REL-3426 Release SonarQube 9.9.8

.cirrus.star

@@ -1,4 +1,5 @@
-load("github.com/SonarSource/cirrus-modules@v2", "load_features")
+load("github.com/SonarSource/cirrus-modules@v3", "load_features")
+load("cirrus", "env", "fs", "yaml")
 
 def main(ctx):
     return load_features(ctx)

.cirrus.yaml

@@ -1,3 +1,8 @@
+env:
+### Shared variables
+  DOCKER_USERNAME: VAULT[development/kv/data/docker/sonardockerrw data.username]
+  DOCKER_PASSWORD: VAULT[development/kv/data/docker/sonardockerrw data.access_token_rwd]
+
 only_on_none_release_draft_template: &ONLY_ON_NONE_RELEASE_DRAFT_TEMPLATE
   only_if: $CIRRUS_PRERELEASE != "true"
 
@@ -9,7 +14,6 @@ docker_build_container_template: &CONTAINER_TEMPLATE
   builder_role: cirrus-builder
   builder_image: docker-builder-v*
   builder_instance_type: t2.small
-  builder_subnet_id: ${CIRRUS_AWS_SUBNET}
   region: eu-central-1
   namespace: default
   cpu: 1
@@ -23,6 +27,13 @@ container_template: &STD_CONTAINER_TEMPLATE
   cpu: 1
   memory: 1Gb
 
+vm_instance_template: &VM_TEMPLATE
+  image: docker-builder-v*
+  type: t2.xlarge
+  region: eu-central-1
+  cpu: 4
+  memory: 16Gb
+
 clone_script_template: &CLONE_SCRIPT_TEMPLATE
   clone_script: |
     if [ -z "$CIRRUS_PR" ]; then
@@ -37,29 +48,21 @@ clone_script_template: &CLONE_SCRIPT_TEMPLATE
 chart_testing_task:
   only_if: $CIRRUS_PRERELEASE != "true" && $CIRRUS_BRANCH != "master"
   timeout_in: 30m
-  eks_container:
-    <<: *CONTAINER_TEMPLATE
-    cpu: 2
-    memory: 4Gb
-    additional_containers:
-      - name: dockerdaemon
-        privileged: true
-        cpu: 4
-        memory: 16Gb
-        image: docker:20-dind
-        port: 2375
-        env:
-          DOCKER_DRIVER: overlay2
-          DOCKER_TLS_CERTDIR: ""
+  ec2_instance:
+    <<: *VM_TEMPLATE
   <<: *CLONE_SCRIPT_TEMPLATE
-  start_kind_background_script:
-    - export DOCKER_HOST=tcp://localhost:2375
+  setup_script:
+    - ./.cirrus/setup_kind_vm.sh
     - kind create cluster
-  wait_for_kind_script:
-    - secs=3600; endTime=$(( $(date +%s) + secs )); while [[ -n "$(kubectl cluster-info --context kind-kind 2>&1 > /dev/null)" ]] || [ $(date +%s) -gt $endTime ]; do sleep 5; done
+    - kubectl cluster-info --context kind-kind
+    - kubectl get nodes
+    - kubectl create namespace test --dry-run=client -o yaml | kubectl apply -f -
+    - kubectl create secret docker-registry pullsecret --namespace test --docker-username=${DOCKER_USERNAME} --docker-password=${DOCKER_PASSWORD} --dry-run=client -o yaml | kubectl apply -f -
   script:
     - ct lint --config test.yaml --all
-    - ct install --config test.yaml --all
+    - ct install --namespace test --config test.yaml --all --debug
+  teardown_script:
+    - kind delete cluster
   artifacthub_lint_script:
     - ah lint
 

.cirrus/setup_kind_vm.sh

@@ -0,0 +1,75 @@
+#!/bin/bash
+
+set -euo pipefail
+
+export DEBIAN_FRONTEND=noninteractive
+
+apt-get update -y
+
+# Install docker
+apt-get install -y docker-ce docker-ce-cli containerd.io
+systemctl start docker
+systemctl enable docker
+
+# Install chart-testing
+YAMLLINT_VERSION=1.35.1
+YAMALE_VERSION=5.2.1
+CHART_TESTING_VERSION=3.11.0
+CHART_TESTING_HASHSUM="38914f285ce309f86a876522640a27b57840a435d3480195f0878e104f1e8044"
+curl -LO https://github.com/helm/chart-testing/releases/download/v${CHART_TESTING_VERSION}/chart-testing_${CHART_TESTING_VERSION}_linux_amd64.tar.gz
+echo "${CHART_TESTING_HASHSUM}  chart-testing_${CHART_TESTING_VERSION}_linux_amd64.tar.gz" | sha256sum -c
+tar -xf chart-testing_${CHART_TESTING_VERSION}_linux_amd64.tar.gz
+chmod +x ./ct
+mkdir -p /etc/ct
+mv etc/chart_schema.yaml /etc/ct/chart_schema.yaml
+mv etc/lintconf.yaml /etc/ct/lintconf.yaml
+mv ./ct /usr/bin/ct
+rm chart-testing_${CHART_TESTING_VERSION}_linux_amd64.tar.gz
+pip install "yamllint==${YAMLLINT_VERSION}"
+pip install "yamale==${YAMALE_VERSION}"
+
+# Install kubectl
+KUBECTL_VERSION=1.31.0
+curl -LO https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl
+curl -LO https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256
+printf %s "  kubectl" >> kubectl.sha256
+sha256sum -c kubectl.sha256
+chmod +x ./kubectl
+mv ./kubectl /usr/bin/kubectl
+rm kubectl.sha256
+
+# Install helm
+HELM_VERSION=3.16.1
+HELM_CHECKSUM="e57e826410269d72be3113333dbfaac0d8dfdd1b0cc4e9cb08bdf97722731ca9"
+curl -LO https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz
+echo "${HELM_CHECKSUM}  helm-v${HELM_VERSION}-linux-amd64.tar.gz" | sha256sum -c
+tar -xf helm-v${HELM_VERSION}-linux-amd64.tar.gz
+chmod +x ./linux-amd64/helm
+mv ./linux-amd64/helm /usr/bin/helm
+rm -rf ./linux-amd64
+rm helm-v${HELM_VERSION}-linux-amd64.tar.gz
+
+# Install kind
+KIND_VERSION=0.24.0
+KIND_CHECKSUM="b89aada5a39d620da3fcd16435b7f28d858927dd53f92cbac77686b0588b600d"
+curl -LO https://kind.sigs.k8s.io/dl/v${KIND_VERSION}/kind-linux-amd64
+echo "${KIND_CHECKSUM}  kind-linux-amd64" | sha256sum -c
+chmod +x ./kind-linux-amd64
+mv ./kind-linux-amd64 /usr/local/bin/kind
+
+# Install artifacthub lint
+AH_VERSION=1.19.0
+AH_CHECKSUM="0e430493521ce387ca04d79b26646a86f92886dbcceb44985bb71082a9530ca5"
+curl -LO https://github.com/artifacthub/hub/releases/download/v${AH_VERSION}/ah_${AH_VERSION}_linux_amd64.tar.gz
+echo "${AH_CHECKSUM}  ah_${AH_VERSION}_linux_amd64.tar.gz" | sha256sum -c
+tar -xf ah_${AH_VERSION}_linux_amd64.tar.gz
+chmod +x ./ah
+mv ./ah /usr/bin/ah
+rm LICENSE
+rm -rf ah_${AH_VERSION}_linux_amd64.tar.gz
+
+docker --version
+ct version
+kubectl version --client
+helm version
+kind version

charts/sonarqube-dce/CHANGELOG.md

@@ -1,6 +1,9 @@
 # SonarQube Chart Changelog
 All changes to this chart will be documented in this file.
 
+## [7.0.8]
+* Update SonarQube to 9.9.8
+
 ## [7.0.7]
 * Update SonarQube to 9.9.7
 

charts/sonarqube-dce/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: sonarqube-dce
 description: SonarQube offers Code Quality and Code Security analysis for up to 27 languages. Find Bugs, Vulnerabilities, Security Hotspots and Code Smells throughout your workflow.
 type: application
-version: 7.0.7
-appVersion: 9.9.7
+version: 7.0.8
+appVersion: 9.9.8
 keywords:
   - coverage
   - security
@@ -16,8 +16,6 @@ sources:
   - https://github.com/SonarSource/sonarqube
 kubeVersion: '>= 1.19.0-0'
 maintainers:
-  - name: leo-geoffroy-sonarsource
-    email: [email protected]
   - name: carminevassallo
     email: [email protected]
   - name: jCOTINEAU
@@ -27,7 +25,7 @@ maintainers:
 annotations:
   artifacthub.io/changes: |
     - kind: changed
-      description: "Update SonarQube to 9.9.7"
+      description: "Update SonarQube to 9.9.8"
   artifacthub.io/links: |
     - name: support
       url: https://community.sonarsource.com/
@@ -36,9 +34,9 @@ annotations:
   artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/images: |
     - name: sonarqube-app
-      image: sonarqube:9.9.7-datacenter-app
+      image: sonarqube:9.9.8-datacenter-app
     - name: sonarqube-search
-      image: sonarqube:9.9.7-datacenter-search
+      image: sonarqube:9.9.8-datacenter-search
 dependencies:
   - name: postgresql
     version: 10.15.0

charts/sonarqube-dce/OWNERS

@@ -1,10 +1,8 @@
 approvers:
-- leo-geoffroy-sonarsource
-- pierre-guillot-sonarsource
 - carminevassallo
+- davi.koscianski-vidal
 - jCOTINEAU
 reviewers:
-- leo-geoffroy-sonarsource
-- pierre-guillot-sonarsource
 - carminevassallo
+- davi.koscianski-vidal
 - jCOTINEAU

charts/sonarqube-dce/README.md

@@ -14,7 +14,7 @@ Please note that this chart does NOT support SonarQube Community, Developer, and
 
 ## Compatibility
 
-Compatible SonarQube Version: `9.9.7`
+Compatible SonarQube Version: `9.9.8`
 
 Supported Kubernetes Versions: From `1.23` to `1.26`
 
@@ -133,7 +133,7 @@ The following table lists the configurable parameters of the SonarQube chart and
 | Parameter | Description | Default                   |
 | --------- | ----------- |---------------------------|
 | `searchNodes.image.repository` | search image repository | `sonarqube`               |
-| `searchNodes.image.tag` | search image tag | `9.9.7-datacenter-search` |
+| `searchNodes.image.tag` | search image tag | `9.9.8-datacenter-search` |
 | `searchNodes.image.pullPolicy` | search image pull policy | `IfNotPresent`            |
 | `searchNodes.image.pullSecret` | (DEPRECATED) search imagePullSecret to use for private repository | `nil`                     |
 | `searchNodes.image.pullSecrets` | search imagePullSecrets to use for private repository | `nil`                     |
@@ -176,7 +176,7 @@ The following table lists the configurable parameters of the SonarQube chart and
 | Parameter | Description | Default                |
 | --------- | ----------- |------------------------|
 | `ApplicationNodes.image.repository` | app image repository | `sonarqube`            |
-| `ApplicationNodes.image.tag` | app image tag | `9.9.7-datacenter-app` |
+| `ApplicationNodes.image.tag` | app image tag | `9.9.8-datacenter-app` |
 | `ApplicationNodes.image.pullPolicy` | app image pull policy | `IfNotPresent`         |
 | `ApplicationNodes.image.pullSecret` | (DEPRECATED) app imagePullSecret to use for private repository | `nil`                  |
 | `ApplicationNodes.image.pullSecrets` | app imagePullSecrets to use for private repository | `nil`                  |

charts/sonarqube-dce/values.yaml

@@ -5,7 +5,7 @@
 searchNodes:
   image:
     repository: sonarqube
-    tag: 9.9.7-datacenter-search
+    tag: 9.9.8-datacenter-search
     pullPolicy: IfNotPresent
     # If using a private repository, the imagePullSecrets to use
     # pullSecrets:
@@ -113,7 +113,7 @@ searchNodes:
 ApplicationNodes:
   image:
     repository: sonarqube
-    tag: 9.9.7-datacenter-app
+    tag: 9.9.8-datacenter-app
     pullPolicy: IfNotPresent
     # If using a private repository, the imagePullSecrets to use
     # pullSecrets:

charts/sonarqube/CHANGELOG.md

@@ -1,6 +1,9 @@
 # SonarQube Chart Changelog
 All changes to this chart will be documented in this file.
 
+## [8.0.8]
+* Update SonarQube to 9.9.8
+
 ## [8.0.7]
 * Update SonarQube to 9.9.7
 

charts/sonarqube/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: sonarqube
 description: SonarQube offers Code Quality and Code Security analysis for up to 27 languages. Find Bugs, Vulnerabilities, Security Hotspots and Code Smells throughout your workflow.
 type: application
-version: 8.0.7
-appVersion: 9.9.7
+version: 8.0.8
+appVersion: 9.9.8
 keywords:
   - coverage
   - security
@@ -16,8 +16,6 @@ sources:
   - https://github.com/SonarSource/sonarqube
 kubeVersion: '>= 1.19.0-0'
 maintainers:
-  - name: leo-geoffroy-sonarsource
-    email: [email protected]
   - name: carminevassallo
     email: [email protected]
   - name: jCOTINEAU
@@ -32,11 +30,11 @@ annotations:
       url: https://github.com/SonarSource/helm-chart-sonarqube/tree/master/charts/sonarqube
   artifacthub.io/changes: |
     - kind: changed
-      description: "Update SonarQube to 9.9.7"
+      description: "Update SonarQube to 9.9.8"
   artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/images: |
     - name: sonarqube
-      image: sonarqube:9.9.7-community
+      image: sonarqube:9.9.8-community
 dependencies:
   - name: postgresql
     version: 10.15.0

charts/sonarqube/OWNERS

@@ -1,10 +1,8 @@
 approvers:
-- leo-geoffroy-sonarsource
-- pierre-guillot-sonarsource
 - carminevassallo
+- davi.koscianski-vidal
 - jCOTINEAU
 reviewers:
-- leo-geoffroy-sonarsource
-- pierre-guillot-sonarsource
 - carminevassallo
+- davi.koscianski-vidal
 - jCOTINEAU

charts/sonarqube/README.md

@@ -14,7 +14,7 @@ Please note that this chart only supports SonarQube Community, Developer, and En
 
 ## Compatibility
 
-Compatible SonarQube Version: `9.9.7`
+Compatible SonarQube Version: `9.9.8`
 
 Supported Kubernetes Versions: From `1.23` to `1.26`
 
@@ -172,7 +172,7 @@ The following table lists the configurable parameters of the SonarQube chart and
 | Parameter | Description | Default                       |
 | --------- | ----------- |-------------------------------|
 | `image.repository` | image repository | `sonarqube`                   |
-| `image.tag` | `sonarqube` image tag. | `9.9.7-{{ .Values.edition }}` |
+| `image.tag` | `sonarqube` image tag. | `9.9.8-{{ .Values.edition }}` |
 | `image.pullPolicy` | Image pull policy  | `IfNotPresent`                |
 | `image.pullSecret` | (DEPRECATED) imagePullSecret to use for private repository | `None`                        |
 | `image.pullSecrets` | imagePullSecrets to use for private repository | `None`                        |

charts/sonarqube/values.yaml

@@ -27,7 +27,7 @@ edition: "community"
 
 image:
   repository: sonarqube
-  tag: 9.9.7-{{ .Values.edition }}
+  tag: 9.9.8-{{ .Values.edition }}
   pullPolicy: IfNotPresent
   # If using a private repository, the imagePullSecrets to use
   # pullSecrets: