chore: update cfapi to fix octokit proxying issue

charts/codefresh-infra/.sops.yaml

@@ -0,0 +1,2 @@
+creation_rules:
+  - kms: arn:aws:kms:us-east-1:734022025880:alias/sops/shared-services

charts/codefresh-infra/Chart.yaml

@@ -0,0 +1,17 @@
+apiVersion: v2
+name: codefresh-infra
+version: 0.1.0
+description: Infra charts for Codefresh Onprem (mongodb/postgresql/redis/rabbitmq)
+dependencies:
+  - name: mongodb
+    version: 0.1.1
+    repository: oci://quay.io/codefresh/charts/dev
+  - name: postgresql
+    version: 0.1.1
+    repository: oci://quay.io/codefresh/charts/dev
+  - name: redis
+    version: 0.1.1
+    repository: oci://quay.io/codefresh/charts/dev
+  - name: rabbitmq
+    version: 0.1.1
+    repository: oci://quay.io/codefresh/charts/dev

charts/codefresh-infra/values-tls.yaml

@@ -0,0 +1,73 @@
+mongodb:
+  config:
+    net:
+      tls:
+        mode: allowTLS
+        certificateKeyFile: /etc/ssl/server.pem
+        CAFile: /etc/ssl/ca.crt
+
+  container:
+    volumeMounts:
+      ca-cert:
+        path:
+          - mountPath: /etc/ssl/ca.crt
+            subPath: ca.crt
+      server-cert:
+        path:
+          - mountPath: /etc/ssl/server.pem
+            subPath: server.pem
+
+  volumes:
+    ca-cert:
+      enabled: true
+      optional: true
+      type: secret
+      nameOverride: mongodb-ca-cert
+    server-cert:
+      enabled: true
+      optional: true
+      type: secret
+      nameOverride: mongodb-server-cert
+
+redis:
+  container:
+    volumeMounts:
+      ca-cert:
+        path:
+          - mountPath: /etc/redis/certs/ca.crt
+            subPath: ca.crt
+      server-cert:
+        path:
+          - mountPath: /etc/redis/certs/tls.crt
+            subPath: tls.crt
+          - mountPath: /etc/redis/certs/tls.key
+            subPath: tls.key
+
+  volumes:
+    ca-cert:
+      enabled: true
+      optional: true
+      type: secret
+      nameOverride: redis-ca-cert
+    server-cert:
+      enabled: true
+      optional: true
+      type: secret
+      nameOverride: redis-server-cert
+
+  service:
+    main:
+      enabled: true
+      primary: true
+      type: ClusterIP
+      ports:
+        redis-tls:
+          port: 6380
+          protocol: TCP
+
+  config:
+    tls-port: 6380
+    tls-cert-file: /etc/redis/certs/tls.crt
+    tls-key-file: /etc/redis/certs/tls.key
+    tls-ca-cert-file: /etc/redis/certs/ca.crt
+    tls-auth-clients: "yes"

charts/codefresh-infra/values.yaml

@@ -0,0 +1,29 @@
+global:
+  nodeSelector:
+    node-type: fast-image-pull
+
+  tolerations:
+  - key: codefresh.io
+    operator: Equal
+    value: fast-image-pull
+    effect: NoSchedule
+
+mongodb:
+  fullnameOverride: my-mongodb
+  auth:
+    rootPassword: XT9nmM8dZD
+
+postgresql:
+  fullnameOverride: my-postgresql
+  auth:
+    password: eC9arYka4ZbH
+
+redis:
+  fullnameOverride: my-redis
+  config:
+    requirepass: hoC9szf7NtrU
+
+rabbitmq:
+  fullnameOverride: my-rabbitmq
+  auth:
+    password: cVz9ZdJKYm7u

charts/codefresh/.ci/values/values-cfapi-roles.yaml

@@ -0,0 +1,60 @@
+global:
+  cfapiService: cfapi-internal
+  cfapiEndpointsService: cfapi-endpoints
+
+cfapi: &cf-api
+  enabled: false
+  rbac:
+    namespaced: false
+
+cfapi-auth:
+  <<: *cf-api
+  enabled: true
+cfapi-internal:
+  <<: *cf-api
+  enabled: true
+cfapi-ws:
+  <<: *cf-api
+  enabled: true
+cfapi-admin:
+  <<: *cf-api
+  enabled: true
+cfapi-endpoints:
+  <<: *cf-api
+  enabled: true
+cfapi-terminators:
+  <<: *cf-api
+  enabled: true
+cfapi-sso-group-synchronizer:
+  <<: *cf-api
+  enabled: true
+cfapi-buildmanager:
+  <<: *cf-api
+  enabled: true
+cfapi-cacheevictmanager:
+  <<: *cf-api
+  enabled: true
+cfapi-eventsmanagersubscriptions:
+  <<: *cf-api
+  enabled: true
+cfapi-kubernetesresourcemonitor:
+  <<: *cf-api
+  enabled: true
+cfapi-environments:
+  <<: *cf-api
+  enabled: true
+cfapi-gitops-resource-receiver:
+  <<: *cf-api
+  enabled: true
+cfapi-downloadlogmanager:
+  <<: *cf-api
+  enabled: true
+cfapi-teams:
+  <<: *cf-api
+  enabled: true
+cfapi-kubernetes-endpoints:
+  <<: *cf-api
+  enabled: true
+cfapi-test-reporting:
+  <<: *cf-api
+  enabled: true

charts/codefresh/.ci/values/values-defaults.yaml

@@ -0,0 +1,103 @@
+global:
+  appUrl: "" # placeholder for ${ONPREM_INGRESS_HOSTNAME} set in CI pipeline
+  imagePullSecrets:
+    - codefresh-registry
+    - dockerhub-creds
+
+  nodeSelector:
+    node-type: fast-image-pull
+
+  tolerations:
+  - key: codefresh.io
+    operator: Equal
+    value: fast-image-pull
+    effect: NoSchedule
+
+ingress:
+  enabled: true
+  ingressClassName: haproxy-ingress
+  tls:
+    enabled: false
+
+ingress-nginx:
+  enabled: false
+
+hooks:
+  mongodb:
+    nodeSelector:
+      kubernetes.io/arch: amd64
+  rabbitmq:
+    nodeSelector:
+      kubernetes.io/arch: amd64
+
+mongodb:
+  nodeSelector:
+    node-type: fast-image-pull
+    kubernetes.io/arch: amd64
+
+  tolerations:
+  - key: codefresh.io
+    operator: Equal
+    value: fast-image-pull
+    effect: NoSchedule
+
+# -- Binami subcharts
+postgresql:
+  primary:
+    nodeSelector:
+      node-type: fast-image-pull
+
+    tolerations:
+    - key: codefresh.io
+      operator: Equal
+      value: fast-image-pull
+      effect: NoSchedule
+
+rabbitmq:
+  nodeSelector:
+    node-type: fast-image-pull
+
+  tolerations:
+  - key: codefresh.io
+    operator: Equal
+    value: fast-image-pull
+    effect: NoSchedule
+
+redis:
+  master:
+    nodeSelector:
+      node-type: fast-image-pull
+
+    tolerations:
+    - key: codefresh.io
+      operator: Equal
+      value: fast-image-pull
+      effect: NoSchedule
+
+nats:
+  image:
+    repository: bitnamilegacy/nats
+  nodeSelector:
+    node-type: fast-image-pull
+
+  tolerations:
+  - key: codefresh.io
+    operator: Equal
+    value: fast-image-pull
+    effect: NoSchedule
+
+consul:
+  image:
+    repository: bitnamilegacy/consul
+  nodeSelector:
+    node-type: fast-image-pull
+
+  tolerations:
+  - key: codefresh.io
+    operator: Equal
+    value: fast-image-pull
+    effect: NoSchedule
+
+cf-platform-analytics-platform:
+  redis:
+    enabled: false