chore: Update mattermost to v9.2.3-bb.1 (#20)

* chore: Update mattermost to v9.2.3-bb.1

chore: Update DUBBD and Zarf

* fix: fix copy past error

.github/workflows/publish-package.yml

@@ -47,10 +47,10 @@ jobs:
         uses: supplypike/setup-bin@v3
         with:
           # renovate: zarf-uri datasource=github-tags depName=defenseunicorns/zarf
-          uri: 'https://github.com/defenseunicorns/zarf/releases/download/v0.31.3/zarf_v0.31.3_Linux_amd64'
+          uri: 'https://github.com/defenseunicorns/zarf/releases/download/v0.31.4/zarf_v0.31.4_Linux_amd64'
           name: 'zarf'
           # renovate: datasource=github-tags depName=defenseunicorns/zarf versioning=semver
-          version: 'v0.31.3'
+          version: 'v0.31.4'
 
       - name: Build mattermost package
         run: zarf package create --confirm --no-progress

Makefile

@@ -1,14 +1,14 @@
 # The version of Zarf to use. To keep this repo as portable as possible the Zarf binary will be downloaded and added to
 # the build folder.
 # renovate: datasource=github-tags depName=defenseunicorns/zarf
-ZARF_VERSION := v0.31.3
+ZARF_VERSION := v0.31.4
 
 # The version of the build harness container to use
 BUILD_HARNESS_REPO := ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=docker depName=ghcr.io/defenseunicorns/build-harness/build-harness
-BUILD_HARNESS_VERSION := 1.14.2
+BUILD_HARNESS_VERSION := 1.14.8
 # renovate: datasource=docker depName=ghcr.io/defenseunicorns/packages/dubbd-k3d extractVersion=^(?<version>\d+\.\d+\.\d+)
-DUBBD_K3D_VERSION := 0.14.0
+DUBBD_K3D_VERSION := 0.15.0
 
 # Figure out which Zarf binary we should use based on the operating system we are on
 ZARF_BIN := zarf

mattermost-flux-values.yaml

@@ -6,7 +6,7 @@ application:
   repository: https://repo1.dso.mil/big-bang/product/packages/mattermost.git
   ref:
     # renovate: datasource=gitlab-tags depName=big-bang/product/packages/mattermost versioning=loose registryUrl=https://repo1.dso.mil
-    tag: v9.2.3-bb.0
+    tag: v9.2.3-bb.1
   dependsOn:
     ###ZARF_VAR_MATTERMOST_DEPENDS_ON###
   baseValues:

utils/pkg-deps/mattermost/minio/policy-exceptions/non-root-user.yaml

@@ -0,0 +1,22 @@
+apiVersion: kyverno.io/v2alpha1
+kind: PolicyException
+metadata:
+  name: mattermost-minio-non-root-exception
+  namespace: mattermost-minio
+spec:
+  exceptions:
+  - policyName: require-non-root-user
+    ruleNames:
+    - non-root-user
+  - policyName: restrict-host-path-write
+    ruleNames:
+    - require-readonly-hostpath
+  match:
+    any:
+    - resources:
+        kinds:
+        - Pod
+        namespaces:
+        - mattermost-minio
+        names:
+        - minio-post-job-*

utils/pkg-deps/mattermost/minio/zarf.yaml

@@ -14,7 +14,7 @@ components:
       - name: kyverno-exceptions
         files:
           - policy-exceptions/registry.yaml
-          - policy-exceptions/externalName.yaml
+          - policy-exceptions/non-root-user.yaml
   - name: minio-istio-exceptions
     required: true
     manifests:

zarf.yaml

@@ -80,7 +80,7 @@ components:
         valuesFiles:
           - mattermost-flux-values.yaml
     repos:
-      - https://repo1.dso.mil/big-bang/product/packages/[email protected].0
+      - https://repo1.dso.mil/big-bang/product/packages/[email protected].1
     images:
       - "registry1.dso.mil/ironbank/opensource/mattermost/mattermost:v9.2.3"
       - "registry1.dso.mil/ironbank/opensource/postgres/postgresql12:12.16"