Update gitlab-kas to v13.7.0

changelogs/unreleased/ash2k-update-kas-to-13-7-0.yml

+---
+title: Update gitlab-kas to v13.7.0
+merge_request: 1694
+author:
+type: changed

charts/gitlab/charts/kas/templates/configmap.yaml

@@ -6,16 +6,16 @@ metadata:
   namespace: {{ $.Release.Namespace }}
   labels:
     {{- include "gitlab.standardLabels" . | nindent 4 }}
-  annotations:
 data:
-  # See https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/blob/master/doc/kas_config_example.yaml
+  # See https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/blob/master/pkg/kascfg/config_example.yaml
   config.yaml: |
 {{- if .Values.customConfig }}
     {{- .Values.customConfig | toYaml | nindent 4 }}
 {{- else }}
-    listen_agent:
-      address: ":{{ .Values.service.internalPort }}"
-      websocket: true
+    agent:
+      listen:
+        address: ":{{ .Values.service.internalPort }}"
+        websocket: true
     gitlab:
       address: http://{{ template "gitlab.workhorse.host" . }}:{{ template "gitlab.workhorse.port" . }}
       authentication_secret_file: "/etc/kas/.gitlab_kas_secret"

charts/gitlab/charts/kas/templates/deployment.yaml

@@ -41,6 +41,10 @@ spec:
       serviceAccountName: {{ include "gitlab.serviceAccount.name" . }}
       automountServiceAccountToken: false
       {{- end }}
+      securityContext:
+        runAsUser: {{ .Values.securityContext.runAsUser }}
+        runAsGroup: {{ .Values.securityContext.runAsGroup }}
+        fsGroup: {{ .Values.securityContext.fsGroup }}
       containers:
         {{- include "gitlab.extraContainers" . | nindent 8 }}
         - name: {{ template "name" . }}

charts/gitlab/charts/kas/values.yaml

@@ -14,7 +14,7 @@ hpa:
   targetAverageValue: 100m
 image:
   repository: registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/kas
-  tag: "v13.6.1"
+  tag: "v13.7.0"
 ingress:
   annotations: {}
   tls: {}
@@ -47,3 +47,9 @@ workhorse: {}
   # port: 8181
 # overwrites the default kas config
 customConfig: {}
+
+## Allow to overwrite under which User and Group we're running.
+securityContext:
+  runAsUser: 65532
+  runAsGroup: 65532
+  fsGroup: 65532

doc/charts/gitlab/kas/index.md

@@ -42,7 +42,7 @@ the `helm install` command using the `--set` flags.
 | `annotations`               | `{}`           | Pod annotations                  |
 | `extraContainers`           |                | List of extra containers to include      |
 | `image.repository`          | `registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/kas` | image repository |
-| `image.tag`                 | `v0.0.6`       | Image tag                        |
+| `image.tag`                 | `v13.7.0`      | Image tag                        |
 | `hpa.targetAverageValue`    | `100m`         | Set the autoscaling target value (CPU) |
 | `ingress.enabled`           |  `true` if `global.kas.enabled=true` | You can use `kas.ingress.enabled` to explicitly turn it on or off. If not set, you can optionally use `global.ingress.enabled` for the same purpose. |
 | `ingress.annotations`       | `{}`           | Ingress annotations              |