diff --git a/charts/Chart.yaml b/charts/Chart.yaml index eaf2c2d5..9764a019 100644 --- a/charts/Chart.yaml +++ b/charts/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: v1.4.0 +appVersion: v1.4.1 description: The control plane for confidential computing. home: https://edgeless.systems keywords: @@ -9,7 +9,7 @@ kubeVersion: ">=1.13.0-0" name: marblerun sources: - https://github.com/edgelesssys/marblerun -version: 1.4.0 +version: 1.4.1 maintainers: - name: Edgeless Systems email: contact@edgeless.systems diff --git a/charts/README.md b/charts/README.md index 3f63a458..96dffd02 100644 --- a/charts/README.md +++ b/charts/README.md @@ -39,14 +39,14 @@ their default values. | `coordinator.image` | string | Name of the coordinator container image | `"coordinator"` | | `coordinator.meshServerHost` | string | Hostname of the mesh-api server | `"0.0.0.0"` | | `coordinator.meshServerPort` | int | Port of the mesh-api server configuration | `2001` | -| `coordinator.pvcName` | string | Name of a [Persistent Volume Claim](https://kubernetes.io/docs/concepts/storage/persistent-volumes/) to use for the Coordinator's state. Leave empty to create a new one using the configured StorageClass | +| `coordinator.pvcName` | string | Name of a [Persistent Volume Claim](https://kubernetes.io/docs/concepts/storage/persistent-volumes/) to use for the Coordinator's state. Leave empty to create a new one using the configured StorageClass | | | `coordinator.probes` | object | Configuration for Kubernetes readiness, liveness, and startup probes. See the [Kubernetes docs](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) for more information on probes. | `{"probes":{"readiness":{"failureThreshold":7,"periodSeconds":60,"timeoutSeconds":15},"liveness":{"failureThreshold":3,"periodSeconds":60,"timeoutSeconds":15},"startup":{"failureThreshold":3,"periodSeconds":2,"timeoutSeconds":15}}}` | | `coordinator.replicas` | int | Number of replicas for each control plane pod | `1` | | `coordinator.repository` | string | Name of the container registry to pull the coordinator image from | `"ghcr.io/edgelesssys/marblerun"` | | `coordinator.sealDir` | string | Path to the directory used for sealing data. Needs to be consistent with the persisten storage setup | `"/coordinator/data/"` | | `coordinator.simulation` | bool | SGX simulation settings, set to `true` if your not running on an SGX capable cluster | `false` | -| `coordinator.storageClass` | string | Kubernetes [StorageClass](https://kubernetes.io/docs/concepts/storage/storage-classes/) to use for creating the Coordinator PVC. Leave empty to use the default StorageClass | -| `coordinator.version` | string | Version of the coordinator container image to pull | `"v1.4.0"` | +| `coordinator.storageClass` | string | Kubernetes [StorageClass](https://kubernetes.io/docs/concepts/storage/storage-classes/) to use for creating the Coordinator PVC. Leave empty to use the default StorageClass | | +| `coordinator.version` | string | Version of the coordinator container image to pull | `"v1.4.1"` | | `global.coordinatorComponentLabel` | string | Control plane label. Do not edit | `"edgeless.systems/control-plane-component"` | | `global.coordinatorNamespaceLabel` | string | Control plane label. Do not edit | `"edgeless.systems/control-plane-ns"` | | `global.podAnnotations` | object | Additional annotations to add to all pods | `{}`| @@ -56,15 +56,15 @@ their default values. | `marbleInjector.start` | bool | Start the marbleInjector webhook | `false` | | `marbleInjector.replicas` | int | Replicas of the marbleInjector webhook | `1` | | `marbleInjector.repository` | string | Name of the container registry to pull the marbleInjector image from | `"ghcr.io/edgelesssys/marblerun"` | -| `marbleInjector.version` | string | Version of the marbleInjector container image to pull | `"v1.4.0"` | +| `marbleInjector.version` | string | Version of the marbleInjector container image to pull | `"v1.4.1"` | | `marbleInjector.useCertManager` | bool | Set to use cert-manager for certificate provisioning. Required when using standalone helm chart for installation | `false` | | `marbleInjector.objectSelector` | object | ObjectSelector to trigger marble-injector mutation, See the [K8S documentation](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-objectselector) for more information | `{matchExpressions:[{key:"marblerun/marbletype",operator:"Exists"}]}` | | `marbleInjector.namespaceSelector` | object | NamespaceSelector to trigger marble-injector mutation, See the [K8S documentation](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector) for more information | `{}` | | `nodeSelector` | object | NodeSelector section, See the [K8S documentation](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector) for more information | `{"beta.kubernetes.io/os": "linux"}` | | `tolerations` | object | Tolerations section, See the [K8S documentation](https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) for more information | `{key:"sgx.intel.com/epc",operator:"Exists",effect:"NoSchedule"}` | | `dcap.qpl` | string | SGX quote provider library (QPL) to use. Needs to be "intel" if the libsgx-dcap-default-qpl is to be used, otherwise az-dcap-client is used by default | `"azure"` | -| `dcap.pccsUrl` | string | URL of the PCCS. Only applicable if `dcap.qpl=intel` | `"https://localhost:8081/sgx/certification/v3/"` -| `dcap.useSecureCert` | string | Whether or not the TLS certificate of the PCCS should be verified | `"TRUE"` +| `dcap.pccsUrl` | string | URL of the PCCS. Only applicable if `dcap.qpl=intel` | `"https://localhost:8081/sgx/certification/v3/"` | +| `dcap.useSecureCert` | string | Whether or not the TLS certificate of the PCCS should be verified | `"TRUE"` | ## Add new version (maintainers) diff --git a/charts/values.yaml b/charts/values.yaml index dd31a6df..7a4cafba 100644 --- a/charts/values.yaml +++ b/charts/values.yaml @@ -29,7 +29,7 @@ marbleInjector: repository: ghcr.io/edgelesssys/marblerun image: marble-injector pullPolicy: IfNotPresent - version: v1.4.0 + version: v1.4.1 # Set to true to install the injection webhook start: false @@ -61,7 +61,7 @@ coordinator: repository: ghcr.io/edgelesssys/marblerun image: coordinator pullPolicy: IfNotPresent - version: v1.4.0 + version: v1.4.1 # Environment configuration for the coordinator control-plane # meshServerPort needs to be configured to the same port as in the data-plane marbles