Merge branch 'main' into update-osp-dev-stage

gbenhaim · web-flow · commit 0bddac8beb6d · 2025-08-13T12:59:04.000+03:00
diff --git a/components/authentication/base/konflux-admins.yaml b/components/authentication/base/konflux-admins.yaml
@@ -1,5 +1,5 @@
-kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
 metadata:
   name: konflux-admins
 rules:
@@ -325,8 +325,13 @@ rules:
     resources:
       - customresourcedefinitions
     verbs:
-      - list
+      - create
       - get
+      - list
+      - watch
+      - patch
+      - update
+      - delete
   - apiGroups:
       - kyverno.io
     resources:
@@ -354,11 +359,11 @@ rules:
     verbs:
       - '*'
   - apiGroups:
-    - kueue.x-k8s.io
+      - kueue.x-k8s.io
     resources:
-    - '*'
+      - '*'
     verbs:
-    - '*'
+      - '*'
   - apiGroups:
       - flowcontrol.apiserver.k8s.io
     resources:
@@ -368,6 +373,24 @@ rules:
       - get
       - list
       - watch
+  - apiGroups:
+      - project.openshift.io
+    resources:
+      - '*'
+    verbs:
+      - '*'
+  - apiGroups:
+      - admissionregistration.k8s.io
+    resources:
+      - validatingwebhookconfigurations
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+      - patch
+      - update
+      - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
diff --git a/components/kubearchive/production/kflux-ocp-p01/kustomization.yaml b/components/kubearchive/production/kflux-ocp-p01/kustomization.yaml
@@ -4,7 +4,7 @@ kind: Kustomization
 resources:
   - ../../base
   - ../base
-  - https://github.com/kubearchive/kubearchive/releases/download/v1.2.0/kubearchive.yaml?timeout=90
+  - https://github.com/kubearchive/kubearchive/releases/download/v1.5.0/kubearchive.yaml?timeout=90
 
 namespace: product-kubearchive
 
@@ -21,7 +21,7 @@ patches:
               - name: migration
                 env:
                   - name: KUBEARCHIVE_VERSION
-                    value: v1.2.0
+                    value: v1.5.0
   # We don't need the Secret as it will be created by the ExternalSecrets Operator
   - patch: |-
       $patch: delete
diff --git a/components/kubearchive/production/kflux-prd-rh03/kustomization.yaml b/components/kubearchive/production/kflux-prd-rh03/kustomization.yaml
@@ -4,7 +4,7 @@ kind: Kustomization
 resources:
   - ../../base
   - ../base
-  - https://github.com/kubearchive/kubearchive/releases/download/v1.2.0/kubearchive.yaml?timeout=90
+  - https://github.com/kubearchive/kubearchive/releases/download/v1.5.0/kubearchive.yaml?timeout=90
 
 namespace: product-kubearchive
 
@@ -21,7 +21,7 @@ patches:
               - name: migration
                 env:
                   - name: KUBEARCHIVE_VERSION
-                    value: v1.2.0
+                    value: v1.5.0
   # We don't need the Secret as it will be created by the ExternalSecrets Operator
   - patch: |-
       $patch: delete
diff --git a/components/kubearchive/production/kflux-rhel-p01/kustomization.yaml b/components/kubearchive/production/kflux-rhel-p01/kustomization.yaml
@@ -4,7 +4,7 @@ kind: Kustomization
 resources:
   - ../../base
   - ../base
-  - https://github.com/kubearchive/kubearchive/releases/download/v1.3.0/kubearchive.yaml?timeout=90
+  - https://github.com/kubearchive/kubearchive/releases/download/v1.5.0/kubearchive.yaml?timeout=90
 
 namespace: product-kubearchive
 
@@ -21,7 +21,7 @@ patches:
               - name: migration
                 env:
                   - name: KUBEARCHIVE_VERSION
-                    value: v1.3.0
+                    value: v1.5.0
   # We don't need the Secret as it will be created by the ExternalSecrets Operator
   - patch: |-
       $patch: delete
diff --git a/components/kubearchive/production/stone-prod-p02/kustomization.yaml b/components/kubearchive/production/stone-prod-p02/kustomization.yaml
@@ -4,7 +4,7 @@ kind: Kustomization
 resources:
   - ../../base
   - ../base
-  - https://github.com/kubearchive/kubearchive/releases/download/v1.3.0/kubearchive.yaml?timeout=90
+  - https://github.com/kubearchive/kubearchive/releases/download/v1.5.0/kubearchive.yaml?timeout=90
 
 namespace: product-kubearchive
 
@@ -21,7 +21,7 @@ patches:
               - name: migration
                 env:
                   - name: KUBEARCHIVE_VERSION
-                    value: v1.3.0
+                    value: v1.5.0
   # We don't need the Secret as it will be created by the ExternalSecrets Operator
   - patch: |-
       $patch: delete
diff --git a/components/mintmaker/development/kustomization.yaml b/components/mintmaker/development/kustomization.yaml
@@ -2,13 +2,13 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ../base
-  - https://github.com/konflux-ci/mintmaker/config/default?ref=5f632ab7a9aabdff16092cc05127995c37c81d94
-  - https://github.com/konflux-ci/mintmaker/config/renovate?ref=5f632ab7a9aabdff16092cc05127995c37c81d94
+  - https://github.com/konflux-ci/mintmaker/config/default?ref=94c684759d5f3fae276d0b1079640065d6856486
+  - https://github.com/konflux-ci/mintmaker/config/renovate?ref=94c684759d5f3fae276d0b1079640065d6856486
 
 images:
   - name: quay.io/konflux-ci/mintmaker
     newName: quay.io/konflux-ci/mintmaker
-    newTag: 5f632ab7a9aabdff16092cc05127995c37c81d94
+    newTag: 94c684759d5f3fae276d0b1079640065d6856486
 
 namespace: mintmaker
 
diff --git a/components/mintmaker/staging/base/kustomization.yaml b/components/mintmaker/staging/base/kustomization.yaml
@@ -3,15 +3,15 @@ kind: Kustomization
 resources:
 - ../../base
 - ../../base/external-secrets
-- https://github.com/konflux-ci/mintmaker/config/default?ref=5f632ab7a9aabdff16092cc05127995c37c81d94
-- https://github.com/konflux-ci/mintmaker/config/renovate?ref=5f632ab7a9aabdff16092cc05127995c37c81d94
+- https://github.com/konflux-ci/mintmaker/config/default?ref=94c684759d5f3fae276d0b1079640065d6856486
+- https://github.com/konflux-ci/mintmaker/config/renovate?ref=94c684759d5f3fae276d0b1079640065d6856486
 
 namespace: mintmaker
 
 images:
 - name: quay.io/konflux-ci/mintmaker
   newName: quay.io/konflux-ci/mintmaker
-  newTag: 5f632ab7a9aabdff16092cc05127995c37c81d94
+  newTag: 94c684759d5f3fae276d0b1079640065d6856486
 - name: quay.io/konflux-ci/mintmaker-renovate-image
   newName: quay.io/konflux-ci/mintmaker-renovate-image
   newTag: eebfc799ae059998dfbc1588ed44cc81a920a8ad
diff --git a/components/mintmaker/staging/base/manager_patch.yaml b/components/mintmaker/staging/base/manager_patch.yaml
@@ -8,10 +8,18 @@ spec:
     spec:
       containers:
       - name: manager
+        args:
+        - --metrics-bind-address=:8080
+        - --health-probe-bind-address=:8081
+        - --metrics-secure=false
+        - --pprof-bind-address=:6060
         resources:
           limits:
             cpu: 500m
             memory: 2048Mi
           requests:
             cpu: 100m
             memory: 256Mi
+        env:
+        - name: ENABLE_PROFILING
+          value: "true"
diff --git a/components/pipeline-service/staging/base/main-pipeline-service-configuration.yaml b/components/pipeline-service/staging/base/main-pipeline-service-configuration.yaml
@@ -2002,7 +2002,7 @@ spec:
           deployments:
             pipelines-as-code-watcher:
               spec:
-                replicas: 1
+                replicas: 2
             pipelines-as-code-webhook:
               spec:
                 replicas: 2
diff --git a/components/pipeline-service/staging/stone-stage-p01/deploy.yaml b/components/pipeline-service/staging/stone-stage-p01/deploy.yaml
@@ -2585,7 +2585,7 @@ spec:
           deployments:
             pipelines-as-code-watcher:
               spec:
-                replicas: 1
+                replicas: 2
             pipelines-as-code-webhook:
               spec:
                 replicas: 2
diff --git a/components/pipeline-service/staging/stone-stg-rh01/deploy.yaml b/components/pipeline-service/staging/stone-stg-rh01/deploy.yaml
@@ -2597,7 +2597,7 @@ spec:
           deployments:
             pipelines-as-code-watcher:
               spec:
-                replicas: 1
+                replicas: 2
             pipelines-as-code-webhook:
               spec:
                 replicas: 2
