Merge branch 'release/v1.3.2' into main

cloudogu · Dec 18, 2024 · 5b0251b · 5b0251b
2 parents 79c5517 + 9793ab4
commit 5b0251b
Show file tree

Hide file tree

Showing 6 changed files with 25 additions and 5 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [v1.3.2] - 2024-12-18
+### Changed
+- Activate deny all networkpolicy in helm values.
+
+### Fixed
+- [#74] Missing `get`- and `update`-permissions for `tcp-services` and `udp-services` configmaps
+  - These are necessary to update exposed ports
+
 ## [v1.3.1] - 2024-12-17
 ### Fixed
 - [#72] Missing `get`-permission for ingress objects

diff --git a/Dockerfile b/Dockerfile
@@ -31,7 +31,7 @@ RUN make compile-generic
 FROM gcr.io/distroless/static:nonroot
 LABEL maintainer="[email protected]" \
       NAME="k8s-service-discovery" \
-      VERSION="1.3.1"
+      VERSION="1.3.2"
 
 WORKDIR /
 

diff --git a/Makefile b/Makefile
@@ -1,6 +1,6 @@
 # Set these to the desired values
 ARTIFACT_ID=k8s-service-discovery
-VERSION=1.3.1
+VERSION=1.3.2
 
 IMAGE=cloudogu/${ARTIFACT_ID}:${VERSION}
 GOTAG?=1.23.4

diff --git a/k8s/helm/component-patch-tpl.yaml b/k8s/helm/component-patch-tpl.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 values:
   images:
-    serviceDiscovery: cloudogu/k8s-service-discovery:1.3.1
+    serviceDiscovery: cloudogu/k8s-service-discovery:1.3.2
 patches:
   values.yaml:
     manager:

diff --git a/k8s/helm/templates/service-discovery-role.yaml b/k8s/helm/templates/service-discovery-role.yaml
@@ -32,6 +32,18 @@ rules:
       - list
       - get
       - watch
+  # update exposed ports in tcp- and udp-services configmaps
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    resourceNames:
+      - tcp-services
+      - udp-services
+    verbs:
+      - get
+      - update
+  # create and update ingress objects for dogus
   - apiGroups:
       - networking.k8s.io
     resources:

diff --git a/k8s/helm/values.yaml b/k8s/helm/values.yaml
@@ -26,7 +26,7 @@ manager:
   image:
     registry: docker.io
     repository: cloudogu/k8s-service-discovery
-    tag: 1.3.1
+    tag: 1.3.2
   env:
     logLevel: info
     stage: production
@@ -43,5 +43,5 @@ ingress:
   controller: nginx-ingress # currently only supported ingress controller
 networkPolicies:
   enabled: true
-  denyAll: false
+  denyAll: true
   ingressControllerAllowedCIDR: "0.0.0.0/0"