Merge branch 'master' into constellation-messaging

maracle6 · Feb 29, 2024 · 501125e · 501125e
2 parents 2f706a8 + e164935
commit 501125e
Show file tree

Hide file tree

Showing 65 changed files with 2,036 additions and 301 deletions.
diff --git a/.github/workflows/github-actions-build.yml b/.github/workflows/github-actions-build.yml
@@ -2,9 +2,9 @@ name:  Pega Chart Build
 
 env:
   HELM_URL: https://get.helm.sh
-  HELM_TGZ: helm-v3.6.3-linux-amd64.tar.gz
-  YAMLLINT_VERSION: 1.15.0
-  GO_VERSION: 1.18.3
+  HELM_TGZ: helm-v3.11.3-linux-amd64.tar.gz
+  YAMLLINT_VERSION: 1.34.0
+  GO_VERSION: 1.21.6
 
 
 on:
@@ -23,15 +23,15 @@ concurrency:
 
 jobs:
   run-supplemental-validation-job:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
       - name: Check out repository code
         uses: actions/checkout@v3
       - name: Run validate supplementals script
         run : |
           sh validate_supplementals.sh
   run-lint-job:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
       - name: Check out repository code
         uses: actions/checkout@v3
@@ -72,7 +72,7 @@ jobs:
           sh validatexml.sh      
 
   run-remark-job:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
       - name: Check out repository code
         uses: actions/checkout@v3
@@ -91,7 +91,7 @@ jobs:
           remark -i .remark_ignore -f -u validate-links .
 
   run-go-tests-job:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     steps:
       - name: Check out repository code
         uses: actions/checkout@v3
@@ -144,7 +144,7 @@ jobs:
           go test ./backingservices | grep "FAIL" -A 8 || true ; test ${PIPESTATUS[0]} -eq 0
 
   run-deploy-job:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     needs: [run-lint-job, run-remark-job, run-go-tests-job]
     if: ( github.ref_type == 'tag' && startsWith(github.ref, 'refs/tags/v') ) &&  success()
     steps:
@@ -191,5 +191,13 @@ jobs:
           cd $GITHUB_WORKSPACE
           chmod 777 update_gh_pages.sh
           ./update_gh_pages.sh
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_ACTIONS_SECRET }}
+
+      - name: sync chart version
+        run: |
+          cd $GITHUB_WORKSPACE
+          chmod 777 sync_chart_version.sh
+          ./sync_chart_version.sh
         env:
           GITHUB_TOKEN: ${{ secrets.GH_ACTIONS_SECRET }}
diff --git a/README.md b/README.md
@@ -1,6 +1,6 @@
 # Pega deployment on Kubernetes
 
-This project provides Helm charts and basic examples for deploying Pega on Kubernetes. You will also need to download the required [installation kit](https://community.pega.com/knowledgebase/products/platform/deploy) from the Pega Community which includes rules and data to preload into your relational database. Deploying Pega on Kubernetes requires Pega Infinity 8.2 or later.
+This project provides Helm charts and basic examples for deploying Pega on Kubernetes. You will also need to download the required [installation kit](https://community.pega.com/knowledgebase/products/platform/deploy) from the Pega Community which includes rules and data to preload into your relational database. Deploying Pega on Kubernetes requires Pega Infinity 8.3 or later.
 
 [![Build Status](https://github.com/pegasystems/pega-helm-charts/actions/workflows/github-actions-build.yml/badge.svg)](https://github.com/pegasystems/pega-helm-charts/actions/workflows/github-actions-build.yml)
 [![GitHub release](https://img.shields.io/github/release/pegasystems/pega-helm-charts.svg)](https://github.com/pegasystems/pega-helm-charts/releases)
@@ -146,6 +146,8 @@ Digest: <encryption verification>
 Status: Downloaded pega-docker.downloads.pega.com/platform/pega:<version>
 ```
 
+All Docker images for Pega Platform releases that are in Standard Support undergo a nightly rebuild that applies the latest available updates and patches to all third-party components. To take advantage of these updates, you must redeploy your Pega Platform with the latest available images. Pega does not guarantee nightly rebuilds for Pega Platform releases in Extended Support and stops rebuilding images for Pega Platform releases that are out of Extended Support.
+
 For details about downloading and then pushing Docker images to your repository for your deployment, see [Using Pega-provided Docker images](https://docs.pega.com/bundle/platform-88/page/platform/deployment/client-managed-cloud/pega-docker-images-manage.html).
 
 From Helm chart versions `2.2.0` and above, update your Pega Platform version to the latest patch version.

diff --git a/charts/addons/Chart.yaml b/charts/addons/Chart.yaml
@@ -3,4 +3,4 @@ apiVersion: v1
 appVersion: "1.0"
 description: A Helm chart for Kubernetes
 name: addons
-version: 1.2.0
+version: "3.15.2"
diff --git a/charts/backingservices/Chart.yaml b/charts/backingservices/Chart.yaml
@@ -17,4 +17,4 @@ description: Helm Chart to provision the latest Search and Reporting Service (SR
 # The chart version: Pega provides this as a useful way to track changes you make to this chart.
 # As a best practice, you should increment the version number each time you make changes to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.2.0
+version: "3.15.2"
diff --git a/charts/backingservices/Makefile b/charts/backingservices/Makefile
@@ -26,3 +26,15 @@ purge-es-secrets:
 
 external-es-secrets:
 	kubectl create secret generic srs-certificates --from-file=$(PATH_TO_CERTIFICATE) --namespace=$(NAMESPACE)
+
+purge-srs-secrets:
+	kubectl delete secrets srs-certificates --namespace=$(NAMESPACE) || true
+
+purge-secrets: purge-es-secrets
+	make purge-srs-secrets
+
+update-secrets: purge-secrets
+	make es-prerequisite
+
+update-external-es-secrets: purge-srs-secrets
+	make external-es-secrets
diff --git a/charts/backingservices/charts/constellation/README.md b/charts/backingservices/charts/constellation/README.md
@@ -45,6 +45,9 @@ The values.yaml file provides configuration options to define the values for the
 | `cloudProvider`                        | Specify the cloud provider details. Accepted values are aws.                                                                                                                                                                                                                                                                                          |
 | `awsCertificateArn`                        | Specify the arn for the AWS ACM certificate.                                                                                                                                                                                                                                                                                          |
 | `domainName`                        | Specify your custom domain.                                                                                                                                                                                                                                                                                          |
+| `ingressAnnotations`                        | Specify additional annotations to add to the ingress.                                                                                                                                                                                                                                                                                          |
+| `customerAssetVolumeClaimName`                        | Specify the volume claim name to be used for storing customer assets.                                                                                                                                                                                                                                                                                          |
+| `imagePullSecretNames`                        | Specify a list of existing ImagePullSecrets to be added to the Deployment.                                                                                                                                                                                                                                                                                          |
 | `docker`.`registry`.`url`                        | Specify the image registry url.                                                                                                                                                                                                                                                                                          |
 | `docker`.`registry`.`username`                        | Specify the username for the docker registry.                                                                                                                                                                                                                                                                                          |
 | `docker`.`registry`.`password`                        | Specify the password for the docker registry.                                                                                                                                                                                                                                                                                          |

diff --git a/charts/backingservices/charts/constellation/templates/clln-deployment.yaml b/charts/backingservices/charts/constellation/templates/clln-deployment.yaml
@@ -15,11 +15,27 @@ spec:
       labels:
         app: constellation
     spec:
+      {{- if .Values.customerAssetVolumeClaimName }}
+      volumes:
+        - name: constellation-appstatic-assets
+          persistentVolumeClaim:
+            claimName: {{ .Values.customerAssetVolumeClaimName }}
+      {{- end }}
       imagePullSecrets:
       - name: {{ template "pegaRegistrySecret" $ }}
+      {{ if .Values.imagePullSecretNames }}
+      {{- range .Values.imagePullSecretNames }}
+      - name: {{ . }}
+      {{- end }}
+      {{ end }}
       containers:
       - name: constellation
         image: {{ .Values.docker.constellation.image }}
+        {{ if .Values.customerAssetVolumeClaimName }}
+        volumeMounts:
+         - name: constellation-appstatic-assets
+           mountPath: /usr/src/app/dist/customers
+        {{- end }}
         args:
         - port=3000
         # constellation URL path, if you change it, you need to change ingress template files too

diff --git a/charts/backingservices/charts/constellation/templates/clln-ingress.yaml b/charts/backingservices/charts/constellation/templates/clln-ingress.yaml
@@ -14,6 +14,9 @@ metadata:
     alb.ingress.kubernetes.io/healthcheck-path: /c11n/buildInfo.json
     alb.ingress.kubernetes.io/healthcheck-port: traffic-port
     {{ end }}
+    {{- if .Values.ingressAnnotations }}
+    {{ toYaml .Values.ingressAnnotations | indent 4 }}
+    {{ end }}
 spec:
   rules:
   - host: {{ .Values.domainName }}

diff --git a/charts/backingservices/charts/constellation/values.yaml b/charts/backingservices/charts/constellation/values.yaml
@@ -7,6 +7,12 @@ cloudProvider: "aws"
 # For aws cloud provider enter your acm certificate ARN here.
 awsCertificateArn: arn:aws:acm:us-west-2:xxxxx:certificate/xxxxxxx
 domainName: YOUR_CUSTOM_DOMAIN_NAME_HERE
+# Additional annotations for the ingress can be specified here
+ingressAnnotations:
+# Customer assets must be stored on a persistent storage volume.  Create a volume claim and provide the name.
+customerAssetVolumeClaimName:
+# Provide pre-defined image pull secret names if desired
+imagePullSecretNames: []
 # Docker repos and tag for image
 docker:
   # If using a custom Docker registry, supply the credentials here to pull Docker images.