Support SSL Certificates as external secrets + server.xml publishing fix

#441 Support SSL Certificates as external secrets
#444 package server.xml as part of release (was previously server.xml.tmpl and release packaging missed this change)

Support HTTPS for SRS/Elasticsearch traffic + fixes

#430 Support HTTPS connections between SRS and Elasticsearch. Both basic auth and certificate-based connections are supported
#432 Disable autoDeploy feature of tomcat in default config used by the chart.
#436 Doc change to move linux/windows to https://docs.pega.com/client-managed-cloud/87/pega-provided-docker-images
#437 Add optional configuration for imagePullPolicy in Installer subchart

AWS GOV cloud support and encrypted tomcat in pega-helm-charts

#422 - Enable user to change waitFor time in the k8s-wait-for container.
#421 - AWS Gov Cloud support.
#420 - updating PKS , openshift and pega github read me for External Secrets Operator.
#419 - Support for passing certs and configure tomcat to use TLS ootb So that traffic is encrypted from the back end level (tomcat itself).

Minor fixes for PegaRULESLongRW data source

• #418 PegaRULESLongRW data source to actually take/use password and connection properties.
  • This data source previously didn't take any password - assuming a secretsmanager jdbc driver approach - and hardcoded the connection properties. Now it uses same connection info as main PegaRULES data source, and appends the hardcoded (timeout) properties to the passed ones.
  • This data source is not currently in use by Client Managed Cloud environments, confirmed by the fact that it did not take any password. Without CloudK specific handling, it was not a valid data source. Intended behavior was for it to use same JDBC connection URL as PegaRULES datasource, so now it can reuse the main PegaRULES jdbc url by setting SET_RW env var, and not JDBC_RW_URL

Minor security enhancements and updated hazelcast documentation changes.

Included in this release:-

#414 Added Support for downloading JDBC driver from an artifactory which is secured with authentication
#409 changes for external secrets mounting for DB_PASSWORD
#411 hazelcast documentation changes.

Backward incompatible config changes and other fixes

This release contains backward incompatible config changes for the Addons chart.

The addons README provides the format to configure the new addons chart with.

Included in this release:
#417 - Fix bug where the installer chart would not honor connection properties set via the dedicated values.yaml property
#399 - Convert terratest to use Go modules
#405 - Enable hazelcast C/S mode for minimal and large deployments
#404 - Add note about cpu support
#392 - Configurable busybox and k8s-wait-for image locations
#391 - Updated Helm charts documentation for ElasticSearch 7.16.3
#385 - Changes to pega-deployment for certificate check
#396 - Increase failure threshold for startup probe.
#387 - Restrict deployment options to clustering-service for k8s environments
#364 - Change jdbc connectionProperties
#380 - Update Addons chart dependencies for k8s 1.22
#356 - add option to set resources requests

Change to deployment build process and hazelcast, SRS charts

Included in this release -

#382 - Changes to GitHub action release provider
#368 - Search and Reporting Service Support for 7.10.2 Elasticsearch Version
#363 - Hazelcast pod resource optimization
#362 - Removed unused param and using replica count as min cluster size
#367 - Added ops identifier label to identify pod as hazelcast type

v1.9.2

Commits

• 70b10a7: add workflow file for github actions (#379) (pega-kumaa43) #379

Minor fixes

Included in this release:

• #375 Allow global.certificates to be optionally specified.

Support K8s 1.22+ and custom sidecars

Included in this release:

• #373 Added required pathType to v1 Ingress definition
• #371 Support custom sidecar containers in pega tier pod definitions