Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
30 commits
Select commit Hold shift + click to select a range
c5fc015
feat: add cpd-public-route job to expose CP4D on public URL without VPN
kushwahck-ibm Aug 31, 2026
fff5fa4
Update README.md
kushwahck-ibm Aug 31, 2026
5e04694
Update 09-ibm-cpd-public-route.yaml
kushwahck-ibm Aug 31, 2026
1736792
Merge branch 'main' into 15972-cpd_route_public
mnivedithaa Sep 2, 2026
a5146de
Merge branch 'main' into 15972-cpd_route_public
kushwahck-ibm Sep 2, 2026
8515471
fix: review comments done
kushwahck-ibm Sep 2, 2026
e27cd72
fix: updating readme
kushwahck-ibm Sep 2, 2026
78d1d65
fix: service remove
kushwahck-ibm Sep 3, 2026
6aac9a5
test: update suite_dns job to use mascore-15972 CLI image with cpd-pu…
kushwahck-ibm Sep 3, 2026
2579f1d
test: update all CLI image digests to mascore-15972 build (cpd-public…
kushwahck-ibm Sep 3, 2026
c7ce80c
fix: dummy commit
kushwahck-ibm Sep 4, 2026
28ee51a
feat: add cpd-public to suite-dns CIS_ENTRIES_TO_ADD when cpd_public_…
kushwahck-ibm Sep 4, 2026
a501356
fix: guard against nil ibm_cp4d in cis_entries_to_add template
kushwahck-ibm Sep 4, 2026
d42baf5
fix: replace ClusterRole with namespace-scoped Role (ArgoCD lacks Clu…
kushwahck-ibm Sep 4, 2026
f2eca83
fix: use cis_mas_domain directly for cpd-public route host (drop cis_…
kushwahck-ibm Sep 7, 2026
71a2788
fix: updated version
kushwahck-ibm Sep 7, 2026
5d356bf
fix: update cpd-public-route job to mascore-15972 CLI image digest (3…
kushwahck-ibm Sep 7, 2026
19269e6
fix: script modified for private route
kushwahck-ibm Sep 7, 2026
e06e186
fix: restore internal cpd route AFTER ZenService Completed (v4)
kushwahck-ibm Sep 7, 2026
12b2c3c
Merge branch 'main' into 15972-cpd_route_public
amitpandey0217 Sep 8, 2026
d427307
fix: review comments
kushwahck-ibm Sep 8, 2026
b7fbc1b
Merge branch '15972-cpd_route_public' of github.com:ibm-mas/gitops in…
kushwahck-ibm Sep 8, 2026
5884717
fix: pass CPD_PUBLIC_ROUTE_ENABLED to suite_dns job
kushwahck-ibm Sep 9, 2026
27cb628
fix: remove CPD_PUBLIC_ROUTE_ENABLED from suite_dns job
kushwahck-ibm Sep 9, 2026
869920f
fix: add CPD_PUBLIC_ROUTE_ENABLED to suite_dns job for DNS CNAME crea…
kushwahck-ibm Sep 9, 2026
86da58e
test: bump suite_dns job version v4→v5 to re-trigger end-to-end on ma…
kushwahck-ibm Sep 9, 2026
dae6ace
fix(MASCORE-15972): update CLI digest to 9488282 (cpd-public proxied:…
kushwahck-ibm Sep 9, 2026
903a415
Revert "fix(MASCORE-15972): update CLI digest to 9488282 (cpd-public …
kushwahck-ibm Sep 9, 2026
316adc8
Merge branch 'main' into 15972-cpd_route_public
kushwahck-ibm Sep 10, 2026
cb1bd37
Merge branch 'main' into 15972-cpd_route_public
kushwahck-ibm Sep 10, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ ECR Token Updater Pod Template
This template defines the pod specification used by both the CronJob and the initial Job
*/}}
{{- define "ecr-token-updater.podTemplate" -}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}
metadata:
{{- if .Values.custom_labels }}
labels:
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{{- /*
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}


{{- $ns := "job-cleaner" }}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ data:
type: Opaque
---
{{- if and (eq .Values.dns_provider "cis") (not (empty .Values.cis_crn)) (not (empty .Values.dro_public_domain)) }}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}
{{- $_job_name_prefix := "ibm-dro-dns" }}
{{- $_job_cleanup_group := cat $_job_name_prefix | sha1sum }}
{{- $_job_config_values := omit .Values "junitreporter" }}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
{{- /*
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}


{{ $job_name := "postdelete-delete-marketplaceconfigs-job" }}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
{{- /*
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{ $job_name := "postdelete-delete-profilebundles-job" }}

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
{{- /*
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}


---
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also the required env property CPD_PUBLIC_ROUTE_ENABLED is not set as env property in this job

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

A dict of values that influence the behaviour of the job in some way.
Expand All @@ -27,7 +27,7 @@ Increment this value whenever you make a change to an immutable field of the Job
E.g. passing in a new environment variable.
Included in $_job_hash (see below).
*/}}
{{- $_job_version := "v3" }}
{{- $_job_version := "v5" }}

{{- /*
10 char hash appended to the job name taking into account $_job_config_values, $_job_version and $_cli_image_digest
Expand Down Expand Up @@ -138,8 +138,10 @@ spec:
value: "{{ .Values.override_edge_certs }}"
- name: CIS_ENTRIES_TO_ADD
value: "{{ .Values.cis_entries_to_add }}"
- name: CPD_PUBLIC_ROUTE_ENABLED
value: "{{ .Values.cpd_public_route_enabled | default false }}"
- name: CIS_ALLOWED_IPS
value: "{{ .Values.cis_allowed_ips }}"
value: "{{ .Values.cis_allowed_ips }}"

- name: SM_AWS_REGION
value: "{{ .Values.sm_aws_region }}"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
{{- /*
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}


# Deletes user "masinst_${MAS_INSTANCE_ID}" from docdb an deletes the acc/cluster/instance/mongo#password secret from AWS SM
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
4 changes: 4 additions & 0 deletions instance-applications/110-ibm-cp4d/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@ Deploys and configures CP4D needed for `MAS Assist` and `MAS Predict`. Deploys t
| `ClusterRole` | CP4D cluster roles | N/A (cluster-scoped) | Always | `cluster_admin_role` |
| `ClusterRoleBinding` | CP4D cluster role bindings | N/A (cluster-scoped) | Always | `cluster_admin_role` |
| `Job` | CP4D install and verification jobs | CP4D operators namespace | Version-dependent and always for verification hooks as applicable | `cluster_admin_role` |
| `Route` | `cpd-public` public route (passthrough TLS, type=external) | CP4D instance namespace | When `cpd_public_route_enabled` is true | `cluster_admin_role` |
| `Ibmcpd` | CP4D platform custom resource | CP4D instance namespace | Always | `cluster_admin_role` |
| `ConfigMap` | CP4D service dependency config maps | CP4D operators namespace | When optional services are enabled | `cluster_admin_role` |
| `Subscription` | CP4D service subscriptions | CP4D operators namespace | When optional services are enabled | `cluster_admin_role` |
Expand Down Expand Up @@ -49,6 +50,9 @@ ibm_cp4d:
cpd_iam_integration: string
cpd_primary_storage_class: string
cpd_metadata_storage_class: string
# Optional — public CPD route
cpd_public_route_enabled: bool # default: false
cis_domain: string # e.g. inst1002.saasmax.ibmmasivt.com (ibm_mas_suite.cis_mas_domain)
```

**Note**: Values marked with "(secret reference)" should use the format `<path:secrets/path:key>` to reference secrets stored in the Secrets Vault.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ Meaningful prefix for the job resource name. Must be under 52 chars in length to
Use the build/bin/set-cli-image-digest.sh script to update this value across all charts.
Included in $_job_hash (see below).
*/}}
{{- $_cli_image_digest := "sha256:1c5701a24c9796e02b33036f56babbe74032831e1db733ce9228a46dce4a870b" }}
{{- $_cli_image_digest := "sha256:30d03b2ac994efe036af0dc91d0319f7f2c7cb6bb216ce0602f263165591848a" }}

{{- /*
A dict of values that influence the behaviour of the job in some way.
Expand Down
Loading
Loading