From e1e4213896a94e44820d3f62a0e445fff91a9543 Mon Sep 17 00:00:00 2001
From: Jan-Niklas Weghorn <jrester379@gmail.com>
Date: Sun, 4 Aug 2024 17:25:55 +0200
Subject: [PATCH] update vikunja
---
charts/hortusfox/.helmignore | 23 ++++
charts/hortusfox/Chart.yaml | 6 +
charts/hortusfox/README.md | 57 ++++++++
charts/hortusfox/templates/NOTES.txt | 22 ++++
charts/hortusfox/templates/_helpers.tpl | 62 +++++++++
charts/hortusfox/templates/deployment.yaml | 95 ++++++++++++++
charts/hortusfox/templates/hpa.yaml | 32 +++++
charts/hortusfox/templates/ingress.yaml | 61 +++++++++
charts/hortusfox/templates/service.yaml | 15 +++
.../hortusfox/templates/serviceaccount.yaml | 13 ++
.../templates/tests/test-connection.yaml | 15 +++
charts/hortusfox/values.yaml | 117 +++++++++++++++++
charts/overleaf/.helmignore | 23 ++++
charts/overleaf/Chart.yaml | 6 +
charts/overleaf/README.md | 57 ++++++++
charts/overleaf/templates/NOTES.txt | 22 ++++
charts/overleaf/templates/_helpers.tpl | 62 +++++++++
charts/overleaf/templates/hpa.yaml | 32 +++++
charts/overleaf/templates/ingress.yaml | 61 +++++++++
charts/overleaf/templates/service.yaml | 15 +++
charts/overleaf/templates/serviceaccount.yaml | 13 ++
charts/overleaf/templates/statefulset.yaml | 121 +++++++++++++++++
.../templates/tests/test-connection.yaml | 15 +++
charts/overleaf/values.yaml | 115 ++++++++++++++++
charts/vault-unseal/.editorconfig | 24 ++++
.../.github/workflows/gh-release.yml | 14 ++
charts/vault-unseal/.gitignore | 1 +
charts/vault-unseal/.helmignore | 23 ++++
charts/vault-unseal/Chart.yaml | 20 +++
charts/vault-unseal/LICENSE | 21 +++
charts/vault-unseal/README.md | 53 ++++++++
charts/vault-unseal/templates/_helpers.tpl | 62 +++++++++
charts/vault-unseal/templates/deployment.yaml | 80 +++++++++++
charts/vault-unseal/templates/secret.yaml | 17 +++
.../templates/serviceaccount.yaml | 16 +++
charts/vault-unseal/templates/token.yaml | 14 ++
charts/vault-unseal/values.yaml | 124 ++++++++++++++++++
charts/vikunja/README.md | 2 +-
38 files changed, 1530 insertions(+), 1 deletion(-)
create mode 100644 charts/hortusfox/.helmignore
create mode 100644 charts/hortusfox/Chart.yaml
create mode 100644 charts/hortusfox/README.md
create mode 100644 charts/hortusfox/templates/NOTES.txt
create mode 100644 charts/hortusfox/templates/_helpers.tpl
create mode 100644 charts/hortusfox/templates/deployment.yaml
create mode 100644 charts/hortusfox/templates/hpa.yaml
create mode 100644 charts/hortusfox/templates/ingress.yaml
create mode 100644 charts/hortusfox/templates/service.yaml
create mode 100644 charts/hortusfox/templates/serviceaccount.yaml
create mode 100644 charts/hortusfox/templates/tests/test-connection.yaml
create mode 100644 charts/hortusfox/values.yaml
create mode 100644 charts/overleaf/.helmignore
create mode 100644 charts/overleaf/Chart.yaml
create mode 100644 charts/overleaf/README.md
create mode 100644 charts/overleaf/templates/NOTES.txt
create mode 100644 charts/overleaf/templates/_helpers.tpl
create mode 100644 charts/overleaf/templates/hpa.yaml
create mode 100644 charts/overleaf/templates/ingress.yaml
create mode 100644 charts/overleaf/templates/service.yaml
create mode 100644 charts/overleaf/templates/serviceaccount.yaml
create mode 100644 charts/overleaf/templates/statefulset.yaml
create mode 100644 charts/overleaf/templates/tests/test-connection.yaml
create mode 100644 charts/overleaf/values.yaml
create mode 100644 charts/vault-unseal/.editorconfig
create mode 100644 charts/vault-unseal/.github/workflows/gh-release.yml
create mode 100644 charts/vault-unseal/.gitignore
create mode 100644 charts/vault-unseal/.helmignore
create mode 100644 charts/vault-unseal/Chart.yaml
create mode 100644 charts/vault-unseal/LICENSE
create mode 100644 charts/vault-unseal/README.md
create mode 100644 charts/vault-unseal/templates/_helpers.tpl
create mode 100644 charts/vault-unseal/templates/deployment.yaml
create mode 100644 charts/vault-unseal/templates/secret.yaml
create mode 100644 charts/vault-unseal/templates/serviceaccount.yaml
create mode 100644 charts/vault-unseal/templates/token.yaml
create mode 100644 charts/vault-unseal/values.yaml
diff --git a/charts/hortusfox/.helmignore b/charts/hortusfox/.helmignore
new file mode 100644
index 0000000..0e8a0eb
--- /dev/null
+++ b/charts/hortusfox/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/charts/hortusfox/Chart.yaml b/charts/hortusfox/Chart.yaml
new file mode 100644
index 0000000..61e03f8
--- /dev/null
+++ b/charts/hortusfox/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v2
+name: hortusfox
+description: Self-hosted collaborative plant management system for your local environment
+type: application
+version: 0.1.0
+appVersion: "v3.2"
diff --git a/charts/hortusfox/README.md b/charts/hortusfox/README.md
new file mode 100644
index 0000000..5492505
--- /dev/null
+++ b/charts/hortusfox/README.md
@@ -0,0 +1,57 @@
+# hortusfox
+
+  
+
+Self-hosted collaborative plant management system for your local environment
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| affinity | object | `{}` | |
+| autoscaling.enabled | bool | `false` | |
+| autoscaling.maxReplicas | int | `100` | |
+| autoscaling.minReplicas | int | `1` | |
+| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
+| fullnameOverride | string | `""` | |
+| hortusfox.admin.existingSecret | string | `""` | |
+| hortusfox.admin.mailSecretKey | string | `"mail"` | |
+| hortusfox.admin.passwordSecretKey | string | `"password"` | |
+| hortusfox.db.existingSecret | string | `""` | |
+| hortusfox.db.passwordSecretKey | string | `"password"` | |
+| hortusfox.db.usernameSecretKey | string | `"username"` | |
+| image.pullPolicy | string | `"IfNotPresent"` | |
+| image.repository | string | `"ghcr.io/danielbrendel/hortusfox-web"` | |
+| image.tag | string | `""` | |
+| imagePullSecrets | list | `[]` | |
+| ingress.annotations | object | `{}` | |
+| ingress.className | string | `""` | |
+| ingress.enabled | bool | `false` | |
+| ingress.hosts[0].host | string | `"chart-example.local"` | |
+| ingress.hosts[0].paths[0].path | string | `"/"` | |
+| ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | |
+| ingress.tls | list | `[]` | |
+| livenessProbe.httpGet.path | string | `"/"` | |
+| livenessProbe.httpGet.port | string | `"http"` | |
+| nameOverride | string | `""` | |
+| nodeSelector | object | `{}` | |
+| podAnnotations | object | `{}` | |
+| podLabels | object | `{}` | |
+| podSecurityContext | object | `{}` | |
+| readinessProbe.httpGet.path | string | `"/"` | |
+| readinessProbe.httpGet.port | string | `"http"` | |
+| replicaCount | int | `1` | |
+| resources | object | `{}` | |
+| securityContext | object | `{}` | |
+| service.port | int | `80` | |
+| service.type | string | `"ClusterIP"` | |
+| serviceAccount.annotations | object | `{}` | |
+| serviceAccount.automount | bool | `true` | |
+| serviceAccount.create | bool | `true` | |
+| serviceAccount.name | string | `""` | |
+| tolerations | list | `[]` | |
+| volumeMounts | list | `[]` | |
+| volumes | list | `[]` | |
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v1.13.1](https://github.com/norwoodj/helm-docs/releases/v1.13.1)
diff --git a/charts/hortusfox/templates/NOTES.txt b/charts/hortusfox/templates/NOTES.txt
new file mode 100644
index 0000000..59327b1
--- /dev/null
+++ b/charts/hortusfox/templates/NOTES.txt
@@ -0,0 +1,22 @@
+1. Get the application URL by running these commands:
+{{- if .Values.ingress.enabled }}
+{{- range $host := .Values.ingress.hosts }}
+ {{- range .paths }}
+ http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }}
+ {{- end }}
+{{- end }}
+{{- else if contains "NodePort" .Values.service.type }}
+ export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "hortusfox.fullname" . }})
+ export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
+ echo http://$NODE_IP:$NODE_PORT
+{{- else if contains "LoadBalancer" .Values.service.type }}
+ NOTE: It may take a few minutes for the LoadBalancer IP to be available.
+ You can watch its status by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "hortusfox.fullname" . }}'
+ export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "hortusfox.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
+ echo http://$SERVICE_IP:{{ .Values.service.port }}
+{{- else if contains "ClusterIP" .Values.service.type }}
+ export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "hortusfox.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
+ export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
+ echo "Visit http://127.0.0.1:8080 to use your application"
+ kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
+{{- end }}
diff --git a/charts/hortusfox/templates/_helpers.tpl b/charts/hortusfox/templates/_helpers.tpl
new file mode 100644
index 0000000..a002788
--- /dev/null
+++ b/charts/hortusfox/templates/_helpers.tpl
@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "hortusfox.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "hortusfox.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "hortusfox.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "hortusfox.labels" -}}
+helm.sh/chart: {{ include "hortusfox.chart" . }}
+{{ include "hortusfox.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "hortusfox.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "hortusfox.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "hortusfox.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "hortusfox.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
diff --git a/charts/hortusfox/templates/deployment.yaml b/charts/hortusfox/templates/deployment.yaml
new file mode 100644
index 0000000..84d1503
--- /dev/null
+++ b/charts/hortusfox/templates/deployment.yaml
@@ -0,0 +1,95 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "hortusfox.fullname" . }}
+ labels:
+ {{- include "hortusfox.labels" . | nindent 4 }}
+spec:
+ {{- if not .Values.autoscaling.enabled }}
+ replicas: {{ .Values.replicaCount }}
+ {{- end }}
+ selector:
+ matchLabels:
+ {{- include "hortusfox.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ {{- with .Values.podAnnotations }}
+ annotations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ labels:
+ {{- include "hortusfox.labels" . | nindent 8 }}
+ {{- with .Values.podLabels }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ spec:
+ {{- with .Values.imagePullSecrets }}
+ imagePullSecrets:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ serviceAccountName: {{ include "hortusfox.serviceAccountName" . }}
+ securityContext:
+ {{- toYaml .Values.podSecurityContext | nindent 8 }}
+ containers:
+ - name: {{ .Chart.Name }}
+ securityContext:
+ {{- toYaml .Values.securityContext | nindent 12 }}
+ image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+ imagePullPolicy: {{ .Values.image.pullPolicy }}
+ ports:
+ - name: http
+ containerPort: {{ .Values.service.port }}
+ protocol: TCP
+ livenessProbe:
+ {{- toYaml .Values.livenessProbe | nindent 12 }}
+ readinessProbe:
+ {{- toYaml .Values.readinessProbe | nindent 12 }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ env:
+ - name: APP_ADMIN_MAIL
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Values.config.admin.existingSecret }}
+ key: {{ .Values.config.admin.mailSecretKey }}
+ - name: APP_ADMIN_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Values.config.admin.existingSecret }}
+ key: {{ .Values.config.admin.passwordSecretKey }}
+ - name: DB_HOST
+ value: {{ .Values.config.db.host }}
+ - name: DB_PORT
+ value: {{ .Values.config.db.port | quote }}
+ - name: DB_USERNAME
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Values.config.db.existingSecret }}
+ key: {{ .Values.config.db.usernameSecretKey }}
+ - name: DB_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Values.config.db.existingSecret }}
+ key: {{ .Values.config.db.passwordSecretKey }}
+ - name: DB_CHARSET
+ value: "utf8mb4"
+ {{- with .Values.volumeMounts }}
+ volumeMounts:
+ {{- toYaml . | nindent 12 }}
+ {{- end }}
+ {{- with .Values.volumes }}
+ volumes:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/charts/hortusfox/templates/hpa.yaml b/charts/hortusfox/templates/hpa.yaml
new file mode 100644
index 0000000..aa77a53
--- /dev/null
+++ b/charts/hortusfox/templates/hpa.yaml
@@ -0,0 +1,32 @@
+{{- if .Values.autoscaling.enabled }}
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+ name: {{ include "hortusfox.fullname" . }}
+ labels:
+ {{- include "hortusfox.labels" . | nindent 4 }}
+spec:
+ scaleTargetRef:
+ apiVersion: apps/v1
+ kind: Deployment
+ name: {{ include "hortusfox.fullname" . }}
+ minReplicas: {{ .Values.autoscaling.minReplicas }}
+ maxReplicas: {{ .Values.autoscaling.maxReplicas }}
+ metrics:
+ {{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
+ - type: Resource
+ resource:
+ name: cpu
+ target:
+ type: Utilization
+ averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
+ {{- end }}
+ {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
+ - type: Resource
+ resource:
+ name: memory
+ target:
+ type: Utilization
+ averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
+ {{- end }}
+{{- end }}
diff --git a/charts/hortusfox/templates/ingress.yaml b/charts/hortusfox/templates/ingress.yaml
new file mode 100644
index 0000000..a8704ac
--- /dev/null
+++ b/charts/hortusfox/templates/ingress.yaml
@@ -0,0 +1,61 @@
+{{- if .Values.ingress.enabled -}}
+{{- $fullName := include "hortusfox.fullname" . -}}
+{{- $svcPort := .Values.service.port -}}
+{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }}
+ {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }}
+ {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}}
+ {{- end }}
+{{- end }}
+{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}}
+apiVersion: networking.k8s.io/v1
+{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}}
+apiVersion: networking.k8s.io/v1beta1
+{{- else -}}
+apiVersion: extensions/v1beta1
+{{- end }}
+kind: Ingress
+metadata:
+ name: {{ $fullName }}
+ labels:
+ {{- include "hortusfox.labels" . | nindent 4 }}
+ {{- with .Values.ingress.annotations }}
+ annotations:
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+spec:
+ {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }}
+ ingressClassName: {{ .Values.ingress.className }}
+ {{- end }}
+ {{- if .Values.ingress.tls }}
+ tls:
+ {{- range .Values.ingress.tls }}
+ - hosts:
+ {{- range .hosts }}
+ - {{ . | quote }}
+ {{- end }}
+ secretName: {{ .secretName }}
+ {{- end }}
+ {{- end }}
+ rules:
+ {{- range .Values.ingress.hosts }}
+ - host: {{ .host | quote }}
+ http:
+ paths:
+ {{- range .paths }}
+ - path: {{ .path }}
+ {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }}
+ pathType: {{ .pathType }}
+ {{- end }}
+ backend:
+ {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }}
+ service:
+ name: {{ $fullName }}
+ port:
+ number: {{ $svcPort }}
+ {{- else }}
+ serviceName: {{ $fullName }}
+ servicePort: {{ $svcPort }}
+ {{- end }}
+ {{- end }}
+ {{- end }}
+{{- end }}
diff --git a/charts/hortusfox/templates/service.yaml b/charts/hortusfox/templates/service.yaml
new file mode 100644
index 0000000..0dbec78
--- /dev/null
+++ b/charts/hortusfox/templates/service.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: {{ include "hortusfox.fullname" . }}
+ labels:
+ {{- include "hortusfox.labels" . | nindent 4 }}
+spec:
+ type: {{ .Values.service.type }}
+ ports:
+ - port: {{ .Values.service.port }}
+ targetPort: http
+ protocol: TCP
+ name: http
+ selector:
+ {{- include "hortusfox.selectorLabels" . | nindent 4 }}
diff --git a/charts/hortusfox/templates/serviceaccount.yaml b/charts/hortusfox/templates/serviceaccount.yaml
new file mode 100644
index 0000000..7377297
--- /dev/null
+++ b/charts/hortusfox/templates/serviceaccount.yaml
@@ -0,0 +1,13 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "hortusfox.serviceAccountName" . }}
+ labels:
+ {{- include "hortusfox.labels" . | nindent 4 }}
+ {{- with .Values.serviceAccount.annotations }}
+ annotations:
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
+{{- end }}
diff --git a/charts/hortusfox/templates/tests/test-connection.yaml b/charts/hortusfox/templates/tests/test-connection.yaml
new file mode 100644
index 0000000..887c389
--- /dev/null
+++ b/charts/hortusfox/templates/tests/test-connection.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Pod
+metadata:
+ name: "{{ include "hortusfox.fullname" . }}-test-connection"
+ labels:
+ {{- include "hortusfox.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": test
+spec:
+ containers:
+ - name: wget
+ image: busybox
+ command: ['wget']
+ args: ['{{ include "hortusfox.fullname" . }}:{{ .Values.service.port }}']
+ restartPolicy: Never
diff --git a/charts/hortusfox/values.yaml b/charts/hortusfox/values.yaml
new file mode 100644
index 0000000..6b3ffd0
--- /dev/null
+++ b/charts/hortusfox/values.yaml
@@ -0,0 +1,117 @@
+# Default values for hortusfox.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+replicaCount: 1
+
+image:
+ repository: ghcr.io/danielbrendel/hortusfox-web
+ pullPolicy: IfNotPresent
+ # Overrides the image tag whose default is the chart appVersion.
+ tag: ""
+
+imagePullSecrets: []
+nameOverride: ""
+fullnameOverride: ""
+
+serviceAccount:
+ # Specifies whether a service account should be created
+ create: true
+ # Automatically mount a ServiceAccount's API credentials?
+ automount: true
+ # Annotations to add to the service account
+ annotations: {}
+ # The name of the service account to use.
+ # If not set and create is true, a name is generated using the fullname template
+ name: ""
+
+podAnnotations: {}
+podLabels: {}
+
+podSecurityContext: {}
+ # fsGroup: 2000
+
+securityContext: {}
+ # capabilities:
+ # drop:
+ # - ALL
+ # readOnlyRootFilesystem: true
+ # runAsNonRoot: true
+ # runAsUser: 1000
+
+service:
+ type: ClusterIP
+ port: 80
+
+ingress:
+ enabled: false
+ className: ""
+ annotations: {}
+ # kubernetes.io/ingress.class: nginx
+ # kubernetes.io/tls-acme: "true"
+ hosts:
+ - host: chart-example.local
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ tls: []
+ # - secretName: chart-example-tls
+ # hosts:
+ # - chart-example.local
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+livenessProbe:
+ httpGet:
+ path: /
+ port: http
+readinessProbe:
+ httpGet:
+ path: /
+ port: http
+
+autoscaling:
+ enabled: false
+ minReplicas: 1
+ maxReplicas: 100
+ targetCPUUtilizationPercentage: 80
+ # targetMemoryUtilizationPercentage: 80
+
+# Additional volumes on the output Deployment definition.
+volumes: []
+# - name: foo
+# secret:
+# secretName: mysecret
+# optional: false
+
+# Additional volumeMounts on the output Deployment definition.
+volumeMounts: []
+# - name: foo
+# mountPath: "/etc/foo"
+# readOnly: true
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+hortusfox:
+ admin:
+ existingSecret: ""
+ passwordSecretKey: password
+ mailSecretKey: mail
+ db:
+ existingSecret: ""
+ usernameSecretKey: username
+ passwordSecretKey: password
diff --git a/charts/overleaf/.helmignore b/charts/overleaf/.helmignore
new file mode 100644
index 0000000..0e8a0eb
--- /dev/null
+++ b/charts/overleaf/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/charts/overleaf/Chart.yaml b/charts/overleaf/Chart.yaml
new file mode 100644
index 0000000..6c01ae3
--- /dev/null
+++ b/charts/overleaf/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v2
+name: overleaf
+description: A Helm chart for Kubernetes
+type: application
+version: 0.1.0
+appVersion: "4.2.3"
diff --git a/charts/overleaf/README.md b/charts/overleaf/README.md
new file mode 100644
index 0000000..fe3a44b
--- /dev/null
+++ b/charts/overleaf/README.md
@@ -0,0 +1,57 @@
+# overleaf
+
+  
+
+A Helm chart for Kubernetes
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| affinity | object | `{}` | |
+| autoscaling.enabled | bool | `false` | |
+| autoscaling.maxReplicas | int | `100` | |
+| autoscaling.minReplicas | int | `1` | |
+| autoscaling.targetCPUUtilizationPercentage | int | `80` | |
+| fullnameOverride | string | `""` | |
+| image.pullPolicy | string | `"IfNotPresent"` | |
+| image.repository | string | `"sharelatex/sharelatex"` | |
+| image.tag | string | `""` | |
+| imagePullSecrets | list | `[]` | |
+| ingress.annotations | object | `{}` | |
+| ingress.className | string | `""` | |
+| ingress.enabled | bool | `false` | |
+| ingress.hosts[0].host | string | `"chart-example.local"` | |
+| ingress.hosts[0].paths[0].path | string | `"/"` | |
+| ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | |
+| ingress.tls | list | `[]` | |
+| nameOverride | string | `""` | |
+| nodeSelector | object | `{}` | |
+| overleaf.appName | string | `"Overleaf"` | |
+| overleaf.mongodb.existingSecret | string | `""` | |
+| overleaf.mongodb.existingSecretKey | string | `"mongodb-url"` | |
+| overleaf.redis.url | string | `""` | |
+| persistence.accessMode | string | `"ReadWriteOnce"` | |
+| persistence.annotations | object | `{}` | |
+| persistence.existingClaim | string | `""` | |
+| persistence.name | string | `"overleaf-data"` | |
+| persistence.size | string | `"1Gi"` | |
+| persistence.storageClass | string | `""` | |
+| podAnnotations | object | `{}` | |
+| podLabels | object | `{}` | |
+| podSecurityContext | object | `{}` | |
+| replicaCount | int | `1` | |
+| resources | object | `{}` | |
+| securityContext | object | `{}` | |
+| service.port | int | `80` | |
+| service.type | string | `"ClusterIP"` | |
+| serviceAccount.annotations | object | `{}` | |
+| serviceAccount.automount | bool | `true` | |
+| serviceAccount.create | bool | `true` | |
+| serviceAccount.name | string | `""` | |
+| tolerations | list | `[]` | |
+| volumeMounts | list | `[]` | |
+| volumes | list | `[]` | |
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v1.13.1](https://github.com/norwoodj/helm-docs/releases/v1.13.1)
diff --git a/charts/overleaf/templates/NOTES.txt b/charts/overleaf/templates/NOTES.txt
new file mode 100644
index 0000000..c8680d6
--- /dev/null
+++ b/charts/overleaf/templates/NOTES.txt
@@ -0,0 +1,22 @@
+1. Get the application URL by running these commands:
+{{- if .Values.ingress.enabled }}
+{{- range $host := .Values.ingress.hosts }}
+ {{- range .paths }}
+ http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }}
+ {{- end }}
+{{- end }}
+{{- else if contains "NodePort" .Values.service.type }}
+ export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "overleaf.fullname" . }})
+ export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
+ echo http://$NODE_IP:$NODE_PORT
+{{- else if contains "LoadBalancer" .Values.service.type }}
+ NOTE: It may take a few minutes for the LoadBalancer IP to be available.
+ You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "overleaf.fullname" . }}'
+ export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "overleaf.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
+ echo http://$SERVICE_IP:{{ .Values.service.port }}
+{{- else if contains "ClusterIP" .Values.service.type }}
+ export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "overleaf.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
+ export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
+ echo "Visit http://127.0.0.1:8080 to use your application"
+ kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
+{{- end }}
diff --git a/charts/overleaf/templates/_helpers.tpl b/charts/overleaf/templates/_helpers.tpl
new file mode 100644
index 0000000..8fe42d4
--- /dev/null
+++ b/charts/overleaf/templates/_helpers.tpl
@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "overleaf.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "overleaf.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "overleaf.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "overleaf.labels" -}}
+helm.sh/chart: {{ include "overleaf.chart" . }}
+{{ include "overleaf.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "overleaf.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "overleaf.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "overleaf.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "overleaf.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
diff --git a/charts/overleaf/templates/hpa.yaml b/charts/overleaf/templates/hpa.yaml
new file mode 100644
index 0000000..a9c4988
--- /dev/null
+++ b/charts/overleaf/templates/hpa.yaml
@@ -0,0 +1,32 @@
+{{- if .Values.autoscaling.enabled }}
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+ name: {{ include "overleaf.fullname" . }}
+ labels:
+ {{- include "overleaf.labels" . | nindent 4 }}
+spec:
+ scaleTargetRef:
+ apiVersion: apps/v1
+ kind: Deployment
+ name: {{ include "overleaf.fullname" . }}
+ minReplicas: {{ .Values.autoscaling.minReplicas }}
+ maxReplicas: {{ .Values.autoscaling.maxReplicas }}
+ metrics:
+ {{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
+ - type: Resource
+ resource:
+ name: cpu
+ target:
+ type: Utilization
+ averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
+ {{- end }}
+ {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
+ - type: Resource
+ resource:
+ name: memory
+ target:
+ type: Utilization
+ averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
+ {{- end }}
+{{- end }}
diff --git a/charts/overleaf/templates/ingress.yaml b/charts/overleaf/templates/ingress.yaml
new file mode 100644
index 0000000..8e87c01
--- /dev/null
+++ b/charts/overleaf/templates/ingress.yaml
@@ -0,0 +1,61 @@
+{{- if .Values.ingress.enabled -}}
+{{- $fullName := include "overleaf.fullname" . -}}
+{{- $svcPort := .Values.service.port -}}
+{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }}
+ {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }}
+ {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}}
+ {{- end }}
+{{- end }}
+{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}}
+apiVersion: networking.k8s.io/v1
+{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}}
+apiVersion: networking.k8s.io/v1beta1
+{{- else -}}
+apiVersion: extensions/v1beta1
+{{- end }}
+kind: Ingress
+metadata:
+ name: {{ $fullName }}
+ labels:
+ {{- include "overleaf.labels" . | nindent 4 }}
+ {{- with .Values.ingress.annotations }}
+ annotations:
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+spec:
+ {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }}
+ ingressClassName: {{ .Values.ingress.className }}
+ {{- end }}
+ {{- if .Values.ingress.tls }}
+ tls:
+ {{- range .Values.ingress.tls }}
+ - hosts:
+ {{- range .hosts }}
+ - {{ . | quote }}
+ {{- end }}
+ secretName: {{ .secretName }}
+ {{- end }}
+ {{- end }}
+ rules:
+ {{- range .Values.ingress.hosts }}
+ - host: {{ .host | quote }}
+ http:
+ paths:
+ {{- range .paths }}
+ - path: {{ .path }}
+ {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }}
+ pathType: {{ .pathType }}
+ {{- end }}
+ backend:
+ {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }}
+ service:
+ name: {{ $fullName }}
+ port:
+ number: {{ $svcPort }}
+ {{- else }}
+ serviceName: {{ $fullName }}
+ servicePort: {{ $svcPort }}
+ {{- end }}
+ {{- end }}
+ {{- end }}
+{{- end }}
diff --git a/charts/overleaf/templates/service.yaml b/charts/overleaf/templates/service.yaml
new file mode 100644
index 0000000..407f9b3
--- /dev/null
+++ b/charts/overleaf/templates/service.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+ name: {{ include "overleaf.fullname" . }}
+ labels:
+ {{- include "overleaf.labels" . | nindent 4 }}
+spec:
+ type: {{ .Values.service.type }}
+ ports:
+ - port: {{ .Values.service.port }}
+ targetPort: http
+ protocol: TCP
+ name: http
+ selector:
+ {{- include "overleaf.selectorLabels" . | nindent 4 }}
diff --git a/charts/overleaf/templates/serviceaccount.yaml b/charts/overleaf/templates/serviceaccount.yaml
new file mode 100644
index 0000000..78193cb
--- /dev/null
+++ b/charts/overleaf/templates/serviceaccount.yaml
@@ -0,0 +1,13 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "overleaf.serviceAccountName" . }}
+ labels:
+ {{- include "overleaf.labels" . | nindent 4 }}
+ {{- with .Values.serviceAccount.annotations }}
+ annotations:
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
+{{- end }}
diff --git a/charts/overleaf/templates/statefulset.yaml b/charts/overleaf/templates/statefulset.yaml
new file mode 100644
index 0000000..21f4f3f
--- /dev/null
+++ b/charts/overleaf/templates/statefulset.yaml
@@ -0,0 +1,121 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+ name: {{ include "overleaf.fullname" . }}
+ labels:
+ {{- include "overleaf.labels" . | nindent 4 }}
+spec:
+ {{- if not .Values.autoscaling.enabled }}
+ replicas: {{ .Values.replicaCount }}
+ {{- end }}
+ selector:
+ matchLabels:
+ {{- include "overleaf.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ {{- with .Values.podAnnotations }}
+ annotations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ labels:
+ {{- include "overleaf.labels" . | nindent 8 }}
+ {{- with .Values.podLabels }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ spec:
+ {{- with .Values.imagePullSecrets }}
+ imagePullSecrets:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ serviceAccountName: {{ include "overleaf.serviceAccountName" . }}
+ securityContext:
+ {{- toYaml .Values.podSecurityContext | nindent 8 }}
+ containers:
+ - name: {{ .Chart.Name }}
+ securityContext:
+ {{- toYaml .Values.securityContext | nindent 12 }}
+ image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+ imagePullPolicy: {{ .Values.image.pullPolicy }}
+ ports:
+ - name: http
+ containerPort: {{ .Values.service.port }}
+ protocol: TCP
+ livenessProbe:
+ httpGet:
+ path: /
+ port: http
+ initialDelaySeconds: 60
+ readinessProbe:
+ httpGet:
+ path: /
+ port: http
+ initialDelaySeconds: 60
+ env:
+ - name: SHARELATEX_APP_NAME
+ value: {{ .Values.overleaf.appName }}
+ - name: SHARELATEX_MONGO_URL
+ valueFrom:
+ secretKeyRef:
+ key: {{ .Values.overleaf.mongodb.existingSecretKey }}
+ name: {{ .Values.overleaf.mongodb.existingSecret }}
+ - name: SHARELATEX_REDIS_HOST
+ value: {{ .Values.overleaf.redis.url }}
+ - name: REDIS_HOST
+ value: {{ .Values.overleaf.redis.url }}
+ - name: WEB_HOST
+ value: "0.0.0.0"
+ - name: LISTEN_ADDRESS
+ value: "0.0.0.0"
+ - name: WEB_API_HOST
+ value: "0.0.0.0"
+ - name: DOCUPDATER_HOST
+ value: "0.0.0.0"
+ - name: SPELLING_HOST
+ value: "0.0.0.0"
+ - name: DOCSTORE_HOST
+ value: "0.0.0.0"
+ - name: CHAT_HOST
+ value: "0.0.0.0"
+ - name: FILESTORE_HOST
+ value: "0.0.0.0"
+ - name: CLSI_HOST
+ value: "0.0.0.0"
+ - name: PROJECT_HISTORY_HOST
+ value: "0.0.0.0"
+ - name: REALTIME_HOST
+ value: "0.0.0.0"
+ - name: CONTACTS_HOST
+ value: "0.0.0.0"
+ - name: NOTIFICATIONS_HOST
+ value: "0.0.0.0"
+ - name: WEBPACK_HOST
+ value: "0.0.0.0"
+ - name: V1_HISTORY_HOST
+ value: "0.0.0.0"
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ {{- with .Values.volumeMounts }}
+ volumeMounts:
+ - name: data
+ mountPath: /var/lib/sharelatex
+ {{- toYaml . | nindent 12 }}
+ {{- end }}
+ {{- with .Values.volumes }}
+ volumes:
+ - name: data
+ perstentVolumeClaim:
+ claimName: {{ .Values.persistence.existingClaim }}
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
diff --git a/charts/overleaf/templates/tests/test-connection.yaml b/charts/overleaf/templates/tests/test-connection.yaml
new file mode 100644
index 0000000..d00c184
--- /dev/null
+++ b/charts/overleaf/templates/tests/test-connection.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Pod
+metadata:
+ name: "{{ include "overleaf.fullname" . }}-test-connection"
+ labels:
+ {{- include "overleaf.labels" . | nindent 4 }}
+ annotations:
+ "helm.sh/hook": test
+spec:
+ containers:
+ - name: wget
+ image: busybox
+ command: ['wget']
+ args: ['{{ include "overleaf.fullname" . }}:{{ .Values.service.port }}']
+ restartPolicy: Never
diff --git a/charts/overleaf/values.yaml b/charts/overleaf/values.yaml
new file mode 100644
index 0000000..624c908
--- /dev/null
+++ b/charts/overleaf/values.yaml
@@ -0,0 +1,115 @@
+# Default values for overleaf.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+replicaCount: 1
+
+image:
+ repository: sharelatex/sharelatex
+ pullPolicy: IfNotPresent
+ # Overrides the image tag whose default is the chart appVersion.
+ tag: ""
+
+imagePullSecrets: []
+nameOverride: ""
+fullnameOverride: ""
+
+serviceAccount:
+ # Specifies whether a service account should be created
+ create: true
+ # Automatically mount a ServiceAccount's API credentials?
+ automount: true
+ # Annotations to add to the service account
+ annotations: {}
+ # The name of the service account to use.
+ # If not set and create is true, a name is generated using the fullname template
+ name: ""
+
+podAnnotations: {}
+podLabels: {}
+
+podSecurityContext: {}
+ # fsGroup: 2000
+
+securityContext: {}
+ # capabilities:
+ # drop:
+ # - ALL
+ # readOnlyRootFilesystem: true
+ # runAsNonRoot: true
+ # runAsUser: 1000
+
+service:
+ type: ClusterIP
+ port: 80
+
+ingress:
+ enabled: false
+ className: ""
+ annotations: {}
+ # kubernetes.io/ingress.class: nginx
+ # kubernetes.io/tls-acme: "true"
+ hosts:
+ - host: chart-example.local
+ paths:
+ - path: /
+ pathType: ImplementationSpecific
+ tls: []
+ # - secretName: chart-example-tls
+ # hosts:
+ # - chart-example.local
+
+resources: {}
+ # We usually recommend not to specify default resources and to leave this as a conscious
+ # choice for the user. This also increases chances charts run on environments with little
+ # resources, such as Minikube. If you do want to specify resources, uncomment the following
+ # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
+ # limits:
+ # cpu: 100m
+ # memory: 128Mi
+ # requests:
+ # cpu: 100m
+ # memory: 128Mi
+
+autoscaling:
+ enabled: false
+ minReplicas: 1
+ maxReplicas: 100
+ targetCPUUtilizationPercentage: 80
+ # targetMemoryUtilizationPercentage: 80
+
+# Additional volumes on the output Deployment definition.
+volumes: []
+# - name: foo
+# secret:
+# secretName: mysecret
+# optional: false
+
+# Additional volumeMounts on the output Deployment definition.
+volumeMounts: []
+# - name: foo
+# mountPath: "/etc/foo"
+# readOnly: true
+
+nodeSelector: {}
+
+tolerations: []
+
+affinity: {}
+
+
+persistence:
+ name: overleaf-data
+ existingClaim: ""
+ size: 1Gi
+ accessMode: ReadWriteOnce
+ storageClass: ""
+ annotations: {}
+
+overleaf:
+ appName: "Overleaf"
+ mongodb:
+ existingSecret: ""
+ existingSecretKey: "mongodb-url"
+ redis:
+ url: ""
diff --git a/charts/vault-unseal/.editorconfig b/charts/vault-unseal/.editorconfig
new file mode 100644
index 0000000..db46020
--- /dev/null
+++ b/charts/vault-unseal/.editorconfig
@@ -0,0 +1,24 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+# Shell
+# https://google.github.io/styleguide/shell.xml#Indentation
+[*.{bash,sh,zsh}]
+indent_size = 2
+indent_style = space
+
+# JSON, JSONNET
+[*.json{,net}]
+indent_size = 2
+indent_style = space
+
+# YAML
+# http://yaml.org/spec/1.2/2009-07-21/spec.html#id2576668
+[*.{yaml,yml}]
+indent_size = 2
+indent_style = space
diff --git a/charts/vault-unseal/.github/workflows/gh-release.yml b/charts/vault-unseal/.github/workflows/gh-release.yml
new file mode 100644
index 0000000..8c67a87
--- /dev/null
+++ b/charts/vault-unseal/.github/workflows/gh-release.yml
@@ -0,0 +1,14 @@
+on:
+ push:
+ tags:
+ - '*'
+
+jobs:
+ gh-release:
+ name: gh-release
+ runs-on: ubuntu-latest
+ steps:
+ - uses: softprops/action-gh-release@v2
+ with:
+ generate_release_notes: true
+ token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/charts/vault-unseal/.gitignore b/charts/vault-unseal/.gitignore
new file mode 100644
index 0000000..ee3892e
--- /dev/null
+++ b/charts/vault-unseal/.gitignore
@@ -0,0 +1 @@
+charts/
diff --git a/charts/vault-unseal/.helmignore b/charts/vault-unseal/.helmignore
new file mode 100644
index 0000000..0e8a0eb
--- /dev/null
+++ b/charts/vault-unseal/.helmignore
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
diff --git a/charts/vault-unseal/Chart.yaml b/charts/vault-unseal/Chart.yaml
new file mode 100644
index 0000000..600539b
--- /dev/null
+++ b/charts/vault-unseal/Chart.yaml
@@ -0,0 +1,20 @@
+apiVersion: v2
+name: vault-unseal
+description: A Helm chart for vault-unseal
+type: application
+version: 0.6.1
+appVersion: "0.5.1"
+icon: https://github.com/hashicorp/vault/raw/f22d202cde2018f9455dec755118a9b84586e082/Vault_PrimaryLogo_Black.png
+
+keywords:
+ - vault
+ - auto-unseal
+ - notify
+
+sources:
+ - https://github.com/lrstanley/vault-unseal.git
+
+maintainers:
+ - name: babykart
+ email: babykart@gmail.com
+ url: https://github.com/babykart
diff --git a/charts/vault-unseal/LICENSE b/charts/vault-unseal/LICENSE
new file mode 100644
index 0000000..bd3914a
--- /dev/null
+++ b/charts/vault-unseal/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 babykart
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/charts/vault-unseal/README.md b/charts/vault-unseal/README.md
new file mode 100644
index 0000000..22f42e7
--- /dev/null
+++ b/charts/vault-unseal/README.md
@@ -0,0 +1,53 @@
+# vault-unseal
+
+  
+
+A Helm chart for vault-unseal
+
+## Maintainers
+
+| Name | Email | Url |
+| ---- | ------ | --- |
+| babykart | <babykart@gmail.com> | <https://github.com/babykart> |
+
+## Source Code
+
+* <https://github.com/lrstanley/vault-unseal.git>
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| affinity | object | `{}` | Affinity |
+| configSecret.annotations | object | `{}` | Config secret annotations |
+| configSecret.enabled | bool | `true` | If you want to manage the configuration out of the helm chart, set it to false |
+| configSecret.stringData | string | `"environment: dev\ncheck_interval: 15s\nmax_check_interval: 30m\nvault_nodes:\n - https://1.2.3.4:8200\nunseal_tokens:\n - your-token\n - your-second-token\ntls_skip_verify: false\nemail:\n enabled: false\n hostname: smtp.hostname.com\n port: 25\n username: your-username\n password: your-password\n # address to send from.\n from_addr: your-alerts@hostname.com\n # addresses to send to. the first will be the TO, the second and on will be CC'd\n # onto the message.\n send_addrs:\n - your-alert-group@hostname.com\n - example-user@hostname.com\n # Skip TLS certificate validation.\n tls_skip_verify: false\n # Require TLS for SMTP connections.\n # The default is opportunistic.\n mandatory_tls: false\nnotify_max_elapsed: 10m\nnotify_queue_delay: 60s\n"` | Config secret stringData |
+| containers.env | list | `[]` | Containers environement |
+| deployment.annotations | object | `{}` | Deployment annotations |
+| deployment.labels | object | `{}` | Deployment labels |
+| deployment.replicaCount | int | `1` | Deployment replica count |
+| deployment.revisionHistoryLimit | int | `1` | Deployment revision history limit |
+| deployment.strategy.type | string | `"RollingUpdate"` | Deployment strategy type |
+| extraVolumeMounts | list | `[]` | Extra volume mounts |
+| extraVolumes | list | `[]` | Extra volumes |
+| fullnameOverride | string | `""` | Full name override |
+| image.pullPolicy | string | `"IfNotPresent"` | Image pull policy |
+| image.registry | string | `"ghcr.io"` | Image registry |
+| image.repository | string | `"lrstanley/vault-unseal"` | Image repository |
+| image.tag | string | `""` | Overrides the image tag whose default is the chart appVersion. |
+| imagePullSecrets | list | `[]` | Image pull secrets |
+| nameOverride | string | `""` | Name override |
+| nodeSelector | object | `{}` | Node selector labels |
+| podAnnotations | object | `{}` | Pod annotations |
+| podSecurityContext | object | `{}` | Pod security context |
+| resources | object | `{"limits":{"cpu":"100m","memory":"32Mi"},"requests":{"cpu":"10m","memory":"8Mi"}}` | Resources |
+| securityContext.capabilities | object | `{"drop":["ALL"]}` | Security context capabilities |
+| securityContext.runAsNonRoot | bool | `false` | Security context run as non root |
+| serviceAccount.annotations | object | `{}` | Annotations to add to the service account |
+| serviceAccount.create | bool | `false` | Specifies whether a service account should be created |
+| serviceAccount.name | string | `""` | The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
+| serviceAccount.token | bool | `false` | Creates the token object |
+| tolerations | list | `[]` | Tolerations |
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v1.13.1](https://github.com/norwoodj/helm-docs/releases/v1.13.1)
diff --git a/charts/vault-unseal/templates/_helpers.tpl b/charts/vault-unseal/templates/_helpers.tpl
new file mode 100644
index 0000000..5e6175f
--- /dev/null
+++ b/charts/vault-unseal/templates/_helpers.tpl
@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "vault-unseal.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "vault-unseal.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "vault-unseal.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "vault-unseal.labels" -}}
+helm.sh/chart: {{ include "vault-unseal.chart" . }}
+{{ include "vault-unseal.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "vault-unseal.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "vault-unseal.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "vault-unseal.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "vault-unseal.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
diff --git a/charts/vault-unseal/templates/deployment.yaml b/charts/vault-unseal/templates/deployment.yaml
new file mode 100644
index 0000000..8fa9b4b
--- /dev/null
+++ b/charts/vault-unseal/templates/deployment.yaml
@@ -0,0 +1,80 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: {{ include "vault-unseal.fullname" . }}
+ labels:
+ {{- include "vault-unseal.labels" . | nindent 4 }}
+ {{- with .Values.deployment.labels }}
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+ {{- with .Values.deployment.annotations }}
+ annotations:
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+spec:
+ replicas: {{ .Values.deployment.replicaCount }}
+ revisionHistoryLimit: {{ .Values.deployment.revisionHistoryLimit }}
+ strategy:
+ {{- with .Values.deployment.strategy }}
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+ selector:
+ matchLabels:
+ {{- include "vault-unseal.selectorLabels" . | nindent 6 }}
+ template:
+ metadata:
+ {{- with .Values.podAnnotations }}
+ annotations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ labels:
+ {{- include "vault-unseal.selectorLabels" . | nindent 8 }}
+ spec:
+ {{- with .Values.imagePullSecrets }}
+ imagePullSecrets:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ serviceAccountName: {{ include "vault-unseal.serviceAccountName" . }}
+ securityContext:
+ {{- toYaml .Values.podSecurityContext | nindent 8 }}
+ containers:
+ - name: {{ .Chart.Name }}
+ securityContext:
+ {{- toYaml .Values.securityContext | nindent 12 }}
+ image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+ imagePullPolicy: {{ .Values.image.pullPolicy }}
+ command: ["vault-unseal"]
+ args: ["--config=/etc/vault-unseal/vault-unseal.yaml"]
+ {{- with .Values.containers.env }}
+ env:
+ {{- toYaml . | nindent 12 }}
+ {{- end }}
+ resources:
+ {{- toYaml .Values.resources | nindent 12 }}
+ volumeMounts:
+ - name: conf
+ mountPath: /etc/vault-unseal
+ readOnly: true
+ {{- with .Values.extraVolumeMounts }}
+ {{- toYaml . | nindent 12 }}
+ {{- end }}
+ {{- with .Values.nodeSelector }}
+ nodeSelector:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.affinity }}
+ affinity:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ {{- with .Values.tolerations }}
+ tolerations:
+ {{- toYaml . | nindent 8 }}
+ {{- end }}
+ volumes:
+ - name: conf
+ secret:
+ secretName: {{ include "vault-unseal.fullname" . }}-conf
+ defaultMode: 0400
+ {{- with .Values.extraVolumes }}
+ {{- toYaml . | nindent 6 }}
+ {{- end }}
diff --git a/charts/vault-unseal/templates/secret.yaml b/charts/vault-unseal/templates/secret.yaml
new file mode 100644
index 0000000..2e9d486
--- /dev/null
+++ b/charts/vault-unseal/templates/secret.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.configSecret.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ include "vault-unseal.fullname" . }}-conf
+ labels:
+ {{- include "vault-unseal.labels" . | nindent 4 }}
+ {{- with .Values.configSecret.annotations }}
+ annotations:
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+stringData:
+ vault-unseal.yaml:
+ {{- with .Values.configSecret.stringData }}
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+{{- end }}
diff --git a/charts/vault-unseal/templates/serviceaccount.yaml b/charts/vault-unseal/templates/serviceaccount.yaml
new file mode 100644
index 0000000..3c73773
--- /dev/null
+++ b/charts/vault-unseal/templates/serviceaccount.yaml
@@ -0,0 +1,16 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: {{ include "vault-unseal.serviceAccountName" . }}
+ labels:
+ {{- include "vault-unseal.labels" . | nindent 4 }}
+ {{- with .Values.serviceAccount.annotations }}
+ annotations:
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+{{- if and .Values.serviceAccount.token (semverCompare ">=1.24-0" .Capabilities.KubeVersion.GitVersion) }}
+secrets:
+- name: {{ include "vault-unseal.serviceAccountName" . }}-token
+{{- end }}
+{{- end }}
diff --git a/charts/vault-unseal/templates/token.yaml b/charts/vault-unseal/templates/token.yaml
new file mode 100644
index 0000000..f611f99
--- /dev/null
+++ b/charts/vault-unseal/templates/token.yaml
@@ -0,0 +1,14 @@
+{{- if and .Values.serviceAccount.create .Values.serviceAccount.token (semverCompare ">=1.24-0" .Capabilities.KubeVersion.GitVersion) -}}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ include "vault-unseal.serviceAccountName" . }}-token
+ labels:
+ {{- include "vault-unseal.labels" . | nindent 4 }}
+ annotations:
+ kubernetes.io/service-account.name: {{ include "vault-unseal.serviceAccountName" . }}
+ {{- with .Values.serviceAccount.annotations }}
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+type: kubernetes.io/service-account-token
+{{- end }}
diff --git a/charts/vault-unseal/values.yaml b/charts/vault-unseal/values.yaml
new file mode 100644
index 0000000..c013df6
--- /dev/null
+++ b/charts/vault-unseal/values.yaml
@@ -0,0 +1,124 @@
+# Default values for vault-unseal.
+
+deployment:
+ # -- Deployment annotations
+ annotations: {}
+ # -- Deployment labels
+ labels: {}
+ # -- Deployment replica count
+ replicaCount: 1
+ # -- Deployment revision history limit
+ revisionHistoryLimit: 1
+ strategy:
+ # -- Deployment strategy type
+ type: RollingUpdate
+
+image:
+ # -- Image registry
+ registry: ghcr.io
+ # -- Image repository
+ repository: lrstanley/vault-unseal
+ # -- Image pull policy
+ pullPolicy: IfNotPresent
+ # -- Overrides the image tag whose default is the chart appVersion.
+ tag: ""
+
+# -- Image pull secrets
+imagePullSecrets: []
+# -- Name override
+nameOverride: ""
+# -- Full name override
+fullnameOverride: ""
+
+configSecret:
+ # -- If you want to manage the configuration out of the helm chart, set it to false
+ enabled: true
+ # -- Config secret annotations
+ annotations: {}
+ # -- Config secret stringData
+ stringData: |
+ environment: dev
+ check_interval: 15s
+ max_check_interval: 30m
+ vault_nodes:
+ - https://1.2.3.4:8200
+ unseal_tokens:
+ - your-token
+ - your-second-token
+ tls_skip_verify: false
+ email:
+ enabled: false
+ hostname: smtp.hostname.com
+ port: 25
+ username: your-username
+ password: your-password
+ # address to send from.
+ from_addr: your-alerts@hostname.com
+ # addresses to send to. the first will be the TO, the second and on will be CC'd
+ # onto the message.
+ send_addrs:
+ - your-alert-group@hostname.com
+ - example-user@hostname.com
+ # Skip TLS certificate validation.
+ tls_skip_verify: false
+ # Require TLS for SMTP connections.
+ # The default is opportunistic.
+ mandatory_tls: false
+ notify_max_elapsed: 10m
+ notify_queue_delay: 60s
+
+containers:
+ # -- Containers environement
+ env: []
+
+serviceAccount:
+ # -- Specifies whether a service account should be created
+ create: false
+ # -- Annotations to add to the service account
+ annotations: {}
+ # -- The name of the service account to use.
+ # If not set and create is true, a name is generated using the fullname template
+ name: ""
+ # -- Creates the token object
+ token: false
+
+# -- Pod annotations
+podAnnotations: {}
+
+# -- Pod security context
+podSecurityContext: {}
+ # fsGroup: 2000
+
+securityContext:
+ # -- Security context capabilities
+ capabilities:
+ drop:
+ - ALL
+ # -- Security context run as non root
+ runAsNonRoot: false
+ # readOnlyRootFilesystem: true
+ # runAsUser: 1000
+
+# -- Resources
+resources:
+ limits:
+ cpu: 100m
+ memory: 32Mi
+ requests:
+ cpu: 10m
+ memory: 8Mi
+
+# -- Node selector labels
+nodeSelector: {}
+
+# -- Tolerations
+tolerations: []
+
+# -- Affinity
+affinity: {}
+
+# -- Extra volume mounts
+extraVolumeMounts: []
+
+# -- Extra volumes
+extraVolumes: []
diff --git a/charts/vikunja/README.md b/charts/vikunja/README.md
index 01b2f3d..65d53e1 100644
--- a/charts/vikunja/README.md
+++ b/charts/vikunja/README.md
@@ -1,6 +1,6 @@
# vikunja
-  
+  
The to-do app to organize your life