Skip to content

Commit

Permalink
update ks-core helm chart
Browse files Browse the repository at this point in the history
  • Loading branch information
ks-ci-bot committed Apr 12, 2024
1 parent a95f509 commit 89db389
Show file tree
Hide file tree
Showing 8 changed files with 32 additions and 61 deletions.
8 changes: 8 additions & 0 deletions src/test/ks-core/CHANGELOG_zh.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,7 @@ KubeSphere 企业版 4.1.0 内置了丰富全能的 KubeSphere 扩展市场。
- 支持动态扩展 Resource API
- 支持添加指定租户、集群、项目为快捷访问
- 支持通过容器终端进行文件上传和下载
- 支持适配不同厂商的云原生网关


### 优化
Expand All @@ -40,6 +41,7 @@ KubeSphere 企业版 4.1.0 内置了丰富全能的 KubeSphere 扩展市场。
- 修复潜在的企业空间资源越权访问的问题
- 修复企业空间集群授权 API 潜在的越权问题
- 修复因错误配置导致会话异常登出的问题
- 修复添加镜像服务信息从指定仓库拉取镜像时异常的问题
- 编辑 secret 保留 ownerReferences 信息
- 修复 console 首次登录白屏和页面错误重定向问题
- 修复 Windows 环境下,console 选择框滚动问题
Expand Down Expand Up @@ -77,6 +79,12 @@ v4.1 版本将停止提供以下已弃用的 API:
* `/resources.kubesphere.io/v1alpha2/users/{user}/kubectl` 接口已移除,终端相关操作无需再调用该接口
* 用户 web kubectl 终端 API 路径从 `/kapis/terminal.kubesphere.io/v1alpha2/namespaces/{namespace}/pods/{pod}/exec` 调整为 `/kapis/terminal.kubesphere.io/v1alpha2/users/{user}/kubectl`

##### gateway

`gateway.kubesphere.io/v1alpha1` API 版本被移除。

* 配置 Ingress 查询相关网关的 API 调整为 `/kapis/gateway.kubesphere.io/v1alpha2/namespaces/{namespace}/availableingressclassscopes`

#### API 弃用

以下 API 标记为弃用,将在未来的版本中移除:
Expand Down
4 changes: 2 additions & 2 deletions src/test/ks-core/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -7,12 +7,12 @@ type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 1.0.0-rc.1
version: 1.0.0

# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
appVersion: "v4.1.0-rc.1"
appVersion: "v4.1.0"

dependencies:
- name: redis-ha
Expand Down
37 changes: 0 additions & 37 deletions src/test/ks-core/README.md

This file was deleted.

2 changes: 1 addition & 1 deletion src/test/ks-core/templates/cert-manager.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ spec:
privateKeySecretRef:
name: letsencrypt-{{ .Values.letsEncrypt.environment }}
{{- if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") }}
http01: { }
http01: {}
{{- else }}
solvers:
- http01:
Expand Down
2 changes: 1 addition & 1 deletion src/test/ks-core/templates/globalroles.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -219,7 +219,7 @@ metadata:
kubesphere.io/description: '{"zh": "被邀请加入企业空间之前无法访问任何资源。", "en": "Cannot access any resources before joining a workspace."}'
kubesphere.io/creator: admin
name: platform-regular
rules: [ ]
rules: []

---
apiVersion: iam.kubesphere.io/v1beta1
Expand Down
30 changes: 15 additions & 15 deletions src/test/ks-core/templates/ks-console.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,17 +42,17 @@ spec:
initContainers:
- name: init-ca
image: {{ template "kubectl.image" . }}
command: [ "/bin/sh", "-c" ]
args: [ "cp /tmp/ca.crt /usr/local/share/ca-certificates/ \
command: ["/bin/sh", "-c"]
args: ["cp /tmp/ca.crt /usr/local/share/ca-certificates/ \
&& update-ca-certificates && cp /etc/ssl/certs/ca-certificates.crt /certs/"]
volumeMounts:
- name: tls-cert
mountPath: /tmp/ca.crt
subPath: ca.crt
readOnly: false
- name: sys-cert
mountPath: /certs
readOnly: false
- name: tls-cert
mountPath: /tmp/ca.crt
subPath: ca.crt
readOnly: false
- name: sys-cert
mountPath: /certs
readOnly: false
{{- end }}
containers:
- name: ks-console
Expand Down Expand Up @@ -142,16 +142,16 @@ metadata:
name: ks-console
spec:
ports:
- name: nginx
- name: nginx
{{- if .Values.internalTLS }}
port: 443
port: 443
{{- else }}
port: 80
port: 80
{{- end }}
protocol: TCP
targetPort: 8000
protocol: TCP
targetPort: 8000
{{- with .Values.console.nodePort }}
nodePort:
nodePort:
{{- toYaml . | nindent 6 }}
{{- end }}
selector:
Expand Down
2 changes: 1 addition & 1 deletion src/test/ks-core/templates/post-patch-system-ns-job.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ spec:
serviceAccountName: {{ include "ks-core.serviceAccountName" . }}
containers:
- name: post-patch-system-ns
image: {{ template "kubectl.image" . }}
image: {{ template "kubectl.image" . }}
command:
- /bin/bash
- -c
Expand Down
8 changes: 4 additions & 4 deletions src/test/ks-core/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
## @param global.tag Global Docker image tag
global:
imageRegistry: registry.cn-beijing.aliyuncs.com
tag: v4.1.0-rc.1
tag: v4.1.0
imagePullSecrets: []

## @param nameOverride String to partially override common.names.fullname
Expand Down Expand Up @@ -104,7 +104,7 @@ apiserver:
repository: kse/ks-apiserver
tag: ""
digest: ""
pullPolicy: Always
pullPolicy: IfNotPresent
## Optionally, specify an array of imagePullSecrets.
## Secrets must be manually created in the namespace.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
Expand Down Expand Up @@ -154,7 +154,7 @@ console:
repository: kse/ks-console
tag: ""
digest: ""
pullPolicy: Always
pullPolicy: IfNotPresent
## Optionally, specify an array of imagePullSecrets.
## Secrets must be manually created in the namespace.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
Expand Down Expand Up @@ -196,7 +196,7 @@ controller:
repository: kse/ks-controller-manager
tag: ""
digest: ""
pullPolicy: Always
pullPolicy: IfNotPresent
## Optionally, specify an array of imagePullSecrets.
## Secrets must be manually created in the namespace.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
Expand Down

0 comments on commit 89db389

Please sign in to comment.