feat(helm): update chart emqx-operator ( 2.2.25 → 2.3.2 )

[renovate]

This PR contains the following updates:

Package	Update	Change
emqx-operator (source)	minor	2.2.25 → 2.3.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

emqx/emqx-operator (emqx-operator)

v2.3.2: EMQX Operator 2.3.2

Compare Source

Highlights

• Operator can now be configured to watch several specified namespaces, instead of watching either all namespaces or only the namespace where it is deployed. Helm users can set watchNamespaces, and the chart will create the required namespace-scoped RBAC bindings automatically. (#​1219)
• EMQX configuration parsing now uses an in-tree EMQX-flavored HOCON parser, matching EMQX configuration semantics more closely when the operator processes spec.config.data. (#​1209, #​1212, #​1217)

Fixes & Improvements

• Correctly handle scaling replicant nodes down to zero replicas without leaving the operator in an inconsistent reconcile loop. (#​1210)
• Keep EMQX cluster membership consistent by force-leaving stale stopped core nodes from the controller, instead of relying on pod PreStop hooks. (#​1211)
• Preserve non-changeable dashboard listener settings during configuration updates, instead of dropping related configuration entries. (#​1212)
• Correctly pass spec.config.mode to the EMQX Config API so Merge and Replace updates behave as configured. (#​1217)
• Allow the Helm pre-upgrade Job pod and container security contexts to be customized from chart values. (#​1215)
• Remove unused persistentvolumes permissions from manager RBAC. (#​1219)

v2.3.1: EMQX Operator 2.3.1

Compare Source

Fixes & Improvements

• Add upgrade workaround playbook (#​1190)
• Limit event source to single namespace if configured (#​1196)
• Provide empty spec default to inject correct nested defaults (#​1197)
• Handle empty HOCON arrays in EMQX config snippets correctly (#​1201)

v2.3.0: EMQX Operator 2.3.0

Compare Source

Highlights

• EMQX Custom Resource Definition (CRD) has been refined and promoted to apps.emqx.io/v2. (#​1148, #​1160, #​1165)
  • EMQX 5.9, 5.10 and 6.x releases are now exclusively supported. (#​1152)
  • CRD apps.emqx.io/v2beta1 is now deprecated, earlier versions are no longer supported.
  • More conventional naming across resource status structures.
• Operator now supports EMQX Durable Storage maintenance and automatic rebalancing. (#​1128, #​1152)
• Configuration specified in EMQX CR is now mapped to base.hocon file for predictable configuration management. (#​1156)
• EMQX Controller has been simplified and optimized for better performance and reliability. (#​1150)
  • Controller does not include any webhooks now, and there's no dependency on cert-manager anymore.

Fixes & Improvements

• Corrected an issue where ownerRef could be lost during resource updates. (#​1163)
• Ensured that configuration changes are now applied consistently. (#​1157)
• Operator now correctly handles scaling down pods that are not associated with a node. (#​1158)

Internal

• Added a new end-to-end test suite for release upgrades. (#​1155)
• Added a CodeQL workflow for security analysis. (#​1153)
• Increased test coverage.

Please refer to README.md for further details.

v2.2.29: EMQX Operator 2.2.29 Released

Compare Source

Release Note 🍻

EMQX Operator 2.2.29 has been released.

Supported version

• apps.emqx.io/v2beta1

  • EMQX at 5.1.1 and later
  • EMQX Enterprise at 5.1.1 and later

• apps.emqx.io/v1beta4

  • EMQX at 4.4.14 and later
  • EMQX Enterprise at 4.4.14 and later

Fix 🐞

• Fix the issue that the replicas of the statefulSet is not current when the emqx CR is updated

• Correct TopologySpreadConstraints reference in generateReplicaSet function

Chore 🏗

• Helm chart

  • Make webhook into namespace scope when singleNamespace=true @​

  • Remove wrong usage of imagePullSecrets

How to install/upgrade EMQX Operator 💡

Need make sure the cert-manager is ready

helm repo add emqx https://repos.emqx.io/charts
helm repo update
helm upgrade --install emqx-operator emqx/emqx-operator \
  --namespace emqx-operator-system \
  --create-namespace \
  --version 2.2.29
kubectl wait --for=condition=Ready pods -l "control-plane=controller-manager" -n emqx-operator-system

Warning 🚨

apps.emqx.io/v1beta3 and apps.emqx.io/v2alpha1 will be dropped soon

What's Changed

• fix: change scale down strategy when blue green update by @​Rory-Z in #​1108
• make webhook into namespace scope when singleNamespace=true by @​phosae in #​1116
• helm chart README: fix typo by @​phosae in #​1114
• Helm Chart: Remove wrong image pull usage in SA by @​K4iM4k3r in #​1119
• fix: correct TopologySpreadConstraints reference in generateReplicaSet by @​bluicezhen in #​1122
• docs: use consistent docker image tag by @​id in #​1127
• chore(rbac): add patch permission for event by @​Rory-Z in #​1133
• fix(blue-green update): fix set sts replicas less than 0 by @​Rory-Z in #​1132

New Contributors

• @​phosae made their first contribution in #​1116
• @​K4iM4k3r made their first contribution in #​1119
• @​bluicezhen made their first contribution in #​1122

Full Changelog: emqx/emqx-operator@2.2.28...2.2.29

v2.2.28: EMQX Operator 2.2.28 Released

Compare Source

Release Note 🍻

EMQX Operator 2.2.28 has been released.

Supported version

• apps.emqx.io/v2beta1

  • EMQX at 5.1.1 and later
  • EMQX Enterprise at 5.1.1 and later

• apps.emqx.io/v1beta4

  • EMQX at 4.4.14 and later
  • EMQX Enterprise at 4.4.14 and later

Fixes 🛠

• Fix the Helm template formatting issue, thanks to Rouke Broersma for their contribution in PR#1102

Enhancements 🚀

• Better documents

How to install/upgrade EMQX Operator 💡

Need make sure the cert-manager is ready

helm repo add emqx https://repos.emqx.io/charts
helm repo update
helm upgrade --install emqx-operator emqx/emqx-operator \
  --namespace emqx-operator-system \
  --create-namespace \
  --version 2.2.28
kubectl wait --for=condition=Ready pods -l "control-plane=controller-manager" -n emqx-operator-system

Warning 🚨

apps.emqx.io/v1beta3 and apps.emqx.io/v2alpha1 will be dropped soon

What's Changed

• update docs by @​id in #​1106
• fix: Indent ENABLE_WEBHOOKS env variable under container by @​rouke-broersma in #​1102
• docs(CRD): change volumeClaimTemplates describe by @​Rory-Z in #​1107

New Contributors

• @​id made their first contribution in #​1106

Full Changelog: emqx/emqx-operator@2.2.27...2.2.28

v2.2.27: EMQX Operator 2.2.27 Released

Compare Source

Release Note 🍻

EMQX Operator 2.2.27 has been released.

Supported version

• apps.emqx.io/v2beta1

  • EMQX at 5.1.1 and later
  • EMQX Enterprise at 5.1.1 and later

• apps.emqx.io/v1beta4

  • EMQX at 4.4.14 and later
  • EMQX Enterprise at 4.4.14 and later

Enhancements 🚀

• EMQX operator helm chart can support the podSecurityContext and containerSecurityContext configuration, which can be used to configure the security context of the operator pod.

• EMQX operator helm chart can disable web hooks by webhook.enabled: false in the values.yaml file, it will disable the web hooks of the operator, if you have any apps.emqx.io/v2alpha1 or apps.emqx.io/v1beta3 resources, please make sure the web hooks are enabled, otherwise the resources can not convert to the apps.emqx.io/v2beta1 and apps.emqx.io/v1beta4 resources.

How to install/upgrade EMQX Operator 💡

Need make sure the cert-manager is ready

helm repo add emqx https://repos.emqx.io/charts
helm repo update
helm upgrade --install emqx-operator emqx/emqx-operator \
  --namespace emqx-operator-system \
  --create-namespace \
  --version 2.2.27
kubectl wait --for=condition=Ready pods -l "control-plane=controller-manager" -n emqx-operator-system

Warning 🚨

apps.emqx.io/v1beta3 and apps.emqx.io/v2alpha1 will be dropped soon

What's Changed

• chore: add CRDs file to release assets by @​Rory-Z in #​1099
• chore: add security context for helm by @​Rory-Z in #​1100
• chore: can disable webhook in helm by @​Rory-Z in #​1101

Full Changelog: emqx/emqx-operator@2.2.26...2.2.27

v2.2.26: EMQX Operator 2.2.26 Released

Compare Source

Release Note 🍻

EMQX Operator 2.2.26 has been released.

Supported version

• apps.emqx.io/v2beta1

  • EMQX at 5.1.1 and later
  • EMQX Enterprise at 5.1.1 and later

• apps.emqx.io/v1beta4

  • EMQX at 4.4.14 and later
  • EMQX Enterprise at 4.4.14 and later

Enhancements 🚀

• apps.emqx.io/v2beta1 EMQX.

  • Users can now configure the Pod Disruption Budget (PDB) for the EMQX cluster by setting minAvailable or maxUnavailable in spec.coreTemplate.spec or spec.replicantTemplate.spec within the EMQX CRD. The default setting is {"minAvailable": 1}.

• EMQX operator can now be deployed in a single namespace scope, where it will only manage resources within that namespace. Just set singleNamespace: true in the values.yaml file of Helm chart, and then the operator will only manage resources in the namespace where it is deployed.

How to install/upgrade EMQX Operator 💡

Need make sure the cert-manager is ready

helm repo add emqx https://repos.emqx.io/charts
helm repo update
helm upgrade --install emqx-operator emqx/emqx-operator \
  --namespace emqx-operator-system \
  --create-namespace \
  --version 2.2.26
kubectl wait --for=condition=Ready pods -l "control-plane=controller-manager" -n emqx-operator-system

Warning 🚨

apps.emqx.io/v1beta3 and apps.emqx.io/v2alpha1 will be dropped soon

What's Changed

• ci: change args for install cert-manager by @​Rory-Z in #​1080
• chore: fix status field name error by @​Rory-Z in #​1082
• docs: add new document for hello operator by @​Rory-Z in #​1079
• docs: update huaweicloud link by @​Rory-Z in #​1085
• feat(deploy): support single namespace by @​Rory-Z in #​1091
• feat: user can set PDB by himself by @​Rory-Z in #​1093
• fix(pdb): fix PDB can not update by @​Rory-Z in #​1095
• chore: delete default value of minAvailable by @​Rory-Z in #​1096

Full Changelog: emqx/emqx-operator@2.2.25...2.2.26

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[carpenike-bot]

--- kubernetes/cluster-0/apps/db/emqx/operator Kustomization: flux-system/emqx-operator HelmRelease: db/emqx-operator

+++ kubernetes/cluster-0/apps/db/emqx/operator Kustomization: flux-system/emqx-operator HelmRelease: db/emqx-operator

@@ -14,13 +14,13 @@

       chart: emqx-operator
       interval: 5m
       sourceRef:
         kind: HelmRepository
         name: emqx
         namespace: flux-system
-      version: 2.2.25
+      version: 2.2.28
   install:
     crds: CreateReplace
   interval: 30m
   upgrade:
     crds: CreateReplace
   values:

[carpenike-bot]

--- HelmRelease: db/emqx-operator ClusterRole: db/emqx-operator-manager-role

+++ HelmRelease: db/emqx-operator ClusterRole: db/emqx-operator-manager-role

@@ -1,11 +1,10 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  creationTimestamp: null
   name: emqx-operator-manager-role
 rules:
 - apiGroups:
   - ''
   resources:
   - configmaps
--- HelmRelease: db/emqx-operator Deployment: db/emqx-operator-controller-manager

+++ HelmRelease: db/emqx-operator Deployment: db/emqx-operator-controller-manager

@@ -30,13 +30,13 @@

         - --leader-elect
         - --metrics-bind-address=:8080
         - --health-probe-bind-address=:8081
         - --zap-devel=false
         command:
         - /manager
-        image: ghcr.io/emqx/emqx-operator:2.2.25
+        image: ghcr.io/emqx/emqx-operator:2.2.28
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
@@ -46,12 +46,15 @@

         - containerPort: 8080
           name: metrics
           protocol: TCP
         - containerPort: 9443
           name: webhook-server
           protocol: TCP
+        env:
+        - name: ENABLE_WEBHOOKS
+          value: 'true'
         readinessProbe:
           httpGet:
             path: /readyz
             port: 8081
           initialDelaySeconds: 5
           periodSeconds: 10

[carpenike-bot]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
❌ COPYPASTE	jscpd	yes		2	no	1.38s
✅ REPOSITORY	git_diff	yes		no	no	0.05s
✅ REPOSITORY	secretlint	yes		no	no	3.77s
✅ YAML	prettier	1		0	0	0.4s
✅ YAML	yamllint	1		0	0	0.63s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff