onprem: 2.3.0 rc.2 release (#1238)

Author: mikhail-klimko

.github/PULL_REQUEST_TEMPLATE.md

@@ -4,6 +4,8 @@
 
 ## Notes
 
-## CI
+## PR Comments
 
-To trigger `onprem-ci` pipeline add `/test` comment in your PR
+Add the following comments to the PR:
+
+`/test` - to trigger Onprem CI Build

.github/pr-branch-labeler.yml

@@ -1,17 +1,2 @@
-production:
-  base: "production*"
-
 onprem:
   base: "onprem*"
-
-pre-prod:
-  base: "non-prod-ue1-pre-prod*"
-
-test-1:
-  base: "non-prod-ue1-test-1*"
-
-sandbox-1:
-  base: "non-prod-ue1-sandbox-1*"
-
-sandbox-2:
-  base: "non-prod-ue1-sandbox-2*"

.github/workflows/validate-pr-title.yaml

@@ -0,0 +1,26 @@
+## Reference: https://github.com/amannn/action-semantic-pull-request
+name: PR title
+
+on:
+  pull_request:
+    types:
+    - opened
+    - reopened
+    - edited
+    - synchronize
+    branches:
+    - onprem*
+
+
+jobs:
+  validate-pr-title:
+    runs-on: ubuntu-latest
+    steps:
+
+    - uses: amannn/action-semantic-pull-request@v5.4.0
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        requireScope: false
+        types: |
+          onprem

codefresh/Chart.lock

@@ -49,7 +49,7 @@ dependencies:
   version: 1.16.11
 - name: cfsign
   repository: oci://quay.io/codefresh/charts
-  version: 1.7.0
+  version: 1.8.0
 - name: tasker-kubernetes
   repository: oci://quay.io/codefresh/charts
   version: 1.26.2
@@ -127,7 +127,7 @@ dependencies:
   version: 1.12.9
 - name: helm-repo-manager
   repository: oci://quay.io/codefresh/charts
-  version: 0.13.4
+  version: 0.14.0
 - name: hermes
   repository: oci://quay.io/codefresh/charts
   version: 0.21.8
@@ -139,21 +139,18 @@ dependencies:
   version: 0.8.5
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.32
+  version: 0.49.33
 - name: cf-platform-analytics
   repository: oci://quay.io/codefresh/charts
-  version: 0.49.32
+  version: 0.49.33
 - name: argo-platform
   repository: oci://quay.io/codefresh/charts
-  version: 1.2693.0
+  version: 1.2699.0
 - name: argo-hub-platform
   repository: oci://quay.io/codefresh/charts
   version: 0.1.11
-- name: codefresh-tunnel-server
-  repository: oci://quay.io/codefresh/charts
-  version: 0.1.16
 - name: cf-oidc-provider
   repository: oci://quay.io/codefresh/charts
   version: 0.0.14
-digest: sha256:63c7d17e7e238fc3a7229308a3c51252828cd5aff7047eac1abd8327a931dda2
-generated: "2024-03-13T11:36:16.068083886+03:00"
+digest: sha256:838c5ac5f30d0e4112ed51e7f09dd54642ec0a2691a3086803a26ffa98f351c6
+generated: "2024-03-13T20:45:09.460454743+03:00"

codefresh/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 description: Helm Chart for Codefresh On-Prem
 name: codefresh
-version: 2.3.0-rc.1
+version: 2.3.0-rc.2
 keywords:
   - codefresh
 home: https://codefresh.io/
@@ -17,7 +17,7 @@ annotations:
   artifacthub.io/prerelease: "true"
   artifacthub.io/changes: |
     - kind: changed
-      description: Initial 2.3.0-rc.1 pre-release
+      description: Initial 2.3.0-rc.2 pre-release. Security updates
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
@@ -237,10 +237,6 @@ dependencies:
     version: "*"
     repository: oci://quay.io/codefresh/charts
     condition: argo-platform.enabled
-  - name: codefresh-tunnel-server
-    version: "*"
-    repository: oci://quay.io/codefresh/charts
-    condition: codefresh-tunnel-server.enabled
   - name: cf-oidc-provider
     repository: oci://quay.io/codefresh/charts
     version: "*"

codefresh/README.md

@@ -1,6 +1,6 @@
 ## Codefresh On-Premises
 
-![Version: 2.3.0-rc.1](https://img.shields.io/badge/Version-2.3.0--rc.1-informational?style=flat-square) ![AppVersion: 2.3.0](https://img.shields.io/badge/AppVersion-2.3.0-informational?style=flat-square)
+![Version: 2.3.0-rc.2](https://img.shields.io/badge/Version-2.3.0--rc.2-informational?style=flat-square) ![AppVersion: 2.3.0](https://img.shields.io/badge/AppVersion-2.3.0-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh On-Premises](https://codefresh.io/docs/docs/getting-started/intro-to-codefresh/) to Kubernetes.
 
@@ -2008,7 +2008,6 @@ kubectl -n $NAMESPACE delete secret codefresh-certs-server
 | charts-manager | object | See below | charts-manager |
 | ci.enabled | bool | `false` |  |
 | cluster-providers | object | See below | cluster-providers |
-| codefresh-tunnel-server | object | See below | codefresh-tunnel-server Don't enable! Not supported at the moment. |
 | consul | object | See below | consul Ref: https://github.com/bitnami/charts/blob/main/bitnami/consul/values.yaml |
 | context-manager | object | See below | context-manager |
 | cronus | object | See below | cronus |

codefresh/values.yaml

@@ -14,7 +14,7 @@ gencerts:
   image:
     registry: quay.io
     repository: codefresh/kubectl
-    tag: 1.28.4
+    tag: 1.29.2
   rbac:
     enabled: true
   ttlSecondsAfterFinished: 300
@@ -762,7 +762,7 @@ cfsign:
       image:
         registry: quay.io
         repository: codefresh/curl
-        tag: 8.4.0
+        tag: 8.5.0
   affinity: {}
   nodeSelector: {}
   podSecurityContext: {}
@@ -1812,12 +1812,6 @@ cf-oidc-provider:
         - path: /
       tls: []
 
-# -- codefresh-tunnel-server
-# @default -- See below
-# Don't enable! Not supported at the moment.
-codefresh-tunnel-server:
-  enabled: false
-
 # -- DEPRECATED - Use `.imageCredentials` instead
 # dockerconfig (for `kcfi` tool backward compatibility) for Image Pull Secret. Obtain GCR Service Account JSON (sa.json) at support@codefresh.io
 # ```shell