Charts CI

```
Updated:
  argo/argo-cd:
    - 6.8.1
  redpanda/redpanda:
    - 5.8.5
```

charts/argo/argo-cd/Chart.yaml

@@ -1,7 +1,7 @@
 annotations:
   artifacthub.io/changes: |
     - kind: changed
-      description: Bump argo-cd to v2.11.0
+      description: Always install applicationset crd
   artifacthub.io/signKey: |
     fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
     url: https://argoproj.github.io/argo-helm/pgp_keys.asc
@@ -33,4 +33,4 @@ name: argo-cd
 sources:
 - https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
 - https://github.com/argoproj/argo-cd
-version: 6.8.0
+version: 6.8.1

charts/argo/argo-cd/templates/crds/crd-applicationset.yaml

@@ -1,4 +1,4 @@
-{{- if and .Values.crds.install .Values.applicationSet.enabled }}
+{{- if .Values.crds.install }}
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:

charts/redpanda/redpanda/Chart.yaml

@@ -37,4 +37,4 @@ name: redpanda
 sources:
 - https://github.com/redpanda-data/helm-charts
 type: application
-version: 5.8.4
+version: 5.8.5

charts/redpanda/redpanda/README.md

@@ -3,7 +3,7 @@
 description: Find the default values and descriptions of settings in the Redpanda Helm chart.
 ---
 
-![Version: 5.8.4](https://img.shields.io/badge/Version-5.8.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v24.1.1](https://img.shields.io/badge/AppVersion-v24.1.1-informational?style=flat-square)
+![Version: 5.8.5](https://img.shields.io/badge/Version-5.8.5-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v24.1.1](https://img.shields.io/badge/AppVersion-v24.1.1-informational?style=flat-square)
 
 This page describes the official Redpanda Helm Chart. In particular, this page describes the contents of the chart’s [`values.yaml` file](https://github.com/redpanda-data/helm-charts/blob/main/charts/redpanda/values.yaml). Each of the settings is listed and described on this page, along with any default values.
 

charts/redpanda/redpanda/templates/_helpers.go.tpl

@@ -120,7 +120,7 @@
 {{- $dot := (index .a 0) -}}
 {{- range $_ := (list 1) -}}
 {{- $values := $dot.Values.AsMap -}}
-{{- if (and (ne $values.tls.enabled (coalesce nil)) $values.tls.enabled) -}}
+{{- if $values.tls.enabled -}}
 {{- (dict "r" true) | toJson -}}
 {{- break -}}
 {{- end -}}

charts/redpanda/redpanda/templates/certs.go.tpl

@@ -0,0 +1,61 @@
+{{- /* Generated from "certs.go" */ -}}
+
+{{- define "redpanda.ClientCerts" -}}
+{{- $dot := (index .a 0) -}}
+{{- range $_ := (list 1) -}}
+{{- if (not (get (fromJson (include "redpanda.TLSEnabled" (dict "a" (list $dot) ))) "r")) -}}
+{{- (dict "r" (list )) | toJson -}}
+{{- break -}}
+{{- end -}}
+{{- $values := $dot.Values.AsMap -}}
+{{- $fullname := (get (fromJson (include "redpanda.Fullname" (dict "a" (list $dot) ))) "r") -}}
+{{- $service := (get (fromJson (include "redpanda.ServiceName" (dict "a" (list $dot) ))) "r") -}}
+{{- $ns := $dot.Release.Namespace -}}
+{{- $domain := (trimSuffix "." $values.clusterDomain) -}}
+{{- $certs := (list ) -}}
+{{- range $name, $data := $values.tls.certs -}}
+{{- if (not (empty $data.secretRef)) -}}
+{{- continue -}}
+{{- end -}}
+{{- $names := (list ) -}}
+{{- if (or (eq $data.issuerRef (coalesce nil)) (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $data.applyInternalDNSNames false) ))) "r")) -}}
+{{- $names = (mustAppend $names (printf "%s-cluster.%s.%s.svc.%s" $fullname $service $ns $domain)) -}}
+{{- $names = (mustAppend $names (printf "%s-cluster.%s.%s.svc" $fullname $service $ns)) -}}
+{{- $names = (mustAppend $names (printf "%s-cluster.%s.%s" $fullname $service $ns)) -}}
+{{- $names = (mustAppend $names (printf "*.%s-cluster.%s.%s.svc.%s" $fullname $service $ns $domain)) -}}
+{{- $names = (mustAppend $names (printf "*.%s-cluster.%s.%s.svc" $fullname $service $ns)) -}}
+{{- $names = (mustAppend $names (printf "*.%s-cluster.%s.%s" $fullname $service $ns)) -}}
+{{- $names = (mustAppend $names (printf "%s.%s.svc.%s" $service $ns $domain)) -}}
+{{- $names = (mustAppend $names (printf "%s.%s.svc" $service $ns)) -}}
+{{- $names = (mustAppend $names (printf "%s.%s" $service $ns)) -}}
+{{- $names = (mustAppend $names (printf "*.%s.%s.svc.%s" $service $ns $domain)) -}}
+{{- $names = (mustAppend $names (printf "*.%s.%s.svc" $service $ns)) -}}
+{{- $names = (mustAppend $names (printf "*.%s.%s" $service $ns)) -}}
+{{- end -}}
+{{- if (ne $values.external.domain (coalesce nil)) -}}
+{{- $names = (mustAppend $names (tpl $values.external.domain $dot)) -}}
+{{- $names = (mustAppend $names (tpl (printf "*.%s" $values.external.domain) $dot)) -}}
+{{- end -}}
+{{- $duration := (default "43800h" $data.duration) -}}
+{{- $issuerRef := (get (fromJson (include "_shims.ptr_Deref" (dict "a" (list $data.issuerRef (mustMergeOverwrite (dict "name" "" ) (dict "kind" "Issuer" "group" "cert-manager.io" "name" (printf "%s-%s-root-issuer" $fullname $name) ))) ))) "r") -}}
+{{- $certs = (mustAppend $certs (mustMergeOverwrite (mustMergeOverwrite (dict ) (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "secretName" "" "issuerRef" (dict "name" "" ) ) "status" (dict ) )) (mustMergeOverwrite (dict ) (dict "apiVersion" "cert-manager.io/v1" "kind" "Certificate" )) (dict "metadata" (mustMergeOverwrite (dict "creationTimestamp" (coalesce nil) ) (dict "name" (printf "%s-%s-cert" $fullname $name) "labels" (get (fromJson (include "redpanda.FullLabels" (dict "a" (list $dot) ))) "r") "namespace" $dot.Release.Namespace )) "spec" (mustMergeOverwrite (dict "secretName" "" "issuerRef" (dict "name" "" ) ) (dict "dnsNames" $names "duration" $duration "isCA" false "issuerRef" $issuerRef "secretName" (printf "%s-%s-cert" $fullname $name) "privateKey" (mustMergeOverwrite (dict ) (dict "algorithm" "ECDSA" "size" 256 )) )) ))) -}}
+{{- end -}}
+{{- $name := $values.listeners.kafka.tls.cert -}}
+{{- $tmp_tuple_1 := (get (fromJson (include "_shims.compact" (dict "a" (list (get (fromJson (include "_shims.dicttest" (dict "a" (list $values.tls.certs $name (coalesce nil)) ))) "r")) ))) "r") -}}
+{{- $ok := $tmp_tuple_1.T2 -}}
+{{- $data := $tmp_tuple_1.T1 -}}
+{{- if (or (not $ok) ((and (empty $data.secretRef) (not (get (fromJson (include "redpanda.ClientAuthRequired" (dict "a" (list $dot) ))) "r"))))) -}}
+{{- (dict "r" $certs) | toJson -}}
+{{- break -}}
+{{- end -}}
+{{- $issuerRef := (mustMergeOverwrite (dict "name" "" ) (dict "group" "cert-manager.io" "kind" "Issuer" "name" (printf "%s-%s-root-issuer" $fullname $name) )) -}}
+{{- if (ne $data.issuerRef (coalesce nil)) -}}
+{{- $issuerRef = $data.issuerRef -}}
+{{- $_ := (set $issuerRef "group" "cert-manager.io") -}}
+{{- end -}}
+{{- $duration := (default "43800h" $data.duration) -}}
+{{- (dict "r" (mustAppend $certs (mustMergeOverwrite (mustMergeOverwrite (dict ) (dict "metadata" (dict "creationTimestamp" (coalesce nil) ) "spec" (dict "secretName" "" "issuerRef" (dict "name" "" ) ) "status" (dict ) )) (mustMergeOverwrite (dict ) (dict "apiVersion" "cert-manager.io/v1" "kind" "Certificate" )) (dict "metadata" (mustMergeOverwrite (dict "creationTimestamp" (coalesce nil) ) (dict "name" (printf "%s-client" $fullname) "labels" (get (fromJson (include "redpanda.FullLabels" (dict "a" (list $dot) ))) "r") )) "spec" (mustMergeOverwrite (dict "secretName" "" "issuerRef" (dict "name" "" ) ) (dict "commonName" (printf "%s-client" $fullname) "duration" $duration "isCA" false "secretName" (printf "%s-client" $fullname) "privateKey" (mustMergeOverwrite (dict ) (dict "algorithm" "ECDSA" "size" 256 )) "issuerRef" $issuerRef )) )))) | toJson -}}
+{{- break -}}
+{{- end -}}
+{{- end -}}
+

charts/redpanda/redpanda/templates/certs.yaml

@@ -14,93 +14,8 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 */}}
-{{- if (include "tls-enabled" . | fromJson).bool }}
+{{-  $docs := (get ((include "redpanda.ClientCerts" (dict "a" (list .))) | fromJson) "r") }}
-  {{- $root := deepCopy . }}
+{{- range $_, $doc := $docs }}
-  {{- $service := include "redpanda.servicename" . }}
-  {{- $ns := .Release.Namespace }}
-  {{- $domain := .Values.clusterDomain | trimSuffix "." }}
-  {{- $listeners := .Values.listeners }}
-  {{- $values := .Values }}
-  {{- range $name, $data := .Values.tls.certs }}
-    {{- if (empty $data.secretRef ) }}
-      {{- $d := $data.duration }}
-
 ---
-apiVersion: cert-manager.io/v1
+{{ toYaml $doc }}
-kind: Certificate
-metadata:
-  name: {{ template "redpanda.fullname" $ }}-{{ $name }}-cert
-  namespace: {{ $ns | quote }}
-      {{- with include "full.labels" $root }}
-  labels:
-        {{- . | nindent 4 }}
-      {{- end }}
-spec:
-  dnsNames:
-      {{- if or (empty $data.issuerRef) (dig "applyInternalDNSNames" false $data) }}
-    - {{ template "redpanda.fullname" $ }}-cluster.{{ printf "%s.%s.svc.%s" $service $ns $domain }}
-    - {{ template "redpanda.fullname" $ }}-cluster.{{ printf "%s.%s.svc" $service $ns }}
-    - {{ template "redpanda.fullname" $ }}-cluster.{{ printf "%s.%s" $service $ns }}
-    - "*.{{ template "redpanda.fullname" $ }}-cluster.{{ printf "%s.%s.svc.%s" $service $ns $domain }}"
-    - "*.{{ template "redpanda.fullname" $ }}-cluster.{{ printf "%s.%s.svc" $service $ns }}"
-    - "*.{{ template "redpanda.fullname" $ }}-cluster.{{ printf "%s.%s" $service $ns }}"
-    - {{ printf "%s.%s.svc.%s" $service $ns $domain }}
-    - {{ printf "%s.%s.svc" $service $ns }}
-    - {{ printf "%s.%s" $service $ns }}
-    - {{ printf "*.%s.%s.svc.%s" $service $ns $domain | quote }}
-    - {{ printf "*.%s.%s.svc" $service $ns | quote }}
-    - {{ printf "*.%s.%s" $service $ns | quote }}
-      {{- end }}
-      {{- if (tpl ($values.external.domain | default "") $) }}
-    - "{{ tpl $values.external.domain $ }}"
-    - "*.{{ tpl $values.external.domain $ }}"
-      {{- end }}
-  duration: {{ $d | default "43800h" }}
-  isCA: false
-  secretName: {{ template "redpanda.fullname" $ }}-{{ $name }}-cert
-  privateKey:
-    algorithm: ECDSA
-    size: 256
-      {{- if not (empty $data.issuerRef) }}
-  issuerRef:
-        {{- toYaml $data.issuerRef | nindent 4 }}
-    group: cert-manager.io
-      {{- else }}
-  issuerRef:
-    name: {{ template "redpanda.fullname" $ }}-{{ $name }}-root-issuer
-    kind: Issuer
-    group: cert-manager.io
-      {{- end }}
-    {{- end }}
-  {{- end }}
----
-  {{- $name := .Values.listeners.kafka.tls.cert }}
-  {{- $data := get .Values.tls.certs $name }}
-  {{- if and (empty $data.secretRef) (include "client-auth-required" . | fromJson).bool }}
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: {{ template "redpanda.fullname" $ }}-client
-  namespace: {{ $ns | quote }}
-  {{- with include "full.labels" $root }}
-  labels: {{- . | nindent 4 }}
-  {{- end }}
-spec:
-  commonName: {{ template "redpanda.fullname" $ }}-client
-  duration: {{ $data.duration | default "43800h" }}
-  isCA: false
-  secretName: {{ template "redpanda.fullname" $ }}-client
-  privateKey:
-    algorithm: ECDSA
-    size: 256
-  {{- if not (empty $data.issuerRef) }}
-  issuerRef: {{- toYaml $data.issuerRef | nindent 4 }}
-    group: cert-manager.io
-  {{- else }}
-  issuerRef:
-    name: {{ template "redpanda.fullname" $ }}-{{ $name }}-root-issuer
-    kind: Issuer
-    group: cert-manager.io
-  {{- end }}
-  {{- end }}
 {{- end }}

charts/redpanda/redpanda/templates/statefulset.yaml

@@ -116,7 +116,7 @@ spec:
             - name: datadir
               mountPath: /var/lib/redpanda/data
   {{- if get .Values.statefulset.initContainers.fsValidator "resources" }}
-          resources: {{- toYaml .Values.statefulset.fsValidator.resources | nindent 12 }}
+          resources: {{- toYaml .Values.statefulset.initContainers.fsValidator.resources | nindent 12 }}
   {{- end }}
 {{- end }}
 {{- if (include "storage-tiered-config" .|fromJson).cloud_storage_enabled }}

charts/redpanda/redpanda/values.schema.json

@@ -2187,6 +2187,9 @@
                 },
                 "issuerRef": {
                   "properties": {
+                    "group": {
+                      "type": "string"
+                    },
                     "kind": {
                       "enum": [
                         "ClusterIssuer",

index.yaml

@@ -244,7 +244,7 @@ entries:
   - annotations:
       artifacthub.io/changes: |
         - kind: changed
-          description: Bump argo-cd to v2.11.0
+          description: Always install applicationset crd
       artifacthub.io/signKey: |
         fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
         url: https://argoproj.github.io/argo-helm/pgp_keys.asc
@@ -255,7 +255,7 @@ entries:
       catalog.cattle.io/release-name: argo-cd
     apiVersion: v2
     appVersion: v2.11.0
-    created: "2024-05-09T00:53:22.285052662Z"
+    created: "2024-05-11T00:52:51.48360261Z"
     dependencies:
     - condition: redis-ha.enabled
       name: redis-ha
@@ -263,7 +263,46 @@ entries:
       version: 4.26.1
     description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery
       tool for Kubernetes.
-    digest: 66d5fb44e54319e1fa585ff0e393b4daa2c3ad3fce061b8ad65b3b6bdc1c0f33
+    digest: 545323d0230fd5371a63cbe0643a2aebd2913f881afb682e74205c7798a7cacc
+    home: https://github.com/argoproj/argo-helm
+    icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
+    keywords:
+    - argoproj
+    - argocd
+    - gitops
+    kubeVersion: '>=1.23.0-0'
+    maintainers:
+    - name: argoproj
+      url: https://argoproj.github.io/
+    name: argo-cd
+    sources:
+    - https://github.com/argoproj/argo-helm/tree/main/charts/argo-cd
+    - https://github.com/argoproj/argo-cd
+    urls:
+    - assets/argo/argo-cd-6.8.1.tgz
+    version: 6.8.1
+  - annotations:
+      artifacthub.io/changes: |
+        - kind: changed
+          description: Bump argo-cd to v2.11.0
+      artifacthub.io/signKey: |
+        fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
+        url: https://argoproj.github.io/argo-helm/pgp_keys.asc
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Argo CD
+      catalog.cattle.io/kube-version: '>=1.23.0-0'
+      catalog.cattle.io/release-name: argo-cd
+    apiVersion: v2
+    appVersion: v2.11.0
+    created: "2024-05-11T00:52:42.818025329Z"
+    dependencies:
+    - condition: redis-ha.enabled
+      name: redis-ha
+      repository: file://./charts/redis-ha
+      version: 4.26.1
+    description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery
+      tool for Kubernetes.
+    digest: 4156272c88418956c9ba030598bb034806009e43431ae7024ea209c80c63bc53
     home: https://github.com/argoproj/argo-helm
     icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
     keywords:
@@ -45062,6 +45101,50 @@ entries:
     - assets/quobyte/quobyte-cluster-0.1.5.tgz
     version: 0.1.5
   redpanda:
+  - annotations:
+      artifacthub.io/images: |
+        - name: redpanda
+          image: docker.redpanda.com/redpandadata/redpanda:v24.1.1
+        - name: busybox
+          image: busybox:latest
+        - name: mintel/docker-alpine-bash-curl-jq
+          image: mintel/docker-alpine-bash-curl-jq:latest
+      artifacthub.io/license: Apache-2.0
+      artifacthub.io/links: |
+        - name: Documentation
+          url: https://docs.redpanda.com
+        - name: "Helm (>= 3.10.0)"
+          url: https://helm.sh/docs/intro/install/
+      catalog.cattle.io/certified: partner
+      catalog.cattle.io/display-name: Redpanda
+      catalog.cattle.io/kube-version: '>=1.21-0'
+      catalog.cattle.io/release-name: redpanda
+    apiVersion: v2
+    appVersion: v24.1.1
+    created: "2024-05-11T00:52:57.083530984Z"
+    dependencies:
+    - condition: console.enabled
+      name: console
+      repository: file://./charts/console
+      version: '>=0.5 <1.0'
+    - condition: connectors.enabled
+      name: connectors
+      repository: file://./charts/connectors
+      version: '>=0.1.2 <1.0'
+    description: Redpanda is the real-time engine for modern apps.
+    digest: 7a65693df02338ae390c8d04b0defa3abd7dbbaa498be21dd8516dcbf1e2a13c
+    icon: https://images.ctfassets.net/paqvtpyf8rwu/3cYHw5UzhXCbKuR24GDFGO/73fb682e6157d11c10d5b2b5da1d5af0/skate-stand-panda.svg
+    kubeVersion: '>=1.21-0'
+    maintainers:
+    - name: redpanda-data
+      url: https://github.com/orgs/redpanda-data/people
+    name: redpanda
+    sources:
+    - https://github.com/redpanda-data/helm-charts
+    type: application
+    urls:
+    - assets/redpanda/redpanda-5.8.5.tgz
+    version: 5.8.5
   - annotations:
       artifacthub.io/images: |
         - name: redpanda