Skip to content

Commit

Permalink
Autocommit initiated by frankmalin
Browse files Browse the repository at this point in the history
Completed stage one of the testcase
  • Loading branch information
camgit authored Jan 30, 2024
1 parent 51f22ff commit 8cb14b1
Show file tree
Hide file tree
Showing 8 changed files with 32 additions and 56 deletions.
Binary file not shown.
2 changes: 1 addition & 1 deletion repo/components/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4102,4 +4102,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/components/zenhelper-0.1.5.tgz
version: 0.1.5
generated: 2024-01-30T00:54:23.34191808Z
generated: 2024-01-30T13:59:00.435990237Z
2 changes: 1 addition & 1 deletion repo/entitled/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2702,4 +2702,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/entitled/ibm-wml-accelerator-prod-1.0.0.tgz
version: 1.0.0
generated: 2024-01-30T00:53:24.786786072Z
generated: 2024-01-30T13:57:59.235546386Z
Binary file added repo/ibm-helm/ibm-ucda-prod-3.3.18.tgz
Binary file not shown.
51 changes: 0 additions & 51 deletions repo/ibm-helm/ibm-ucda-prod.md
Original file line number Diff line number Diff line change
Expand Up @@ -84,57 +84,6 @@ spec:

6. If a route or ingress is used to access the WSS port of the DevOps Deploy server from an DevOps Deploy agent, then port 443 should be specified along with the configured URL to access the proper service port defined for the DevOps Deploy Server.

### PodSecurityPolicy Requirements

If you are running on OpenShift, skip this section and continue to the [SecurityContextConstraints Requirements](#securitycontextconstraints-requirements) section below.

This chart requires a PodSecurityPolicy to be bound to the target namespace prior to installation. Choose either a predefined PodSecurityPolicy or have your cluster administrator create a custom PodSecurityPolicy for you.

The predefined PodSecurityPolicy named [`ibm-restricted-psp`](https://ibm.biz/cpkspec-psp) has been verified for this chart, if your target namespace is bound to this PodSecurityPolicy you can proceed to install the chart.

* Custom PodSecurityPolicy definition:
```
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
annotations:
kubernetes.io/description: "This policy is based on the most restrictive policy,
requiring pods to run with a non-root UID, and preventing pods from accessing the host."
seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default
seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default
name: ibm-ucd-prod-psp
spec:
allowPrivilegeEscalation: false
forbiddenSysctls:
- '*'
fsGroup:
ranges:
- max: 65535
min: 1
rule: MustRunAs
hostNetwork: false
hostPID: false
hostIPC: false
requiredDropCapabilities:
- ALL
runAsUser:
rule: MustRunAsNonRoot
seLinux:
rule: RunAsAny
supplementalGroups:
ranges:
- max: 65535
min: 1
rule: MustRunAs
volumes:
- configMap
- emptyDir
- projected
- secret
- downwardAPI
- persistentVolumeClaim
```

### SecurityContextConstraints Requirements

This chart requires a `SecurityContextConstraints` to be bound to the target namespace prior to installation. The default `SecurityContextConstraints` named restricted has been verified for this chart, if your target namespace is bound to this `SecurityContextConstraints` resource you can proceed to install the chart.
Expand Down
29 changes: 28 additions & 1 deletion repo/ibm-helm/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12321,6 +12321,33 @@ entries:
- https://raw.githubusercontent.com/IBM/charts/master/repo/ibm-helm/ibm-ucd-prod-7.0.0.tgz
version: 7.0.0
ibm-ucda-prod:
- apiVersion: v2
appVersion: 8.0.0
created: "2024-01-30T14:00:36.069144243Z"
description: IBM DevOps Deploy agent License By installing this product you accept
the terms http://www-03.ibm.com/software/sla/sladb.nsf/searchlis/?searchview&searchorder=4&searchmax=0&query=(urbancode+deploy).
digest: 4f08d44bc7e80c802d5ec8310537b1315f2a95ad65108a033026341cc4e78731
icon: https://developer.ibm.com/urbancode/wp-content/uploads/sites/16/2017/09/ucdicon.png
keywords:
- ucd
- deploy
- amd64
- s390x
- ppc64le
- Commercial
- ICPRHOCP
- RHOCP
- IKS
- DevOps
- CI/CD
kubeVersion: '>=1.19.0'
maintainers:
- name: IBM
- name: IBM DevOps Deploy
name: ibm-ucda-prod
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/ibm-helm/ibm-ucda-prod-3.3.18.tgz
version: 3.3.18
- apiVersion: v2
appVersion: 8.0.0
created: "2023-12-19T00:55:18.048066698Z"
Expand Down Expand Up @@ -14021,4 +14048,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/ibm-helm/itx-rs-prod-2.0.0.tgz
version: 2.0.0
generated: "2024-01-30T00:55:58.467572435Z"
generated: "2024-01-30T14:00:36.055797127Z"
2 changes: 1 addition & 1 deletion repo/samples/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -185,4 +185,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/samples/ibm-sch-1.2.8.tgz
version: 1.2.8
generated: 2024-01-30T00:53:28.930449894Z
generated: 2024-01-30T13:58:04.056968872Z
2 changes: 1 addition & 1 deletion repo/stable/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5410,4 +5410,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/stable/ibm-ws-dyn-agent-dev-1.0.0.tgz
version: 1.0.0
generated: 2024-01-30T00:56:42.833674667Z
generated: 2024-01-30T14:01:27.348434701Z

0 comments on commit 8cb14b1

Please sign in to comment.