SONAR-25616 Automated testing of the support fo Istio

Author: carminevassallo

.cirrus/tasks_templates.yml

@@ -93,7 +93,12 @@ chart_testing_on_kind: &CHART_TESTING_ON_KIND_TEMPLATE
     - kind create cluster
     - kubectl cluster-info --context kind-kind
     - kubectl get nodes
+    - helm repo add istio https://istio-release.storage.googleapis.com/charts
+    - kubectl create namespace istio-system --dry-run=client -o yaml | kubectl apply -f -
+    - helm upgrade -i istio-base istio/base -n istio-system --set defaultRevision=default --set global.proxy.holdApplicationUntilProxyStarts=true  --wait
+    - helm upgrade -i istiod istio/istiod --set global.proxy.holdApplicationUntilProxyStarts=true -n istio-system --wait
     - kubectl create namespace test --dry-run=client -o yaml | kubectl apply -f -
+    - kubectl label namespace test istio-injection=enabled
     - kubectl create secret docker-registry pullsecret --namespace test --docker-username=${DOCKER_USERNAME} --docker-password=${DOCKER_PASSWORD} --dry-run=client -o yaml | kubectl apply -f -
   artifacthub_lint_script:
     - ah lint

charts/sonarqube-dce/CHANGELOG.md

@@ -8,6 +8,10 @@ All changes to this chart will be documented in this file.
 * Added validation to ensure that either the `applicationNodes.jwtSecret` or `applicationNodes.jwtExistingSecret` value is set
 * Support the deployment with Istio
 
+## [2025.3.1]
+* Update Chart's version to 2025.3.1
+* Upgrade SonarQube Server to 2025.3.1
+
 ## [2025.3.0]
 * Update Chart's version to 2025.3.0
 * Normalizes the extension for all templates

charts/sonarqube-dce/ci/cirrus-values.yaml

@@ -2,21 +2,23 @@
 # decreased replica count for cirrus CI
 
 searchNodes:
-  replicaCount: 1
+  replicaCount: 3
   image:
     repository: "sonarsource/sonarqube"
     tag: "2025.3.0-datacenter-search"
     pullSecrets:
       - name: pullsecret
 
 ApplicationNodes:
-  replicaCount: 1
+  replicaCount: 2
   jwtSecret: "mnGBJtmwRbIREqy3vSw6Cinoi2WEom9JH+iw/tXOJX4="
   image:
     repository: "sonarsource/sonarqube"
     tag: "2025.3.0-datacenter-app"
     pullSecrets:
       - name: pullsecret
+  webPort: 4023
+  cePort: 4024
 
 postgresql:
   securityContext:

charts/sonarqube-dce/templates/tests/sonarqube-test.yaml

@@ -7,6 +7,8 @@ metadata:
   name: "{{ .Release.Name }}-ui-test"
   annotations:
     "helm.sh/hook": test-success
+    # Disable Istio sidecar injection for this test pod
+    "sidecar.istio.io/inject": "false"
   labels:
     app: {{ template "sonarqube.name" . }}
     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}

charts/sonarqube/templates/change-admin-password-hook.yaml

@@ -18,6 +18,9 @@ spec:
     metadata:
       name: {{ template "sonarqube.fullname" . }}-change-admin-password-hook
       labels: {{- include "sonarqube.labels" . | nindent 8 }}
+      annotations:
+        # Disable Istio sidecar injection for this hook pod
+        "sidecar.istio.io/inject": "false"
     spec:
       restartPolicy: OnFailure
       {{- if or .Values.image.pullSecrets .Values.image.pullSecret }}

charts/sonarqube/templates/tests/sonarqube-test.yaml

@@ -5,6 +5,8 @@ metadata:
   name: "{{ .Release.Name }}-ui-test"
   annotations:
     "helm.sh/hook": test-success
+    # Disable Istio sidecar injection for this test pod
+    "sidecar.istio.io/inject": "false"
   labels: {{- include "sonarqube.labels" . | nindent 4 }}
 spec:
   automountServiceAccountToken: false

tests/unit-compatibility-test/fixtures/sonarqube-dce/application-static-hazelcast-values.yaml

@@ -1033,6 +1033,8 @@ metadata:
   name: "application-static-hazelcast-values.yaml-ui-test"
   annotations:
     "helm.sh/hook": test-success
+    # Disable Istio sidecar injection for this test pod
+    "sidecar.istio.io/inject": "false"
   labels:
     app: sonarqube-dce
     chart: sonarqube-dce-2025.4.0

tests/unit-compatibility-test/fixtures/sonarqube-dce/application-values.yaml

@@ -1025,6 +1025,8 @@ metadata:
   name: "application-values.yaml-ui-test"
   annotations:
     "helm.sh/hook": test-success
+    # Disable Istio sidecar injection for this test pod
+    "sidecar.istio.io/inject": "false"
   labels:
     app: sonarqube-dce
     chart: sonarqube-dce-2025.4.0

tests/unit-compatibility-test/fixtures/sonarqube-dce/ca-certificates-configmap.yaml

@@ -1084,6 +1084,8 @@ metadata:
   name: "ca-certificates-configmap.yaml-ui-test"
   annotations:
     "helm.sh/hook": test-success
+    # Disable Istio sidecar injection for this test pod
+    "sidecar.istio.io/inject": "false"
   labels:
     app: sonarqube-dce
     chart: sonarqube-dce-2025.4.0

tests/unit-compatibility-test/fixtures/sonarqube-dce/ca-certificates-secret.yaml

@@ -1018,6 +1018,8 @@ metadata:
   name: "ca-certificates-secret.yaml-ui-test"
   annotations:
     "helm.sh/hook": test-success
+    # Disable Istio sidecar injection for this test pod
+    "sidecar.istio.io/inject": "false"
   labels:
     app: sonarqube-dce
     chart: sonarqube-dce-2025.4.0