diff --git a/charts/lagoon-logging/Chart.yaml b/charts/lagoon-logging/Chart.yaml index b05b58eb..1072bdf3 100644 --- a/charts/lagoon-logging/Chart.yaml +++ b/charts/lagoon-logging/Chart.yaml @@ -19,7 +19,7 @@ type: application # time you make changes to the chart and its templates, including the app # version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.81.0 +version: 0.81.1 dependencies: - name: logging-operator @@ -31,6 +31,7 @@ dependencies: # It should be started afresh for each release # Valid supported kinds are added, changed, deprecated, removed, fixed and security annotations: + artifacthub.io/containsSecurityUpdates: "true" artifacthub.io/changes: | - - kind: added - description: support for annotations on the CDN service + - kind: security + description: avoid test role and rolebinding being wrongly installed diff --git a/charts/lagoon-logging/templates/tests/cdn-service-annotations.yaml b/charts/lagoon-logging/templates/tests/cdn-service-annotations.yaml index 2cdfc553..9bbfa400 100644 --- a/charts/lagoon-logging/templates/tests/cdn-service-annotations.yaml +++ b/charts/lagoon-logging/templates/tests/cdn-service-annotations.yaml @@ -3,6 +3,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: service-reader + annotations: + "helm.sh/hook": test + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded + "helm.sh/hook-weight": "-2" rules: - apiGroups: [""] # "" indicates the core API group resources: ["services"] @@ -12,6 +16,10 @@ apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: read-services + annotations: + "helm.sh/hook": test + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded + "helm.sh/hook-weight": "-1" subjects: - kind: Group name: system:serviceaccounts # all serviceaccounts @@ -29,6 +37,8 @@ metadata: {{- include "lagoon-logging.logsDispatcher.labels" . | nindent 4 }} annotations: "helm.sh/hook": test + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded + "helm.sh/hook-weight": "0" spec: containers: - name: kubectl diff --git a/charts/lagoon-logging/templates/tests/test-connection.yaml b/charts/lagoon-logging/templates/tests/test-connection.yaml index f22e9440..d91456f8 100644 --- a/charts/lagoon-logging/templates/tests/test-connection.yaml +++ b/charts/lagoon-logging/templates/tests/test-connection.yaml @@ -6,6 +6,7 @@ metadata: {{- include "lagoon-logging.logsDispatcher.labels" . | nindent 4 }} annotations: "helm.sh/hook": test + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded spec: containers: - name: nc