[dev-v2.14] Bump rancher-turtles to v0.26.0-rc.10

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/Chart.yaml

@@ -0,0 +1,25 @@
+annotations:
+  catalog.cattle.io/certified: rancher
+  catalog.cattle.io/display-name: Rancher Turtles
+  catalog.cattle.io/kube-version: '>= 1.33.0-0 < 1.36.0-0'
+  catalog.cattle.io/managed: "true"
+  catalog.cattle.io/namespace: cattle-turtles-system
+  catalog.cattle.io/os: linux
+  catalog.cattle.io/permits-os: linux
+  catalog.cattle.io/rancher-version: '>= 2.14.0-0 < 2.15.0-0'
+  catalog.cattle.io/release-name: rancher-turtles
+  catalog.cattle.io/scope: management
+  catalog.cattle.io/type: cluster-tool
+apiVersion: v2
+appVersion: 0.26.0-rc.10
+description: Rancher Turtles - Cluster API integration in Rancher.
+home: https://github.com/rancher/turtles/
+icon: file://assets/logos/rancher-turtles.svg
+keywords:
+- rancher
+- cluster-api
+- capi
+- provisioning
+name: rancher-turtles
+type: application
+version: 109.0.0+up0.26.0-rc.10

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/README.md

@@ -0,0 +1,5 @@
+# Rancher Turtles Chart
+
+This chart installs Rancher Turtles using Helm.
+
+Checkout the [documentation](https://turtles.docs.rancher.com) for further information.

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/RELEASE_NOTES.md

@@ -0,0 +1,99 @@
+🚨 This is a RELEASE CANDIDATE. Use it only for testing purposes. If you find any bugs, file an [issue](https://github.com/rancher/turtles/issues/new).
+<details>
+<summary>More details about the release</summary>
+
+:warning: **RELEASE CANDIDATE NOTES** :warning:
+## Highlights
+
+* REPLACE ME
+
+## Deprecation Warning
+
+REPLACE ME: A couple sentences describing the deprecation, including links to docs.
+
+* [GitHub issue #REPLACE ME](REPLACE ME)
+
+## Changes since v0.26.0-rc.9
+## :chart_with_upwards_trend: Overview
+- 63 new commits merged
+
+:book: Additionally, there has been 1 contribution to our documentation and book. (#2108) 
+
+## :question: Sort these by hand
+- API: Bump capi to v1.12.2 (#2079)
+- Build-and-release: Auto-derive target branches from turtles release branch (#2153)
+- Build-and-release: Bump actions/create-github-app-token from 2 to 3 (#2216)
+- Build-and-release: Bump actions/setup-go from 6.2.0 to 6.3.0 (#2170)
+- Build-and-release: Bump actions/upload-artifact from 6 to 7 (#2169)
+- Build-and-release: Bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 (#2117)
+- Build-and-release: Bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 (#2148)
+- Build-and-release: Bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 (#2188)
+- Build-and-release: Bump docker/login-action from 3 to 4 (#2185)
+- Build-and-release: Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#2186)
+- Build-and-release: Bump rancherlabs/slsactl from 0.1.17 to 0.1.18 (#2067)
+- Build-and-release: Bump rancherlabs/slsactl from 0.1.18 to 0.1.19 (#2116)
+- Build-and-release: Bump rancherlabs/slsactl from 0.1.19 to 0.1.21 (#2171)
+- Build-and-release: Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 (#2218)
+- Build-and-release: Verify chart asset is always present after release upload step (#2141)
+- Capa: Remove hostNetwork usage from AWS CSI chart (#2178)
+- Capi: Bump to capi v1.11.5 (#2044)
+- Capv: Update and fix vSphere CSI driver deployment (#2164)
+- Chart: Make turtles a Rancher managed chart (i.e. not user upgradeable) (#2107)
+- Chart: Update kubernetes versions in charts (#2105)
+- Chart: Update upper bound for rancher-version annotation (#2051)
+- CI: Bump e2e Rancher to v2.14.0-alpha3 (#2098)
+- CI: Bump Rancher to v2.14.0-alpha9 (#2194)
+- CI: Cleanup Rancher validation code (#2155)
+- CI: Ignore artifact collection errors (#2165)
+- CI: Remove v0.0.1-capi image load (#2112)
+- CI: Use load balancer configmap from examples for Docker/RKE2 tests (#2182)
+- ClusterClass/Capg: Use ClusterClass in e2e for GKE provisioning (#2177)
+- Dependency: Bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 in /test in the other-dependencies group across 1 directory (#2150)
+- Dependency: Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#2161)
+- Dependency: Bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 in /test (#2077)
+- Dependency: Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.0 in /test in the other-dependencies group (#2172)
+- Dependency: Bump go to 1.25.8 (#2195)
+- Dependency: Bump go.opentelemetry.io/otel/sdk from 1.36.0 to 1.40.0 (#2168)
+- Dependency: Bump golang.org/x/text from 0.33.0 to 0.34.0 in the other-dependencies group (#2115)
+- Dependency: Bump the other-dependencies group in /test with 2 updates (#2118)
+- Fleet/Providers: Bump CAAPF to v0.14.1 (#2196)
+- Fleet: Override default fleet-agent metrics and health bind addresses (#2173)
+- Import: Improve import controller deletion reconcile (#2062)
+- Installation: Increase turtles pod memory limits (#2082)
+- Operator: Bump cluster-api-operator to 0.26.0 (#2197)
+- Operator: Ignore cert-manager CRDs not found (#2128)
+- Operator: Reconcile wrangler cleanup earlier (#2110)
+- Providers/Security: Bump caprke2 to v0.24.1 (#2208)
+- Providers: Bump capa to v2.10.1 (#2151)
+- Providers: Bump capg to v1.11.1 (#2201)
+- Providers: Bump caprke2 to v0.23.1 (#2100)
+- Providers: Bump caprke2 to v0.23.2 (#2163)
+- Providers: Bump capv to v1.15.2 (#2089)
+- Providers: Switch to aso crds for aks provisioning (#2166)
+- Release: Move provider charts version setting as pre-requisites in the doc (#2139)
+- Security: Add new release branch format to codeql (#2058)
+- Security: Bump go to v1.24.13 (#2057)
+- Testing: Align capi operator test version (#2220)
+- Testing: Conditionally install providers (#2157)
+- Testing: Moving providers secrets creation to after installation of the providers chart (#2147)
+- Testing: Remove aso waiter (#2081)
+- Testing: Remove capi bump test (#2083)
+- Testing: Remove provider migration (#2127)
+- Testing: Remove switch from Turtles to embedded CAPI tests (#2136)
+- Testing: Update e2e tests to use Traefik instead of Nginx (#2134)
+- Testing: Update k8s version in testing cluster templates (#2090)
+
+## Dependencies
+
+### Added
+_Nothing has changed._
+
+### Changed
+_Nothing has changed._
+
+### Removed
+_Nothing has changed._
+
+</details>
+<br/>
+_Thanks to all our contributors!_ 😊

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/app-readme.md

@@ -0,0 +1,5 @@
+# Rancher Turtles
+
+Rancher Turtles brings enhanced integration of Cluster API with Rancher.
+
+For more information, including a getting started guide, see the [official documentation](https://turtles.docs.rancher.com).

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/questions.yml

@@ -0,0 +1,20 @@
+namespace: cattle-turtles-system
+questions:
+  - variable: cluster-api-operator.cleanup
+    default: true
+    description: "Specify that the CAPI Operator post-delete cleanup job will be performed."
+    type: boolean
+    label: Cleanup CAPI Operator installation
+    group: "CAPI Operator cleanup settings"
+  - variable: features.agent-tls-mode.enabled
+    default: true
+    description: "[BETA] If enabled Turtles will use the agent-tls-mode setting to determine CA cert trust mode for importing clusters."
+    type: boolean
+    label: Enable Agent TLS Mode
+    group: "Rancher Turtles Features Settings"
+  - variable: features.no-cert-manager.enabled
+    default: true
+    description: "[ALPHA] If enabled Turtles will remove cert-manager."
+    type: boolean
+    label: Remove cert-manager
+    group: "Rancher Turtles Features Settings"

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/templates/_helpers.tpl

@@ -0,0 +1,7 @@
+{{- define "system_default_registry" -}}
+{{- if .Values.global.cattle.systemDefaultRegistry -}}
+{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
+{{- else -}}
+{{- "" -}}
+{{- end -}}
+{{- end -}}

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/templates/clusterctl-cm-cleanup-job.yaml

@@ -0,0 +1,74 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: pre-upgrade-job
+  namespace: '{{ .Values.namespace }}'
+  annotations:
+    "helm.sh/hook": "post-delete, pre-upgrade"
+    "helm.sh/hook-weight": "-2"
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: pre-upgrade-job-delete-clusterctl-configmap
+  annotations:
+    "helm.sh/hook": "post-delete, pre-upgrade"
+    "helm.sh/hook-weight": "-2"
+rules:
+- apiGroups: [""]
+  resources:
+  - configmaps
+  verbs:
+  - list
+  - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: pre-upgrade-job-clusterctl-configmap-cleanup
+  annotations:
+    "helm.sh/hook": "post-delete, pre-upgrade"
+    "helm.sh/hook-weight": "-2"
+subjects:
+  - kind: ServiceAccount
+    name: pre-upgrade-job
+    namespace: '{{ .Values.namespace }}'
+roleRef:
+  kind: ClusterRole
+  name: pre-upgrade-job-delete-clusterctl-configmap
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: rancher-clusterctl-configmap-cleanup
+  namespace: '{{ .Values.namespace }}'
+  annotations:
+    "helm.sh/hook": "post-delete, pre-upgrade"
+    "helm.sh/hook-weight": "-1"
+spec:
+  ttlSecondsAfterFinished: 300
+  template:
+    spec:
+      serviceAccountName: pre-upgrade-job
+      containers:
+      - name: rancher-clusterctl-configmap-cleanup
+        image: '{{ template "system_default_registry" . }}{{ .Values.shellImage.image.repository }}:{{ .Values.shellImage.image.tag }}'
+        command: ["kubectl"]
+        args:
+        - delete
+        - configmap
+        - --namespace={{ .Values.namespace }}
+        - clusterctl-config
+        - --ignore-not-found=true
+        securityContext:
+          seccompProfile:
+            type: RuntimeDefault
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsNonRoot: true
+          runAsUser: 1000
+      restartPolicy: Never

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/templates/clusterctl-config.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: clusterctl-config
+  namespace: '{{ .Values.namespace }}'

charts/rancher-turtles/109.0.0+up0.26.0-rc.10/templates/core-provider.yaml

@@ -0,0 +1,76 @@
+{{- if index .Values "cluster-api-operator" "cluster-api" "enabled" }}
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ index .Values "cluster-api-operator" "cluster-api" "core" "namespace" }}
+---
+apiVersion: turtles-capi.cattle.io/v1alpha1
+kind: CAPIProvider
+metadata:
+  name: cluster-api
+  namespace: {{ index .Values "cluster-api-operator" "cluster-api" "core" "namespace" }}
+  annotations:
+    "helm.sh/hook": "post-install, post-upgrade"
+    "helm.sh/hook-weight": "2"
+spec:
+  name: cluster-api
+  type: core
+  enableAutomaticUpdate: {{ index .Values "cluster-api-operator" "cluster-api" "core" "enableAutomaticUpdate" }}
+{{- if index .Values "cluster-api-operator" "cluster-api" "core" "version" }}
+  version: {{ index .Values "cluster-api-operator" "cluster-api" "core" "version" }}
+{{- end }}
+  additionalManifests:
+    name: capi-additional-rbac-roles
+    namespace: {{ index .Values "cluster-api-operator" "cluster-api" "core" "namespace" }}
+  configSecret:
+{{- if index .Values "cluster-api-operator" "cluster-api" "configSecret" "name" }}
+    name: {{ index .Values "cluster-api-operator" "cluster-api" "configSecret" "name" }}
+{{ else }}
+    name: {{ index .Values "cluster-api-operator" "cluster-api" "configSecret" "defaultName" }}
+{{- end }}
+  fetchConfig:
+    {{- if index .Values "cluster-api-operator" "cluster-api" "core" "fetchConfig" "url" }}
+    url: {{ index .Values "cluster-api-operator" "cluster-api" "core" "fetchConfig" "url" }}
+    {{- else if index .Values "cluster-api-operator" "cluster-api" "core" "fetchConfig" "selector" }}
+    selector: {{ index .Values "cluster-api-operator" "cluster-api" "core" "fetchConfig" "selector" | toYaml | nindent 6 }}
+    {{- end }}
+{{- if index .Values "cluster-api-operator" "cluster-api" "core" "imageUrl" }}
+  deployment:
+    containers:
+      - name: manager
+        imageUrl: {{ index .Values "cluster-api-operator" "cluster-api" "core" "imageUrl" }}
+{{- end }}
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: capi-additional-rbac-roles
+  namespace: {{ index .Values "cluster-api-operator" "cluster-api" "core" "namespace" }}
+  annotations:
+    "helm.sh/hook": "post-install, post-upgrade"
+    "helm.sh/hook-weight": "2"
+data: 
+  manifests: |-
+    apiVersion: rbac.authorization.k8s.io/v1
+    kind: ClusterRole
+    metadata:
+      name: provisioning-rke-cattle-io
+      labels:
+        cluster.x-k8s.io/aggregate-to-manager: "true"
+    rules:
+      - apiGroups: ["rke.cattle.io"]
+        resources: ["*"]
+        verbs: ["*"]
+    ---
+    apiVersion: rbac.authorization.k8s.io/v1
+    kind: ClusterRole
+    metadata:
+      name: provisioning-rke-machine-cattle-io
+      labels:
+        cluster.x-k8s.io/aggregate-to-manager: "true"
+    rules:
+      - apiGroups: ["rke-machine.cattle.io"]
+        resources: ["*"]
+        verbs: ["*"]
+{{- end }}