Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add kubelinter scans for all charts #300

Closed
wants to merge 33 commits into from
Closed

Add kubelinter scans for all charts #300

wants to merge 33 commits into from

Conversation

mdutka-dell
Copy link
Contributor

@mdutka-dell mdutka-dell commented Sep 28, 2023

Is this a new chart?

No

What this PR does / why we need it:

KubeLinter analyzes Kubernetes YAML files and Helm charts and checks them against various best practices, with a focus on production readiness and security eg.:

  • running containers as a non-root user,
  • enforcing least privilege
  • storing sensitive information only in secrets.

Which issue(s) is this PR associated with:

  • #Issue_Number

Special notes for your reviewer:

Checklist:

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

  • Chart Version bumped
  • Variables are documented in the chart README.md
  • Title of the PR starts with the chart name (e.g. [charts_dir/mychartname]) if applicable

@tdawe tdawe changed the base branch from old-release-v1.9.0 to release-v1.9.0 December 13, 2023 16:21
suryagupta4 and others added 6 commits December 13, 2023 16:14
…on update (#303)

* powerstore v2.9.0 support

* sidecar version update
* Bump-up observability version for CSM 1.9

* add patch verb to powerscale

* Add codeowners
* One place to configure all images
* Use latest versions of CSI official sidecars
* Set Default container to the driver and avoid podmon logs by default
* Fix annotation and remove driverVersion
* Centralize all images to one place

* Use latest CSI sidecars and default container to driver

* Add default annotation

* Use bleeding edge helm validation action to workaround cosign issue
coulof and others added 22 commits December 13, 2023 16:14
* One place to configure all images
* Fix the csi provisioner to use the full name
* Use latest versions of CSI official sidecars
* PowerFlex v2.8.0 release (#250)

* PowerFlex  SDC  updated (#251)

* Centralized images

* minor typo fixed (#258)

* powerstore v2.8.0 & k8s 1.28 support (#262)

* update auth to 1.8 (#271)

* update auth to 1.8

Signed-off-by: arnchiequ-dell <arnchie.qu@dell.com>

* Updating podmon to 1.7

Signed-off-by: arnchiequ-dell <arnchie.qu@dell.com>

* Update Observability values file for Authorization sidecar image version

---------

Signed-off-by: arnchiequ-dell <arnchie.qu@dell.com>
Co-authored-by: Alik Saring <alik.saring@dell.com>

* Adding CSI Powerstore driver’s effective pod security profile for supporting ephemeral volumes as part of Openshift 4.13 support (#261)

Co-authored-by: Surya Gupta <109594002+suryagupta4@users.noreply.github.com>

* removed externalAccess from powerflex manifests. (#283)

* Revert "Adding CSI Powerstore driver’s effective pod security profile for supporting ephemeral volumes as part of Openshift 4.13 support (#261)" (#284)

This reverts commit c1dd93b.

* NFS ACL parameter removed (#289)

* fix values

---------

Signed-off-by: arnchiequ-dell <arnchie.qu@dell.com>
Co-authored-by: KshitijaKakde <111420075+KshitijaKakde@users.noreply.github.com>
Co-authored-by: coulof <florian.coulombel@dell.com>
Co-authored-by: Rajshree Khare <69839943+khareRajshree@users.noreply.github.com>
Co-authored-by: Surya Gupta <109594002+suryagupta4@users.noreply.github.com>
Co-authored-by: aqu-dell <108017114+arnchiequ-dell@users.noreply.github.com>
Co-authored-by: Alik Saring <alik.saring@dell.com>
Co-authored-by: alankar-verma <125348121+alankar-verma@users.noreply.github.com>
Co-authored-by: VamsiSiddu-7 <103578883+VamsiSiddu-7@users.noreply.github.com>
* PowerFlex v2.8.0 release (#250)

* Centralized images

* Adding CSI Powerstore driver’s effective pod security profile for supporting ephemeral volumes as part of Openshift 4.13 support (#261)

Co-authored-by: Surya Gupta <109594002+suryagupta4@users.noreply.github.com>

* removed externalAccess from powerflex manifests. (#283)

* Revert "Adding CSI Powerstore driver’s effective pod security profile for supporting ephemeral volumes as part of Openshift 4.13 support (#261)" (#284)

This reverts commit c1dd93b.

* Bump sidecars versions

* Bump up observability version for CSM 1.9 (#314)

* Bump-up observability version for CSM 1.9

* add patch verb to powerscale

* Add codeowners

* update attacher sidecar for powerflex and powerstore. (#315)

* [charts/csi-powerstore] Centralize all images to one place (#310)

* One place to configure all images
* Use latest versions of CSI official sidecars
* Set Default container to the driver and avoid podmon logs by default
* Fix annotation and remove driverVersion

* [charts/csi-powerflex] Centralize all images to one place #263 (#311)

* Centralize all images to one place

* Use latest CSI sidecars and default container to driver

* Add default annotation

* Use bleeding edge helm validation action to workaround cosign issue

* [charts/csi-powermax] Container images in one place (#309)

* One place to configure all images
* Fix the csi provisioner to use the full name
* Use latest versions of CSI official sidecars

* remove duplicate podmon image

---------

Co-authored-by: KshitijaKakde <111420075+KshitijaKakde@users.noreply.github.com>
Co-authored-by: coulof <florian.coulombel@dell.com>
Co-authored-by: alankar-verma <125348121+alankar-verma@users.noreply.github.com>
Co-authored-by: Surya Gupta <109594002+suryagupta4@users.noreply.github.com>
Co-authored-by: VamsiSiddu-7 <103578883+VamsiSiddu-7@users.noreply.github.com>
Co-authored-by: coulof <49235405+coulof@users.noreply.github.com>
Co-authored-by: panigs7 <92028646+panigs7@users.noreply.github.com>
* add unity v2.9.0 support

* remove image description
* Powerscale and sidecar version changes

* csi-node-driver-registrar version changed to 2.9.1
* external access powerflex

* adding external access in csm chart
@shanmydell shanmydell changed the base branch from release-v1.9.0 to main January 9, 2024 09:32
@anandrajak1 anandrajak1 deleted the kubelinter branch October 17, 2024 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.