
           {{- end }}
         - name: tmp
-          {{- if .Values.replica.persistence.medium }}
-          emptyDir: {
-            medium: {{ .Values.replica.persistence.medium | quote }}
-          }
+          {{- if or .Values.sentinel.persistence.medium .Values.sentinel.persistence.sizeLimit }}
+          emptyDir:
+            {{- if .Values.sentinel.persistence.medium }}
+            medium: {{ .Values.sentinel.persistence.medium | quote }}
+            {{- end }}
+            {{- if .Values.sentinel.persistence.sizeLimit }}
+            sizeLimit: {{ .Values.sentinel.persistence.sizeLimit | quote }}
+            {{- end }}
           {{- else }}
           emptyDir: {}
           {{- end }}
@@ -697,10 +709,14 @@ spec:
         {{- end }}
   {{- if not .Values.replica.persistence.enabled }}
         - name: redis-data
-          {{- if .Values.replica.persistence.medium }}
-          emptyDir: {
-            medium: {{ .Values.replica.persistence.medium | quote }}
-          }
+          {{- if or .Values.sentinel.persistence.medium .Values.sentinel.persistence.sizeLimit }}
+          emptyDir:
+            {{- if .Values.sentinel.persistence.medium }}
+            medium: {{ .Values.sentinel.persistence.medium | quote }}
+            {{- end }}
+            {{- if .Values.sentinel.persistence.sizeLimit }}
+            sizeLimit: {{ .Values.sentinel.persistence.sizeLimit | quote }}
+            {{- end }}
           {{- else }}
           emptyDir: {}
           {{- end }}

charts/bitnami/airflow/charts/redis/values.yaml

@@ -1152,6 +1152,9 @@ sentinel:
     ## @param sentinel.persistence.medium Provide a medium for `emptyDir` volumes.
     ##
     medium: ""
+    ## @param sentinel.persistence.sizeLimit Set this to enable a size limit for `emptyDir` volumes.
+    ##
+    sizeLimit: ""
   ## Redis® Sentinel resource requests and limits
   ## ref: https://kubernetes.io/docs/user-guide/compute-resources/
   ## @param sentinel.resources.limits The resources limits for the Redis® Sentinel containers

charts/bitnami/airflow/values.yaml

@@ -118,7 +118,7 @@ dags:
   image:
     registry: docker.io
     repository: bitnami/bitnami-shell
-    tag: 11-debian-11-r74
+    tag: 11-debian-11-r76
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
@@ -185,7 +185,7 @@ web:
   image:
     registry: docker.io
     repository: bitnami/airflow
-    tag: 2.5.1-debian-11-r0
+    tag: 2.5.1-debian-11-r2
     digest: ""
     ## Specify a imagePullPolicy
     ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -443,7 +443,7 @@ scheduler:
   image:
     registry: docker.io
     repository: bitnami/airflow-scheduler
-    tag: 2.5.1-debian-11-r0
+    tag: 2.5.1-debian-11-r1
     digest: ""
     ## Specify a imagePullPolicy
     ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -647,7 +647,7 @@ worker:
   image:
     registry: docker.io
     repository: bitnami/airflow-worker
-    tag: 2.5.1-debian-11-r0
+    tag: 2.5.1-debian-11-r1
     digest: ""
     ## Specify a imagePullPolicy
     ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -920,7 +920,7 @@ git:
   image:
     registry: docker.io
     repository: bitnami/git
-    tag: 2.39.1-debian-11-r1
+    tag: 2.39.1-debian-11-r3
     digest: ""
     ## Specify a imagePullPolicy
     ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -1283,7 +1283,7 @@ metrics:
   image:
     registry: docker.io
     repository: bitnami/airflow-exporter
-    tag: 0.20220314.0-debian-11-r82
+    tag: 0.20220314.0-debian-11-r84
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.

charts/bitnami/postgresql/Chart.yaml

@@ -4,6 +4,7 @@ annotations:
   catalog.cattle.io/kube-version: '>=1.19-0'
   catalog.cattle.io/release-name: postgresql
   category: Database
+  licenses: Apache-2.0
 apiVersion: v2
 appVersion: 15.1.0
 dependencies:
@@ -31,4 +32,4 @@ name: postgresql
 sources:
 - https://github.com/bitnami/containers/tree/main/bitnami/postgresql
 - https://www.postgresql.org/
-version: 12.1.9
+version: 12.1.11

charts/bitnami/postgresql/README.md

@@ -10,9 +10,9 @@ Trademarks: This software listing is packaged by Bitnami. The respective tradema
                            
 ## TL;DR
 
-```bash
-helm repo add my-repo https://charts.bitnami.com/bitnami
-helm install my-release my-repo/postgresql
+```console
+$ helm repo add my-repo https://charts.bitnami.com/bitnami
+$ helm install my-release my-repo/postgresql
 ```
 
 ## Introduction
@@ -33,8 +33,9 @@ Bitnami charts can be used with [Kubeapps](https://kubeapps.dev/) for deployment
 
 To install the chart with the release name `my-release`:
 
-```bash
-helm install my-release my-repo/postgresql
+```console
+$ helm repo add my-repo https://charts.bitnami.com/bitnami
+$ helm install my-release my-repo/postgresql
 ```
 
 The command deploys PostgreSQL on the Kubernetes cluster in the default configuration. The [Parameters](#parameters) section lists the parameters that can be configured during installation.
@@ -46,15 +47,15 @@ The command deploys PostgreSQL on the Kubernetes cluster in the default configur
 To uninstall/delete the `my-release` deployment:
 
 ```console
-helm delete my-release
+$ helm delete my-release
 ```
 
 The command removes all the Kubernetes components but PVC's associated with the chart and deletes the release.
 
 To delete the PVC's associated with `my-release`:
 
-```bash
-kubectl delete pvc -l release=my-release
+```console
+$ kubectl delete pvc -l release=my-release
 ```
 
 > **Note**: Deleting the PVC's will delete postgresql data as well. Please be cautious before doing it.
@@ -101,7 +102,7 @@ kubectl delete pvc -l release=my-release
 | ---------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------- |
 | `image.registry`                         | PostgreSQL image registry                                                                                                                                                                                                                                                                                                                     | `docker.io`                |
 | `image.repository`                       | PostgreSQL image repository                                                                                                                                                                                                                                                                                                                   | `bitnami/postgresql`       |
-| `image.tag`                              | PostgreSQL image tag (immutable tags are recommended)                                                                                                                                                                                                                                                                                         | `15.1.0-debian-11-r20`     |
+| `image.tag`                              | PostgreSQL image tag (immutable tags are recommended)                                                                                                                                                                                                                                                                                         | `15.1.0-debian-11-r28`     |
 | `image.digest`                           | PostgreSQL image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag                                                                                                                                                                                                                                    | `""`                       |
 | `image.pullPolicy`                       | PostgreSQL image pull policy                                                                                                                                                                                                                                                                                                                  | `IfNotPresent`             |
 | `image.pullSecrets`                      | Specify image pull secrets                                                                                                                                                                                                                                                                                                                    | `[]`                       |
@@ -382,7 +383,7 @@ kubectl delete pvc -l release=my-release
 | `volumePermissions.enabled`                            | Enable init container that changes the owner and group of the persistent volume                                                   | `false`                 |
 | `volumePermissions.image.registry`                     | Init container volume-permissions image registry                                                                                  | `docker.io`             |
 | `volumePermissions.image.repository`                   | Init container volume-permissions image repository                                                                                | `bitnami/bitnami-shell` |
-| `volumePermissions.image.tag`                          | Init container volume-permissions image tag (immutable tags are recommended)                                                      | `11-debian-11-r69`      |
+| `volumePermissions.image.tag`                          | Init container volume-permissions image tag (immutable tags are recommended)                                                      | `11-debian-11-r76`      |
 | `volumePermissions.image.digest`                       | Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""`                    |
 | `volumePermissions.image.pullPolicy`                   | Init container volume-permissions image pull policy                                                                               | `IfNotPresent`          |
 | `volumePermissions.image.pullSecrets`                  | Init container volume-permissions image pull secrets                                                                              | `[]`                    |
@@ -411,7 +412,7 @@ kubectl delete pvc -l release=my-release
 | `metrics.enabled`                               | Start a prometheus exporter                                                                                | `false`                     |
 | `metrics.image.registry`                        | PostgreSQL Prometheus Exporter image registry                                                              | `docker.io`                 |
 | `metrics.image.repository`                      | PostgreSQL Prometheus Exporter image repository                                                            | `bitnami/postgres-exporter` |
-| `metrics.image.tag`                             | PostgreSQL Prometheus Exporter image tag (immutable tags are recommended)                                  | `0.11.1-debian-11-r46`      |
+| `metrics.image.tag`                             | PostgreSQL Prometheus Exporter image tag (immutable tags are recommended)                                  | `0.11.1-debian-11-r53`      |
 | `metrics.image.digest`                          | PostgreSQL image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""`                        |
 | `metrics.image.pullPolicy`                      | PostgreSQL Prometheus Exporter image pull policy                                                           | `IfNotPresent`              |
 | `metrics.image.pullSecrets`                     | Specify image pull secrets                                                                                 | `[]`                        |
@@ -466,7 +467,7 @@ kubectl delete pvc -l release=my-release
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
 
-```bash
+```console
 $ helm install my-release \
     --set auth.postgresPassword=secretpassword
     my-repo/postgresql
@@ -480,8 +481,8 @@ The above command sets the PostgreSQL `postgres` account password to `secretpass
 
 Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example,
 
-```bash
-helm install my-release -f values.yaml my-repo/postgresql
+```console
+$ helm install my-release -f values.yaml my-repo/postgresql
 ```
 
 > **Tip**: You can use the default [values.yaml](values.yaml)
@@ -639,8 +640,8 @@ To enable network policy for PostgreSQL, install [a networking plugin that imple
 
 For Kubernetes v1.5 & v1.6, you must also turn on NetworkPolicy by setting the DefaultDeny namespace annotation. Note: this will enforce policy for _all_ pods in the namespace:
 
-```bash
-kubectl annotate namespace default "net.beta.kubernetes.io/network-policy={\"ingress\":{\"isolation\":\"DefaultDeny\"}}"
+```console
+$ kubectl annotate namespace default "net.beta.kubernetes.io/network-policy={\"ingress\":{\"isolation\":\"DefaultDeny\"}}"
 ```
 
 With NetworkPolicy enabled, traffic will be limited to just port 5432.

charts/bitnami/postgresql/templates/NOTES.txt

@@ -84,6 +84,8 @@ To connect to your database from outside the cluster execute the following comma
 {{- end }}
 {{- end }}
 
+WARNING: The configured password will be ignored on new installation in case when previous Posgresql release was deleted through the helm command. In that case, old PVC will have an old password, and setting it through helm won't take effect. Deleting persistent volumes (PVs) will solve the issue.
+
 {{- include "postgresql.validateValues" . -}}
 {{- include "common.warnings.rollingTag" .Values.image -}}
 {{- include "common.warnings.rollingTag" .Values.volumePermissions.image }}

charts/bitnami/postgresql/values.yaml

@@ -95,7 +95,7 @@ diagnosticMode:
 image:
   registry: docker.io
   repository: bitnami/postgresql
-  tag: 15.1.0-debian-11-r20
+  tag: 15.1.0-debian-11-r28
   digest: ""
   ## Specify a imagePullPolicy
   ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
@@ -1130,7 +1130,7 @@ volumePermissions:
   image:
     registry: docker.io
     repository: bitnami/bitnami-shell
-    tag: 11-debian-11-r69
+    tag: 11-debian-11-r76
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
@@ -1217,7 +1217,7 @@ metrics:
   image:
     registry: docker.io
     repository: bitnami/postgres-exporter
-    tag: 0.11.1-debian-11-r46
+    tag: 0.11.1-debian-11-r53
     digest: ""
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.

charts/bitnami/spark/Chart.yaml

@@ -4,8 +4,7 @@ annotations:
   catalog.cattle.io/kube-version: '>=1.19-0'
   catalog.cattle.io/release-name: spark
   category: Infrastructure
-  licenses: |
-    - Apache-2.0
+  licenses: Apache-2.0
 apiVersion: v2
 appVersion: 3.3.1
 dependencies:
@@ -29,4 +28,4 @@ name: spark
 sources:
 - https://github.com/bitnami/containers/tree/main/bitnami/spark
 - https://spark.apache.org/
-version: 6.3.14
+version: 6.3.15

charts/bitnami/spark/README.md

@@ -88,7 +88,7 @@ The command removes all the Kubernetes components associated with the chart and
 | ------------------- | ----------------------------------------------------------------------------------------------------- | --------------------- |
 | `image.registry`    | Spark image registry                                                                                  | `docker.io`           |
 | `image.repository`  | Spark image repository                                                                                | `bitnami/spark`       |
-| `image.tag`         | Spark image tag (immutable tags are recommended)                                                      | `3.3.1-debian-11-r28` |
+| `image.tag`         | Spark image tag (immutable tags are recommended)                                                      | `3.3.1-debian-11-r35` |
 | `image.digest`      | Spark image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""`                  |
 | `image.pullPolicy`  | Spark image pull policy                                                                               | `IfNotPresent`        |
 | `image.pullSecrets` | Specify docker-registry secret names as an array                                                      | `[]`                  |
@@ -372,7 +372,7 @@ To submit an application to the Apache Spark cluster, use the `spark-submit` scr
 
 The command below illustrates the process of deploying one of the sample applications included with Apache Spark. Replace the `k8s-apiserver-host`, `k8s-apiserver-port`, `spark-master-svc`, and `spark-master-port` placeholders with the correct master host/IP address and port for your deployment.
 
-```bash
+```console
 $ ./bin/spark-submit \
     --class org.apache.spark.examples.SparkPi \
     --conf spark.kubernetes.container.image=bitnami/spark:3 \

charts/bitnami/spark/values.yaml

@@ -92,7 +92,7 @@ diagnosticMode:
 image:
   registry: docker.io
   repository: bitnami/spark
-  tag: 3.3.1-debian-11-r28
+  tag: 3.3.1-debian-11-r35
   digest: ""
   ## Specify a imagePullPolicy
   ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'

charts/bitnami/wordpress/Chart.yaml

@@ -41,4 +41,4 @@ name: wordpress
 sources:
 - https://github.com/bitnami/containers/tree/main/bitnami/wordpress
 - https://wordpress.org/
-version: 15.2.33
+version: 15.2.34

charts/bitnami/wordpress/templates/ingress.yaml

@@ -52,7 +52,7 @@ spec:
     - hosts:
         - {{ .Values.ingress.hostname | quote }}
         {{- if or (.Values.ingress.tlsWwwPrefix) (eq (index .Values.ingress.annotations "nginx.ingress.kubernetes.io/from-to-www-redirect") "true" ) }}
-        - {{ print "www.%s" .Values.ingress.hostname }}
+        - {{ printf "www.%s" .Values.ingress.hostname | quote }}
         {{- end }}
       secretName: {{ printf "%s-tls" .Values.ingress.hostname }}
     {{- end }}

charts/cockroach-labs/cockroachdb/Chart.yaml

@@ -4,7 +4,7 @@ annotations:
   catalog.cattle.io/kube-version: '>=1.8-0'
   catalog.cattle.io/release-name: cockroachdb
 apiVersion: v1
-appVersion: 22.2.2
+appVersion: 22.2.3
 description: CockroachDB is a scalable, survivable, strongly-consistent SQL database.
 home: https://www.cockroachlabs.com
 icon: https://raw.githubusercontent.com/cockroachdb/cockroach/master/docs/media/cockroach_db.png
@@ -14,4 +14,4 @@ maintainers:
 name: cockroachdb
 sources:
 - https://github.com/cockroachdb/cockroach
-version: 10.0.2
+version: 10.0.3

charts/cockroach-labs/cockroachdb/README.md

@@ -229,10 +229,10 @@ kubectl get pods \
 ```
 
 ```
-my-release-cockroachdb-0    cockroachdb/cockroach:v22.2.2
-my-release-cockroachdb-1    cockroachdb/cockroach:v22.2.2
-my-release-cockroachdb-2    cockroachdb/cockroach:v22.2.2
-my-release-cockroachdb-3    cockroachdb/cockroach:v22.2.2
+my-release-cockroachdb-0    cockroachdb/cockroach:v22.2.3
+my-release-cockroachdb-1    cockroachdb/cockroach:v22.2.3
+my-release-cockroachdb-2    cockroachdb/cockroach:v22.2.3
+my-release-cockroachdb-3    cockroachdb/cockroach:v22.2.3
 ```
 
 Resume normal operations. Once you are comfortable that the stability and performance of the cluster is what you'd expect post-upgrade, finalize the upgrade:
@@ -287,7 +287,7 @@ Verify that no pod is deleted and then upgrade as normal. A new StatefulSet will
 
 For more information about upgrading a cluster to the latest major release of CockroachDB, see [Upgrade to CockroachDB v21.1](https://www.cockroachlabs.com/docs/stable/upgrade-cockroach-version.html).
 
-Note that there are some backward-incompatible changes to SQL features between versions 20.2 and 21.1. For details, see the [CockroachDB v22.2.2 release notes](https://www.cockroachlabs.com/docs/releases/v22.2.2.html#backward-incompatible-changes).
+Note that there are some backward-incompatible changes to SQL features between versions 20.2 and 21.1. For details, see the [CockroachDB v22.2.3 release notes](https://www.cockroachlabs.com/docs/releases/v22.2.3.html#backward-incompatible-changes).
 
 ## Configuration
 
@@ -316,7 +316,7 @@ For details see the [`values.yaml`](values.yaml) file.
 | `conf.store.size`                                         | CockroachDB storage size                                        | `""`                                                  |
 | `conf.store.attrs`                                        | CockroachDB storage attributes                                  | `""`                                                  |
 | `image.repository`                                        | Container image name                                            | `cockroachdb/cockroach`                               |
-| `image.tag`                                               | Container image tag                                             | `v22.2.2`                                             |
+| `image.tag`                                               | Container image tag                                             | `v22.2.3`                                             |
 | `image.pullPolicy`                                        | Container pull policy                                           | `IfNotPresent`                                        |
 | `image.credentials`                                       | `registry`, `user` and `pass` credentials to pull private image | `{}`                                                  |
 | `statefulset.replicas`                                    | StatefulSet replicas number                                     | `3`                                                   |

charts/cockroach-labs/cockroachdb/values.yaml

@@ -1,7 +1,7 @@
 # Generated file, DO NOT EDIT. Source: build/templates/values.yaml
 image:
   repository: cockroachdb/cockroach
-  tag: v22.2.2
+  tag: v22.2.3
   pullPolicy: IfNotPresent
   credentials: {}
     # registry: docker.io

charts/datadog/datadog/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Datadog changelog
 
+## 3.10.1
+
+* Fix: add missing `DAC_READ_SEARCH` capability in agent PSP and SCC (openshift)
+
+## 3.10.0
+
+* Default `Agent` and `Cluster-Agent` image tags to `7.42.0`.
+
 ## 3.9.0
 
 * Set processDiscovery to be true by default

charts/datadog/datadog/Chart.yaml

@@ -19,4 +19,4 @@ name: datadog
 sources:
 - https://app.datadoghq.com/account/settings#agent/kubernetes
 - https://github.com/DataDog/datadog-agent
-version: 3.9.0
+version: 3.10.1

charts/datadog/datadog/README.md

@@ -1,6 +1,6 @@
 # Datadog
 
-![Version: 3.9.0](https://img.shields.io/badge/Version-3.9.0-informational?style=flat-square) ![AppVersion: 7](https://img.shields.io/badge/AppVersion-7-informational?style=flat-square)
+![Version: 3.10.1](https://img.shields.io/badge/Version-3.10.1-informational?style=flat-square) ![AppVersion: 7](https://img.shields.io/badge/AppVersion-7-informational?style=flat-square)
 
 [Datadog](https://www.datadoghq.com/) is a hosted infrastructure monitoring platform. This chart adds the Datadog Agent to all nodes in your cluster via a DaemonSet. It also optionally depends on the [kube-state-metrics chart](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics). For more information about monitoring Kubernetes with Datadog, please refer to the [Datadog documentation website](https://docs.datadoghq.com/agent/basic_agent_usage/kubernetes/).
 
@@ -443,7 +443,7 @@ helm install <RELEASE_NAME> \
 | agents.image.pullPolicy | string | `"IfNotPresent"` | Datadog Agent image pull policy |
 | agents.image.pullSecrets | list | `[]` | Datadog Agent repository pullSecret (ex: specify docker registry credentials) |
 | agents.image.repository | string | `nil` | Override default registry + image.name for Agent |
-| agents.image.tag | string | `"7.41.1"` | Define the Agent version to use |
+| agents.image.tag | string | `"7.42.0"` | Define the Agent version to use |
 | agents.image.tagSuffix | string | `""` | Suffix to append to Agent tag |
 | agents.localService.forceLocalServiceEnabled | bool | `false` | Force the creation of the internal traffic policy service to target the agent running on the local node. By default, the internal traffic service is created only on Kubernetes 1.22+ where the feature became beta and enabled by default. This option allows to force the creation of the internal traffic service on kubernetes 1.21 where the feature was alpha and required a feature gate to be explicitly enabled. |
 | agents.localService.overrideName | string | `""` | Name of the internal traffic service to target the agent running on the local node |
@@ -454,7 +454,7 @@ helm install <RELEASE_NAME> \
 | agents.podSecurity.allowedUnsafeSysctls | list | `[]` | Allowed unsafe sysclts |
 | agents.podSecurity.apparmor.enabled | bool | `true` | If true, enable apparmor enforcement |
 | agents.podSecurity.apparmorProfiles | list | `["runtime/default","unconfined"]` | Allowed apparmor profiles |
-| agents.podSecurity.capabilities | list | `["SYS_ADMIN","SYS_RESOURCE","SYS_PTRACE","NET_ADMIN","NET_BROADCAST","NET_RAW","IPC_LOCK","CHOWN","AUDIT_CONTROL","AUDIT_READ"]` | Allowed capabilities |
+| agents.podSecurity.capabilities | list | `["SYS_ADMIN","SYS_RESOURCE","SYS_PTRACE","NET_ADMIN","NET_BROADCAST","NET_RAW","IPC_LOCK","CHOWN","AUDIT_CONTROL","AUDIT_READ","DAC_READ_SEARCH"]` | Allowed capabilities |
 | agents.podSecurity.defaultApparmor | string | `"runtime/default"` | Default AppArmor profile for all containers but system-probe |
 | agents.podSecurity.podSecurityPolicy.create | bool | `false` | If true, create a PodSecurityPolicy resource for Agent pods |
 | agents.podSecurity.privileged | bool | `false` | If true, Allow to run privileged containers |
@@ -501,7 +501,7 @@ helm install <RELEASE_NAME> \
 | clusterAgent.image.pullPolicy | string | `"IfNotPresent"` | Cluster Agent image pullPolicy |
 | clusterAgent.image.pullSecrets | list | `[]` | Cluster Agent repository pullSecret (ex: specify docker registry credentials) |
 | clusterAgent.image.repository | string | `nil` | Override default registry + image.name for Cluster Agent |
-| clusterAgent.image.tag | string | `"7.41.1"` | Cluster Agent image tag to use |
+| clusterAgent.image.tag | string | `"7.42.0"` | Cluster Agent image tag to use |
 | clusterAgent.livenessProbe | object | Every 15s / 6 KO / 1 OK | Override default Cluster Agent liveness probe settings |
 | clusterAgent.metricsProvider.aggregator | string | `"avg"` | Define the aggregator the cluster agent will use to process the metrics. The options are (avg, min, max, sum) |
 | clusterAgent.metricsProvider.createReaderRbac | bool | `true` | Create `external-metrics-reader` RBAC automatically (to allow HPA to read data from Cluster Agent) |
@@ -547,7 +547,7 @@ helm install <RELEASE_NAME> \
 | clusterChecksRunner.image.pullPolicy | string | `"IfNotPresent"` | Datadog Agent image pull policy |
 | clusterChecksRunner.image.pullSecrets | list | `[]` | Datadog Agent repository pullSecret (ex: specify docker registry credentials) |
 | clusterChecksRunner.image.repository | string | `nil` | Override default registry + image.name for Cluster Check Runners |
-| clusterChecksRunner.image.tag | string | `"7.41.1"` | Define the Agent version to use |
+| clusterChecksRunner.image.tag | string | `"7.42.0"` | Define the Agent version to use |
 | clusterChecksRunner.image.tagSuffix | string | `""` | Suffix to append to Agent tag |
 | clusterChecksRunner.livenessProbe | object | Every 15s / 6 KO / 1 OK | Override default agent liveness probe settings |
 | clusterChecksRunner.networkPolicy.create | bool | `false` | If true, create a NetworkPolicy for the cluster checks runners. DEPRECATED. Use datadog.networkPolicy.create instead |

charts/datadog/datadog/values.yaml

@@ -794,7 +794,7 @@ clusterAgent:
     name: cluster-agent
 
     # clusterAgent.image.tag -- Cluster Agent image tag to use
-    tag: 7.41.1
+    tag: 7.42.0
 
     # clusterAgent.image.digest -- Cluster Agent image digest to use, takes precedence over tag if specified
     digest: ""
@@ -1116,7 +1116,7 @@ agents:
     name: agent
 
     # agents.image.tag -- Define the Agent version to use
-    tag: 7.41.1
+    tag: 7.42.0
 
     # agents.image.digest -- Define Agent image digest to use, takes precedence over tag if specified
     digest: ""
@@ -1197,6 +1197,7 @@ agents:
       - CHOWN
       - AUDIT_CONTROL
       - AUDIT_READ
+      - DAC_READ_SEARCH
 
     # agents.podSecurity.allowedUnsafeSysctls -- Allowed unsafe sysclts
     allowedUnsafeSysctls: []
@@ -1556,7 +1557,7 @@ clusterChecksRunner:
     name: agent
 
     # clusterChecksRunner.image.tag -- Define the Agent version to use
-    tag: 7.41.1
+    tag: 7.42.0
 
     # clusterChecksRunner.image.digest -- Define Agent image digest to use, takes precedence over tag if specified
     digest: ""

charts/f5/nginx-ingress/Chart.yaml

@@ -5,10 +5,10 @@ annotations:
   catalog.cattle.io/kube-version: '>= 1.21.0-0'
   catalog.cattle.io/release-name: nginx-ingress
 apiVersion: v2
-appVersion: 3.0.0
+appVersion: 3.0.1
 description: NGINX Ingress Controller
 home: https://github.com/nginxinc/kubernetes-ingress
-icon: https://raw.githubusercontent.com/nginxinc/kubernetes-ingress/v3.0.0/deployments/helm-chart/chart-icon.png
+icon: https://raw.githubusercontent.com/nginxinc/kubernetes-ingress/v3.0.1/deployments/helm-chart/chart-icon.png
 keywords:
 - ingress
 - nginx
@@ -18,6 +18,6 @@ maintainers:
   name: nginxinc
 name: nginx-ingress
 sources:
-- https://github.com/nginxinc/kubernetes-ingress/tree/v3.0.0/deployments/helm-chart
+- https://github.com/nginxinc/kubernetes-ingress/tree/v3.0.1/deployments/helm-chart
 type: application
-version: 0.16.0
+version: 0.16.1

charts/f5/nginx-ingress/README.md

@@ -23,7 +23,7 @@ This step is required if you're installing the chart using its sources. Addition
 
 1. Clone the Ingress Controller repo:
     ```console
-    $ git clone https://github.com/nginxinc/kubernetes-ingress --branch v3.0.0
+    $ git clone https://github.com/nginxinc/kubernetes-ingress --branch v3.0.1
     ```
     **Note**: If you want to use the experimental repository (`edge`), remove the `--branch` flag and value.
 
@@ -140,7 +140,7 @@ $ kubectl delete -f crds/
 
 If you are running multiple Ingress Controller releases in your cluster with enabled custom resources, the releases will share a single version of the CRDs. As a result, make sure that the Ingress Controller versions match the version of the CRDs. Additionally, when uninstalling a release, ensure that you don’t remove the CRDs until there are no other Ingress Controller releases running in the cluster.
 
-See [running multiple ingress controllers](https://docs.nginx.com/nginx-ingress-controller/installation/running-multiple-ingress-controllers/) for more details.
+See [running multiple Ingress Controllers](https://docs.nginx.com/nginx-ingress-controller/installation/running-multiple-ingress-controllers/) for more details.
 
 ## Configuration
 
@@ -159,14 +159,14 @@ Parameter | Description | Default
 `controller.logLevel` | The log level of the Ingress Controller. | 1
 `controller.image.digest ` | The image digest of the Ingress Controller. | None
 `controller.image.repository` | The image repository of the Ingress Controller. | nginx/nginx-ingress
-`controller.image.tag` | The tag of the Ingress Controller image. | 3.0.0
+`controller.image.tag` | The tag of the Ingress Controller image. | 3.0.1
 `controller.image.pullPolicy` | The pull policy for the Ingress Controller image. | IfNotPresent
 `controller.lifecycle` | The lifecycle of the Ingress Controller pods. | {}
 `controller.customConfigMap` | The name of the custom ConfigMap used by the Ingress Controller. If set, then the default config is ignored. | ""
 `controller.config.name` | The name of the ConfigMap used by the Ingress Controller. | Autogenerated
 `controller.config.annotations` | The annotations of the Ingress Controller configmap. | {}
 `controller.config.entries` | The entries of the ConfigMap for customizing NGINX configuration. See [ConfigMap resource docs](https://docs.nginx.com/nginx-ingress-controller/configuration/global-configuration/configmap-resource/) for the list of supported ConfigMap keys. | {}
-`controller.customPorts` | A list of custom ports to expose on the NGINX ingress controller pod. Follows the conventional Kubernetes yaml syntax for container ports. | []
+`controller.customPorts` | A list of custom ports to expose on the NGINX Ingress Controller pod. Follows the conventional Kubernetes yaml syntax for container ports. | []
 `controller.defaultTLS.cert` | The base64-encoded TLS certificate for the default HTTPS server.  **Note:** By default, a pre-generated self-signed certificate is used. It is recommended that you specify your own certificate. Alternatively, omitting the default server secret completely will configure NGINX to reject TLS connections to the default server. | A pre-generated self-signed certificate.
 `controller.defaultTLS.key` | The base64-encoded TLS key for the default HTTPS server. **Note:** By default, a pre-generated key is used. It is recommended that you specify your own key. Alternatively, omitting the default server secret completely will configure NGINX to reject TLS connections to the default server.  | A pre-generated key.
 `controller.defaultTLS.secret` | The secret with a TLS certificate and key for the default HTTPS server. The value must follow the following format: `<namespace>/<name>`. Used as an alternative to specifying a certificate and key using `controller.defaultTLS.cert` and `controller.defaultTLS.key` parameters. **Note:** Alternatively, omitting the default server secret completely will configure NGINX to reject TLS connections to the default server. | None

charts/f5/nginx-ingress/values-icp.yaml

@@ -3,7 +3,7 @@ controller:
   nginxplus: true
   image:
     repository: mycluster.icp:8500/kube-system/nginx-plus-ingress
-    tag: "3.0.0"
+    tag: "3.0.1"
   nodeSelector:
     beta.kubernetes.io/arch: "amd64"
     proxy: true

charts/f5/nginx-ingress/values-plus.yaml

@@ -2,4 +2,4 @@ controller:
   nginxplus: true
   image:
     repository: nginx-plus-ingress
-    tag: "3.0.0"
+    tag: "3.0.1"

charts/f5/nginx-ingress/values.schema.json

@@ -222,7 +222,7 @@
         "customPorts": {
           "type": "array",
           "default": [],
-          "title": "The customPorts to expose on the NGINX ingress controller pod",
+          "title": "The customPorts to expose on the NGINX Ingress Controller pod",
           "items": {
             "type": "object",
             "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/v1.25.4/_definitions.json#/definitions/io.k8s.api.core.v1.ContainerPort"
@@ -425,7 +425,7 @@
           "type": "object",
           "default": {},
           "title": "The nodeSelector Schema",
-          "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/v1.25.4/_definitions.json#/definitions/io.k8s.api.core.v1.NodeSelector"
+          "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/v1.25.4/_definitions.json#/definitions/io.k8s.api.core.v1.PodSpec/properties/nodeSelector"
         },
         "terminationGracePeriodSeconds": {
           "type": "integer",
@@ -1161,12 +1161,10 @@
           ]
         },
         "priorityClassName": {
-          "type": "null",
-          "default": null,
+          "type": "string",
+          "default": "",
           "title": "The priorityClassName",
-          "examples": [
-            null
-          ]
+          "$ref": "https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/v1.25.4/_definitions.json#/definitions/io.k8s.api.core.v1.PodSpec/properties/priorityClassName"
         },
         "readyStatus": {
           "type": "object",
@@ -1353,7 +1351,7 @@
             "annotations": {},
             "extraLabels": {}
           },
-          "priorityClassName": null,
+          "priorityClassName": "",
           "readyStatus": {
             "enable": true,
             "port": 8081,
@@ -1655,7 +1653,7 @@
           "annotations": {},
           "extraLabels": {}
         },
-        "priorityClassName": null,
+        "priorityClassName": "",
         "readyStatus": {
           "enable": true,
           "port": 8081,

charts/f5/nginx-ingress/values.yaml

@@ -47,7 +47,7 @@ controller:
   ## The log level of the Ingress Controller.
   logLevel: 1
 
-  ## A list of custom ports to expose on the NGINX ingress controller pod. Follows the conventional Kubernetes yaml syntax for container ports.
+  ## A list of custom ports to expose on the NGINX Ingress Controller pod. Follows the conventional Kubernetes yaml syntax for container ports.
   customPorts: []
 
   image:
@@ -55,7 +55,7 @@ controller:
     repository: nginx/nginx-ingress
 
     ## The tag of the Ingress Controller image.
-    tag: "3.0.0"
+    tag: "3.0.1"
 
     ## The digest of the Ingress Controller image.
     ## If digest is specified it has precedence over tag and will be used instead
@@ -397,8 +397,8 @@ controller:
     ## The additional extra labels of the Ingress Controller pod.
     extraLabels: {}
 
-  ## The PriorityClass of the ingress controller pods.
-  priorityClassName:
+  ## The PriorityClass of the Ingress Controller pods.
+  # priorityClassName: ""
 
   readyStatus:
     ## Enables readiness endpoint "/nginx-ready". The endpoint returns a success code when NGINX has loaded all the config after startup.

charts/instana/instana-agent/Chart.yaml

@@ -23,4 +23,4 @@ maintainers:
 name: instana-agent
 sources:
 - https://github.com/instana/instana-agent-docker
-version: 1.2.49
+version: 1.2.50

charts/instana/instana-agent/templates/_helpers.tpl

@@ -321,3 +321,11 @@ failureThreshold: 3
   mountPath: /opt/instana/agent/etc/certs
   readOnly: true
 {{- end -}}
+
+
+{{- define "k8sensor.commonEnv" -}}
+{{- range $key, $value := .Values.agent.env }}
+- name: {{ $key }}
+  value: {{ $value | quote }}
+{{- end }}
+{{- end -}}

charts/instana/instana-agent/templates/k8s-sensor-deployment.yaml

@@ -104,6 +104,7 @@ spec:
             - name: CONFIG_PATH
               value: /root
             {{- end }}
+              {{- include "k8sensor.commonEnv" . | nindent 12 }}
 
           volumeMounts:
             - name: configuration

charts/instana/instana-agent/values.yaml

@@ -251,7 +251,6 @@ k8s_sensor:
         memory: 1536Mi
         # k8s_sensor.deployment.pod.limits.cpu sets the CPU units allocation limits for the agent pods.
         cpu: 500m
-
 kubernetes:
   # Configures use of a Deployment for the Kubernetes sensor rather than as a potential member of the DaemonSet. Is only accepted if k8s_sensor.deployment.enabled=false
   deployment:

charts/kong/kong/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## Unreleased
+
+
+## 2.15.3
+
+### Fixed
+
+* Changed `ingressController.readinessProbe` to use `/readyz` to prevent pods from becoming ready and serving 404s prior to the `ingress-controller` first syncing config to the `proxy` [#716](https://github.com/Kong/charts/pull/716).
+* Fixed incorrect `if` block order in volume mount templates.
+
 ## 2.15.2
 
 ### Fixed

charts/kong/kong/Chart.yaml

@@ -20,4 +20,4 @@ maintainers:
 name: kong
 sources:
 - https://github.com/Kong/charts/tree/main/charts/kong
-version: 2.15.2
+version: 2.15.3

charts/kong/kong/ci/test6-values.yaml

@@ -0,0 +1,34 @@
+# CI test for testing dbless deployment without ingress controllers
+# - disable ingress controller
+# - no static config
+ingressController:
+  enabled: false
+# - disable DB for kong
+env:
+  anonymous_reports: "off"
+  database: "off"
+postgresql:
+  enabled: false
+proxy:
+  type: NodePort
+deployment:
+  initContainers:
+    - name: "bash"
+      image: "bash:latest"
+      command: ["/bin/sh", "-c", "true"]
+      resources:
+        limits:
+          cpu: "100m"
+          memory: "64Mi"
+        requests:
+          cpu: "100m"
+          memory: "64Mi"
+      volumeMounts:
+      - name: "tmpdir"
+        mountPath: "/opt/tmp"
+  userDefinedVolumes:
+  - name: "tmpdir"
+    emptyDir: {}
+  userDefinedVolumeMounts:
+  - name: "tmpdir"
+    mountPath: "/opt/tmp"

charts/kong/kong/templates/_helpers.tpl

@@ -477,8 +477,8 @@ The name of the service used for the ingress controller's validation webhook
 {{- end }}
 
 {{- if (and (not .Values.ingressController.enabled) (eq .Values.env.database "off")) }}
-{{- $dblessSourceCount := (add (.Values.dblessConfig.configMap | len | min 1) (.Values.dblessConfig.secret | len | min 1) (.Values.dblessConfig.config | len | min 1)) -}}
-{{- if gt $dblessSourceCount 1 -}}
+  {{- $dblessSourceCount := (add (.Values.dblessConfig.configMap | len | min 1) (.Values.dblessConfig.secret | len | min 1) (.Values.dblessConfig.config | len | min 1)) -}}
+    {{- if gt $dblessSourceCount 1 -}}
       {{- fail "Ambiguous configuration: only one of of .Values.dblessConfig.configMap, .Values.dblessConfig.secret, and .Values.dblessConfig.config can be set." -}}
 - name: kong-custom-dbless-config-volume
     {{- if .Values.dblessConfig.configMap }}
@@ -491,8 +491,9 @@ The name of the service used for the ingress controller's validation webhook
   configMap:
     name: {{ template "kong.dblessConfig.fullname" . }}
     {{- end }}
+  {{- end }}
 {{- end }}
-{{- end }}
+
 {{- if .Values.ingressController.admissionWebhook.enabled }}
 - name: webhook-cert
   secret:
@@ -551,16 +552,16 @@ The name of the service used for the ingress controller's validation webhook
 {{- end }}
 {{- end }}
 {{- $dblessSourceCount := (add (.Values.dblessConfig.configMap | len | min 1) (.Values.dblessConfig.secret | len | min 1) (.Values.dblessConfig.config | len | min 1)) -}}
-{{- if gt $dblessSourceCount 1 -}}
-{{- if (and (not .Values.ingressController.enabled) (eq .Values.env.database "off")) }}
+  {{- if gt $dblessSourceCount 1 -}}
+    {{- if (and (not .Values.ingressController.enabled) (eq .Values.env.database "off")) }}
 - name: kong-custom-dbless-config-volume
   mountPath: /kong_dbless/
-{{- end }}
+    {{- end }}
+  {{- end }}
 {{- range .Values.secretVolumes }}
 - name:  {{ . }}
   mountPath: /etc/secrets/{{ . }}
 {{- end }}
-{{- end }}
 {{- range .Values.plugins.configMaps }}
 {{- $mountPath := printf "/opt/kong/plugins/%s" .pluginName }}
 - name:  kong-plugin-{{ .pluginName }}

charts/kong/kong/values.yaml

@@ -547,7 +547,7 @@ ingressController:
     failureThreshold: 3
   readinessProbe:
     httpGet:
-      path: "/healthz"
+      path: "/readyz"
       port: 10254
       scheme: HTTP
     initialDelaySeconds: 5

charts/new-relic/nri-bundle/Chart.lock

@@ -19,10 +19,10 @@ dependencies:
   version: 4.23.0
 - name: nri-kube-events
   repository: https://newrelic.github.io/nri-kube-events
-  version: 2.3.0
+  version: 2.3.1
 - name: newrelic-logging
   repository: https://newrelic.github.io/helm-charts
-  version: 1.12.2
+  version: 1.12.3
 - name: newrelic-pixie
   repository: https://newrelic.github.io/helm-charts
   version: 2.0.2
@@ -32,5 +32,5 @@ dependencies:
 - name: newrelic-infra-operator
   repository: https://newrelic.github.io/newrelic-infra-operator
   version: 2.0.0
-digest: sha256:c12a47cf7d26a072b077969a97d29ac894a5d296035e8b828f42b655feeb9d91
-generated: "2023-01-19T11:04:24.791848+01:00"
+digest: sha256:bef301b9b23e6f66db3547f42155116068219c9a274bc6cbef03a732a17d0cdf
+generated: "2023-01-19T18:36:55.128459929Z"

charts/new-relic/nri-bundle/Chart.yaml

@@ -31,11 +31,11 @@ dependencies:
 - condition: kubeEvents.enabled,nri-kube-events.enabled
   name: nri-kube-events
   repository: file://./charts/nri-kube-events
-  version: 2.3.0
+  version: 2.3.1
 - condition: logging.enabled,newrelic-logging.enabled
   name: newrelic-logging
   repository: file://./charts/newrelic-logging
-  version: 1.12.2
+  version: 1.12.3
 - condition: newrelic-pixie.enabled
   name: newrelic-pixie
   repository: file://./charts/newrelic-pixie
@@ -87,4 +87,4 @@ sources:
 - https://github.com/newrelic/helm-charts/tree/master/charts/newrelic-logging
 - https://github.com/newrelic/helm-charts/tree/master/charts/newrelic-pixie
 - https://github.com/newrelic/newrelic-infra-operator/tree/master/charts/newrelic-infra-operator
-version: 5.0.3
+version: 5.0.4

charts/new-relic/nri-bundle/charts/newrelic-logging/Chart.yaml

@@ -17,4 +17,4 @@ maintainers:
 - name: danybmx
 - name: sdaubin
 name: newrelic-logging
-version: 1.12.2
+version: 1.12.3

charts/new-relic/nri-bundle/charts/newrelic-logging/templates/daemonset-windows.yaml

@@ -22,8 +22,9 @@ spec:
       kubernetes.io/os: windows
   template:
     metadata:
-    {{- if $.Values.podAnnotations }}
       annotations:
+        checksum/fluent-bit-config: {{ include (print $.Template.BasePath "/configmap.yaml") $ | sha256sum }}
+    {{- if $.Values.podAnnotations }}
 {{ toYaml $.Values.podAnnotations | indent 8}}
     {{- end }}
       labels:

charts/new-relic/nri-bundle/charts/newrelic-logging/templates/daemonset.yaml

@@ -18,8 +18,9 @@ spec:
       release: {{.Release.Name }}
   template:
     metadata:
-    {{- if .Values.podAnnotations }}
       annotations:
+        checksum/fluent-bit-config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
+    {{- if .Values.podAnnotations }}
 {{ toYaml .Values.podAnnotations | indent 8}}
     {{- end }}
       labels:

charts/new-relic/nri-bundle/charts/nri-kube-events/Chart.yaml

@@ -33,4 +33,4 @@ sources:
 - https://github.com/newrelic/nri-kube-events/
 - https://github.com/newrelic/nri-kube-events/tree/main/charts/nri-kube-events
 - https://github.com/newrelic/infrastructure-agent/
-version: 2.3.0
+version: 2.3.1

charts/new-relic/nri-bundle/charts/nri-kube-events/values.yaml

@@ -27,7 +27,7 @@ images:
   agent:
     registry:
     repository: newrelic/k8s-events-forwarder
-    tag: 1.33.1
+    tag: 1.36.1
     pullPolicy: IfNotPresent
   # -- The secrets that are needed to pull images from a custom registry.
   pullSecrets: []

charts/pixie/pixie-operator-chart/Chart.yaml

@@ -6,4 +6,4 @@ apiVersion: v2
 icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/pixie/icon/color/pixie-icon-color.svg
 name: pixie-operator-chart
 type: application
-version: 0.0.3501
+version: 0.0.3601

charts/pixie/pixie-operator-chart/templates/deleter.yaml

@@ -19,7 +19,7 @@ spec:
               fieldPath: metadata.namespace
         - name: PL_VIZIER_NAME
           value: '{{ .Values.name }}'
-        image: gcr.io/pixie-oss/pixie-prod/operator/vizier_deleter:0.0.35
+        image: gcr.io/pixie-oss/pixie-prod/operator/vizier_deleter:0.0.36
         name: delete-job
       restartPolicy: Never
       serviceAccountName: pl-deleter-service-account

charts/redpanda/redpanda/Chart.yaml

@@ -26,4 +26,4 @@ name: redpanda
 sources:
 - https://github.com/redpanda-data/helm-charts
 type: application
-version: 2.5.2
+version: 2.6.1

charts/redpanda/redpanda/README.md

@@ -30,10 +30,41 @@ The Redpanda Helm chart is configured in the [`values.yaml`][values] file. To cu
 
 - Configure the deployed Kubernetes components.
 
-To learn how to override the default values in the `values.yaml` file, see the [Helm documentation](helm).
+To learn how to override the default values in the `values.yaml` file, see the [Helm documentation][helm].
 
 All configuration options for the Redpanda Helm chart are documented in the [`values.yaml`][values] file.
 
+## Upgrading Chart
+
+```bash
+helm upgrade [RELEASE_NAME] redpanda/redpanda
+```
+
+### From 2.6.x onwards
+
+In order to enable dedicated persistent volume for tiered storage cache, the `storage.tieredStoragePersistentVolume.enabled` need to be set to `true`.
+The `helm upgrade` will fail with the following error.
+```bash
+helm upgrade --namespace redpanda redpanda/redpanda \
+  --set storage.tieredStoragePersistentVolume.enabled=true \
+  --set storage.tieredConfig.cloud_storage_enabled=true \
+  --set storage.tieredConfig.cloud_storage_cache_directory=/some/path/for-tiered-storage
+Error: UPGRADE FAILED: cannot patch "redpanda" with kind StatefulSet: StatefulSet.apps "redpanda" is invalid: spec: Forbidden: updates to statefulset spec for fields other than 'replicas', 'template', 'updateStrategy', 'persistentVolumeClaimRetentionPolicy' and 'minReadySeconds' are forbidden
+```
+
+To be able to add PersistentVolume for tiered storage cache please delete StatefulSet with cascade orphan option to leave Pods behind.
+```bash
+kubectl delete sts redpanda --cascade=orphan
+```
+
+The `helm upgrade` should be able to succeed, but you need to manually do rolling update starting from ordinal 0 to ordinal N.
+
+```bash
+kubectl delete pod redpanda-0
+```
+
+Please wait for deleted Pod to be restarted and become ready in order to move to next Pod.
+
 ## Contributing
 
 If you have improvements that can be made to this Helm chart, please consider becoming a contributor.

charts/redpanda/redpanda/templates/_helpers.tpl

@@ -460,3 +460,18 @@ advertised-host returns a json sring with the data neded for configuring the adv
   {{- end -}}
   {{- toJson $host -}}
 {{- end -}}
+
+{{- define "is-licensed" -}}
+{{- toJson (dict "bool" (or (not (empty .Values.license_key)) (not (empty .Values.license_secret_ref)))) -}}
+{{- end -}}
+
+{{/*
+Set default path for tiered storage cache or use one provided
+*/}}
+{{- define "tieredStorage.cacheDirectory" -}}
+{{- if empty .Values.storage.tieredConfig.cloud_storage_cache_directory }}
+  {{- printf "/var/lib/redpanda/data/cloud_storage_cache" }}
+{{- else }}
+  {{- .Values.storage.tieredConfig.cloud_storage_cache_directory }}
+{{- end }}
+{{- end }}

charts/redpanda/redpanda/templates/configmap.yaml

@@ -50,6 +50,15 @@ data:
   {{- if and (not (hasKey .Values.config.cluster "storage_min_free_bytes")) ((include "redpanda-atleast-22-2-0" . | fromJson).bool) }}
     storage_min_free_bytes: {{ include "storage-min-free-bytes" . }}
   {{- end }}
+{{- end }}
+{{- if and (include "is-licensed" . | fromJson).bool .Values.storage.tieredConfig.cloud_storage_enabled }}
+  {{- $tieredStorageConfig := deepCopy .Values.storage.tieredConfig }}
+  {{- $tieredStorageConfig = unset $tieredStorageConfig "cloud_storage_cache_directory" }}
+  {{- if (include "redpanda-atleast-22-3-0" . | fromJson).bool }}
+    {{- toYaml $tieredStorageConfig | nindent 4 }}
+  {{- else }}
+    {{- unset $tieredStorageConfig "cloud_storage_credentials_source" | toYaml | nindent 4 }}
+  {{- end }}
 {{- end }}
   redpanda.yaml: |
     config_file: /etc/redpanda/redpanda.yaml
@@ -146,6 +155,13 @@ data:
             address: "{{ template "redpanda.fullname" $ }}-{{ . }}.{{ template "redpanda.internal.domain" $ }}"
             port: {{ $values.listeners.rpc.port }}
 {{- end }}
+{{- if and (include "is-licensed" . | fromJson).bool .Values.storage.tieredConfig.cloud_storage_enabled }}
+  {{- if (include "redpanda-atleast-22-3-0" . | fromJson).bool }}
+    {{- toYaml .Values.storage.tieredConfig | nindent 6 }}
+  {{- else }}
+    {{- unset .Values.storage.tieredConfig "cloud_storage_credentials_source" | toYaml | nindent 6 }}
+  {{- end }}
+{{- end }}
 {{- if .Values.listeners.schemaRegistry.enabled }}
     schema_registry:
       schema_registry_api:

charts/redpanda/redpanda/templates/statefulset.yaml

@@ -71,6 +71,16 @@ spec:
           volumeMounts:
             - name: datadir
               mountPath: /var/lib/redpanda/data
+{{- if and (include "is-licensed" . | fromJson).bool .Values.storage.tieredConfig.cloud_storage_enabled }}
+        - name: set-tiered-storage-cache-dir-ownership
+          image: busybox:latest
+          {{- $uid := dig "podSecurityContext" "runAsUser" .Values.statefulset.securityContext.runAsUser .Values.statefulset }}
+          {{- $gid := dig "podSecurityContext" "fsGroup" .Values.statefulset.securityContext.fsGroup .Values.statefulset }}
+          command: ["/bin/sh", "-c", 'chown {{ $uid }}:{{ $gid }} -R {{ template "tieredStorage.cacheDirectory" . }}']
+          volumeMounts:
+            - name: tiered-storage-dir
+              mountPath: {{ template "tieredStorage.cacheDirectory" . }}
+{{- end }}
         - name: {{ template "redpanda.name" . }}-configurator
           image: {{ .Values.image.repository}}:{{ template "redpanda.tag" . }}
           command: ["/bin/bash", "-c"]
@@ -296,6 +306,10 @@ spec:
 {{- end }}
             - name: datadir
               mountPath: /var/lib/redpanda/data
+{{- if and (include "is-licensed" . | fromJson).bool .Values.storage.tieredConfig.cloud_storage_enabled }}
+            - name: tiered-storage-dir
+              mountPath: {{ template "tieredStorage.cacheDirectory" . }}
+{{- end }}
             - name: config
               mountPath: /etc/redpanda
 {{- if (include "tls-enabled" . | fromJson).bool }}
@@ -329,6 +343,19 @@ spec:
             path: {{ .Values.storage.hostPath | quote }}
 {{- else }}
           emptyDir: {}
+{{- end }}
+{{- if and (include "is-licensed" . | fromJson).bool .Values.storage.tieredConfig.cloud_storage_enabled }}
+        - name: tiered-storage-dir
+{{- if .Values.storage.tieredStoragePersistentVolume.enabled }}
+          persistentVolumeClaim:
+            claimName: tiered-storage-dir
+{{- else if .Values.storage.tieredStorageHostPath }}
+          hostPath:
+            path: {{ .Values.storage.tieredStorageHostPath | quote }}
+{{- else }}
+          emptyDir:
+            sizeLimit: {{ .Values.storage.tieredConfig.cloud_storage_cache_size }}
+{{- end }}
 {{- end }}
         - name: {{ template "redpanda.fullname" . }}
           configMap:
@@ -406,8 +433,9 @@ spec:
 {{- with .Values.statefulset.tolerations }}
       tolerations: {{- toYaml . | nindent 8 }}
 {{- end }}
-{{- if .Values.storage.persistentVolume.enabled }}
+{{- if or .Values.storage.persistentVolume.enabled (and (include "is-licensed" . | fromJson).bool .Values.storage.tieredConfig.cloud_storage_enabled .Values.storage.tieredStoragePersistentVolume.enabled) }}
   volumeClaimTemplates:
+{{- if .Values.storage.persistentVolume.enabled }}
     - metadata:
         name: datadir
         labels:
@@ -436,3 +464,33 @@ spec:
           requests:
             storage: {{ .Values.storage.persistentVolume.size | quote }}
 {{- end }}
+{{- if and (include "is-licensed" . | fromJson).bool .Values.storage.tieredConfig.cloud_storage_enabled .Values.storage.tieredStoragePersistentVolume.enabled }}
+    - metadata:
+        name: tiered-storage-dir
+        labels:
+          app.kubernetes.io/name: {{ template "redpanda.name" . }}
+          app.kubernetes.io/instance: {{ .Release.Name | quote }}
+          app.kubernetes.io/component: {{ template "redpanda.name" . }}
+  {{- with .Values.storage.tieredStoragePersistentVolume.labels }}
+    {{- toYaml . | nindent 10 }}
+  {{- end }}
+  {{- with .Values.commonLabels }}
+    {{- toYaml . | nindent 10 }}
+  {{- end }}
+  {{- with .Values.storage.tieredStoragePersistentVolume.annotations }}
+        annotations: {{- toYaml . | nindent 10 }}
+  {{- end }}
+      spec:
+        accessModes: ["ReadWriteOnce"]
+  {{- if .Values.storage.tieredStoragePersistentVolume.storageClass }}
+    {{- if (eq "-" .Values.storage.tieredStoragePersistentVolume.storageClass) }}
+        storageClassName: ""
+    {{- else }}
+        storageClassName: {{ .Values.storage.tieredStoragePersistentVolume.storageClass | quote }}
+    {{- end }}
+  {{- end }}
+        resources:
+          requests:
+            storage: {{ .Values.storage.tieredConfig.cloud_storage_cache_size }}
+{{- end }}
+{{- end }}

charts/redpanda/redpanda/values.schema.json

@@ -34,7 +34,7 @@
     },
     "license_key": {
       "type": "string",
-      "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$",
+      "pattern": "^(?:[A-Za-z0-9+/.])*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$",
       "deprecated": true
     },
     "license_secret_ref": {
@@ -288,6 +288,9 @@
         "hostPath": {
           "type": "string"
         },
+        "tieredStorageHostPath": {
+          "type": "string"
+        },
         "persistentVolume": {
           "type": "object",
           "required": [
@@ -315,6 +318,112 @@
               "type": "object"
             }
           }
+        },
+        "tieredStoragePersistentVolume": {
+          "type": "object",
+          "required": [
+            "enabled",
+            "storageClass",
+            "labels",
+            "annotations"
+          ],
+          "properties": {
+            "enabled": {
+              "type": "boolean"
+            },
+            "storageClass": {
+              "type": "string"
+            },
+            "labels": {
+              "type": "object"
+            },
+            "annotations": {
+              "type": "object"
+            }
+          }
+        },
+        "tieredConfig":{
+          "type": "object",
+          "required": [
+            "cloud_storage_enabled",
+            "cloud_storage_region",
+            "cloud_storage_bucket"
+          ],
+          "properties": {
+            "cloud_storage_enable_remote_write": {
+              "type": "boolean"
+            },
+            "cloud_storage_enable_remote_read": {
+              "type": "boolean"
+            },
+            "cloud_storage_credentials_source": {
+              "type": "string",
+              "pattern": "^(config_file|aws_instance_metadata|sts|gcp_instance_metadata)$"
+            },
+            "cloud_storage_region": {
+              "type": "string"
+            },
+            "cloud_storage_bucket": {
+              "type": "string"
+            },
+            "cloud_storage_api_endpoint": {
+              "type": "string"
+            },
+            "cloud_storage_cache_size": {
+              "type": "integer"
+            },
+            "cloud_storage_cache_directory": {
+              "type": "string"
+            },
+            "cloud_storage_cache_check_interval": {
+              "type": "integer"
+            },
+            "cloud_storage_initial_backoff_ms": {
+              "type": "integer"
+            },
+            "cloud_storage_max_connections": {
+              "type": "integer"
+            },
+            "cloud_storage_segment_upload_timeout_ms": {
+              "type": "integer"
+            },
+            "cloud_storage_manifest_upload_timeout_ms": {
+              "type": "integer"
+            },
+            "cloud_storage_max_connection_idle_time_ms": {
+              "type": "integer"
+            },
+            "cloud_storage_segment_max_upload_interval_sec": {
+              "type": "integer"
+            },
+            "cloud_storage_trust_file": {
+              "type": "string"
+            },
+            "cloud_storage_upload_ctrl_update_interval_ms": {
+              "type": "integer"
+            },
+            "cloud_storage_upload_ctrl_p_coeff": {
+              "type": "integer"
+            },
+            "cloud_storage_upload_ctrl_d_coeff": {
+              "type": "integer"
+            },
+            "cloud_storage_upload_ctrl_min_shares": {
+              "type": "integer"
+            },
+            "cloud_storage_upload_ctrl_max_shares": {
+              "type": "integer"
+            },
+            "cloud_storage_reconciliation_interval_ms": {
+              "type": "integer"
+            },
+            "cloud_storage_disable_tls": {
+              "type": "boolean"
+            },
+            "cloud_storage_api_endpoint_port": {
+              "type": "integer"
+            }
+          }
         }
       }
     },

charts/redpanda/redpanda/values.yaml

@@ -232,6 +232,25 @@ storage:
   # If not specified, then `emptyDir` will be used instead.
   # If specified, but `persistentVolume.enabled` is `true`, then has no effect.
   hostPath: ""
+  # Absolute path on host to store Redpanda's tiered storage cache data.
+  # If not specified, then `emptyDir` will be used instead.
+  # If specified, but `tieredStoragePersistentVolume.enabled` is `true`, then has no effect.
+  tieredStorageHostPath: ""
+  # If `enabled` is `true` then a PersistentVolumeClaim will be created for tiered storage cache and
+  # used to store data retrieved from cloud storage (eg. S3), otherwise `hostPath` is used.
+  tieredStoragePersistentVolume:
+    enabled: false
+    # If defined, then `storageClassName: <storageClass>`.
+    # If set to "-", then `storageClassName: ""`, which disables dynamic
+    # provisioning.
+    # If undefined or empty (default), then no `storageClassName` spec is set,
+    # so the default provisioner will be chosen (gp2 on AWS, standard on
+    # GKE, AWS & OpenStack).
+    storageClass: ""
+    # Additional labels to apply to the created PersistentVolumeClaims.
+    labels: {}
+    # Additional annotations to apply to the created PersistentVolumeClaims.
+    annotations: {}
   # If `enabled` is `true` then a PersistentVolumeClaim will be created and
   # used to store Redpanda's data, otherwise `hostPath` is used.
   persistentVolume:
@@ -248,6 +267,133 @@ storage:
     labels: {}
     # Additional annotations to apply to the created PersistentVolumeClaims.
     annotations: {}
+  # Tiered Storage helps to lower storage costs by offloading log segments to cloud storage.
+  # You can specify the amount of local storage you want to retain in local storage.
+  # You don't need to specify which log segments you want to move because Redpanda moves them automatically
+  # based on cluster-level configuration properties. Redpanda Tiered Storage indexes where data is offloaded,
+  # so it can retrieve the data when you need it.
+  #
+  # Prerequisite:
+  # * AWS S3 bucket or GCP bucket or Azure blob storage
+  # * IAM role that has access to bucket
+  #
+  # REF: https://docs.redpanda.com/docs/manage/tiered-storage/#tiered-storage-configuration-properties
+  #
+  # Topic configuration flags override any cluster-level configuration. For example, on new topics,
+  # if `cloud_storage_enable_remote_write` is set to `true`, you can set `redpanda.remote.write` to `false`
+  # to turn it off for a particular topic. Or, if you have Tiered Storage turned off for the cluster, you can enable it
+  # for individual topics with the topic flags. When cluster-level properties are changed,
+  # the changes apply only to new topics, not existing topics.
+  #
+  # REF: https://docs.redpanda.com/docs/manage/tiered-storage/#enable-tiered-storage-for-a-topic
+  tieredConfig:
+    # Global flag that enables Tiered Storage feature if license is provided.
+    # Default is false.
+    cloud_storage_enabled: false
+    # Cluster wide config option to enable data upload from Redpanda to cloud storage if set to true.
+    cloud_storage_enable_remote_write: true
+    # Cluster wide config option to enable Redpanda to fetch data from cloud storage if set to true.
+    cloud_storage_enable_remote_read: true
+
+    # `cloud_storage_credentials_source` configuration option is available starting from 22.3.X
+    #
+    # Possible values:
+    # `config_file` - If IAM roles are not available, specify credentials in the cluster configuration file.
+    # `aws_instance_metadata` - For an AWS EC2 instance, use the instance metadata API from AWS.
+    # `sts` - For AWS on Kubernetes, use the Secure Token Service (STS).
+    # `gcp_instance_metadata` - For a VM running on GCP, or for Google Kubernetes Engine (GKE), use the instance metadata API from GCP.
+    #
+    # REF: https://docs.redpanda.com/docs/manage/security/iam-roles/#configuring-iam-roles
+    cloud_storage_credentials_source: config_file
+
+    # Cloud storage region. Required.
+    cloud_storage_region: ""
+    # Cloud storage bucket name. Required.
+    cloud_storage_bucket: ""
+    # Cloud storage access key used to authenticated if `cloud_storage_credentials_source` is set to `config`
+    # cloud_storage_access_key: ""
+    # Cloud storage secret key used to authenticated if `cloud_storage_credentials_source` is set to `config`
+    # cloud_storage_secret_key: ""
+    # API endpoint.
+    #
+    # - For AWS, this can be left blank. It’s generated automatically using the region and bucket.
+    #
+    # - For Google Cloud Service, use storage.googleapis.com.
+    # cloud_storage_api_endpoint: ""
+
+    # Maximum size of the disk cache used by Tiered Storage.
+    # Default is 20 GiB.
+    cloud_storage_cache_size: 21474836480
+    # The directory for the Tiered Storage cache. You must specify the full path. Default is: <redpanda-data-directory>/cloud_storage_cache.
+    # cloud_storage_cache_directory: ""
+
+    # The time, in milliseconds, between cache checks. The size of the cache can grow quickly,
+    # so it’s important to have a small interval between checks, but if the checks are too frequent,
+    # they consume a lot of resources.
+    # Default is 30000 ms.
+    # cloud_storage_cache_check_interval: 30000
+
+    # The time, in milliseconds, that is used as an initial backoff interval in the exponential
+    # backoff algorithm to handle an error.
+    # Default is 100 ms.
+    # cloud_storage_initial_backoff_ms: 100
+
+    # The maximum number of connections to cloud storage on a node per CPU.
+    # Remote read and remote write share the same pool of connections.
+    # This means that if a connection is being used to upload a segment, it cannot be used to download another segment.
+    # If this value is too small, some workloads might starve for connections, which results in delayed uploads and downloads.
+    # If this value is too large, Redpanda tries to upload a lot of files at the same time and might overwhelm the system.
+    # Default is 20.
+    # cloud_storage_max_connections: 20
+
+    # Timeout for segment upload. Redpanda retries the upload after the timeout.
+    # Default is 30000 ms.
+    # cloud_storage_segment_upload_timeout_ms: 30000
+
+    # Timeout for manifest upload. Redpanda retries the upload after the timeout.
+    # Default is 10000 ms.
+    # cloud_storage_manifest_upload_timeout_ms: 10000
+
+    # The maximum idle time for persistent HTTP connections. Differs depending on the cloud provider.
+    # Default is 5000 ms, which is sufficient for most providers.
+    # cloud_storage_max_connection_idle_time_ms: 5000
+
+    # Sets the number of seconds for idle timeout. If this property is empty, Redpanda uploads metadata to the cloud storage,
+    # but the segment is not uploaded until it reaches the segment.bytes size.
+    # By default, the property is empty.
+    # cloud_storage_segment_max_upload_interval_sec: 1
+    # The public certificate used to validate the TLS connection to cloud storage. If this is empty, Redpanda uses your operating system's CA cert pool.
+    # cloud_storage_trust_file: ""
+
+    # Under normal circumstances, you should not need to configure the following properties:
+
+    # The recompute interval for the upload controller. Default is 60000 ms.
+    # cloud_storage_upload_ctrl_update_interval_ms: 60000
+
+    # The proportional coefficient for the upload controller. Default is -2.
+    # cloud_storage_upload_ctrl_p_coeff: -2
+
+    # The derivative coefficient for the upload controller. Default is 0.
+    # cloud_storage_upload_ctrl_d_coeff: 0
+
+    # The minimum number of I/O and CPU shares that the remote write process can use. Default is 100.
+    # cloud_storage_upload_ctrl_min_shares: 100
+
+    # The maximum number of I/O and CPU shares that the remote write process can use. Default is 1000.
+    # cloud_storage_upload_ctrl_max_shares: 1000
+
+    # Sets the interval, in milliseconds, used to reconcile partitions that need to be uploaded.
+    # A long reconciliation interval can result in a delayed reaction to topic creation,
+    # topic deletion, or leadership rebalancing events. A short reconciliation interval
+    # guarantees that new partitions are picked up quickly, but the process uses more resources.
+    # Default is 10000 ms.
+    # cloud_storage_reconciliation_interval_ms: 10000
+
+    # Disables TLS encryption. You can set this to true if TLS termination is done by the proxy, such as HAProxy. Default is false.
+    # cloud_storage_disable_tls: false
+
+    # Overrides the default API endpoint port. Default is 443.
+    # cloud_storage_api_endpoint_port: 443
 
 post_install_job:
   enabled: true
@@ -333,7 +479,7 @@ statefulset:
     topologyKey: kubernetes.io/hostname
     # Type of anti-affinity rules: either `soft`, `hard` or empty value (which
     # disables anti-affinity rules).
-    type: soft
+    type: hard
     # Weight for `soft` anti-affinity rules.
     # Does not apply for other anti-affinity types.
     weight: 100
@@ -619,17 +765,6 @@ config:
   # advertised_kafka_api: None                                     # Address of Kafka API published to the clients
   # advertised_pandaproxy_api: None                                # Rest API address and port to publish to client
   # advertised_rpc_api: None                                       # Address of RPC endpoint published to other cluster members
-  # cloud_storage_access_key: None                                 # AWS access key
-  # cloud_storage_api_endpoint: None                               # Optional API endpoint
-  # cloud_storage_api_endpoint_port: 443                           # TLS port override
-  # cloud_storage_bucket: None                                     # AWS bucket that should be used to store data
-  # cloud_storage_disable_tls: false                               # Disable TLS for all S3 connections
-  # cloud_storage_enabled: false                                   # Enable archival storage
-  # cloud_storage_max_connections: 20                              # Max number of simultaneous uploads to S3
-  # cloud_storage_reconciliation_ms: 10s                           # Interval at which the archival service runs reconciliation (ms)
-  # cloud_storage_region: None                                     # AWS region that houses the bucket used for storage
-  # cloud_storage_secret_key: None                                 # AWS secret key
-  # cloud_storage_trust_file: None                                 # Path to certificate that should be used to validate server certificate during TLS handshake
   # default_topic_partitions: 1                                    # Default number of partitions per topic
   # default_topic_replications: 3                                  # Default replication factor for new topics
   # enable_admin_api: true                                         # Enable the admin API

charts/speedscale/speedscale-operator/Chart.yaml

@@ -4,7 +4,7 @@ annotations:
   catalog.cattle.io/kube-version: '>= 1.17.0-0'
   catalog.cattle.io/release-name: speedscale-operator
 apiVersion: v1
-appVersion: 1.2.231
+appVersion: 1.2.252
 description: Stress test your APIs with real world scenarios.  Collect and replay
   traffic without scripting.
 home: https://speedscale.com
@@ -24,4 +24,4 @@ maintainers:
 - email: support@speedscale.com
   name: Speedscale Support
 name: speedscale-operator
-version: 1.2.16
+version: 1.2.17

charts/speedscale/speedscale-operator/README.md

@@ -101,10 +101,10 @@ _See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command documen
 A major chart version change (like v1.2.3 -> v2.0.0) indicates that there is an
 incompatible breaking change needing manual actions.
 
-### Upgrade to 1.2.16
+### Upgrade to 1.2.17
 
 ```bash
-kubectl apply --server-side -f https://raw.githubusercontent.com/speedscale/operator-helm/main/1.2.16/templates/crds/trafficreplays.yaml
+kubectl apply --server-side -f https://raw.githubusercontent.com/speedscale/operator-helm/main/1.2.17/templates/crds/trafficreplays.yaml
 ```
 
 ### Upgrade to 1.1.0

charts/speedscale/speedscale-operator/app-readme.md

@@ -101,10 +101,10 @@ _See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command documen
 A major chart version change (like v1.2.3 -> v2.0.0) indicates that there is an
 incompatible breaking change needing manual actions.
 
-### Upgrade to 1.2.16
+### Upgrade to 1.2.17
 
 ```bash
-kubectl apply --server-side -f https://raw.githubusercontent.com/speedscale/operator-helm/main/1.2.16/templates/crds/trafficreplays.yaml
+kubectl apply --server-side -f https://raw.githubusercontent.com/speedscale/operator-helm/main/1.2.17/templates/crds/trafficreplays.yaml
 ```
 
 ### Upgrade to 1.1.0

charts/speedscale/speedscale-operator/templates/deployments.yaml

@@ -46,6 +46,12 @@ spec:
         envFrom:
         - configMapRef:
             name: speedscale-operator
+        # https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#container-v1-core
+        # When a key exists in multiple sources, the value associated with the last source will take precedence.
+        # Values defined by an Env with a duplicate key will take precedence.
+        - configMapRef:
+            name: speedscale-operator-override
+            optional: true
         - secretRef:
             name: '{{ ne .Values.apiKeySecret "" | ternary .Values.apiKeySecret "speedscale-apikey" }}'
             optional: false

charts/speedscale/speedscale-operator/values.yaml

@@ -20,7 +20,7 @@ clusterName: "my-cluster"
 # Speedscale components image settings.
 image:
   registry: gcr.io/speedscale
-  tag: v1.2.231
+  tag: v1.2.252
   pullPolicy: Always
 
 # Log level for Speedscale components.

index.yaml

@@ -80,6 +80,51 @@ entries:
     - assets/datawiza/access-broker-0.1.1.tgz
     version: 0.1.1
   airflow:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Apache Airflow
+      catalog.cattle.io/kube-version: '>=1.19-0'
+      catalog.cattle.io/release-name: airflow
+      category: WorkFlow
+      licenses: Apache-2.0
+    apiVersion: v2
+    appVersion: 2.5.1
+    created: "2023-01-26T17:15:02.514228398Z"
+    dependencies:
+    - condition: redis.enabled
+      name: redis
+      repository: file://./charts/redis
+      version: 17.x.x
+    - condition: postgresql.enabled
+      name: postgresql
+      repository: file://./charts/postgresql
+      version: 12.x.x
+    - name: common
+      repository: file://./charts/common
+      tags:
+      - bitnami-common
+      version: 2.x.x
+    description: Apache Airflow is a tool to express and execute workflows as directed
+      acyclic graphs (DAGs). It includes utilities to schedule tasks, monitor task
+      progress and handle task dependencies.
+    digest: feb1f2534ec87e9c907349b42c5dbbe8162aa535725acfd21a2ba1523a4d44e9
+    home: https://github.com/bitnami/charts/tree/main/bitnami/airflow
+    icon: https://svn.apache.org/repos/asf/comdev/project-logos/originals/airflow-1.svg
+    keywords:
+    - apache
+    - airflow
+    - workflow
+    - dag
+    maintainers:
+    - name: Bitnami
+      url: https://github.com/bitnami/charts
+    name: airflow
+    sources:
+    - https://github.com/bitnami/containers/tree/main/bitnami/airflow
+    - https://airflow.apache.org/
+    urls:
+    - assets/bitnami/airflow-14.0.9.tgz
+    version: 14.0.9
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: Apache Airflow
@@ -511,6 +556,43 @@ entries:
     - assets/ambassador/ambassador-6.7.1100.tgz
     version: 6.7.1100
   argo-cd:
+  - annotations:
+      artifacthub.io/changes: |
+        - "[Changed]: Disable Redis exporter by default"
+        - "[Changed]: Use bitnami Redis exporter image for redis-ha"
+        - "[Docs]: Fixed defaults for Redis exporter"
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Argo CD
+      catalog.cattle.io/kube-version: '>=1.22.0-0'
+      catalog.cattle.io/release-name: argo-cd
+    apiVersion: v2
+    appVersion: v2.5.8
+    created: "2023-01-26T17:15:02.011619323Z"
+    dependencies:
+    - condition: redis-ha.enabled
+      name: redis-ha
+      repository: file://./charts/redis-ha
+      version: 4.22.4
+    description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery
+      tool for Kubernetes.
+    digest: 5cac1ba2ccf59e22c34527800041865323c8634db3a14c7b624f84efd438020d
+    home: https://github.com/argoproj/argo-helm
+    icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
+    keywords:
+    - argoproj
+    - argocd
+    - gitops
+    kubeVersion: '>=1.22.0-0'
+    maintainers:
+    - name: argoproj
+      url: https://argoproj.github.io/
+    name: argo-cd
+    sources:
+    - https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
+    - https://github.com/argoproj/argo-cd
+    urls:
+    - assets/argo/argo-cd-5.19.8.tgz
+    version: 5.19.8
   - annotations:
       artifacthub.io/changes: |
         - "[Changed]: Upgrade Redis exporter image to 1.45.0"
@@ -4185,6 +4267,27 @@ entries:
     - assets/cloudcasa/cloudcasa-0.1.000.tgz
     version: 0.1.000
   cockroachdb:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: CockroachDB
+      catalog.cattle.io/kube-version: '>=1.8-0'
+      catalog.cattle.io/release-name: cockroachdb
+    apiVersion: v1
+    appVersion: 22.2.3
+    created: "2023-01-26T17:15:03.177648648Z"
+    description: CockroachDB is a scalable, survivable, strongly-consistent SQL database.
+    digest: 54cfff3a3b6ed9572c537006a262f16c50e4a24084f8ed8c67b93b1d1422f9ad
+    home: https://www.cockroachlabs.com
+    icon: https://raw.githubusercontent.com/cockroachdb/cockroach/master/docs/media/cockroach_db.png
+    maintainers:
+    - email: helm-charts@cockroachlabs.com
+      name: cockroachlabs
+    name: cockroachdb
+    sources:
+    - https://github.com/cockroachdb/cockroach
+    urls:
+    - assets/cockroach-labs/cockroachdb-10.0.3.tgz
+    version: 10.0.3
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: CockroachDB
@@ -5224,6 +5327,43 @@ entries:
     - assets/weka/csi-wekafsplugin-0.6.400.tgz
     version: 0.6.400
   datadog:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Datadog
+      catalog.cattle.io/kube-version: '>=1.10-0'
+      catalog.cattle.io/release-name: datadog
+    apiVersion: v1
+    appVersion: "7"
+    created: "2023-01-26T17:15:03.261776866Z"
+    dependencies:
+    - condition: clusterAgent.metricsProvider.useDatadogMetrics
+      name: datadog-crds
+      repository: https://helm.datadoghq.com
+      tags:
+      - install-crds
+      version: 0.4.7
+    - condition: datadog.kubeStateMetricsEnabled
+      name: kube-state-metrics
+      repository: https://prometheus-community.github.io/helm-charts
+      version: 2.13.2
+    description: Datadog Agent
+    digest: 49733c16132da0c392afd24407e6330b76bc245e26d30aadd0fdfdafd41bddba
+    home: https://www.datadoghq.com
+    icon: https://datadog-live.imgix.net/img/dd_logo_70x75.png
+    keywords:
+    - monitoring
+    - alerting
+    - metric
+    maintainers:
+    - email: support@datadoghq.com
+      name: Datadog
+    name: datadog
+    sources:
+    - https://app.datadoghq.com/account/settings#agent/kubernetes
+    - https://github.com/DataDog/datadog-agent
+    urls:
+    - assets/datadog/datadog-3.10.1.tgz
+    version: 3.10.1
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: Datadog
@@ -8963,6 +9103,36 @@ entries:
     - assets/hpe/hpe-flexvolume-driver-3.1.000.tgz
     version: 3.1.000
   instana-agent:
+  - annotations:
+      artifacthub.io/links: |
+        - name: Instana website
+          url: https://www.instana.com
+        - name: Instana Helm charts
+          url: https://github.com/instana/helm-charts
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Instana Agent
+      catalog.cattle.io/kube-version: '>=1.21-0'
+      catalog.cattle.io/release-name: instana-agent
+    apiVersion: v2
+    appVersion: 1.239.0
+    created: "2023-01-26T17:15:11.340682371Z"
+    description: Instana Agent for Kubernetes
+    digest: 7b28573176a0795b8f37d1eb7c2498813d3673e8ba76a640c276c3b4dcb34e52
+    home: https://www.instana.com/
+    icon: https://agents.instana.io/helm/stan-logo-2020.png
+    maintainers:
+    - email: felix.marx@ibm.com
+      name: FelixMarxIBM
+    - email: henning.treu@ibm.com
+      name: htreu
+    - email: torsten.kohn@ibm.com
+      name: tkohn
+    name: instana-agent
+    sources:
+    - https://github.com/instana/instana-agent-docker
+    urls:
+    - assets/instana/instana-agent-1.2.50.tgz
+    version: 1.2.50
   - annotations:
       artifacthub.io/links: |
         - name: Instana website
@@ -11634,6 +11804,33 @@ entries:
     - assets/elastic/kibana-7.17.3.tgz
     version: 7.17.3
   kong:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Kong Gateway
+      catalog.cattle.io/release-name: kong
+    apiVersion: v2
+    appVersion: "3.1"
+    created: "2023-01-26T17:15:12.006777155Z"
+    dependencies:
+    - condition: postgresql.enabled
+      name: postgresql
+      repository: file://./charts/postgresql
+      version: 11.9.13
+    description: The Cloud-Native Ingress and API-management
+    digest: c5981ac774ca8476d0e7b04b42bc8822d8906517012201241c24681842c31288
+    home: https://konghq.com/
+    icon: https://s3.amazonaws.com/downloads.kong/universe/assets/icon-kong-inc-large.png
+    maintainers:
+    - email: harry@konghq.com
+      name: hbagdi
+    - email: traines@konghq.com
+      name: rainest
+    name: kong
+    sources:
+    - https://github.com/Kong/charts/tree/main/charts/kong
+    urls:
+    - assets/kong/kong-2.15.3.tgz
+    version: 2.15.3
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: Kong Gateway
@@ -13348,10 +13545,36 @@ entries:
       catalog.cattle.io/kube-version: '>= 1.21.0-0'
       catalog.cattle.io/release-name: nginx-ingress
     apiVersion: v2
-    appVersion: 3.0.0
-    created: "2023-01-12T14:30:55.92717163-07:00"
+    appVersion: 3.0.1
+    created: "2023-01-26T17:15:10.597030519Z"
     description: NGINX Ingress Controller
-    digest: 5d2ec6563817c1e4a60a9e85402bc30f5af7a44884bdd1e3941936d5f768c678
+    digest: 4e4db6780fd73a772e0a77035323c70b94046e2688722ff01fa175da1fbc65ae
+    home: https://github.com/nginxinc/kubernetes-ingress
+    icon: https://raw.githubusercontent.com/nginxinc/kubernetes-ingress/v3.0.1/deployments/helm-chart/chart-icon.png
+    keywords:
+    - ingress
+    - nginx
+    kubeVersion: '>= 1.21.0-0'
+    maintainers:
+    - email: kubernetes@nginx.com
+      name: nginxinc
+    name: nginx-ingress
+    sources:
+    - https://github.com/nginxinc/kubernetes-ingress/tree/v3.0.1/deployments/helm-chart
+    type: application
+    urls:
+    - assets/f5/nginx-ingress-0.16.1.tgz
+    version: 0.16.1
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: NGINX Ingress Controller
+      catalog.cattle.io/kube-version: '>= 1.21.0-0'
+      catalog.cattle.io/release-name: nginx-ingress
+    apiVersion: v2
+    appVersion: 3.0.0
+    created: "2023-01-26T17:15:03.510299367Z"
+    description: NGINX Ingress Controller
+    digest: fa57471d0312adab2ad7ef03d70ab49881fdb4e8cac9f7b1fcb1bfb2239a4b06
     home: https://github.com/nginxinc/kubernetes-ingress
     icon: https://raw.githubusercontent.com/nginxinc/kubernetes-ingress/v3.0.0/deployments/helm-chart/chart-icon.png
     keywords:
@@ -13658,6 +13881,100 @@ entries:
     - assets/f5/nginx-service-mesh-0.2.100.tgz
     version: 0.2.100
   nri-bundle:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: New Relic
+      catalog.cattle.io/release-name: nri-bundle
+    apiVersion: v2
+    created: "2023-01-26T17:15:12.219775724Z"
+    dependencies:
+    - condition: infrastructure.enabled,newrelic-infrastructure.enabled
+      name: newrelic-infrastructure
+      repository: file://./charts/newrelic-infrastructure
+      version: 3.12.0
+    - condition: prometheus.enabled,nri-prometheus.enabled
+      name: nri-prometheus
+      repository: file://./charts/nri-prometheus
+      version: 2.1.15
+    - condition: newrelic-prometheus-agent.enabled
+      name: newrelic-prometheus-agent
+      repository: file://./charts/newrelic-prometheus-agent
+      version: 1.0.1
+    - condition: webhook.enabled,nri-metadata-injection.enabled
+      name: nri-metadata-injection
+      repository: file://./charts/nri-metadata-injection
+      version: 4.0.0
+    - condition: metrics-adapter.enabled,newrelic-k8s-metrics-adapter.enabled
+      name: newrelic-k8s-metrics-adapter
+      repository: file://./charts/newrelic-k8s-metrics-adapter
+      version: 1.0.0
+    - condition: ksm.enabled,kube-state-metrics.enabled
+      name: kube-state-metrics
+      repository: file://./charts/kube-state-metrics
+      version: 4.23.0
+    - condition: kubeEvents.enabled,nri-kube-events.enabled
+      name: nri-kube-events
+      repository: file://./charts/nri-kube-events
+      version: 2.3.1
+    - condition: logging.enabled,newrelic-logging.enabled
+      name: newrelic-logging
+      repository: file://./charts/newrelic-logging
+      version: 1.12.3
+    - condition: newrelic-pixie.enabled
+      name: newrelic-pixie
+      repository: file://./charts/newrelic-pixie
+      version: 2.0.2
+    - alias: pixie-chart
+      condition: pixie-chart.enabled
+      name: pixie-operator-chart
+      repository: file://./charts/pixie-operator-chart
+      version: 0.0.35
+    - condition: newrelic-infra-operator.enabled
+      name: newrelic-infra-operator
+      repository: file://./charts/newrelic-infra-operator
+      version: 2.0.0
+    description: Groups together the individual charts for the New Relic Kubernetes
+      solution for a more comfortable deployment.
+    digest: 953c06d31ddd0d303aa72999b58ab5482d1676556fceb75f5b7f9cbfad265e9c
+    home: https://github.com/newrelic/helm-charts
+    icon: https://newrelic.com/themes/custom/erno/assets/mediakit/new_relic_logo_vertical.svg
+    keywords:
+    - infrastructure
+    - newrelic
+    - monitoring
+    maintainers:
+    - name: alvarocabanas
+      url: https://github.com/alvarocabanas
+    - name: carlossscastro
+      url: https://github.com/carlossscastro
+    - name: sigilioso
+      url: https://github.com/sigilioso
+    - name: gsanchezgavier
+      url: https://github.com/gsanchezgavier
+    - name: kang-makes
+      url: https://github.com/kang-makes
+    - name: marcsanmi
+      url: https://github.com/marcsanmi
+    - name: paologallinaharbur
+      url: https://github.com/paologallinaharbur
+    - name: roobre
+      url: https://github.com/roobre
+    name: nri-bundle
+    sources:
+    - https://github.com/newrelic/nri-bundle/
+    - https://github.com/newrelic/nri-bundle/tree/master/charts/nri-bundle
+    - https://github.com/newrelic/nri-kubernetes/tree/master/charts/newrelic-infrastructure
+    - https://github.com/newrelic/nri-prometheus/tree/master/charts/nri-prometheus
+    - https://github.com/newrelic/newrelic-prometheus-configurator/tree/master/charts/newrelic-prometheus-agent
+    - https://github.com/newrelic/k8s-metadata-injection/tree/master/charts/nri-metadata-injection
+    - https://github.com/newrelic/newrelic-k8s-metrics-adapter/tree/master/charts/newrelic-k8s-metrics-adapter
+    - https://github.com/newrelic/nri-kube-events/tree/master/charts/nri-kube-events
+    - https://github.com/newrelic/helm-charts/tree/master/charts/newrelic-logging
+    - https://github.com/newrelic/helm-charts/tree/master/charts/newrelic-pixie
+    - https://github.com/newrelic/newrelic-infra-operator/tree/master/charts/newrelic-infra-operator
+    urls:
+    - assets/new-relic/nri-bundle-5.0.4.tgz
+    version: 5.0.4
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: New Relic
@@ -14607,6 +14924,19 @@ entries:
     - assets/openebs/openebs-1.12.300.tgz
     version: 1.12.300
   pixie-operator-chart:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Pixie
+      catalog.cattle.io/release-name: pixie
+    apiVersion: v2
+    created: "2023-01-26T17:15:12.346053511Z"
+    digest: cc16a435a4c929e74cfbf5b5267f28251653c2417f081755df933fd9d5c4172b
+    icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/pixie/icon/color/pixie-icon-color.svg
+    name: pixie-operator-chart
+    type: application
+    urls:
+    - assets/pixie/pixie-operator-chart-0.0.3601.tgz
+    version: 0.0.3601
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: Pixie
@@ -15044,6 +15374,45 @@ entries:
     - assets/portworx/portworx-essentials-2.9.100.tgz
     version: 2.9.100
   postgresql:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: PostgreSQL
+      catalog.cattle.io/kube-version: '>=1.19-0'
+      catalog.cattle.io/release-name: postgresql
+      category: Database
+      licenses: Apache-2.0
+    apiVersion: v2
+    appVersion: 15.1.0
+    created: "2023-01-26T17:15:02.744667917Z"
+    dependencies:
+    - name: common
+      repository: file://./charts/common
+      tags:
+      - bitnami-common
+      version: 2.x.x
+    description: PostgreSQL (Postgres) is an open source object-relational database
+      known for reliability and data integrity. ACID-compliant, it supports foreign
+      keys, joins, views, triggers and stored procedures.
+    digest: 2e5522ffbea47e44ff51989d6c67f5109f2b9a3d561cf257f7f491f3608669b7
+    home: https://github.com/bitnami/charts/tree/main/bitnami/postgresql
+    icon: https://wiki.postgresql.org/images/a/a4/PostgreSQL_logo.3colors.svg
+    keywords:
+    - postgresql
+    - postgres
+    - database
+    - sql
+    - replication
+    - cluster
+    maintainers:
+    - name: Bitnami
+      url: https://github.com/bitnami/charts
+    name: postgresql
+    sources:
+    - https://github.com/bitnami/containers/tree/main/bitnami/postgresql
+    - https://www.postgresql.org/
+    urls:
+    - assets/bitnami/postgresql-12.1.11.tgz
+    version: 12.1.11
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: PostgreSQL
@@ -16197,6 +16566,39 @@ entries:
     - assets/bitnami/redis-17.3.7.tgz
     version: 17.3.7
   redpanda:
+  - annotations:
+      artifacthub.io/images: |
+        - name: redpanda
+          image: vectorized/redpanda:v22.3.10
+        - name: busybox
+          image: busybox:latest
+      artifacthub.io/license: Apache-2.0
+      artifacthub.io/links: |
+        - name: Documentation
+          url: https://docs.redpanda.com
+        - name: "Helm (>= 3.6.0)"
+          url: https://helm.sh/docs/intro/install/
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Redpanda
+      catalog.cattle.io/kube-version: '>=1.21-0'
+      catalog.cattle.io/release-name: redpanda
+    apiVersion: v2
+    appVersion: v22.3.10
+    created: "2023-01-26T17:15:12.435205219Z"
+    description: Redpanda is the real-time engine for modern apps.
+    digest: ff16b46e9ce20a4d8dbc60baafaf48c5e7cfb2902aa860b77afc7397e6ee64dc
+    icon: https://images.ctfassets.net/paqvtpyf8rwu/3cYHw5UzhXCbKuR24GDFGO/73fb682e6157d11c10d5b2b5da1d5af0/skate-stand-panda.svg
+    kubeVersion: '>=1.21-0'
+    maintainers:
+    - name: redpanda-data
+      url: https://github.com/orgs/redpanda-data/people
+    name: redpanda
+    sources:
+    - https://github.com/redpanda-data/helm-charts
+    type: application
+    urls:
+    - assets/redpanda/redpanda-2.6.1.tgz
+    version: 2.6.1
   - annotations:
       artifacthub.io/images: |
         - name: redpanda
@@ -17307,6 +17709,41 @@ entries:
     - assets/shipa/shipa-1.4.0.tgz
     version: 1.4.0
   spark:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Apache Spark
+      catalog.cattle.io/kube-version: '>=1.19-0'
+      catalog.cattle.io/release-name: spark
+      category: Infrastructure
+      licenses: Apache-2.0
+    apiVersion: v2
+    appVersion: 3.3.1
+    created: "2023-01-26T17:15:02.885299511Z"
+    dependencies:
+    - name: common
+      repository: file://./charts/common
+      tags:
+      - bitnami-common
+      version: 2.x.x
+    description: Apache Spark is a high-performance engine for large-scale computing
+      tasks, such as data processing, machine learning and real-time data streaming.
+      It includes APIs for Java, Python, Scala and R.
+    digest: 35bbbb22e609c904fe4556da5cb60a6cebe31f05d98a7432d57518be01837e17
+    home: https://github.com/bitnami/charts/tree/main/bitnami/spark
+    icon: https://www.apache.org/logos/res/spark/default.png
+    keywords:
+    - apache
+    - spark
+    maintainers:
+    - name: Bitnami
+      url: https://github.com/bitnami/charts
+    name: spark
+    sources:
+    - https://github.com/bitnami/containers/tree/main/bitnami/spark
+    - https://spark.apache.org/
+    urls:
+    - assets/bitnami/spark-6.3.15.tgz
+    version: 6.3.15
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: Apache Spark
@@ -17548,6 +17985,37 @@ entries:
     - assets/bitnami/spark-6.3.8.tgz
     version: 6.3.8
   speedscale-operator:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Speedscale Operator
+      catalog.cattle.io/kube-version: '>= 1.17.0-0'
+      catalog.cattle.io/release-name: speedscale-operator
+    apiVersion: v1
+    appVersion: 1.2.252
+    created: "2023-01-26T17:15:12.494800326Z"
+    description: Stress test your APIs with real world scenarios.  Collect and replay
+      traffic without scripting.
+    digest: 043e1b06a68c0d0c8174e3654218f4b8b30b338fc6e63927d685e4ec3943f1e1
+    home: https://speedscale.com
+    icon: https://raw.githubusercontent.com/speedscale/assets/main/logo/gold_logo_only.png
+    keywords:
+    - speedscale
+    - test
+    - testing
+    - regression
+    - reliability
+    - load
+    - replay
+    - network
+    - traffic
+    kubeVersion: '>= 1.17.0-0'
+    maintainers:
+    - email: support@speedscale.com
+      name: Speedscale Support
+    name: speedscale-operator
+    urls:
+    - assets/speedscale/speedscale-operator-1.2.17.tgz
+    version: 1.2.17
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: Speedscale Operator
@@ -19773,6 +20241,54 @@ entries:
     - assets/hashicorp/vault-0.22.0.tgz
     version: 0.22.0
   wordpress:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: WordPress
+      catalog.cattle.io/kube-version: '>=1.19-0'
+      catalog.cattle.io/release-name: wordpress
+      category: CMS
+      licenses: Apache-2.0
+    apiVersion: v2
+    appVersion: 6.1.1
+    created: "2023-01-26T17:15:03.069168045Z"
+    dependencies:
+    - condition: memcached.enabled
+      name: memcached
+      repository: file://./charts/memcached
+      version: 6.x.x
+    - condition: mariadb.enabled
+      name: mariadb
+      repository: file://./charts/mariadb
+      version: 11.x.x
+    - name: common
+      repository: file://./charts/common
+      tags:
+      - bitnami-common
+      version: 2.x.x
+    description: WordPress is the world's most popular blogging and content management
+      platform. Powerful yet simple, everyone from students to global corporations
+      use it to build beautiful, functional websites.
+    digest: b2dc97d28dc9103388e251cc8c14671bd902ead7c410358020b033fa41f1f277
+    home: https://github.com/bitnami/charts/tree/main/bitnami/wordpress
+    icon: https://s.w.org/style/images/about/WordPress-logotype-simplified.png
+    keywords:
+    - application
+    - blog
+    - cms
+    - http
+    - php
+    - web
+    - wordpress
+    maintainers:
+    - name: Bitnami
+      url: https://github.com/bitnami/charts
+    name: wordpress
+    sources:
+    - https://github.com/bitnami/containers/tree/main/bitnami/wordpress
+    - https://wordpress.org/
+    urls:
+    - assets/bitnami/wordpress-15.2.34.tgz
+    version: 15.2.34
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: WordPress