chore(deps): update kubezero-addons-dependencies

admin/kubezero.sh

@@ -330,6 +330,7 @@ apply_module() {
   for t in $MODULES; do
     # apply/replace app of apps directly
     if [ $t == "kubezero" ]; then
+      [ -f $CHARTS/kubezero/hooks.d/pre-install.sh ] && . $CHARTS/kubezero/hooks.d/pre-install.sh
       kubectl replace -f $WORKDIR/kubezero/templates $(field_manager $ARGOCD)
     else
       #_helm apply $t

charts/kubezero-addons/Chart.yaml

@@ -39,7 +39,7 @@ dependencies:
     repository: oci://public.ecr.aws/neuron #/neuron-helm-chart
     condition: neuron-helm-chart.enabled
   - name: sealed-secrets
-    version: 2.17.1
+    version: 2.17.2
     repository: https://bitnami-labs.github.io/sealed-secrets
     condition: sealed-secrets.enabled
   - name: aws-node-termination-handler

charts/kubezero-argo/hooks.d/pre-install.sh

@@ -23,3 +23,7 @@ GITKEY=$(get_kubezero_secret argo-cd.kubezero.sshPrivateKey)
 if [ -z "$GITKEY" ]; then
   set_kubezero_secret argo-cd.kubezero.sshPrivateKey "Insert ssh Private Key from your git server"
 fi
+
+# Redis secret
+kubectl get secret argocd-redis -n argocd || kubectl create secret generic argocd-redis -n argocd \
+    --from-literal=auth=$(date +%s | sha256sum | base64 | head -c 16 ; echo)

charts/kubezero-argo/templates/argo-cd/kubezero-project.yaml

@@ -17,4 +17,10 @@ spec:
   sourceRepos:
   - https://cdn.zero-downtime.net/charts
   - {{ index .Values "argo-cd" "kubezero" "repoUrl" }}
+  syncWindows:
+    - kind: deny
+      schedule: '0 * * * *'
+      duration: 24h
+      namespaces:
+      - '*'
 {{- end }}