fix(helm): update teleport group ( 18.7.3 ➔ 18.7.6 )#4584
Merged
Conversation
Contributor
Author
--- HelmRelease: teleport/teleport-agent StatefulSet: teleport/teleport-agent
+++ HelmRelease: teleport/teleport-agent StatefulSet: teleport/teleport-agent
@@ -33,13 +33,13 @@
labelSelector:
matchLabels:
app: teleport-agent
serviceAccountName: teleport-agent
containers:
- name: teleport
- image: public.ecr.aws/gravitational/teleport-distroless:18.7.3
+ image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
imagePullPolicy: IfNotPresent
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: 'true'
- name: TELEPORT_REPLICA_NAME
valueFrom:
--- HelmRelease: teleport/teleport-agent Job: teleport/teleport-agent-delete-hook
+++ HelmRelease: teleport/teleport-agent Job: teleport/teleport-agent-delete-hook
@@ -23,13 +23,13 @@
- name: KUBE_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: teleport-agent
- image: public.ecr.aws/gravitational/teleport-distroless:18.7.3
+ image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
imagePullPolicy: IfNotPresent
command:
- teleport
args:
- kube-state
- delete
--- HelmRelease: teleport/teleport ConfigMap: teleport/teleport-auth
+++ HelmRelease: teleport/teleport ConfigMap: teleport/teleport-auth
@@ -91,12 +91,28 @@
- list
- create
- read
- update
- delete
- resources:
+ - saml_idp_service_provider
+ verbs:
+ - list
+ - create
+ - read
+ - update
+ - delete
+ - resources:
+ - lock
+ verbs:
+ - list
+ - create
+ - read
+ - update
+ - delete
+ - resources:
- login_rule
verbs:
- list
- create
- read
- update
@@ -212,12 +228,36 @@
- create
- read
- update
- delete
- resources:
- access_monitoring_rule
+ verbs:
+ - list
+ - create
+ - read
+ - update
+ - delete
+ - resources:
+ - scoped_token
+ verbs:
+ - list
+ - create
+ - read
+ - update
+ - delete
+ - resources:
+ - scoped_role
+ verbs:
+ - list
+ - create
+ - readnosecrets
+ - update
+ - delete
+ - resources:
+ - scoped_role_assignment
verbs:
- list
- create
- read
- update
- delete
--- HelmRelease: teleport/teleport Role: teleport/teleport-operator
+++ HelmRelease: teleport/teleport Role: teleport/teleport-operator
@@ -21,12 +21,16 @@
- teleportgithubconnectors
- teleportgithubconnectors/status
- teleportoidcconnectors
- teleportoidcconnectors/status
- teleportsamlconnectors
- teleportsamlconnectors/status
+ - teleportsamlidpserviceprovidersv1
+ - teleportsamlidpserviceprovidersv1/status
+ - teleportlocksv2
+ - teleportlocksv2/status
- teleportloginrules
- teleportloginrules/status
- teleportprovisiontokens
- teleportprovisiontokens/status
- teleportoktaimportrules
- teleportoktaimportrules/status
@@ -55,12 +59,18 @@
- teleportinferencepolicies
- teleportinferencepolicies/status
- teleportinferencesecrets
- teleportinferencesecrets/status
- teleportaccessmonitoringrulesv1
- teleportaccessmonitoringrulesv1/status
+ - teleportscopedtokensv1
+ - teleportscopedtokensv1/status
+ - teleportscopedrolesv1
+ - teleportscopedrolesv1/status
+ - teleportscopedroleassignmentsv1
+ - teleportscopedroleassignmentsv1/status
verbs:
- get
- list
- patch
- update
- watch
--- HelmRelease: teleport/teleport Deployment: teleport/teleport-operator
+++ HelmRelease: teleport/teleport Deployment: teleport/teleport-operator
@@ -32,13 +32,13 @@
app.kubernetes.io/managed-by: Helm
teleport.dev/majorVersion: '18'
teleport.dev/release: teleport_teleport
spec:
containers:
- name: operator
- image: public.ecr.aws/gravitational/teleport-operator:18.7.3
+ image: public.ecr.aws/gravitational/teleport-operator:18.7.6
imagePullPolicy: IfNotPresent
command:
- /teleport-operator
- -auth-server
- teleport-auth.teleport.svc.cluster.local:3025
- -join-method
--- HelmRelease: teleport/teleport Deployment: teleport/teleport-auth
+++ HelmRelease: teleport/teleport Deployment: teleport/teleport-auth
@@ -50,13 +50,13 @@
app.kubernetes.io/instance: teleport
app.kubernetes.io/component: auth
affinity:
podAntiAffinity: null
containers:
- name: teleport
- image: public.ecr.aws/gravitational/teleport-distroless:18.7.3
+ image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
imagePullPolicy: IfNotPresent
args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
ports:
- name: diag
--- HelmRelease: teleport/teleport Deployment: teleport/teleport-proxy
+++ HelmRelease: teleport/teleport Deployment: teleport/teleport-proxy
@@ -46,21 +46,21 @@
app.kubernetes.io/instance: teleport
app.kubernetes.io/component: proxy
affinity:
podAntiAffinity: null
initContainers:
- name: wait-auth-update
- image: public.ecr.aws/gravitational/teleport-distroless:18.7.3
+ image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
command:
- teleport
- wait
- no-resolve
- teleport-auth-v17.teleport.svc.cluster.local
containers:
- name: teleport
- image: public.ecr.aws/gravitational/teleport-distroless:18.7.3
+ image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
imagePullPolicy: IfNotPresent
args:
- --diag-addr=0.0.0.0:3000
ports:
- name: tls
containerPort: 3080
--- HelmRelease: teleport/teleport Job: teleport/teleport-auth-test
+++ HelmRelease: teleport/teleport Job: teleport/teleport-auth-test
@@ -24,13 +24,13 @@
app.kubernetes.io/managed-by: Helm
teleport.dev/majorVersion: '18'
spec:
restartPolicy: Never
containers:
- name: teleport-config-check
- image: public.ecr.aws/gravitational/teleport-distroless:18.7.3
+ image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
imagePullPolicy: IfNotPresent
command:
- teleport
- configure
args:
- --test
@@ -38,14 +38,23 @@
volumeMounts:
- mountPath: /etc/teleport
name: config
readOnly: true
- mountPath: /var/lib/teleport
name: data
+ - mountPath: /etc/teleport-backend/secrets/core/server
+ name: intermediary-ca-cert
volumes:
- name: config
configMap:
name: teleport-auth-test
- name: data
emptyDir: {}
+ - name: intermediary-ca-cert
+ secret:
+ defaultMode: 288
+ items:
+ - key: ca.crt
+ path: ca.crt
+ secretName: teleport-intermediary-ca-secret
serviceAccountName: teleport-hook
--- HelmRelease: teleport/teleport Job: teleport/teleport-proxy-test
+++ HelmRelease: teleport/teleport Job: teleport/teleport-proxy-test
@@ -25,13 +25,13 @@
app.kubernetes.io/managed-by: Helm
teleport.dev/majorVersion: '18'
spec:
restartPolicy: Never
containers:
- name: teleport
- image: public.ecr.aws/gravitational/teleport-distroless:18.7.3
+ image: public.ecr.aws/gravitational/teleport-distroless:18.7.6
imagePullPolicy: IfNotPresent
command:
- teleport
- configure
args:
- --test |
Contributor
Author
--- kubernetes/apps/teleport/cluster/app Kustomization: teleport/teleport HelmRelease: teleport/teleport
+++ kubernetes/apps/teleport/cluster/app Kustomization: teleport/teleport HelmRelease: teleport/teleport
@@ -15,13 +15,13 @@
chart: teleport-cluster
interval: 15m
sourceRef:
kind: HelmRepository
name: teleport
namespace: teleport
- version: 18.7.3
+ version: 18.7.6
install:
crds: CreateReplace
strategy:
name: RetryOnFailure
interval: 15m
rollback:
--- kubernetes/apps/teleport/agent/app Kustomization: teleport/teleport-agent HelmRelease: teleport/teleport-agent
+++ kubernetes/apps/teleport/agent/app Kustomization: teleport/teleport-agent HelmRelease: teleport/teleport-agent
@@ -14,13 +14,13 @@
chart: teleport-kube-agent
interval: 15m
sourceRef:
kind: HelmRepository
name: teleport
namespace: teleport
- version: 18.7.3
+ version: 18.7.6
install:
crds: CreateReplace
strategy:
name: RetryOnFailure
interval: 15m
rollback: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
18.7.3→18.7.618.7.3→18.7.6Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate.