hedgedoc/chart
1
0
Fork 0
Code Issues Pull Requests 2 Actions Releases Activity

Compare commits

base: hedgedoc:1b297105135260e44657b98a7d005eff5a5de62e
Branches Tags
hedgedoc:master hedgedoc:renovate/yokawasa-action-setup-kube-tools-0.x hedgedoc:renovate/actions-checkout-4.x
hedgedoc:0.1.16 hedgedoc:0.1.15 hedgedoc:0.1.14
...
compare: hedgedoc:master
Branches Tags
hedgedoc:renovate/yokawasa-action-setup-kube-tools-0.x hedgedoc:renovate/actions-checkout-4.x hedgedoc:master
hedgedoc:0.1.16 hedgedoc:0.1.15 hedgedoc:0.1.14

21 Commits
1b29710513 ... master

Author SHA1 Message Date
Renovate Bot
f4f3a23905 Add renovate.json 2023-09-01 22:23:55 +00:00
Konstantin Grachev
58f359047f feat: change drone to gitea actions
All checks were successful
Release Chart / release (push) Successful in 12s
Details
2023-08-28 01:07:35 +03:00
Konstantin Grachev
d147635509 chore: bump version up to 1.9.8
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/tag Build is passing
Details
2023-06-05 14:42:29 +03:00
Konstantin Grachev
77835da077 ci: remove unnecessary name
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-05-18 01:13:18 +03:00
Konstantin Grachev
38fc71a4e6 ci: use oci
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/tag Build is passing
Details
2023-05-18 01:10:12 +03:00
Konstantin Grachev
66c59324a9 cs: fix
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-03-17 17:00:07 +03:00
Konstantin Grachev
e1cb6aa695 fix: don't render config or secret if value not present
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 23:08:36 +03:00
Konstantin Grachev
8cbeb5b93a fix: unwrap default, add b64enc
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:46:39 +03:00
Konstantin Grachev
a30125123e fix: wrap default
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:43:22 +03:00
Konstantin Grachev
49b5f226d9 fix: move sessionSecret to Secret, add default random value
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:41:24 +03:00
Konstantin Grachev
bf75989f75 chore: add default host
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:29:44 +03:00
Konstantin Grachev
f55c540b1c fix: default port wrong field
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:21:41 +03:00
Konstantin Grachev
3a6ce19ffe fix: use serverPort from config.port, add default value #2
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:20:21 +03:00
Konstantin Grachev
8b1914fb52 fix: use serverPort from config.port, add default value
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:16:07 +03:00
Konstantin Grachev
a8d7b1c894 cs: yaml
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:09:42 +03:00
Konstantin Grachev
05f4a483d5 fix: Deployment syntax 2023-02-28 22:09:27 +03:00
Konstantin Grachev
ee920b798a fix: ref ConfigMap and Secret to Deployment
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 22:06:33 +03:00
Konstantin Grachev
4b91bc4ca1 fix: typo in CMD_PORT
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 21:36:06 +03:00
Konstantin Grachev
a13daff913 chore: add default values for postgres
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-02-28 21:31:37 +03:00
Konstantin Grachev
8171cd6e67 chore: add icon
Some checks failed
continuous-integration/drone/push Build is failing
Details
2023-02-28 20:55:45 +03:00
Konstantin Grachev
3a88274f34 fix: configmap and secret spaces 2023-02-28 20:55:33 +03:00
13 changed files with 446 additions and 202 deletions
Expand all files Collapse all files

23
.drone.yml
View File

@ -1,23 +0,0 @@
---
kind: pipeline
type: docker
name: default
trigger:
event:
- push
steps:
- name: release
image: cr.grachevko.ru/drone/helm:0.1.4
settings:
name: hedgedoc
registry: https://harbor.grachevko.ru/chartrepo
username:
from_secret: HELM_REPO_USERNAME
password:
from_secret: HELM_REPO_PASSWORD
when:
branch:
- master
- rc

29
.gitea/workflows/release.yaml Normal file
View File

@ -0,0 +1,29 @@
name: Release Chart
on:
push:
tags:
- '*'
jobs:
release:
runs-on: ubuntu-latest
env:
REGISTRY: harbor.grachevko.ru
steps:
- uses: actions/checkout@v3
- uses: yokawasa/action-setup-kube-tools@v0.9.3
with:
setup-tools: helm
- name: deps and lint
run: |
helm dependency update
helm lint --strict .
- name: build
run: helm package --version ${{ gitea.ref_name }} .
- name: publish
run: |
echo "${{ secrets.REGISTRY_PASSWORD }}" | helm registry login ${{ env.REGISTRY }} --username "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
helm push ./*.tgz oci://harbor.grachevko.ru/${{ gitea.repository }}

3
Chart.yaml
View File

@ -3,7 +3,8 @@ name: hedgedoc
description: A Helm chart for Kubernetes description: A Helm chart for Kubernetes
type: application type: application
version: 0.1.0 version: 0.1.0
appVersion: 1.9.7 appVersion: 1.9.8
icon: https://raw.githubusercontent.com/hedgedoc/hedgedoc/develop/frontend/public/icons/android-chrome-192x192.png
maintainers: maintainers:
- email: me@grachevko.ru - email: me@grachevko.ru
name: Konstantin Grachev name: Konstantin Grachev

3
renovate.json Normal file
View File

@ -0,0 +1,3 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json"
}

2
templates/NOTES.txt
View File

@ -13,7 +13,7 @@
NOTE: It may take a few minutes for the LoadBalancer IP to be available. NOTE: It may take a few minutes for the LoadBalancer IP to be available.
You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "hedgedoc.fullname" . }}' You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "hedgedoc.fullname" . }}'
export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "hedgedoc.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}") export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "hedgedoc.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
echo http://$SERVICE_IP:{{ .Values.service.port }} echo http://$SERVICE_IP:{{ .Values.config.port }}
{{- else if contains "ClusterIP" .Values.service.type }} {{- else if contains "ClusterIP" .Values.service.type }}
export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "hedgedoc.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "hedgedoc.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}") export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")

403
templates/configmap.yaml
View File

@ -5,107 +5,304 @@ metadata:
labels: labels:
{{- include "hedgedoc.labels" . | nindent 4 }} {{- include "hedgedoc.labels" . | nindent 4 }}
data: data:
{{ if .Values.config.sourceURL -}}
CMD_SOURCE_URL: {{ .Values.config.sourceURL | quote }} CMD_SOURCE_URL: {{ .Values.config.sourceURL | quote }}
CMD_DOMAIN: {{ .Values. config.domain | quote }} {{ end -}}
CMD_URL_PATH: {{ .Values. config.urlPath | quote }} CMD_DOMAIN: {{ .Values.config.domain | quote }}
CMD_HOST: {{ .Values. config.host | quote }} CMD_URL_PATH: {{ .Values.config.urlPath | quote }}
CMD_PORT): {{ .Values. config.port | quote }} CMD_HOST: {{ .Values.config.host | quote }}
CMD_PATH: {{ .Values. config.path | quote }} CMD_PORT: {{ .Values.config.port | quote }}
CMD_LOGLEVEL: {{ .Values. config.loglevel | quote }} {{ if .Values.config.path -}}
CMD_URL_ADDPORT: {{ .Values. config.urlAddPort | quote }} CMD_PATH: {{ .Values.config.path | quote }}
CMD_USESSL: {{ .Values. config.useSSL | quote }} {{ end -}}
CMD_HSTS_ENABLE: {{ .Values. config.hsts.enable | quote }} {{ if .Values.config.loglevel -}}
CMD_HSTS_MAX_AGE: {{ .Values. config.hsts.maxAgeSeconds | quote }} CMD_LOGLEVEL: {{ .Values.config.loglevel | quote }}
CMD_HSTS_INCLUDE_SUBDOMAINS: {{ .Values. config.hsts.includeSubdomains | quote }} {{ end -}}
CMD_HSTS_PRELOAD: {{ .Values. config.hsts.preload | quote }} {{ if .Values.config.urlAddPort -}}
CMD_CSP_ENABLE: {{ .Values. config.csp.enable | quote }} CMD_URL_ADDPORT: {{ .Values.config.urlAddPort | quote }}
CMD_CSP_REPORTURI: {{ .Values. config.csp.reportURI | quote }} {{ end -}}
CMD_CSP_ADD_DISQUS: {{ .Values. config.csp.addDisqus | quote }} {{ if .Values.config.useSSL -}}
CMD_CSP_ADD_GOOGLE_ANALYTICS: {{ .Values. config.csp.addGoogleAnalytics | quote }} CMD_USESSL: {{ .Values.config.useSSL | quote }}
CMD_CSP_ALLOW_FRAMING: {{ .Values. config.csp.allowFraming | quote }} {{ end -}}
CMD_CSP_ALLOW_PDF_EMBED: {{ .Values. config.csp.allowPDFEmbed | quote }} {{ if .Values.config.hsts.enable -}}
CMD_COOKIE_POLICY: {{ .Values. config.cookiePolicy | quote }} CMD_HSTS_ENABLE: {{ .Values.config.hsts.enable | quote }}
CMD_PROTOCOL_USESSL: {{ .Values. config.protocolUseSSL | quote }} {{ end -}}
CMD_ALLOW_ORIGIN: {{ .Values. config.allowOrigin | quote }} {{ if .Values.config.hsts.maxAgeSeconds -}}
CMD_ALLOW_ANONYMOUS: {{ .Values. config.allowAnonymous | quote }} CMD_HSTS_MAX_AGE: {{ .Values.config.hsts.maxAgeSeconds | quote }}
CMD_ALLOW_ANONYMOUS_EDITS: {{ .Values. config.allowAnonymousEdits | quote }} {{ end -}}
CMD_ALLOW_FREEURL: {{ .Values. config.allowFreeURL | quote }} {{ if .Values.config.hsts.includeSubdomains -}}
CMD_REQUIRE_FREEURL_AUTHENTICATION: {{ .Values. config.requireFreeURLAuthentication | quote }} CMD_HSTS_INCLUDE_SUBDOMAINS: {{ .Values.config.hsts.includeSubdomains | quote }}
CMD_FORBIDDEN_NOTE_IDS: {{ .Values. config.forbiddenNoteIDs | quote }} {{ end -}}
CMD_DEFAULT_PERMISSION: {{ .Values. config.defaultPermission | quote }} {{ if .Values.config.hsts.preload -}}
CMD_DB_USERNAME: {{ .Values. config.csp.db.username | quote }} CMD_HSTS_PRELOAD: {{ .Values.config.hsts.preload | quote }}
CMD_DB_HOST: {{ .Values. config.csp.db.host | quote }} {{ end -}}
CMD_DB_PORT: {{ .Values. config.csp.db.port | quote }} {{ if .Values.config.csp.enable -}}
CMD_DB_DATABASE: {{ .Values. config.csp.db.database | quote }} CMD_CSP_ENABLE: {{ .Values.config.csp.enable | quote }}
CMD_DB_DIALECT: {{ .Values. config.csp.db.dialect | quote }} {{ end -}}
CMD_SESSION_SECRET: {{ .Values. config.sessionSecret | quote }} {{ if .Values.config.csp.reportURI -}}
CMD_SESSION_LIFE: {{ .Values. config.sessionLife | quote }} CMD_CSP_REPORTURI: {{ .Values.config.csp.reportURI | quote }}
CMD_TOOBUSY_LAG: {{ .Values. config.tooBusyLag | quote }} {{ end -}}
CMD_IMAGE_UPLOAD_TYPE: {{ .Values. config.imageUploadType | quote }} {{ if .Values.config.csp.addDisqus -}}
CMD_IMGUR_CLIENTID: {{ .Values. config.imgur.clientID | quote }} CMD_CSP_ADD_DISQUS: {{ .Values.config.csp.addDisqus | quote }}
CMD_S3_ACCESS_KEY_ID: {{ .Values. config.s3.accessKeyId | quote }} {{ end -}}
CMD_S3_REGION: {{ .Values. config.s3.region | quote }} {{ if .Values.config.csp.addGoogleAnalytics -}}
CMD_S3_ENDPOINT: {{ .Values. config.s3.endpoint | quote }} CMD_CSP_ADD_GOOGLE_ANALYTICS: {{ .Values.config.csp.addGoogleAnalytics | quote }}
CMD_S3_BUCKET: {{ .Values. config.s3bucket | quote }} {{ end -}}
CMD_S3_FOLDER: {{ .Values. config.s3folder | quote }} {{ if .Values.config.csp.allowFraming -}}
CMD_S3_PUBLIC_FILES: {{ .Values. config.s3publicFiles | quote }} CMD_CSP_ALLOW_FRAMING: {{ .Values.config.csp.allowFraming | quote }}
CMD_MINIO_ACCESS_KEY: {{ .Values. config.minio.accessKey | quote }} {{ end -}}
CMD_MINIO_ENDPOINT: {{ .Values. config.minio.endPoint | quote }} {{ if .Values.config.csp.allowPDFEmbed -}}
CMD_MINIO_SECURE: {{ .Values. config.minio.secure | quote }} CMD_CSP_ALLOW_PDF_EMBED: {{ .Values.config.csp.allowPDFEmbed | quote }}
CMD_MINIO_PORT: {{ .Values. config.minio.port | quote }} {{ end -}}
CMD_LUTIM_URL: {{ .Values. config.lutim.url | quote }} {{ if .Values.config.cookiePolicy -}}
CMD_AZURE_CONNECTION_STRING: {{ .Values. config.azure.connectionString | quote }} CMD_COOKIE_POLICY: {{ .Values.config.cookiePolicy | quote }}
CMD_AZURE_CONTAINER: {{ .Values. config.azure.container | quote }} {{ end -}}
CMD_FACEBOOK_CLIENTID: {{ .Values. config.facebook.clientID | quote }} {{ if .Values.config.protocolUseSSL -}}
CMD_TWITTER_CONSUMERKEY: {{ .Values. config.twitter.consumerKey | quote }} CMD_PROTOCOL_USESSL: {{ .Values.config.protocolUseSSL | quote }}
CMD_GITHUB_CLIENTID: {{ .Values. config.github.clientID | quote }} {{ end -}}
CMD_GITLAB_BASEURL: {{ .Values. config.gitlab.baseURL | quote }} {{ if .Values.config.allowOrigin -}}
CMD_GITLAB_CLIENTID: {{ .Values. config.gitlab.clientID | quote }} CMD_ALLOW_ORIGIN: {{ .Values.config.allowOrigin | quote }}
CMD_GITLAB_SCOPE: {{ .Values. config.gitlab.scope | quote }} {{ end -}}
CMD_MATTERMOST_BASEURL: {{ .Values. config.mattermost.baseURL | quote }} {{ if .Values.config.allowAnonymous -}}
CMD_MATTERMOST_CLIENTID: {{ .Values. config.mattermost.clientID | quote }} CMD_ALLOW_ANONYMOUS: {{ .Values.config.allowAnonymous | quote }}
CMD_OAUTH2_PROVIDERNAME: {{ .Values. config.oauth2.providerName | quote }} {{ end -}}
CMD_OAUTH2_BASEURL: {{ .Values. config.oauth2.baseURL | quote }} {{ if .Values.config.allowAnonymousEdits -}}
CMD_OAUTH2_USER_PROFILE_URL: {{ .Values. config.oauth2.userProfileURL | quote }} CMD_ALLOW_ANONYMOUS_EDITS: {{ .Values.config.allowAnonymousEdits | quote }}
CMD_OAUTH2_USER_PROFILE_ID_ATTR: {{ .Values. config.oauth2.userProfileIdAttr | quote }} {{ end -}}
CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR: {{ .Values. config.oauth2.userProfileUsernameAttr | quote }} {{ if .Values.config.allowFreeURL -}}
CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR: {{ .Values. config.oauth2.userProfileDisplayNameAttr | quote }} CMD_ALLOW_FREEURL: {{ .Values.config.allowFreeURL | quote }}
CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: {{ .Values. config.oauth2.userProfileEmailAttr | quote }} {{ end -}}
CMD_OAUTH2_TOKEN_URL: {{ .Values. config.oauth2.tokenURL | quote }} {{ if .Values.config.requireFreeURLAuthentication -}}
CMD_OAUTH2_AUTHORIZATION_URL: {{ .Values. config.oauth2.authorizationURL | quote }} CMD_REQUIRE_FREEURL_AUTHENTICATION: {{ .Values.config.requireFreeURLAuthentication | quote }}
CMD_OAUTH2_CLIENT_ID: {{ .Values. config.oauth2.clientID | quote }} {{ end -}}
CMD_OAUTH2_SCOPE: {{ .Values. config.oauth2.scope | quote }} {{ if .Values.config.forbiddenNoteIDs -}}
CMD_OAUTH2_ROLES_CLAIM: {{ .Values. config.oauth2.rolesClaim | quote }} CMD_FORBIDDEN_NOTE_IDS: {{ .Values.config.forbiddenNoteIDs | quote }}
CMD_OAUTH2_ACCESS_ROLE: {{ .Values. config.oauth2.accessRole | quote }} {{ end -}}
CMD_DROPBOX_CLIENTID: {{ .Values. config.dropbox.clientID | quote }} {{ if .Values.config.defaultPermission -}}
CMD_DROPBOX_APPKEY: {{ .Values. config.dropbox.appKey | quote }} CMD_DEFAULT_PERMISSION: {{ .Values.config.defaultPermission | quote }}
CMD_GOOGLE_CLIENTID: {{ .Values. config.google.clientID | quote }} {{ end -}}
CMD_GOOGLE_HOSTEDDOMAIN: {{ .Values. config.google.hostedDomain | quote }} {{ if .Values.config.db.username -}}
CMD_LDAP_PROVIDERNAME: {{ .Values. config.ldap.providerName | quote }} CMD_DB_USERNAME: {{ .Values.config.db.username | quote }}
CMD_LDAP_URL: {{ .Values. config.ldap.url | quote }} {{ end -}}
CMD_LDAP_BINDDN: {{ .Values. config.ldap.bindDn | quote }} {{ if .Values.config.db.host -}}
CMD_LDAP_BINDCREDENTIALS: {{ .Values. config.ldap.bindCredentials | quote }} CMD_DB_HOST: {{ .Values.config.db.host | quote }}
CMD_LDAP_SEARCHBASE: {{ .Values. config.ldap.searchBase | quote }} {{ end -}}
CMD_LDAP_SEARCHFILTER: {{ .Values. config.ldap.searchFilter | quote }} {{ if .Values.config.db.port -}}
CMD_LDAP_SEARCHATTRIBUTES: {{ .Values. config.ldap.searchAttributes | quote }} CMD_DB_PORT: {{ .Values.config.db.port | quote }}
CMD_LDAP_USERNAMEFIELD: {{ .Values. config.ldap.usernameField | quote }} {{ end -}}
CMD_LDAP_USERIDFIELD: {{ .Values. config.ldap.useridField | quote }} {{ if .Values.config.db.database -}}
CMD_LDAP_TLS_CA: {{ .Values. config.ldap.tlsca | quote }} CMD_DB_DATABASE: {{ .Values.config.db.database | quote }}
CMD_SAML_PROVIDERNAME: {{ .Values. config.saml.providerName | quote }} {{ end -}}
CMD_SAML_IDPSSOURL: {{ .Values. config.saml.idpSsoUrl | quote }} {{ if .Values.config.db.dialect -}}
CMD_SAML_IDPCERT: {{ .Values. config.saml.idpCert | quote }} CMD_DB_DIALECT: {{ .Values.config.db.dialect | quote }}
CMD_SAML_CLIENTCERT: {{ .Values. config.saml.clientCert | quote }} {{ end -}}
CMD_SAML_ISSUER: {{ .Values. config.saml.issuer | quote }} {{ if .Values.config.sessionLife -}}
CMD_SAML_IDENTIFIERFORMAT: {{ .Values. config.saml.identifierFormat | quote }} CMD_SESSION_LIFE: {{ .Values.config.sessionLife | quote }}
CMD_SAML_DISABLEREQUESTEDAUTHNCONTEXT: {{ .Values. config.saml.disableRequestedAuthnContext | quote }} {{ end -}}
CMD_SAML_GROUPATTRIBUTE: {{ .Values. config.saml.groupAttribute | quote }} {{ if .Values.config.tooBusyLag -}}
CMD_SAML_EXTERNALGROUPS: {{ .Values. config.saml.externalGroups | quote }} CMD_TOOBUSY_LAG: {{ .Values.config.tooBusyLag | quote }}
CMD_SAML_REQUIREDGROUPS: {{ .Values. config.saml.requiredGroups | quote }} {{ end -}}
CMD_SAML_ATTRIBUTE_ID: {{ .Values. config.saml.attribute.id | quote }} {{ if .Values.config.imageUploadType -}}
CMD_SAML_ATTRIBUTE_USERNAME: {{ .Values. config.saml.attribute.username | quote }} CMD_IMAGE_UPLOAD_TYPE: {{ .Values.config.imageUploadType | quote }}
CMD_SAML_ATTRIBUTE_EMAIL: {{ .Values. config.saml.attribute.email | quote }} {{ end -}}
CMD_EMAIL: {{ .Values. config.email | quote }} {{ if .Values.config.imgur.clientID -}}
CMD_ALLOW_EMAIL_REGISTER: {{ .Values. config.allowEmailRegister | quote }} CMD_IMGUR_CLIENTID: {{ .Values.config.imgur.clientID | quote }}
CMD_ALLOW_GRAVATAR: {{ .Values. config.allowGravatar | quote }} {{ end -}}
CMD_OPENID: {{ .Values. config.openID | quote }} {{ if .Values.config.s3.accessKeyId -}}
CMD_LINKIFY_HEADER_STYLE: {{ .Values. config.linkifyHeaderStyle | quote }} CMD_S3_ACCESS_KEY_ID: {{ .Values.config.s3.accessKeyId | quote }}
{{ end -}}
{{ if .Values.config.s3.region -}}
CMD_S3_REGION: {{ .Values.config.s3.region | quote }}
{{ end -}}
{{ if .Values.config.s3.endpoint -}}
CMD_S3_ENDPOINT: {{ .Values.config.s3.endpoint | quote }}
{{ end -}}
{{ if .Values.config.s3bucket -}}
CMD_S3_BUCKET: {{ .Values.config.s3bucket | quote }}
{{ end -}}
{{ if .Values.config.s3folder -}}
CMD_S3_FOLDER: {{ .Values.config.s3folder | quote }}
{{ end -}}
{{ if .Values.config.s3publicFiles -}}
CMD_S3_PUBLIC_FILES: {{ .Values.config.s3publicFiles | quote }}
{{ end -}}
{{ if .Values.config.minio.accessKey -}}
CMD_MINIO_ACCESS_KEY: {{ .Values.config.minio.accessKey | quote }}
{{ end -}}
{{ if .Values.config.minio.endPoint -}}
CMD_MINIO_ENDPOINT: {{ .Values.config.minio.endPoint | quote }}
{{ end -}}
{{ if .Values.config.minio.secure -}}
CMD_MINIO_SECURE: {{ .Values.config.minio.secure | quote }}
{{ end -}}
{{ if .Values.config.minio.port -}}
CMD_MINIO_PORT: {{ .Values.config.minio.port | quote }}
{{ end -}}
{{ if .Values.config.lutim.url -}}
CMD_LUTIM_URL: {{ .Values.config.lutim.url | quote }}
{{ end -}}
{{ if .Values.config.azure.connectionString -}}
CMD_AZURE_CONNECTION_STRING: {{ .Values.config.azure.connectionString | quote }}
{{ end -}}
{{ if .Values.config.azure.container -}}
CMD_AZURE_CONTAINER: {{ .Values.config.azure.container | quote }}
{{ end -}}
{{ if .Values.config.facebook.clientID -}}
CMD_FACEBOOK_CLIENTID: {{ .Values.config.facebook.clientID | quote }}
{{ end -}}
{{ if .Values.config.twitter.consumerKey -}}
CMD_TWITTER_CONSUMERKEY: {{ .Values.config.twitter.consumerKey | quote }}
{{ end -}}
{{ if .Values.config.github.clientID -}}
CMD_GITHUB_CLIENTID: {{ .Values.config.github.clientID | quote }}
{{ end -}}
{{ if .Values.config.gitlab.baseURL -}}
CMD_GITLAB_BASEURL: {{ .Values.config.gitlab.baseURL | quote }}
{{ end -}}
{{ if .Values.config.gitlab.clientID -}}
CMD_GITLAB_CLIENTID: {{ .Values.config.gitlab.clientID | quote }}
{{ end -}}
{{ if .Values.config.gitlab.scope -}}
CMD_GITLAB_SCOPE: {{ .Values.config.gitlab.scope | quote }}
{{ end -}}
{{ if .Values.config.mattermost.baseURL -}}
CMD_MATTERMOST_BASEURL: {{ .Values.config.mattermost.baseURL | quote }}
{{ end -}}
{{ if .Values.config.mattermost.clientID -}}
CMD_MATTERMOST_CLIENTID: {{ .Values.config.mattermost.clientID | quote }}
{{ end -}}
{{ if .Values.config.oauth2.providerName -}}
CMD_OAUTH2_PROVIDERNAME: {{ .Values.config.oauth2.providerName | quote }}
{{ end -}}
{{ if .Values.config.oauth2.baseURL -}}
CMD_OAUTH2_BASEURL: {{ .Values.config.oauth2.baseURL | quote }}
{{ end -}}
{{ if .Values.config.oauth2.userProfileURL -}}
CMD_OAUTH2_USER_PROFILE_URL: {{ .Values.config.oauth2.userProfileURL | quote }}
{{ end -}}
{{ if .Values.config.oauth2.userProfileIdAttr -}}
CMD_OAUTH2_USER_PROFILE_ID_ATTR: {{ .Values.config.oauth2.userProfileIdAttr | quote }}
{{ end -}}
{{ if .Values.config.oauth2.userProfileUsernameAttr -}}
CMD_OAUTH2_USER_PROFILE_USERNAME_ATTR: {{ .Values.config.oauth2.userProfileUsernameAttr | quote }}
{{ end -}}
{{ if .Values.config.oauth2.userProfileDisplayNameAttr -}}
CMD_OAUTH2_USER_PROFILE_DISPLAY_NAME_ATTR: {{ .Values.config.oauth2.userProfileDisplayNameAttr | quote }}
{{ end -}}
{{ if .Values.config.oauth2.userProfileEmailAttr -}}
CMD_OAUTH2_USER_PROFILE_EMAIL_ATTR: {{ .Values.config.oauth2.userProfileEmailAttr | quote }}
{{ end -}}
{{ if .Values.config.oauth2.tokenURL -}}
CMD_OAUTH2_TOKEN_URL: {{ .Values.config.oauth2.tokenURL | quote }}
{{ end -}}
{{ if .Values.config.oauth2.authorizationURL -}}
CMD_OAUTH2_AUTHORIZATION_URL: {{ .Values.config.oauth2.authorizationURL | quote }}
{{ end -}}
{{ if .Values.config.oauth2.clientID -}}
CMD_OAUTH2_CLIENT_ID: {{ .Values.config.oauth2.clientID | quote }}
{{ end -}}
{{ if .Values.config.oauth2.scope -}}
CMD_OAUTH2_SCOPE: {{ .Values.config.oauth2.scope | quote }}
{{ end -}}
{{ if .Values.config.oauth2.rolesClaim -}}
CMD_OAUTH2_ROLES_CLAIM: {{ .Values.config.oauth2.rolesClaim | quote }}
{{ end -}}
{{ if .Values.config.oauth2.accessRole -}}
CMD_OAUTH2_ACCESS_ROLE: {{ .Values.config.oauth2.accessRole | quote }}
{{ end -}}
{{ if .Values.config.dropbox.clientID -}}
CMD_DROPBOX_CLIENTID: {{ .Values.config.dropbox.clientID | quote }}
{{ end -}}
{{ if .Values.config.dropbox.appKey -}}
CMD_DROPBOX_APPKEY: {{ .Values.config.dropbox.appKey | quote }}
{{ end -}}
{{ if .Values.config.google.clientID -}}
CMD_GOOGLE_CLIENTID: {{ .Values.config.google.clientID | quote }}
{{ end -}}
{{ if .Values.config.google.hostedDomain -}}
CMD_GOOGLE_HOSTEDDOMAIN: {{ .Values.config.google.hostedDomain | quote }}
{{ end -}}
{{ if .Values.config.ldap.providerName -}}
CMD_LDAP_PROVIDERNAME: {{ .Values.config.ldap.providerName | quote }}
{{ end -}}
{{ if .Values.config.ldap.url -}}
CMD_LDAP_URL: {{ .Values.config.ldap.url | quote }}
{{ end -}}
{{ if .Values.config.ldap.bindDn -}}
CMD_LDAP_BINDDN: {{ .Values.config.ldap.bindDn | quote }}
{{ end -}}
{{ if .Values.config.ldap.bindCredentials -}}
CMD_LDAP_BINDCREDENTIALS: {{ .Values.config.ldap.bindCredentials | quote }}
{{ end -}}
{{ if .Values.config.ldap.searchBase -}}
CMD_LDAP_SEARCHBASE: {{ .Values.config.ldap.searchBase | quote }}
{{ end -}}
{{ if .Values.config.ldap.searchFilter -}}
CMD_LDAP_SEARCHFILTER: {{ .Values.config.ldap.searchFilter | quote }}
{{ end -}}
{{ if .Values.config.ldap.searchAttributes -}}
CMD_LDAP_SEARCHATTRIBUTES: {{ .Values.config.ldap.searchAttributes | quote }}
{{ end -}}
{{ if .Values.config.ldap.usernameField -}}
CMD_LDAP_USERNAMEFIELD: {{ .Values.config.ldap.usernameField | quote }}
{{ end -}}
{{ if .Values.config.ldap.useridField -}}
CMD_LDAP_USERIDFIELD: {{ .Values.config.ldap.useridField | quote }}
{{ end -}}
{{ if .Values.config.ldap.tlsca -}}
CMD_LDAP_TLS_CA: {{ .Values.config.ldap.tlsca | quote }}
{{ end -}}
{{ if .Values.config.saml.providerName -}}
CMD_SAML_PROVIDERNAME: {{ .Values.config.saml.providerName | quote }}
{{ end -}}
{{ if .Values.config.saml.idpSsoUrl -}}
CMD_SAML_IDPSSOURL: {{ .Values.config.saml.idpSsoUrl | quote }}
{{ end -}}
{{ if .Values.config.saml.idpCert -}}
CMD_SAML_IDPCERT: {{ .Values.config.saml.idpCert | quote }}
{{ end -}}
{{ if .Values.config.saml.clientCert -}}
CMD_SAML_CLIENTCERT: {{ .Values.config.saml.clientCert | quote }}
{{ end -}}
{{ if .Values.config.saml.issuer -}}
CMD_SAML_ISSUER: {{ .Values.config.saml.issuer | quote }}
{{ end -}}
{{ if .Values.config.saml.identifierFormat -}}
CMD_SAML_IDENTIFIERFORMAT: {{ .Values.config.saml.identifierFormat | quote }}
{{ end -}}
{{ if .Values.config.saml.disableRequestedAuthnContext -}}
CMD_SAML_DISABLEREQUESTEDAUTHNCONTEXT: {{ .Values.config.saml.disableRequestedAuthnContext | quote }}
{{ end -}}
{{ if .Values.config.saml.groupAttribute -}}
CMD_SAML_GROUPATTRIBUTE: {{ .Values.config.saml.groupAttribute | quote }}
{{ end -}}
{{ if .Values.config.saml.externalGroups -}}
CMD_SAML_EXTERNALGROUPS: {{ .Values.config.saml.externalGroups | quote }}
{{ end -}}
{{ if .Values.config.saml.requiredGroups -}}
CMD_SAML_REQUIREDGROUPS: {{ .Values.config.saml.requiredGroups | quote }}
{{ end -}}
{{ if .Values.config.saml.attribute.id -}}
CMD_SAML_ATTRIBUTE_ID: {{ .Values.config.saml.attribute.id | quote }}
{{ end -}}
{{ if .Values.config.saml.attribute.username -}}
CMD_SAML_ATTRIBUTE_USERNAME: {{ .Values.config.saml.attribute.username | quote }}
{{ end -}}
{{ if .Values.config.saml.attribute.email -}}
CMD_SAML_ATTRIBUTE_EMAIL: {{ .Values.config.saml.attribute.email | quote }}
{{ end -}}
{{ if .Values.config.email -}}
CMD_EMAIL: {{ .Values.config.email | quote }}
{{ end -}}
{{ if .Values.config.allowEmailRegister -}}
CMD_ALLOW_EMAIL_REGISTER: {{ .Values.config.allowEmailRegister | quote }}
{{ end -}}
{{ if .Values.config.allowGravatar -}}
CMD_ALLOW_GRAVATAR: {{ .Values.config.allowGravatar | quote }}
{{ end -}}
{{ if .Values.config.openID -}}
CMD_OPENID: {{ .Values.config.openID | quote }}
{{ end -}}
{{ if .Values.config.linkifyHeaderStyle -}}
CMD_LINKIFY_HEADER_STYLE: {{ .Values.config.linkifyHeaderStyle | quote }}
{{ end -}}

48
templates/deployment.yaml
View File

@ -13,8 +13,10 @@ spec:
{{- include "hedgedoc.selectorLabels" . | nindent 6 }} {{- include "hedgedoc.selectorLabels" . | nindent 6 }}
template: template:
metadata: metadata:
{{- with .Values.podAnnotations }}
annotations: annotations:
checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
checksum/secret: {{ include (print $.Template.BasePath "/secrets.yaml") . | sha256sum }}
{{- with .Values.podAnnotations }}
{{- toYaml . | nindent 8 }} {{- toYaml . | nindent 8 }}
{{- end }} {{- end }}
labels: labels:
@ -28,24 +30,34 @@ spec:
securityContext: securityContext:
{{- toYaml .Values.podSecurityContext | nindent 8 }} {{- toYaml .Values.podSecurityContext | nindent 8 }}
containers: containers:
- name: {{ .Chart.Name }} - name: {{ .Chart.Name }}
securityContext: securityContext:
{{- toYaml .Values.securityContext | nindent 12 }} {{- toYaml .Values.securityContext | nindent 12 }}
image: "{{ .Values.image.registry}}/{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" image: "{{ .Values.image.registry}}/{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
imagePullPolicy: {{ .Values.image.pullPolicy }} imagePullPolicy: {{ .Values.image.pullPolicy }}
ports: envFrom:
- name: http - configMapRef:
containerPort: {{ .Values.service.port }} name: {{ include "hedgedoc.fullname" . }}
protocol: TCP {{- if .Values.existingSecret }}
livenessProbe: - secretRef:
httpGet: name: {{ .Values.existingSecret }}
path: / {{- else }}
port: http - secretRef:
readinessProbe: name: {{ include "hedgedoc.fullname" . }}
httpGet: {{- end }}
path: / ports:
port: http - name: http
resources: containerPort: {{ .Values.config.port }}
protocol: TCP
livenessProbe:
httpGet:
path: /
port: http
readinessProbe:
httpGet:
path: /
port: http
resources:
{{- toYaml .Values.resources | nindent 12 }} {{- toYaml .Values.resources | nindent 12 }}
{{- with .Values.nodeSelector }} {{- with .Values.nodeSelector }}
nodeSelector: nodeSelector:

16
templates/hpa.yaml
View File

@ -14,15 +14,15 @@ spec:
maxReplicas: {{ .Values.autoscaling.maxReplicas }} maxReplicas: {{ .Values.autoscaling.maxReplicas }}
metrics: metrics:
{{- if .Values.autoscaling.targetCPUUtilizationPercentage }} {{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
- type: Resource - type: Resource
resource: resource:
name: cpu name: cpu
targetAverageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }} targetAverageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
{{- end }} {{- end }}
{{- if .Values.autoscaling.targetMemoryUtilizationPercentage }} {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
- type: Resource - type: Resource
resource: resource:
name: memory name: memory
targetAverageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }} targetAverageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
{{- end }} {{- end }}
{{- end }} {{- end }}

32
templates/ingress.yaml
View File

@ -1,6 +1,6 @@
{{- if .Values.ingress.enabled -}} {{- if .Values.ingress.enabled -}}
{{- $fullName := include "hedgedoc.fullname" . -}} {{- $fullName := include "hedgedoc.fullname" . -}}
{{- $svcPort := .Values.service.port -}} {{- $svcPort := .Values.config.port -}}
{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} {{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }}
{{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }} {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }}
{{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}} {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}}
@ -29,32 +29,32 @@ spec:
{{- if .Values.ingress.tls }} {{- if .Values.ingress.tls }}
tls: tls:
{{- range .Values.ingress.tls }} {{- range .Values.ingress.tls }}
- hosts: - hosts:
{{- range .hosts }} {{- range .hosts }}
- {{ . | quote }} - {{ . | quote }}
{{- end }} {{- end }}
secretName: {{ .secretName }} secretName: {{ .secretName }}
{{- end }} {{- end }}
{{- end }} {{- end }}
rules: rules:
{{- range .Values.ingress.hosts }} {{- range .Values.ingress.hosts }}
- host: {{ .host | quote }} - host: {{ .host | quote }}
http: http:
paths: paths:
{{- range .paths }} {{- range .paths }}
- path: {{ .path }} - path: {{ .path }}
{{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }} {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }}
pathType: {{ .pathType }} pathType: {{ .pathType }}
{{- end }} {{- end }}
backend: backend:
{{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }}
service: service:
name: {{ $fullName }} name: {{ $fullName }}
port: port:
number: {{ $svcPort }} number: {{ $svcPort }}
{{- else }} {{- else }}
serviceName: {{ $fullName }} serviceName: {{ $fullName }}
servicePort: {{ $svcPort }} servicePort: {{ $svcPort }}
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- end }} {{- end }}

50
templates/secrets.yaml
View File

@ -7,17 +7,41 @@ metadata:
{{- include "hedgedoc.labels" . | nindent 4 }} {{- include "hedgedoc.labels" . | nindent 4 }}
type: Opaque type: Opaque
data: data:
CMD_DB_URL: {{ .Values. config.dbURL | quote }} CMD_SESSION_SECRET: {{ default (randAlphaNum 64) .Values.config.sessionSecret | b64enc | quote }}
CMD_DB_PASSWORD: {{ .Values. config.csp.db.password | quote }} {{ if .Values.config.dbURL -}}
CMD_S3_SECRET_ACCESS_KEY: {{ .Values. config.s3.secretAccessKey | quote }} CMD_DB_URL: {{ .Values.config.dbURL | b64enc | quote }}
CMD_MINIO_SECRET_KEY: {{ .Values. config.minio.secretKey | quote }} {{- end }}
CMD_FACEBOOK_CLIENTSECRET: {{ .Values. config.facebook.clientSecret | quote }} {{ if .Values.config.db.password -}}
CMD_TWITTER_CONSUMERSECRET: {{ .Values. config.twitter.consumerSecret | quote }} CMD_DB_PASSWORD: {{ .Values.config.db.password | b64enc | quote }}
CMD_GITHUB_CLIENTSECRET: {{ .Values. config.github.clientSecret | quote }} {{- end }}
CMD_GITLAB_CLIENTSECRET: {{ .Values. config.gitlab.clientSecret | quote }} {{ if .Values.config.s3.secretAccessKey -}}
CMD_MATTERMOST_CLIENTSECRET: {{ .Values. config.mattermost.clientSecret | quote }} CMD_S3_SECRET_ACCESS_KEY: {{ .Values.config.s3.secretAccessKey | b64enc | quote }}
CMD_OAUTH2_CLIENT_SECRET: {{ .Values. config.oauth2.clientSecret | quote }} {{- end }}
CMD_DROPBOX_CLIENTSECRET: {{ .Values. config.dropbox.clientSecret | quote }} {{ if .Values.config.minio.secretKey -}}
CMD_GOOGLE_CLIENTSECRET: {{ .Values. config.google.clientSecret | quote }} CMD_MINIO_SECRET_KEY: {{ .Values.config.minio.secretKey | b64enc | quote }}
{{- end }}
{{ if .Values.config.facebook.clientSecret -}}
CMD_FACEBOOK_CLIENTSECRET: {{ .Values.config.facebook.clientSecret | b64enc | quote }}
{{- end }}
{{ if .Values.config.twitter.consumerSecret -}}
CMD_TWITTER_CONSUMERSECRET: {{ .Values.config.twitter.consumerSecret | b64enc | quote }}
{{- end }}
{{ if .Values.config.github.clientSecret -}}
CMD_GITHUB_CLIENTSECRET: {{ .Values.config.github.clientSecret | b64enc | quote }}
{{- end }}
{{ if .Values.config.gitlab.clientSecret -}}
CMD_GITLAB_CLIENTSECRET: {{ .Values.config.gitlab.clientSecret | b64enc | quote }}
{{- end }}
{{ if .Values.config.mattermost.clientSecret -}}
CMD_MATTERMOST_CLIENTSECRET: {{ .Values.config.mattermost.clientSecret | b64enc | quote }}
{{- end }}
{{ if .Values.config.oauth2.clientSecret -}}
CMD_OAUTH2_CLIENT_SECRET: {{ .Values.config.oauth2.clientSecret | b64enc | quote }}
{{- end }}
{{ if .Values.config.dropbox.clientSecret -}}
CMD_DROPBOX_CLIENTSECRET: {{ .Values.config.dropbox.clientSecret | b64enc | quote }}
{{- end }}
{{ if .Values.config.google.clientSecret -}}
CMD_GOOGLE_CLIENTSECRET: {{ .Values.config.google.clientSecret | b64enc | quote }}
{{- end }}
{{- end }} {{- end }}

8
templates/service.yaml
View File

@ -7,9 +7,9 @@ metadata:
spec: spec:
type: {{ .Values.service.type }} type: {{ .Values.service.type }}
ports: ports:
- port: {{ .Values.service.port }} - port: {{ .Values.config.port }}
targetPort: http targetPort: http
protocol: TCP protocol: TCP
name: http name: http
selector: selector:
{{- include "hedgedoc.selectorLabels" . | nindent 4 }} {{- include "hedgedoc.selectorLabels" . | nindent 4 }}

8
templates/tests/test-connection.yaml
View File

@ -8,8 +8,8 @@ metadata:
"helm.sh/hook": test "helm.sh/hook": test
spec: spec:
containers: containers:
- name: wget - name: wget
image: busybox image: busybox
command: ['wget'] command: ['wget']
args: ['{{ include "hedgedoc.fullname" . }}:{{ .Values.service.port }}'] args: ['{{ include "hedgedoc.fullname" . }}:{{ .Values.config.port }}']
restartPolicy: Never restartPolicy: Never

23
values.yaml
View File

@ -2,8 +2,8 @@ config:
sourceURL: "" sourceURL: ""
domain: "" domain: ""
urlPath: "" urlPath: ""
host: "" host: 0.0.0.0
port: "" port: 3000
path: "" path: ""
loglevel: "" loglevel: ""
urlAddPort: "" urlAddPort: ""
@ -31,12 +31,12 @@ config:
defaultPermission: "" defaultPermission: ""
dbURL: "" dbURL: ""
db: db:
username: "" username: "hedgedoc"
password: "" password: ""
host: "" host: ""
port: "" port: "5432"
database: "" database: "hedgedoc"
dialect: "" dialect: "postgres"
sessionSecret: "" sessionSecret: ""
sessionLife: "" sessionLife: ""
tooBusyLag: "" tooBusyLag: ""
@ -150,7 +150,7 @@ image:
# Overrides the image tag whose default is the chart appVersion. # Overrides the image tag whose default is the chart appVersion.
tag: "" tag: ""
imagePullSecrets: [ ] imagePullSecrets: []
nameOverride: "" nameOverride: ""
fullnameOverride: "" fullnameOverride: ""
@ -178,20 +178,21 @@ securityContext: {}
service: service:
type: ClusterIP type: ClusterIP
port: 3000 # Port option used from config.port
# port: 3000
ingress: ingress:
enabled: false enabled: false
className: "" className: ""
annotations: {} annotations: {}
# kubernetes.io/ingress.class: nginx # kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
hosts: hosts:
- host: chart-example.local - host: chart-example.local
paths: paths:
- path: / - path: /
pathType: ImplementationSpecific pathType: ImplementationSpecific
tls: [ ] tls: []
# - secretName: chart-example-tls # - secretName: chart-example-tls
# hosts: # hosts:
# - chart-example.local # - chart-example.local
@ -217,6 +218,6 @@ autoscaling:
nodeSelector: {} nodeSelector: {}
tolerations: [ ] tolerations: []
affinity: {} affinity: {}