Skip to content

Commit

Permalink
Autocommit initiated by frankmalin
Browse files Browse the repository at this point in the history
Completed stage one of the testcase
  • Loading branch information
camgit authored Jan 30, 2024
1 parent f3f0174 commit f03db4c
Show file tree
Hide file tree
Showing 8 changed files with 32 additions and 56 deletions.
Binary file not shown.
2 changes: 1 addition & 1 deletion repo/components/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4102,4 +4102,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/components/zenhelper-0.1.5.tgz
version: 0.1.5
generated: 2024-01-29T17:31:47.416987384Z
generated: 2024-01-30T00:24:40.570182352Z
2 changes: 1 addition & 1 deletion repo/entitled/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2702,4 +2702,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/entitled/ibm-wml-accelerator-prod-1.0.0.tgz
version: 1.0.0
generated: 2024-01-29T17:30:47.594710115Z
generated: 2024-01-30T00:23:42.350600311Z
Binary file added repo/ibm-helm/ibm-ucd-prod-8.0.11.tgz
Binary file not shown.
51 changes: 0 additions & 51 deletions repo/ibm-helm/ibm-ucd-prod.md
Original file line number Diff line number Diff line change
Expand Up @@ -145,57 +145,6 @@ spec:

7. If a route or ingress is used to access the WSS port of the DevOps Deploy server from an DevOps Deploy agent, then port 443 should be specified along with the configured URL to access the proper service port defined for the DevOps Deploy Server.

### PodSecurityPolicy Requirements

If you are running on OpenShift, skip this section and continue to the [SecurityContextConstraints Requirements](#securitycontextconstraints-requirements) section below.

This chart requires a PodSecurityPolicy to be bound to the target namespace prior to installation. Choose either a predefined PodSecurityPolicy or have your cluster administrator create a custom PodSecurityPolicy for you.

The predefined PodSecurityPolicy named [`ibm-restricted-psp`](https://ibm.biz/cpkspec-psp) has been verified for this chart, if your target namespace is bound to this PodSecurityPolicy you can proceed to install the chart.

* Custom PodSecurityPolicy definition:
```
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
annotations:
kubernetes.io/description: "This policy is based on the most restrictive policy,
requiring pods to run with a non-root UID, and preventing pods from accessing the host."
seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default
seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default
name: ibm-ucd-prod-psp
spec:
allowPrivilegeEscalation: false
forbiddenSysctls:
- '*'
fsGroup:
ranges:
- max: 65535
min: 1
rule: MustRunAs
hostNetwork: false
hostPID: false
hostIPC: false
requiredDropCapabilities:
- ALL
runAsUser:
rule: MustRunAsNonRoot
seLinux:
rule: RunAsAny
supplementalGroups:
ranges:
- max: 65535
min: 1
rule: MustRunAs
volumes:
- configMap
- emptyDir
- projected
- secret
- downwardAPI
- persistentVolumeClaim
```

### SecurityContextConstraints Requirements

This chart requires a `SecurityContextConstraints` to be bound to the target namespace prior to installation. The default `SecurityContextConstraints` named restricted has been verified for this chart, if your target namespace is bound to this `SecurityContextConstraints` resource you can proceed to install the chart.
Expand Down
29 changes: 28 additions & 1 deletion repo/ibm-helm/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11505,6 +11505,33 @@ entries:
- https://raw.githubusercontent.com/IBM/charts/master/repo/ibm-helm/ibm-ssp-ps-1.1.1.tgz
version: 1.1.1
ibm-ucd-prod:
- apiVersion: v2
appVersion: 8.0.0
created: "2024-01-30T00:26:15.684239483Z"
description: IBM DevOps Deploy server License By installing this product you accept
the terms http://www-03.ibm.com/software/sla/sladb.nsf/searchlis/?searchview&searchorder=4&searchmax=0&query=(urbancode+deploy).
digest: a1bb580d3b8eebd0f76dceaf692d6ecc86fc2457cc18289cbc27cae3ecc6d63b
icon: https://developer.ibm.com/urbancode/wp-content/uploads/sites/16/2017/09/ucdicon.png
keywords:
- ucd
- deploy
- amd64
- s390x
- ppc64le
- Commercial
- RHOCP
- ICPRHOCP
- IKS
- DevOps
- CI/CD
kubeVersion: '>=1.19.0'
maintainers:
- name: IBM
- name: IBM DevOps Deploy
name: ibm-ucd-prod
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/ibm-helm/ibm-ucd-prod-8.0.11.tgz
version: 8.0.11
- apiVersion: v2
appVersion: 8.0.0
created: "2023-12-19T01:26:12.023704399Z"
Expand Down Expand Up @@ -13967,4 +13994,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/ibm-helm/itx-rs-prod-2.0.0.tgz
version: 2.0.0
generated: "2024-01-29T17:33:20.816234095Z"
generated: "2024-01-30T00:26:15.665062774Z"
2 changes: 1 addition & 1 deletion repo/samples/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -185,4 +185,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/samples/ibm-sch-1.2.8.tgz
version: 1.2.8
generated: 2024-01-29T17:30:52.038905417Z
generated: 2024-01-30T00:23:46.500453047Z
2 changes: 1 addition & 1 deletion repo/stable/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5410,4 +5410,4 @@ entries:
urls:
- https://raw.githubusercontent.com/IBM/charts/master/repo/stable/ibm-ws-dyn-agent-dev-1.0.0.tgz
version: 1.0.0
generated: 2024-01-29T17:34:05.798427372Z
generated: 2024-01-30T00:26:58.35967533Z

0 comments on commit f03db4c

Please sign in to comment.