Promote Staging to Prod - 2026-01-07

charts/prod/argocd/Chart.yaml

@@ -4,5 +4,5 @@ version: 1.0.2
 dependencies:
   # https://github.com/argoproj/argo-helm/releases
   - name: argo-cd
-    version: 9.1.3
+    version: 9.1.7
     repository: https://argoproj.github.io/argo-helm

charts/prod/cluster-api-addon-provider/Chart.yaml

@@ -4,4 +4,4 @@ version: 1.2.0
 dependencies:
   - repository: https://azimuth-cloud.github.io/cluster-api-addon-provider
     name: cluster-api-addon-provider
-    version: 0.10.1
+    version: 0.10.2

charts/prod/ingress-nginx-external/Chart.yaml

@@ -3,6 +3,6 @@ name: ingress-nginx-external
 version: 1.0.0
 dependencies:
   - name: ingress-nginx
-    version: 4.14.0
+    version: 4.14.1
     repository: "https://kubernetes.github.io/ingress-nginx"
     alias: ingress-nginx-external

charts/prod/manila-csi/Chart.yaml

@@ -4,4 +4,4 @@ version: 2.0.0
 dependencies:
   - repository: https://stfc.github.io/cloud-helm-charts/
     name: stfc-cloud-manila-csi
-    version: 1.1.5
+    version: 1.1.6

charts/prod/materials-galaxy/Chart.yaml

@@ -4,4 +4,4 @@ version: 2.0.0
 dependencies:
   - repository: https://stfc.github.io/cloud-helm-charts/
     name: materials-galaxy
-    version: 2.1.10
+    version: 2.1.11

charts/prod/opensearch/templates/ca.yaml

@@ -0,0 +1,33 @@
+{{- $clusterName := index .Values "stfc-cloud-opensearch" "opensearch-cluster" "cluster" "name" -}}
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{$clusterName}}-ca-cert
+  namespace: {{.Release.Namespace}}
+spec:
+  isCA: true
+  commonName: {{$clusterName}}
+  secretName: {{$clusterName}}-ca
+  duration: 87600h # 10yr
+  renewBefore: 8760h # 1yr
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS8
+    size: 4096
+  issuerRef:
+    name: self-signed
+    kind: ClusterIssuer
+    group: cert-manager.io
+
+---
+
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: {{$clusterName}}-ca-issuer
+  namespace: {{.Release.Namespace}}
+spec:
+  ca:
+    secretName: {{$clusterName}}-ca

charts/prod/opensearch/templates/certificates.yaml

@@ -0,0 +1,114 @@
+{{- $clusterName := index .Values "stfc-cloud-opensearch" "opensearch-cluster" "cluster" "name" -}}
+
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{$clusterName}}-admin-certificate
+  namespace: {{.Release.Namespace}}
+spec:
+  subject:
+    organizationalUnits: [{{$clusterName}}] # OU
+  commonName: admin # CN
+  secretName: {{$clusterName}}-admin-cert
+  duration: 87600h0m0s # 10yr
+  renewBefore: 8760h0m0s # 1yr
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS8
+    size: 2048
+  issuerRef:
+    name: {{$clusterName}}-ca-issuer
+    kind: Issuer
+    group: cert-manager.io
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{$clusterName}}-http-certificate
+  namespace: {{.Release.Namespace}}
+spec:
+  subject:
+    organizationalUnits: [{{$clusterName}}] # OU
+  commonName: {{$clusterName}} # CN
+  secretName: {{$clusterName}}-http-cert
+  duration: 87600h0m0s # 10yr
+  renewBefore: 8760h0m0s # 1yr
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS8
+    size: 2048
+  dnsNames:
+  - {{$clusterName}}
+  - {{$clusterName}}-discovery
+  - {{$clusterName}}.{{.Release.Namespace}}
+  - {{$clusterName}}.{{.Release.Namespace}}.svc
+  - {{$clusterName}}.{{.Release.Namespace}}.svc.cluster.local
+  usages:
+    - server auth
+    - client auth
+  issuerRef:
+    name: {{$clusterName}}-ca-issuer
+    kind: Issuer
+    group: cert-manager.io
+
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{$clusterName}}-transport-certificate
+  namespace: {{.Release.Namespace}}
+spec:
+  subject:
+    organizationalUnits: [{{$clusterName}}] # OU
+  commonName: {{$clusterName}} # CN
+  secretName: {{$clusterName}}-transport-cert
+  duration: 87600h0m0s # 10yr
+  renewBefore: 8760h0m0s # 1yr
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS8
+    size: 2048
+  dnsNames:
+  - {{$clusterName}}
+  - {{$clusterName}}-discovery
+  - {{$clusterName}}.{{.Release.Namespace}}
+  - {{$clusterName}}.{{.Release.Namespace}}.svc
+  - {{$clusterName}}.{{.Release.Namespace}}.svc.cluster.local
+  usages:
+    - server auth
+    - client auth
+  issuerRef:
+    name: {{$clusterName}}-ca-issuer
+    kind: Issuer
+    group: cert-manager.io
+
+--- 
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{$clusterName}}-dashboards-certificate
+  namespace: {{.Release.Namespace}}
+spec:
+  subject:
+    organizationalUnits: [{{$clusterName}}] # OU
+  commonName: {{$clusterName}}-dashboards # CN
+  secretName: {{$clusterName}}-dashboards-cert
+  duration: 87600h0m0s # 10yr
+  renewBefore: 8760h0m0s # 1yr
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS8
+    size: 2048
+  dnsNames:
+  - {{$clusterName}}-dashboards
+  - {{$clusterName}}-dashboards.{{.Release.Namespace}}
+  - {{$clusterName}}-dashboards.{{.Release.Namespace}}.svc
+  - {{$clusterName}}-dashboards.{{.Release.Namespace}}.svc.cluster.local
+  usages:
+    - server auth
+    - client auth
+  issuerRef:
+    name: {{$clusterName}}-ca-issuer
+    kind: Issuer
+    group: cert-manager.io

charts/prod/victoria-metrics/Chart.yaml

@@ -4,4 +4,4 @@ version: 2.0.0
 dependencies:
   - repository: https://stfc.github.io/cloud-helm-charts/
     name: stfc-cloud-vm
-    version: 1.0.8
+    version: 1.0.9