diff --git a/charts/snyk-broker/Chart.yaml b/charts/snyk-broker/Chart.yaml index 02221f8..c69067b 100644 --- a/charts/snyk-broker/Chart.yaml +++ b/charts/snyk-broker/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 name: snyk-broker -version: 2.6.0 +version: 2.6.1 description: A Helm chart for Kubernetes type: application diff --git a/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_disablesuffixes_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_disablesuffixes_test.yaml.snap index bf7c8c7..ccfde4b 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_disablesuffixes_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_disablesuffixes_test.yaml.snap @@ -7,7 +7,7 @@ with CRA: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -55,6 +55,10 @@ with CRA: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: BROKER_DISPATCHER_BASE_URL value: https://api.test.snyk.io image: snyk/broker:container-registry-agent @@ -64,6 +68,7 @@ with CRA: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -76,6 +81,7 @@ with CRA: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -94,10 +100,16 @@ with CRA: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -106,7 +118,7 @@ with CRA: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -126,6 +138,15 @@ with CRA: name: container-registry-agent-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -133,6 +154,6 @@ with CRA: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_test.yaml.snap index bf7c8c7..ccfde4b 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_cra_deployment_test.yaml.snap @@ -7,7 +7,7 @@ with CRA: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -55,6 +55,10 @@ with CRA: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: BROKER_DISPATCHER_BASE_URL value: https://api.test.snyk.io image: snyk/broker:container-registry-agent @@ -64,6 +68,7 @@ with CRA: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -76,6 +81,7 @@ with CRA: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -94,10 +100,16 @@ with CRA: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -106,7 +118,7 @@ with CRA: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -126,6 +138,15 @@ with CRA: name: container-registry-agent-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZhekNDQTFPZ0F3SUJBZ0lVWHNWWG41N293WDVVSkNTZ21waVVDRHNjeXVVd0RRWUpLb1pJaHZjTkFRRUwKQlFBd1JURUxNQWtHQTFVRUJoTUNRVlV4RXpBUkJnTlZCQWdNQ2xOdmJXVXRVM1JoZEdVeElUQWZCZ05WQkFvTQpHRWx1ZEdWeWJtVjBJRmRwWkdkcGRITWdVSFI1SUV4MFpEQWVGdzB5TkRBek1UTXhORFF6TWpsYUZ3MHlOVEF6Ck1UTXhORFF6TWpsYU1FVXhDekFKQmdOVkJBWVRBa0ZWTVJNd0VRWURWUVFJREFwVGIyMWxMVk4wWVhSbE1TRXcKSHdZRFZRUUtEQmhKYm5SbGNtNWxkQ0JYYVdSbmFYUnpJRkIwZVNCTWRHUXdnZ0lpTUEwR0NTcUdTSWIzRFFFQgpBUVVBQTRJQ0R3QXdnZ0lLQW9JQ0FRRGtlZm5TTFpWLzVNWFBRMTd4Q25ZWThxNGRybEwwcURjWTNHYVhzV2QxCnd2YzZBQ2psNS9uT3pzeFZHNmQwaVhZWFlKWTdPUnJmSkIvRXpJL3RaZGRndzQ1T050Z3BkQUtCeFNMdVVLNCsKaXNBYThOMUJDeTMvR1RyRllpNmppWGZ3dUcxL20xeCtHZVVVc0xZMlFWNno4anlrU0N0cWdSZjVVajBSdDFIbApOMVRlcm1yZDFOZWJwZTB4cld1VUM1by8xSDQ5a3lzUlF2VFQ0YThDRXFONWRjdFJJVE9aZlpyU0dqalpFRVpqCmVCbnp2LzVKNzNuVEdCVGhpYXI4SWkzaVBlSDRwYm5lZlFSMG9SRnB3RW1lSTNUcHRtLzNxWmVaanRXVGY0bFUKQm9wa2dyZHN6bFFCZFBiVi9ocXNlOU5neHRMcTZ4UzVmMFIrMG9JbWs3VENOSEhOa0E0VWtKNzBKRldBVEdaSwphSzYrZ0ROSitBVExQNVNhQ010WmNGRHlWQ1d1U2kra0huNThrZU9UN3FVMWNDKzhHZFc2QTQ4TklMNUtoQThPClRDWkU0dHlNUU1CQ3VxUDI3dFFBb0FHdytMc3NKRDFBdG1rblI3U2NrZm9YMkQyeHVBVDc0L1JjbFpwUmUrUTIKWXJjY05xVGE1ZzJUSVdkdVFXMXlaMVpoWkdxN2lRS0lvSDRSOUlzOHY2aGJmeGJ1bDZqZVcwelc1cVVNWUJvVwoxQ2ZtQzNaZmJhOWk2M1JLbFk2V0hvSDlVV3FTSFZjcEplWmdWOTFlMGltemw4WHUwV2c3NGFYcWJBNTVINzArCjNwci9wdkdLMXRzbWxWN3VlbEo1QzhzVm9oMXpTRzVTR2VDYTIxNm1iRjR3WXpPWlh6enF6RTdoV0l6TDJGL3AKblFJREFRQUJvMU13VVRBZEJnTlZIUTRFRmdRVUxPU1BkRGZQRGZCbG1YVkdZZ21sUURXQTNHY3dId1lEVlIwagpCQmd3Rm9BVUxPU1BkRGZQRGZCbG1YVkdZZ21sUURXQTNHY3dEd1lEVlIwVEFRSC9CQVV3QXdFQi96QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBZ0VBb0FyWEsvOGpQRWpHT2pxL0VrM0twcFdBWVpwWnpFNFRrZlQrRitBc2lzWFUKb1JDUkRsZWNTa1dlSzVlcjl4cEtNNjZrRWptQURJaW5ITytDc0J6U3Qrb3h1VTh6MXNWTm1PQkJaTEkrQjdhbgorKzBlTGcwcHlOTlMyZ0h5ZEpza2RiRUZLNHhOTkdMbjg0N2Jhd2xEZjNicTMwT1EzS0dXNUVCQ1prbGM5R0VmClVBL0dvWC9STmhMZTdlMFJKeTA4SjlEZmU4L3J2QkhJQXJtS0ljTStNekRrUis2SmhVWVhYZElBRlk0anBNeGQKNUZpZXFqK05VRjJVVUZkamJ0S0VPalh6YU5BMlJSa2VzSGFPcUdBeFY5RnhWRlJ1Z2dIM0RKeGlTd2p6QkgyegpOdmpxNVZWZ2g2L3ZSYmNLVVl1NzNINUpOQWRMRkZydXVvOWxUQ3VOZGtyekVCUzN6anl4MnFyQXVWVldPY1BjCnBLbTdjUGdRNDFIMzMreld4RWJvdHVnMTRXb2tsRnlERmZUVksvUkNYTHVGVm5ZSVI0ZEwvQnNqYnIyM1VzS1UKVGgrdFZMK1Q2dUtyOFVvTWUwT0RJTnNYOHhndXl3bzdqNFhhMDkvRkhsblo5VllWT1gzVTNDa1JzNXYxN3VpQgpvQnlVelRwTU9EY3NGakppRTdURFpNQXhWd2F6endBMTJPTzRpZU9YbEIzd2lIUi91Vm85NE1ETklWTC9jUVZHCmQ2T2o2Vno5K01teWhFYUhKc1hKUXYwYzNVcnBVUkk3Um4xVU4xb1VhNHZiMkhYNThHblFDNXZKNkdQNU5CdkcKVlFRM3hkWFUya1FEUHZiekhXNGNGOG5iSXpiRXJYZFJrcWluWklFb3NOTWhDZEV0amRDZUxnL0huMEszTFBrPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -133,6 +154,6 @@ with CRA: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_apprisk_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_apprisk_test.yaml.snap index 8f20ecf..456428e 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_apprisk_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_apprisk_test.yaml.snap @@ -7,7 +7,7 @@ apprisk enabled: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -48,6 +48,10 @@ apprisk enabled: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -63,6 +67,7 @@ apprisk enabled: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -75,6 +80,7 @@ apprisk enabled: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -93,10 +99,16 @@ apprisk enabled: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -105,7 +117,7 @@ apprisk enabled: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -125,6 +137,15 @@ apprisk enabled: name: github-com-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -132,6 +153,6 @@ apprisk enabled: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_disablesuffixes_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_disablesuffixes_test.yaml.snap index 002cfa7..3faac8d 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_disablesuffixes_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_disablesuffixes_test.yaml.snap @@ -7,7 +7,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -52,6 +52,10 @@ cacert: value: /home/node/cacert/tests/dummy_ca_cert.pem - name: NODE_EXTRA_CA_CERTS value: /home/node/cacert/tests/dummy_ca_cert.pem + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -65,6 +69,7 @@ cacert: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -77,6 +82,7 @@ cacert: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -99,12 +105,18 @@ cacert: - mountPath: /home/node/cacert name: RELEASE-NAME-snyk-broker-cacert-volume readOnly: true + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker volumes: - configMap: name: RELEASE-NAME-snyk-broker-cacert-configmap name: RELEASE-NAME-snyk-broker-cacert-volume + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: v1 kind: Service @@ -113,7 +125,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -155,7 +167,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker-cacert-configmap namespace: NAMESPACE 4: | @@ -167,6 +179,15 @@ cacert: name: github-com-broker-token type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JSUpRUUlCQURBTkJna3Foa2lHOXcwQkFRRUZBQVNDQ1Nzd2dna25BZ0VBQW9JQ0FRRGtlZm5TTFpWLzVNWFAKUTE3eENuWVk4cTRkcmxMMHFEY1kzR2FYc1dkMXd2YzZBQ2psNS9uT3pzeFZHNmQwaVhZWFlKWTdPUnJmSkIvRQp6SS90WmRkZ3c0NU9OdGdwZEFLQnhTTHVVSzQraXNBYThOMUJDeTMvR1RyRllpNmppWGZ3dUcxL20xeCtHZVVVCnNMWTJRVjZ6OGp5a1NDdHFnUmY1VWowUnQxSGxOMVRlcm1yZDFOZWJwZTB4cld1VUM1by8xSDQ5a3lzUlF2VFQKNGE4Q0VxTjVkY3RSSVRPWmZaclNHampaRUVaamVCbnp2LzVKNzNuVEdCVGhpYXI4SWkzaVBlSDRwYm5lZlFSMApvUkZwd0VtZUkzVHB0bS8zcVplWmp0V1RmNGxVQm9wa2dyZHN6bFFCZFBiVi9ocXNlOU5neHRMcTZ4UzVmMFIrCjBvSW1rN1RDTkhITmtBNFVrSjcwSkZXQVRHWkthSzYrZ0ROSitBVExQNVNhQ010WmNGRHlWQ1d1U2kra0huNTgKa2VPVDdxVTFjQys4R2RXNkE0OE5JTDVLaEE4T1RDWkU0dHlNUU1CQ3VxUDI3dFFBb0FHdytMc3NKRDFBdG1rbgpSN1Nja2ZvWDJEMnh1QVQ3NC9SY2xacFJlK1EyWXJjY05xVGE1ZzJUSVdkdVFXMXlaMVpoWkdxN2lRS0lvSDRSCjlJczh2NmhiZnhidWw2amVXMHpXNXFVTVlCb1cxQ2ZtQzNaZmJhOWk2M1JLbFk2V0hvSDlVV3FTSFZjcEplWmcKVjkxZTBpbXpsOFh1MFdnNzRhWHFiQTU1SDcwKzNwci9wdkdLMXRzbWxWN3VlbEo1QzhzVm9oMXpTRzVTR2VDYQoyMTZtYkY0d1l6T1pYenpxekU3aFdJekwyRi9wblFJREFRQUJBb0lDQUQrNlpoeGg2cGxKem9NSlg2b01LUFM4CmZDUjdRMWhLczFPVDVtblphZXBHLzM2R0hPSkQya0g5SExHQWpTek1Tc3dxZkx6NEtLNmsvTmQvMTRWNEtxTXEKNkw2WVBhTVNZTUNocENTbERIVVZicEFWTHlHOVpJOExFb0dMNlVaa1NiZ3pPUmVtMWgyMlMxZUNFdEQvV3RNRwpkak84alorZmNuaHduK2daSWhhMVlFN2NoNkpvZzlzK1pQSytWSXR1MFErTXpjbVBDeXc5YU56UXptZmRtd3Q5Cjk4QWhhcXNkaGRta3hzYUU2NTFER3JvS2kzdEQrTThRb0lKb1MvRVg5NFJyam1RMGxhdWhZMlRFcUg2K3k4bjQKU2R3R3J5UjlnWE9yaTVjZ3M4VmtMYVhyY0E1Qlh0MHBLdEIxbUNzVVB0bDNtODA2MVFVSW9xcGRQVUJWWXMxaAp0Rml4OEM2ckMxYVEycFhSV2ZPUDdVakU1RE84V29zSXZkK09FZE9tcGJoM0E0R0tva3hMVERRZUtQQ1l2L2poCmF2WjhjRDkrUm1RWnpQSk4xZ01xckFVLy9rL0NwU3QzaUxmUDNnN3BiaWE5T3B3SC9LUVRmblZKVVhuRDVoZ2MKT2xnNXJCeSt6N0VacFBWMExQZDlpUjErMjRndE93ajA3eW50UWpldmJ0UFlmbHJqdjdMTERrenZlSDJMTkhQSQp5RFJPaFdTblNNaHBqOHRzQmJxZ1JEZVpENWNwQ3ozSEtSUFROT2NZdUYrZUFseGNEMkR4aG5DZ3RDQzhodmFuCnFFSGlPU2ZnQVZ4S01lK1Z2akp2eE9CVFN3WE1RcmYyTHRRT2FOeHYzMUs0NmlEWFQ0c3dZTlFrUkl2U0Rlb1oKc3BCZzFTcUFWb21Lc1p4SlNZdGhBb0lCQVFEMXVPU0R3RXRqbmFhYkxsb3g4UDgzMkw3NGkvV250QU4yK0duYwpxanU1dzJXSGpZejBHd1h5RE8wbm9uQkVOZklJZVhCQUN3L3IvTWlxODBUaGZQTENtaTBscVpjVVpKTWhFNzlTCjcwVlEwVUJrR2J0b0J0cTRzTC9jeHRLOUtCRGw2Z3p0b05hSjE1OVhPOXdtcVoxWm8xMTAxTnpSdjBpZ09Ra0sKMG5sNGxFTG1GZ0dpbTlUZHBKM1JBQmxCWk5DaEUwWjlKVTBXZ0hmbE1wbndGdTR1Qm1IOWdkV0w5OUkxbGNTSwpaWFZId3F0cmhYdkZwOUFtalF2d2o4SVJJNG1YQXhCRHFtcWxsZThZbG9yWU4rY05ja1JpTEdzNG9KbndlZW45CmxBY2VZZnZVV3Y4L09NL0JEYWVxNVM5SVovRUhnMWxaZ3pLK2hCTXY5dlM5THY2TEFvSUJBUUR1Q0d2dDBXc2kKSEE2RGJFc0ZFQTZxWWM3Z1VOUmNxZHRZQUpGQVkycXNyTFZLSVVEWUdYTk1RU3RWcm1RUDdpMFhONVlHdkVUVgpScmo1VHJlN1UzZEl6V2tGTUF4WjR5bW04dTNodUp0aTh0RnhpM2EvclJrK3h2VWxKZnlldGFCS1BXWCtwcHJWCjlmbnlxUllXVitaTitGMjhNa0svQUpCcU5sMmxJRG1Od2J5eVNNMld0VUpYMXphTkFTZEFLeUlLakdGUXR3OGgKYm1ERDc5cy90WW1XV2FXMEFLS2g3M3k4REJSOS9JR084TGorTGNQTGVnK2FFL01yVEQ5cmJ2djUxSXlmRUhoRApOeUpEc2thdDg3SHI4Zkh3ZVFsVlNXUVRKMnhGTjcwMFkxbkZ2TGNEUkFucEVhQlMrTHhsMEc3NmZTSVB1eUQwCkh5UXZKcmMvYUtWM0FvSUJBR1BXaitLSVN4bGFnTXNrZGprOGRqWTJ0c0U5L0wzN0FqMWdpWUxER0NsT0h2NkkKb1BDOTJoaVM3L2plbzBiVHRGZUZIL3FsZy82YVl0NHlvWllNc29ZbkpwamE0eXZDQVpXNjlFMjZNaXU0R2JXUwpUdmJoY2hVQW03UVVoS09lbDk4U3pkWHZON3dpQS9mcHRuVnZEU1BTb0xKTG1yME9QMi82UEpaTkZsWEx4N0s4CjFrVS9rNm5Lck9TeWFaQ01hY2hJa0tkZ2RJWGtCTkwzVUZ5Z3RIMjIwakd5Z3hXdng1VkdHT2t5ZUFpRUxDb3YKdmk1OUZMSFZOVGkwOEdFT1UyVXNOWHVJem5RaEMxaXVNaFBRQXUwUHRJRS9Fd0diSDNENTEvelVIR0JYNTM1TQp5dERoUUdoc0orZmozdVpJZFVKY04vMkt0Ujk3Z21CR3N3SDdDaWtDZ2dFQUs1N3JlSGVLTklRRHZOM1ptYUhwCnJodWlkOFVZUmFyekFWdUpRczExUFJPaFhXWmVwYnQwUDZNcHQ5ZnZpbVBSYTVIS01vM0o1M1BBYmgrWTJBRmgKdUx1NzVURjY4ZllKS2drV3d1aTd3UlJTZ1laWFNxVUVIVmNFa2J3MllUZFRtb2RKNjdMSWFURmNqcldoMEpKbgpLQjY5dnNGUExnV0NjWlJvOE52SThFdHlzeEZZYTZmbjhvVUVBQzhYN0ZCN09vZWpSZEZtT25BcDEzNWJKWCsxCktSSmdwVzRBWDhDdGtTQjltT0R2TlN5MEdoQjA4eEw1VFBrZTlPNVNLUFA3eFRySVVsWUlVL2tFbEhkVk1JZWEKTVd6ek0yaGE1NEE5a0swRzBHQjRrZU1yRG11WTlrWS9zckNDT3ZKT1JESkFSRE11VE1lME1FaU1ydjlmVVlWeAozUUtDQVFCOHcwWmhGN3hNUzVUanpkZXR5dXJqMksvWHRyZlNjOGpoaXRDR05vejhHbmM4a1NQMHRycmhHeWRvCi91NVBJRG11enUyeTZoOS9LK3BGdDdhWjhUa0hhb3FWckc1WVJ1TXBTYXFVZ1dkdHBIUTVweG9HMXNiODZYaDQKbGdRNFg2eDl5dTlidlVNZkZWZXhma0xkWFpPYjBXN20vai94WFRMR3VlUkFCek1ZWVN3cDlKbnlsZHBvaVIwZQpHekxIM1JWRTFwTU05Y1J4RUZhRDBmR3k5eUZTc0RzYitKbS9BMTdXcTcvSThvR1M0Q28vUVBtTkJLN1U4ZnBrCnlNdHZhUmdTMVdLQURqMzhYKzhzcmc2dXN6TzN0ZUdBVWJ3UC9wTnErVEQ5eWhZSjlGT2RQczBxaTZyZHBmVW4KWkZoc1JmUVI2WVBzQ2RnQnhTaG00bG95eUdIZQotLS0tLUVORCBQUklWQVRFIEtFWS0tLS0tCg== + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -174,7 +195,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE cacertfile: @@ -186,7 +207,7 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -227,6 +248,10 @@ cacertfile: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -240,6 +265,7 @@ cacertfile: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -252,6 +278,7 @@ cacertfile: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -270,10 +297,16 @@ cacertfile: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: v1 kind: Service @@ -282,7 +315,7 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -303,7 +336,7 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker-cacert-configmap namespace: NAMESPACE 4: | @@ -315,6 +348,15 @@ cacertfile: name: github-com-broker-token type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -322,6 +364,6 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_test.yaml.snap index 3ec105f..d199baf 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_configmap_test.yaml.snap @@ -7,7 +7,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -52,6 +52,10 @@ cacert: value: /home/node/cacert/tests/dummy_ca_cert.pem - name: NODE_EXTRA_CA_CERTS value: /home/node/cacert/tests/dummy_ca_cert.pem + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -65,6 +69,7 @@ cacert: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -77,6 +82,7 @@ cacert: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -99,12 +105,18 @@ cacert: - mountPath: /home/node/cacert name: RELEASE-NAME-snyk-broker-cacert-volume readOnly: true + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME volumes: - configMap: name: RELEASE-NAME-snyk-broker-cacert-configmap-RELEASE-NAME name: RELEASE-NAME-snyk-broker-cacert-volume + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -113,7 +125,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -155,7 +167,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker-cacert-configmap-RELEASE-NAME namespace: NAMESPACE 4: | @@ -167,6 +179,15 @@ cacert: name: github-com-broker-token-RELEASE-NAME type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -174,7 +195,7 @@ cacert: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE cacertfile: @@ -186,7 +207,7 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -227,6 +248,10 @@ cacertfile: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -240,6 +265,7 @@ cacertfile: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -252,6 +278,7 @@ cacertfile: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -270,10 +297,16 @@ cacertfile: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -282,7 +315,7 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -303,7 +336,7 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker-cacert-configmap-RELEASE-NAME namespace: NAMESPACE 4: | @@ -315,6 +348,15 @@ cacertfile: name: github-com-broker-token-RELEASE-NAME type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -322,6 +364,6 @@ cacertfile: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_disablesuffixes_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_disablesuffixes_test.yaml.snap index bd20c2e..eb62c57 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_disablesuffixes_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_disablesuffixes_test.yaml.snap @@ -9,7 +9,7 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker-accept-configmap namespace: NAMESPACE 2: | @@ -20,7 +20,7 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -61,6 +61,10 @@ customaccept values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT value: /home/node/private/accept.json - name: BROKER_DISPATCHER_BASE_URL @@ -72,6 +76,7 @@ customaccept values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -84,6 +89,7 @@ customaccept values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -106,12 +112,18 @@ customaccept values: - mountPath: /home/node/private name: RELEASE-NAME-snyk-broker-accept-volume readOnly: true + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker volumes: - configMap: name: RELEASE-NAME-snyk-broker-accept-configmap name: RELEASE-NAME-snyk-broker-accept-volume + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 3: | apiVersion: v1 kind: Service @@ -120,7 +132,7 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -140,6 +152,15 @@ customaccept values: name: github-com-broker-token type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -147,6 +168,6 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_test.yaml.snap index 6364a98..1bd5a22 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_customaccept_test.yaml.snap @@ -9,7 +9,7 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker-accept-configmap-RELEASE-NAME namespace: NAMESPACE 2: | @@ -20,7 +20,7 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -61,6 +61,10 @@ customaccept values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT value: /home/node/private/accept.json - name: BROKER_DISPATCHER_BASE_URL @@ -72,6 +76,7 @@ customaccept values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -84,6 +89,7 @@ customaccept values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -106,12 +112,18 @@ customaccept values: - mountPath: /home/node/private name: RELEASE-NAME-snyk-broker-accept-volume readOnly: true + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME volumes: - configMap: name: RELEASE-NAME-snyk-broker-accept-configmap-RELEASE-NAME name: RELEASE-NAME-snyk-broker-accept-volume + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 3: | apiVersion: v1 kind: Service @@ -120,7 +132,7 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -140,6 +152,15 @@ customaccept values: name: github-com-broker-token-RELEASE-NAME type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZhekNDQTFPZ0F3SUJBZ0lVWHNWWG41N293WDVVSkNTZ21waVVDRHNjeXVVd0RRWUpLb1pJaHZjTkFRRUwKQlFBd1JURUxNQWtHQTFVRUJoTUNRVlV4RXpBUkJnTlZCQWdNQ2xOdmJXVXRVM1JoZEdVeElUQWZCZ05WQkFvTQpHRWx1ZEdWeWJtVjBJRmRwWkdkcGRITWdVSFI1SUV4MFpEQWVGdzB5TkRBek1UTXhORFF6TWpsYUZ3MHlOVEF6Ck1UTXhORFF6TWpsYU1FVXhDekFKQmdOVkJBWVRBa0ZWTVJNd0VRWURWUVFJREFwVGIyMWxMVk4wWVhSbE1TRXcKSHdZRFZRUUtEQmhKYm5SbGNtNWxkQ0JYYVdSbmFYUnpJRkIwZVNCTWRHUXdnZ0lpTUEwR0NTcUdTSWIzRFFFQgpBUVVBQTRJQ0R3QXdnZ0lLQW9JQ0FRRGtlZm5TTFpWLzVNWFBRMTd4Q25ZWThxNGRybEwwcURjWTNHYVhzV2QxCnd2YzZBQ2psNS9uT3pzeFZHNmQwaVhZWFlKWTdPUnJmSkIvRXpJL3RaZGRndzQ1T050Z3BkQUtCeFNMdVVLNCsKaXNBYThOMUJDeTMvR1RyRllpNmppWGZ3dUcxL20xeCtHZVVVc0xZMlFWNno4anlrU0N0cWdSZjVVajBSdDFIbApOMVRlcm1yZDFOZWJwZTB4cld1VUM1by8xSDQ5a3lzUlF2VFQ0YThDRXFONWRjdFJJVE9aZlpyU0dqalpFRVpqCmVCbnp2LzVKNzNuVEdCVGhpYXI4SWkzaVBlSDRwYm5lZlFSMG9SRnB3RW1lSTNUcHRtLzNxWmVaanRXVGY0bFUKQm9wa2dyZHN6bFFCZFBiVi9ocXNlOU5neHRMcTZ4UzVmMFIrMG9JbWs3VENOSEhOa0E0VWtKNzBKRldBVEdaSwphSzYrZ0ROSitBVExQNVNhQ010WmNGRHlWQ1d1U2kra0huNThrZU9UN3FVMWNDKzhHZFc2QTQ4TklMNUtoQThPClRDWkU0dHlNUU1CQ3VxUDI3dFFBb0FHdytMc3NKRDFBdG1rblI3U2NrZm9YMkQyeHVBVDc0L1JjbFpwUmUrUTIKWXJjY05xVGE1ZzJUSVdkdVFXMXlaMVpoWkdxN2lRS0lvSDRSOUlzOHY2aGJmeGJ1bDZqZVcwelc1cVVNWUJvVwoxQ2ZtQzNaZmJhOWk2M1JLbFk2V0hvSDlVV3FTSFZjcEplWmdWOTFlMGltemw4WHUwV2c3NGFYcWJBNTVINzArCjNwci9wdkdLMXRzbWxWN3VlbEo1QzhzVm9oMXpTRzVTR2VDYTIxNm1iRjR3WXpPWlh6enF6RTdoV0l6TDJGL3AKblFJREFRQUJvMU13VVRBZEJnTlZIUTRFRmdRVUxPU1BkRGZQRGZCbG1YVkdZZ21sUURXQTNHY3dId1lEVlIwagpCQmd3Rm9BVUxPU1BkRGZQRGZCbG1YVkdZZ21sUURXQTNHY3dEd1lEVlIwVEFRSC9CQVV3QXdFQi96QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBZ0VBb0FyWEsvOGpQRWpHT2pxL0VrM0twcFdBWVpwWnpFNFRrZlQrRitBc2lzWFUKb1JDUkRsZWNTa1dlSzVlcjl4cEtNNjZrRWptQURJaW5ITytDc0J6U3Qrb3h1VTh6MXNWTm1PQkJaTEkrQjdhbgorKzBlTGcwcHlOTlMyZ0h5ZEpza2RiRUZLNHhOTkdMbjg0N2Jhd2xEZjNicTMwT1EzS0dXNUVCQ1prbGM5R0VmClVBL0dvWC9STmhMZTdlMFJKeTA4SjlEZmU4L3J2QkhJQXJtS0ljTStNekRrUis2SmhVWVhYZElBRlk0anBNeGQKNUZpZXFqK05VRjJVVUZkamJ0S0VPalh6YU5BMlJSa2VzSGFPcUdBeFY5RnhWRlJ1Z2dIM0RKeGlTd2p6QkgyegpOdmpxNVZWZ2g2L3ZSYmNLVVl1NzNINUpOQWRMRkZydXVvOWxUQ3VOZGtyekVCUzN6anl4MnFyQXVWVldPY1BjCnBLbTdjUGdRNDFIMzMreld4RWJvdHVnMTRXb2tsRnlERmZUVksvUkNYTHVGVm5ZSVI0ZEwvQnNqYnIyM1VzS1UKVGgrdFZMK1Q2dUtyOFVvTWUwT0RJTnNYOHhndXl3bzdqNFhhMDkvRkhsblo5VllWT1gzVTNDa1JzNXYxN3VpQgpvQnlVelRwTU9EY3NGakppRTdURFpNQXhWd2F6endBMTJPTzRpZU9YbEIzd2lIUi91Vm85NE1ETklWTC9jUVZHCmQ2T2o2Vno5K01teWhFYUhKc1hKUXYwYzNVcnBVUkk3Um4xVU4xb1VhNHZiMkhYNThHblFDNXZKNkdQNU5CdkcKVlFRM3hkWFUya1FEUHZiekhXNGNGOG5iSXpiRXJYZFJrcWluWklFb3NOTWhDZEV0amRDZUxnL0huMEszTFBrPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JSUpRUUlCQURBTkJna3Foa2lHOXcwQkFRRUZBQVNDQ1Nzd2dna25BZ0VBQW9JQ0FRRGtlZm5TTFpWLzVNWFAKUTE3eENuWVk4cTRkcmxMMHFEY1kzR2FYc1dkMXd2YzZBQ2psNS9uT3pzeFZHNmQwaVhZWFlKWTdPUnJmSkIvRQp6SS90WmRkZ3c0NU9OdGdwZEFLQnhTTHVVSzQraXNBYThOMUJDeTMvR1RyRllpNmppWGZ3dUcxL20xeCtHZVVVCnNMWTJRVjZ6OGp5a1NDdHFnUmY1VWowUnQxSGxOMVRlcm1yZDFOZWJwZTB4cld1VUM1by8xSDQ5a3lzUlF2VFQKNGE4Q0VxTjVkY3RSSVRPWmZaclNHampaRUVaamVCbnp2LzVKNzNuVEdCVGhpYXI4SWkzaVBlSDRwYm5lZlFSMApvUkZwd0VtZUkzVHB0bS8zcVplWmp0V1RmNGxVQm9wa2dyZHN6bFFCZFBiVi9ocXNlOU5neHRMcTZ4UzVmMFIrCjBvSW1rN1RDTkhITmtBNFVrSjcwSkZXQVRHWkthSzYrZ0ROSitBVExQNVNhQ010WmNGRHlWQ1d1U2kra0huNTgKa2VPVDdxVTFjQys4R2RXNkE0OE5JTDVLaEE4T1RDWkU0dHlNUU1CQ3VxUDI3dFFBb0FHdytMc3NKRDFBdG1rbgpSN1Nja2ZvWDJEMnh1QVQ3NC9SY2xacFJlK1EyWXJjY05xVGE1ZzJUSVdkdVFXMXlaMVpoWkdxN2lRS0lvSDRSCjlJczh2NmhiZnhidWw2amVXMHpXNXFVTVlCb1cxQ2ZtQzNaZmJhOWk2M1JLbFk2V0hvSDlVV3FTSFZjcEplWmcKVjkxZTBpbXpsOFh1MFdnNzRhWHFiQTU1SDcwKzNwci9wdkdLMXRzbWxWN3VlbEo1QzhzVm9oMXpTRzVTR2VDYQoyMTZtYkY0d1l6T1pYenpxekU3aFdJekwyRi9wblFJREFRQUJBb0lDQUQrNlpoeGg2cGxKem9NSlg2b01LUFM4CmZDUjdRMWhLczFPVDVtblphZXBHLzM2R0hPSkQya0g5SExHQWpTek1Tc3dxZkx6NEtLNmsvTmQvMTRWNEtxTXEKNkw2WVBhTVNZTUNocENTbERIVVZicEFWTHlHOVpJOExFb0dMNlVaa1NiZ3pPUmVtMWgyMlMxZUNFdEQvV3RNRwpkak84alorZmNuaHduK2daSWhhMVlFN2NoNkpvZzlzK1pQSytWSXR1MFErTXpjbVBDeXc5YU56UXptZmRtd3Q5Cjk4QWhhcXNkaGRta3hzYUU2NTFER3JvS2kzdEQrTThRb0lKb1MvRVg5NFJyam1RMGxhdWhZMlRFcUg2K3k4bjQKU2R3R3J5UjlnWE9yaTVjZ3M4VmtMYVhyY0E1Qlh0MHBLdEIxbUNzVVB0bDNtODA2MVFVSW9xcGRQVUJWWXMxaAp0Rml4OEM2ckMxYVEycFhSV2ZPUDdVakU1RE84V29zSXZkK09FZE9tcGJoM0E0R0tva3hMVERRZUtQQ1l2L2poCmF2WjhjRDkrUm1RWnpQSk4xZ01xckFVLy9rL0NwU3QzaUxmUDNnN3BiaWE5T3B3SC9LUVRmblZKVVhuRDVoZ2MKT2xnNXJCeSt6N0VacFBWMExQZDlpUjErMjRndE93ajA3eW50UWpldmJ0UFlmbHJqdjdMTERrenZlSDJMTkhQSQp5RFJPaFdTblNNaHBqOHRzQmJxZ1JEZVpENWNwQ3ozSEtSUFROT2NZdUYrZUFseGNEMkR4aG5DZ3RDQzhodmFuCnFFSGlPU2ZnQVZ4S01lK1Z2akp2eE9CVFN3WE1RcmYyTHRRT2FOeHYzMUs0NmlEWFQ0c3dZTlFrUkl2U0Rlb1oKc3BCZzFTcUFWb21Lc1p4SlNZdGhBb0lCQVFEMXVPU0R3RXRqbmFhYkxsb3g4UDgzMkw3NGkvV250QU4yK0duYwpxanU1dzJXSGpZejBHd1h5RE8wbm9uQkVOZklJZVhCQUN3L3IvTWlxODBUaGZQTENtaTBscVpjVVpKTWhFNzlTCjcwVlEwVUJrR2J0b0J0cTRzTC9jeHRLOUtCRGw2Z3p0b05hSjE1OVhPOXdtcVoxWm8xMTAxTnpSdjBpZ09Ra0sKMG5sNGxFTG1GZ0dpbTlUZHBKM1JBQmxCWk5DaEUwWjlKVTBXZ0hmbE1wbndGdTR1Qm1IOWdkV0w5OUkxbGNTSwpaWFZId3F0cmhYdkZwOUFtalF2d2o4SVJJNG1YQXhCRHFtcWxsZThZbG9yWU4rY05ja1JpTEdzNG9KbndlZW45CmxBY2VZZnZVV3Y4L09NL0JEYWVxNVM5SVovRUhnMWxaZ3pLK2hCTXY5dlM5THY2TEFvSUJBUUR1Q0d2dDBXc2kKSEE2RGJFc0ZFQTZxWWM3Z1VOUmNxZHRZQUpGQVkycXNyTFZLSVVEWUdYTk1RU3RWcm1RUDdpMFhONVlHdkVUVgpScmo1VHJlN1UzZEl6V2tGTUF4WjR5bW04dTNodUp0aTh0RnhpM2EvclJrK3h2VWxKZnlldGFCS1BXWCtwcHJWCjlmbnlxUllXVitaTitGMjhNa0svQUpCcU5sMmxJRG1Od2J5eVNNMld0VUpYMXphTkFTZEFLeUlLakdGUXR3OGgKYm1ERDc5cy90WW1XV2FXMEFLS2g3M3k4REJSOS9JR084TGorTGNQTGVnK2FFL01yVEQ5cmJ2djUxSXlmRUhoRApOeUpEc2thdDg3SHI4Zkh3ZVFsVlNXUVRKMnhGTjcwMFkxbkZ2TGNEUkFucEVhQlMrTHhsMEc3NmZTSVB1eUQwCkh5UXZKcmMvYUtWM0FvSUJBR1BXaitLSVN4bGFnTXNrZGprOGRqWTJ0c0U5L0wzN0FqMWdpWUxER0NsT0h2NkkKb1BDOTJoaVM3L2plbzBiVHRGZUZIL3FsZy82YVl0NHlvWllNc29ZbkpwamE0eXZDQVpXNjlFMjZNaXU0R2JXUwpUdmJoY2hVQW03UVVoS09lbDk4U3pkWHZON3dpQS9mcHRuVnZEU1BTb0xKTG1yME9QMi82UEpaTkZsWEx4N0s4CjFrVS9rNm5Lck9TeWFaQ01hY2hJa0tkZ2RJWGtCTkwzVUZ5Z3RIMjIwakd5Z3hXdng1VkdHT2t5ZUFpRUxDb3YKdmk1OUZMSFZOVGkwOEdFT1UyVXNOWHVJem5RaEMxaXVNaFBRQXUwUHRJRS9Fd0diSDNENTEvelVIR0JYNTM1TQp5dERoUUdoc0orZmozdVpJZFVKY04vMkt0Ujk3Z21CR3N3SDdDaWtDZ2dFQUs1N3JlSGVLTklRRHZOM1ptYUhwCnJodWlkOFVZUmFyekFWdUpRczExUFJPaFhXWmVwYnQwUDZNcHQ5ZnZpbVBSYTVIS01vM0o1M1BBYmgrWTJBRmgKdUx1NzVURjY4ZllKS2drV3d1aTd3UlJTZ1laWFNxVUVIVmNFa2J3MllUZFRtb2RKNjdMSWFURmNqcldoMEpKbgpLQjY5dnNGUExnV0NjWlJvOE52SThFdHlzeEZZYTZmbjhvVUVBQzhYN0ZCN09vZWpSZEZtT25BcDEzNWJKWCsxCktSSmdwVzRBWDhDdGtTQjltT0R2TlN5MEdoQjA4eEw1VFBrZTlPNVNLUFA3eFRySVVsWUlVL2tFbEhkVk1JZWEKTVd6ek0yaGE1NEE5a0swRzBHQjRrZU1yRG11WTlrWS9zckNDT3ZKT1JESkFSRE11VE1lME1FaU1ydjlmVVlWeAozUUtDQVFCOHcwWmhGN3hNUzVUanpkZXR5dXJqMksvWHRyZlNjOGpoaXRDR05vejhHbmM4a1NQMHRycmhHeWRvCi91NVBJRG11enUyeTZoOS9LK3BGdDdhWjhUa0hhb3FWckc1WVJ1TXBTYXFVZ1dkdHBIUTVweG9HMXNiODZYaDQKbGdRNFg2eDl5dTlidlVNZkZWZXhma0xkWFpPYjBXN20vai94WFRMR3VlUkFCek1ZWVN3cDlKbnlsZHBvaVIwZQpHekxIM1JWRTFwTU05Y1J4RUZhRDBmR3k5eUZTc0RzYitKbS9BMTdXcTcvSThvR1M0Q28vUVBtTkJLN1U4ZnBrCnlNdHZhUmdTMVdLQURqMzhYKzhzcmc2dXN6TzN0ZUdBVWJ3UC9wTnErVEQ5eWhZSjlGT2RQczBxaTZyZHBmVW4KWkZoc1JmUVI2WVBzQ2RnQnhTaG00bG95eUdIZQotLS0tLUVORCBQUklWQVRFIEtFWS0tLS0tCg== + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -147,6 +168,6 @@ customaccept values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_disablesuffixes_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_disablesuffixes_test.yaml.snap index d9e1eec..9bdc49f 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_disablesuffixes_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_disablesuffixes_test.yaml.snap @@ -7,7 +7,7 @@ HA mode on: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -48,6 +48,10 @@ HA mode on: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -63,6 +67,7 @@ HA mode on: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -75,6 +80,7 @@ HA mode on: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -93,10 +99,16 @@ HA mode on: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: v1 kind: Service @@ -105,7 +117,7 @@ HA mode on: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -125,6 +137,15 @@ HA mode on: name: github-com-broker-token type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -132,7 +153,7 @@ HA mode on: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE HA mode on with 4 replicas: @@ -144,7 +165,7 @@ HA mode on with 4 replicas: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -185,6 +206,10 @@ HA mode on with 4 replicas: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -200,6 +225,7 @@ HA mode on with 4 replicas: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -212,6 +238,7 @@ HA mode on with 4 replicas: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -230,10 +257,16 @@ HA mode on with 4 replicas: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: v1 kind: Service @@ -242,7 +275,7 @@ HA mode on with 4 replicas: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -262,6 +295,15 @@ HA mode on with 4 replicas: name: github-com-broker-token type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -269,7 +311,7 @@ HA mode on with 4 replicas: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE default values: @@ -281,7 +323,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -322,6 +364,10 @@ default values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -335,6 +381,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -347,6 +394,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -365,10 +413,16 @@ default values: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: v1 kind: Service @@ -377,7 +431,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -397,6 +451,15 @@ default values: name: github-com-broker-token type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -404,7 +467,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE preflight checks off: @@ -416,7 +479,7 @@ preflight checks off: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -457,6 +520,10 @@ preflight checks off: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -472,6 +539,7 @@ preflight checks off: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -484,6 +552,7 @@ preflight checks off: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -502,10 +571,16 @@ preflight checks off: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: v1 kind: Service @@ -514,7 +589,7 @@ preflight checks off: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -534,6 +609,15 @@ preflight checks off: name: github-com-broker-token type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -541,6 +625,6 @@ preflight checks off: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_disablesuffixes_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_disablesuffixes_test.yaml.snap index fe65b56..aac860c 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_disablesuffixes_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_disablesuffixes_test.yaml.snap @@ -7,7 +7,7 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker namespace: NAMESPACE spec: @@ -48,6 +48,10 @@ ingress: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -61,6 +65,7 @@ ingress: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -73,6 +78,7 @@ ingress: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -91,10 +97,16 @@ ingress: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: extensions/v1beta1 kind: Ingress @@ -103,7 +115,7 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker namespace: NAMESPACE spec: @@ -123,7 +135,7 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service namespace: NAMESPACE spec: @@ -143,6 +155,15 @@ ingress: name: github-com-broker-token type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZhekNDQTFPZ0F3SUJBZ0lVWHNWWG41N293WDVVSkNTZ21waVVDRHNjeXVVd0RRWUpLb1pJaHZjTkFRRUwKQlFBd1JURUxNQWtHQTFVRUJoTUNRVlV4RXpBUkJnTlZCQWdNQ2xOdmJXVXRVM1JoZEdVeElUQWZCZ05WQkFvTQpHRWx1ZEdWeWJtVjBJRmRwWkdkcGRITWdVSFI1SUV4MFpEQWVGdzB5TkRBek1UTXhORFF6TWpsYUZ3MHlOVEF6Ck1UTXhORFF6TWpsYU1FVXhDekFKQmdOVkJBWVRBa0ZWTVJNd0VRWURWUVFJREFwVGIyMWxMVk4wWVhSbE1TRXcKSHdZRFZRUUtEQmhKYm5SbGNtNWxkQ0JYYVdSbmFYUnpJRkIwZVNCTWRHUXdnZ0lpTUEwR0NTcUdTSWIzRFFFQgpBUVVBQTRJQ0R3QXdnZ0lLQW9JQ0FRRGtlZm5TTFpWLzVNWFBRMTd4Q25ZWThxNGRybEwwcURjWTNHYVhzV2QxCnd2YzZBQ2psNS9uT3pzeFZHNmQwaVhZWFlKWTdPUnJmSkIvRXpJL3RaZGRndzQ1T050Z3BkQUtCeFNMdVVLNCsKaXNBYThOMUJDeTMvR1RyRllpNmppWGZ3dUcxL20xeCtHZVVVc0xZMlFWNno4anlrU0N0cWdSZjVVajBSdDFIbApOMVRlcm1yZDFOZWJwZTB4cld1VUM1by8xSDQ5a3lzUlF2VFQ0YThDRXFONWRjdFJJVE9aZlpyU0dqalpFRVpqCmVCbnp2LzVKNzNuVEdCVGhpYXI4SWkzaVBlSDRwYm5lZlFSMG9SRnB3RW1lSTNUcHRtLzNxWmVaanRXVGY0bFUKQm9wa2dyZHN6bFFCZFBiVi9ocXNlOU5neHRMcTZ4UzVmMFIrMG9JbWs3VENOSEhOa0E0VWtKNzBKRldBVEdaSwphSzYrZ0ROSitBVExQNVNhQ010WmNGRHlWQ1d1U2kra0huNThrZU9UN3FVMWNDKzhHZFc2QTQ4TklMNUtoQThPClRDWkU0dHlNUU1CQ3VxUDI3dFFBb0FHdytMc3NKRDFBdG1rblI3U2NrZm9YMkQyeHVBVDc0L1JjbFpwUmUrUTIKWXJjY05xVGE1ZzJUSVdkdVFXMXlaMVpoWkdxN2lRS0lvSDRSOUlzOHY2aGJmeGJ1bDZqZVcwelc1cVVNWUJvVwoxQ2ZtQzNaZmJhOWk2M1JLbFk2V0hvSDlVV3FTSFZjcEplWmdWOTFlMGltemw4WHUwV2c3NGFYcWJBNTVINzArCjNwci9wdkdLMXRzbWxWN3VlbEo1QzhzVm9oMXpTRzVTR2VDYTIxNm1iRjR3WXpPWlh6enF6RTdoV0l6TDJGL3AKblFJREFRQUJvMU13VVRBZEJnTlZIUTRFRmdRVUxPU1BkRGZQRGZCbG1YVkdZZ21sUURXQTNHY3dId1lEVlIwagpCQmd3Rm9BVUxPU1BkRGZQRGZCbG1YVkdZZ21sUURXQTNHY3dEd1lEVlIwVEFRSC9CQVV3QXdFQi96QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBZ0VBb0FyWEsvOGpQRWpHT2pxL0VrM0twcFdBWVpwWnpFNFRrZlQrRitBc2lzWFUKb1JDUkRsZWNTa1dlSzVlcjl4cEtNNjZrRWptQURJaW5ITytDc0J6U3Qrb3h1VTh6MXNWTm1PQkJaTEkrQjdhbgorKzBlTGcwcHlOTlMyZ0h5ZEpza2RiRUZLNHhOTkdMbjg0N2Jhd2xEZjNicTMwT1EzS0dXNUVCQ1prbGM5R0VmClVBL0dvWC9STmhMZTdlMFJKeTA4SjlEZmU4L3J2QkhJQXJtS0ljTStNekRrUis2SmhVWVhYZElBRlk0anBNeGQKNUZpZXFqK05VRjJVVUZkamJ0S0VPalh6YU5BMlJSa2VzSGFPcUdBeFY5RnhWRlJ1Z2dIM0RKeGlTd2p6QkgyegpOdmpxNVZWZ2g2L3ZSYmNLVVl1NzNINUpOQWRMRkZydXVvOWxUQ3VOZGtyekVCUzN6anl4MnFyQXVWVldPY1BjCnBLbTdjUGdRNDFIMzMreld4RWJvdHVnMTRXb2tsRnlERmZUVksvUkNYTHVGVm5ZSVI0ZEwvQnNqYnIyM1VzS1UKVGgrdFZMK1Q2dUtyOFVvTWUwT0RJTnNYOHhndXl3bzdqNFhhMDkvRkhsblo5VllWT1gzVTNDa1JzNXYxN3VpQgpvQnlVelRwTU9EY3NGakppRTdURFpNQXhWd2F6endBMTJPTzRpZU9YbEIzd2lIUi91Vm85NE1ETklWTC9jUVZHCmQ2T2o2Vno5K01teWhFYUhKc1hKUXYwYzNVcnBVUkk3Um4xVU4xb1VhNHZiMkhYNThHblFDNXZKNkdQNU5CdkcKVlFRM3hkWFUya1FEUHZiekhXNGNGOG5iSXpiRXJYZFJrcWluWklFb3NOTWhDZEV0amRDZUxnL0huMEszTFBrPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + tls.key: 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 + kind: Secret + metadata: + name: tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -150,6 +171,6 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_test.yaml.snap index f6b5d29..2b4b719 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_ingress_test.yaml.snap @@ -7,7 +7,7 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -48,6 +48,10 @@ ingress: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -61,6 +65,7 @@ ingress: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -73,6 +78,7 @@ ingress: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -91,10 +97,16 @@ ingress: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: extensions/v1beta1 kind: Ingress @@ -103,7 +115,7 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: RELEASE-NAME-snyk-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -123,7 +135,7 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -143,6 +155,15 @@ ingress: name: github-com-broker-token-RELEASE-NAME type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -150,6 +171,6 @@ ingress: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_scm_token_pool_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_scm_token_pool_test.yaml.snap index c25a77f..b086b3a 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_scm_token_pool_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_scm_token_pool_test.yaml.snap @@ -7,7 +7,7 @@ github token pool configured: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -53,6 +53,10 @@ github token pool configured: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -66,6 +70,7 @@ github token pool configured: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -78,6 +83,7 @@ github token pool configured: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -96,10 +102,16 @@ github token pool configured: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -108,7 +120,7 @@ github token pool configured: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -136,6 +148,15 @@ github token pool configured: name: github-com-token-pool-RELEASE-NAME type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -143,7 +164,7 @@ github token pool configured: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE github token pool configured with enabled useExternalSecretScmTokenPool: @@ -155,7 +176,7 @@ github token pool configured with enabled useExternalSecretScmTokenPool: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -196,6 +217,10 @@ github token pool configured with enabled useExternalSecretScmTokenPool: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -209,6 +234,7 @@ github token pool configured with enabled useExternalSecretScmTokenPool: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -221,6 +247,7 @@ github token pool configured with enabled useExternalSecretScmTokenPool: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -239,10 +266,16 @@ github token pool configured with enabled useExternalSecretScmTokenPool: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -251,7 +284,7 @@ github token pool configured with enabled useExternalSecretScmTokenPool: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -271,6 +304,15 @@ github token pool configured with enabled useExternalSecretScmTokenPool: name: github-com-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -278,7 +320,7 @@ github token pool configured with enabled useExternalSecretScmTokenPool: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE gitlab token pool configured: @@ -290,7 +332,7 @@ gitlab token pool configured: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: gitlab-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -338,6 +380,10 @@ gitlab token pool configured: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -351,6 +397,7 @@ gitlab token pool configured: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -363,6 +410,7 @@ gitlab token pool configured: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -381,10 +429,16 @@ gitlab token pool configured: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -393,7 +447,7 @@ gitlab token pool configured: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: gitlab-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -421,6 +475,15 @@ gitlab token pool configured: name: gitlab-token-pool-RELEASE-NAME type: Opaque 5: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 6: | apiVersion: v1 kind: ServiceAccount metadata: @@ -428,6 +491,6 @@ gitlab token pool configured: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/broker_deployment_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/broker_deployment_test.yaml.snap index cca2db9..ee843c6 100644 --- a/charts/snyk-broker/tests/__snapshot__/broker_deployment_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/broker_deployment_test.yaml.snap @@ -7,7 +7,7 @@ HA mode on: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -48,6 +48,10 @@ HA mode on: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -63,6 +67,7 @@ HA mode on: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -75,6 +80,7 @@ HA mode on: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -93,10 +99,16 @@ HA mode on: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -105,7 +117,7 @@ HA mode on: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -125,6 +137,15 @@ HA mode on: name: github-com-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -132,7 +153,7 @@ HA mode on: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE HA mode on with 4 replicas: @@ -144,7 +165,7 @@ HA mode on with 4 replicas: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -185,6 +206,10 @@ HA mode on with 4 replicas: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -200,6 +225,7 @@ HA mode on with 4 replicas: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -212,6 +238,7 @@ HA mode on with 4 replicas: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -230,10 +257,16 @@ HA mode on with 4 replicas: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -242,7 +275,7 @@ HA mode on with 4 replicas: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -262,6 +295,15 @@ HA mode on with 4 replicas: name: github-com-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -269,7 +311,7 @@ HA mode on with 4 replicas: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE default values: @@ -281,7 +323,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -322,6 +364,10 @@ default values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -335,6 +381,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -347,6 +394,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -365,10 +413,16 @@ default values: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -377,7 +431,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -397,6 +451,15 @@ default values: name: github-com-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JSUpRUUlCQURBTkJna3Foa2lHOXcwQkFRRUZBQVNDQ1Nzd2dna25BZ0VBQW9JQ0FRRGtlZm5TTFpWLzVNWFAKUTE3eENuWVk4cTRkcmxMMHFEY1kzR2FYc1dkMXd2YzZBQ2psNS9uT3pzeFZHNmQwaVhZWFlKWTdPUnJmSkIvRQp6SS90WmRkZ3c0NU9OdGdwZEFLQnhTTHVVSzQraXNBYThOMUJDeTMvR1RyRllpNmppWGZ3dUcxL20xeCtHZVVVCnNMWTJRVjZ6OGp5a1NDdHFnUmY1VWowUnQxSGxOMVRlcm1yZDFOZWJwZTB4cld1VUM1by8xSDQ5a3lzUlF2VFQKNGE4Q0VxTjVkY3RSSVRPWmZaclNHampaRUVaamVCbnp2LzVKNzNuVEdCVGhpYXI4SWkzaVBlSDRwYm5lZlFSMApvUkZwd0VtZUkzVHB0bS8zcVplWmp0V1RmNGxVQm9wa2dyZHN6bFFCZFBiVi9ocXNlOU5neHRMcTZ4UzVmMFIrCjBvSW1rN1RDTkhITmtBNFVrSjcwSkZXQVRHWkthSzYrZ0ROSitBVExQNVNhQ010WmNGRHlWQ1d1U2kra0huNTgKa2VPVDdxVTFjQys4R2RXNkE0OE5JTDVLaEE4T1RDWkU0dHlNUU1CQ3VxUDI3dFFBb0FHdytMc3NKRDFBdG1rbgpSN1Nja2ZvWDJEMnh1QVQ3NC9SY2xacFJlK1EyWXJjY05xVGE1ZzJUSVdkdVFXMXlaMVpoWkdxN2lRS0lvSDRSCjlJczh2NmhiZnhidWw2amVXMHpXNXFVTVlCb1cxQ2ZtQzNaZmJhOWk2M1JLbFk2V0hvSDlVV3FTSFZjcEplWmcKVjkxZTBpbXpsOFh1MFdnNzRhWHFiQTU1SDcwKzNwci9wdkdLMXRzbWxWN3VlbEo1QzhzVm9oMXpTRzVTR2VDYQoyMTZtYkY0d1l6T1pYenpxekU3aFdJekwyRi9wblFJREFRQUJBb0lDQUQrNlpoeGg2cGxKem9NSlg2b01LUFM4CmZDUjdRMWhLczFPVDVtblphZXBHLzM2R0hPSkQya0g5SExHQWpTek1Tc3dxZkx6NEtLNmsvTmQvMTRWNEtxTXEKNkw2WVBhTVNZTUNocENTbERIVVZicEFWTHlHOVpJOExFb0dMNlVaa1NiZ3pPUmVtMWgyMlMxZUNFdEQvV3RNRwpkak84alorZmNuaHduK2daSWhhMVlFN2NoNkpvZzlzK1pQSytWSXR1MFErTXpjbVBDeXc5YU56UXptZmRtd3Q5Cjk4QWhhcXNkaGRta3hzYUU2NTFER3JvS2kzdEQrTThRb0lKb1MvRVg5NFJyam1RMGxhdWhZMlRFcUg2K3k4bjQKU2R3R3J5UjlnWE9yaTVjZ3M4VmtMYVhyY0E1Qlh0MHBLdEIxbUNzVVB0bDNtODA2MVFVSW9xcGRQVUJWWXMxaAp0Rml4OEM2ckMxYVEycFhSV2ZPUDdVakU1RE84V29zSXZkK09FZE9tcGJoM0E0R0tva3hMVERRZUtQQ1l2L2poCmF2WjhjRDkrUm1RWnpQSk4xZ01xckFVLy9rL0NwU3QzaUxmUDNnN3BiaWE5T3B3SC9LUVRmblZKVVhuRDVoZ2MKT2xnNXJCeSt6N0VacFBWMExQZDlpUjErMjRndE93ajA3eW50UWpldmJ0UFlmbHJqdjdMTERrenZlSDJMTkhQSQp5RFJPaFdTblNNaHBqOHRzQmJxZ1JEZVpENWNwQ3ozSEtSUFROT2NZdUYrZUFseGNEMkR4aG5DZ3RDQzhodmFuCnFFSGlPU2ZnQVZ4S01lK1Z2akp2eE9CVFN3WE1RcmYyTHRRT2FOeHYzMUs0NmlEWFQ0c3dZTlFrUkl2U0Rlb1oKc3BCZzFTcUFWb21Lc1p4SlNZdGhBb0lCQVFEMXVPU0R3RXRqbmFhYkxsb3g4UDgzMkw3NGkvV250QU4yK0duYwpxanU1dzJXSGpZejBHd1h5RE8wbm9uQkVOZklJZVhCQUN3L3IvTWlxODBUaGZQTENtaTBscVpjVVpKTWhFNzlTCjcwVlEwVUJrR2J0b0J0cTRzTC9jeHRLOUtCRGw2Z3p0b05hSjE1OVhPOXdtcVoxWm8xMTAxTnpSdjBpZ09Ra0sKMG5sNGxFTG1GZ0dpbTlUZHBKM1JBQmxCWk5DaEUwWjlKVTBXZ0hmbE1wbndGdTR1Qm1IOWdkV0w5OUkxbGNTSwpaWFZId3F0cmhYdkZwOUFtalF2d2o4SVJJNG1YQXhCRHFtcWxsZThZbG9yWU4rY05ja1JpTEdzNG9KbndlZW45CmxBY2VZZnZVV3Y4L09NL0JEYWVxNVM5SVovRUhnMWxaZ3pLK2hCTXY5dlM5THY2TEFvSUJBUUR1Q0d2dDBXc2kKSEE2RGJFc0ZFQTZxWWM3Z1VOUmNxZHRZQUpGQVkycXNyTFZLSVVEWUdYTk1RU3RWcm1RUDdpMFhONVlHdkVUVgpScmo1VHJlN1UzZEl6V2tGTUF4WjR5bW04dTNodUp0aTh0RnhpM2EvclJrK3h2VWxKZnlldGFCS1BXWCtwcHJWCjlmbnlxUllXVitaTitGMjhNa0svQUpCcU5sMmxJRG1Od2J5eVNNMld0VUpYMXphTkFTZEFLeUlLakdGUXR3OGgKYm1ERDc5cy90WW1XV2FXMEFLS2g3M3k4REJSOS9JR084TGorTGNQTGVnK2FFL01yVEQ5cmJ2djUxSXlmRUhoRApOeUpEc2thdDg3SHI4Zkh3ZVFsVlNXUVRKMnhGTjcwMFkxbkZ2TGNEUkFucEVhQlMrTHhsMEc3NmZTSVB1eUQwCkh5UXZKcmMvYUtWM0FvSUJBR1BXaitLSVN4bGFnTXNrZGprOGRqWTJ0c0U5L0wzN0FqMWdpWUxER0NsT0h2NkkKb1BDOTJoaVM3L2plbzBiVHRGZUZIL3FsZy82YVl0NHlvWllNc29ZbkpwamE0eXZDQVpXNjlFMjZNaXU0R2JXUwpUdmJoY2hVQW03UVVoS09lbDk4U3pkWHZON3dpQS9mcHRuVnZEU1BTb0xKTG1yME9QMi82UEpaTkZsWEx4N0s4CjFrVS9rNm5Lck9TeWFaQ01hY2hJa0tkZ2RJWGtCTkwzVUZ5Z3RIMjIwakd5Z3hXdng1VkdHT2t5ZUFpRUxDb3YKdmk1OUZMSFZOVGkwOEdFT1UyVXNOWHVJem5RaEMxaXVNaFBRQXUwUHRJRS9Fd0diSDNENTEvelVIR0JYNTM1TQp5dERoUUdoc0orZmozdVpJZFVKY04vMkt0Ujk3Z21CR3N3SDdDaWtDZ2dFQUs1N3JlSGVLTklRRHZOM1ptYUhwCnJodWlkOFVZUmFyekFWdUpRczExUFJPaFhXWmVwYnQwUDZNcHQ5ZnZpbVBSYTVIS01vM0o1M1BBYmgrWTJBRmgKdUx1NzVURjY4ZllKS2drV3d1aTd3UlJTZ1laWFNxVUVIVmNFa2J3MllUZFRtb2RKNjdMSWFURmNqcldoMEpKbgpLQjY5dnNGUExnV0NjWlJvOE52SThFdHlzeEZZYTZmbjhvVUVBQzhYN0ZCN09vZWpSZEZtT25BcDEzNWJKWCsxCktSSmdwVzRBWDhDdGtTQjltT0R2TlN5MEdoQjA4eEw1VFBrZTlPNVNLUFA3eFRySVVsWUlVL2tFbEhkVk1JZWEKTVd6ek0yaGE1NEE5a0swRzBHQjRrZU1yRG11WTlrWS9zckNDT3ZKT1JESkFSRE11VE1lME1FaU1ydjlmVVlWeAozUUtDQVFCOHcwWmhGN3hNUzVUanpkZXR5dXJqMksvWHRyZlNjOGpoaXRDR05vejhHbmM4a1NQMHRycmhHeWRvCi91NVBJRG11enUyeTZoOS9LK3BGdDdhWjhUa0hhb3FWckc1WVJ1TXBTYXFVZ1dkdHBIUTVweG9HMXNiODZYaDQKbGdRNFg2eDl5dTlidlVNZkZWZXhma0xkWFpPYjBXN20vai94WFRMR3VlUkFCek1ZWVN3cDlKbnlsZHBvaVIwZQpHekxIM1JWRTFwTU05Y1J4RUZhRDBmR3k5eUZTc0RzYitKbS9BMTdXcTcvSThvR1M0Q28vUVBtTkJLN1U4ZnBrCnlNdHZhUmdTMVdLQURqMzhYKzhzcmc2dXN6TzN0ZUdBVWJ3UC9wTnErVEQ5eWhZSjlGT2RQczBxaTZyZHBmVW4KWkZoc1JmUVI2WVBzQ2RnQnhTaG00bG95eUdIZQotLS0tLUVORCBQUklWQVRFIEtFWS0tLS0tCg== + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -404,7 +467,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE preflight checks off: @@ -416,7 +479,7 @@ preflight checks off: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -457,6 +520,10 @@ preflight checks off: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: ACCEPT_CODE value: "true" - name: ACCEPT_IAC @@ -472,6 +539,7 @@ preflight checks off: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -484,6 +552,7 @@ preflight checks off: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -502,10 +571,16 @@ preflight checks off: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: v1 kind: Service @@ -514,7 +589,7 @@ preflight checks off: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: github-com-broker-service-RELEASE-NAME namespace: NAMESPACE spec: @@ -534,6 +609,15 @@ preflight checks off: name: github-com-broker-token-RELEASE-NAME type: Opaque 4: | + apiVersion: v1 + data: + tls.crt: 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 + tls.key: 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 + kind: Secret + metadata: + name: RELEASE-NAME-snyk-broker-tls-secret + type: kubernetes.io/tls + 5: | apiVersion: v1 kind: ServiceAccount metadata: @@ -541,6 +625,6 @@ preflight checks off: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: snyk-broker-RELEASE-NAME namespace: NAMESPACE diff --git a/charts/snyk-broker/tests/__snapshot__/cra_deployment_digitalocean_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/cra_deployment_digitalocean_test.yaml.snap index 8d1e0f6..1ee5c6e 100644 --- a/charts/snyk-broker/tests/__snapshot__/cra_deployment_digitalocean_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/cra_deployment_digitalocean_test.yaml.snap @@ -7,7 +7,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -56,6 +56,10 @@ default values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: BROKER_DISPATCHER_BASE_URL value: https://api.test.snyk.io image: snyk/broker:container-registry-agent @@ -65,6 +69,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -77,6 +82,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -95,10 +101,16 @@ default values: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: apps/v1 kind: Deployment @@ -155,7 +167,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: cra-service-RELEASE-NAME namespace: NAMESPACE spec: diff --git a/charts/snyk-broker/tests/__snapshot__/cra_deployment_disablesuffixes_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/cra_deployment_disablesuffixes_test.yaml.snap index 5e0001c..0f9b266 100644 --- a/charts/snyk-broker/tests/__snapshot__/cra_deployment_disablesuffixes_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/cra_deployment_disablesuffixes_test.yaml.snap @@ -7,7 +7,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker namespace: NAMESPACE spec: @@ -55,6 +55,10 @@ default values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: BROKER_DISPATCHER_BASE_URL value: https://api.test.snyk.io image: snyk/broker:container-registry-agent @@ -64,6 +68,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -76,6 +81,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -94,10 +100,16 @@ default values: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: tls-secret 2: | apiVersion: apps/v1 kind: Deployment @@ -154,7 +166,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: cra-service namespace: NAMESPACE spec: diff --git a/charts/snyk-broker/tests/__snapshot__/cra_deployment_harbor_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/cra_deployment_harbor_test.yaml.snap index d8a1d68..dd65557 100644 --- a/charts/snyk-broker/tests/__snapshot__/cra_deployment_harbor_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/cra_deployment_harbor_test.yaml.snap @@ -7,7 +7,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -58,6 +58,10 @@ default values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: BROKER_DISPATCHER_BASE_URL value: https://api.test.snyk.io image: snyk/broker:container-registry-agent @@ -67,6 +71,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -79,6 +84,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -97,10 +103,16 @@ default values: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: apps/v1 kind: Deployment @@ -157,7 +169,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: cra-service-RELEASE-NAME namespace: NAMESPACE spec: diff --git a/charts/snyk-broker/tests/__snapshot__/cra_deployment_test.yaml.snap b/charts/snyk-broker/tests/__snapshot__/cra_deployment_test.yaml.snap index 97a5ba4..d8cdc9e 100644 --- a/charts/snyk-broker/tests/__snapshot__/cra_deployment_test.yaml.snap +++ b/charts/snyk-broker/tests/__snapshot__/cra_deployment_test.yaml.snap @@ -7,7 +7,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: container-registry-agent-broker-RELEASE-NAME namespace: NAMESPACE spec: @@ -55,6 +55,10 @@ default values: value: info - name: LOG_ENABLE_BODY value: "false" + - name: HTTPS_CERT + value: /home/node/tls-cert/tls.crt + - name: HTTPS_KEY + value: /home/node/tls-cert/tls.key - name: BROKER_DISPATCHER_BASE_URL value: https://api.test.snyk.io image: snyk/broker:container-registry-agent @@ -64,6 +68,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -76,6 +81,7 @@ default values: httpGet: path: /healthcheck port: 8000 + scheme: HTTPS initialDelaySeconds: 3 periodSeconds: 10 timeoutSeconds: 1 @@ -94,10 +100,16 @@ default values: readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1000 - volumeMounts: null + volumeMounts: + - mountPath: /home/node/tls-cert/ + name: RELEASE-NAME-snyk-broker-tls-secret-volume + readOnly: true securityContext: {} serviceAccountName: snyk-broker-RELEASE-NAME - volumes: null + volumes: + - name: RELEASE-NAME-snyk-broker-tls-secret-volume + secret: + secretName: RELEASE-NAME-snyk-broker-tls-secret 2: | apiVersion: apps/v1 kind: Deployment @@ -154,7 +166,7 @@ default values: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: snyk-broker-RELEASE-NAME - helm.sh/chart: snyk-broker-2.6.0 + helm.sh/chart: snyk-broker-2.6.1 name: cra-service-RELEASE-NAME namespace: NAMESPACE spec: