diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 162fe7d..b98fffa 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,7 +5,7 @@ on: env: REGISTRY: ghcr.io IMAGE_NAME: ${{ github.repository }} - VERSION: 0.23.0 + VERSION: 0.27.0 jobs: build: @@ -19,7 +19,7 @@ jobs: image-digest: ${{ steps.image-info.outputs.image_digest }} steps: - name: Checkout source code - uses: actions/checkout@v4.2.1 + uses: actions/checkout@v6.0.0 - name: Set up Carvel uses: carvel-dev/setup-action@v2.0.1 @@ -87,7 +87,7 @@ jobs: IMAGE_DIGEST: ${{ needs.build.outputs.image-digest }} steps: - name: Install Cosign - uses: sigstore/cosign-installer@v3.7.0 + uses: sigstore/cosign-installer@v3.10.0 - name: Log into container registry uses: redhat-actions/podman-login@v1.7 @@ -106,7 +106,7 @@ jobs: actions: read id-token: write packages: write - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.1.0 with: image: ${{ needs.build.outputs.image-name }} digest: ${{ needs.build.outputs.image-digest }} diff --git a/README.md b/README.md index c3b20a3..fedb0d3 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ ![Release Workflow](https://github.com/kadras-io/kadras-packages/actions/workflows/release.yml/badge.svg) [![The SLSA Level 3 badge](https://slsa.dev/images/gh-badge-level3.svg)](https://slsa.dev/spec/v1.0/levels) [![The Apache 2.0 license badge](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) -[![Follow us on Twitter](https://img.shields.io/static/v1?label=Twitter&message=Follow&color=1DA1F2)](https://twitter.com/kadrasIO) +[![Follow us on Bluesky](https://img.shields.io/static/v1?label=Bluesky&message=Follow&color=1DA1F2)](https://bsky.app/profile/kadras.bsky.social) The [Kadras](https://kadras.io) collection of Kubernetes-native packages built with [Carvel](https://carvel.dev). @@ -16,7 +16,6 @@ This repository contains the following Carvel packages. | [cert-manager](https://github.com/kadras-io/package-for-cert-manager) | A cloud-native solution to automatically provision and manage X.509 certificates. | | [contour](https://github.com/kadras-io/package-for-contour) | An Envoy-based ingress controller that supports dynamic configuration updates and multi-team ingress delegation. | | [crossplane](https://github.com/kadras-io/package-for-crossplane) | A Kubernetes extension that transforms your Kubernetes cluster into a universal control plane. | -| [dapr](https://github.com/kadras-io/package-for-dapr) | A Kubernetes extension that provides integrated APIs for communication, state, and workflow. | | [dependency-track](https://github.com/kadras-io/package-for-dependency-track) | OWASP Dependency Track is a continuous SBOM Analysis Platform for managing software supply chain security risks. | | [developer-portal](https://github.com/kadras-io/package-for-developer-portal) | Kadras Developer Portal, based on Backstage. It supports application developers with paved paths to production on Kubernetes. | | [engineering-platform](https://github.com/kadras-io/engineering-platform) | A curated set of Carvel packages to build an engineering platform supporting application developers with paved paths to production on Kubernetes. | @@ -37,7 +36,7 @@ This repository contains the following Carvel packages. ### Prerequisites -* Kubernetes 1.29+ +* Kubernetes 1.32+ * Carvel [`kctrl`](https://carvel.dev/kapp-controller/docs/latest/install/#installing-kapp-controller-cli-kctrl) CLI. * Carvel [kapp-controller](https://carvel.dev/kapp-controller) deployed in your Kubernetes cluster. You can install it with Carvel [`kapp`](https://carvel.dev/kapp/docs/latest/install) (recommended choice) or `kubectl`. diff --git a/repo/packages/cert-manager.packages.kadras.io/1.16.1.yml b/repo/packages/cert-manager.packages.kadras.io/1.18.2.yml similarity index 83% rename from repo/packages/cert-manager.packages.kadras.io/1.16.1.yml rename to repo/packages/cert-manager.packages.kadras.io/1.18.2.yml index 1feb187..5cce3c3 100644 --- a/repo/packages/cert-manager.packages.kadras.io/1.16.1.yml +++ b/repo/packages/cert-manager.packages.kadras.io/1.18.2.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: cert-manager.packages.kadras.io.1.16.1 + name: cert-manager.packages.kadras.io.1.18.2 spec: licenses: - Apache 2.0 refName: cert-manager.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-cert-manager/releases - releasedAt: "2024-10-23T15:19:13Z" + releasedAt: "2025-08-14T17:36:11Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-cert-manager@sha256:0c1c909ffebaf302aef55684dc5fb20907bad141b50a5482c301cb0c2aeb573b + image: ghcr.io/kadras-io/package-for-cert-manager@sha256:84afdbe2e4b2d84ef5f9774b4608ffb100029c7e0a97bc0568aec9401c8c652b template: - ytt: paths: @@ -49,6 +49,29 @@ spec: additionalProperties: false description: Settings for the cert-manager controller. properties: + dns01: + additionalProperties: false + description: Configures the behaviour of the ACME DNS01 challenge solver. + properties: + recursive_nameservers: + default: [] + description: Each nameserver can be either the IP address and port + of a standard recursive DNS server, or the endpoint to an RFC + 8484 DNS over HTTPS endpoint. + items: + default: "" + type: string + type: array + recursive_nameservers_only: + default: false + description: When true, cert-manager will only ever query the configured + DNS resolvers to perform the ACME DNS01 self check. This is useful + in DNS constrained environments, where access to authoritative + nameservers is restricted. Enabling this option could cause the + DNS01 self check to take longer due to caching performed by the + recursive nameservers. + type: boolean + type: object loglevel: default: 2 description: Number of the log level verbosity. @@ -85,8 +108,9 @@ spec: dns_provider: default: digital_ocean description: 'The DNS provider to use for the ACME dns01 challenge. - Valid options: `digital_ocean`.' + Valid options: `cloudflare`, `digital_ocean`.' enum: + - cloudflare - digital_ocean type: string secret: @@ -204,4 +228,4 @@ spec: type: integer type: object type: object - version: 1.16.1 + version: 1.18.2 diff --git a/repo/packages/contour.packages.kadras.io/1.30.0.yml b/repo/packages/contour.packages.kadras.io/1.33.0.yml similarity index 97% rename from repo/packages/contour.packages.kadras.io/1.30.0.yml rename to repo/packages/contour.packages.kadras.io/1.33.0.yml index 4f4e0ac..f21dff3 100644 --- a/repo/packages/contour.packages.kadras.io/1.30.0.yml +++ b/repo/packages/contour.packages.kadras.io/1.33.0.yml @@ -2,13 +2,13 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: contour.packages.kadras.io.1.30.0 + name: contour.packages.kadras.io.1.33.0 spec: licenses: - Apache 2.0 refName: contour.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-contour/releases - releasedAt: "2024-09-01T11:29:21Z" + releasedAt: "2025-09-15T14:46:26Z" template: spec: deploy: @@ -19,7 +19,7 @@ spec: - --kube-api-burst=50 fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-contour@sha256:8d8a3cfbdac59f2c3b59c8280fc4b073f8661ceed8f305cfe9588b1cc011337e + image: ghcr.io/kadras-io/package-for-contour@sha256:2de76924ca9bda2f1f67cbdfc00433572f9ac482cb35e80ee3c7100d217a06fb template: - ytt: paths: @@ -223,4 +223,4 @@ spec: minLength: 1 type: string type: object - version: 1.30.0 + version: 1.33.0 diff --git a/repo/packages/crossplane.packages.kadras.io/1.17.1+kadras.1.yml b/repo/packages/crossplane.packages.kadras.io/2.0.2.yml similarity index 75% rename from repo/packages/crossplane.packages.kadras.io/1.17.1+kadras.1.yml rename to repo/packages/crossplane.packages.kadras.io/2.0.2.yml index 38533e8..2d66683 100644 --- a/repo/packages/crossplane.packages.kadras.io/1.17.1+kadras.1.yml +++ b/repo/packages/crossplane.packages.kadras.io/2.0.2.yml @@ -2,10 +2,10 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: crossplane.packages.kadras.io.1.17.1+kadras.1 + name: crossplane.packages.kadras.io.2.0.2 spec: refName: crossplane.packages.kadras.io - releasedAt: "2024-10-23T16:01:40Z" + releasedAt: "2025-08-14T20:03:47Z" template: spec: deploy: @@ -13,7 +13,7 @@ spec: intoNs: crossplane-system fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-crossplane@sha256:86bb758e3c81f0afa16711da1c6914cf05c5dfea1bf577cb19d3b9bf1793c511 + image: ghcr.io/kadras-io/package-for-crossplane@sha256:764e5de98ade05c75454843952d324a9a7aa66c5e27be8930d9e29d144c36bf7 template: - helmTemplate: name: crossplane @@ -69,9 +69,15 @@ spec: type: string extraEnvVarsCrossplane: default: {} - description: Add custom environmental variables to the Crossplane pod deployment. - Replaces any `.` in a variable name with `_`. For example, `SAMPLE.KEY=value1` - becomes `SAMPLE_KEY=value1`. + description: Add custom environmental variables to the Crossplane pod deployment + application container. Replaces any `.` in a variable name with `_`. For + example, `SAMPLE.KEY=value1` becomes `SAMPLE_KEY=value1`. + type: object + extraEnvVarsCrossplaneInit: + default: {} + description: Add custom environmental variables to the Crossplane pod deployment + init container. Replaces any `.` in a variable name with `_`. For example, + `SAMPLE.KEY=value1` becomes `SAMPLE_KEY=value1`. type: object extraEnvVarsRBACManager: default: {} @@ -100,6 +106,24 @@ spec: items: {} type: array type: object + functionCache: + properties: + medium: + default: "" + description: Set to `Memory` to hold the function cache in a RAM backed + file system. Useful for Crossplane development. + type: string + pvc: + default: "" + description: The name of a PersistentVolumeClaim to use as the function + cache. Disables the default function cache `emptyDir` Volume. + type: string + sizeLimit: + default: 512Mi + description: The size limit for the function cache. If medium is `Memory` + the `sizeLimit` can't exceed Node memory. + type: string + type: object hostNetwork: default: false description: 'Enable `hostNetwork` for the Crossplane deployment. Caution: @@ -108,13 +132,18 @@ spec: type: boolean image: properties: + ignoreTag: + default: false + description: Do not use the {{ .image.tag }} value to compute the image + uri. + type: boolean pullPolicy: default: IfNotPresent description: The image pull policy used for Crossplane and RBAC Manager pods. type: string repository: - default: xpkg.upbound.io/crossplane/crossplane + default: xpkg.crossplane.io/crossplane/crossplane description: Repository for the Crossplane pod image. type: string tag: @@ -140,6 +169,10 @@ spec: description: Enable Prometheus path, port and scrape annotations and expose port 8080 for both the Crossplane and RBAC Manager pods. type: boolean + port: + default: "" + description: The port the metrics server listens on. + type: string type: object nodeSelector: default: {} @@ -183,6 +216,14 @@ spec: type: string provider: properties: + defaultActivations: + default: [] + description: Define entries for the default managed resource activation + policy. If defined, a default MRAP will contain these activations. + items: + default: '*' + type: string + type: array packages: default: [] description: A list of Provider packages to install. @@ -217,6 +258,28 @@ spec: default: 1 description: The number of RBAC Manager pod `replicas` to deploy. type: integer + revisionHistoryLimit: + description: The number of RBAC Manager ReplicaSets to retain. + oneOf: + - default: null + nullable: true + type: integer + - default: null + nullable: true + type: number + - default: null + nullable: true + type: boolean + - default: null + nullable: true + type: string + - default: null + nullable: true + type: object + - default: null + items: {} + nullable: true + type: array skipAggregatedClusterRoles: default: false description: Don't install aggregated Crossplane ClusterRoles. @@ -233,6 +296,13 @@ spec: items: {} type: array type: object + readiness: + properties: + port: + default: "" + description: The port the readyz server listens on. + type: string + type: object registryCaBundleConfig: properties: key: @@ -302,6 +372,33 @@ spec: type: string type: object type: object + revisionHistoryLimit: + description: The number of Crossplane ReplicaSets to retain. + oneOf: + - default: null + nullable: true + type: integer + - default: null + nullable: true + type: number + - default: null + nullable: true + type: boolean + - default: null + nullable: true + type: string + - default: null + nullable: true + type: object + - default: null + items: {} + nullable: true + type: array + runtimeClassName: + default: "" + description: The runtimeClassName name to apply to the Crossplane and RBAC + Manager pods. + type: string securityContextCrossplane: properties: allowPrivilegeEscalation: @@ -351,10 +448,19 @@ spec: type: object serviceAccount: properties: + create: + default: true + description: Specifies whether Crossplane ServiceAccount should be created + type: boolean customAnnotations: default: {} description: Add custom `annotations` to the Crossplane ServiceAccount. type: object + name: + default: "" + description: Provide the name of an already created Crossplane ServiceAccount. + Required when `serviceAccount.create` is `false` + type: string type: object tolerations: default: [] @@ -372,6 +478,10 @@ spec: default: true description: Enable webhooks for Crossplane and installed Provider packages. type: boolean + port: + default: "" + description: The port the webhook server listens on. + type: string type: object type: object - version: 1.17.1+kadras.1 + version: 2.0.2 diff --git a/repo/packages/dapr.packages.kadras.io/1.14.4.yml b/repo/packages/dapr.packages.kadras.io/1.14.4.yml deleted file mode 100644 index 142bc7e..0000000 --- a/repo/packages/dapr.packages.kadras.io/1.14.4.yml +++ /dev/null @@ -1,208 +0,0 @@ -apiVersion: data.packaging.carvel.dev/v1alpha1 -kind: Package -metadata: - creationTimestamp: null - name: dapr.packages.kadras.io.1.14.4 -spec: - refName: dapr.packages.kadras.io - releasedAt: "2024-09-23T20:18:39Z" - template: - spec: - deploy: - - kapp: - intoNs: dapr-system - fetch: - - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-dapr@sha256:7eba6d689ee0ddc5d378349fbb510723a7a2012a370b9758ac77b59f3f043ca7 - template: - - helmTemplate: - name: dapr - namespace: dapr-system - path: config/helm/upstream/dapr - valuesFrom: - - path: config/helm/values.yml - - ytt: - ignoreUnknownComments: true - paths: - - '-' - - config/carvel - - kbld: - paths: - - '-' - - .imgpkg/images.yml - valuesSchema: - openAPIv3: - properties: - global: - properties: - actors: - properties: - enabled: - default: true - description: Enables actor functionality in the cluster - type: boolean - serviceName: - default: placement - description: Name of the service that provides actor placement services - type: string - type: object - argoRolloutServiceReconciler: - description: 'the issuerFilenames dictionary, if setup, have to contain - 3 keys: ca,cert,key issuerFilenames: ca: "ca.crt" cert: "tls.crt" key: - "tls.key"' - properties: - enabled: - default: false - type: boolean - type: object - daprControlPlaneOs: - default: linux - type: string - dnsSuffix: - default: .cluster.local - type: string - extraVolumeMounts: - default: {} - description: 'sentry: placement: operator: injector: scheduler:' - type: object - extraVolumes: - default: {} - description: and extraVolumeMounts are used to mount additional volumes - to the Dapr control plane pods. Useful for using alternative authentication - credentials to sentry. - type: object - ha: - properties: - disruption: - properties: - maximumUnavailable: - default: 25% - type: string - minimumAvailable: - default: "" - type: string - type: object - enabled: - default: false - type: boolean - replicaCount: - default: 3 - type: integer - type: object - imagePullPolicy: - default: IfNotPresent - type: string - imagePullSecrets: - default: "" - description: 'To help compatibility with other charts which use global.imagePullSecrets. - Allow either a string with single imagepullsecret or an array of {name: - pullSecret} maps (k8s-style) or an array of strings (more common helm-style). - global: imagePullSecrets: "pullSecret" or global: imagePullSecrets: - - name: pullSecret1 - name: pullSecret2 or global: imagePullSecrets: - - pullSecret1 - pullSecret2' - type: string - issuerFilenames: - default: {} - type: object - k8sLabels: - properties: - app.kubernetes.io/component: - default: '{{ .Values.component }}' - type: string - app.kubernetes.io/managed-by: - default: helm - type: string - app.kubernetes.io/name: - default: '{{ .Release.Name }}' - type: string - app.kubernetes.io/part-of: - default: dapr - type: string - app.kubernetes.io/version: - default: '{{ .Values.global.tag }}' - type: string - type: object - labels: - default: {} - type: object - logAsJson: - default: false - type: boolean - mtls: - properties: - allowedClockSkew: - default: 15m - type: string - controlPlaneTrustDomain: - default: cluster.local - type: string - enabled: - default: true - type: boolean - mountSentryVolume: - default: true - description: If set to true, a bound service account token will - be mounted and used to authenticate to Sentry. - type: boolean - workloadCertTTL: - default: 24h - type: string - type: object - nodeSelector: - default: {} - type: object - operator: - properties: - watchdogCanPatchPodLabels: - default: false - type: boolean - type: object - priorityClassName: - default: "" - type: string - prometheus: - properties: - enabled: - default: true - type: boolean - port: - default: 9090 - type: integer - type: object - rbac: - properties: - namespaced: - default: false - type: boolean - type: object - registry: - default: ghcr.io/dapr - type: string - reminders: - properties: - serviceName: - default: "" - description: Name of the service that provides reminders If empty, - uses the built-in reminders capabilities in Dapr sidecars - type: string - type: object - scheduler: - properties: - enabled: - default: true - description: Enables scheduler functionality in the cluster - type: boolean - type: object - seccompProfile: - default: "" - type: string - tag: - default: 1.14.4 - type: string - tolerations: - default: [] - items: {} - type: array - type: object - type: object - version: 1.14.4 diff --git a/repo/packages/dapr.packages.kadras.io/metadata.yml b/repo/packages/dapr.packages.kadras.io/metadata.yml deleted file mode 100644 index 6f2379a..0000000 --- a/repo/packages/dapr.packages.kadras.io/metadata.yml +++ /dev/null @@ -1,20 +0,0 @@ -apiVersion: data.packaging.carvel.dev/v1alpha1 -kind: PackageMetadata -metadata: - creationTimestamp: null - name: dapr.packages.kadras.io -spec: - categories: - - apis - - microservices - displayName: dapr - iconSVGBase64: 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 - longDescription: Dapr provides integrated APIs for communication, state, and workflow. - Dapr leverages industry best practices for security, resiliency, and observability, - so you can focus on your code. - maintainers: - - name: Thomas Vitale - providerName: Kadras - shortDescription: APIs for Building Secure and Reliable Microservices. - supportDescription: Go to https://kadras.io for documentation and https://github.com/kadras-io/package-for-dapr - for community support. diff --git a/repo/packages/dependency-track.packages.kadras.io/4.12.0.yml b/repo/packages/dependency-track.packages.kadras.io/4.13.4.yml similarity index 97% rename from repo/packages/dependency-track.packages.kadras.io/4.12.0.yml rename to repo/packages/dependency-track.packages.kadras.io/4.13.4.yml index e213497..faa8fc4 100644 --- a/repo/packages/dependency-track.packages.kadras.io/4.12.0.yml +++ b/repo/packages/dependency-track.packages.kadras.io/4.13.4.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: dependency-track.packages.kadras.io.4.12.0 + name: dependency-track.packages.kadras.io.4.13.4 spec: licenses: - Apache 2.0 refName: dependency-track.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-dependency-track/releases - releasedAt: "2024-10-23T15:53:31Z" + releasedAt: "2025-09-15T15:45:57Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-dependency-track@sha256:0097ca41b942d4d3132c7b6b5d40879015b1ec2a7db1076aaf814bfa990f281b + image: ghcr.io/kadras-io/package-for-dependency-track@sha256:8572050568c80b0b94fb93df767bc7d5eeecd3ac0fd847af8dd1d743538f1eab template: - ytt: paths: @@ -208,4 +208,4 @@ spec: at startup time. type: boolean type: object - version: 4.12.0 + version: 4.13.4 diff --git a/repo/packages/developer-portal.packages.kadras.io/0.4.0.yml b/repo/packages/developer-portal.packages.kadras.io/0.8.0.yml similarity index 88% rename from repo/packages/developer-portal.packages.kadras.io/0.4.0.yml rename to repo/packages/developer-portal.packages.kadras.io/0.8.0.yml index 8f6c805..11223c1 100644 --- a/repo/packages/developer-portal.packages.kadras.io/0.4.0.yml +++ b/repo/packages/developer-portal.packages.kadras.io/0.8.0.yml @@ -2,10 +2,10 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: developer-portal.packages.kadras.io.0.4.0 + name: developer-portal.packages.kadras.io.0.8.0 spec: refName: developer-portal.packages.kadras.io - releasedAt: "2024-10-23T16:46:38Z" + releasedAt: "2025-09-24T16:17:36Z" template: spec: deploy: @@ -13,7 +13,7 @@ spec: intoNs: backstage fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-developer-portal@sha256:f9c1dd9e16caddeb91ca1cad1525969e4fa986eefb7e36c51dfcba99c65fdfd0 + image: ghcr.io/kadras-io/package-for-developer-portal@sha256:b455104c820ab67c804113843d00528eac7ac6f1bf2abfc9140db15ff6a01d36 template: - helmTemplate: name: backstage @@ -58,6 +58,22 @@ spec: description: Backstage container command arguments items: {} type: array + autoscaling: + description: 'Autoscaling configuration.
Ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/' + properties: + enabled: + default: false + type: boolean + maxReplicas: + default: 100 + type: integer + minReplicas: + default: 1 + type: integer + targetCPUUtilizationPercentage: + default: 80 + type: integer + type: object command: default: [] description: Backstage container command @@ -103,6 +119,11 @@ spec: Secrets items: {} type: array + extraPorts: + default: [] + description: Backstage container additional ports + items: {} + type: array extraVolumeMounts: default: [] description: Backstage container additional volume mounts @@ -113,6 +134,11 @@ spec: description: Backstage container additional volumes items: {} type: array + hostAliases: + default: [] + description: 'Host Aliases for the pod
Ref: https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/' + items: {} + type: array image: properties: digest: @@ -178,6 +204,19 @@ spec: default: {} description: 'Node labels for pod assignment
Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodeselector' type: object + pdb: + description: 'Pod Disruption Budget configuration ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/' + properties: + create: + default: false + type: boolean + maxUnavailable: + default: "" + type: string + minAvailable: + default: "" + type: string + type: object podAnnotations: default: {} description: Annotations to add to the backend deployment pods @@ -402,9 +441,27 @@ spec: in your cluster prior to enabling. type: boolean interval: - default: "null" description: ServiceMonitor scrape interval - type: "null" + oneOf: + - default: null + nullable: true + type: integer + - default: null + nullable: true + type: number + - default: null + nullable: true + type: boolean + - default: null + nullable: true + type: string + - default: null + nullable: true + type: object + - default: null + items: {} + nullable: true + type: array labels: default: {} description: Additional ServiceMonitor labels @@ -415,6 +472,14 @@ spec: endpoint is NOT present in a freshly scaffolded Backstage app. To setup, follow the [Prometheus metrics tutorial](https://github.com/backstage/backstage/blob/master/contrib/docs/tutorials/prometheus-metrics.md). type: string + port: + default: http-backend + description: ServiceMonitor endpoint port
The port where + the metrics are exposed. If using OpenTelemetry as [documented + here](https://backstage.io/docs/tutorials/setup-opentelemetry/), + then the port needs to be explicitly specified. OpenTelemetry's + default port is 9464. + type: string type: object type: object nameOverride: @@ -534,6 +599,15 @@ spec: used with the `sidecar` value) items: {} type: array + ipFamilies: + default: [] + description: 'IP Families
Ref: https://kubernetes.io/docs/concepts/services-networking/dual-stack' + items: {} + type: array + ipFamilyPolicy: + default: "" + description: 'IP Family Policy
Ref: https://kubernetes.io/docs/concepts/services-networking/dual-stack' + type: string loadBalancerIP: default: "" description: 'Backstage service Load Balancer IP
Ref: https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer' @@ -604,4 +678,4 @@ spec: type: string type: object type: object - version: 0.4.0 + version: 0.8.0 diff --git a/repo/packages/engineering-platform.packages.kadras.io/0.21.0.yml b/repo/packages/engineering-platform.packages.kadras.io/0.27.0.yml similarity index 85% rename from repo/packages/engineering-platform.packages.kadras.io/0.21.0.yml rename to repo/packages/engineering-platform.packages.kadras.io/0.27.0.yml index 68dffef..494bf13 100644 --- a/repo/packages/engineering-platform.packages.kadras.io/0.21.0.yml +++ b/repo/packages/engineering-platform.packages.kadras.io/0.27.0.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: engineering-platform.packages.kadras.io.0.21.0 + name: engineering-platform.packages.kadras.io.0.27.0 spec: licenses: - Apache 2.0 refName: engineering-platform.packages.kadras.io releaseNotes: https://github.com/kadras-io/kadras-engineering-platform/releases - releasedAt: "2024-10-23T16:56:28Z" + releasedAt: "2025-09-24T16:27:22Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/kadras-engineering-platform@sha256:8f7e2b7db5ebc6fc250229277e9d70762aca962811a5c7ccfaf1bc5f1a09d473 + image: ghcr.io/kadras-io/kadras-engineering-platform@sha256:478450ba6ff5c780bac64e697df2f66666c8d27a08e66393836839cd0e3a139f template: - ytt: paths: @@ -40,10 +40,6 @@ spec: default: {} description: Configuration for the Crossplane package. nullable: true - dapr: - default: {} - description: Configuration for the Dapr package. - nullable: true dependency_track: default: {} description: Configuration for the Dependency Track package. @@ -200,51 +196,34 @@ spec: default: kadras-system description: The namespace where to install the platform. type: string - oci_registry: + oci: additionalProperties: false - description: Settings for the OCI registry that the platform will use. + description: Settings for accessing the OCI registry that the platform + will use. properties: - repository: - default: "" - description: The repository in the OCI Registry where the platform - will publish OCI images. - example: my-org - type: string - x-example-description: Repository on GitHub Container Registry - secret: + pull_secret: additionalProperties: false description: Configuration for the Secret holding the credentials - to access the OCI registry. + to pull images from the OCI registry. properties: name: default: "" - description: 'The name of the Secret holding the credentials - to access the OCI registry. The credentials should provide - read-only access to the OCI registry except when installing - the platform with one of these profiles: `standalone`, `dev`, - `build`.' + description: The name of the Secret holding the credentials + to pull images from the OCI registry. type: string namespace: default: kadras-system description: The namespace of the Secret holding the credentials - to access the OCI registry. + to pull images from the OCI registry. type: string type: object - server: - default: "" - description: The server of the OCI Registry where the platform will - publish OCI images. - example: ghcr.io - type: string - x-example-description: GitHub Container Registry type: object profile: default: run description: 'The platform profile to install. Options: `standalone`, - `build`, `run`.' + `run`.' enum: - standalone - - build - run type: string type: object @@ -273,4 +252,4 @@ spec: description: Configuration for the Workspace Provisioner package. nullable: true type: object - version: 0.21.0 + version: 0.27.0 diff --git a/repo/packages/flux.packages.kadras.io/2.4.0.yml b/repo/packages/flux.packages.kadras.io/2.6.4.yml similarity index 93% rename from repo/packages/flux.packages.kadras.io/2.4.0.yml rename to repo/packages/flux.packages.kadras.io/2.6.4.yml index cff6420..105657e 100644 --- a/repo/packages/flux.packages.kadras.io/2.4.0.yml +++ b/repo/packages/flux.packages.kadras.io/2.6.4.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: flux.packages.kadras.io.2.4.0 + name: flux.packages.kadras.io.2.6.4 spec: licenses: - Apache 2.0 refName: flux.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-flux/releases - releasedAt: "2024-10-23T16:04:56Z" + releasedAt: "2025-08-14T17:42:46Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-flux@sha256:ea9f89ec94bb44794e7262931247c0d69a5026f70c82bc0299f37c55107f6fb6 + image: ghcr.io/kadras-io/package-for-flux@sha256:71304d88eb8251a0db355dc64676d7fd5c1c738d57a3d52b20662e1f0e108d5a template: - ytt: paths: @@ -104,4 +104,4 @@ spec: type: string type: object type: object - version: 2.4.0 + version: 2.6.4 diff --git a/repo/packages/knative-serving.packages.kadras.io/1.16.0.yml b/repo/packages/knative-serving.packages.kadras.io/1.19.5.yml similarity index 96% rename from repo/packages/knative-serving.packages.kadras.io/1.16.0.yml rename to repo/packages/knative-serving.packages.kadras.io/1.19.5.yml index b8d7f1d..4ccf79f 100644 --- a/repo/packages/knative-serving.packages.kadras.io/1.16.0.yml +++ b/repo/packages/knative-serving.packages.kadras.io/1.19.5.yml @@ -2,7 +2,7 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: knative-serving.packages.kadras.io.1.16.0 + name: knative-serving.packages.kadras.io.1.19.5 spec: capacityRequirementsDescription: For prototyping purposes, one-node cluster that has at least 3 CPUs and 4 GB of memory. For production purposes, if you have only @@ -13,7 +13,7 @@ spec: - Apache 2.0 refName: knative-serving.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-knative-serving/releases - releasedAt: "2024-10-23T15:34:31Z" + releasedAt: "2025-09-15T14:59:32Z" template: spec: deploy: @@ -22,7 +22,7 @@ spec: - --wait-timeout=5m fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-knative-serving@sha256:d06089096467bb462741a0ba3ea90b0153785fa0fbe90307c666215eec19d393 + image: ghcr.io/kadras-io/package-for-knative-serving@sha256:80e7b2444be3b3d078a29a2d2e581e85ed0ea2e5b15108f049d1880775ed2633 template: - ytt: paths: @@ -203,6 +203,12 @@ spec: example: kadras-ca-issuer type: string x-example-description: Kadras private CA + min_kubernetes_version: + default: "" + description: The minimum Kubernetes version that this package will accept + as valid. If not set, Knative Serving will accept the last 3 minor versions + of Kubernetes. + type: string policies: additionalProperties: false description: Settings for the Kyverno policies. @@ -301,4 +307,4 @@ spec: type: object type: object type: object - version: 1.16.0 + version: 1.19.5 diff --git a/repo/packages/kyverno.packages.kadras.io/1.12.6.yml b/repo/packages/kyverno.packages.kadras.io/1.15.1.yml similarity index 96% rename from repo/packages/kyverno.packages.kadras.io/1.12.6.yml rename to repo/packages/kyverno.packages.kadras.io/1.15.1.yml index 2125e49..762815c 100644 --- a/repo/packages/kyverno.packages.kadras.io/1.12.6.yml +++ b/repo/packages/kyverno.packages.kadras.io/1.15.1.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: kyverno.packages.kadras.io.1.12.6 + name: kyverno.packages.kadras.io.1.15.1 spec: licenses: - Apache 2.0 refName: kyverno.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-kyverno/releases - releasedAt: "2024-10-23T15:04:55Z" + releasedAt: "2025-09-15T14:32:28Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-kyverno@sha256:91dd7f089bcb66795555269a8b72cd4cb77e21aa62c8677af0aa8ea2aa9db66d + image: ghcr.io/kadras-io/package-for-kyverno@sha256:069b230b662c880274eafe7566be3a1824806858d044f2f3ce19d999a837674f template: - ytt: paths: @@ -179,4 +179,4 @@ spec: type: integer type: object type: object - version: 1.12.6 + version: 1.15.1 diff --git a/repo/packages/metrics-server.packages.kadras.io/0.7.2.yml b/repo/packages/metrics-server.packages.kadras.io/0.8.0.yml similarity index 96% rename from repo/packages/metrics-server.packages.kadras.io/0.7.2.yml rename to repo/packages/metrics-server.packages.kadras.io/0.8.0.yml index c2b500a..10b6dd8 100644 --- a/repo/packages/metrics-server.packages.kadras.io/0.7.2.yml +++ b/repo/packages/metrics-server.packages.kadras.io/0.8.0.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: metrics-server.packages.kadras.io.0.7.2 + name: metrics-server.packages.kadras.io.0.8.0 spec: licenses: - Apache 2.0 refName: metrics-server.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-metrics-server/releases - releasedAt: "2024-09-01T11:51:51Z" + releasedAt: "2025-08-14T17:45:10Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-metrics-server@sha256:ee9771dfe5dd1f1aa725eccddca870cc707c523fe0e60d11533d2412be616381 + image: ghcr.io/kadras-io/package-for-metrics-server@sha256:907424062bd661d214af87933d935b36b2a8d4a7d36d640c26a1dda0c0aeb271 template: - ytt: paths: @@ -145,4 +145,4 @@ spec: description: NodeSelector configuration applied to all the deployments nullable: true type: object - version: 0.7.2 + version: 0.8.0 diff --git a/repo/packages/postgresql-operator.packages.kadras.io/1.24.1.yml b/repo/packages/postgresql-operator.packages.kadras.io/1.27.0.yml similarity index 77% rename from repo/packages/postgresql-operator.packages.kadras.io/1.24.1.yml rename to repo/packages/postgresql-operator.packages.kadras.io/1.27.0.yml index bcd1ea6..054ae8e 100644 --- a/repo/packages/postgresql-operator.packages.kadras.io/1.24.1.yml +++ b/repo/packages/postgresql-operator.packages.kadras.io/1.27.0.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: postgresql-operator.packages.kadras.io.1.24.1 + name: postgresql-operator.packages.kadras.io.1.27.0 spec: licenses: - Apache 2.0 refName: postgresql-operator.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-postgresql-operator/releases - releasedAt: "2024-10-23T15:40:03Z" + releasedAt: "2025-08-14T17:53:47Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-postgresql-operator@sha256:feac04e108012c264ba5d2932a5c05c129e9c367f45ee9233b642593c7356755 + image: ghcr.io/kadras-io/package-for-postgresql-operator@sha256:7ba0b9f3ab4414eecd25540f29d5176abd8290c2850c3c85115c78ea2d9b25b8 template: - ytt: paths: @@ -28,4 +28,4 @@ spec: openAPIv3: default: null nullable: true - version: 1.24.1 + version: 1.27.0 diff --git a/repo/packages/rabbitmq-operator.packages.kadras.io/2.11.0.yml b/repo/packages/rabbitmq-operator.packages.kadras.io/2.16.1.yml similarity index 85% rename from repo/packages/rabbitmq-operator.packages.kadras.io/2.11.0.yml rename to repo/packages/rabbitmq-operator.packages.kadras.io/2.16.1.yml index e9476b6..1b18205 100644 --- a/repo/packages/rabbitmq-operator.packages.kadras.io/2.11.0.yml +++ b/repo/packages/rabbitmq-operator.packages.kadras.io/2.16.1.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: rabbitmq-operator.packages.kadras.io.2.11.0 + name: rabbitmq-operator.packages.kadras.io.2.16.1 spec: licenses: - Apache 2.0 refName: rabbitmq-operator.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-rabbitmq-operator/releases - releasedAt: "2024-10-23T15:52:14Z" + releasedAt: "2025-09-15T15:15:32Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-rabbitmq-operator@sha256:b510e8dd5b1da589f69fcf9882f0f0444840f32fac66d088f1cafc78aef6d1d4 + image: ghcr.io/kadras-io/package-for-rabbitmq-operator@sha256:d8066a1d87ead89aa1b8801f54fbf8a111313c56ab9bf0fec2611b5b0fe06534 template: - ytt: paths: @@ -41,4 +41,4 @@ spec: type: string type: object type: object - version: 2.11.0 + version: 2.16.1 diff --git a/repo/packages/secretgen-controller.packages.kadras.io/0.18.1.yml b/repo/packages/secretgen-controller.packages.kadras.io/0.19.2.yml similarity index 80% rename from repo/packages/secretgen-controller.packages.kadras.io/0.18.1.yml rename to repo/packages/secretgen-controller.packages.kadras.io/0.19.2.yml index d062179..b3dd67c 100644 --- a/repo/packages/secretgen-controller.packages.kadras.io/0.18.1.yml +++ b/repo/packages/secretgen-controller.packages.kadras.io/0.19.2.yml @@ -2,13 +2,13 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: secretgen-controller.packages.kadras.io.0.18.1 + name: secretgen-controller.packages.kadras.io.0.19.2 spec: licenses: - Apache 2.0 refName: secretgen-controller.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-secretgen-controller/releases - releasedAt: "2024-09-23T19:59:51Z" + releasedAt: "2025-05-30T18:30:26Z" template: spec: deploy: @@ -19,7 +19,7 @@ spec: - --kube-api-burst=100 fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-secretgen-controller@sha256:f041a9b19a252e03ab5e8d6070a7aaacd3422a269e3c01e35a615e1fa67232c3 + image: ghcr.io/kadras-io/package-for-secretgen-controller@sha256:a75097ef7dc675acb9144cd6b7c76fccfb3d7aa57969cf3b0ec36a0f48fe35df template: - ytt: paths: @@ -32,4 +32,4 @@ spec: openAPIv3: default: null nullable: true - version: 0.18.1 + version: 0.19.2 diff --git a/repo/packages/tempo-operator.packages.kadras.io/0.13.0.yml b/repo/packages/tempo-operator.packages.kadras.io/0.17.1.yml similarity index 95% rename from repo/packages/tempo-operator.packages.kadras.io/0.13.0.yml rename to repo/packages/tempo-operator.packages.kadras.io/0.17.1.yml index e8d280f..3d610f9 100644 --- a/repo/packages/tempo-operator.packages.kadras.io/0.13.0.yml +++ b/repo/packages/tempo-operator.packages.kadras.io/0.17.1.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: tempo-operator.packages.kadras.io.0.13.0 + name: tempo-operator.packages.kadras.io.0.17.1 spec: licenses: - Apache 2.0 refName: tempo-operator.packages.kadras.io releaseNotes: https://github.com/kadras-io/package-for-tempo-operator/releases - releasedAt: "2024-09-01T09:30:34Z" + releasedAt: "2025-08-14T18:19:45Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/package-for-tempo-operator@sha256:f8b1fd1b929e725d977a7b7fb88753cfc91e998a3d3173b326754a888fd98f2a + image: ghcr.io/kadras-io/package-for-tempo-operator@sha256:3af49f0336f722e4e8cb9adbb0b48e0c821178e1fbf04cde0ce87621ccf62f57 template: - ytt: paths: @@ -99,9 +99,9 @@ spec: tracing: additionalProperties: false properties: - jaegerEndpoint: + otlpHttpEndpoint: default: "" - description: The Jaeger endpoint where to send traces. Only + description: The OTLP HTTP endpoint where to send traces. Only for TempoStack. type: string samplingFraction: @@ -253,6 +253,11 @@ spec: additionalProperties: false description: Settings for the Tempo Ingester. properties: + podSecurityContext: + additionalProperties: false + description: PodSecurityContext for the Ingester component. + properties: {} + type: object replicas: default: 1 description: Number of replicas to deploy for the Ingester component. @@ -285,4 +290,4 @@ spec: type: object type: object type: object - version: 0.13.0 + version: 0.17.1 diff --git a/repo/packages/workspace-provisioner.packages.kadras.io/0.3.0.yml b/repo/packages/workspace-provisioner.packages.kadras.io/0.4.0.yml similarity index 87% rename from repo/packages/workspace-provisioner.packages.kadras.io/0.3.0.yml rename to repo/packages/workspace-provisioner.packages.kadras.io/0.4.0.yml index 32bc1cc..4cf6ff9 100644 --- a/repo/packages/workspace-provisioner.packages.kadras.io/0.3.0.yml +++ b/repo/packages/workspace-provisioner.packages.kadras.io/0.4.0.yml @@ -2,20 +2,20 @@ apiVersion: data.packaging.carvel.dev/v1alpha1 kind: Package metadata: creationTimestamp: null - name: workspace-provisioner.packages.kadras.io.0.3.0 + name: workspace-provisioner.packages.kadras.io.0.4.0 spec: licenses: - Apache 2.0 refName: workspace-provisioner.packages.kadras.io releaseNotes: https://github.com/kadras-io/workspace-provisioner/releases - releasedAt: "2023-09-08T16:33:23Z" + releasedAt: "2025-08-14T17:24:09Z" template: spec: deploy: - kapp: {} fetch: - imgpkgBundle: - image: ghcr.io/kadras-io/workspace-provisioner@sha256:b852990e1cf32796e852880ed1d5eccbbef709f2f58d5fd3e342540667633ac3 + image: ghcr.io/kadras-io/workspace-provisioner@sha256:9efab8fd3c86a7e8cfd5f1cff17ab5a881a0d37b13af5e971f2e1b23ac6c2dde template: - ytt: paths: @@ -84,24 +84,25 @@ spec: type: string type: object type: array - oci_registry: + oci: additionalProperties: false - description: Settings for the OCI registry that the workspace will use. + description: Settings for accessing the OCI registry that the workspace + will use. properties: - secret: + pull_secret: additionalProperties: false description: Configuration for the Secret holding the credentials to - access the OCI registry. + pull images from the OCI registry. properties: name: default: "" - description: The name of the Secret holding the credentials to access - the OCI registry. + description: The name of the Secret holding the credentials to pull + images from the OCI registry. type: string namespace: default: "" description: The namespace of the Secret holding the credentials - to access the OCI registry. + to pull images from the OCI registry. type: string type: object type: object @@ -111,4 +112,4 @@ spec: roles in each workspace. type: string type: object - version: 0.3.0 + version: 0.4.0