bump versions

README.md

@@ -26,7 +26,7 @@ Deploy Kubernetes in Kubernetes using Helm
 
 ```bash
 helm repo add kvaps https://kvaps.github.io/charts
-helm install foo kvaps/kubernetes --version 0.12.0 \
+helm install foo kvaps/kubernetes --version 0.13.0 \
   --namespace foo \
   --create-namespace \
   --set persistence.storageClassName=local-path

build/tools/Dockerfile

@@ -1,7 +1,7 @@
 FROM docker.io/library/alpine:3.12
 
 RUN apk add --no-cache openssl
-ARG VERSION=v1.21.3
+ARG VERSION=v1.22.0
 RUN wget "https://storage.googleapis.com/kubernetes-release/release/${VERSION}/bin/linux/amd64/kubectl" \
       -O /usr/local/bin/kubectl \
  && chmod +x /usr/local/bin/kubectl

deploy/helm/kubernetes/Chart.yaml

@@ -1,7 +1,7 @@
 name: kubernetes
 description: Production-Grade Container Scheduling and Management
-version: 0.12.0
-appVersion: 1.21.3
+version: 0.13.0
+appVersion: 1.22.0
 icon: https://upload.wikimedia.org/wikipedia/commons/thumb/3/39/Kubernetes_logo_without_workmark.svg/723px-Kubernetes_logo_without_workmark.svg.png
 keywords:
   - kubernetes

deploy/helm/kubernetes/manifests/konnectivity-agent-deployment.yaml

@@ -40,6 +40,9 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       hostNetwork: {{ .Values.konnectivityAgent.hostNetwork }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       priorityClassName: system-cluster-critical
       tolerations:
       - key: "CriticalAddonsOnly"

deploy/helm/kubernetes/scripts/configure-cluster.sh

@@ -21,8 +21,6 @@ export KUBECONFIG=/etc/kubernetes/admin.conf
 # upload configuration
 # TODO: https://github.com/kvaps/kubernetes-in-kubernetes/issues/6
 kubeadm init phase upload-config kubeadm --config /config/kubeadmcfg.yaml
-kubectl patch configmap -n kube-system kubeadm-config \
-  -p '{"data":{"ClusterStatus":"apiEndpoints: {}\napiVersion: kubeadm.k8s.io/v1beta2\nkind: ClusterStatus"}}'
 
 # upload configuration
 # TODO: https://github.com/kvaps/kubernetes-in-kubernetes/issues/5

deploy/helm/kubernetes/templates/admin-deployment.yaml

@@ -113,6 +113,9 @@ spec:
       {{- with .Values.admin.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - configMap:
           name: "{{ $fullName }}-admin-conf"

deploy/helm/kubernetes/templates/apiserver-deployment.yaml

@@ -164,6 +164,9 @@ spec:
       {{- with .Values.apiServer.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - configMap:
           name: "{{ $fullName }}-apiserver-config"

deploy/helm/kubernetes/templates/controller-manager-deployment.yaml

@@ -129,6 +129,9 @@ spec:
       {{- with .Values.controllerManager.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - configMap:
           name: "{{ $fullName }}-controller-manager-conf"

deploy/helm/kubernetes/templates/etcd-backup-cronjob.yaml

@@ -127,6 +127,9 @@ spec:
           {{- with .Values.etcd.backup.sidecars }}
           {{- toYaml . | nindent 10 }}
           {{- end }}
+          securityContext:
+            seccompProfile:
+              type: RuntimeDefault
           volumes:
           - secret:
               secretName: {{ $fullName }}-pki-etcd-ca

deploy/helm/kubernetes/templates/etcd-statefulset.yaml

@@ -150,6 +150,9 @@ spec:
       {{- with .Values.etcd.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - secret:
           secretName: {{ $fullName }}-pki-etcd-ca

deploy/helm/kubernetes/templates/konnectivity-server-deployment.yaml

@@ -72,5 +72,8 @@ spec:
       {{- with .Values.konnectivityServer.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       {{ template "kubernetes.konnectivityServer.volumes" . }}
 {{- end }}

deploy/helm/kubernetes/templates/scheduler-deployment.yaml

@@ -114,6 +114,9 @@ spec:
       {{- with .Values.scheduler.sidecars }}
       {{- toYaml . | nindent 6 }}
       {{- end }}
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       volumes:
       - configMap:
           name: "{{ $fullName }}-scheduler-conf"

deploy/helm/kubernetes/values.yaml

@@ -25,7 +25,7 @@ etcd:
   enabled: true
   image:
     repository: k8s.gcr.io/etcd
-    tag: 3.4.13-3
+    tag: 3.5.0-0
     pullPolicy: IfNotPresent
     pullSecrets: []
   replicaCount: 3
@@ -106,7 +106,7 @@ apiServer:
   enabled: true
   image:
     repository: k8s.gcr.io/kube-apiserver
-    tag: v1.21.3
+    tag: v1.22.0
     pullPolicy: IfNotPresent
     pullSecrets: []
   replicaCount: 2
@@ -155,7 +155,7 @@ controllerManager:
   enabled: true
   image:
     repository: k8s.gcr.io/kube-controller-manager
-    tag: v1.21.3
+    tag: v1.22.0
     pullPolicy: IfNotPresent
     pullSecrets: []
   replicaCount: 2
@@ -195,7 +195,7 @@ scheduler:
   enabled: true
   image:
     repository: k8s.gcr.io/kube-scheduler
-    tag: v1.21.3
+    tag: v1.22.0
     pullPolicy: IfNotPresent
     pullSecrets: []
   replicaCount: 2
@@ -235,7 +235,7 @@ admin:
   enabled: true
   image:
     repository: ghcr.io/kvaps/kubernetes-tools
-    tag: v0.12.0
+    tag: v0.13.0
     pullPolicy: IfNotPresent
     pullSecrets: []
   replicaCount: 1
@@ -294,7 +294,7 @@ konnectivityServer:
   mode: GRPC
   image:
     repository: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-server
-    tag: v0.0.21
+    tag: v0.0.22
     pullPolicy: IfNotPresent
     pullSecrets: []
   replicaCount: 2
@@ -345,7 +345,7 @@ konnectivityAgent:
   enabled: false
   image:
     repository: us.gcr.io/k8s-artifacts-prod/kas-network-proxy/proxy-agent
-    tag: v0.0.21
+    tag: v0.0.22
     pullPolicy: IfNotPresent
     pullSecrets: []
   replicaCount: 2