Merge pull request #916 from equinor/master

Release radix-operator
equinor · Sep 1, 2023 · abccda2 · abccda2
2 parents 8edfc64 + a4a9e99
commit abccda2
Show file tree

Hide file tree

Showing 26 changed files with 1,186 additions and 91 deletions.
diff --git a/.vscode/launch.json b/.vscode/launch.json
@@ -90,6 +90,7 @@
         "KUBE_CLIENT_RATE_LIMIT_QPS": "500",
         "KUBE_CLIENT_RATE_LIMIT_BURST": "5",
         "RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_LEVEL": "baseline",
+        "RADIXOPERATOR_PODSECURITYSTANDARD_APP_NAMESPACE_ENFORCE_LEVEL": "privileged",
         "RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_VERSION": "v1.23",
         "RADIXOPERATOR_PODSECURITYSTANDARD_AUDIT_LEVEL": "restricted",
         "RADIXOPERATOR_PODSECURITYSTANDARD_AUDIT_VERSION": "v1.23",

diff --git a/charts/radix-operator/Chart.yaml b/charts/radix-operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: radix-operator
-version: 1.20.7
-appVersion: 1.40.7
+version: 1.21.5
+appVersion: 1.41.5
 kubeVersion: ">=1.24.0"
 description: Radix Operator
 keywords:

diff --git a/charts/radix-operator/templates/deployment.yaml b/charts/radix-operator/templates/deployment.yaml
@@ -125,6 +125,10 @@ spec:
             - name: RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_LEVEL
               value: {{ .Values.podSecurityStandard.enforce.level }}
             {{- end }}
+            {{- if .Values.podSecurityStandard.enforce.level }}
+            - name: RADIXOPERATOR_PODSECURITYSTANDARD_APP_NAMESPACE_ENFORCE_LEVEL
+              value: {{ .Values.podSecurityStandard.appNamespace.enforce.level }}
+            {{- end }}
             {{- if .Values.podSecurityStandard.enforce.version }}
             - name: RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_VERSION
               value: {{ .Values.podSecurityStandard.enforce.version }}
@@ -145,6 +149,10 @@ spec:
             - name: RADIXOPERATOR_PODSECURITYSTANDARD_WARN_VERSION
               value: {{ .Values.podSecurityStandard.warn.version }}
             {{- end }}
+            - name: SECCOMP_PROFILE_FILENAME
+              value: {{ .Values.seccompProfile.fileNameOnNode }}
+            - name: RADIX_BUILDAH_IMAGE_BUILDER
+              value: {{ .Values.buildahImageBuilder }}
           livenessProbe:
             httpGet:
               path: /healthz