Skip to content

chore: fix various vulnarabilities #715

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
pysarenko-bohdan wants to merge 6 commits into from
+26 −28
Closed

chore: fix various vulnarabilities #715

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
34a5eef
bump engine version
pysarenko-bohdan Jul 23, 2026
3d66a31
update docs
pysarenko-bohdan Jul 23, 2026
44d77a1
bump engine
pysarenko-bohdan Jul 24, 2026
7ac4e0f
update documentation for release 10.3.9
pysarenko-bohdan Jul 24, 2026
80a4854
bump cli
pysarenko-bohdan Jul 24, 2026
808290c
update docs
pysarenko-bohdan Jul 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 6 additions & 8 deletions charts/cf-runtime/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
apiVersion: v2
description: A Helm chart for Codefresh Runner
name: cf-runtime
version: 10.3.8
version: 10.3.9
keywords:
- codefresh
- runner
Expand All @@ -17,14 +17,12 @@ annotations:
artifacthub.io/containsSecurityUpdates: "true"
# Supported kinds: `added`, `changed`, `deprecated`, `removed`, `fixed`, `security`:
artifacthub.io/changes: |
- kind: fixed
description: 'Fixes the bug that was causing steps of type "deploy" to fail while pulling secrets.'
- kind: fixed
description: 'ECR integration with Service Account uses the region of integration.'
- kind: changed
description: 'Update "engine" to "3.3.0"'
- kind: security
description: 'Update "pikolo" to "0.15.7". Security fixes.'
description: 'Update "engine" to "3.3.2". Security fixes.'
- kind: security
description: 'Update "cf-app-proxy" to "0.1.3". Security fixes.'
- kind: security
description: 'Update "cf-container-logger" to "2.0.31". Security fixes.'
dependencies:
- name: cf-common
repository: oci://quay.io/codefresh/charts
Expand Down
12 changes: 6 additions & 6 deletions charts/cf-runtime/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
## Codefresh Runner

![Version: 10.3.8](https://img.shields.io/badge/Version-10.3.8-informational?style=flat-square)
![Version: 10.3.9](https://img.shields.io/badge/Version-10.3.9-informational?style=flat-square)

Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/installation/codefresh-runner/) to Kubernetes.

Expand Down Expand Up @@ -1225,7 +1225,7 @@ Install the Helm chart
| appProxy.env.OTEL_TRACES_EXPORTER | string | `"none"` | OTel traces exporter to be used. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/ |
| appProxy.env.OTEL_TRACES_SAMPLER | string | `"parentbased_always_on"` | OTel sampler to be used for traces. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/ |
| appProxy.env.PYROSCOPE_SERVER_ADDRESS | string | `""` | Pyroscope server address |
| appProxy.image | object | `{"digest":"sha256:8e7d27e24d0ec25e4825906359395efef0fe89d89b6c44d5a9fbb7b9dee142e7","registry":"quay.io","repository":"codefresh/cf-app-proxy","tag":"0.1.2"}` | Set image |
| appProxy.image | object | `{"digest":"sha256:94847386db064a87d3ddcbfded5e5fd393f8695ddfe05fd406c152e0d2efe9a7","registry":"quay.io","repository":"codefresh/cf-app-proxy","tag":"0.1.3"}` | Set image |
| appProxy.ingress.annotations | object | `{}` | Set extra annotations for ingress object |
| appProxy.ingress.class | string | `""` | Set ingress class |
| appProxy.ingress.host | string | `""` | Set DNS hostname the ingress will use |
Expand Down Expand Up @@ -1327,7 +1327,7 @@ Install the Helm chart
| runner.env | object | `{"NEW_RELIC_ENABLED":"false"}` | Add additional env vars |
| runner.env.NEW_RELIC_ENABLED | string | `"false"` | DEPRECATED: New Relic instrumentation is no longer supported and will be removed in future version. Use OTel instead. |
| runner.image | object | `{"digest":"sha256:836510a8579e4985f046744cb409ae895c62aa01117884004887f7c061aad636","registry":"quay.io","repository":"codefresh/venona","tag":"2.0.10"}` | Set image |
| runner.init | object | `{"image":{"digest":"sha256:32f4569f55f69ff9673cfd376b9321afd0bdbf889c5fbd320cf4b4421a160d7f","registry":"quay.io","repository":"codefresh/cli","tag":"1.2.2-rootless"},"resources":{"limits":{"cpu":"1","memory":"512Mi"},"requests":{"cpu":"0.2","memory":"256Mi"}}}` | Init container |
| runner.init | object | `{"image":{"digest":"sha256:811924d0127e67a02a329817aa714b9a2a23e123b2e39fb41335d961568e8a55","registry":"quay.io","repository":"codefresh/cli","tag":"1.2.3-rootless"},"resources":{"limits":{"cpu":"1","memory":"512Mi"},"requests":{"cpu":"0.2","memory":"256Mi"}}}` | Init container |
| runner.name | string | `""` | Set runner deployment name |
| runner.nodeSelector | object | `{}` | Set node selector |
| runner.podAnnotations | object | `{}` | Set pod annotations |
Expand Down Expand Up @@ -1380,7 +1380,7 @@ Install the Helm chart
| runtime.dind.userVolumeMounts | object | `{}` | Add extra volume mounts |
| runtime.dind.userVolumes | object | `{}` | Add extra volumes |
| runtime.dindDaemon | object | See below | DinD pod daemon config |
| runtime.engine | object | `{"affinity":{},"command":["node","dist/server/index.js"],"env":{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","NEW_RELIC_ENABLED":"false","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"},"image":{"digest":"sha256:8a0d47eefc6648902fc7fbde132206750257a8cc703d6d871296f8eb2438b285","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.3.0"},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"resources":{"limits":{"cpu":"1000m","memory":"2048Mi"},"requests":{"cpu":"100m","memory":"128Mi"}},"runtimeImages":{"alpine":{"digest":"sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","registry":"docker.io","repository":"alpine","tag":"latest"},"compose":{"digest":"sha256:ffee581569a16ff77266fe11669415f54ffe12619e8814267620386438067018","registry":"quay.io","repository":"codefresh/compose","tag":"v5.2.0-1.6.7"},"container-logger":{"digest":"sha256:d1a6c23addb6e652f26cef3d5dde3fa65ea95662e5349ccf4431b8161e9efc60","registry":"quay.io","repository":"codefresh/cf-container-logger","tag":"2.0.29"},"cosign-image-signer":{"digest":"sha256:6097ec0f8f6426c5c71a080795643189cc8e7400899b70d49facdceb498916de","registry":"quay.io","repository":"codefresh/cf-cosign-image-signer","tag":"3.1.1-cf.1"},"default-qemu":{"digest":"sha256:d3b963f787999e6c0219a48dba02978769286ff61a5f4d26245cb6a6e5567ea3","registry":"docker.io","repository":"tonistiigi/binfmt","tag":"qemu-v10.2.1"},"docker-builder":{"digest":"sha256:65070d16c54e84ce0bfd16d2e7389d82a5ee1215e3431aa441558dfbc843fdb2","registry":"quay.io","repository":"codefresh/cf-docker-builder","tag":"1.6.7"},"docker-puller":{"digest":"sha256:18b95752bbd76a37eecc69b41186ec3987d5a86cf28bd91485fbc00087922463","registry":"quay.io","repository":"codefresh/cf-docker-puller","tag":"8.0.39"},"docker-pusher":{"digest":"sha256:b1bc264903ff747c5496fd6a851f5586fd17e1da6550058a2af4689cd69d8155","registry":"quay.io","repository":"codefresh/cf-docker-pusher","tag":"6.0.32"},"fs-ops":{"digest":"sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf","registry":"quay.io","repository":"codefresh/fs-ops","tag":"1.2.13"},"gc-builder":{"digest":"sha256:dbc469bb080a358011aabde00117d6e4505a2d4fa9a2bffa1a8ce58cad1ed870","registry":"quay.io","repository":"codefresh/gcloud-builder","tag":"0.5.13"},"git-cloner":{"digest":"sha256:d5eae428c4896847795202036645a90fdad5f2f68a3eb08bf8ca7e65e450b5ed","registry":"quay.io","repository":"codefresh/cf-git-cloner","tag":"10.3.13"},"kube-deploy":{"digest":"sha256:a9642f66c7696367b43f2931bab6f647f9f91262e194609e64a19ea362a7c873","registry":"quay.io","repository":"codefresh/cf-deploy-kubernetes","tag":"18.0.2"},"pipeline-debugger":{"digest":"sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7","registry":"quay.io","repository":"codefresh/cf-debugger","tag":"1.3.14"},"template-engine":{"digest":"sha256:1c1ff75feceb8d4e6ffa09b933605d0a1476bf64890f247be186da3200a9d004","registry":"quay.io","repository":"codefresh/pikolo","tag":"0.15.7"}},"runtimeImagesRegistry":"","schedulerName":"","serviceAccount":"codefresh-engine","terminationGracePeriodSeconds":180,"tolerations":[],"userEnvVars":[],"workflowLimits":{"MAXIMUM_ALLOWED_TIME_BEFORE_PRE_STEPS_SUCCESS":600,"MAXIMUM_ALLOWED_WORKFLOW_AGE_BEFORE_TERMINATION":86400,"MAXIMUM_ELECTED_STATE_AGE_ALLOWED":900,"MAXIMUM_POST_STEPS_GRACE_PERIOD_MINUTES":30,"MAXIMUM_RETRY_ATTEMPTS_ALLOWED":20,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED":900,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED_WITHOUT_UPDATE":300,"TIME_ENGINE_INACTIVE_UNTIL_TERMINATION":300,"TIME_ENGINE_INACTIVE_UNTIL_UNHEALTHY":60,"TIME_INACTIVE_UNTIL_TERMINATION":2700}}` | Parameters for Engine pod (aka "pipeline" orchestrator). |
| runtime.engine | object | `{"affinity":{},"command":["node","dist/server/index.js"],"env":{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","NEW_RELIC_ENABLED":"false","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"},"image":{"digest":"sha256:59c8d68712548b83602614b690f7564134084986c37634f4b64f56d79b360ecd","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.3.2"},"nodeSelector":{},"podAnnotations":{},"podLabels":{},"resources":{"limits":{"cpu":"1000m","memory":"2048Mi"},"requests":{"cpu":"100m","memory":"128Mi"}},"runtimeImages":{"alpine":{"digest":"sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","registry":"docker.io","repository":"alpine","tag":"latest"},"compose":{"digest":"sha256:ffee581569a16ff77266fe11669415f54ffe12619e8814267620386438067018","registry":"quay.io","repository":"codefresh/compose","tag":"v5.2.0-1.6.7"},"container-logger":{"digest":"sha256:790b045da3fcba782e43bcb96c19379c818480b6b6dff47718e8490ea65cade3","registry":"quay.io","repository":"codefresh/cf-container-logger","tag":"2.0.31"},"cosign-image-signer":{"digest":"sha256:6097ec0f8f6426c5c71a080795643189cc8e7400899b70d49facdceb498916de","registry":"quay.io","repository":"codefresh/cf-cosign-image-signer","tag":"3.1.1-cf.1"},"default-qemu":{"digest":"sha256:d3b963f787999e6c0219a48dba02978769286ff61a5f4d26245cb6a6e5567ea3","registry":"docker.io","repository":"tonistiigi/binfmt","tag":"qemu-v10.2.1"},"docker-builder":{"digest":"sha256:65070d16c54e84ce0bfd16d2e7389d82a5ee1215e3431aa441558dfbc843fdb2","registry":"quay.io","repository":"codefresh/cf-docker-builder","tag":"1.6.7"},"docker-puller":{"digest":"sha256:18b95752bbd76a37eecc69b41186ec3987d5a86cf28bd91485fbc00087922463","registry":"quay.io","repository":"codefresh/cf-docker-puller","tag":"8.0.39"},"docker-pusher":{"digest":"sha256:b1bc264903ff747c5496fd6a851f5586fd17e1da6550058a2af4689cd69d8155","registry":"quay.io","repository":"codefresh/cf-docker-pusher","tag":"6.0.32"},"fs-ops":{"digest":"sha256:1f7ab2fddb3b8bb4153046261367e296c6c9ac3b224f48cd2028371a9f0e2bcf","registry":"quay.io","repository":"codefresh/fs-ops","tag":"1.2.13"},"gc-builder":{"digest":"sha256:e43f05470f4579ed5788f1e8f39b4e398c69dd3c7e189e2eb80ef694bef616cf","registry":"quay.io","repository":"codefresh/gcloud-builder","tag":"0.5.18"},"git-cloner":{"digest":"sha256:d5eae428c4896847795202036645a90fdad5f2f68a3eb08bf8ca7e65e450b5ed","registry":"quay.io","repository":"codefresh/cf-git-cloner","tag":"10.3.13"},"kube-deploy":{"digest":"sha256:a9642f66c7696367b43f2931bab6f647f9f91262e194609e64a19ea362a7c873","registry":"quay.io","repository":"codefresh/cf-deploy-kubernetes","tag":"18.0.2"},"pipeline-debugger":{"digest":"sha256:7a5890afcfdad4a9aa4eec1a218cb468d52855540c847b3809085415751bbaa7","registry":"quay.io","repository":"codefresh/cf-debugger","tag":"1.3.14"},"template-engine":{"digest":"sha256:1c1ff75feceb8d4e6ffa09b933605d0a1476bf64890f247be186da3200a9d004","registry":"quay.io","repository":"codefresh/pikolo","tag":"0.15.7"}},"runtimeImagesRegistry":"","schedulerName":"","serviceAccount":"codefresh-engine","terminationGracePeriodSeconds":180,"tolerations":[],"userEnvVars":[],"workflowLimits":{"MAXIMUM_ALLOWED_TIME_BEFORE_PRE_STEPS_SUCCESS":600,"MAXIMUM_ALLOWED_WORKFLOW_AGE_BEFORE_TERMINATION":86400,"MAXIMUM_ELECTED_STATE_AGE_ALLOWED":900,"MAXIMUM_POST_STEPS_GRACE_PERIOD_MINUTES":30,"MAXIMUM_RETRY_ATTEMPTS_ALLOWED":20,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED":900,"MAXIMUM_TERMINATING_STATE_AGE_ALLOWED_WITHOUT_UPDATE":300,"TIME_ENGINE_INACTIVE_UNTIL_TERMINATION":300,"TIME_ENGINE_INACTIVE_UNTIL_UNHEALTHY":60,"TIME_INACTIVE_UNTIL_TERMINATION":2700}}` | Parameters for Engine pod (aka "pipeline" orchestrator). |
| runtime.engine.affinity | object | `{}` | Set affinity |
| runtime.engine.command | list | `["node","dist/server/index.js"]` | Set container command. |
| runtime.engine.env | object | `{"CF_TELEMETRY_LOGS_LEVEL":"debug","CF_TELEMETRY_OTEL_ALLOW_HTTP_INSTRUMENTATION":"false","CF_TELEMETRY_OTEL_ENABLE":"true","CF_TELEMETRY_PROMETHEUS_ENABLE":"false","CF_TELEMETRY_PROMETHEUS_ENABLE_PROCESS_METRICS":"false","CF_TELEMETRY_PROMETHEUS_HOST":"0.0.0.0","CF_TELEMETRY_PROMETHEUS_PORT":"9100","CF_TELEMETRY_PYROSCOPE_ENABLE":"false","CONTAINER_LOGGER_EXEC_CHECK_INTERVAL_MS":1000,"DOCKER_REQUEST_TIMEOUT_MS":30000,"FORCE_COMPOSE_SERIAL_PULL":false,"LOGGER_LEVEL":"debug","LOG_OUTGOING_HTTP_REQUESTS":false,"METRICS_SCRAPE_TIMEOUT_MS":"0","NEW_RELIC_ENABLED":"false","OTEL_EXPORTER_OTLP_COMPRESSION":"gzip","OTEL_EXPORTER_OTLP_ENDPOINT":"http://localhost:4317","OTEL_EXPORTER_OTLP_PROTOCOL":"grpc","OTEL_EXPORTER_PROMETHEUS_HOST":"0.0.0.0","OTEL_EXPORTER_PROMETHEUS_PORT":"9464","OTEL_LOGS_EXPORTER":"none","OTEL_METRICS_EXPORTER":"otlp","OTEL_METRIC_EXPORT_INTERVAL":"10000","OTEL_METRIC_EXPORT_TIMEOUT":"5000","OTEL_SEMCONV_STABILITY_OPT_IN":"http","OTEL_TRACES_EXPORTER":"none","OTEL_TRACES_SAMPLER":"parentbased_always_on","PYROSCOPE_SERVER_ADDRESS":"","TRUSTED_QEMU_IMAGES":"tonistiigi/binfmt"}` | Set additional env vars. |
Expand Down Expand Up @@ -1413,7 +1413,7 @@ Install the Helm chart
| runtime.engine.env.OTEL_TRACES_SAMPLER | string | `"parentbased_always_on"` | OTel sampler to be used for traces. Ref: https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/ |
| runtime.engine.env.PYROSCOPE_SERVER_ADDRESS | string | `""` | Pyroscope server address |
| runtime.engine.env.TRUSTED_QEMU_IMAGES | string | `"tonistiigi/binfmt"` | Trusted QEMU images used for docker builds - when left blank defaults to .runtime.engine.runtimeImages.DEFAULT_QEMU_IMAGE value |
| runtime.engine.image | object | `{"digest":"sha256:8a0d47eefc6648902fc7fbde132206750257a8cc703d6d871296f8eb2438b285","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.3.0"}` | Set image. |
| runtime.engine.image | object | `{"digest":"sha256:59c8d68712548b83602614b690f7564134084986c37634f4b64f56d79b360ecd","pullPolicy":"IfNotPresent","registry":"quay.io","repository":"codefresh/engine","tag":"3.3.2"}` | Set image. |
| runtime.engine.nodeSelector | object | `{}` | Set node selector. |
| runtime.engine.podAnnotations | object | `{}` | Set pod annotations. |
| runtime.engine.podLabels | object | `{}` | Set pod labels. |
Expand All @@ -1440,7 +1440,7 @@ Install the Helm chart
| runtime.inCluster | bool | `true` | (for On-Premise only) Set inCluster runtime |
| runtime.kubeconfigFilePath | string | `""` | (for On-Premise only) Set kubeconfig name and path |
| runtime.patch | object | See below | Parameters for `runtime-patch` post-upgrade/install hook |
| runtime.patch.cronjob | object | `{"affinity":{},"enabled":true,"failedJobsHistory":1,"image":{"digest":"sha256:32f4569f55f69ff9673cfd376b9321afd0bdbf889c5fbd320cf4b4421a160d7f","registry":"quay.io","repository":"codefresh/cli","tag":"1.2.2-rootless"},"nodeSelector":{},"podSecurityContext":{},"resources":{},"schedule":"0/5 * * * *","successfulJobsHistory":1,"tolerations":[]}` | CronJob to update the runtime on schedule |
| runtime.patch.cronjob | object | `{"affinity":{},"enabled":true,"failedJobsHistory":1,"image":{"digest":"sha256:811924d0127e67a02a329817aa714b9a2a23e123b2e39fb41335d961568e8a55","registry":"quay.io","repository":"codefresh/cli","tag":"1.2.3-rootless"},"nodeSelector":{},"podSecurityContext":{},"resources":{},"schedule":"0/5 * * * *","successfulJobsHistory":1,"tolerations":[]}` | CronJob to update the runtime on schedule |
| runtime.rbac | object | `{"create":true,"rules":[]}` | RBAC parameters |
| runtime.rbac.create | bool | `true` | Create RBAC resources |
| runtime.rbac.rules | list | `[]` | Add custom rule to the engine role |
Expand Down
28 changes: 14 additions & 14 deletions charts/cf-runtime/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,8 +81,8 @@ runner:
image:
registry: quay.io
repository: codefresh/cli
tag: 1.2.2-rootless
digest: sha256:32f4569f55f69ff9673cfd376b9321afd0bdbf889c5fbd320cf4b4421a160d7f
tag: 1.2.3-rootless
digest: sha256:811924d0127e67a02a329817aa714b9a2a23e123b2e39fb41335d961568e8a55
resources:
limits:
memory: 512Mi
Expand Down Expand Up @@ -507,9 +507,9 @@ runtime:
image:
registry: quay.io
repository: codefresh/engine
tag: 3.3.0
tag: 3.3.2
pullPolicy: IfNotPresent
digest: sha256:8a0d47eefc6648902fc7fbde132206750257a8cc703d6d871296f8eb2438b285
digest: sha256:59c8d68712548b83602614b690f7564134084986c37634f4b64f56d79b360ecd
# -- Set container command.
command:
- 'node'
Expand Down Expand Up @@ -537,8 +537,8 @@ runtime:
container-logger:
registry: quay.io
repository: codefresh/cf-container-logger
tag: 2.0.29
digest: sha256:d1a6c23addb6e652f26cef3d5dde3fa65ea95662e5349ccf4431b8161e9efc60
tag: 2.0.31
digest: sha256:790b045da3fcba782e43bcb96c19379c818480b6b6dff47718e8490ea65cade3
docker-builder:
registry: quay.io
repository: codefresh/cf-docker-builder
Expand Down Expand Up @@ -587,8 +587,8 @@ runtime:
gc-builder:
registry: quay.io
repository: codefresh/gcloud-builder
tag: 0.5.13
digest: sha256:dbc469bb080a358011aabde00117d6e4505a2d4fa9a2bffa1a8ce58cad1ed870
tag: 0.5.18
digest: sha256:e43f05470f4579ed5788f1e8f39b4e398c69dd3c7e189e2eb80ef694bef616cf
default-qemu:
registry: docker.io
repository: tonistiigi/binfmt
Expand Down Expand Up @@ -746,8 +746,8 @@ runtime:
image:
registry: quay.io
repository: codefresh/cli
tag: 1.2.2-rootless
digest: sha256:32f4569f55f69ff9673cfd376b9321afd0bdbf889c5fbd320cf4b4421a160d7f
tag: 1.2.3-rootless
digest: sha256:811924d0127e67a02a329817aa714b9a2a23e123b2e39fb41335d961568e8a55
rbac:
enabled: true
annotations: {}
Expand All @@ -768,8 +768,8 @@ runtime:
image:
registry: quay.io
repository: codefresh/cli
tag: 1.2.2-rootless
digest: sha256:32f4569f55f69ff9673cfd376b9321afd0bdbf889c5fbd320cf4b4421a160d7f
tag: 1.2.3-rootless
digest: sha256:811924d0127e67a02a329817aa714b9a2a23e123b2e39fb41335d961568e8a55
affinity: {}
nodeSelector: {}
podSecurityContext: {}
Expand Down Expand Up @@ -826,8 +826,8 @@ appProxy:
image:
registry: quay.io
repository: codefresh/cf-app-proxy
tag: 0.1.2
digest: sha256:8e7d27e24d0ec25e4825906359395efef0fe89d89b6c44d5a9fbb7b9dee142e7
tag: 0.1.3
digest: sha256:94847386db064a87d3ddcbfded5e5fd393f8695ddfe05fd406c152e0d2efe9a7
# -- Add additional env vars
env:
# -- Telemetry configuration
Expand Down
Loading