Chart Update [main]

config/rbac/role.yaml

@@ -1822,6 +1822,7 @@ rules:
   - metal3remediations
   - rosamachinepools
   - rosanetworks
+  - rosaocmroleconfigs
   - rosaroleconfigs
   verbs:
   - create
@@ -1841,6 +1842,7 @@ rules:
   - azureasomanagedmachinepools/finalizers
   - rosamachinepools/finalizers
   - rosanetworks/finalizers
+  - rosaocmroleconfigs/finalizers
   - rosaroleconfigs/finalizers
   verbs:
   - update
@@ -1870,6 +1872,7 @@ rules:
   - metal3remediations/status
   - rosaclusters/status
   - rosanetworks/status
+  - rosaocmroleconfigs/status
   - rosaroleconfigs/status
   verbs:
   - get

pkg/templates/charts/toggle/cluster-api-k8s/values.yaml

@@ -3,11 +3,11 @@ global:
   imageOverrides:
     ose_cluster_api_rhel9: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api-provider-aws/templates/capa-controller-manager-deployment.yaml

@@ -44,7 +44,7 @@ spec:
       containers:
       - args:
         - --leader-elect
-        - --feature-gates=EKS=true,EKSEnableIAM=true,EKSAllowAddRoles=true,EKSFargate=true,MachinePool=true,MachinePoolMachines=true,EventBridgeInstanceState=false,AutoControllerIdentityCreator=true,BootstrapFormatIgnition=false,ExternalResourceGC=true,AlternativeGCStrategy=false,TagUnmanagedNetworkResources=true,ROSA=true
+        - --feature-gates=EKS=true,EKSEnableIAM=true,EKSAllowAddRoles=true,EKSFargate=true,MachinePool=true,MachinePoolMachines=true,EventBridgeInstanceState=false,AutoControllerIdentityCreator=false,BootstrapFormatIgnition=false,ExternalResourceGC=true,AlternativeGCStrategy=false,TagUnmanagedNetworkResources=true,ROSA=true
         - --v=0
         - --diagnostics-address=:8443
         - --insecure-diagnostics=false

pkg/templates/charts/toggle/cluster-api-provider-aws/templates/capa-manager-role-clusterrole.yaml

@@ -104,6 +104,16 @@ rules:
   - cluster.x-k8s.io
   resources:
   - machinepools
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - watch
+- apiGroups:
+  - cluster.x-k8s.io
+  resources:
   - machinepools/status
   verbs:
   - create
@@ -201,6 +211,7 @@ rules:
   - awsmachinetemplates/status
   - rosaclusters/status
   - rosanetworks/status
+  - rosaocmroleconfigs/status
   - rosaroleconfigs/status
   verbs:
   - get
@@ -232,6 +243,7 @@ rules:
   - awsmachines
   - rosamachinepools
   - rosanetworks
+  - rosaocmroleconfigs
   - rosaroleconfigs
   verbs:
   - create
@@ -246,6 +258,7 @@ rules:
   resources:
   - rosamachinepools/finalizers
   - rosanetworks/finalizers
+  - rosaocmroleconfigs/finalizers
   - rosaroleconfigs/finalizers
   verbs:
   - update

pkg/templates/charts/toggle/cluster-api-provider-aws/values.yaml

@@ -3,11 +3,11 @@ global:
   imageOverrides:
     cluster_api_provider_aws_rhel9: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api-provider-azure-k8s/values.yaml

@@ -4,11 +4,11 @@ global:
     azure_service_operator_rhel9: ''
     cluster_api_provider_azure_rhel9: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api-provider-azure/values.yaml

@@ -4,11 +4,11 @@ global:
     azure_service_operator_rhel9: ''
     cluster_api_provider_azure_rhel9: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api-provider-metal3-k8s/values.yaml

@@ -3,11 +3,11 @@ global:
   imageOverrides:
     ose_baremetal_cluster_api_controllers_rhel9: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api-provider-metal3/values.yaml

@@ -3,11 +3,11 @@ global:
   imageOverrides:
     ose_baremetal_cluster_api_controllers_rhel9: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api-provider-openshift-assisted-k8s/values.yaml

@@ -4,11 +4,11 @@ global:
     cluster_api_provider_openshift_assisted_bootstrap: ''
     cluster_api_provider_openshift_assisted_control_plane: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api-provider-openshift-assisted/values.yaml

@@ -4,11 +4,11 @@ global:
     cluster_api_provider_openshift_assisted_bootstrap: ''
     cluster_api_provider_openshift_assisted_control_plane: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/cluster-api/values.yaml

@@ -4,11 +4,11 @@ global:
     mce_capi_webhook_config_rhel9: ''
     ose_cluster_api_rhel9: ''
   namespace: default
+  networkPolicies:
+    enabled: true
   olmVersion: v0
   pullSecret: null
   templateOverrides: {}
-  networkPolicies:
-    enabled: true
 hubconfig:
   nodeSelector: null
   ocpVersion: 4.12.0

pkg/templates/charts/toggle/managed-serviceaccount/Chart.yaml

@@ -1,5 +1,9 @@
 apiVersion: v2
 appVersion: 1.0.0
+dependencies:
+- name: managed-serviceaccount-common
+  repository: file://../managed-serviceaccount-common
+  version: 0.1.0
 description: A Helm chart for Managed ServiceAccount Addon
 name: managed-serviceaccount
 type: application

pkg/templates/charts/toggle/managed-serviceaccount/templates/managed-serviceaccount-addontemplate.yaml

@@ -72,7 +72,36 @@ spec:
                   initialDelaySeconds: 2
                   periodSeconds: 10
                 name: addon-agent
+                ports:
+                - containerPort: 38080
+                  name: metrics
+                  protocol: TCP
+                securityContext:
+                  allowPrivilegeEscalation: false
+                  capabilities:
+                    drop:
+                    - ALL
+                  readOnlyRootFilesystem: true
+              securityContext:
+                runAsNonRoot: true
+                seccompProfile:
+                  type: RuntimeDefault
               serviceAccount: managed-serviceaccount
+      - apiVersion: v1
+        kind: Service
+        metadata:
+          labels:
+            addon-agent: managed-serviceaccount
+          name: managed-serviceaccount-addon-agent
+          namespace: open-cluster-management-agent-addon
+        spec:
+          ports:
+          - name: metrics
+            port: 38080
+            protocol: TCP
+            targetPort: metrics
+          selector:
+            addon-agent: managed-serviceaccount
       - apiVersion: rbac.authorization.k8s.io/v1
         kind: Role
         metadata:

pkg/templates/charts/toggle/managed-serviceaccount/values.yaml

@@ -3,9 +3,9 @@ global:
   imageOverrides:
     managed_serviceaccount: ''
   namespace: default
-  olmVersion: v0
   networkPolicies:
     enabled: true
+  olmVersion: v0
   pullSecret: null
   templateOverrides: {}
 hubconfig:

pkg/templates/crds/cluster-api-provider-aws/apiextensions.k8s.io_v1_customresourcedefinition_awsmachinepools.infrastructure.cluster.x-k8s.io.yaml

@@ -666,6 +666,14 @@ spec:
                       "None": The instance may not make use of any Capacity Reservations. This is to conserve open reservations for desired workloads
                       "CapacityReservationsOnly": The instance will only run if matched or targeted to a Capacity Reservation
                     type: string
+                  enclaveOptions:
+                    description: EnclaveOptions defines the options for Nitro Enclave
+                      support on the instance.
+                    properties:
+                      enabled:
+                        description: Enabled enables the instance for AWS Nitro Enclaves.
+                        type: boolean
+                    type: object
                   iamInstanceProfile:
                     description: |-
                       The name or the Amazon Resource Name (ARN) of the instance profile associated

pkg/templates/crds/cluster-api-provider-aws/apiextensions.k8s.io_v1_customresourcedefinition_awsmanagedclusters.infrastructure.cluster.x-k8s.io.yaml

@@ -74,9 +74,6 @@ spec:
                     description: port is the port on which the API server is serving.
                     format: int32
                     type: integer
-                required:
-                - host
-                - port
                 type: object
             type: object
           status:

pkg/templates/crds/cluster-api-provider-aws/apiextensions.k8s.io_v1_customresourcedefinition_awsmanagedclustertemplates.infrastructure.cluster.x-k8s.io.yaml

@@ -72,9 +72,6 @@ spec:
                               is serving.
                             format: int32
                             type: integer
-                        required:
-                        - host
-                        - port
                         type: object
                     type: object
                 required: