chore: update ks-core helm chart

Signed-off-by: hongming <coder.scala@gmail.com>

config/ks-core/templates/cert-manager.yaml

@@ -26,7 +26,7 @@ spec:
     privateKeySecretRef:
       name: letsencrypt-{{ .Values.letsEncrypt.environment }}
     {{- if or (.Capabilities.APIVersions.Has "certmanager.k8s.io/v1alpha1") }}
-    http01: { }
+    http01: {}
     {{- else }}
     solvers:
       - http01:

config/ks-core/templates/ks-console.yaml

@@ -89,8 +89,8 @@ spec:
       initContainers:
         - name: init-ca
           image: {{ template "kubectl.image" . }}
-          command: [ "/bin/sh", "-c" ]
+          command: ["/bin/sh", "-c"]
-          args: [ "cp /tmp/ca.crt /usr/local/share/ca-certificates/ \
+          args: ["cp /tmp/ca.crt /usr/local/share/ca-certificates/ \
                   && update-ca-certificates && cp /etc/ssl/certs/ca-certificates.crt /certs/"]
           volumeMounts:
             - name: tls-cert
@@ -171,8 +171,8 @@ spec:
         - name: sys-cert
           emptyDir: {}
         {{- end }}
----
 
+---
 apiVersion: v1
 kind: Service
 metadata:
@@ -189,16 +189,15 @@ metadata:
 spec:
   ports:
     - name: nginx
-  {{- if .Values.internalTLS }}
+{{- if .Values.internalTLS }}
       port: 443
-  {{- else }}
+{{- else }}
       port: 80
-  {{- end }}
+{{- end }}
       protocol: TCP
       targetPort: 8000
   {{- with .Values.console.nodePort }}
-    nodePort:
+      nodePort: {{ . }}
-      {{- toYaml . | nindent 6 }}
   {{- end }}
   selector:
     app: ks-console

config/ks-core/templates/post-patch-system-ns-job.yaml

@@ -3,7 +3,7 @@ kind: Job
 metadata:
   name: "{{ .Release.Name }}-post-patch-system-ns"
   annotations:
-    "helm.sh/hook": post-install
+    "helm.sh/hook": post-install,post-upgrade
     "helm.sh/hook-weight": "-5"
     "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded,hook-failed
 spec:
@@ -28,5 +28,3 @@ spec:
                 kubectl label ns $ns kubesphere.io/managed=true
                 kubectl label ns $ns kubesphere.io/protected-resource=true
               done
-              kubectl get ns -l 'kubesphere.io/workspace,!kubesphere.io/managed' --no-headers -o custom-columns=NAME:.metadata.name | \
-              xargs -I {} kubectl label ns {} kubesphere.io/managed=true

config/ks-core/templates/roletemplates.yaml

@@ -1569,64 +1569,6 @@ spec:
 ---
 apiVersion: iam.kubesphere.io/v1beta1
 kind: RoleTemplate
-metadata:
-  annotations:
-    iam.kubesphere.io/role-template-rules: '{"workloadtemplates": "view"}'
-  labels:
-    iam.kubesphere.io/aggregate-to-operator: ""
-    iam.kubesphere.io/aggregate-to-viewer: ""
-    iam.kubesphere.io/aggregate-to-regular: ""
-    iam.kubesphere.io/category: namespace-configuration-management
-    iam.kubesphere.io/scope: "namespace"
-    kubesphere.io/managed: "true"
-  name: namespace-view-workloadtemplates
-spec:
-  description:
-    en: 'View workloadtemplates in the project.'
-    zh: '查看项目中的工作负载模板。'
-  displayName:
-    en: WorkloadTemplate Viewing
-    zh: '工作负载模板查看'
-  rules:
-    - apiGroups:
-        - 'workloadtemplate.kubesphere.io'
-      resources:
-        - "*"
-      verbs:
-        - get
-        - list
-        - watch
-
----
-apiVersion: iam.kubesphere.io/v1beta1
-kind: RoleTemplate
-metadata:
-  annotations:
-    iam.kubesphere.io/dependencies: '["namespace-view-workloadtemplates"]'
-    iam.kubesphere.io/role-template-rules: '{"workloadtemplates": "manage"}'
-  labels:
-    iam.kubesphere.io/aggregate-to-operator: ""
-    iam.kubesphere.io/category: namespace-configuration-management
-    iam.kubesphere.io/scope: "namespace"
-    kubesphere.io/managed: "true"
-  name: namespace-manage-workloadtemplates
-spec:
-  description:
-    en: 'Create, edit, and delete workloadtemplates in the project.'
-    zh: '创建、编辑和删除项目中的工作负载模板。'
-  displayName:
-    en: WorkloadTemplate Management
-    zh: '工作负载模板管理'
-  rules:
-    - apiGroups:
-        - 'workloadtemplate.kubesphere.io'
-      resources:
-        - "*"
-      verbs:
-        - '*'
----
-apiVersion: iam.kubesphere.io/v1beta1
-kind: RoleTemplate
 metadata:
   annotations:
     iam.kubesphere.io/role-template-rules: '{"secrets": "view"}'

config/ks-core/templates/services.yaml

@@ -15,8 +15,7 @@ spec:
     {{- end }}
       targetPort: 9090
     {{- with .Values.apiserver.nodePort }}
-      nodePort:
+      nodePort: {{ . }}
-      {{- toYaml . | nindent 8 }}
     {{- end }}
   selector:
     {{- if eq (include "multicluster.role" .) "host" }}

config/ks-core/values.yaml

@@ -436,13 +436,6 @@ ksCRDs:
       repository: kubesphere/kubectl
       tag: "v1.27.16"
       pullPolicy: IfNotPresent
-    resources:
-      limits:
-        cpu: 1
-        memory: 1024Mi
-      requests:
-        cpu: 20m
-        memory: 100Mi
 
 # add museum for all ks-extensions
 ksExtensionRepository: