Merge pull request #9 from ondat/sf.2.7.0-update

2.7.0 updates
ondat · Apr 13, 2022 · 2b48db7 · 2b48db7
2 parents f2fcebc + 4248b22
commit 2b48db7
Show file tree

Hide file tree

Showing 5 changed files with 39 additions and 10 deletions.
diff --git a/charts/ondat-operator/Chart.yaml b/charts/ondat-operator/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
-appVersion: "v2.6.0"
+appVersion: "v2.7.0"
 description: Cloud Native storage for containers
 name: ondat-operator
-version: 0.5.5
+version: 0.5.6
 keywords:
 - storage
 - block-storage

diff --git a/charts/ondat-operator/templates/operator.yaml b/charts/ondat-operator/templates/operator.yaml
@@ -78,9 +78,16 @@ spec:
         - containerPort: 8443
           name: https
       securityContext:
-        runAsNonRoot: true
+        runAsUser: 65532
       serviceAccountName: {{ template "storageos.serviceAccountName" . }}
       terminationGracePeriodSeconds: 10
+      topologySpreadConstraints:
+        - labelSelector:
+            matchLabels:
+              app.kubernetes.io/component: operator
+          maxSkew: 1
+          topologyKey: kubernetes.io/hostname
+          whenUnsatisfiable: ScheduleAnyway
       volumes:
       - configMap:
           name: storageos-operator

diff --git a/charts/ondat-operator/templates/rbac.yaml b/charts/ondat-operator/templates/rbac.yaml
@@ -482,6 +482,18 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - security.openshift.io
+  resourceNames:
+  - privileged
+  resources:
+  - securitycontextconstraints
+  verbs:
+  - create
+  - delete
+  - get
+  - update
+  - use
 - apiGroups:
   - storageos.com
   resources:

diff --git a/charts/ondat-operator/templates/storageoscluster_cr.yaml b/charts/ondat-operator/templates/storageoscluster_cr.yaml
@@ -41,6 +41,11 @@ spec:
           - "{{ .Values.cluster.nodeSelectorTerm.value }}"
   {{- end }}
 
+  {{- if .Values.cluster.nodeManagerFeatures.upgradeGuard.enabled }}
+  nodeManagerFeatures:
+    upgradeGuard: "true"
+  {{- end }}
+
   {{- if .Values.cluster.toleration.key }}
   tolerations:
     - key: {{ .Values.cluster.toleration.key }}

diff --git a/charts/ondat-operator/values.yaml b/charts/ondat-operator/values.yaml
@@ -27,7 +27,7 @@ podSecurityPolicy:
 operator:
   image:
     repository: storageos/operator
-    tag: v2.6.0
+    tag: v2.7.0
     pullPolicy: IfNotPresent
 
 # parameters for StorageOS resource quotas
@@ -52,6 +52,11 @@ cluster:
   # Name of the secret containing StorageOS API credentials.
   secretRefName: storageos-api
 
+  # Enable protection for volumes during orchestrator upgrades - Tech Preview
+  nodeManagerFeatures:
+    upgradeGuard:
+      enabled: false
+
   # Default admin account.
   admin:
     # Username to authenticate to the StorageOS API with.
@@ -105,7 +110,7 @@ cluster:
   images:
     apiManager:
       repository: storageos/api-manager
-      tag: v1.2.5
+      tag: v1.2.9
     csiV1ExternalAttacherV3:
       repository: quay.io/k8scsi/csi-attacher
       tag: v3.1.0
@@ -123,21 +128,21 @@ cluster:
       tag: v2.1.0
     init:
       repository:  storageos/init
-      tag: v2.1.1
+      tag: v2.1.2
     # nodeContainer is the StorageOS node image to use, available from the
     # [Docker Hub](https://hub.docker.com/r/storageos/node/).
     node:
       repository: storageos/node
-      tag: v2.6.0
+      tag: v2.7.0
     nodeManager:
       repository: storageos/node-manager
-      tag: v0.0.2
+      tag: v0.0.6
     portalManager:
       repository: storageos/portal-manager
-      tag: v1.0.1
+      tag: v1.0.2
     upgradeGuard:
       repository: storageos/upgrade-guard
-      tag: v0.0.2
+      tag: v0.0.4
 
 # The following is used for cleaning up unmanaged cluster resources when
 # auto-install is enabled.