bump versions

Author: kvaps

README.md

@@ -26,7 +26,7 @@ Deploy Kubernetes in Kubernetes using Helm
 
 ```bash
 helm repo add kvaps https://kvaps.github.io/charts
-helm install foo kvaps/kubernetes --version 0.12.0 \
+helm install foo kvaps/kubernetes --version 0.13.0 \
   --namespace foo \
   --create-namespace \
   --set persistence.storageClassName=local-path

build/tools/Dockerfile

@@ -1,7 +1,7 @@
 FROM docker.io/library/alpine:3.12
 
 RUN apk add --no-cache openssl
-ARG VERSION=v1.21.3
+ARG VERSION=v1.22.0
 RUN wget "https://storage.googleapis.com/kubernetes-release/release/${VERSION}/bin/linux/amd64/kubectl" \
       -O /usr/local/bin/kubectl \
  && chmod +x /usr/local/bin/kubectl

deploy/helm/kubernetes/Chart.yaml

@@ -1,7 +1,7 @@
 name: kubernetes
 description: Production-Grade Container Scheduling and Management
-version: 0.12.0
-appVersion: 1.21.3
+version: 0.13.0
+appVersion: 1.22.0
 icon: https://upload.wikimedia.org/wikipedia/commons/thumb/3/39/Kubernetes_logo_without_workmark.svg/723px-Kubernetes_logo_without_workmark.svg.png
 keywords:
   - kubernetes

deploy/helm/kubernetes/manifests/konnectivity-agent-deployment.yaml

@@ -40,6 +40,9 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       hostNetwork: {{ .Values.konnectivityAgent.hostNetwork }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       priorityClassName: system-cluster-critical
       tolerations:
       - key: "CriticalAddonsOnly"

deploy/helm/kubernetes/scripts/configure-cluster.sh

@@ -21,8 +21,6 @@ export KUBECONFIG=/etc/kubernetes/admin.conf
 # upload configuration
 # TODO: https://github.com/kvaps/kubernetes-in-kubernetes/issues/6
 kubeadm init phase upload-config kubeadm --config /config/kubeadmcfg.yaml
-kubectl patch configmap -n kube-system kubeadm-config \
-  -p '{"data":{"ClusterStatus":"apiEndpoints: {}\napiVersion: kubeadm.k8s.io/v1beta2\nkind: ClusterStatus"}}'
 
 # upload configuration
 # TODO: https://github.com/kvaps/kubernetes-in-kubernetes/issues/5

deploy/helm/kubernetes/templates/admin-deployment.yaml

@@ -113,6 +113,9 @@ spec:
       {{- with .Values.admin.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - configMap:
           name: "{{ $fullName }}-admin-conf"

deploy/helm/kubernetes/templates/apiserver-deployment.yaml

@@ -164,6 +164,9 @@ spec:
       {{- with .Values.apiServer.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - configMap:
           name: "{{ $fullName }}-apiserver-config"

deploy/helm/kubernetes/templates/controller-manager-deployment.yaml

@@ -129,6 +129,9 @@ spec:
       {{- with .Values.controllerManager.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - configMap:
           name: "{{ $fullName }}-controller-manager-conf"

deploy/helm/kubernetes/templates/etcd-backup-cronjob.yaml

@@ -127,6 +127,9 @@ spec:
           {{- with .Values.etcd.backup.sidecars }}
           {{- toYaml . | nindent 10 }}
           {{- end }}
+          securityContext:
+            seccompProfile:
+              type: RuntimeDefault
           volumes:
           - secret:
               secretName: {{ $fullName }}-pki-etcd-ca

deploy/helm/kubernetes/templates/etcd-statefulset.yaml

@@ -150,6 +150,9 @@ spec:
       {{- with .Values.etcd.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - secret:
           secretName: {{ $fullName }}-pki-etcd-ca