Update Helm release kyverno to v3.8.2

charts/atlantis/Chart.yaml

@@ -4,10 +4,10 @@ description: Atlantis map and simulation service
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v2.24.7
+version: v2.22.0
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v2.24.7
+appVersion: v2.22.0
 dependencies:
   - name: diagrid-dashboard
     version: "0.1.0"

charts/atlantis/values.yaml

@@ -4,7 +4,7 @@
 replicaCount: 1
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/atlantis
-  tag: v2.24.7
+  tag: v2.22.0
   pullPolicy: IfNotPresent
 init:
   enabled: false

charts/codex/Chart.yaml

@@ -13,9 +13,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: v2.24.7
+version: v2.22.0
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v2.24.7"
+appVersion: "v2.22.0"

charts/codex/values.yaml

@@ -10,7 +10,7 @@ image:
   # This sets the pull policy for images.
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  tag: v2.24.7
+  tag: v2.22.0
 # This is for the secrets for pulling an image from a private repository more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
 imagePullSecrets:
   - name: gitlab-pull-secret

charts/proteus/.helmignore

@@ -1,23 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*.orig
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/

charts/proteus/Chart.yaml

@@ -1,6 +0,0 @@
-apiVersion: v2
-name: proteus
-description: A Helm chart for Kubernetes
-type: application
-version: v2.24.7
-appVersion: "v2.24.7"

charts/proteus/templates/autoscaling.yaml

@@ -1,69 +0,0 @@
-{{- if eq .Values.environment "prod" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerResourceTemplate
-metadata:
-  name: proteus-prod-hpa
-  namespace: proteus
-spec:
-  workerDeploymentRef:
-    name: proteus-prod
-  template:
-    apiVersion: autoscaling/v2
-    kind: HorizontalPodAutoscaler
-    spec:
-      scaleTargetRef: {} # NOTE: controller injects the versioned Deployment
-      minReplicas: 2
-      maxReplicas: 10
-      metrics:
-        - type: External
-          external:
-            metric:
-              name: temporal_approximate_backlog_count
-              selector:
-                matchLabels:
-                  task_type: "Activity"
-            target:
-              type: AverageValue
-              averageValue: "2"
-        - type: Resource
-          resource:
-            name: cpu
-            target:
-              type: Utilization
-              averageUtilization: 70
-{{- end }}
----
-{{- if eq .Values.environment "beta" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerResourceTemplate
-metadata:
-  name: proteus-beta-hpa
-  namespace: proteus
-spec:
-  workerDeploymentRef:
-    name: proteus-beta
-  template:
-    apiVersion: autoscaling/v2
-    kind: HorizontalPodAutoscaler
-    spec:
-      scaleTargetRef: {}
-      minReplicas: 1
-      maxReplicas: 2
-      metrics:
-        - type: External
-          external:
-            metric:
-              name: temporal_approximate_backlog_count
-              selector:
-                matchLabels:
-                  task_type: "Activity"
-            target:
-              type: AverageValue
-              averageValue: "2"
-        - type: Resource
-          resource:
-            name: cpu
-            target:
-              type: Utilization
-              averageUtilization: 70
-{{- end }}

charts/proteus/templates/workerdeployment.yaml

@@ -1,204 +0,0 @@
-{{- if eq .Values.environment "prod" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerDeployment
-metadata:
-  name: proteus-prod
-  namespace: proteus
-spec:
-  replicas: 2
-  workerOptions:
-    temporalNamespace: prod-atlantis
-    connectionRef:
-      name: temporal
-  rollout:
-    strategy: AllAtOnce
-  sunset: {}
-  template:
-    spec:
-      securityContext:
-        runAsUser: 0
-        runAsGroup: 0
-      volumes:
-        - name: archives
-          persistentVolumeClaim:
-            claimName: proteus-ceph-archives
-      containers:
-        - name: proteus
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          resources:
-            requests:
-              cpu: "1"
-              memory: 1Gi
-            limits:
-              cpu: "2"
-              memory: 4Gi
-          env:
-            - name: TEMPORAL_TASK_QUEUES
-              value: plume,xtract
-            - name: TEMPORAL_NAMESPACE
-              value: prod-atlantis
-            - name: APP_ENV
-              value: prod
-            - name: ARCHIVE_PVC
-              value: prod-queue-ceph-archives
-            - name: MAX_CONCURRENT_ACTIVITIES
-              value: "2"
-            - name: OTEL_EXPORTER_OTLP_ENDPOINT
-              value: http://10.255.241.12:4317
-          volumeMounts:
-            - name: archives
-              mountPath: /data
-          ports:
-            - name: health
-              containerPort: 8080
-          livenessProbe:
-            httpGet:
-              path: /healthz
-              port: health
-            initialDelaySeconds: 20
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 6
-          readinessProbe:
-            httpGet:
-              path: /readyz
-              port: health
-            initialDelaySeconds: 5
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 3
-{{- end }}
----
-{{- if eq .Values.environment "beta" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerDeployment
-metadata:
-  name: proteus-beta
-  namespace: proteus
-spec:
-  replicas: 1
-  workerOptions:
-    temporalNamespace: beta-atlantis
-    connectionRef:
-      name: temporal
-  rollout:
-    strategy: AllAtOnce
-  sunset: {}
-  template:
-    spec:
-      securityContext:
-        runAsUser: 0
-        runAsGroup: 0
-      volumes:
-        - name: archives
-          persistentVolumeClaim:
-            claimName: proteus-ceph-archives
-      containers:
-        - name: proteus
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          resources:
-            requests:
-              cpu: 250m
-              memory: 256Mi
-          env:
-            - name: TEMPORAL_TASK_QUEUES
-              value: plume,xtract
-            - name: TEMPORAL_NAMESPACE
-              value: beta-atlantis
-            - name: APP_ENV
-              value: beta
-            - name: ARCHIVE_PVC
-              value: prod-queue-ceph-archives
-            - name: MAX_CONCURRENT_ACTIVITIES
-              value: "2"
-            - name: OTEL_EXPORTER_OTLP_ENDPOINT
-              value: http://10.255.241.12:4317
-          volumeMounts:
-            - name: archives
-              mountPath: /data
-          ports:
-            - name: health
-              containerPort: 8080
-          livenessProbe:
-            httpGet:
-              path: /healthz
-              port: health
-            initialDelaySeconds: 20
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 6
-          readinessProbe:
-            httpGet:
-              path: /readyz
-              port: health
-            initialDelaySeconds: 5
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 3
-{{- end }}
----
-{{- if eq .Values.environment "staging" }}
-apiVersion: temporal.io/v1alpha1
-kind: WorkerDeployment
-metadata:
-  name: proteus-staging
-  namespace: proteus
-spec:
-  replicas: 1
-  workerOptions:
-    temporalNamespace: staging-atlantis
-    connectionRef:
-      name: temporal
-  rollout:
-    strategy: AllAtOnce
-  sunset: {}
-  template:
-    spec:
-      securityContext:
-        runAsUser: 0
-        runAsGroup: 0
-      volumes:
-        - name: archives
-          persistentVolumeClaim:
-            claimName: proteus-ceph-archives
-      containers:
-        - name: proteus
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          resources:
-            requests:
-              cpu: 250m
-              memory: 256Mi
-            limits:
-              memory: 1Gi
-          env:
-            - name: TEMPORAL_TASK_QUEUES
-              value: plume,xtract
-            - name: TEMPORAL_NAMESPACE
-              value: staging-atlantis
-            - name: MAX_CONCURRENT_ACTIVITIES
-              value: "10"
-            - name: OTEL_EXPORTER_OTLP_ENDPOINT
-              value: http://10.255.241.12:4317
-          volumeMounts:
-            - name: archives
-              mountPath: /data
-          ports:
-            - name: health
-              containerPort: 8080
-          livenessProbe:
-            httpGet:
-              path: /healthz
-              port: health
-            initialDelaySeconds: 20
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 6
-          readinessProbe:
-            httpGet:
-              path: /readyz
-              port: health
-            initialDelaySeconds: 5
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 3
-{{- end }}

charts/proteus/values.yaml

@@ -1,12 +0,0 @@
-# Default values for proteus.
-# This chart is installed three times, like atlantis: "proteus" (environment: prod, this
-# file's defaults), "proteus-staging" (environment: staging, values-staging.yaml), and
-# "proteus-beta" (environment: beta, values-beta.yaml). Each release has its own Values scope,
-# so all three can use the plain `image` key without colliding — the publish-container CI action
-# bumps .image.tag here directly on a tagged release (same convention as charts/atlantis/values.yaml)
-# and bumps values-staging.yaml's .image.tag on every merge to main. Beta's tag is manually pinned,
-# same as atlantis's values-beta.yaml.gotmpl.
-image:
-  repository: git.oceanbox.io/oceanbox/poseidon/proteus
-  tag: "v2.24.7"
-environment: prod

charts/sorcerer/Chart.yaml

@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v2.24.7
+version: v2.22.0
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v2.24.7
+appVersion: v2.22.0
 dependencies:
   - name: diagrid-dashboard
     version: "0.1.0"

charts/sorcerer/values.yaml

@@ -5,7 +5,7 @@
 replicaCount: 1
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
-  tag: v2.24.7
+  tag: v2.22.0
   pullPolicy: IfNotPresent
 init:
   enabled: false

helmfile.d/argo.yaml.gotmpl

@@ -43,7 +43,7 @@ releases:
 - name: argo-workflows
   namespace: argocd
   chart: argo/argo-workflows
-  version: 1.0.23
+  version: 1.0.19
   condition: argo.workflows.enabled
   missingFileHandler: Info
 - name: manifests

helmfile.d/kyverno.yaml.gotmpl

@@ -15,7 +15,7 @@ releases:
 - name: kyverno
   namespace: kyverno
   chart: kyverno/kyverno
-  version: 3.8.1
+  version: 3.8.2
   condition: kyverno.enabled
   values:
   - ../values/kyverno/values/kyverno.yaml.gotmpl

helmfile.d/proteus.yaml.gotmpl

@@ -5,27 +5,6 @@ commonLabels:
   tier: system
 
 releases:
-- name: proteus
-  namespace: proteus
-  chart: ../charts/proteus
-  condition: proteus.enabled
-  values:
-  - ../values/proteus/values/values-prod.yaml
-  missingFileHandler: Info
-- name: proteus-staging
-  namespace: proteus
-  chart: ../charts/proteus
-  condition: proteus.enabled
-  values:
-  - ../values/proteus/values/values-staging.yaml
-  missingFileHandler: Info
-- name: proteus-beta
-  namespace: proteus
-  chart: ../charts/proteus
-  condition: proteus.enabled
-  values:
-  - ../values/proteus/values/values-beta.yaml
-  missingFileHandler: Info
 - name: manifests
   namespace: proteus
   chart: manifests
@@ -36,6 +15,7 @@ releases:
   - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
   - ../values/proteus/env.yaml.gotmpl
   - ../values/proteus/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
+  - ../values/proteus/values/values-staging.yaml
   hooks:
   - events: [ prepare, cleanup ]
     showlogs: true

helmfile.d/spegel.yaml.gotmpl

@@ -13,7 +13,7 @@ releases:
 - name: spegel
   namespace: spegel
   chart: spegel/spegel
-  version: 0.7.4
+  version: 0.7.3
   condition: spegel.enabled
   values:
   - ../values/spegel/values/spegel.yaml.gotmpl

helmfile.d/temporal.yaml.gotmpl

@@ -12,7 +12,7 @@ releases:
 - name: temporal
   namespace: temporal
   chart: temporal/temporal
-  version: 1.6.0
+  version: 1.5.0
   condition: temporal.enabled
   missingFileHandler: Info
   values:

values/atlantis/kustomize/beta/actor-config.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: beta-atlantis-actor-config
+data:
+  KUEUE_NAMESPACE: "prod-queue"
+  XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.5.3"
+  XTRACT_QUEUE: "prod-queue"
+  PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.5.3"
+  PLUME_QUEUE: "prod-queue"

values/atlantis/kustomize/beta/deployment_patch.yaml

@@ -12,4 +12,4 @@
   path: /spec/template/spec/containers/0/envFrom/-
   value:
     configMapRef:
-      name: beta-atlantis-temporal-config
+      name: beta-atlantis-actor-config

values/atlantis/kustomize/beta/kustomization.yaml

@@ -14,7 +14,7 @@ patches:
 resources:
   - ../base
   - rbac.yaml
-  - temporal-config.yaml
+  - actor-config.yaml
   - tracing.yaml
   - bindings.yaml
   - pubsub.yaml

values/atlantis/kustomize/beta/rbac.yaml

@@ -8,7 +8,7 @@ rules:
   - ""
   resourceNames:
   - beta-atlantis-appsettings
-  - beta-atlantis-temporal-config
+  - beta-atlantis-actor-config
   resources:
   - configmaps
   verbs:

values/atlantis/kustomize/beta/temporal-config.yaml

@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: beta-atlantis-temporal-config
-data:
-  TEMPORAL_ADDRESS: "temporal-grpc.ekman.oceanbox.io:443"
-  TEMPORAL_TLS: "true"
-  TEMPORAL_NAMESPACE: "beta-atlantis"

values/atlantis/kustomize/staging/actor-config.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: staging-atlantis-temporal-config
+  name: staging-atlantis-actor-config
 data:
   TEMPORAL_ADDRESS: "temporal-grpc.ekman.oceanbox.io:443"
   TEMPORAL_TLS: "true"

values/atlantis/kustomize/staging/deployment_patch.yaml

@@ -12,4 +12,4 @@
   path: /spec/template/spec/containers/0/envFrom/-
   value:
     configMapRef:
-      name: staging-atlantis-temporal-config
+      name: staging-atlantis-actor-config

values/atlantis/kustomize/staging/kustomization.yaml

@@ -14,7 +14,7 @@ resources:
   - ../base
   - rbac.yaml
   - secrets.yaml
-  - temporal-config.yaml
+  - actor-config.yaml
   - tracing.yaml
   - bindings.yaml
   - pubsub.yaml

values/atlantis/kustomize/staging/rbac.yaml

@@ -8,7 +8,7 @@ rules:
   - ""
   resourceNames:
   - staging-atlantis-appsettings
-  - staging-atlantis-temporal-config
+  - staging-atlantis-actor-config
   resources:
   - configmaps
   verbs:

values/atlantis/values/values-beta.yaml.gotmpl

@@ -2,7 +2,7 @@ replicaCount: 1
 
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/atlantis
-  tag: v2.24.3
+  tag: v2.17.0
 
 podAnnotations:
   dapr.io/app-id: "beta-atlantis"
@@ -11,7 +11,7 @@ env:
   - name: APP_NAMESPACE
     value: beta-atlantis
   - name: APP_VERSION
-    value: "2.24.3-beta"
+    value: "2.17.0-beta"
   - name: LOG_LEVEL
     value: "1"
   - name: ANALYTICS_WEB_ID

values/atlantis/values/values-staging.yaml.gotmpl

@@ -1,7 +1,7 @@
 replicaCount: 1
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/atlantis
-  tag: b549e69d-debug
+  tag: 29de0c67-debug
 podAnnotations:
   dapr.io/app-id: "staging-atlantis"
 env:

values/codex/values/values-staging.yaml

@@ -38,4 +38,4 @@ volumeMounts:
     readOnly: true
     subPath: appsettings.json
 image:
-  tag: 7a4a367d-debug
+  tag: 9138d67d-debug

values/makai/values/values.yaml

@@ -1,6 +1,6 @@
 replicaCount: 1
 image:
-  tag: "5b60b5ed-debug"
+  tag: "e926ae4b-debug"
 env:
   - name: APP_VERSION
     value: "0.0.0"

values/proteus/manifests/connection.yaml

@@ -1,4 +1,3 @@
-{{- if eq .Values.environment "prod" }}
 apiVersion: temporal.io/v1alpha1
 kind: Connection
 metadata:
@@ -6,4 +5,3 @@ metadata:
   namespace: proteus
 spec:
   hostPort: temporal-frontend.temporal:7233
-{{- end }}

values/proteus/manifests/pvc.yaml

@@ -1,4 +1,3 @@
-{{- if eq .Values.environment "prod" }}
 apiVersion: v1
 kind: PersistentVolume
 metadata:
@@ -36,4 +35,3 @@ spec:
   storageClassName: ""
   volumeMode: Filesystem
   volumeName: pv-proteus-ceph-archives
-{{- end }}

values/proteus/manifests/workerdeployment.yaml

@@ -0,0 +1,170 @@
+# apiVersion: temporal.io/v1alpha1
+# kind: WorkerDeployment
+# metadata:
+#   name: proteus-prod
+#   namespace: proteus
+# spec:
+#   replicas: 2
+#   workerOptions:
+#     temporalNamespace: prod-atlantis
+#     connectionRef:
+#       name: temporal
+#   rollout:
+#     strategy: AllAtOnce
+#   sunset: {}
+#   template:
+#     spec:
+#       securityContext:
+#         runAsUser: 0
+#         runAsGroup: 0
+#       volumes:
+#         - name: archives
+#           persistentVolumeClaim:
+#             claimName: proteus-ceph-archives
+#       containers:
+#         - name: proteus
+#           image: git.oceanbox.io/oceanbox/poseidon/proteus:v2.17.0
+#           resources:
+#             requests:
+#               cpu: "1"
+#               memory: 1Gi
+#             limits:
+#               cpu: "2"
+#               memory: 4Gi
+#           env:
+#             - name: TEMPORAL_TASK_QUEUES
+#               value: plume,xtract
+#             - name: TEMPORAL_NAMESPACE
+#               value: prod-atlantis
+#             - name: APP_ENV
+#               value: prod
+#             - name: ARCHIVE_PVC
+#               value: prod-queue-ceph-archives
+#             - name: MAX_CONCURRENT_ACTIVITIES
+#               value: "2"
+#             - name: OTEL_EXPORTER_OTLP_ENDPOINT
+#               value: http://10.255.241.12:4317
+#           volumeMounts:
+#             - name: archives
+#               mountPath: /data
+#           ports:
+#             - name: health
+#               containerPort: 8080
+#           livenessProbe:
+#             httpGet:
+#               path: /healthz
+#               port: health
+#             initialDelaySeconds: 20
+#             periodSeconds: 15
+#             timeoutSeconds: 5
+#             failureThreshold: 6
+#           readinessProbe:
+#             httpGet:
+#               path: /readyz
+#               port: health
+#             initialDelaySeconds: 5
+#             periodSeconds: 15
+#             timeoutSeconds: 5
+#             failureThreshold: 3
+# ---
+# apiVersion: temporal.io/v1alpha1
+# kind: WorkerDeployment
+# metadata:
+#   name: proteus-beta
+#   namespace: proteus
+# spec:
+#   replicas: 1
+#   workerOptions:
+#     temporalNamespace: beta-atlantis
+#     connectionRef:
+#       name: temporal
+#   rollout:
+#     strategy: AllAtOnce
+#   sunset: {}
+#   template:
+#     spec:
+#       securityContext:
+#         runAsUser: 0
+#         runAsGroup: 0
+#       containers:
+#         - name: proteus
+#           image: git.oceanbox.io/oceanbox/poseidon/proteus:CHANGEME
+#           resources:
+#             requests:
+#               memory: 256Mi
+#             limits:
+#               memory: 1Gi
+#           env:
+#             - name: TEMPORAL_TASK_QUEUES
+#               value: plume,xtract
+#             - name: TEMPORAL_NAMESPACE
+#               value: beta-atlantis
+#             - name: APP_ENV
+#               value: beta
+#             - name: ARCHIVE_PVC
+#               value: prod-queue-ceph-archives
+---
+apiVersion: temporal.io/v1alpha1
+kind: WorkerDeployment
+metadata:
+  name: proteus-staging
+  namespace: proteus
+spec:
+  replicas: 1
+  workerOptions:
+    temporalNamespace: staging-atlantis
+    connectionRef:
+      name: temporal
+  rollout:
+    strategy: AllAtOnce
+  sunset: {}
+  template:
+    spec:
+      securityContext:
+        runAsUser: 0
+        runAsGroup: 0
+      volumes:
+        - name: archives
+          persistentVolumeClaim:
+            claimName: proteus-ceph-archives
+      containers:
+        - name: proteus
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          resources:
+            requests:
+              cpu: 500m
+              memory: 1Gi
+            limits:
+              cpu: "2"
+              memory: 4Gi
+          env:
+            - name: TEMPORAL_TASK_QUEUES
+              value: plume,xtract
+            - name: TEMPORAL_NAMESPACE
+              value: staging-atlantis
+            - name: MAX_CONCURRENT_ACTIVITIES
+              value: "10"
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: http://10.255.241.12:4317
+          volumeMounts:
+            - name: archives
+              mountPath: /data
+          ports:
+            - name: health
+              containerPort: 8080
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: health
+            initialDelaySeconds: 20
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 6
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: health
+            initialDelaySeconds: 5
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 3

values/proteus/values/values-beta.yaml

@@ -1,4 +0,0 @@
-image:
-  repository: git.oceanbox.io/oceanbox/poseidon/proteus
-  tag: v2.24.2
-environment: beta

values/proteus/values/values-prod.yaml

@@ -1 +0,0 @@
-environment: prod

values/proteus/values/values-staging.yaml

@@ -1,4 +1,3 @@
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/proteus
-  tag: 7a4a367d-debug
-environment: staging
+  tag: 7b97e45c-debug

values/sorcerer/kustomize/beta-ekman/deployment_patch.yaml

@@ -22,4 +22,9 @@
   value:
     secretRef:
       name: beta-sorcerer-env
+- op: add
+  path: /spec/template/spec/containers/0/envFrom/-
+  value:
+    configMapRef:
+      name: beta-sorcerer-kueue-config
 

values/sorcerer/kustomize/beta-ekman/kueue-config.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: beta-sorcerer-kueue-config
+data:
+  KUEUE_NAMESPACE: "prod-queue"
+  KUEUE_ARCHIVE_PVC: "prod-queue-ceph-archives"

values/sorcerer/kustomize/beta-ekman/kustomization.yaml

@@ -19,6 +19,7 @@ resources:
 - configurations.yaml
 - keyvault.yaml
 - rbac.yaml
+- kueue-config.yaml
 - secretstore.yaml
 - statestore.yaml
 - tracing.yaml

values/sorcerer/kustomize/beta-ekman/rbac.yaml

@@ -8,6 +8,7 @@ rules:
   - ""
   resourceNames:
   - beta-sorcerer-appsettings
+  - beta-sorcerer-kueue-config
   resources:
   - configmaps
   verbs:
@@ -23,6 +24,24 @@ rules:
   verbs:
   - get
   - watch
+- apiGroups:
+  - jobset.x-k8s.io
+  resources:
+  - jobsets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/log
+  verbs:
+  - get
+  - list
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

values/sorcerer/values/values-staging.yaml

@@ -1,7 +1,7 @@
 replicaCount: 1
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
-  tag: 7a4a367d-debug
+  tag: 9138d67d-debug
 podAnnotations:
   dapr.io/enabled: "true"
   dapr.io/app-id: "staging-sorcerer"