mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
Aleksei Sviridkin
03668bcd1b
Re-vendors the coredns Helm chart from 1.43.2 to 1.46.0 (chart appVersion 1.12.3 -> 1.13.1), picking up the chart-tooling improvements (1.46 ServiceMonitor options, 1.45 customAnnotations/dnsConfig/podLabels/dnsPolicy, 1.44 multicluster RBAC). This is a chart-only refresh: the running CoreDNS image is deliberately KEPT at registry.k8s.io/coredns/coredns:v1.12.4. It is pinned to the 1.12 line that matches the Kubernetes-bundled kube-dns replacement, and v1.12.4 is the latest patch of that line (itself a security release). Advancing the image to the chart's 1.13.1 appVersion (or newer) would break the deliberate alignment with the bundled CoreDNS version and is a separate platform decision, not part of this chart refresh. The kube-dns overrides (k8sAppLabelOverride, service.name, serviceAccount.name) stay valid and the rendered Deployment still uses v1.12.4. Pins the update target to --version 1.46.0 for reproducible re-vendoring. Note: this does NOT close #2899 -- that ticket asks to advance the coredns *image* for CVE remediation, which conflicts with the kube-dns version alignment. Whether to move the bundled CoreDNS line forward (and thus the image) is a platform-level call, left open on the issue. Adaptations: - charts/: re-vendored via make update (helm pull coredns --version 1.46.0; upstream tests dropped per the existing recipe) - Makefile: pin update target to --version 1.46.0 Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>
20 lines
631 B
Makefile
20 lines
631 B
Makefile
export NAME=coredns
|
|
export NAMESPACE=kube-system
|
|
|
|
include ../../../hack/package.mk
|
|
|
|
test:
|
|
helm unittest .
|
|
|
|
update:
|
|
rm -rf charts
|
|
helm repo add cozy-coredns https://coredns.github.io/helm
|
|
helm repo update cozy-coredns
|
|
helm pull cozy-coredns/coredns --untar --untardir charts --version 1.46.0
|
|
# Drop vendored upstream helm-unittest fixtures: they hard-code
|
|
# upstream defaults (test-release-coredns names, no
|
|
# k8sAppLabelOverride, no service.name override) and fail under
|
|
# the cozystack values.yaml that pins kube-dns. The cozystack-side
|
|
# fixtures in tests/ are the only ones CI should run.
|
|
rm -rf charts/coredns/tests
|