Charts CI

```
Updated:
  crowdstrike/falcon-sensor:
    - 1.28.1
  haproxy/haproxy:
    - 1.39.3
  jenkins/jenkins:
    - 5.1.9
  pixie/pixie-operator-chart:
    - 0.1.5
```

charts/crowdstrike/falcon-sensor/Chart.yaml

@@ -4,7 +4,7 @@ annotations:
   catalog.cattle.io/kube-version: '>1.22.0-0'
   catalog.cattle.io/release-name: falcon-sensor
 apiVersion: v2
-appVersion: 1.27.1
+appVersion: 1.28.1
 description: A Helm chart to deploy CrowdStrike Falcon sensors into Kubernetes clusters.
 home: https://crowdstrike.com
 icon: https://raw.githubusercontent.com/CrowdStrike/falcon-helm/main/images/crowdstrike-logo.svg
@@ -24,4 +24,4 @@ name: falcon-sensor
 sources:
 - https://github.com/CrowdStrike/falcon-helm
 type: application
-version: 1.27.1
+version: 1.28.1

charts/crowdstrike/falcon-sensor/templates/container_deployment_webhook.yaml

@@ -92,6 +92,10 @@ spec:
                 operator: In
                 values:
                 - linux
+              - key: kubernetes.io/arch
+                operator: In
+                values:
+                - amd64
           preferredDuringSchedulingIgnoredDuringExecution:
           - weight: 1
             preference:
@@ -183,7 +187,7 @@ spec:
           initialDelaySeconds: 5
           periodSeconds: 10
         resources:
-            {{- toYaml .Values.resources | nindent 12 }}
+            {{- toYaml .Values.container.resources | nindent 12 }}
     {{- if .Values.container.tolerations }}
       tolerations:
       {{- with .Values.container.tolerations }}

charts/crowdstrike/falcon-sensor/values.yaml

@@ -225,6 +225,7 @@ container:
 
   tolerations: []
 
+  # Configure the requests and limits of the injector container
   resources:
     # limits:
     #   cpu: 100m

charts/haproxy/haproxy/Chart.yaml

@@ -1,12 +1,12 @@
 annotations:
   artifacthub.io/changes: |
-    - Allow setting resources requests or limits on crdjob (#236)
+    - Use Ingress Controller 1.11.4 version for base image
   catalog.cattle.io/certified: partner
   catalog.cattle.io/display-name: HAProxy Kubernetes Ingress Controller
   catalog.cattle.io/kube-version: '>=1.23.0-0'
   catalog.cattle.io/release-name: haproxy
 apiVersion: v2
-appVersion: 1.11.3
+appVersion: 1.11.4
 description: A Helm chart for HAProxy Kubernetes Ingress Controller
 home: https://github.com/haproxytech/helm-charts/tree/main/kubernetes-ingress
 icon: https://raw.githubusercontent.com/haproxytech/helm-charts/main/kubernetes-ingress/chart-icon.png
@@ -21,4 +21,4 @@ name: haproxy
 sources:
 - https://github.com/haproxytech/kubernetes-ingress
 type: application
-version: 1.39.2
+version: 1.39.3

charts/jenkins/jenkins/CHANGELOG.md

@@ -12,6 +12,10 @@ Use the following links to reference issues, PRs, and commits prior to v2.6.0.
 The changelog until v1.5.7 was auto-generated based on git commits.
 Those entries include a reference to the git commit to be able to get more details.
 
+## 5.1.9
+
+Update `docker.io/kiwigrid/k8s-sidecar` to version `1.26.2`
+
 ## 5.1.8
 
 Update `kubernetes` to version `4209.vc646b_71e5269`

charts/jenkins/jenkins/Chart.yaml

@@ -1,12 +1,12 @@
 annotations:
   artifacthub.io/category: integration-delivery
   artifacthub.io/changes: |
-    - Update `kubernetes` to version `4209.vc646b_71e5269`
+    - Update `docker.io/kiwigrid/k8s-sidecar` to version `1.26.2`
   artifacthub.io/images: |
     - name: jenkins
       image: docker.io/jenkins/jenkins:2.440.3-jdk17
     - name: k8s-sidecar
-      image: docker.io/kiwigrid/k8s-sidecar:1.26.1
+      image: docker.io/kiwigrid/k8s-sidecar:1.26.2
     - name: inbound-agent
       image: jenkins/inbound-agent:3206.vb_15dcf73f6a_9-3
   artifacthub.io/license: Apache-2.0
@@ -50,4 +50,4 @@ sources:
 - https://github.com/maorfr/kube-tasks
 - https://github.com/jenkinsci/configuration-as-code-plugin
 type: application
-version: 5.1.8
+version: 5.1.9

charts/jenkins/jenkins/VALUES.md

@@ -244,7 +244,7 @@ The following tables list the configurable parameters of the Jenkins chart and t
 | [controller.sidecars.configAutoReload.folder](./values.yaml#L591) | string |  | `"/var/jenkins_home/casc_configs"` |
 | [controller.sidecars.configAutoReload.image.registry](./values.yaml#L553) | string | Registry for the image that triggers the reload | `"docker.io"` |
 | [controller.sidecars.configAutoReload.image.repository](./values.yaml#L555) | string | Repository of the image that triggers the reload | `"kiwigrid/k8s-sidecar"` |
-| [controller.sidecars.configAutoReload.image.tag](./values.yaml#L557) | string | Tag for the image that triggers the reload | `"1.26.1"` |
+| [controller.sidecars.configAutoReload.image.tag](./values.yaml#L557) | string | Tag for the image that triggers the reload | `"1.26.2"` |
 | [controller.sidecars.configAutoReload.imagePullPolicy](./values.yaml#L558) | string |  | `"IfNotPresent"` |
 | [controller.sidecars.configAutoReload.reqRetryConnect](./values.yaml#L573) | int | How many connection-related errors to retry on | `10` |
 | [controller.sidecars.configAutoReload.resources](./values.yaml#L559) | object |  | `{}` |

charts/jenkins/jenkins/values.yaml

@@ -554,7 +554,7 @@ controller:
         # -- Repository of the image that triggers the reload
         repository: kiwigrid/k8s-sidecar
         # -- Tag for the image that triggers the reload
-        tag: 1.26.1
+        tag: 1.26.2
       imagePullPolicy: IfNotPresent
       resources: {}
         #   limits:

charts/pixie/pixie-operator-chart/Chart.yaml

@@ -6,4 +6,4 @@ apiVersion: v2
 icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/pixie/icon/color/pixie-icon-color.svg
 name: pixie-operator-chart
 type: application
-version: 0.1.401
+version: 0.1.501

charts/pixie/pixie-operator-chart/crds/vizier_crd.yaml

@@ -232,6 +232,49 @@ spec:
                         format: int64
                         type: integer
                     type: object
+                  tolerations:
+                    description: 'Tolerations allows scheduling pods on nodes with
+                      matching taints. More info: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/:
+                      This field cannot be updated once the cluster is created.'
+                    items:
+                      description: The pod this Toleration is attached to tolerates
+                        any taint that matches the triple <key,value,effect> using
+                        the matching operator <operator>.
+                      properties:
+                        effect:
+                          description: Effect indicates the taint effect to match.
+                            Empty means match all taint effects. When specified, allowed
+                            values are NoSchedule, PreferNoSchedule and NoExecute.
+                          type: string
+                        key:
+                          description: Key is the taint key that the toleration applies
+                            to. Empty means match all taint keys. If the key is empty,
+                            operator must be Exists; this combination means to match
+                            all values and all keys.
+                          type: string
+                        operator:
+                          description: Operator represents a key's relationship to
+                            the value. Valid operators are Exists and Equal. Defaults
+                            to Equal. Exists is equivalent to wildcard for value,
+                            so that a pod can tolerate all taints of a particular
+                            category.
+                          type: string
+                        tolerationSeconds:
+                          description: TolerationSeconds represents the period of
+                            time the toleration (which must be of effect NoExecute,
+                            otherwise this field is ignored) tolerates the taint.
+                            By default, it is not set, which means tolerate the taint
+                            forever (do not evict). Zero and negative values will
+                            be treated as 0 (evict immediately) by the system.
+                          format: int64
+                          type: integer
+                        value:
+                          description: Value is the taint value the toleration matches
+                            to. If the operator is Exists, the value should be empty,
+                            otherwise just a regular string.
+                          type: string
+                      type: object
+                    type: array
                 type: object
               registry:
                 description: 'Registry specifies the image registry to use rather

charts/pixie/pixie-operator-chart/templates/00_olm.yaml

@@ -71,7 +71,7 @@ spec:
           - $(OPERATOR_NAMESPACE)
           - --writeStatusName
           - ""
-          image: {{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}olm@sha256:f9ea8cef95ac9b31021401d4863711a5eec904536b449724e0f00357548a31e7
+          image: {{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}olm@sha256:1b6002156f568d722c29138575733591037c24b4bfabc67946f268ce4752c3e6
           ports:
             - containerPort: 8080
             - containerPort: 8081
@@ -146,10 +146,10 @@ spec:
           - {{ .Values.olmNamespace }}
           - --configmapServerImage={{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}configmap-operator-registry:latest
           - --util-image
-          -  {{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}olm@sha256:f9ea8cef95ac9b31021401d4863711a5eec904536b449724e0f00357548a31e7
+          -  {{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}olm@sha256:1b6002156f568d722c29138575733591037c24b4bfabc67946f268ce4752c3e6
           - --opmImage
           -  {{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}opm@sha256:d999588bd4e9509ec9e75e49adfb6582d256e9421e454c7fb5e9fe57e7b1aada
-          image: {{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}olm@sha256:f9ea8cef95ac9b31021401d4863711a5eec904536b449724e0f00357548a31e7
+          image: {{ if .Values.registry }}{{ .Values.registry }}/quay.io-operator-framework-{{ else }}quay.io/operator-framework/{{ end }}olm@sha256:1b6002156f568d722c29138575733591037c24b4bfabc67946f268ce4752c3e6
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080

charts/pixie/pixie-operator-chart/templates/04_vizier.yaml

@@ -7,7 +7,9 @@ spec:
   {{- if .Values.version }}
   version: {{ .Values.version }}
   {{- end }}
+  {{- if .Values.deployKey }}
   deployKey: {{ .Values.deployKey }}
+  {{- end }}
   {{- if .Values.customDeployKeySecret }}
   customDeployKeySecret: {{ .Values.customDeployKeySecret }}
   {{- end }}
@@ -63,7 +65,7 @@ spec:
     electionPeriodMs: {{ .Values.leadershipElectionParams.electionPeriodMs }}
     {{- end }}
   {{- end }}
-  {{- if or .Values.pod.securityContext (or .Values.pod.nodeSelector (or .Values.pod.annotations (or .Values.pod.labels .Values.pod.resources))) }}
+  {{- if or .Values.pod.securityContext (or .Values.pod.nodeSelector (or .Values.pod.tolerations (or .Values.pod.annotations (or .Values.pod.labels .Values.pod.resources)))) }}
   pod:
     {{- if .Values.pod.annotations }}
     annotations: {{ .Values.pod.annotations | toYaml | nindent 6 }}
@@ -77,6 +79,9 @@ spec:
     {{- if .Values.pod.nodeSelector }}
     nodeSelector: {{ .Values.pod.nodeSelector | toYaml | nindent 6 }}
     {{- end }}
+    {{- if .Values.pod.tolerations }}
+    tolerations: {{ .Values.pod.tolerations | toYaml | nindent 4 }}
+    {{- end }}
     {{- if .Values.pod.securityContext }}
     securityContext:
       enabled: {{ .Values.pod.securityContext.enabled }}

charts/pixie/pixie-operator-chart/templates/deleter.yaml

@@ -19,7 +19,7 @@ spec:
               fieldPath: metadata.namespace
         - name: PL_VIZIER_NAME
           value: '{{ .Values.name }}'
-        image: gcr.io/pixie-oss/pixie-prod/operator/vizier_deleter:0.1.4
+        image: gcr.io/pixie-oss/pixie-prod/operator-vizier_deleter:0.1.5
         name: delete-job
       restartPolicy: Never
       serviceAccountName: pl-deleter-service-account

charts/pixie/pixie-operator-chart/values.yaml

@@ -67,6 +67,7 @@ pod:
   #   cpu: 100m
   #   memory: 5Gi
   nodeSelector: {}
+  tolerations: []
 # A set of custom patches to apply to the deployed Vizier resources.
 # The key should be the name of the resource to apply the patch to, and the value is the patch to apply.
 # Currently, only a JSON format is accepted, such as:

index.yaml

@@ -19266,6 +19266,38 @@ entries:
     - assets/f5/f5-bigip-ctlr-0.0.1901.tgz
     version: 0.0.1901
   falcon-sensor:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: CrowdStrike Falcon Platform
+      catalog.cattle.io/kube-version: '>1.22.0-0'
+      catalog.cattle.io/release-name: falcon-sensor
+    apiVersion: v2
+    appVersion: 1.28.1
+    created: "2024-05-07T00:53:18.572939092Z"
+    description: A Helm chart to deploy CrowdStrike Falcon sensors into Kubernetes
+      clusters.
+    digest: bd371ccb5a27b517184645721532556de4f10df5b7668d19a164cfb6120f5916
+    home: https://crowdstrike.com
+    icon: https://raw.githubusercontent.com/CrowdStrike/falcon-helm/main/images/crowdstrike-logo.svg
+    keywords:
+    - CrowdStrike
+    - Falcon
+    - EDR
+    - kubernetes
+    - security
+    - monitoring
+    - alerting
+    kubeVersion: '>1.22.0-0'
+    maintainers:
+    - email: integrations@crowdstrike.com
+      name: CrowdStrike Solutions Architecture
+    name: falcon-sensor
+    sources:
+    - https://github.com/CrowdStrike/falcon-helm
+    type: application
+    urls:
+    - assets/crowdstrike/falcon-sensor-1.28.1.tgz
+    version: 1.28.1
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: CrowdStrike Falcon Platform
@@ -22538,6 +22570,34 @@ entries:
     - assets/gopaddle/gopaddle-4.2.5.tgz
     version: 4.2.5
   haproxy:
+  - annotations:
+      artifacthub.io/changes: |
+        - Use Ingress Controller 1.11.4 version for base image
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: HAProxy Kubernetes Ingress Controller
+      catalog.cattle.io/kube-version: '>=1.23.0-0'
+      catalog.cattle.io/release-name: haproxy
+    apiVersion: v2
+    appVersion: 1.11.4
+    created: "2024-05-07T00:53:19.023577968Z"
+    description: A Helm chart for HAProxy Kubernetes Ingress Controller
+    digest: 727fa39ef6ca1d9f2e06744961db08a5c5c0bb6185019b6d43ad83030e1a1842
+    home: https://github.com/haproxytech/helm-charts/tree/main/kubernetes-ingress
+    icon: https://raw.githubusercontent.com/haproxytech/helm-charts/main/kubernetes-ingress/chart-icon.png
+    keywords:
+    - ingress
+    - haproxy
+    kubeVersion: '>=1.23.0-0'
+    maintainers:
+    - email: dkorunic@haproxy.com
+      name: Dinko Korunic
+    name: haproxy
+    sources:
+    - https://github.com/haproxytech/kubernetes-ingress
+    type: application
+    urls:
+    - assets/haproxy/haproxy-1.39.3.tgz
+    version: 1.39.3
   - annotations:
       artifacthub.io/changes: |
         - Allow setting resources requests or limits on crdjob (#236)
@@ -26064,6 +26124,63 @@ entries:
     - assets/jaeger/jaeger-operator-2.36.0.tgz
     version: 2.36.0
   jenkins:
+  - annotations:
+      artifacthub.io/category: integration-delivery
+      artifacthub.io/changes: |
+        - Update `docker.io/kiwigrid/k8s-sidecar` to version `1.26.2`
+      artifacthub.io/images: |
+        - name: jenkins
+          image: docker.io/jenkins/jenkins:2.440.3-jdk17
+        - name: k8s-sidecar
+          image: docker.io/kiwigrid/k8s-sidecar:1.26.2
+        - name: inbound-agent
+          image: jenkins/inbound-agent:3206.vb_15dcf73f6a_9-3
+      artifacthub.io/license: Apache-2.0
+      artifacthub.io/links: |
+        - name: Chart Source
+          url: https://github.com/jenkinsci/helm-charts/tree/main/charts/jenkins
+        - name: Jenkins
+          url: https://www.jenkins.io/
+        - name: support
+          url: https://github.com/jenkinsci/helm-charts/issues
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Jenkins
+      catalog.cattle.io/kube-version: '>=1.14-0'
+      catalog.cattle.io/release-name: jenkins
+    apiVersion: v2
+    appVersion: 2.440.3
+    created: "2024-05-07T00:53:19.49377231Z"
+    description: 'Jenkins - Build great things at any scale! As the leading open source
+      automation server, Jenkins provides over 1800 plugins to support building, deploying
+      and automating any project. '
+    digest: bb77e65f7d5e785829026bd08bf23af3b950db38d989a8e85fd83f8030e3675e
+    home: https://www.jenkins.io/
+    icon: https://get.jenkins.io/art/jenkins-logo/logo.svg
+    keywords:
+    - jenkins
+    - ci
+    - devops
+    maintainers:
+    - email: maor.friedman@redhat.com
+      name: maorfr
+    - email: mail@torstenwalter.de
+      name: torstenwalter
+    - email: garridomota@gmail.com
+      name: mogaal
+    - email: wmcdona89@gmail.com
+      name: wmcdona89
+    - email: timjacomb1@gmail.com
+      name: timja
+    name: jenkins
+    sources:
+    - https://github.com/jenkinsci/jenkins
+    - https://github.com/jenkinsci/docker-inbound-agent
+    - https://github.com/maorfr/kube-tasks
+    - https://github.com/jenkinsci/configuration-as-code-plugin
+    type: application
+    urls:
+    - assets/jenkins/jenkins-5.1.9.tgz
+    version: 5.1.9
   - annotations:
       artifacthub.io/category: integration-delivery
       artifacthub.io/changes: |
@@ -42980,6 +43097,19 @@ entries:
     - assets/openebs/openebs-1.12.300.tgz
     version: 1.12.300
   pixie-operator-chart:
+  - annotations:
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Pixie
+      catalog.cattle.io/release-name: pixie
+    apiVersion: v2
+    created: "2024-05-07T00:53:22.701159862Z"
+    digest: 4b55ce40b3955e8000d1ad2149bae8ca36177ef1ad83f9e0ef0435b4427a2067
+    icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/pixie/icon/color/pixie-icon-color.svg
+    name: pixie-operator-chart
+    type: application
+    urls:
+    - assets/pixie/pixie-operator-chart-0.1.501.tgz
+    version: 0.1.501
   - annotations:
       catalog.cattle.io/certified: partner
       catalog.cattle.io/display-name: Pixie