Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(authelia): Update Helm release redis to v18.19.4 #20

Merged
merged 1 commit into from
Dec 10, 2024

Conversation

SIMULATAN-Bot
Copy link
Collaborator

This PR contains the following updates:

Package Type Update Change
redis (source) HelmChart minor 18.8.2 -> 18.19.4

Release Notes

bitnami/charts (redis)

v18.19.4

v18.19.3

v18.19.2

v18.19.1

v18.19.0

v18.18.1

v18.18.0

  • [bitnami/redis] feat: ✨ 🔒 Add automatic adaptation for Openshift restricted-v2 SCC (#​2 (063463f), closes #​24149

v18.17.1

v18.17.0

v18.16.1

v18.16.0

v18.15.1

v18.14.0

v18.13.0

v18.12.1

v18.12.0

  • [bitnami/redis] fix: 🐛 Add allowExternalEgress to avoid breaking istio and fix metrics port (#​22 (2b78bee), closes #​22955

v18.11.1

v18.11.0

v18.10.0

v18.9.1

v18.9.0

v18.8.3

  • [bitnami/redis] Do not create master and replica serviceaccounts when using sentinel (#​22716) (13c6479), closes #​22716

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Copy link

Argo CD Diff Preview

Summary:

 {base => target}/authelia | 107 ++++++++++++++++++++++------------------------
 1 file changed, 52 insertions(+), 55 deletions(-)
Diff:
diff --git base/authelia target/authelia
index 5ae0379..09fb565 100644
--- base/authelia
+++ target/authelia
@@ -551,21 +551,21 @@ data:
     # User-supplied sentinel configuration:
     # End of sentinel configuration
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: authelia-redis
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
     argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
+    helm.sh/chart: redis-18.19.4
   name: authelia-redis-configuration
   namespace: auth
 
 ---
 apiVersion: v1
 data:
   parse_sentinels.awk: |-
     /ip/ {FOUND_IP=1}
     /port/ {FOUND_PORT=1}
     /runid/ {FOUND_RUNID=1}
@@ -692,41 +692,41 @@ data:
       exit 1
     fi
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: authelia-redis
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
     argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
+    helm.sh/chart: redis-18.19.4
   name: authelia-redis-health
   namespace: auth
 
 ---
 apiVersion: v1
 data:
   prestop-redis.sh: "#!/bin/bash\n\n. /opt/bitnami/scripts/libvalidations.sh\n. /opt/bitnami/scripts/libos.sh\n\nrun_redis_command()
     {\n    if is_boolean_yes \"$REDIS_TLS_ENABLED\"; then\n        redis-cli -h 127.0.0.1
     -p \"$REDIS_TLS_PORT\" --tls --cert \"$REDIS_TLS_CERT_FILE\" --key \"$REDIS_TLS_KEY_FILE\"
     --cacert \"$REDIS_TLS_CA_FILE\" \"$@\"\n    else\n        redis-cli -h 127.0.0.1
     -p \"$REDIS_PORT\" \"$@\"\n    fi\n}\nis_master() {\n    REDIS_ROLE=$(run_redis_command
     role | head -1)\n    [[ \"$REDIS_ROLE\" == \"master\" ]]\n}\n\nHEADLESS_SERVICE=\"authelia-redis-headless.auth.svc.cluster.local\"\n\nget_full_hostname()
     {\n    hostname=\"$1\"\n    full_hostname=\"${hostname}.${HEADLESS_SERVICE}\"\n
     \   retry_count=0\n    until getent hosts \"${full_hostname}\" | awk '{ print
     $1; exit }' | grep .; do \n        if [[ $retry_count -lt 5 ]]; then\n            sleep
     5\n        else\n            error \"IP address for ${full_hostname} not found\"\n
     \           exit 1\n        fi\n        ((retry_count++))\n    done\n}\n\nrun_sentinel_command()
     {\n    if is_boolean_yes \"$REDIS_SENTINEL_TLS_ENABLED\"; then\n        env -u
-    REDISCLI_AUTH redis-cli -h \"$REDIS_SERVICE\" -p \"$REDIS_SENTINEL_PORT\" --tls
-    --cert \"$REDIS_SENTINEL_TLS_CERT_FILE\" --key \"$REDIS_SENTINEL_TLS_KEY_FILE\"
+    REDISCLI_AUTH redis-cli -h \"$REDIS_SERVICE\" -p \"$REDIS_SENTINEL_TLS_PORT_NUMBER\"
+    --tls --cert \"$REDIS_SENTINEL_TLS_CERT_FILE\" --key \"$REDIS_SENTINEL_TLS_KEY_FILE\"
     --cacert \"$REDIS_SENTINEL_TLS_CA_FILE\" sentinel \"$@\"\n    else\n        env
     -u REDISCLI_AUTH redis-cli -h \"$REDIS_SERVICE\" -p \"$REDIS_SENTINEL_PORT\" sentinel
     \"$@\"\n    fi\n}\nsentinel_failover_finished() {\n    REDIS_SENTINEL_INFO=($(run_sentinel_command
     get-master-addr-by-name \"mymaster\"))\n    REDIS_MASTER_HOST=\"${REDIS_SENTINEL_INFO[0]}\"\n
     \   [[ \"$REDIS_MASTER_HOST\" != \"$(get_full_hostname $HOSTNAME)\" ]]\n}\n\nREDIS_SERVICE=\"authelia-redis.auth.svc.cluster.local\"\n\n#
     redis-cli automatically consumes credentials from the REDISCLI_AUTH variable\n[[
     -n \"$REDIS_PASSWORD\" ]] && export REDISCLI_AUTH=\"$REDIS_PASSWORD\"\n[[ -f \"$REDIS_PASSWORD_FILE\"
     ]] && export REDISCLI_AUTH=\"$(< \"${REDIS_PASSWORD_FILE}\")\"\n\n\nif is_master
     && ! sentinel_failover_finished; then\n    echo \"I am the master pod and you
     are stopping me. Pausing client connections.\"\n    # Pausing client write connections
@@ -736,21 +736,21 @@ data:
     to complete failover for up to 20s\"\n    retry_while \"sentinel_failover_finished\"
     \"20\" 1\nelse\n    exit 0\nfi\n"
   prestop-sentinel.sh: "#!/bin/bash\n\n. /opt/bitnami/scripts/libvalidations.sh\n.
     /opt/bitnami/scripts/libos.sh\n\nHEADLESS_SERVICE=\"authelia-redis-headless.auth.svc.cluster.local\"\n\nget_full_hostname()
     {\n    hostname=\"$1\"\n    full_hostname=\"${hostname}.${HEADLESS_SERVICE}\"\n
     \   retry_count=0\n    until getent hosts \"${full_hostname}\" | awk '{ print
     $1; exit }' | grep .; do \n        if [[ $retry_count -lt 5 ]]; then\n            sleep
     5\n        else\n            error \"IP address for ${full_hostname} not found\"\n
     \           exit 1\n        fi\n        ((retry_count++))\n    done\n}\n\nrun_sentinel_command()
     {\n    if is_boolean_yes \"$REDIS_SENTINEL_TLS_ENABLED\"; then\n        redis-cli
-    -h \"$REDIS_SERVICE\" -p \"$REDIS_SENTINEL_PORT\" --tls --cert \"$REDIS_SENTINEL_TLS_CERT_FILE\"
+    -h \"$REDIS_SERVICE\" -p \"$REDIS_SENTINEL_TLS_PORT_NUMBER\" --tls --cert \"$REDIS_SENTINEL_TLS_CERT_FILE\"
     --key \"$REDIS_SENTINEL_TLS_KEY_FILE\" --cacert \"$REDIS_SENTINEL_TLS_CA_FILE\"
     sentinel \"$@\"\n    else\n        redis-cli -h \"$REDIS_SERVICE\" -p \"$REDIS_SENTINEL_PORT\"
     sentinel \"$@\"\n    fi\n}\nsentinel_failover_finished() {\n  REDIS_SENTINEL_INFO=($(run_sentinel_command
     get-master-addr-by-name \"mymaster\"))\n  REDIS_MASTER_HOST=\"${REDIS_SENTINEL_INFO[0]}\"\n
     \ [[ \"$REDIS_MASTER_HOST\" != \"$(get_full_hostname $HOSTNAME)\" ]]\n}\n\nREDIS_SERVICE=\"authelia-redis.auth.svc.cluster.local\"\n\n\n\nif
     ! sentinel_failover_finished; then\n    echo \"I am the master pod and you are
     stopping me. Starting sentinel failover\"\n    if retry_while \"sentinel_failover_finished\"
     \"20\" 1; then\n        echo \"Master has been successfuly failed over to a different
     pod.\"\n        exit 0\n    else\n        echo \"Master failover failed\"\n        exit
     1\n    fi\nelse\n    exit 0\nfi\n"
@@ -879,21 +879,21 @@ data:
     announce-ip $(get_full_hostname \"$HOSTNAME\")\" >> /opt/bitnami/redis-sentinel/etc/sentinel.conf\nexec
     redis-server /opt/bitnami/redis-sentinel/etc/sentinel.conf --sentinel\n"
 kind: ConfigMap
 metadata:
   labels:
     app.kubernetes.io/instance: authelia-redis
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
     argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
+    helm.sh/chart: redis-18.19.4
   name: authelia-redis-scripts
   namespace: auth
 
 ---
 apiVersion: v1
 kind: Service
 metadata:
   labels:
     app.kubernetes.io/instance: authelia
     app.kubernetes.io/managed-by: Helm
@@ -919,21 +919,21 @@ spec:
 apiVersion: v1
 kind: Service
 metadata:
   labels:
     app.kubernetes.io/component: node
     app.kubernetes.io/instance: authelia-redis
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
     argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
+    helm.sh/chart: redis-18.19.4
   name: authelia-redis
   namespace: auth
 spec:
   ports:
   - name: tcp-redis
     nodePort: null
     port: 6379
     targetPort: 6379
   - name: tcp-sentinel
     nodePort: null
@@ -949,21 +949,21 @@ spec:
 ---
 apiVersion: v1
 kind: Service
 metadata:
   labels:
     app.kubernetes.io/instance: authelia-redis
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
     argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
+    helm.sh/chart: redis-18.19.4
   name: authelia-redis-headless
   namespace: auth
 spec:
   clusterIP: None
   ports:
   - name: tcp-redis
     port: 6379
     targetPort: redis
   - name: tcp-sentinel
     port: 26379
@@ -978,54 +978,24 @@ spec:
 apiVersion: v1
 automountServiceAccountToken: false
 kind: ServiceAccount
 metadata:
   labels:
     app.kubernetes.io/instance: authelia-redis
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
     argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
+    helm.sh/chart: redis-18.19.4
   name: authelia-redis
   namespace: auth
 
----
-apiVersion: v1
-automountServiceAccountToken: false
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/instance: authelia-redis
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
-    app.kubernetes.io/version: 7.2.4
-    argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
-  name: authelia-redis-master
-  namespace: auth
-
----
-apiVersion: v1
-automountServiceAccountToken: false
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/instance: authelia-redis
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: redis
-    app.kubernetes.io/version: 7.2.4
-    argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
-  name: authelia-redis-replica
-  namespace: auth
-
 ---
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   labels:
     app.kubernetes.io/instance: authelia
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: authelia
     app.kubernetes.io/version: 4.38.16
     argocd.argoproj.io/instance: authelia
@@ -1189,45 +1159,45 @@ spec:
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   labels:
     app.kubernetes.io/component: node
     app.kubernetes.io/instance: authelia-redis
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: redis
     app.kubernetes.io/version: 7.2.4
     argocd.argoproj.io/instance: authelia
-    helm.sh/chart: redis-18.8.2
+    helm.sh/chart: redis-18.19.4
   name: authelia-redis-node
   namespace: auth
 spec:
   replicas: 3
   selector:
     matchLabels:
       app.kubernetes.io/component: node
       app.kubernetes.io/instance: authelia-redis
       app.kubernetes.io/name: redis
   serviceName: authelia-redis-headless
   template:
     metadata:
       annotations:
         checksum/configmap: 2484d556b4098e6306f844e7921711d247494614977bb5d0d5b7f34c52064ca7
         checksum/health: d626f1cf63e2ea3e4d4206c57ff10b4eba5530de26431ac09f484ae8d13d3196
-        checksum/scripts: a918077f21df9b82894d3b0f2be639d980e5a897a4f3454da4bdaf8841969fcb
+        checksum/scripts: 3ac0a4c09f598b9c60576fb1e61c6b2772eecab8990b4ab6cde85e4caf6c8971
         checksum/secret: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
       labels:
         app.kubernetes.io/component: node
         app.kubernetes.io/instance: authelia-redis
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: redis
         app.kubernetes.io/version: 7.2.4
-        helm.sh/chart: redis-18.8.2
+        helm.sh/chart: redis-18.19.4
     spec:
       affinity:
         nodeAffinity: null
         podAffinity: null
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
           - podAffinityTerm:
               labelSelector:
                 matchLabels:
                   app.kubernetes.io/component: node
@@ -1252,21 +1222,21 @@ spec:
         - name: REDIS_TLS_ENABLED
           value: "no"
         - name: REDIS_PORT
           value: "6379"
         - name: REDIS_SENTINEL_TLS_ENABLED
           value: "no"
         - name: REDIS_SENTINEL_PORT
           value: "26379"
         - name: REDIS_DATA_DIR
           value: /data
-        image: docker.io/bitnami/redis:7.2.4-debian-11-r2
+        image: docker.io/bitnami/redis:7.2.4-debian-12-r9
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /bin/bash
               - -c
               - /opt/bitnami/scripts/start-scripts/prestop-redis.sh
         livenessProbe:
           exec:
@@ -1287,28 +1257,26 @@ spec:
           exec:
             command:
             - sh
             - -c
             - /health/ping_readiness_local.sh 1
           failureThreshold: 5
           initialDelaySeconds: 20
           periodSeconds: 5
           successThreshold: 1
           timeoutSeconds: 1
-        resources:
-          limits: {}
-          requests: {}
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: false
           runAsGroup: 0
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         startupProbe:
           exec:
             command:
             - sh
@@ -1322,38 +1290,40 @@ spec:
         volumeMounts:
         - mountPath: /opt/bitnami/scripts/start-scripts
           name: start-scripts
         - mountPath: /health
           name: health
         - mountPath: /data
           name: redis-data
         - mountPath: /opt/bitnami/redis/mounted-etc
           name: config
         - mountPath: /opt/bitnami/redis/etc
-          name: redis-tmp-conf
+          name: empty-dir
+          subPath: app-conf-dir
         - mountPath: /tmp
-          name: tmp
+          name: empty-dir
+          subPath: tmp-dir
       - args:
         - -c
         - /opt/bitnami/scripts/start-scripts/start-sentinel.sh
         command:
         - /bin/bash
         env:
         - name: BITNAMI_DEBUG
           value: "false"
         - name: ALLOW_EMPTY_PASSWORD
           value: "yes"
         - name: REDIS_SENTINEL_TLS_ENABLED
           value: "no"
         - name: REDIS_SENTINEL_PORT
           value: "26379"
-        image: docker.io/bitnami/redis-sentinel:7.2.4-debian-11-r3
+        image: docker.io/bitnami/redis-sentinel:7.2.4-debian-12-r7
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
             exec:
               command:
               - /bin/bash
               - -c
               - /opt/bitnami/scripts/start-scripts/prestop-sentinel.sh
         livenessProbe:
           exec:
@@ -1374,46 +1344,47 @@ spec:
           exec:
             command:
             - sh
             - -c
             - /health/ping_sentinel.sh 1
           failureThreshold: 6
           initialDelaySeconds: 20
           periodSeconds: 5
           successThreshold: 1
           timeoutSeconds: 1
-        resources:
-          limits: {}
-          requests: {}
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: false
           runAsGroup: 0
           runAsNonRoot: true
           runAsUser: 1001
           seLinuxOptions: null
           seccompProfile:
             type: RuntimeDefault
         startupProbe:
           exec:
             command:
             - sh
             - -c
             - /health/ping_sentinel.sh 20
           failureThreshold: 22
           initialDelaySeconds: 10
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 5
         volumeMounts:
+        - mountPath: /tmp
+          name: empty-dir
+          subPath: tmp-dir
         - mountPath: /opt/bitnami/scripts/start-scripts
           name: start-scripts
         - mountPath: /health
           name: health
         - mountPath: /opt/bitnami/redis-sentinel/etc
           name: sentinel-data
         - mountPath: /data
           name: redis-data
         - mountPath: /opt/bitnami/redis-sentinel/mounted-etc
           name: config
@@ -1433,23 +1404,21 @@ spec:
       - configMap:
           defaultMode: 493
           name: authelia-redis-health
         name: health
       - configMap:
           name: authelia-redis-configuration
         name: config
       - emptyDir: {}
         name: sentinel-data
       - emptyDir: {}
-        name: redis-tmp-conf
-      - emptyDir: {}
-        name: tmp
+        name: empty-dir
   updateStrategy:
     type: RollingUpdate
   volumeClaimTemplates:
   - apiVersion: v1
     kind: PersistentVolumeClaim
     metadata:
       labels:
         app.kubernetes.io/component: node
         app.kubernetes.io/instance: authelia-redis
         app.kubernetes.io/name: redis
@@ -1510,20 +1479,48 @@ spec:
     CLIENT_SECRET_JELLYFIN: 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
     CLIENT_SECRET_MINIO: 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
     CLIENT_SECRET_NEXTCLOUD: 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
     CLIENT_SECRET_SNOTY: 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
     CLIENT_SECRET_WIKIJS: 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
   template:
     metadata:
       name: authelia-oidc-secrets
       namespace: auth
 
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: authelia-redis
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: redis
+    app.kubernetes.io/version: 7.2.4
+    argocd.argoproj.io/instance: authelia
+    helm.sh/chart: redis-18.19.4
+  name: authelia-redis
+  namespace: auth
+spec:
+  egress:
+  - {}
+  ingress:
+  - ports:
+    - port: 6379
+    - port: 26379
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/instance: authelia-redis
+      app.kubernetes.io/name: redis
+  policyTypes:
+  - Ingress
+  - Egress
+
 ---
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
   labels:
     argocd.argoproj.io/instance: authelia
   name: authelia-postgres
   namespace: auth
 spec:
   bootstrap:

@SIMULATAN SIMULATAN merged commit 7c639e2 into main Dec 10, 2024
2 checks passed
@SIMULATAN-Bot SIMULATAN-Bot deleted the renovate/authelia/redis-18.x branch December 10, 2024 22:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants