diff --git a/stable/nextcloud/3.7.14/CHANGELOG.md b/stable/nextcloud/3.7.14/CHANGELOG.md deleted file mode 100644 index 6afc5d87c83..00000000000 --- a/stable/nextcloud/3.7.14/CHANGELOG.md +++ /dev/null @@ -1,4 +0,0 @@ - - -## [nextcloud-3.7.14](https://github.com/truecharts/apps/compare/nextcloud-3.7.13...nextcloud-3.7.14) (2021-09-08) - diff --git a/stable/nextcloud/3.7.14/CONFIG.md b/stable/nextcloud/3.7.14/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/nextcloud/3.7.14/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/nextcloud/3.7.14/Chart.lock b/stable/nextcloud/3.7.14/Chart.lock deleted file mode 100644 index 610b59fbb56..00000000000 --- a/stable/nextcloud/3.7.14/Chart.lock +++ /dev/null @@ -1,12 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -- name: postgresql - repository: https://truecharts.org/ - version: 1.6.5 -- name: redis - repository: https://charts.bitnami.com/bitnami - version: 15.3.1 -digest: sha256:9b60ad9c2e2d09a112a54fb1b46b836d458abf2f29aa38210bc91f063152e562 -generated: "2021-09-08T03:22:25.73016787Z" diff --git a/stable/nextcloud/3.7.14/Chart.yaml b/stable/nextcloud/3.7.14/Chart.yaml deleted file mode 100644 index 990f50f2d19..00000000000 --- a/stable/nextcloud/3.7.14/Chart.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: v2 -appVersion: auto -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -- condition: postgresql.enabled - name: postgresql - repository: https://truecharts.org/ - version: 1.6.5 -- condition: redis.enabled - name: redis - repository: https://charts.bitnami.com/bitnami - version: 15.3.1 -deprecated: false -description: A private cloud server that puts the control and security of your own - data back into your hands. -home: https://nextcloud.com/ -icon: https://upload.wikimedia.org/wikipedia/commons/thumb/6/60/Nextcloud_Logo.svg/1280px-Nextcloud_Logo.svg.png -keywords: -- nextcloud -- storage -- http -- web -- php -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: nextcloud -sources: -- https://github.com/nextcloud/docker -- https://github.com/nextcloud/helm -type: application -version: 3.7.14 diff --git a/stable/nextcloud/3.7.14/README.md b/stable/nextcloud/3.7.14/README.md deleted file mode 100644 index 7aa6d368343..00000000000 --- a/stable/nextcloud/3.7.14/README.md +++ /dev/null @@ -1,40 +0,0 @@ -# Introduction - -A private cloud server that puts the control and security of your own data back into your hands. - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://charts.bitnami.com/bitnami | redis | 15.3.1 | -| https://truecharts.org/ | common | 6.13.8 | -| https://truecharts.org/ | postgresql | 1.6.5 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/nextcloud/3.7.14/app-readme.md b/stable/nextcloud/3.7.14/app-readme.md deleted file mode 100644 index 28094fc642d..00000000000 --- a/stable/nextcloud/3.7.14/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -A private cloud server that puts the control and security of your own data back into your hands. - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/nextcloud/3.7.14/charts/common-6.13.8.tgz b/stable/nextcloud/3.7.14/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/nextcloud/3.7.14/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/nextcloud/3.7.14/charts/postgresql-1.6.5.tgz b/stable/nextcloud/3.7.14/charts/postgresql-1.6.5.tgz deleted file mode 100644 index 89d7c9c9ff4..00000000000 Binary files a/stable/nextcloud/3.7.14/charts/postgresql-1.6.5.tgz and /dev/null differ diff --git a/stable/nextcloud/3.7.14/charts/redis-15.3.1.tgz b/stable/nextcloud/3.7.14/charts/redis-15.3.1.tgz deleted file mode 100644 index 7bfdadbc26a..00000000000 Binary files a/stable/nextcloud/3.7.14/charts/redis-15.3.1.tgz and /dev/null differ diff --git a/stable/nextcloud/3.7.14/helm-values.md b/stable/nextcloud/3.7.14/helm-values.md deleted file mode 100644 index e7510c10dee..00000000000 --- a/stable/nextcloud/3.7.14/helm-values.md +++ /dev/null @@ -1,82 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| cronjob.annotations | object | `{}` | | -| cronjob.failedJobsHistoryLimit | int | `5` | | -| cronjob.schedule | string | `"*/5 * * * *"` | | -| cronjob.successfulJobsHistoryLimit | int | `2` | | -| env.NEXTCLOUD_ADMIN_PASSWORD | string | `"adminpass"` | | -| env.NEXTCLOUD_ADMIN_USER | string | `"admin"` | | -| env.TRUSTED_PROXIES | string | `"172.16.0.0/16"` | | -| envFrom[0].configMapRef.name | string | `"nextcloudconfig"` | | -| envTpl.POSTGRES_DB | string | `"{{ .Values.postgresql.postgresqlDatabase }}"` | | -| envTpl.POSTGRES_USER | string | `"{{ .Values.postgresql.postgresqlUsername }}"` | | -| envValueFrom.POSTGRES_HOST.secretKeyRef.key | string | `"host"` | | -| envValueFrom.POSTGRES_HOST.secretKeyRef.name | string | `"dbcreds"` | | -| envValueFrom.POSTGRES_PASSWORD.secretKeyRef.key | string | `"postgresql-password"` | | -| envValueFrom.POSTGRES_PASSWORD.secretKeyRef.name | string | `"dbcreds"` | | -| envValueFrom.REDIS_HOST.secretKeyRef.key | string | `"masterhost"` | | -| envValueFrom.REDIS_HOST.secretKeyRef.name | string | `"rediscreds"` | | -| envValueFrom.REDIS_HOST_PASSWORD.secretKeyRef.key | string | `"redis-password"` | | -| envValueFrom.REDIS_HOST_PASSWORD.secretKeyRef.name | string | `"rediscreds"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"nextcloud"` | | -| image.tag | string | `"22.1.1"` | | -| initContainers[0].command[0] | string | `"sh"` | | -| initContainers[0].command[1] | string | `"-c"` | | -| initContainers[0].command[2] | string | `"until pg_isready -U nextcloud -h ${pghost} ; do sleep 2 ; done"` | | -| initContainers[0].env[0].name | string | `"pghost"` | | -| initContainers[0].env[0].valueFrom.secretKeyRef.key | string | `"plainhost"` | | -| initContainers[0].env[0].valueFrom.secretKeyRef.name | string | `"dbcreds"` | | -| initContainers[0].image | string | `"postgres:13.1"` | | -| initContainers[0].imagePullPolicy | string | `"IfNotPresent"` | | -| initContainers[0].name | string | `"init-postgresdb"` | | -| persistence.data.accessMode | string | `"ReadWriteOnce"` | | -| persistence.data.enabled | bool | `true` | | -| persistence.data.mountPath | string | `"/var/www/html"` | | -| persistence.data.size | string | `"100Gi"` | | -| persistence.data.type | string | `"pvc"` | | -| persistence.redismaster.accessMode | string | `"ReadWriteOnce"` | | -| persistence.redismaster.enabled | bool | `true` | | -| persistence.redismaster.forceName | string | `"redismaster"` | | -| persistence.redismaster.noMount | bool | `true` | | -| persistence.redismaster.size | string | `"100Gi"` | | -| persistence.redismaster.type | string | `"pvc"` | | -| podSecurityContext.fsGroup | int | `33` | | -| postgresql.enabled | bool | `true` | | -| postgresql.existingSecret | string | `"dbcreds"` | | -| postgresql.postgresqlDatabase | string | `"nextcloud"` | | -| postgresql.postgresqlUsername | string | `"nextcloud"` | | -| probes | object | See below | Probe configuration -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) | -| probes.liveness | object | See below | Liveness probe configuration | -| probes.liveness.spec | object | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.readiness | object | See below | Redainess probe configuration | -| probes.readiness.spec | object | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.startup | object | See below | Startup probe configuration | -| probes.startup.spec | object | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| redis.architecture | string | `"standalone"` | | -| redis.auth.existingSecret | string | `"rediscreds"` | | -| redis.auth.existingSecretPasswordKey | string | `"redis-password"` | | -| redis.enabled | bool | `true` | | -| redis.master.persistence.enabled | bool | `false` | | -| redis.master.persistence.existingClaim | string | `"redismaster"` | | -| redis.replica.persistence.enabled | bool | `false` | | -| redis.replica.replicaCount | int | `0` | | -| redis.volumePermissions.enabled | bool | `true` | | -| service.hpb.enabled | bool | `true` | | -| service.hpb.ports.hpb.enabled | bool | `true` | | -| service.hpb.ports.hpb.port | int | `7867` | | -| service.main.ports.main.port | int | `80` | | -| strategy.type | string | `"Recreate"` | | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/nextcloud/3.7.14/ix_values.yaml b/stable/nextcloud/3.7.14/ix_values.yaml deleted file mode 100644 index f791c144a92..00000000000 --- a/stable/nextcloud/3.7.14/ix_values.yaml +++ /dev/null @@ -1,162 +0,0 @@ -## -# This file contains Values.yaml content that gets added to the output of questions.yaml -# It's ONLY meant for content that the user is NOT expected to change. -# Example: Everything under "image" is not included in questions.yaml but is included here. -## - -image: - repository: nextcloud - pullPolicy: IfNotPresent - tag: 22.1.1 - -strategy: - type: Recreate - -env: {} - - -envTpl: - POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}" - POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}" - -envFrom: - - configMapRef: - name: nextcloudconfig - -envValueFrom: - POSTGRES_PASSWORD: - secretKeyRef: - name: dbcreds - key: postgresql-password - POSTGRES_HOST: - secretKeyRef: - name: dbcreds - key: host - REDIS_HOST: - secretKeyRef: - name: rediscreds - key: masterhost - REDIS_HOST_PASSWORD: - secretKeyRef: - name: rediscreds - key: redis-password - -initContainers: - - name: init-postgresdb - image: postgres:13.1 - command: - - "sh" - - "-c" - - "until pg_isready -U nextcloud -h ${pghost} ; do sleep 2 ; done" - imagePullPolicy: IfNotPresent - env: - - name: pghost - valueFrom: - secretKeyRef: - name: dbcreds - key: plainhost - - -# -- Probe configuration -# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) -# @default -- See below -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Redainess probe configuration - # @default -- See below - readiness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Startup probe configuration - # @default -- See below - startup: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - -## Cronjob to execute Nextcloud background tasks -## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron -## -cronjob: - # Every 5 minutes - # Note: Setting this to any any other value than 5 minutes might - # cause issues with how nextcloud background jobs are executed - schedule: "*/5 * * * *" - annotations: {} - failedJobsHistoryLimit: 5 - successfulJobsHistoryLimit: 2 - -# Enabled postgres -postgresql: - enabled: true - postgresqlUsername: nextcloud - postgresqlDatabase: nextcloud - existingSecret: dbcreds - persistence: - db: - storageClass: "SCALE-ZFS" - dbbackups: - storageClass: "SCALE-ZFS" - -# Enabled redis -# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/redis -redis: - architecture: standalone - enabled: true - auth: - existingSecret: rediscreds - existingSecretPasswordKey: redis-password - master: - persistence: - enabled: true - existingClaim: redismaster - replica: - replicaCount: 0 - persistence: - enabled: false - -## -# Most other defaults are set in questions.yaml -# For other options please refer to the wiki, default_values.yaml or the common library chart -## diff --git a/stable/nextcloud/3.7.14/questions.yaml b/stable/nextcloud/3.7.14/questions.yaml deleted file mode 100644 index 32482410e59..00000000000 --- a/stable/nextcloud/3.7.14/questions.yaml +++ /dev/null @@ -1,1059 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "$kubernetes-resource_configmap_portal_protocol" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - required: true - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "Recreate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - - variable: NEXTCLOUD_ADMIN_USER - label: "NEXTCLOUD_ADMIN_USER" - description: "Sets nextcloud admin username" - schema: - type: string - required: true - default: "" - - variable: NEXTCLOUD_ADMIN_PASSWORD - label: "NEXTCLOUD_ADMIN_PASSWORD" - description: "Sets nextcloud admin password" - schema: - type: string - required: true - default: "" - - variable: TRUSTED_PROXIES - label: "TRUSTED_PROXIES" - description: "Sets nextcloud Trusted Proxies" - schema: - type: string - default: "172.16.0.0/16" - - variable: NODE_IP - label: "NODE_IP" - description: "Sets nextcloud nodeip for nodeport connections" - schema: - type: string - $ref: - - "definitions/nodeIP" - - - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - variable: service - group: "Networking and Services" - label: "Configure Service(s)" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: main - label: "Main Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 80 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 80 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 36091 - required: true - - - variable: persistence - label: "Integrated Persistent Storage" - description: "Integrated Persistent Storage" - group: "Storage and Persistence" - schema: - type: dict - attrs: - - variable: data - label: "App Data Storage" - description: "Stores the Application Data." - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "pvc" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - default: "/var/www/html" - hidden: true - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PV" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - variable: redismaster - label: "Redis Storage" - description: "Stores the Application redis-master-database." - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - hidden: true - - variable: noMount - label: "Do not mount this storage inside the main pod" - schema: - type: boolean - default: true - hidden: true - - variable: forceName - label: "Override PVC Name (advanced)" - description: "Forces a certain name for the PVC" - schema: - type: string - default: "redismaster" - hidden: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "pvc" - hidden: true - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - default: "" - hidden: true - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PV" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - - variable: persistenceList - label: "Additional app storage" - group: "Storage and Persistence" - schema: - type: list - default: [] - items: - - variable: persistenceListEntry - label: "Custom Storage" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "hostPath" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - required: true - default: "" - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PVC" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - - variable: ingress - label: "" - group: "Ingress" - schema: - type: dict - attrs: - - variable: main - label: "Main Ingress" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable Ingress" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: hosts - label: "Hosts" - schema: - type: list - default: [] - items: - - variable: hostEntry - label: "Host" - schema: - type: dict - attrs: - - variable: host - label: "HostName" - schema: - type: string - default: "" - required: true - - variable: paths - label: "Paths" - schema: - type: list - default: [] - items: - - variable: pathEntry - label: "Host" - schema: - type: dict - attrs: - - variable: path - label: "path" - schema: - type: string - required: true - default: "/" - - variable: pathType - label: "pathType" - schema: - type: string - required: true - default: "Prefix" - - variable: tls - label: "TLS-Settings" - schema: - type: list - default: [] - items: - - variable: tlsEntry - label: "Host" - schema: - type: dict - attrs: - - variable: hosts - label: "Certificate Hosts" - schema: - type: list - default: [] - items: - - variable: host - label: "Host" - schema: - type: string - default: "" - required: true - - variable: scaleCert - label: "Select TrueNAS SCALE Certificate" - schema: - type: int - $ref: - - "definitions/certificate" - - variable: entrypoint - label: "Traefik Entrypoint" - description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" - schema: - type: string - default: "websecure" - required: true - - variable: middlewares - label: "Traefik Middlewares" - description: "Add previously created Traefik Middlewares to this Ingress" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - default: "" - required: true - - - variable: ingressList - label: "Additional Ingress" - group: "Ingress" - schema: - type: list - default: [] - items: - - variable: ingressListEntry - label: "Custom Ingress" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable Ingress" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Name" - schema: - type: string - default: "" - - variable: ingressClassName - label: "IngressClass Name" - schema: - type: string - default: "" - - variable: labelsList - label: "Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: "Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: hosts - label: "Hosts" - schema: - type: list - default: [] - items: - - variable: hostEntry - label: "Host" - schema: - type: dict - attrs: - - variable: host - label: "HostName" - schema: - type: string - default: "" - required: true - - variable: paths - label: "Paths" - schema: - type: list - default: [] - items: - - variable: pathEntry - label: "Host" - schema: - type: dict - attrs: - - variable: path - label: "path" - schema: - type: string - required: true - default: "/" - - variable: pathType - label: "pathType" - schema: - type: string - required: true - default: "Prefix" - - variable: service - label: "Linked Service" - schema: - type: dict - attrs: - - variable: name - label: "Service Name" - schema: - type: string - default: "" - - variable: port - label: "Service Port" - schema: - type: int - - variable: tls - label: "TLS-Settings" - schema: - type: list - default: [] - items: - - variable: tlsEntry - label: "Host" - schema: - type: dict - attrs: - - variable: hosts - label: "Certificate Hosts" - schema: - type: list - default: [] - items: - - variable: host - label: "Host" - schema: - type: string - default: "" - required: true - - variable: scaleCert - label: "Select TrueNAS SCALE Certificate" - schema: - type: int - $ref: - - "definitions/certificate" - - variable: entrypoint - label: "Traefik Entrypoint" - description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" - schema: - type: string - default: "websecure" - required: true - - variable: middlewares - label: "Traefik Middlewares" - description: "Add previously created Traefik Middlewares to this Ingress" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - default: "" - required: true - - - variable: podSecurityContext - group: "Security and Permissions" - label: "Pod Security Context" - schema: - type: dict - attrs: - - variable: fsGroup - label: "fsGroup" - description: "The group that should own ALL storage." - schema: - type: int - default: 33 - - variable: fsGroupChangePolicy - label: "When should we take ownership?" - schema: - type: string - default: "OnRootMismatch" - enum: - - value: "OnRootMismatch" - description: "OnRootMismatch" - - value: "Always" - description: "Always" - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/nextcloud/3.7.14/templates/_configmap.tpl b/stable/nextcloud/3.7.14/templates/_configmap.tpl deleted file mode 100644 index aa6473aaf29..00000000000 --- a/stable/nextcloud/3.7.14/templates/_configmap.tpl +++ /dev/null @@ -1,33 +0,0 @@ -{{/* Define the configmap */}} -{{- define "nextcloud.configmap" -}} - -{{- $hosts := "" }} -{{- if .Values.ingress.main.enabled }} -{{ range $index, $host := .Values.ingress.main.hosts }} - {{- if $index }} - {{ $hosts = ( printf "%v %v" $hosts $host.host ) }} - {{- else }} - {{ $hosts = ( printf "%s" $host.host ) }} - {{- end }} -{{ end }} -{{- end }} ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: nextcloudconfig -data: - NEXTCLOUD_TRUSTED_DOMAINS: {{ ( printf "%v %v %v %v %v" "test.fakedomain.dns" ( .Values.env.NODE_IP | default "localhost" ) ( printf "%v-%v" .Release.Name "nextcloud" ) ( printf "%v-%v" .Release.Name "nextcloud-hpb" ) $hosts ) | quote }} - {{- if .Values.ingress.main.enabled }} - APACHE_DISABLE_REWRITE_IP: "1" - {{- end }} - ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: hpbconfig -data: - NEXTCLOUD_URL: {{ ( printf "%v-%v" .Release.Name "nextcloud" ) | quote }} - -{{- end -}} diff --git a/stable/nextcloud/3.7.14/templates/_cronjob.tpl b/stable/nextcloud/3.7.14/templates/_cronjob.tpl deleted file mode 100644 index c2ed1ca20f8..00000000000 --- a/stable/nextcloud/3.7.14/templates/_cronjob.tpl +++ /dev/null @@ -1,51 +0,0 @@ -{{/* Define the cronjob */}} -{{- define "nextcloud.cronjob" -}} -{{- $jobName := include "common.names.fullname" . -}} - ---- -apiVersion: batch/v1beta1 -kind: CronJob -metadata: - name: {{ printf "%s-cronjob" $jobName }} - labels: - {{- include "common.labels" . | nindent 4 }} -spec: - schedule: "{{ .Values.cronjob.schedule }}" - concurrencyPolicy: Forbid - {{- with .Values.cronjob.failedJobsHistoryLimit }} - failedJobsHistoryLimit: {{ . }} - {{- end }} - {{- with .Values.cronjob.successfulJobsHistoryLimit }} - successfulJobsHistoryLimit: {{ . }} - {{- end }} - jobTemplate: - metadata: - spec: - template: - metadata: - spec: - restartPolicy: Never - {{- with (include "common.controller.volumes" . | trim) }} - volumes: - {{- nindent 12 . }} - {{- end }} - containers: - - name: {{ .Chart.Name }} - image: "{{ .Values.image.repository }}:{{ default .Values.image.tag }}" - imagePullPolicy: {{ default .Values.image.pullPolicy }} - command: [ "php" ] - args: - - "-f" - - "/var/www/html/cron.php" - # Will mount configuration files as www-data (id: 33) by default for nextcloud - {{- with (include "common.controller.volumeMounts" . | trim) }} - volumeMounts: - {{ nindent 16 . }} - {{- end }} - securityContext: - runAsUser: 33 - runAsGroup: 33 - resources: -{{ toYaml .Values.resources | indent 16 }} - -{{- end -}} diff --git a/stable/nextcloud/3.7.14/templates/_secrets.tpl b/stable/nextcloud/3.7.14/templates/_secrets.tpl deleted file mode 100644 index d9ae0df858c..00000000000 --- a/stable/nextcloud/3.7.14/templates/_secrets.tpl +++ /dev/null @@ -1,50 +0,0 @@ -{{/* Define the secrets */}} -{{- define "nextcloud.secrets" -}} - ---- - -apiVersion: v1 -kind: Secret -metadata: - labels: - {{- include "common.labels" . | nindent 4 }} - name: dbcreds -{{- $previous := lookup "v1" "Secret" .Release.Namespace "dbcreds" }} -{{- $dbPass := "" }} -data: -{{- if $previous }} - {{- $dbPass = ( index $previous.data "postgresql-password" ) | b64dec }} - postgresql-password: {{ ( index $previous.data "postgresql-password" ) }} - postgresql-postgres-password: {{ ( index $previous.data "postgresql-postgres-password" ) }} -{{- else }} - {{- $dbPass = randAlphaNum 50 }} - postgresql-password: {{ $dbPass | b64enc | quote }} - postgresql-postgres-password: {{ randAlphaNum 50 | b64enc | quote }} -{{- end }} - url: {{ ( printf "%v%v:%v@%v-%v:%v/%v" "postgresql://" .Values.postgresql.postgresqlUsername $dbPass .Release.Name "postgresql" "5432" .Values.postgresql.postgresqlDatabase ) | b64enc | quote }} - host: {{ ( printf "%v-%v:5432" .Release.Name "postgresql" ) | b64enc | quote }} - plainhost: {{ ( printf "%v-%v" .Release.Name "postgresql" ) | b64enc | quote }} -type: Opaque - ---- - -apiVersion: v1 -kind: Secret -metadata: - labels: - {{- include "common.labels" . | nindent 4 }} - name: rediscreds -{{- $redisprevious := lookup "v1" "Secret" .Release.Namespace "rediscreds" }} -{{- $redisPass := "" }} -data: -{{- if $redisprevious }} - {{- $redisPass = ( index $redisprevious.data "redis-password" ) | b64dec }} - redis-password: {{ ( index $redisprevious.data "redis-password" ) }} -{{- else }} - {{- $redisPass = randAlphaNum 50 }} - redis-password: {{ $redisPass | b64enc | quote }} -{{- end }} - masterhost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }} - slavehost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }} -type: Opaque -{{- end -}} diff --git a/stable/nextcloud/3.7.14/templates/common.yaml b/stable/nextcloud/3.7.14/templates/common.yaml deleted file mode 100644 index 8e72c538b1d..00000000000 --- a/stable/nextcloud/3.7.14/templates/common.yaml +++ /dev/null @@ -1,14 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{/* Render the templates */}} -{{ include "common.all" . }} - -{{/* Render configmap for nextcloud */}} -{{- include "nextcloud.configmap" . }} - -{{/* Render secrets for nextcloud */}} -{{- include "nextcloud.secrets" . }} - -{{/* Render cronjob for nextcloud */}} -{{- include "nextcloud.cronjob" . }} diff --git a/stable/nextcloud/3.7.14/test_values.yaml b/stable/nextcloud/3.7.14/test_values.yaml deleted file mode 100644 index f2e80b820aa..00000000000 --- a/stable/nextcloud/3.7.14/test_values.yaml +++ /dev/null @@ -1,184 +0,0 @@ -# Default values for Bitwarden. - -image: - repository: nextcloud - pullPolicy: IfNotPresent - tag: 22.1.1 - -strategy: - type: Recreate - -service: - main: - ports: - main: - port: 80 - hpb: - enabled: true - ports: - hpb: - enabled: true - port: 7867 - -env: - NEXTCLOUD_ADMIN_USER: "admin" - NEXTCLOUD_ADMIN_PASSWORD: "adminpass" - TRUSTED_PROXIES: "172.16.0.0/16" - -envTpl: - POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}" - POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}" - -envFrom: - - configMapRef: - name: nextcloudconfig - -envValueFrom: - POSTGRES_PASSWORD: - secretKeyRef: - name: dbcreds - key: postgresql-password - POSTGRES_HOST: - secretKeyRef: - name: dbcreds - key: host - REDIS_HOST: - secretKeyRef: - name: rediscreds - key: masterhost - REDIS_HOST_PASSWORD: - secretKeyRef: - name: rediscreds - key: redis-password - -persistence: - data: - enabled: true - mountPath: "/var/www/html" - type: pvc - accessMode: ReadWriteOnce - size: "100Gi" - - redismaster: - noMount: true - forceName: "redismaster" - enabled: true - type: pvc - accessMode: ReadWriteOnce - size: "100Gi" - -initContainers: - - name: init-postgresdb - image: postgres:13.1 - command: - - "sh" - - "-c" - - "until pg_isready -U nextcloud -h ${pghost} ; do sleep 2 ; done" - imagePullPolicy: IfNotPresent - env: - - name: pghost - valueFrom: - secretKeyRef: - name: dbcreds - key: plainhost - - -podSecurityContext: - fsGroup: 33 - -# -- Probe configuration -# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) -# @default -- See below -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Redainess probe configuration - # @default -- See below - readiness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Startup probe configuration - # @default -- See below - startup: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - -## Cronjob to execute Nextcloud background tasks -## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron -## -cronjob: - # Every 5 minutes - # Note: Setting this to any any other value than 5 minutes might - # cause issues with how nextcloud background jobs are executed - schedule: "*/5 * * * *" - annotations: {} - failedJobsHistoryLimit: 5 - successfulJobsHistoryLimit: 2 - -# Enabled postgres -postgresql: - enabled: true - postgresqlUsername: nextcloud - postgresqlDatabase: nextcloud - existingSecret: dbcreds - -# Enabled redis -# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/redis -redis: - volumePermissions: - enabled: true - architecture: standalone - enabled: true - auth: - existingSecret: rediscreds - existingSecretPasswordKey: redis-password - master: - persistence: - enabled: false - existingClaim: redismaster - replica: - replicaCount: 0 - persistence: - enabled: false diff --git a/stable/nextcloud/3.7.14/values.yaml b/stable/nextcloud/3.7.14/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/stable/nextcloud/3.7.15/CHANGELOG.md b/stable/nextcloud/3.7.15/CHANGELOG.md deleted file mode 100644 index 5a8ce0495e4..00000000000 --- a/stable/nextcloud/3.7.15/CHANGELOG.md +++ /dev/null @@ -1,13 +0,0 @@ - - -### [nextcloud-3.7.15](https://github.com/truecharts/apps/compare/nextcloud-3.7.14...nextcloud-3.7.15) (2021-09-08) - -#### Feat - -* Add IPWhitelist, redirectRegex and (internal) nextcloud middlewares ([#929](https://github.com/truecharts/apps/issues/929)) -* Pre-commit and tag-appversion syncing ([#926](https://github.com/truecharts/apps/issues/926)) - -#### Fix - -* Add initcontainer to force refresh TRUSTED_DOMAINS ([#930](https://github.com/truecharts/apps/issues/930)) - diff --git a/stable/nextcloud/3.7.15/CONFIG.md b/stable/nextcloud/3.7.15/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/nextcloud/3.7.15/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/nextcloud/3.7.15/Chart.lock b/stable/nextcloud/3.7.15/Chart.lock deleted file mode 100644 index b2ac3510b8a..00000000000 --- a/stable/nextcloud/3.7.15/Chart.lock +++ /dev/null @@ -1,12 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -- name: postgresql - repository: https://truecharts.org/ - version: 1.6.5 -- name: redis - repository: https://charts.bitnami.com/bitnami - version: 15.3.1 -digest: sha256:9b60ad9c2e2d09a112a54fb1b46b836d458abf2f29aa38210bc91f063152e562 -generated: "2021-09-08T20:17:08.113443974Z" diff --git a/stable/nextcloud/3.7.15/Chart.yaml b/stable/nextcloud/3.7.15/Chart.yaml deleted file mode 100644 index 91db460d596..00000000000 --- a/stable/nextcloud/3.7.15/Chart.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: v2 -appVersion: 22.1.1 -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -- condition: postgresql.enabled - name: postgresql - repository: https://truecharts.org/ - version: 1.6.5 -- condition: redis.enabled - name: redis - repository: https://charts.bitnami.com/bitnami - version: 15.3.1 -deprecated: false -description: A private cloud server that puts the control and security of your own - data back into your hands. -home: https://nextcloud.com/ -icon: https://upload.wikimedia.org/wikipedia/commons/thumb/6/60/Nextcloud_Logo.svg/1280px-Nextcloud_Logo.svg.png -keywords: -- nextcloud -- storage -- http -- web -- php -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: nextcloud -sources: -- https://github.com/nextcloud/docker -- https://github.com/nextcloud/helm -type: application -version: 3.7.15 diff --git a/stable/nextcloud/3.7.15/README.md b/stable/nextcloud/3.7.15/README.md deleted file mode 100644 index 7aa6d368343..00000000000 --- a/stable/nextcloud/3.7.15/README.md +++ /dev/null @@ -1,40 +0,0 @@ -# Introduction - -A private cloud server that puts the control and security of your own data back into your hands. - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://charts.bitnami.com/bitnami | redis | 15.3.1 | -| https://truecharts.org/ | common | 6.13.8 | -| https://truecharts.org/ | postgresql | 1.6.5 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/nextcloud/3.7.15/app-readme.md b/stable/nextcloud/3.7.15/app-readme.md deleted file mode 100644 index 28094fc642d..00000000000 --- a/stable/nextcloud/3.7.15/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -A private cloud server that puts the control and security of your own data back into your hands. - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/nextcloud/3.7.15/charts/common-6.13.8.tgz b/stable/nextcloud/3.7.15/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/nextcloud/3.7.15/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/nextcloud/3.7.15/charts/postgresql-1.6.5.tgz b/stable/nextcloud/3.7.15/charts/postgresql-1.6.5.tgz deleted file mode 100644 index 89d7c9c9ff4..00000000000 Binary files a/stable/nextcloud/3.7.15/charts/postgresql-1.6.5.tgz and /dev/null differ diff --git a/stable/nextcloud/3.7.15/charts/redis-15.3.1.tgz b/stable/nextcloud/3.7.15/charts/redis-15.3.1.tgz deleted file mode 100644 index 7bfdadbc26a..00000000000 Binary files a/stable/nextcloud/3.7.15/charts/redis-15.3.1.tgz and /dev/null differ diff --git a/stable/nextcloud/3.7.15/helm-values.md b/stable/nextcloud/3.7.15/helm-values.md deleted file mode 100644 index 8f2f41b3c59..00000000000 --- a/stable/nextcloud/3.7.15/helm-values.md +++ /dev/null @@ -1,94 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| cronjob.annotations | object | `{}` | | -| cronjob.failedJobsHistoryLimit | int | `5` | | -| cronjob.schedule | string | `"*/5 * * * *"` | | -| cronjob.successfulJobsHistoryLimit | int | `2` | | -| env.NEXTCLOUD_ADMIN_PASSWORD | string | `"adminpass"` | | -| env.NEXTCLOUD_ADMIN_USER | string | `"admin"` | | -| env.TRUSTED_PROXIES | string | `"172.16.0.0/16"` | | -| envFrom[0].configMapRef.name | string | `"nextcloudconfig"` | | -| envTpl.POSTGRES_DB | string | `"{{ .Values.postgresql.postgresqlDatabase }}"` | | -| envTpl.POSTGRES_USER | string | `"{{ .Values.postgresql.postgresqlUsername }}"` | | -| envValueFrom.POSTGRES_HOST.secretKeyRef.key | string | `"host"` | | -| envValueFrom.POSTGRES_HOST.secretKeyRef.name | string | `"dbcreds"` | | -| envValueFrom.POSTGRES_PASSWORD.secretKeyRef.key | string | `"postgresql-password"` | | -| envValueFrom.POSTGRES_PASSWORD.secretKeyRef.name | string | `"dbcreds"` | | -| envValueFrom.REDIS_HOST.secretKeyRef.key | string | `"masterhost"` | | -| envValueFrom.REDIS_HOST.secretKeyRef.name | string | `"rediscreds"` | | -| envValueFrom.REDIS_HOST_PASSWORD.secretKeyRef.key | string | `"redis-password"` | | -| envValueFrom.REDIS_HOST_PASSWORD.secretKeyRef.name | string | `"rediscreds"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"nextcloud"` | | -| image.tag | string | `"22.1.1"` | | -| initContainers[0].command[0] | string | `"sh"` | | -| initContainers[0].command[1] | string | `"-c"` | | -| initContainers[0].command[2] | string | `"until pg_isready -U nextcloud -h ${pghost} ; do sleep 2 ; done"` | | -| initContainers[0].env[0].name | string | `"pghost"` | | -| initContainers[0].env[0].valueFrom.secretKeyRef.key | string | `"plainhost"` | | -| initContainers[0].env[0].valueFrom.secretKeyRef.name | string | `"dbcreds"` | | -| initContainers[0].image | string | `"postgres:13.1"` | | -| initContainers[0].imagePullPolicy | string | `"IfNotPresent"` | | -| initContainers[0].name | string | `"init-postgresdb"` | | -| initContainers[1].args[0] | string | `"if [ -f /var/www/html/occ ]; then if [ -n \"${NEXTCLOUD_TRUSTED_DOMAINS+x}\" ]; then echo \"setting trusted domains…\"; NC_TRUSTED_DOMAIN_IDX=1; for DOMAIN in $NEXTCLOUD_TRUSTED_DOMAINS ; do DOMAIN=$(echo \"$DOMAIN\" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//'); php /var/www/html/occ config:system:set trusted_domains $NC_TRUSTED_DOMAIN_IDX --value=$DOMAIN; NC_TRUSTED_DOMAIN_IDX=$(($NC_TRUSTED_DOMAIN_IDX+1)); done; fi; fi;"` | | -| initContainers[1].command[0] | string | `"su"` | | -| initContainers[1].command[1] | string | `"-p"` | | -| initContainers[1].command[2] | string | `"www-data"` | | -| initContainers[1].command[3] | string | `"-s"` | | -| initContainers[1].command[4] | string | `"/bin/sh"` | | -| initContainers[1].command[5] | string | `"-c"` | | -| initContainers[1].envFrom[0].configMapRef.name | string | `"nextcloudconfig"` | | -| initContainers[1].image | string | `"nextcloud:22.1.1"` | | -| initContainers[1].name | string | `"injectconfig"` | | -| initContainers[1].volumeMounts[0].mountPath | string | `"/var/www/html"` | | -| initContainers[1].volumeMounts[0].name | string | `"data"` | | -| persistence.data.accessMode | string | `"ReadWriteOnce"` | | -| persistence.data.enabled | bool | `true` | | -| persistence.data.mountPath | string | `"/var/www/html"` | | -| persistence.data.size | string | `"100Gi"` | | -| persistence.data.type | string | `"pvc"` | | -| persistence.redismaster.accessMode | string | `"ReadWriteOnce"` | | -| persistence.redismaster.enabled | bool | `true` | | -| persistence.redismaster.forceName | string | `"redismaster"` | | -| persistence.redismaster.noMount | bool | `true` | | -| persistence.redismaster.size | string | `"100Gi"` | | -| persistence.redismaster.type | string | `"pvc"` | | -| podSecurityContext.fsGroup | int | `33` | | -| postgresql.enabled | bool | `true` | | -| postgresql.existingSecret | string | `"dbcreds"` | | -| postgresql.postgresqlDatabase | string | `"nextcloud"` | | -| postgresql.postgresqlUsername | string | `"nextcloud"` | | -| probes | object | See below | Probe configuration -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) | -| probes.liveness | object | See below | Liveness probe configuration | -| probes.liveness.spec | object | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.readiness | object | See below | Redainess probe configuration | -| probes.readiness.spec | object | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.startup | object | See below | Startup probe configuration | -| probes.startup.spec | object | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| redis.architecture | string | `"standalone"` | | -| redis.auth.existingSecret | string | `"rediscreds"` | | -| redis.auth.existingSecretPasswordKey | string | `"redis-password"` | | -| redis.enabled | bool | `true` | | -| redis.master.persistence.enabled | bool | `false` | | -| redis.master.persistence.existingClaim | string | `"redismaster"` | | -| redis.replica.persistence.enabled | bool | `false` | | -| redis.replica.replicaCount | int | `0` | | -| redis.volumePermissions.enabled | bool | `true` | | -| service.hpb.enabled | bool | `true` | | -| service.hpb.ports.hpb.enabled | bool | `true` | | -| service.hpb.ports.hpb.port | int | `7867` | | -| service.main.ports.main.port | int | `80` | | -| strategy.type | string | `"Recreate"` | | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/nextcloud/3.7.15/ix_values.yaml b/stable/nextcloud/3.7.15/ix_values.yaml deleted file mode 100644 index f791c144a92..00000000000 --- a/stable/nextcloud/3.7.15/ix_values.yaml +++ /dev/null @@ -1,162 +0,0 @@ -## -# This file contains Values.yaml content that gets added to the output of questions.yaml -# It's ONLY meant for content that the user is NOT expected to change. -# Example: Everything under "image" is not included in questions.yaml but is included here. -## - -image: - repository: nextcloud - pullPolicy: IfNotPresent - tag: 22.1.1 - -strategy: - type: Recreate - -env: {} - - -envTpl: - POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}" - POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}" - -envFrom: - - configMapRef: - name: nextcloudconfig - -envValueFrom: - POSTGRES_PASSWORD: - secretKeyRef: - name: dbcreds - key: postgresql-password - POSTGRES_HOST: - secretKeyRef: - name: dbcreds - key: host - REDIS_HOST: - secretKeyRef: - name: rediscreds - key: masterhost - REDIS_HOST_PASSWORD: - secretKeyRef: - name: rediscreds - key: redis-password - -initContainers: - - name: init-postgresdb - image: postgres:13.1 - command: - - "sh" - - "-c" - - "until pg_isready -U nextcloud -h ${pghost} ; do sleep 2 ; done" - imagePullPolicy: IfNotPresent - env: - - name: pghost - valueFrom: - secretKeyRef: - name: dbcreds - key: plainhost - - -# -- Probe configuration -# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) -# @default -- See below -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Redainess probe configuration - # @default -- See below - readiness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Startup probe configuration - # @default -- See below - startup: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - -## Cronjob to execute Nextcloud background tasks -## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron -## -cronjob: - # Every 5 minutes - # Note: Setting this to any any other value than 5 minutes might - # cause issues with how nextcloud background jobs are executed - schedule: "*/5 * * * *" - annotations: {} - failedJobsHistoryLimit: 5 - successfulJobsHistoryLimit: 2 - -# Enabled postgres -postgresql: - enabled: true - postgresqlUsername: nextcloud - postgresqlDatabase: nextcloud - existingSecret: dbcreds - persistence: - db: - storageClass: "SCALE-ZFS" - dbbackups: - storageClass: "SCALE-ZFS" - -# Enabled redis -# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/redis -redis: - architecture: standalone - enabled: true - auth: - existingSecret: rediscreds - existingSecretPasswordKey: redis-password - master: - persistence: - enabled: true - existingClaim: redismaster - replica: - replicaCount: 0 - persistence: - enabled: false - -## -# Most other defaults are set in questions.yaml -# For other options please refer to the wiki, default_values.yaml or the common library chart -## diff --git a/stable/nextcloud/3.7.15/questions.yaml b/stable/nextcloud/3.7.15/questions.yaml deleted file mode 100644 index 32482410e59..00000000000 --- a/stable/nextcloud/3.7.15/questions.yaml +++ /dev/null @@ -1,1059 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "$kubernetes-resource_configmap_portal_protocol" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - required: true - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "Recreate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - - variable: NEXTCLOUD_ADMIN_USER - label: "NEXTCLOUD_ADMIN_USER" - description: "Sets nextcloud admin username" - schema: - type: string - required: true - default: "" - - variable: NEXTCLOUD_ADMIN_PASSWORD - label: "NEXTCLOUD_ADMIN_PASSWORD" - description: "Sets nextcloud admin password" - schema: - type: string - required: true - default: "" - - variable: TRUSTED_PROXIES - label: "TRUSTED_PROXIES" - description: "Sets nextcloud Trusted Proxies" - schema: - type: string - default: "172.16.0.0/16" - - variable: NODE_IP - label: "NODE_IP" - description: "Sets nextcloud nodeip for nodeport connections" - schema: - type: string - $ref: - - "definitions/nodeIP" - - - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - variable: service - group: "Networking and Services" - label: "Configure Service(s)" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: main - label: "Main Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 80 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 80 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 36091 - required: true - - - variable: persistence - label: "Integrated Persistent Storage" - description: "Integrated Persistent Storage" - group: "Storage and Persistence" - schema: - type: dict - attrs: - - variable: data - label: "App Data Storage" - description: "Stores the Application Data." - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "pvc" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - default: "/var/www/html" - hidden: true - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PV" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - variable: redismaster - label: "Redis Storage" - description: "Stores the Application redis-master-database." - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - hidden: true - - variable: noMount - label: "Do not mount this storage inside the main pod" - schema: - type: boolean - default: true - hidden: true - - variable: forceName - label: "Override PVC Name (advanced)" - description: "Forces a certain name for the PVC" - schema: - type: string - default: "redismaster" - hidden: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "pvc" - hidden: true - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - default: "" - hidden: true - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PV" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - - variable: persistenceList - label: "Additional app storage" - group: "Storage and Persistence" - schema: - type: list - default: [] - items: - - variable: persistenceListEntry - label: "Custom Storage" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "hostPath" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - required: true - default: "" - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PVC" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - - variable: ingress - label: "" - group: "Ingress" - schema: - type: dict - attrs: - - variable: main - label: "Main Ingress" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable Ingress" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: hosts - label: "Hosts" - schema: - type: list - default: [] - items: - - variable: hostEntry - label: "Host" - schema: - type: dict - attrs: - - variable: host - label: "HostName" - schema: - type: string - default: "" - required: true - - variable: paths - label: "Paths" - schema: - type: list - default: [] - items: - - variable: pathEntry - label: "Host" - schema: - type: dict - attrs: - - variable: path - label: "path" - schema: - type: string - required: true - default: "/" - - variable: pathType - label: "pathType" - schema: - type: string - required: true - default: "Prefix" - - variable: tls - label: "TLS-Settings" - schema: - type: list - default: [] - items: - - variable: tlsEntry - label: "Host" - schema: - type: dict - attrs: - - variable: hosts - label: "Certificate Hosts" - schema: - type: list - default: [] - items: - - variable: host - label: "Host" - schema: - type: string - default: "" - required: true - - variable: scaleCert - label: "Select TrueNAS SCALE Certificate" - schema: - type: int - $ref: - - "definitions/certificate" - - variable: entrypoint - label: "Traefik Entrypoint" - description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" - schema: - type: string - default: "websecure" - required: true - - variable: middlewares - label: "Traefik Middlewares" - description: "Add previously created Traefik Middlewares to this Ingress" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - default: "" - required: true - - - variable: ingressList - label: "Additional Ingress" - group: "Ingress" - schema: - type: list - default: [] - items: - - variable: ingressListEntry - label: "Custom Ingress" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable Ingress" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Name" - schema: - type: string - default: "" - - variable: ingressClassName - label: "IngressClass Name" - schema: - type: string - default: "" - - variable: labelsList - label: "Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: "Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: hosts - label: "Hosts" - schema: - type: list - default: [] - items: - - variable: hostEntry - label: "Host" - schema: - type: dict - attrs: - - variable: host - label: "HostName" - schema: - type: string - default: "" - required: true - - variable: paths - label: "Paths" - schema: - type: list - default: [] - items: - - variable: pathEntry - label: "Host" - schema: - type: dict - attrs: - - variable: path - label: "path" - schema: - type: string - required: true - default: "/" - - variable: pathType - label: "pathType" - schema: - type: string - required: true - default: "Prefix" - - variable: service - label: "Linked Service" - schema: - type: dict - attrs: - - variable: name - label: "Service Name" - schema: - type: string - default: "" - - variable: port - label: "Service Port" - schema: - type: int - - variable: tls - label: "TLS-Settings" - schema: - type: list - default: [] - items: - - variable: tlsEntry - label: "Host" - schema: - type: dict - attrs: - - variable: hosts - label: "Certificate Hosts" - schema: - type: list - default: [] - items: - - variable: host - label: "Host" - schema: - type: string - default: "" - required: true - - variable: scaleCert - label: "Select TrueNAS SCALE Certificate" - schema: - type: int - $ref: - - "definitions/certificate" - - variable: entrypoint - label: "Traefik Entrypoint" - description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" - schema: - type: string - default: "websecure" - required: true - - variable: middlewares - label: "Traefik Middlewares" - description: "Add previously created Traefik Middlewares to this Ingress" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - default: "" - required: true - - - variable: podSecurityContext - group: "Security and Permissions" - label: "Pod Security Context" - schema: - type: dict - attrs: - - variable: fsGroup - label: "fsGroup" - description: "The group that should own ALL storage." - schema: - type: int - default: 33 - - variable: fsGroupChangePolicy - label: "When should we take ownership?" - schema: - type: string - default: "OnRootMismatch" - enum: - - value: "OnRootMismatch" - description: "OnRootMismatch" - - value: "Always" - description: "Always" - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/nextcloud/3.7.15/templates/_configmap.tpl b/stable/nextcloud/3.7.15/templates/_configmap.tpl deleted file mode 100644 index 3bb5a51325b..00000000000 --- a/stable/nextcloud/3.7.15/templates/_configmap.tpl +++ /dev/null @@ -1,35 +0,0 @@ -{{/* Define the configmap */}} -{{- define "nextcloud.configmap" -}} - -{{- $hosts := "" }} -{{- if .Values.ingress.main.enabled }} -{{- range .Values.ingress }} -{{- range $index, $host := .hosts }} - {{- if $index }} - {{ $hosts = ( printf "%v %v" $hosts $host.host ) }} - {{- else }} - {{ $hosts = ( printf "%s" $host.host ) }} - {{- end }} -{{- end }} -{{- end }} -{{- end }} ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: nextcloudconfig -data: - NEXTCLOUD_TRUSTED_DOMAINS: {{ ( printf "%v %v %v %v %v" "test.fakedomain.dns" ( .Values.env.NODE_IP | default "localhost" ) ( printf "%v-%v" .Release.Name "nextcloud" ) ( printf "%v-%v" .Release.Name "nextcloud-hpb" ) $hosts ) | quote }} - {{- if .Values.ingress.main.enabled }} - APACHE_DISABLE_REWRITE_IP: "1" - {{- end }} - ---- -apiVersion: v1 -kind: ConfigMap -metadata: - name: hpbconfig -data: - NEXTCLOUD_URL: {{ ( printf "%v-%v" .Release.Name "nextcloud" ) | quote }} - -{{- end -}} diff --git a/stable/nextcloud/3.7.15/templates/_cronjob.tpl b/stable/nextcloud/3.7.15/templates/_cronjob.tpl deleted file mode 100644 index 96a0b6145c6..00000000000 --- a/stable/nextcloud/3.7.15/templates/_cronjob.tpl +++ /dev/null @@ -1,51 +0,0 @@ -{{/* Define the cronjob */}} -{{- define "nextcloud.cronjob" -}} -{{- $jobName := include "common.names.fullname" . }} - ---- -apiVersion: batch/v1beta1 -kind: CronJob -metadata: - name: {{ printf "%s-cronjob" $jobName }} - labels: - {{- include "common.labels" . | nindent 4 }} -spec: - schedule: "{{ .Values.cronjob.schedule }}" - concurrencyPolicy: Forbid - {{- with .Values.cronjob.failedJobsHistoryLimit }} - failedJobsHistoryLimit: {{ . }} - {{- end }} - {{- with .Values.cronjob.successfulJobsHistoryLimit }} - successfulJobsHistoryLimit: {{ . }} - {{- end }} - jobTemplate: - metadata: - spec: - template: - metadata: - spec: - restartPolicy: Never - {{- with (include "common.controller.volumes" . | trim) }} - volumes: - {{- nindent 12 . }} - {{- end }} - containers: - - name: {{ .Chart.Name }} - image: "{{ .Values.image.repository }}:{{ default .Values.image.tag }}" - imagePullPolicy: {{ default .Values.image.pullPolicy }} - command: [ "php" ] - args: - - "-f" - - "/var/www/html/cron.php" - # Will mount configuration files as www-data (id: 33) by default for nextcloud - {{- with (include "common.controller.volumeMounts" . | trim) }} - volumeMounts: - {{ nindent 16 . }} - {{- end }} - securityContext: - runAsUser: 33 - runAsGroup: 33 - resources: -{{ toYaml .Values.resources | indent 16 }} - -{{- end -}} diff --git a/stable/nextcloud/3.7.15/templates/_secrets.tpl b/stable/nextcloud/3.7.15/templates/_secrets.tpl deleted file mode 100644 index d9ae0df858c..00000000000 --- a/stable/nextcloud/3.7.15/templates/_secrets.tpl +++ /dev/null @@ -1,50 +0,0 @@ -{{/* Define the secrets */}} -{{- define "nextcloud.secrets" -}} - ---- - -apiVersion: v1 -kind: Secret -metadata: - labels: - {{- include "common.labels" . | nindent 4 }} - name: dbcreds -{{- $previous := lookup "v1" "Secret" .Release.Namespace "dbcreds" }} -{{- $dbPass := "" }} -data: -{{- if $previous }} - {{- $dbPass = ( index $previous.data "postgresql-password" ) | b64dec }} - postgresql-password: {{ ( index $previous.data "postgresql-password" ) }} - postgresql-postgres-password: {{ ( index $previous.data "postgresql-postgres-password" ) }} -{{- else }} - {{- $dbPass = randAlphaNum 50 }} - postgresql-password: {{ $dbPass | b64enc | quote }} - postgresql-postgres-password: {{ randAlphaNum 50 | b64enc | quote }} -{{- end }} - url: {{ ( printf "%v%v:%v@%v-%v:%v/%v" "postgresql://" .Values.postgresql.postgresqlUsername $dbPass .Release.Name "postgresql" "5432" .Values.postgresql.postgresqlDatabase ) | b64enc | quote }} - host: {{ ( printf "%v-%v:5432" .Release.Name "postgresql" ) | b64enc | quote }} - plainhost: {{ ( printf "%v-%v" .Release.Name "postgresql" ) | b64enc | quote }} -type: Opaque - ---- - -apiVersion: v1 -kind: Secret -metadata: - labels: - {{- include "common.labels" . | nindent 4 }} - name: rediscreds -{{- $redisprevious := lookup "v1" "Secret" .Release.Namespace "rediscreds" }} -{{- $redisPass := "" }} -data: -{{- if $redisprevious }} - {{- $redisPass = ( index $redisprevious.data "redis-password" ) | b64dec }} - redis-password: {{ ( index $redisprevious.data "redis-password" ) }} -{{- else }} - {{- $redisPass = randAlphaNum 50 }} - redis-password: {{ $redisPass | b64enc | quote }} -{{- end }} - masterhost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }} - slavehost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }} -type: Opaque -{{- end -}} diff --git a/stable/nextcloud/3.7.15/templates/common.yaml b/stable/nextcloud/3.7.15/templates/common.yaml deleted file mode 100644 index 53b4b7b25be..00000000000 --- a/stable/nextcloud/3.7.15/templates/common.yaml +++ /dev/null @@ -1,17 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{/* Render configmap for nextcloud */}} -{{- include "nextcloud.configmap" . }} - -{{/* Render secrets for nextcloud */}} -{{- include "nextcloud.secrets" . }} - -{{- $newMiddlewares := append .Values.ingress.main.fixedMiddlewares "tc-nextcloud-chain" }} -{{- $_ := set .Values.ingress.main "fixedMiddlewares" $newMiddlewares -}} - -{{/* Render cronjob for nextcloud */}} -{{- include "nextcloud.cronjob" . }} - -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/stable/nextcloud/3.7.15/test_values.yaml b/stable/nextcloud/3.7.15/test_values.yaml deleted file mode 100644 index 5fc6cd6e647..00000000000 --- a/stable/nextcloud/3.7.15/test_values.yaml +++ /dev/null @@ -1,211 +0,0 @@ -# Default values for Bitwarden. - -image: - repository: nextcloud - pullPolicy: IfNotPresent - tag: 22.1.1 - -strategy: - type: Recreate - -service: - main: - ports: - main: - port: 80 - hpb: - enabled: true - ports: - hpb: - enabled: true - port: 7867 - -env: - NEXTCLOUD_ADMIN_USER: "admin" - NEXTCLOUD_ADMIN_PASSWORD: "adminpass" - TRUSTED_PROXIES: "172.16.0.0/16" - -envTpl: - POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}" - POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}" - -envFrom: - - configMapRef: - name: nextcloudconfig - -envValueFrom: - POSTGRES_PASSWORD: - secretKeyRef: - name: dbcreds - key: postgresql-password - POSTGRES_HOST: - secretKeyRef: - name: dbcreds - key: host - REDIS_HOST: - secretKeyRef: - name: rediscreds - key: masterhost - REDIS_HOST_PASSWORD: - secretKeyRef: - name: rediscreds - key: redis-password - -persistence: - data: - enabled: true - mountPath: "/var/www/html" - type: pvc - accessMode: ReadWriteOnce - size: "100Gi" - - redismaster: - noMount: true - forceName: "redismaster" - enabled: true - type: pvc - accessMode: ReadWriteOnce - size: "100Gi" - -initContainers: - - name: init-postgresdb - image: postgres:13.1 - command: - - "sh" - - "-c" - - "until pg_isready -U nextcloud -h ${pghost} ; do sleep 2 ; done" - imagePullPolicy: IfNotPresent - env: - - name: pghost - valueFrom: - secretKeyRef: - name: dbcreds - key: plainhost - - name: injectconfig - image: nextcloud:22.1.1 - envFrom: - - configMapRef: - name: nextcloudconfig - command: - - "su" - - "-p" - - "www-data" - - "-s" - - "/bin/sh" - - "-c" - args: - - if [ -f /var/www/html/occ ]; then - if [ -n "${NEXTCLOUD_TRUSTED_DOMAINS+x}" ]; then - echo "setting trusted domains…"; - NC_TRUSTED_DOMAIN_IDX=1; - for DOMAIN in $NEXTCLOUD_TRUSTED_DOMAINS ; do - DOMAIN=$(echo "$DOMAIN" | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//'); - php /var/www/html/occ config:system:set trusted_domains $NC_TRUSTED_DOMAIN_IDX --value=$DOMAIN; - NC_TRUSTED_DOMAIN_IDX=$(($NC_TRUSTED_DOMAIN_IDX+1)); - done; - fi; - fi; - volumeMounts: - - mountPath: /var/www/html - name: data - - -podSecurityContext: - fsGroup: 33 - -# -- Probe configuration -# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/) -# @default -- See below -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Redainess probe configuration - # @default -- See below - readiness: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - # -- Startup probe configuration - # @default -- See below - startup: - custom: true - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - spec: - httpGet: - path: /status.php - port: 80 - httpHeaders: - - name: Host - value: "test.fakedomain.dns" - initialDelaySeconds: 10 - periodSeconds: 10 - timeoutSeconds: 2 - failureThreshold: 5 - - -## Cronjob to execute Nextcloud background tasks -## ref: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/background_jobs_configuration.html#webcron -## -cronjob: - # Every 5 minutes - # Note: Setting this to any any other value than 5 minutes might - # cause issues with how nextcloud background jobs are executed - schedule: "*/5 * * * *" - annotations: {} - failedJobsHistoryLimit: 5 - successfulJobsHistoryLimit: 2 - -# Enabled postgres -postgresql: - enabled: true - postgresqlUsername: nextcloud - postgresqlDatabase: nextcloud - existingSecret: dbcreds - -# Enabled redis -# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/redis -redis: - volumePermissions: - enabled: true - architecture: standalone - enabled: true - auth: - existingSecret: rediscreds - existingSecretPasswordKey: redis-password - master: - persistence: - enabled: false - existingClaim: redismaster - replica: - replicaCount: 0 - persistence: - enabled: false diff --git a/stable/nextcloud/3.7.15/values.yaml b/stable/nextcloud/3.7.15/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/stable/traefik/7.0.11/CHANGELOG.md b/stable/traefik/7.0.11/CHANGELOG.md deleted file mode 100644 index c4ad404d305..00000000000 --- a/stable/traefik/7.0.11/CHANGELOG.md +++ /dev/null @@ -1,4 +0,0 @@ - - -## [traefik-7.0.11](https://github.com/truecharts/apps/compare/traefik-7.0.10...traefik-7.0.11) (2021-09-08) - diff --git a/stable/traefik/7.0.11/CONFIG.md b/stable/traefik/7.0.11/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/traefik/7.0.11/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/traefik/7.0.11/Chart.lock b/stable/traefik/7.0.11/Chart.lock deleted file mode 100644 index 02881795830..00000000000 --- a/stable/traefik/7.0.11/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -digest: sha256:7c137b201e33de386c8012e58dd401f81aa3b8e8cade47c7de48db3e58342823 -generated: "2021-09-08T03:29:04.197674053Z" diff --git a/stable/traefik/7.0.11/Chart.yaml b/stable/traefik/7.0.11/Chart.yaml deleted file mode 100644 index cfb5521732e..00000000000 --- a/stable/traefik/7.0.11/Chart.yaml +++ /dev/null @@ -1,25 +0,0 @@ -apiVersion: v2 -appVersion: '2.4' -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -deprecated: false -description: Test App for Traefik -home: https://github.com/truecharts/apps/tree/master/charts/stable/traefik -icon: https://raw.githubusercontent.com/traefik/traefik/v2.3/docs/content/assets/img/traefik.logo.png -keywords: -- traefik -- ingress -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: traefik -sources: -- https://github.com/traefik/traefik -- https://github.com/traefik/traefik-helm-chart -- https://traefik.io/ -type: application -version: 7.0.11 diff --git a/stable/traefik/7.0.11/README.md b/stable/traefik/7.0.11/README.md deleted file mode 100644 index 694d4389f5d..00000000000 --- a/stable/traefik/7.0.11/README.md +++ /dev/null @@ -1,39 +0,0 @@ -# Introduction - -Test App for Traefik - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://truecharts.org/ | common | 6.13.8 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.0.11/app-readme.md b/stable/traefik/7.0.11/app-readme.md deleted file mode 100644 index 823c75135e0..00000000000 --- a/stable/traefik/7.0.11/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -Test App for Traefik - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/traefik/7.0.11/charts/common-6.13.8.tgz b/stable/traefik/7.0.11/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/traefik/7.0.11/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/traefik/7.0.11/crds/ingressroute.yaml b/stable/traefik/7.0.11/crds/ingressroute.yaml deleted file mode 100644 index 3391ba532a4..00000000000 --- a/stable/traefik/7.0.11/crds/ingressroute.yaml +++ /dev/null @@ -1,198 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutes.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRoute - listKind: IngressRouteList - plural: ingressroutes - singular: ingressroute - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRoute is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteSpec is a specification for a IngressRouteSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: Route contains the set of routes. - properties: - kind: - enum: - - Rule - type: string - match: - type: string - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - priority: - type: integer - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The - differentiation between the two is specified in the - Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration - based on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name - references a TraefikService object (and to be precise, - one that embeds a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - required: - - kind - - match - type: object - type: array - tls: - description: "TLS contains the TLS certificates configuration of the - routes. To enable Let's Encrypt, use an empty TLS struct, e.g. in - YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/ingressroutetcp.yaml b/stable/traefik/7.0.11/crds/ingressroutetcp.yaml deleted file mode 100644 index 67e099b47da..00000000000 --- a/stable/traefik/7.0.11/crds/ingressroutetcp.yaml +++ /dev/null @@ -1,160 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutetcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteTCP - listKind: IngressRouteTCPList - plural: ingressroutetcps - singular: ingressroutetcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteTCP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteTCPSpec is a specification for a IngressRouteTCPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteTCP contains the set of routes. - properties: - match: - type: string - middlewares: - description: Middlewares contains references to MiddlewareTCP - resources. - items: - description: ObjectReference is a generic reference to a Traefik - resource. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - services: - items: - description: ServiceTCP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - proxyProtocol: - description: ProxyProtocol holds the ProxyProtocol configuration. - properties: - version: - type: integer - type: object - terminationDelay: - type: integer - weight: - type: integer - required: - - name - - port - type: object - type: array - required: - - match - type: object - type: array - tls: - description: "TLSTCP contains the TLS certificates configuration of - the routes. To enable Let's Encrypt, use an empty TLS struct, e.g. - in YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - passthrough: - type: boolean - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/ingressrouteudp.yaml b/stable/traefik/7.0.11/crds/ingressrouteudp.yaml deleted file mode 100644 index 910acd6c270..00000000000 --- a/stable/traefik/7.0.11/crds/ingressrouteudp.yaml +++ /dev/null @@ -1,84 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressrouteudps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteUDP - listKind: IngressRouteUDPList - plural: ingressrouteudps - singular: ingressrouteudp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteUDP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteUDPSpec is a specification for a IngressRouteUDPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteUDP contains the set of routes. - properties: - services: - items: - description: ServiceUDP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - weight: - type: integer - required: - - name - - port - type: object - type: array - type: object - type: array - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/middlewares.yaml b/stable/traefik/7.0.11/crds/middlewares.yaml deleted file mode 100644 index 1770587a327..00000000000 --- a/stable/traefik/7.0.11/crds/middlewares.yaml +++ /dev/null @@ -1,563 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewares.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: Middleware - listKind: MiddlewareList - plural: middlewares - singular: middleware - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: Middleware is a specification for a Middleware resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareSpec holds the Middleware configuration. - properties: - addPrefix: - description: AddPrefix holds the AddPrefix configuration. - properties: - prefix: - type: string - type: object - basicAuth: - description: BasicAuth holds the HTTP basic authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - buffering: - description: Buffering holds the request/response buffering configuration. - properties: - maxRequestBodyBytes: - format: int64 - type: integer - maxResponseBodyBytes: - format: int64 - type: integer - memRequestBodyBytes: - format: int64 - type: integer - memResponseBodyBytes: - format: int64 - type: integer - retryExpression: - type: string - type: object - chain: - description: Chain holds a chain of middlewares. - properties: - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - type: object - circuitBreaker: - description: CircuitBreaker holds the circuit breaker configuration. - properties: - expression: - type: string - type: object - compress: - description: Compress holds the compress configuration. - properties: - excludedContentTypes: - items: - type: string - type: array - type: object - contentType: - description: ContentType middleware - or rather its unique `autoDetect` - option - specifies whether to let the `Content-Type` header, if - it has not been set by the backend, be automatically set to a value - derived from the contents of the response. As a proxy, the default - behavior should be to leave the header alone, regardless of what - the backend did with it. However, the historic default was to always - auto-detect and set the header if it was nil, and it is going to - be kept that way in order to support users currently relying on - it. This middleware exists to enable the correct behavior until - at least the default one can be changed in a future version. - properties: - autoDetect: - type: boolean - type: object - digestAuth: - description: DigestAuth holds the Digest HTTP authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - errors: - description: ErrorPage holds the custom error page configuration. - properties: - query: - type: string - service: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the - forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - status: - items: - type: string - type: array - type: object - forwardAuth: - description: ForwardAuth holds the http forward authentication configuration. - properties: - address: - type: string - authRequestHeaders: - items: - type: string - type: array - authResponseHeaders: - items: - type: string - type: array - authResponseHeadersRegex: - type: string - tls: - description: ClientTLS holds TLS specific configurations as client. - properties: - caOptional: - type: boolean - caSecret: - type: string - certSecret: - type: string - insecureSkipVerify: - type: boolean - type: object - trustForwardHeader: - type: boolean - type: object - headers: - description: Headers holds the custom header configuration. - properties: - accessControlAllowCredentials: - description: AccessControlAllowCredentials is only valid if true. - false is ignored. - type: boolean - accessControlAllowHeaders: - description: AccessControlAllowHeaders must be used in response - to a preflight request with Access-Control-Request-Headers set. - items: - type: string - type: array - accessControlAllowMethods: - description: AccessControlAllowMethods must be used in response - to a preflight request with Access-Control-Request-Method set. - items: - type: string - type: array - accessControlAllowOriginList: - description: AccessControlAllowOriginList is a list of allowable - origins. Can also be a wildcard origin "*". - items: - type: string - type: array - accessControlAllowOriginListRegex: - description: AccessControlAllowOriginListRegex is a list of allowable - origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/). - items: - type: string - type: array - accessControlExposeHeaders: - description: AccessControlExposeHeaders sets valid headers for - the response. - items: - type: string - type: array - accessControlMaxAge: - description: AccessControlMaxAge sets the time that a preflight - request may be cached. - format: int64 - type: integer - addVaryHeader: - description: AddVaryHeader controls if the Vary header is automatically - added/updated when the AccessControlAllowOriginList is set. - type: boolean - allowedHosts: - items: - type: string - type: array - browserXssFilter: - type: boolean - contentSecurityPolicy: - type: string - contentTypeNosniff: - type: boolean - customBrowserXSSValue: - type: string - customFrameOptionsValue: - type: string - customRequestHeaders: - additionalProperties: - type: string - type: object - customResponseHeaders: - additionalProperties: - type: string - type: object - featurePolicy: - type: string - forceSTSHeader: - type: boolean - frameDeny: - type: boolean - hostsProxyHeaders: - items: - type: string - type: array - isDevelopment: - type: boolean - publicKey: - type: string - referrerPolicy: - type: string - sslForceHost: - description: 'Deprecated: use RedirectRegex instead.' - type: boolean - sslHost: - description: 'Deprecated: use RedirectRegex instead.' - type: string - sslProxyHeaders: - additionalProperties: - type: string - type: object - sslRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - sslTemporaryRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - stsIncludeSubdomains: - type: boolean - stsPreload: - type: boolean - stsSeconds: - format: int64 - type: integer - type: object - inFlightReq: - description: InFlightReq limits the number of requests being processed - and served concurrently. - properties: - amount: - format: int64 - type: integer - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - ipWhiteList: - description: IPWhiteList holds the ip white list configuration. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - sourceRange: - items: - type: string - type: array - type: object - passTLSClientCert: - description: PassTLSClientCert holds the TLS client cert headers configuration. - properties: - info: - description: TLSClientCertificateInfo holds the client TLS certificate - info configuration. - properties: - issuer: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - notAfter: - type: boolean - notBefore: - type: boolean - sans: - type: boolean - serialNumber: - type: boolean - subject: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - type: object - pem: - type: boolean - type: object - plugin: - additionalProperties: - x-kubernetes-preserve-unknown-fields: true - type: object - rateLimit: - description: RateLimit holds the rate limiting configuration for a - given router. - properties: - average: - format: int64 - type: integer - burst: - format: int64 - type: integer - period: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - redirectRegex: - description: RedirectRegex holds the redirection configuration. - properties: - permanent: - type: boolean - regex: - type: string - replacement: - type: string - type: object - redirectScheme: - description: RedirectScheme holds the scheme redirection configuration. - properties: - permanent: - type: boolean - port: - type: string - scheme: - type: string - type: object - replacePath: - description: ReplacePath holds the ReplacePath configuration. - properties: - path: - type: string - type: object - replacePathRegex: - description: ReplacePathRegex holds the ReplacePathRegex configuration. - properties: - regex: - type: string - replacement: - type: string - type: object - retry: - description: Retry holds the retry configuration. - properties: - attempts: - type: integer - initialInterval: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - type: object - stripPrefix: - description: StripPrefix holds the StripPrefix configuration. - properties: - forceSlash: - type: boolean - prefixes: - items: - type: string - type: array - type: object - stripPrefixRegex: - description: StripPrefixRegex holds the StripPrefixRegex configuration. - properties: - regex: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/middlewarestcp.yaml b/stable/traefik/7.0.11/crds/middlewarestcp.yaml deleted file mode 100644 index f0d1d5640bd..00000000000 --- a/stable/traefik/7.0.11/crds/middlewarestcp.yaml +++ /dev/null @@ -1,59 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewaretcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: MiddlewareTCP - listKind: MiddlewareTCPList - plural: middlewaretcps - singular: middlewaretcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: MiddlewareTCP is a specification for a MiddlewareTCP resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareTCPSpec holds the MiddlewareTCP configuration. - properties: - ipWhiteList: - description: TCPIPWhiteList holds the TCP ip white list configuration. - properties: - sourceRange: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/serverstransports.yaml b/stable/traefik/7.0.11/crds/serverstransports.yaml deleted file mode 100644 index 78241697d1a..00000000000 --- a/stable/traefik/7.0.11/crds/serverstransports.yaml +++ /dev/null @@ -1,101 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: serverstransports.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: ServersTransport - listKind: ServersTransportList - plural: serverstransports - singular: serverstransport - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: ServersTransport is a specification for a ServersTransport resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServersTransportSpec options to configure communication between - Traefik and the servers. - properties: - certificatesSecrets: - description: Certificates for mTLS. - items: - type: string - type: array - disableHTTP2: - description: Disable HTTP/2 for connections with backend servers. - type: boolean - forwardingTimeouts: - description: Timeouts for requests forwarded to the backend servers. - properties: - dialTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait until a connection to - a backend server can be established. If zero, no timeout exists. - x-kubernetes-int-or-string: true - idleConnTimeout: - anyOf: - - type: integer - - type: string - description: The maximum period for which an idle HTTP keep-alive - connection will remain open before closing itself. - x-kubernetes-int-or-string: true - responseHeaderTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait for a server's response - headers after fully writing the request (including its body, - if any). If zero, no timeout exists. - x-kubernetes-int-or-string: true - type: object - insecureSkipVerify: - description: Disable SSL certificate verification. - type: boolean - maxIdleConnsPerHost: - description: If non-zero, controls the maximum idle (keep-alive) to - keep per-host. If zero, DefaultMaxIdleConnsPerHost is used. - type: integer - rootCAsSecrets: - description: Add cert file for self-signed certificate. - items: - type: string - type: array - serverName: - description: ServerName used to contact the server. - type: string - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/tlsoptions.yaml b/stable/traefik/7.0.11/crds/tlsoptions.yaml deleted file mode 100644 index c901ac2df5e..00000000000 --- a/stable/traefik/7.0.11/crds/tlsoptions.yaml +++ /dev/null @@ -1,87 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsoptions.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSOption - listKind: TLSOptionList - plural: tlsoptions - singular: tlsoption - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSOption is a specification for a TLSOption resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSOptionSpec configures TLS for an entry point. - properties: - cipherSuites: - items: - type: string - type: array - clientAuth: - description: ClientAuth defines the parameters of the client authentication - part of the TLS connection, if any. - properties: - clientAuthType: - description: ClientAuthType defines the client authentication - type to apply. - enum: - - NoClientCert - - RequestClientCert - - VerifyClientCertIfGiven - - RequireAndVerifyClientCert - type: string - secretNames: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - items: - type: string - type: array - type: object - curvePreferences: - items: - type: string - type: array - maxVersion: - type: string - minVersion: - type: string - preferServerCipherSuites: - type: boolean - sniStrict: - type: boolean - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/tlsstores.yaml b/stable/traefik/7.0.11/crds/tlsstores.yaml deleted file mode 100644 index 7bb6193b026..00000000000 --- a/stable/traefik/7.0.11/crds/tlsstores.yaml +++ /dev/null @@ -1,64 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsstores.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSStore - listKind: TLSStoreList - plural: tlsstores - singular: tlsstore - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSStore is a specification for a TLSStore resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSStoreSpec configures a TLSStore resource. - properties: - defaultCertificate: - description: DefaultCertificate holds a secret name for the TLSOption - resource. - properties: - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - required: - - secretName - type: object - required: - - defaultCertificate - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/crds/traefikservices.yaml b/stable/traefik/7.0.11/crds/traefikservices.yaml deleted file mode 100644 index 1d98c25d68d..00000000000 --- a/stable/traefik/7.0.11/crds/traefikservices.yaml +++ /dev/null @@ -1,270 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: traefikservices.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TraefikService - listKind: TraefikServiceList - plural: traefikservices - singular: traefikservice - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TraefikService is the specification for a service (that an IngressRoute - refers to) that is usually not a terminal service (i.e. not a pod of servers), - as opposed to a Kubernetes Service. That is to say, it usually refers to - other (children) services, which themselves can be TraefikServices or Services. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServiceSpec defines whether a TraefikService is a load-balancer - of services or a mirroring service. - properties: - mirroring: - description: Mirroring defines a mirroring service, which is composed - of a main load-balancer, and a list of mirrors. - properties: - kind: - enum: - - Service - - TraefikService - type: string - maxBodySize: - format: int64 - type: integer - mirrors: - items: - description: MirrorService defines one of the mirrors of a Mirroring - service. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - percent: - type: integer - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService object - (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the forward - of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - weighted: - description: WeightedRoundRobin defines a load-balancer of services. - properties: - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.0.11/helm-values.md b/stable/traefik/7.0.11/helm-values.md deleted file mode 100644 index 19c746163b6..00000000000 --- a/stable/traefik/7.0.11/helm-values.md +++ /dev/null @@ -1,50 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| additionalArguments[0] | string | `"--metrics.prometheus"` | | -| additionalArguments[1] | string | `"--ping"` | | -| additionalArguments[2] | string | `"--serverstransport.insecureskipverify=true"` | | -| additionalArguments[3] | string | `"--providers.kubernetesingress.allowexternalnameservices=true"` | | -| globalArguments[0] | string | `"--global.checknewversion"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"traefik"` | | -| image.tag | string | `"v2.5"` | | -| ingressClass | object | `{"enabled":false,"fallbackApiVersion":"","isDefaultClass":false}` | Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x | -| ingressRoute | object | `{"dashboard":{"annotations":{},"enabled":true,"labels":{}}}` | Create an IngressRoute for the dashboard | -| logs | object | `{"access":{"enabled":false,"fields":{"general":{"defaultmode":"keep","names":{}},"headers":{"defaultmode":"drop","names":{}}},"filters":{}},"general":{"level":"ERROR"}}` | Logs https://docs.traefik.io/observability/logs/ | -| metrics.prometheus.entryPoint | string | `"metrics"` | | -| middlewares | object | `{"basicAuth":[],"chain":[],"forwardAuth":[],"rateLimit":[],"redirectScheme":[]}` | SCALE Middleware Handlers | -| pilot | object | `{"enabled":false,"token":""}` | Activate Pilot integration | -| podSecurityContext.fsGroup | int | `568` | | -| portalhook.enabled | bool | `true` | | -| probes.liveness | object | See below | Liveness probe configuration | -| probes.liveness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.liveness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.readiness | object | See below | Redainess probe configuration | -| probes.readiness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.readiness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.startup | object | See below | Startup probe configuration | -| probes.startup.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.startup.type | string | "TCP" | sets the probe type when not using a custom probe | -| providers.kubernetesCRD.enabled | bool | `true` | | -| providers.kubernetesCRD.namespaces | list | `[]` | | -| providers.kubernetesIngress.enabled | bool | `true` | | -| providers.kubernetesIngress.namespaces | list | `[]` | | -| providers.kubernetesIngress.publishedService.enabled | bool | `true` | | -| rbac | object | `{"enabled":true,"rules":[{"apiGroups":[""],"resources":["services","endpoints","secrets"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses","ingressclasses"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses/status"],"verbs":["update"]},{"apiGroups":["traefik.containo.us"],"resources":["ingressroutes","ingressroutetcps","ingressrouteudps","middlewares","middlewaretcps","tlsoptions","tlsstores","traefikservices","serverstransports"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created | -| securityContext | object | `{"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsGroup":568,"runAsNonRoot":true,"runAsUser":568}` | Set the container security context To run the container with ports below 1024 this will need to be adjust to run as root | -| service | object | `{"main":{"enabled":true,"ports":{"main":{"enabled":true,"port":9000,"protocol":"HTTP"}},"type":"LoadBalancer"},"metrics":{"enabled":true,"ports":{"metrics":{"enabled":true,"port":9100,"protocol":"HTTP"}},"type":"LoadBalancer"},"tcp":{"enabled":true,"ports":{"web":{"enabled":true,"port":9080,"protocol":"HTTP","redirectTo":"websecure"},"websecure":{"enabled":true,"port":9443,"protocol":"HTTPS"}},"type":"LoadBalancer"},"udp":{"enabled":false}}` | Options for the main traefik service, where the entrypoints traffic comes from from. | -| serviceAccount | object | `{"enabled":true,"name":""}` | The service account the pods will use to interact with the Kubernetes API | -| tlsOptions | object | `{"default":{"cipherSuites":["TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305","TLS_AES_128_GCM_SHA256","TLS_AES_256_GCM_SHA384","TLS_CHACHA20_POLY1305_SHA256"],"curvePreferences":["CurveP521","CurveP384"],"minVersion":"VersionTLS12","sniStrict":false}}` | TLS Options to be created as TLSOption CRDs https://doc.traefik.io/traefik/https/tls/#tls-options Example: | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.0.11/ix_values.yaml b/stable/traefik/7.0.11/ix_values.yaml deleted file mode 100644 index 11e67e6ee6f..00000000000 --- a/stable/traefik/7.0.11/ix_values.yaml +++ /dev/null @@ -1,181 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5 - pullPolicy: IfNotPresent - -# Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# Configure providers -# -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -# -# Configure Traefik static configuration -# Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - -# TLS Options are created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - - - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - -portalhook: - enabled: true diff --git a/stable/traefik/7.0.11/questions.yaml b/stable/traefik/7.0.11/questions.yaml deleted file mode 100644 index 947bbae5946..00000000000 --- a/stable/traefik/7.0.11/questions.yaml +++ /dev/null @@ -1,1171 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Middlewares" - description: "Traefik Middlewares" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "http" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" - path: "/dashboard/" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "RollingUpdate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: pilot - label: "Traefik Pilot" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: token - label: "token" - schema: - type: string - default: "" - - variable: dashboard - label: "Pilot Dashboard" - schema: - type: boolean - default: false - - - variable: ingressClass - label: "ingressClass" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: isDefaultClass - label: "isDefaultClass" - schema: - type: boolean - default: false - - - variable: logs - label: "Logs" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: general - label: "General Logs" - schema: - type: dict - attrs: - - variable: level - label: "Log Level" - schema: - type: string - default: "ERROR" - enum: - - value: "INFO" - description: "Info" - - value: "WARN" - description: "Warnings" - - value: "ERROR" - description: "Errors" - - value: "FATAL" - description: "Fatal Errors" - - value: "PANIC" - description: "Panics" - - value: "DEBUG" - description: "Debug" - - variable: access - label: "Access Logs" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: enabledFilters - label: "Enable Filters" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: filters - label: "Filters" - schema: - type: dict - attrs: - - variable: statuscodes - label: "Status codes" - schema: - type: string - default: "200,300-302" - - variable: retryattempts - label: "retryattempts" - schema: - type: boolean - default: true - - variable: minduration - label: "minduration" - schema: - type: string - default: "10ms" - - variable: fields - label: "Fields" - schema: - type: dict - attrs: - - variable: general - label: "General" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "keep" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - variable: headers - label: "Headers" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "drop" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - - variable: middlewares - label: "" - group: "Middlewares" - schema: - type: dict - attrs: - - variable: basicAuth - label: "basicAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: users - label: "Users" - schema: - type: list - default: [] - items: - - variable: usersEntry - label: "" - schema: - type: dict - attrs: - - variable: username - label: "Username" - schema: - type: string - required: true - default: "" - - variable: password - label: "Password" - schema: - type: string - required: true - default: "" - - - - variable: forwardAuth - label: "forwardAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: address - label: "Address" - schema: - type: string - required: true - default: "" - - variable: trustForwardHeader - label: "trustForwardHeader" - schema: - type: boolean - default: false - - variable: authResponseHeadersRegex - label: "authResponseHeadersRegex" - schema: - type: string - default: "" - - variable: authResponseHeaders - label: "authResponseHeaders" - schema: - type: list - default: [] - items: - - variable: authResponseHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: authRequestHeaders - label: "authRequestHeaders" - schema: - type: list - default: [] - items: - - variable: authRequestHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: chain - label: "chain" - schema: - type: list - default: [] - items: - - variable: chainEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: middlewares - label: "Middlewares to Chain" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - - variable: redirectScheme - label: "redirectScheme" - schema: - type: list - default: [] - items: - - variable: redirectSchemeEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: scheme - label: "Scheme" - schema: - type: string - required: true - default: "https" - enum: - - value: "https" - description: "https" - - value: "http" - description: "http" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: rateLimit - label: "rateLimit" - schema: - type: list - default: [] - items: - - variable: rateLimitEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: average - label: "Average" - schema: - type: int - required: true - default: 300 - - variable: burst - label: "Burst" - schema: - type: int - required: true - default: 200 - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - - variable: service - group: "Networking and Services" - label: "Configure Service Entrypoint" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: main - label: "Main Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9000 - editable: false - hidden: true - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9000 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9000 - - variable: tcp - label: "Main Service" - description: "The tcp Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: web - label: "web Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9080 - editable: true - required: true - - variable: redirectTo - label: "Redirect to" - schema: - type: string - default: "websecure" - - variable: websecure - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTPS" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9443 - editable: true - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - - variable: udp - label: "UDP Service" - description: "The UDP service for entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "UDP" - enum: - - value: UDP - description: "UDP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: metrics - label: "metrics Service" - description: "The metrics Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: metrics - label: "metrics Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9100 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 9100 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9100 - - - variable: securityContext - group: "Security and Permissions" - label: "Security Context" - schema: - type: dict - attrs: - - variable: privileged - label: "Privileged mode" - schema: - type: boolean - default: false - - variable: readOnlyRootFilesystem - label: "ReadOnly Root Filesystem" - schema: - type: boolean - default: true - - variable: allowPrivilegeEscalation - label: "Allow Privilege Escalation" - schema: - type: boolean - default: false - - - variable: podSecurityContext - group: "Security and Permissions" - label: "Pod Security Context" - schema: - type: dict - attrs: - - variable: runAsNonRoot - label: "runAsNonRoot" - schema: - type: boolean - default: true - - variable: runAsUser - label: "runAsUser" - description: "The UserID of the user running the application" - schema: - type: int - default: 568 - - variable: runAsGroup - label: "runAsGroup" - description: The groupID this App of the user running the application" - schema: - type: int - default: 568 - - variable: fsGroup - label: "fsGroup" - description: "The group that should own ALL storage." - schema: - type: int - default: 568 - - variable: supplementalGroups - label: "supplemental Groups" - schema: - type: list - default: [] - items: - - variable: supplementalGroupsEntry - label: "supplemental Group" - schema: - type: int - - variable: fsGroupChangePolicy - label: "When should we take ownership?" - schema: - type: string - default: "OnRootMismatch" - enum: - - value: "OnRootMismatch" - description: "OnRootMismatch" - - value: "Always" - description: "Always" - - - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/traefik/7.0.11/templates/_args.tpl b/stable/traefik/7.0.11/templates/_args.tpl deleted file mode 100644 index 41e7e44b8fd..00000000000 --- a/stable/traefik/7.0.11/templates/_args.tpl +++ /dev/null @@ -1,141 +0,0 @@ -{{/* Define the args */}} -{{- define "traefik.args" -}} -args: - {{/* merge all ports */}} - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{/* start of actual arguments */}} - {{- with .Values.globalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} - {{- range $name, $config := $ports }} - {{- if $config }} - {{- if or ( eq $config.protocol "HTTP" ) ( eq $config.protocol "HTTPS" ) ( eq $config.protocol "TCP" ) }} - {{- $_ := set $config "protocol" "TCP" }} - {{- end }} - - "--entryPoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}" - {{- end }} - {{- end }} - - "--api.dashboard=true" - - "--ping=true" - {{- if .Values.metrics }} - {{- if .Values.metrics.datadog }} - - "--metrics.datadog=true" - - "--metrics.datadog.address={{ .Values.metrics.datadog.address }}" - {{- end }} - {{- if .Values.metrics.influxdb }} - - "--metrics.influxdb=true" - - "--metrics.influxdb.address={{ .Values.metrics.influxdb.address }}" - - "--metrics.influxdb.protocol={{ .Values.metrics.influxdb.protocol }}" - {{- end }} - {{- if .Values.metrics.prometheus }} - - "--metrics.prometheus=true" - - "--metrics.prometheus.entrypoint={{ .Values.metrics.prometheus.entryPoint }}" - {{- end }} - {{- if .Values.metrics.statsd }} - - "--metrics.statsd=true" - - "--metrics.statsd.address={{ .Values.metrics.statsd.address }}" - {{- end }} - {{- end }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress" - {{- if and .Values.providers.kubernetesIngress.publishedService.enabled }} - - "--providers.kubernetesingress.ingressendpoint.publishedservice={{ template "providers.kubernetesIngress.publishedServicePath" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.labelSelector }} - - "--providers.kubernetesingress.labelSelector={{ .Values.providers.kubernetesIngress.labelSelector }}" - {{- end }} - {{- end }} - {{- if and .Values.rbac.enabled .Values.rbac.namespaced }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd.namespaces={{ template "providers.kubernetesCRD.namespaces" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}" - {{- end }} - {{- end }} - {{- range $entrypoint, $config := $ports }} - {{- if $config.redirectTo }} - {{- $toPort := index $ports $config.redirectTo }} - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $toPort.port }}" - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https" - {{- end }} - {{- if or ( $config.tls ) ( eq $config.protocol "HTTPS" ) }} - {{- if or ( $config.tls.enabled ) ( eq $config.protocol "HTTPS" ) }} - - "--entrypoints.{{ $entrypoint }}.http.tls=true" - {{- if $config.tls.options }} - - "--entrypoints.{{ $entrypoint }}.http.tls.options={{ $config.tls.options }}" - {{- end }} - {{- if $config.tls.certResolver }} - - "--entrypoints.{{ $entrypoint }}.http.tls.certResolver={{ $config.tls.certResolver }}" - {{- end }} - {{- if $config.tls.domains }} - {{- range $index, $domain := $config.tls.domains }} - {{- if $domain.main }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].main={{ $domain.main }}" - {{- end }} - {{- if $domain.sans }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].sans={{ join "," $domain.sans }}" - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- with .Values.logs }} - {{- if .general.format }} - - "--log.format={{ .general.format }}" - {{- end }} - {{- if ne .general.level "ERROR" }} - - "--log.level={{ .general.level | upper }}" - {{- end }} - {{- if .access.enabled }} - - "--accesslog=true" - {{- if .access.format }} - - "--accesslog.format={{ .access.format }}" - {{- end }} - {{- if .access.bufferingsize }} - - "--accesslog.bufferingsize={{ .access.bufferingsize }}" - {{- end }} - {{- if .access.filters }} - {{- if .access.filters.statuscodes }} - - "--accesslog.filters.statuscodes={{ .access.filters.statuscodes }}" - {{- end }} - {{- if .access.filters.retryattempts }} - - "--accesslog.filters.retryattempts" - {{- end }} - {{- if .access.filters.minduration }} - - "--accesslog.filters.minduration={{ .access.filters.minduration }}" - {{- end }} - {{- end }} - - "--accesslog.fields.defaultmode={{ .access.fields.general.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.general.names }} - - "--accesslog.fields.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - - "--accesslog.fields.headers.defaultmode={{ .access.fields.headers.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.headers.names }} - - "--accesslog.fields.headers.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - {{- end }} - {{- end }} - {{- if .Values.pilot.enabled }} - - "--pilot.token={{ .Values.pilot.token }}" - {{- end }} - {{- if hasKey .Values.pilot "dashboard" }} - - "--pilot.dashboard={{ .Values.pilot.dashboard }}" - {{- end }} - {{- with .Values.additionalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} -{{- end -}} diff --git a/stable/traefik/7.0.11/templates/_helpers.tpl b/stable/traefik/7.0.11/templates/_helpers.tpl deleted file mode 100644 index 8c6c4ac96bc..00000000000 --- a/stable/traefik/7.0.11/templates/_helpers.tpl +++ /dev/null @@ -1,22 +0,0 @@ -{{/* -Construct the path for the providers.kubernetesingress.ingressendpoint.publishedservice. -By convention this will simply use the / to match the name of the -service generated. -Users can provide an override for an explicit service they want bound via `.Values.providers.kubernetesIngress.publishedService.pathOverride` -*/}} -{{- define "providers.kubernetesIngress.publishedServicePath" -}} -{{- $fullName := include "common.names.fullname" . -}} -{{- $defServiceName := printf "%s/%s-tcp" .Release.Namespace $fullName -}} -{{- $servicePath := default $defServiceName .Values.providers.kubernetesIngress.publishedService.pathOverride }} -{{- print $servicePath | trimSuffix "-" -}} -{{- end -}} - -{{/* -Construct a comma-separated list of whitelisted namespaces -*/}} -{{- define "providers.kubernetesIngress.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesIngress.namespaces) }} -{{- end -}} -{{- define "providers.kubernetesCRD.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesCRD.namespaces) }} -{{- end -}} diff --git a/stable/traefik/7.0.11/templates/_ingressclass.tpl b/stable/traefik/7.0.11/templates/_ingressclass.tpl deleted file mode 100644 index 27f8467fc9e..00000000000 --- a/stable/traefik/7.0.11/templates/_ingressclass.tpl +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Define the ingressClass */}} -{{- define "traefik.ingressClass" -}} -{{- if .Values.ingressClass.enabled }} - {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1/IngressClass" }} -apiVersion: networking.k8s.io/v1 - {{- else if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1/IngressClass" }} -apiVersion: networking.k8s.io/v1beta1 - {{- else if or (eq .Values.ingressClass.fallbackApiVersion "v1beta1") (eq .Values.ingressClass.fallbackApiVersion "v1") }} -apiVersion: {{ printf "networking.k8s.io/%s" .Values.ingressClass.fallbackApiVersion }} - {{- else }} - {{- fail "\n\n ERROR: You must have at least networking.k8s.io/v1beta1 to use ingressClass" }} - {{- end }} ---- -kind: IngressClass -metadata: - annotations: - ingressclass.kubernetes.io/is-default-class: {{ .Values.ingressClass.isDefaultClass | quote }} - labels: - {{- include "common.labels" . | nindent 4 }} - name: {{ .Release.Name }} -spec: - controller: traefik.io/ingress-controller -{{- end }} -{{- end }} diff --git a/stable/traefik/7.0.11/templates/_ingressroute.tpl b/stable/traefik/7.0.11/templates/_ingressroute.tpl deleted file mode 100644 index 83312040d92..00000000000 --- a/stable/traefik/7.0.11/templates/_ingressroute.tpl +++ /dev/null @@ -1,25 +0,0 @@ -{{/* Define the ingressRoute */}} -{{- define "traefik.ingressRoute" -}} -{{- if .Values.ingressRoute.dashboard.enabled -}} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: {{ include "common.names.fullname" . }}-dashboard - annotations: - {{- with .Values.ingressRoute.dashboard.annotations }} - {{- toYaml . | nindent 4 }} - {{- end }} - labels: - {{- include "common.labels" . | nindent 4 }} -spec: - entryPoints: - - main - routes: - - match: PathPrefix(`/dashboard`) || PathPrefix(`/api`) - kind: Rule - services: - - name: api@internal - kind: TraefikService -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.0.11/templates/_portalhook.tpl b/stable/traefik/7.0.11/templates/_portalhook.tpl deleted file mode 100644 index e3586c5d4e9..00000000000 --- a/stable/traefik/7.0.11/templates/_portalhook.tpl +++ /dev/null @@ -1,26 +0,0 @@ -{{/* Define the portalHook */}} -{{- define "traefik.portalhook" -}} -{{- if .Values.portalhook.enabled }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- - -apiVersion: v1 -kind: ConfigMap -metadata: - name: portalhook - namespace: {{ $namespace }} -data: - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{- range $name, $value := $ports }} - {{ $name }}: {{ $value.port | quote }} - {{- end }} -{{- end }} -{{- end -}} diff --git a/stable/traefik/7.0.11/templates/_tlsoptions.tpl b/stable/traefik/7.0.11/templates/_tlsoptions.tpl deleted file mode 100644 index 3ca31af0859..00000000000 --- a/stable/traefik/7.0.11/templates/_tlsoptions.tpl +++ /dev/null @@ -1,12 +0,0 @@ -{{/* Define the tlsOptions */}} -{{- define "traefik.tlsOptions" -}} -{{- range $name, $config := .Values.tlsOptions }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: TLSOption -metadata: - name: {{ $name }} -spec: - {{- toYaml $config | nindent 2 }} -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.0.11/templates/common.yaml b/stable/traefik/7.0.11/templates/common.yaml deleted file mode 100644 index a3ba841bdd7..00000000000 --- a/stable/traefik/7.0.11/templates/common.yaml +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{- if .Values.metrics }} -{{- if .Values.metrics.prometheus }} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "true" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/path" "/metrics" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "9100" -}} -{{- end }} -{{- end }} - -{{- $newArgs := (include "traefik.args" . | fromYaml) }} -{{- $_ := set .Values "newArgs" $newArgs -}} -{{- $mergedargs := concat .Values.args .Values.newArgs.args }} -{{- $_ := set .Values "args" $mergedargs -}} - -{{- include "traefik.portalhook" . }} -{{- include "traefik.tlsOptions" . }} -{{- include "traefik.ingressRoute" . }} -{{- include "traefik.ingressClass" . }} - - -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/stable/traefik/7.0.11/templates/middlewares/basic-middleware.yaml b/stable/traefik/7.0.11/templates/middlewares/basic-middleware.yaml deleted file mode 100644 index 145f5c9a594..00000000000 --- a/stable/traefik/7.0.11/templates/middlewares/basic-middleware.yaml +++ /dev/null @@ -1,63 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: compress - namespace: {{ $namespace }} -spec: - compress: {} ---- -# Here, an average of 300 requests per second is allowed. -# In addition, a burst of 200 requests is allowed. -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-ratelimit - namespace: {{ $namespace }} -spec: - rateLimit: - average: 300 - burst: 200 ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-secure-headers - namespace: {{ $namespace }} -spec: - headers: - accessControlAllowMethods: - - GET - - OPTIONS - - HEAD - - PUT - accessControlMaxAge: 100 - sslRedirect: true - # stsSeconds: 63072000 - # stsIncludeSubdomains: false - # stsPreload: false - # forceSTSHeader: true - contentTypeNosniff: true - browserXssFilter: true - sslForceHost: true - referrerPolicy: same-origin - customResponseHeaders: - X-Robots-Tag: 'none' - server: '' ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: chain-basic - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: basic-ratelimit - - name: basic-secure-headers - - name: compress diff --git a/stable/traefik/7.0.11/templates/middlewares/basicauth.yaml b/stable/traefik/7.0.11/templates/middlewares/basicauth.yaml deleted file mode 100644 index ccb541742f0..00000000000 --- a/stable/traefik/7.0.11/templates/middlewares/basicauth.yaml +++ /dev/null @@ -1,34 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.basicAuth }} ---- -{{- $users := list }} -{{ range $index, $userdata := $middlewareData.users }} - {{ $users = append $users ( htpasswd $userdata.username $userdata.password ) }} -{{ end }} - -apiVersion: v1 -kind: Secret -metadata: - name: {{printf "%v-%v" $middlewareData.name "secret" }} - namespace: {{ $namespace }} -type: Opaque -stringData: - users: | - {{- range $index, $user := $users }} - {{ printf "%s" $user }} - {{- end }} ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - basicAuth: - secret: {{printf "%v-%v" $middlewareData.name "secret" }} -{{ end }} diff --git a/stable/traefik/7.0.11/templates/middlewares/chain.yaml b/stable/traefik/7.0.11/templates/middlewares/chain.yaml deleted file mode 100644 index e22eb312207..00000000000 --- a/stable/traefik/7.0.11/templates/middlewares/chain.yaml +++ /dev/null @@ -1,21 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.chain }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - chain: - middlewares: - {{ range $index, $chainData := . }} - - name: {{ printf "%v-%v@%v" $namespace $chainData.name "kubernetescrd" }} - {{ end }} -{{ end }} diff --git a/stable/traefik/7.0.11/templates/middlewares/forwardauth.yaml b/stable/traefik/7.0.11/templates/middlewares/forwardauth.yaml deleted file mode 100644 index 53f4ef5cc18..00000000000 --- a/stable/traefik/7.0.11/templates/middlewares/forwardauth.yaml +++ /dev/null @@ -1,28 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.forwardAuth }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - forwardAuth: - address: {{ $middlewareData.address }} - {{- if $middlewareData.authResponseHeaders }} - authResponseHeaders: {{ $middlewareData.authResponseHeaders }} - {{- end }} - {{- if $middlewareData.authRequestHeaders }} - authRequestHeaders: {{ $middlewareData.authRequestHeaders }} - {{- end }} - {{- if $middlewareData.authResponseHeadersRegex }} - authResponseHeadersRegex: {{ $middlewareData.authResponseHeadersRegex }} - {{- end }} - {{- if $middlewareData.trustForwardHeader }} - trustForwardHeader: true - {{- end }} -{{ end }} diff --git a/stable/traefik/7.0.11/templates/middlewares/ratelimit.yaml b/stable/traefik/7.0.11/templates/middlewares/ratelimit.yaml deleted file mode 100644 index 144b9d8bf38..00000000000 --- a/stable/traefik/7.0.11/templates/middlewares/ratelimit.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.rateLimit }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - rateLimit: - average: {{ $middlewareData.average }} - burst: {{ $middlewareData.burst }} -{{ end }} diff --git a/stable/traefik/7.0.11/templates/middlewares/redirectScheme.yaml b/stable/traefik/7.0.11/templates/middlewares/redirectScheme.yaml deleted file mode 100644 index f2413f84e19..00000000000 --- a/stable/traefik/7.0.11/templates/middlewares/redirectScheme.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectScheme }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectScheme: - scheme: {{ $middlewareData.scheme }} - permanent: {{ $middlewareData.permanent }} -{{ end }} diff --git a/stable/traefik/7.0.11/test_values.yaml b/stable/traefik/7.0.11/test_values.yaml deleted file mode 100644 index e349ea62298..00000000000 --- a/stable/traefik/7.0.11/test_values.yaml +++ /dev/null @@ -1,320 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5 - pullPolicy: IfNotPresent - -# -- Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x -ingressClass: - # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 - enabled: false - isDefaultClass: false - # Use to force a networking.k8s.io API Version for certain CI/CD applications. E.g. "v1beta1" - fallbackApiVersion: "" - -# -- Activate Pilot integration -pilot: - enabled: false - token: "" - # Toggle Pilot Dashboard - # dashboard: false - -# -- Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# -- Configure providers -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -# -- Logs -# https://docs.traefik.io/observability/logs/ -logs: - # Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). - general: - # By default, the logs use a text format (common), but you can - # also ask for the json format in the format option - # format: json - # By default, the level is set to ERROR. Alternative logging levels are DEBUG, PANIC, FATAL, ERROR, WARN, and INFO. - level: ERROR - access: - # To enable access logs - enabled: false - # By default, logs are written using the Common Log Format (CLF). - # To write logs in JSON, use json in the format option. - # If the given format is unsupported, the default (CLF) is used instead. - # format: json - # To write the logs in an asynchronous fashion, specify a bufferingSize option. - # This option represents the number of log lines Traefik will keep in memory before writing - # them to the selected output. In some cases, this option can greatly help performances. - # bufferingSize: 100 - # Filtering https://docs.traefik.io/observability/access-logs/#filtering - filters: {} - # statuscodes: "200,300-302" - # retryattempts: true - # minduration: 10ms - # Fields - # https://docs.traefik.io/observability/access-logs/#limiting-the-fieldsincluding-headers - fields: - general: - defaultmode: keep - names: {} - # Examples: - # ClientUsername: drop - headers: - defaultmode: drop - names: {} - # Examples: - # User-Agent: redact - # Authorization: drop - # Content-Type: keep - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -## -# -- Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - - -# -- TLS Options to be created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - -# -- Options for the main traefik service, where the entrypoints traffic comes from -# from. -service: - main: - enabled: true - type: LoadBalancer - ports: - main: - enabled: true - port: 9000 - protocol: HTTP - tcp: - enabled: true - type: LoadBalancer - ports: - web: - enabled: true - port: 9080 - protocol: HTTP - redirectTo: websecure - websecure: - enabled: true - port: 9443 - protocol: HTTPS -# tcpexample: -# enabled: true -# port: 9443 -# protocol: TCP -# tls: -# enabled: false -# # this is the name of a TLSOption definition -# options: "" -# certResolver: "" -# domains: [] -# # - main: example.com -# # sans: -# # - foo.example.com -# # - bar.example.com - metrics: - enabled: true - type: LoadBalancer - ports: - metrics: - enabled: true - port: 9100 - protocol: HTTP - udp: - enabled: false - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# -- Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# -- The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# -- Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - readOnlyRootFilesystem: true - runAsGroup: 568 - runAsNonRoot: true - runAsUser: 568 - -podSecurityContext: - fsGroup: 568 - -# -- SCALE Middleware Handlers -middlewares: - basicAuth: [] - # - name: basicauthexample - # users: - # - username: testuser - # password: testpassword - forwardAuth: [] - # - name: forwardAuthexample - # address: https://auth.example.com/ - # authResponseHeaders: - # - X-Secret - # - X-Auth-User - # authRequestHeaders: - # - "Accept" - # - "X-CustomHeader" - # authResponseHeadersRegex: "^X-" - # trustForwardHeader: true - chain: [] - # name: chainname - # middlewares: - # - name: compress - redirectScheme: [] - # scheme: https - # permanent: true - rateLimit: [] - # average: 300 - # burst: 200 - -portalhook: - enabled: true diff --git a/stable/traefik/7.0.11/values.yaml b/stable/traefik/7.0.11/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/stable/traefik/7.1.0/CHANGELOG.md b/stable/traefik/7.1.0/CHANGELOG.md deleted file mode 100644 index d21e9f906f7..00000000000 --- a/stable/traefik/7.1.0/CHANGELOG.md +++ /dev/null @@ -1,9 +0,0 @@ - - -### [traefik-7.1.0](https://github.com/truecharts/apps/compare/traefik-7.0.11...traefik-7.1.0) (2021-09-08) - -#### Feat - -* Add IPWhitelist, redirectRegex and (internal) nextcloud middlewares ([#929](https://github.com/truecharts/apps/issues/929)) -* Pre-commit and tag-appversion syncing ([#926](https://github.com/truecharts/apps/issues/926)) - diff --git a/stable/traefik/7.1.0/CONFIG.md b/stable/traefik/7.1.0/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/traefik/7.1.0/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/traefik/7.1.0/Chart.lock b/stable/traefik/7.1.0/Chart.lock deleted file mode 100644 index 47644d75970..00000000000 --- a/stable/traefik/7.1.0/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -digest: sha256:7c137b201e33de386c8012e58dd401f81aa3b8e8cade47c7de48db3e58342823 -generated: "2021-09-08T13:39:21.639676676Z" diff --git a/stable/traefik/7.1.0/Chart.yaml b/stable/traefik/7.1.0/Chart.yaml deleted file mode 100644 index 9c6e6a569b6..00000000000 --- a/stable/traefik/7.1.0/Chart.yaml +++ /dev/null @@ -1,25 +0,0 @@ -apiVersion: v2 -appVersion: auto -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -deprecated: false -description: Test App for Traefik -home: https://github.com/truecharts/apps/tree/master/charts/stable/traefik -icon: https://raw.githubusercontent.com/traefik/traefik/v2.3/docs/content/assets/img/traefik.logo.png -keywords: -- traefik -- ingress -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: traefik -sources: -- https://github.com/traefik/traefik -- https://github.com/traefik/traefik-helm-chart -- https://traefik.io/ -type: application -version: 7.1.0 diff --git a/stable/traefik/7.1.0/README.md b/stable/traefik/7.1.0/README.md deleted file mode 100644 index 694d4389f5d..00000000000 --- a/stable/traefik/7.1.0/README.md +++ /dev/null @@ -1,39 +0,0 @@ -# Introduction - -Test App for Traefik - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://truecharts.org/ | common | 6.13.8 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.0/app-readme.md b/stable/traefik/7.1.0/app-readme.md deleted file mode 100644 index 823c75135e0..00000000000 --- a/stable/traefik/7.1.0/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -Test App for Traefik - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/traefik/7.1.0/charts/common-6.13.8.tgz b/stable/traefik/7.1.0/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/traefik/7.1.0/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/traefik/7.1.0/crds/ingressroute.yaml b/stable/traefik/7.1.0/crds/ingressroute.yaml deleted file mode 100644 index 3391ba532a4..00000000000 --- a/stable/traefik/7.1.0/crds/ingressroute.yaml +++ /dev/null @@ -1,198 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutes.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRoute - listKind: IngressRouteList - plural: ingressroutes - singular: ingressroute - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRoute is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteSpec is a specification for a IngressRouteSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: Route contains the set of routes. - properties: - kind: - enum: - - Rule - type: string - match: - type: string - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - priority: - type: integer - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The - differentiation between the two is specified in the - Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration - based on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name - references a TraefikService object (and to be precise, - one that embeds a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - required: - - kind - - match - type: object - type: array - tls: - description: "TLS contains the TLS certificates configuration of the - routes. To enable Let's Encrypt, use an empty TLS struct, e.g. in - YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/ingressroutetcp.yaml b/stable/traefik/7.1.0/crds/ingressroutetcp.yaml deleted file mode 100644 index 67e099b47da..00000000000 --- a/stable/traefik/7.1.0/crds/ingressroutetcp.yaml +++ /dev/null @@ -1,160 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutetcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteTCP - listKind: IngressRouteTCPList - plural: ingressroutetcps - singular: ingressroutetcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteTCP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteTCPSpec is a specification for a IngressRouteTCPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteTCP contains the set of routes. - properties: - match: - type: string - middlewares: - description: Middlewares contains references to MiddlewareTCP - resources. - items: - description: ObjectReference is a generic reference to a Traefik - resource. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - services: - items: - description: ServiceTCP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - proxyProtocol: - description: ProxyProtocol holds the ProxyProtocol configuration. - properties: - version: - type: integer - type: object - terminationDelay: - type: integer - weight: - type: integer - required: - - name - - port - type: object - type: array - required: - - match - type: object - type: array - tls: - description: "TLSTCP contains the TLS certificates configuration of - the routes. To enable Let's Encrypt, use an empty TLS struct, e.g. - in YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - passthrough: - type: boolean - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/ingressrouteudp.yaml b/stable/traefik/7.1.0/crds/ingressrouteudp.yaml deleted file mode 100644 index 910acd6c270..00000000000 --- a/stable/traefik/7.1.0/crds/ingressrouteudp.yaml +++ /dev/null @@ -1,84 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressrouteudps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteUDP - listKind: IngressRouteUDPList - plural: ingressrouteudps - singular: ingressrouteudp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteUDP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteUDPSpec is a specification for a IngressRouteUDPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteUDP contains the set of routes. - properties: - services: - items: - description: ServiceUDP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - weight: - type: integer - required: - - name - - port - type: object - type: array - type: object - type: array - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/middlewares.yaml b/stable/traefik/7.1.0/crds/middlewares.yaml deleted file mode 100644 index 1770587a327..00000000000 --- a/stable/traefik/7.1.0/crds/middlewares.yaml +++ /dev/null @@ -1,563 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewares.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: Middleware - listKind: MiddlewareList - plural: middlewares - singular: middleware - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: Middleware is a specification for a Middleware resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareSpec holds the Middleware configuration. - properties: - addPrefix: - description: AddPrefix holds the AddPrefix configuration. - properties: - prefix: - type: string - type: object - basicAuth: - description: BasicAuth holds the HTTP basic authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - buffering: - description: Buffering holds the request/response buffering configuration. - properties: - maxRequestBodyBytes: - format: int64 - type: integer - maxResponseBodyBytes: - format: int64 - type: integer - memRequestBodyBytes: - format: int64 - type: integer - memResponseBodyBytes: - format: int64 - type: integer - retryExpression: - type: string - type: object - chain: - description: Chain holds a chain of middlewares. - properties: - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - type: object - circuitBreaker: - description: CircuitBreaker holds the circuit breaker configuration. - properties: - expression: - type: string - type: object - compress: - description: Compress holds the compress configuration. - properties: - excludedContentTypes: - items: - type: string - type: array - type: object - contentType: - description: ContentType middleware - or rather its unique `autoDetect` - option - specifies whether to let the `Content-Type` header, if - it has not been set by the backend, be automatically set to a value - derived from the contents of the response. As a proxy, the default - behavior should be to leave the header alone, regardless of what - the backend did with it. However, the historic default was to always - auto-detect and set the header if it was nil, and it is going to - be kept that way in order to support users currently relying on - it. This middleware exists to enable the correct behavior until - at least the default one can be changed in a future version. - properties: - autoDetect: - type: boolean - type: object - digestAuth: - description: DigestAuth holds the Digest HTTP authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - errors: - description: ErrorPage holds the custom error page configuration. - properties: - query: - type: string - service: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the - forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - status: - items: - type: string - type: array - type: object - forwardAuth: - description: ForwardAuth holds the http forward authentication configuration. - properties: - address: - type: string - authRequestHeaders: - items: - type: string - type: array - authResponseHeaders: - items: - type: string - type: array - authResponseHeadersRegex: - type: string - tls: - description: ClientTLS holds TLS specific configurations as client. - properties: - caOptional: - type: boolean - caSecret: - type: string - certSecret: - type: string - insecureSkipVerify: - type: boolean - type: object - trustForwardHeader: - type: boolean - type: object - headers: - description: Headers holds the custom header configuration. - properties: - accessControlAllowCredentials: - description: AccessControlAllowCredentials is only valid if true. - false is ignored. - type: boolean - accessControlAllowHeaders: - description: AccessControlAllowHeaders must be used in response - to a preflight request with Access-Control-Request-Headers set. - items: - type: string - type: array - accessControlAllowMethods: - description: AccessControlAllowMethods must be used in response - to a preflight request with Access-Control-Request-Method set. - items: - type: string - type: array - accessControlAllowOriginList: - description: AccessControlAllowOriginList is a list of allowable - origins. Can also be a wildcard origin "*". - items: - type: string - type: array - accessControlAllowOriginListRegex: - description: AccessControlAllowOriginListRegex is a list of allowable - origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/). - items: - type: string - type: array - accessControlExposeHeaders: - description: AccessControlExposeHeaders sets valid headers for - the response. - items: - type: string - type: array - accessControlMaxAge: - description: AccessControlMaxAge sets the time that a preflight - request may be cached. - format: int64 - type: integer - addVaryHeader: - description: AddVaryHeader controls if the Vary header is automatically - added/updated when the AccessControlAllowOriginList is set. - type: boolean - allowedHosts: - items: - type: string - type: array - browserXssFilter: - type: boolean - contentSecurityPolicy: - type: string - contentTypeNosniff: - type: boolean - customBrowserXSSValue: - type: string - customFrameOptionsValue: - type: string - customRequestHeaders: - additionalProperties: - type: string - type: object - customResponseHeaders: - additionalProperties: - type: string - type: object - featurePolicy: - type: string - forceSTSHeader: - type: boolean - frameDeny: - type: boolean - hostsProxyHeaders: - items: - type: string - type: array - isDevelopment: - type: boolean - publicKey: - type: string - referrerPolicy: - type: string - sslForceHost: - description: 'Deprecated: use RedirectRegex instead.' - type: boolean - sslHost: - description: 'Deprecated: use RedirectRegex instead.' - type: string - sslProxyHeaders: - additionalProperties: - type: string - type: object - sslRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - sslTemporaryRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - stsIncludeSubdomains: - type: boolean - stsPreload: - type: boolean - stsSeconds: - format: int64 - type: integer - type: object - inFlightReq: - description: InFlightReq limits the number of requests being processed - and served concurrently. - properties: - amount: - format: int64 - type: integer - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - ipWhiteList: - description: IPWhiteList holds the ip white list configuration. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - sourceRange: - items: - type: string - type: array - type: object - passTLSClientCert: - description: PassTLSClientCert holds the TLS client cert headers configuration. - properties: - info: - description: TLSClientCertificateInfo holds the client TLS certificate - info configuration. - properties: - issuer: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - notAfter: - type: boolean - notBefore: - type: boolean - sans: - type: boolean - serialNumber: - type: boolean - subject: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - type: object - pem: - type: boolean - type: object - plugin: - additionalProperties: - x-kubernetes-preserve-unknown-fields: true - type: object - rateLimit: - description: RateLimit holds the rate limiting configuration for a - given router. - properties: - average: - format: int64 - type: integer - burst: - format: int64 - type: integer - period: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - redirectRegex: - description: RedirectRegex holds the redirection configuration. - properties: - permanent: - type: boolean - regex: - type: string - replacement: - type: string - type: object - redirectScheme: - description: RedirectScheme holds the scheme redirection configuration. - properties: - permanent: - type: boolean - port: - type: string - scheme: - type: string - type: object - replacePath: - description: ReplacePath holds the ReplacePath configuration. - properties: - path: - type: string - type: object - replacePathRegex: - description: ReplacePathRegex holds the ReplacePathRegex configuration. - properties: - regex: - type: string - replacement: - type: string - type: object - retry: - description: Retry holds the retry configuration. - properties: - attempts: - type: integer - initialInterval: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - type: object - stripPrefix: - description: StripPrefix holds the StripPrefix configuration. - properties: - forceSlash: - type: boolean - prefixes: - items: - type: string - type: array - type: object - stripPrefixRegex: - description: StripPrefixRegex holds the StripPrefixRegex configuration. - properties: - regex: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/middlewarestcp.yaml b/stable/traefik/7.1.0/crds/middlewarestcp.yaml deleted file mode 100644 index f0d1d5640bd..00000000000 --- a/stable/traefik/7.1.0/crds/middlewarestcp.yaml +++ /dev/null @@ -1,59 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewaretcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: MiddlewareTCP - listKind: MiddlewareTCPList - plural: middlewaretcps - singular: middlewaretcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: MiddlewareTCP is a specification for a MiddlewareTCP resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareTCPSpec holds the MiddlewareTCP configuration. - properties: - ipWhiteList: - description: TCPIPWhiteList holds the TCP ip white list configuration. - properties: - sourceRange: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/serverstransports.yaml b/stable/traefik/7.1.0/crds/serverstransports.yaml deleted file mode 100644 index 78241697d1a..00000000000 --- a/stable/traefik/7.1.0/crds/serverstransports.yaml +++ /dev/null @@ -1,101 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: serverstransports.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: ServersTransport - listKind: ServersTransportList - plural: serverstransports - singular: serverstransport - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: ServersTransport is a specification for a ServersTransport resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServersTransportSpec options to configure communication between - Traefik and the servers. - properties: - certificatesSecrets: - description: Certificates for mTLS. - items: - type: string - type: array - disableHTTP2: - description: Disable HTTP/2 for connections with backend servers. - type: boolean - forwardingTimeouts: - description: Timeouts for requests forwarded to the backend servers. - properties: - dialTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait until a connection to - a backend server can be established. If zero, no timeout exists. - x-kubernetes-int-or-string: true - idleConnTimeout: - anyOf: - - type: integer - - type: string - description: The maximum period for which an idle HTTP keep-alive - connection will remain open before closing itself. - x-kubernetes-int-or-string: true - responseHeaderTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait for a server's response - headers after fully writing the request (including its body, - if any). If zero, no timeout exists. - x-kubernetes-int-or-string: true - type: object - insecureSkipVerify: - description: Disable SSL certificate verification. - type: boolean - maxIdleConnsPerHost: - description: If non-zero, controls the maximum idle (keep-alive) to - keep per-host. If zero, DefaultMaxIdleConnsPerHost is used. - type: integer - rootCAsSecrets: - description: Add cert file for self-signed certificate. - items: - type: string - type: array - serverName: - description: ServerName used to contact the server. - type: string - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/tlsoptions.yaml b/stable/traefik/7.1.0/crds/tlsoptions.yaml deleted file mode 100644 index c901ac2df5e..00000000000 --- a/stable/traefik/7.1.0/crds/tlsoptions.yaml +++ /dev/null @@ -1,87 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsoptions.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSOption - listKind: TLSOptionList - plural: tlsoptions - singular: tlsoption - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSOption is a specification for a TLSOption resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSOptionSpec configures TLS for an entry point. - properties: - cipherSuites: - items: - type: string - type: array - clientAuth: - description: ClientAuth defines the parameters of the client authentication - part of the TLS connection, if any. - properties: - clientAuthType: - description: ClientAuthType defines the client authentication - type to apply. - enum: - - NoClientCert - - RequestClientCert - - VerifyClientCertIfGiven - - RequireAndVerifyClientCert - type: string - secretNames: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - items: - type: string - type: array - type: object - curvePreferences: - items: - type: string - type: array - maxVersion: - type: string - minVersion: - type: string - preferServerCipherSuites: - type: boolean - sniStrict: - type: boolean - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/tlsstores.yaml b/stable/traefik/7.1.0/crds/tlsstores.yaml deleted file mode 100644 index 7bb6193b026..00000000000 --- a/stable/traefik/7.1.0/crds/tlsstores.yaml +++ /dev/null @@ -1,64 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsstores.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSStore - listKind: TLSStoreList - plural: tlsstores - singular: tlsstore - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSStore is a specification for a TLSStore resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSStoreSpec configures a TLSStore resource. - properties: - defaultCertificate: - description: DefaultCertificate holds a secret name for the TLSOption - resource. - properties: - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - required: - - secretName - type: object - required: - - defaultCertificate - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/crds/traefikservices.yaml b/stable/traefik/7.1.0/crds/traefikservices.yaml deleted file mode 100644 index 1d98c25d68d..00000000000 --- a/stable/traefik/7.1.0/crds/traefikservices.yaml +++ /dev/null @@ -1,270 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: traefikservices.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TraefikService - listKind: TraefikServiceList - plural: traefikservices - singular: traefikservice - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TraefikService is the specification for a service (that an IngressRoute - refers to) that is usually not a terminal service (i.e. not a pod of servers), - as opposed to a Kubernetes Service. That is to say, it usually refers to - other (children) services, which themselves can be TraefikServices or Services. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServiceSpec defines whether a TraefikService is a load-balancer - of services or a mirroring service. - properties: - mirroring: - description: Mirroring defines a mirroring service, which is composed - of a main load-balancer, and a list of mirrors. - properties: - kind: - enum: - - Service - - TraefikService - type: string - maxBodySize: - format: int64 - type: integer - mirrors: - items: - description: MirrorService defines one of the mirrors of a Mirroring - service. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - percent: - type: integer - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService object - (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the forward - of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - weighted: - description: WeightedRoundRobin defines a load-balancer of services. - properties: - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.0/helm-values.md b/stable/traefik/7.1.0/helm-values.md deleted file mode 100644 index f807c3aabd8..00000000000 --- a/stable/traefik/7.1.0/helm-values.md +++ /dev/null @@ -1,50 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| additionalArguments[0] | string | `"--metrics.prometheus"` | | -| additionalArguments[1] | string | `"--ping"` | | -| additionalArguments[2] | string | `"--serverstransport.insecureskipverify=true"` | | -| additionalArguments[3] | string | `"--providers.kubernetesingress.allowexternalnameservices=true"` | | -| globalArguments[0] | string | `"--global.checknewversion"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"traefik"` | | -| image.tag | string | `"v2.5"` | | -| ingressClass | object | `{"enabled":false,"fallbackApiVersion":"","isDefaultClass":false}` | Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x | -| ingressRoute | object | `{"dashboard":{"annotations":{},"enabled":true,"labels":{}}}` | Create an IngressRoute for the dashboard | -| logs | object | `{"access":{"enabled":false,"fields":{"general":{"defaultmode":"keep","names":{}},"headers":{"defaultmode":"drop","names":{}}},"filters":{}},"general":{"level":"ERROR"}}` | Logs https://docs.traefik.io/observability/logs/ | -| metrics.prometheus.entryPoint | string | `"metrics"` | | -| middlewares | object | `{"basicAuth":[],"chain":[],"forwardAuth":[],"ipWhiteList":[],"rateLimit":[],"redirectRegex":[],"redirectScheme":[]}` | SCALE Middleware Handlers | -| pilot | object | `{"enabled":false,"token":""}` | Activate Pilot integration | -| podSecurityContext.fsGroup | int | `568` | | -| portalhook.enabled | bool | `true` | | -| probes.liveness | object | See below | Liveness probe configuration | -| probes.liveness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.liveness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.readiness | object | See below | Redainess probe configuration | -| probes.readiness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.readiness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.startup | object | See below | Startup probe configuration | -| probes.startup.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.startup.type | string | "TCP" | sets the probe type when not using a custom probe | -| providers.kubernetesCRD.enabled | bool | `true` | | -| providers.kubernetesCRD.namespaces | list | `[]` | | -| providers.kubernetesIngress.enabled | bool | `true` | | -| providers.kubernetesIngress.namespaces | list | `[]` | | -| providers.kubernetesIngress.publishedService.enabled | bool | `true` | | -| rbac | object | `{"enabled":true,"rules":[{"apiGroups":[""],"resources":["services","endpoints","secrets"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses","ingressclasses"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses/status"],"verbs":["update"]},{"apiGroups":["traefik.containo.us"],"resources":["ingressroutes","ingressroutetcps","ingressrouteudps","middlewares","middlewaretcps","tlsoptions","tlsstores","traefikservices","serverstransports"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created | -| securityContext | object | `{"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsGroup":568,"runAsNonRoot":true,"runAsUser":568}` | Set the container security context To run the container with ports below 1024 this will need to be adjust to run as root | -| service | object | `{"main":{"enabled":true,"ports":{"main":{"enabled":true,"port":9000,"protocol":"HTTP"}},"type":"LoadBalancer"},"metrics":{"enabled":true,"ports":{"metrics":{"enabled":true,"port":9100,"protocol":"HTTP"}},"type":"LoadBalancer"},"tcp":{"enabled":true,"ports":{"web":{"enabled":true,"port":9080,"protocol":"HTTP","redirectTo":"websecure"},"websecure":{"enabled":true,"port":9443,"protocol":"HTTPS"}},"type":"LoadBalancer"},"udp":{"enabled":false}}` | Options for the main traefik service, where the entrypoints traffic comes from from. | -| serviceAccount | object | `{"enabled":true,"name":""}` | The service account the pods will use to interact with the Kubernetes API | -| tlsOptions | object | `{"default":{"cipherSuites":["TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305","TLS_AES_128_GCM_SHA256","TLS_AES_256_GCM_SHA384","TLS_CHACHA20_POLY1305_SHA256"],"curvePreferences":["CurveP521","CurveP384"],"minVersion":"VersionTLS12","sniStrict":false}}` | TLS Options to be created as TLSOption CRDs https://doc.traefik.io/traefik/https/tls/#tls-options Example: | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.0/ix_values.yaml b/stable/traefik/7.1.0/ix_values.yaml deleted file mode 100644 index 11e67e6ee6f..00000000000 --- a/stable/traefik/7.1.0/ix_values.yaml +++ /dev/null @@ -1,181 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5 - pullPolicy: IfNotPresent - -# Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# Configure providers -# -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -# -# Configure Traefik static configuration -# Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - -# TLS Options are created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - - - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.0/questions.yaml b/stable/traefik/7.1.0/questions.yaml deleted file mode 100644 index 047d70d5c75..00000000000 --- a/stable/traefik/7.1.0/questions.yaml +++ /dev/null @@ -1,1258 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Middlewares" - description: "Traefik Middlewares" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "http" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" - path: "/dashboard/" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "RollingUpdate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: pilot - label: "Traefik Pilot" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: token - label: "token" - schema: - type: string - default: "" - - variable: dashboard - label: "Pilot Dashboard" - schema: - type: boolean - default: false - - - variable: ingressClass - label: "ingressClass" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: isDefaultClass - label: "isDefaultClass" - schema: - type: boolean - default: false - - - variable: logs - label: "Logs" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: general - label: "General Logs" - schema: - type: dict - attrs: - - variable: level - label: "Log Level" - schema: - type: string - default: "ERROR" - enum: - - value: "INFO" - description: "Info" - - value: "WARN" - description: "Warnings" - - value: "ERROR" - description: "Errors" - - value: "FATAL" - description: "Fatal Errors" - - value: "PANIC" - description: "Panics" - - value: "DEBUG" - description: "Debug" - - variable: access - label: "Access Logs" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: enabledFilters - label: "Enable Filters" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: filters - label: "Filters" - schema: - type: dict - attrs: - - variable: statuscodes - label: "Status codes" - schema: - type: string - default: "200,300-302" - - variable: retryattempts - label: "retryattempts" - schema: - type: boolean - default: true - - variable: minduration - label: "minduration" - schema: - type: string - default: "10ms" - - variable: fields - label: "Fields" - schema: - type: dict - attrs: - - variable: general - label: "General" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "keep" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - variable: headers - label: "Headers" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "drop" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - - variable: middlewares - label: "" - group: "Middlewares" - schema: - type: dict - attrs: - - variable: basicAuth - label: "basicAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: users - label: "Users" - schema: - type: list - default: [] - items: - - variable: usersEntry - label: "" - schema: - type: dict - attrs: - - variable: username - label: "Username" - schema: - type: string - required: true - default: "" - - variable: password - label: "Password" - schema: - type: string - required: true - default: "" - - - - variable: forwardAuth - label: "forwardAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: address - label: "Address" - schema: - type: string - required: true - default: "" - - variable: trustForwardHeader - label: "trustForwardHeader" - schema: - type: boolean - default: false - - variable: authResponseHeadersRegex - label: "authResponseHeadersRegex" - schema: - type: string - default: "" - - variable: authResponseHeaders - label: "authResponseHeaders" - schema: - type: list - default: [] - items: - - variable: authResponseHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: authRequestHeaders - label: "authRequestHeaders" - schema: - type: list - default: [] - items: - - variable: authRequestHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: chain - label: "chain" - schema: - type: list - default: [] - items: - - variable: chainEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: middlewares - label: "Middlewares to Chain" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - - variable: redirectScheme - label: "redirectScheme" - schema: - type: list - default: [] - items: - - variable: redirectSchemeEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: scheme - label: "Scheme" - schema: - type: string - required: true - default: "https" - enum: - - value: "https" - description: "https" - - value: "http" - description: "http" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: rateLimit - label: "rateLimit" - schema: - type: list - default: [] - items: - - variable: rateLimitEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: average - label: "Average" - schema: - type: int - required: true - default: 300 - - variable: burst - label: "Burst" - schema: - type: int - required: true - default: 200 - - variable: redirectRegex - label: "redirectRegex" - schema: - type: list - default: [] - items: - - variable: redirectRegexEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: regex - label: "Regex" - schema: - type: string - required: true - default: "" - - variable: replacement - label: "Replacement" - schema: - type: string - required: true - default: "" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: ipWhiteList - label: "ipWhiteList" - schema: - type: list - default: [] - items: - - variable: ipWhiteListEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: sourceRange - label: "Source Range" - schema: - type: list - default: [] - items: - - variable: sourceRangeEntry - label: "" - schema: - type: string - required: true - default: "" - - variable: ipStrategy - label: "IP Strategy" - schema: - type: dict - attrs: - - variable: depth - label: "Depth" - schema: - type: int - required: true - - variable: excludedIPs - label: "Excluded IPs" - schema: - type: list - default: [] - items: - - variable: excludedIPsEntry - label: "" - schema: - type: string - required: true - default: "" - - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - - variable: service - group: "Networking and Services" - label: "Configure Service Entrypoint" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: main - label: "Main Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9000 - editable: false - hidden: true - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9000 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9000 - - variable: tcp - label: "Main Service" - description: "The tcp Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: web - label: "web Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9080 - editable: true - required: true - - variable: redirectTo - label: "Redirect to" - schema: - type: string - default: "websecure" - - variable: websecure - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTPS" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9443 - editable: true - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - - variable: udp - label: "UDP Service" - description: "The UDP service for entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "UDP" - enum: - - value: UDP - description: "UDP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: metrics - label: "metrics Service" - description: "The metrics Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: metrics - label: "metrics Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9100 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 9100 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9100 - - - variable: securityContext - group: "Security and Permissions" - label: "Security Context" - schema: - type: dict - attrs: - - variable: privileged - label: "Privileged mode" - schema: - type: boolean - default: false - - variable: readOnlyRootFilesystem - label: "ReadOnly Root Filesystem" - schema: - type: boolean - default: true - - variable: allowPrivilegeEscalation - label: "Allow Privilege Escalation" - schema: - type: boolean - default: false - - - variable: podSecurityContext - group: "Security and Permissions" - label: "Pod Security Context" - schema: - type: dict - attrs: - - variable: runAsNonRoot - label: "runAsNonRoot" - schema: - type: boolean - default: true - - variable: runAsUser - label: "runAsUser" - description: "The UserID of the user running the application" - schema: - type: int - default: 568 - - variable: runAsGroup - label: "runAsGroup" - description: The groupID this App of the user running the application" - schema: - type: int - default: 568 - - variable: fsGroup - label: "fsGroup" - description: "The group that should own ALL storage." - schema: - type: int - default: 568 - - variable: supplementalGroups - label: "supplemental Groups" - schema: - type: list - default: [] - items: - - variable: supplementalGroupsEntry - label: "supplemental Group" - schema: - type: int - - variable: fsGroupChangePolicy - label: "When should we take ownership?" - schema: - type: string - default: "OnRootMismatch" - enum: - - value: "OnRootMismatch" - description: "OnRootMismatch" - - value: "Always" - description: "Always" - - - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/traefik/7.1.0/templates/_args.tpl b/stable/traefik/7.1.0/templates/_args.tpl deleted file mode 100644 index 41e7e44b8fd..00000000000 --- a/stable/traefik/7.1.0/templates/_args.tpl +++ /dev/null @@ -1,141 +0,0 @@ -{{/* Define the args */}} -{{- define "traefik.args" -}} -args: - {{/* merge all ports */}} - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{/* start of actual arguments */}} - {{- with .Values.globalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} - {{- range $name, $config := $ports }} - {{- if $config }} - {{- if or ( eq $config.protocol "HTTP" ) ( eq $config.protocol "HTTPS" ) ( eq $config.protocol "TCP" ) }} - {{- $_ := set $config "protocol" "TCP" }} - {{- end }} - - "--entryPoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}" - {{- end }} - {{- end }} - - "--api.dashboard=true" - - "--ping=true" - {{- if .Values.metrics }} - {{- if .Values.metrics.datadog }} - - "--metrics.datadog=true" - - "--metrics.datadog.address={{ .Values.metrics.datadog.address }}" - {{- end }} - {{- if .Values.metrics.influxdb }} - - "--metrics.influxdb=true" - - "--metrics.influxdb.address={{ .Values.metrics.influxdb.address }}" - - "--metrics.influxdb.protocol={{ .Values.metrics.influxdb.protocol }}" - {{- end }} - {{- if .Values.metrics.prometheus }} - - "--metrics.prometheus=true" - - "--metrics.prometheus.entrypoint={{ .Values.metrics.prometheus.entryPoint }}" - {{- end }} - {{- if .Values.metrics.statsd }} - - "--metrics.statsd=true" - - "--metrics.statsd.address={{ .Values.metrics.statsd.address }}" - {{- end }} - {{- end }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress" - {{- if and .Values.providers.kubernetesIngress.publishedService.enabled }} - - "--providers.kubernetesingress.ingressendpoint.publishedservice={{ template "providers.kubernetesIngress.publishedServicePath" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.labelSelector }} - - "--providers.kubernetesingress.labelSelector={{ .Values.providers.kubernetesIngress.labelSelector }}" - {{- end }} - {{- end }} - {{- if and .Values.rbac.enabled .Values.rbac.namespaced }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd.namespaces={{ template "providers.kubernetesCRD.namespaces" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}" - {{- end }} - {{- end }} - {{- range $entrypoint, $config := $ports }} - {{- if $config.redirectTo }} - {{- $toPort := index $ports $config.redirectTo }} - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $toPort.port }}" - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https" - {{- end }} - {{- if or ( $config.tls ) ( eq $config.protocol "HTTPS" ) }} - {{- if or ( $config.tls.enabled ) ( eq $config.protocol "HTTPS" ) }} - - "--entrypoints.{{ $entrypoint }}.http.tls=true" - {{- if $config.tls.options }} - - "--entrypoints.{{ $entrypoint }}.http.tls.options={{ $config.tls.options }}" - {{- end }} - {{- if $config.tls.certResolver }} - - "--entrypoints.{{ $entrypoint }}.http.tls.certResolver={{ $config.tls.certResolver }}" - {{- end }} - {{- if $config.tls.domains }} - {{- range $index, $domain := $config.tls.domains }} - {{- if $domain.main }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].main={{ $domain.main }}" - {{- end }} - {{- if $domain.sans }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].sans={{ join "," $domain.sans }}" - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- with .Values.logs }} - {{- if .general.format }} - - "--log.format={{ .general.format }}" - {{- end }} - {{- if ne .general.level "ERROR" }} - - "--log.level={{ .general.level | upper }}" - {{- end }} - {{- if .access.enabled }} - - "--accesslog=true" - {{- if .access.format }} - - "--accesslog.format={{ .access.format }}" - {{- end }} - {{- if .access.bufferingsize }} - - "--accesslog.bufferingsize={{ .access.bufferingsize }}" - {{- end }} - {{- if .access.filters }} - {{- if .access.filters.statuscodes }} - - "--accesslog.filters.statuscodes={{ .access.filters.statuscodes }}" - {{- end }} - {{- if .access.filters.retryattempts }} - - "--accesslog.filters.retryattempts" - {{- end }} - {{- if .access.filters.minduration }} - - "--accesslog.filters.minduration={{ .access.filters.minduration }}" - {{- end }} - {{- end }} - - "--accesslog.fields.defaultmode={{ .access.fields.general.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.general.names }} - - "--accesslog.fields.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - - "--accesslog.fields.headers.defaultmode={{ .access.fields.headers.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.headers.names }} - - "--accesslog.fields.headers.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - {{- end }} - {{- end }} - {{- if .Values.pilot.enabled }} - - "--pilot.token={{ .Values.pilot.token }}" - {{- end }} - {{- if hasKey .Values.pilot "dashboard" }} - - "--pilot.dashboard={{ .Values.pilot.dashboard }}" - {{- end }} - {{- with .Values.additionalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.0/templates/_helpers.tpl b/stable/traefik/7.1.0/templates/_helpers.tpl deleted file mode 100644 index 8c6c4ac96bc..00000000000 --- a/stable/traefik/7.1.0/templates/_helpers.tpl +++ /dev/null @@ -1,22 +0,0 @@ -{{/* -Construct the path for the providers.kubernetesingress.ingressendpoint.publishedservice. -By convention this will simply use the / to match the name of the -service generated. -Users can provide an override for an explicit service they want bound via `.Values.providers.kubernetesIngress.publishedService.pathOverride` -*/}} -{{- define "providers.kubernetesIngress.publishedServicePath" -}} -{{- $fullName := include "common.names.fullname" . -}} -{{- $defServiceName := printf "%s/%s-tcp" .Release.Namespace $fullName -}} -{{- $servicePath := default $defServiceName .Values.providers.kubernetesIngress.publishedService.pathOverride }} -{{- print $servicePath | trimSuffix "-" -}} -{{- end -}} - -{{/* -Construct a comma-separated list of whitelisted namespaces -*/}} -{{- define "providers.kubernetesIngress.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesIngress.namespaces) }} -{{- end -}} -{{- define "providers.kubernetesCRD.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesCRD.namespaces) }} -{{- end -}} diff --git a/stable/traefik/7.1.0/templates/_ingressclass.tpl b/stable/traefik/7.1.0/templates/_ingressclass.tpl deleted file mode 100644 index 27f8467fc9e..00000000000 --- a/stable/traefik/7.1.0/templates/_ingressclass.tpl +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Define the ingressClass */}} -{{- define "traefik.ingressClass" -}} -{{- if .Values.ingressClass.enabled }} - {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1/IngressClass" }} -apiVersion: networking.k8s.io/v1 - {{- else if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1/IngressClass" }} -apiVersion: networking.k8s.io/v1beta1 - {{- else if or (eq .Values.ingressClass.fallbackApiVersion "v1beta1") (eq .Values.ingressClass.fallbackApiVersion "v1") }} -apiVersion: {{ printf "networking.k8s.io/%s" .Values.ingressClass.fallbackApiVersion }} - {{- else }} - {{- fail "\n\n ERROR: You must have at least networking.k8s.io/v1beta1 to use ingressClass" }} - {{- end }} ---- -kind: IngressClass -metadata: - annotations: - ingressclass.kubernetes.io/is-default-class: {{ .Values.ingressClass.isDefaultClass | quote }} - labels: - {{- include "common.labels" . | nindent 4 }} - name: {{ .Release.Name }} -spec: - controller: traefik.io/ingress-controller -{{- end }} -{{- end }} diff --git a/stable/traefik/7.1.0/templates/_ingressroute.tpl b/stable/traefik/7.1.0/templates/_ingressroute.tpl deleted file mode 100644 index 83312040d92..00000000000 --- a/stable/traefik/7.1.0/templates/_ingressroute.tpl +++ /dev/null @@ -1,25 +0,0 @@ -{{/* Define the ingressRoute */}} -{{- define "traefik.ingressRoute" -}} -{{- if .Values.ingressRoute.dashboard.enabled -}} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: {{ include "common.names.fullname" . }}-dashboard - annotations: - {{- with .Values.ingressRoute.dashboard.annotations }} - {{- toYaml . | nindent 4 }} - {{- end }} - labels: - {{- include "common.labels" . | nindent 4 }} -spec: - entryPoints: - - main - routes: - - match: PathPrefix(`/dashboard`) || PathPrefix(`/api`) - kind: Rule - services: - - name: api@internal - kind: TraefikService -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.0/templates/_portalhook.tpl b/stable/traefik/7.1.0/templates/_portalhook.tpl deleted file mode 100644 index e3586c5d4e9..00000000000 --- a/stable/traefik/7.1.0/templates/_portalhook.tpl +++ /dev/null @@ -1,26 +0,0 @@ -{{/* Define the portalHook */}} -{{- define "traefik.portalhook" -}} -{{- if .Values.portalhook.enabled }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- - -apiVersion: v1 -kind: ConfigMap -metadata: - name: portalhook - namespace: {{ $namespace }} -data: - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{- range $name, $value := $ports }} - {{ $name }}: {{ $value.port | quote }} - {{- end }} -{{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.0/templates/_tlsoptions.tpl b/stable/traefik/7.1.0/templates/_tlsoptions.tpl deleted file mode 100644 index 3ca31af0859..00000000000 --- a/stable/traefik/7.1.0/templates/_tlsoptions.tpl +++ /dev/null @@ -1,12 +0,0 @@ -{{/* Define the tlsOptions */}} -{{- define "traefik.tlsOptions" -}} -{{- range $name, $config := .Values.tlsOptions }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: TLSOption -metadata: - name: {{ $name }} -spec: - {{- toYaml $config | nindent 2 }} -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.0/templates/common.yaml b/stable/traefik/7.1.0/templates/common.yaml deleted file mode 100644 index a3ba841bdd7..00000000000 --- a/stable/traefik/7.1.0/templates/common.yaml +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{- if .Values.metrics }} -{{- if .Values.metrics.prometheus }} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "true" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/path" "/metrics" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "9100" -}} -{{- end }} -{{- end }} - -{{- $newArgs := (include "traefik.args" . | fromYaml) }} -{{- $_ := set .Values "newArgs" $newArgs -}} -{{- $mergedargs := concat .Values.args .Values.newArgs.args }} -{{- $_ := set .Values "args" $mergedargs -}} - -{{- include "traefik.portalhook" . }} -{{- include "traefik.tlsOptions" . }} -{{- include "traefik.ingressRoute" . }} -{{- include "traefik.ingressClass" . }} - - -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/stable/traefik/7.1.0/templates/middlewares/basic-middleware.yaml b/stable/traefik/7.1.0/templates/middlewares/basic-middleware.yaml deleted file mode 100644 index 145f5c9a594..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/basic-middleware.yaml +++ /dev/null @@ -1,63 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: compress - namespace: {{ $namespace }} -spec: - compress: {} ---- -# Here, an average of 300 requests per second is allowed. -# In addition, a burst of 200 requests is allowed. -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-ratelimit - namespace: {{ $namespace }} -spec: - rateLimit: - average: 300 - burst: 200 ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-secure-headers - namespace: {{ $namespace }} -spec: - headers: - accessControlAllowMethods: - - GET - - OPTIONS - - HEAD - - PUT - accessControlMaxAge: 100 - sslRedirect: true - # stsSeconds: 63072000 - # stsIncludeSubdomains: false - # stsPreload: false - # forceSTSHeader: true - contentTypeNosniff: true - browserXssFilter: true - sslForceHost: true - referrerPolicy: same-origin - customResponseHeaders: - X-Robots-Tag: 'none' - server: '' ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: chain-basic - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: basic-ratelimit - - name: basic-secure-headers - - name: compress diff --git a/stable/traefik/7.1.0/templates/middlewares/basicauth.yaml b/stable/traefik/7.1.0/templates/middlewares/basicauth.yaml deleted file mode 100644 index ccb541742f0..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/basicauth.yaml +++ /dev/null @@ -1,34 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.basicAuth }} ---- -{{- $users := list }} -{{ range $index, $userdata := $middlewareData.users }} - {{ $users = append $users ( htpasswd $userdata.username $userdata.password ) }} -{{ end }} - -apiVersion: v1 -kind: Secret -metadata: - name: {{printf "%v-%v" $middlewareData.name "secret" }} - namespace: {{ $namespace }} -type: Opaque -stringData: - users: | - {{- range $index, $user := $users }} - {{ printf "%s" $user }} - {{- end }} ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - basicAuth: - secret: {{printf "%v-%v" $middlewareData.name "secret" }} -{{ end }} diff --git a/stable/traefik/7.1.0/templates/middlewares/chain.yaml b/stable/traefik/7.1.0/templates/middlewares/chain.yaml deleted file mode 100644 index e22eb312207..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/chain.yaml +++ /dev/null @@ -1,21 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.chain }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - chain: - middlewares: - {{ range $index, $chainData := . }} - - name: {{ printf "%v-%v@%v" $namespace $chainData.name "kubernetescrd" }} - {{ end }} -{{ end }} diff --git a/stable/traefik/7.1.0/templates/middlewares/forwardauth.yaml b/stable/traefik/7.1.0/templates/middlewares/forwardauth.yaml deleted file mode 100644 index 53f4ef5cc18..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/forwardauth.yaml +++ /dev/null @@ -1,28 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.forwardAuth }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - forwardAuth: - address: {{ $middlewareData.address }} - {{- if $middlewareData.authResponseHeaders }} - authResponseHeaders: {{ $middlewareData.authResponseHeaders }} - {{- end }} - {{- if $middlewareData.authRequestHeaders }} - authRequestHeaders: {{ $middlewareData.authRequestHeaders }} - {{- end }} - {{- if $middlewareData.authResponseHeadersRegex }} - authResponseHeadersRegex: {{ $middlewareData.authResponseHeadersRegex }} - {{- end }} - {{- if $middlewareData.trustForwardHeader }} - trustForwardHeader: true - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.0/templates/middlewares/ipwhitelist.yaml b/stable/traefik/7.1.0/templates/middlewares/ipwhitelist.yaml deleted file mode 100644 index 82467dea0b9..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/ipwhitelist.yaml +++ /dev/null @@ -1,33 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.ipWhiteList }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - ipWhiteList: - sourceRange: - {{- range $middlewareData.sourceRange }} - - {{ . }} - {{- end }} - {{- if $middlewareData.ipStrategy }} - ipStrategy: - {{- if $middlewareData.ipStrategy.depth }} - depth: {{ $middlewareData.ipStrategy.depth }} - {{- end }} - {{- if $middlewareData.ipStrategy.excludedIPs }} - excludedIPs: - {{- range $middlewareData.ipStrategy.excludedIPs }} - - {{ . }} - {{- end }} - {{- end }} - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.0/templates/middlewares/ratelimit.yaml b/stable/traefik/7.1.0/templates/middlewares/ratelimit.yaml deleted file mode 100644 index 144b9d8bf38..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/ratelimit.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.rateLimit }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - rateLimit: - average: {{ $middlewareData.average }} - burst: {{ $middlewareData.burst }} -{{ end }} diff --git a/stable/traefik/7.1.0/templates/middlewares/redirectScheme.yaml b/stable/traefik/7.1.0/templates/middlewares/redirectScheme.yaml deleted file mode 100644 index f2413f84e19..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/redirectScheme.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectScheme }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectScheme: - scheme: {{ $middlewareData.scheme }} - permanent: {{ $middlewareData.permanent }} -{{ end }} diff --git a/stable/traefik/7.1.0/templates/middlewares/redirectregex.yaml b/stable/traefik/7.1.0/templates/middlewares/redirectregex.yaml deleted file mode 100644 index 683aec93d72..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/redirectregex.yaml +++ /dev/null @@ -1,20 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectRegex }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: {{ $middlewareData.regex | quote }} - replacement: {{ $middlewareData.replacement | quote }} - permanent: {{ $middlewareData.replacement }} -{{ end }} diff --git a/stable/traefik/7.1.0/templates/middlewares/tc-nextcloud.yaml b/stable/traefik/7.1.0/templates/middlewares/tc-nextcloud.yaml deleted file mode 100644 index 68acb00d210..00000000000 --- a/stable/traefik/7.1.0/templates/middlewares/tc-nextcloud.yaml +++ /dev/null @@ -1,65 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-headers - namespace: {{ $namespace }} -spec: - headers: - stsSeconds: 63072000 - forceSTSHeader: true ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-dav -spec: - redirectRegex: - regex: "https://(.*)/.well-known/(card|cal)dav" - replacement: "https://${1}/remote.php/dav/" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-finger -spec: - redirectRegex: - regex: "https://(.*)/.well-known/webfinger" - replacement: "https://${1}/public.php?service=webfinger" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmeta -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta" - replacement: "https://${1}/public.php?service=host-meta" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmetajson -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta.json" - replacement: "https://${1}/public.php?service=host-meta-json" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-chain - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: tc-nextcloud-headers - - name: tc-nextcloud-redirectregex-dav - - name: tc-nextcloud-redirectregex-finger - - name: tc-nextcloud-redirectregex-hostmetajson - - name: tc-nextcloud-redirectregex-hostmeta diff --git a/stable/traefik/7.1.0/test_values.yaml b/stable/traefik/7.1.0/test_values.yaml deleted file mode 100644 index 349679eabbb..00000000000 --- a/stable/traefik/7.1.0/test_values.yaml +++ /dev/null @@ -1,333 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5 - pullPolicy: IfNotPresent - -# -- Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x -ingressClass: - # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 - enabled: false - isDefaultClass: false - # Use to force a networking.k8s.io API Version for certain CI/CD applications. E.g. "v1beta1" - fallbackApiVersion: "" - -# -- Activate Pilot integration -pilot: - enabled: false - token: "" - # Toggle Pilot Dashboard - # dashboard: false - -# -- Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# -- Configure providers -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -# -- Logs -# https://docs.traefik.io/observability/logs/ -logs: - # Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). - general: - # By default, the logs use a text format (common), but you can - # also ask for the json format in the format option - # format: json - # By default, the level is set to ERROR. Alternative logging levels are DEBUG, PANIC, FATAL, ERROR, WARN, and INFO. - level: ERROR - access: - # To enable access logs - enabled: false - # By default, logs are written using the Common Log Format (CLF). - # To write logs in JSON, use json in the format option. - # If the given format is unsupported, the default (CLF) is used instead. - # format: json - # To write the logs in an asynchronous fashion, specify a bufferingSize option. - # This option represents the number of log lines Traefik will keep in memory before writing - # them to the selected output. In some cases, this option can greatly help performances. - # bufferingSize: 100 - # Filtering https://docs.traefik.io/observability/access-logs/#filtering - filters: {} - # statuscodes: "200,300-302" - # retryattempts: true - # minduration: 10ms - # Fields - # https://docs.traefik.io/observability/access-logs/#limiting-the-fieldsincluding-headers - fields: - general: - defaultmode: keep - names: {} - # Examples: - # ClientUsername: drop - headers: - defaultmode: drop - names: {} - # Examples: - # User-Agent: redact - # Authorization: drop - # Content-Type: keep - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -## -# -- Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - - -# -- TLS Options to be created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - -# -- Options for the main traefik service, where the entrypoints traffic comes from -# from. -service: - main: - enabled: true - type: LoadBalancer - ports: - main: - enabled: true - port: 9000 - protocol: HTTP - tcp: - enabled: true - type: LoadBalancer - ports: - web: - enabled: true - port: 9080 - protocol: HTTP - redirectTo: websecure - websecure: - enabled: true - port: 9443 - protocol: HTTPS -# tcpexample: -# enabled: true -# port: 9443 -# protocol: TCP -# tls: -# enabled: false -# # this is the name of a TLSOption definition -# options: "" -# certResolver: "" -# domains: [] -# # - main: example.com -# # sans: -# # - foo.example.com -# # - bar.example.com - metrics: - enabled: true - type: LoadBalancer - ports: - metrics: - enabled: true - port: 9100 - protocol: HTTP - udp: - enabled: false - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# -- Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# -- The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# -- Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - readOnlyRootFilesystem: true - runAsGroup: 568 - runAsNonRoot: true - runAsUser: 568 - -podSecurityContext: - fsGroup: 568 - -# -- SCALE Middleware Handlers -middlewares: - basicAuth: [] - # - name: basicauthexample - # users: - # - username: testuser - # password: testpassword - forwardAuth: [] - # - name: forwardAuthexample - # address: https://auth.example.com/ - # authResponseHeaders: - # - X-Secret - # - X-Auth-User - # authRequestHeaders: - # - "Accept" - # - "X-CustomHeader" - # authResponseHeadersRegex: "^X-" - # trustForwardHeader: true - chain: [] - # - name: chainname - # middlewares: - # - name: compress - redirectScheme: [] - # - name: redirectSchemeName - # scheme: https - # permanent: true - rateLimit: [] - # - name: rateLimitName - # average: 300 - # burst: 200 - redirectRegex: [] - # - name: redirectRegexName - # regex: putregexhere - # replacement: replacementurlhere - # permanent: false - ipWhiteList: [] - # - name: ipWhiteListName - # sourceRange: [] - # ipStrategy: - # depth: 2 - # excludedIPs: [] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.0/values.yaml b/stable/traefik/7.1.0/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/stable/traefik/7.1.1/CHANGELOG.md b/stable/traefik/7.1.1/CHANGELOG.md deleted file mode 100644 index 8a17b5bc546..00000000000 --- a/stable/traefik/7.1.1/CHANGELOG.md +++ /dev/null @@ -1,8 +0,0 @@ - - -### [traefik-7.1.1](https://github.com/truecharts/apps/compare/traefik-7.1.0...traefik-7.1.1) (2021-09-08) - -#### Fix - -* fix release pipeline picking wrong file for appversion generation - diff --git a/stable/traefik/7.1.1/CONFIG.md b/stable/traefik/7.1.1/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/traefik/7.1.1/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/traefik/7.1.1/Chart.lock b/stable/traefik/7.1.1/Chart.lock deleted file mode 100644 index 9ec8c0656cd..00000000000 --- a/stable/traefik/7.1.1/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -digest: sha256:7c137b201e33de386c8012e58dd401f81aa3b8e8cade47c7de48db3e58342823 -generated: "2021-09-08T14:27:46.644398424Z" diff --git a/stable/traefik/7.1.1/Chart.yaml b/stable/traefik/7.1.1/Chart.yaml deleted file mode 100644 index 5e821387959..00000000000 --- a/stable/traefik/7.1.1/Chart.yaml +++ /dev/null @@ -1,25 +0,0 @@ -apiVersion: v2 -appVersion: 2.5 -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -deprecated: false -description: Test App for Traefik -home: https://github.com/truecharts/apps/tree/master/charts/stable/traefik -icon: https://raw.githubusercontent.com/traefik/traefik/v2.3/docs/content/assets/img/traefik.logo.png -keywords: -- traefik -- ingress -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: traefik -sources: -- https://github.com/traefik/traefik -- https://github.com/traefik/traefik-helm-chart -- https://traefik.io/ -type: application -version: 7.1.1 diff --git a/stable/traefik/7.1.1/README.md b/stable/traefik/7.1.1/README.md deleted file mode 100644 index 694d4389f5d..00000000000 --- a/stable/traefik/7.1.1/README.md +++ /dev/null @@ -1,39 +0,0 @@ -# Introduction - -Test App for Traefik - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://truecharts.org/ | common | 6.13.8 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.1/app-readme.md b/stable/traefik/7.1.1/app-readme.md deleted file mode 100644 index 823c75135e0..00000000000 --- a/stable/traefik/7.1.1/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -Test App for Traefik - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/traefik/7.1.1/charts/common-6.13.8.tgz b/stable/traefik/7.1.1/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/traefik/7.1.1/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/traefik/7.1.1/crds/ingressroute.yaml b/stable/traefik/7.1.1/crds/ingressroute.yaml deleted file mode 100644 index 3391ba532a4..00000000000 --- a/stable/traefik/7.1.1/crds/ingressroute.yaml +++ /dev/null @@ -1,198 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutes.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRoute - listKind: IngressRouteList - plural: ingressroutes - singular: ingressroute - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRoute is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteSpec is a specification for a IngressRouteSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: Route contains the set of routes. - properties: - kind: - enum: - - Rule - type: string - match: - type: string - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - priority: - type: integer - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The - differentiation between the two is specified in the - Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration - based on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name - references a TraefikService object (and to be precise, - one that embeds a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - required: - - kind - - match - type: object - type: array - tls: - description: "TLS contains the TLS certificates configuration of the - routes. To enable Let's Encrypt, use an empty TLS struct, e.g. in - YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/ingressroutetcp.yaml b/stable/traefik/7.1.1/crds/ingressroutetcp.yaml deleted file mode 100644 index 67e099b47da..00000000000 --- a/stable/traefik/7.1.1/crds/ingressroutetcp.yaml +++ /dev/null @@ -1,160 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutetcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteTCP - listKind: IngressRouteTCPList - plural: ingressroutetcps - singular: ingressroutetcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteTCP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteTCPSpec is a specification for a IngressRouteTCPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteTCP contains the set of routes. - properties: - match: - type: string - middlewares: - description: Middlewares contains references to MiddlewareTCP - resources. - items: - description: ObjectReference is a generic reference to a Traefik - resource. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - services: - items: - description: ServiceTCP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - proxyProtocol: - description: ProxyProtocol holds the ProxyProtocol configuration. - properties: - version: - type: integer - type: object - terminationDelay: - type: integer - weight: - type: integer - required: - - name - - port - type: object - type: array - required: - - match - type: object - type: array - tls: - description: "TLSTCP contains the TLS certificates configuration of - the routes. To enable Let's Encrypt, use an empty TLS struct, e.g. - in YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - passthrough: - type: boolean - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/ingressrouteudp.yaml b/stable/traefik/7.1.1/crds/ingressrouteudp.yaml deleted file mode 100644 index 910acd6c270..00000000000 --- a/stable/traefik/7.1.1/crds/ingressrouteudp.yaml +++ /dev/null @@ -1,84 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressrouteudps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteUDP - listKind: IngressRouteUDPList - plural: ingressrouteudps - singular: ingressrouteudp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteUDP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteUDPSpec is a specification for a IngressRouteUDPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteUDP contains the set of routes. - properties: - services: - items: - description: ServiceUDP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - weight: - type: integer - required: - - name - - port - type: object - type: array - type: object - type: array - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/middlewares.yaml b/stable/traefik/7.1.1/crds/middlewares.yaml deleted file mode 100644 index 1770587a327..00000000000 --- a/stable/traefik/7.1.1/crds/middlewares.yaml +++ /dev/null @@ -1,563 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewares.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: Middleware - listKind: MiddlewareList - plural: middlewares - singular: middleware - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: Middleware is a specification for a Middleware resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareSpec holds the Middleware configuration. - properties: - addPrefix: - description: AddPrefix holds the AddPrefix configuration. - properties: - prefix: - type: string - type: object - basicAuth: - description: BasicAuth holds the HTTP basic authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - buffering: - description: Buffering holds the request/response buffering configuration. - properties: - maxRequestBodyBytes: - format: int64 - type: integer - maxResponseBodyBytes: - format: int64 - type: integer - memRequestBodyBytes: - format: int64 - type: integer - memResponseBodyBytes: - format: int64 - type: integer - retryExpression: - type: string - type: object - chain: - description: Chain holds a chain of middlewares. - properties: - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - type: object - circuitBreaker: - description: CircuitBreaker holds the circuit breaker configuration. - properties: - expression: - type: string - type: object - compress: - description: Compress holds the compress configuration. - properties: - excludedContentTypes: - items: - type: string - type: array - type: object - contentType: - description: ContentType middleware - or rather its unique `autoDetect` - option - specifies whether to let the `Content-Type` header, if - it has not been set by the backend, be automatically set to a value - derived from the contents of the response. As a proxy, the default - behavior should be to leave the header alone, regardless of what - the backend did with it. However, the historic default was to always - auto-detect and set the header if it was nil, and it is going to - be kept that way in order to support users currently relying on - it. This middleware exists to enable the correct behavior until - at least the default one can be changed in a future version. - properties: - autoDetect: - type: boolean - type: object - digestAuth: - description: DigestAuth holds the Digest HTTP authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - errors: - description: ErrorPage holds the custom error page configuration. - properties: - query: - type: string - service: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the - forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - status: - items: - type: string - type: array - type: object - forwardAuth: - description: ForwardAuth holds the http forward authentication configuration. - properties: - address: - type: string - authRequestHeaders: - items: - type: string - type: array - authResponseHeaders: - items: - type: string - type: array - authResponseHeadersRegex: - type: string - tls: - description: ClientTLS holds TLS specific configurations as client. - properties: - caOptional: - type: boolean - caSecret: - type: string - certSecret: - type: string - insecureSkipVerify: - type: boolean - type: object - trustForwardHeader: - type: boolean - type: object - headers: - description: Headers holds the custom header configuration. - properties: - accessControlAllowCredentials: - description: AccessControlAllowCredentials is only valid if true. - false is ignored. - type: boolean - accessControlAllowHeaders: - description: AccessControlAllowHeaders must be used in response - to a preflight request with Access-Control-Request-Headers set. - items: - type: string - type: array - accessControlAllowMethods: - description: AccessControlAllowMethods must be used in response - to a preflight request with Access-Control-Request-Method set. - items: - type: string - type: array - accessControlAllowOriginList: - description: AccessControlAllowOriginList is a list of allowable - origins. Can also be a wildcard origin "*". - items: - type: string - type: array - accessControlAllowOriginListRegex: - description: AccessControlAllowOriginListRegex is a list of allowable - origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/). - items: - type: string - type: array - accessControlExposeHeaders: - description: AccessControlExposeHeaders sets valid headers for - the response. - items: - type: string - type: array - accessControlMaxAge: - description: AccessControlMaxAge sets the time that a preflight - request may be cached. - format: int64 - type: integer - addVaryHeader: - description: AddVaryHeader controls if the Vary header is automatically - added/updated when the AccessControlAllowOriginList is set. - type: boolean - allowedHosts: - items: - type: string - type: array - browserXssFilter: - type: boolean - contentSecurityPolicy: - type: string - contentTypeNosniff: - type: boolean - customBrowserXSSValue: - type: string - customFrameOptionsValue: - type: string - customRequestHeaders: - additionalProperties: - type: string - type: object - customResponseHeaders: - additionalProperties: - type: string - type: object - featurePolicy: - type: string - forceSTSHeader: - type: boolean - frameDeny: - type: boolean - hostsProxyHeaders: - items: - type: string - type: array - isDevelopment: - type: boolean - publicKey: - type: string - referrerPolicy: - type: string - sslForceHost: - description: 'Deprecated: use RedirectRegex instead.' - type: boolean - sslHost: - description: 'Deprecated: use RedirectRegex instead.' - type: string - sslProxyHeaders: - additionalProperties: - type: string - type: object - sslRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - sslTemporaryRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - stsIncludeSubdomains: - type: boolean - stsPreload: - type: boolean - stsSeconds: - format: int64 - type: integer - type: object - inFlightReq: - description: InFlightReq limits the number of requests being processed - and served concurrently. - properties: - amount: - format: int64 - type: integer - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - ipWhiteList: - description: IPWhiteList holds the ip white list configuration. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - sourceRange: - items: - type: string - type: array - type: object - passTLSClientCert: - description: PassTLSClientCert holds the TLS client cert headers configuration. - properties: - info: - description: TLSClientCertificateInfo holds the client TLS certificate - info configuration. - properties: - issuer: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - notAfter: - type: boolean - notBefore: - type: boolean - sans: - type: boolean - serialNumber: - type: boolean - subject: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - type: object - pem: - type: boolean - type: object - plugin: - additionalProperties: - x-kubernetes-preserve-unknown-fields: true - type: object - rateLimit: - description: RateLimit holds the rate limiting configuration for a - given router. - properties: - average: - format: int64 - type: integer - burst: - format: int64 - type: integer - period: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - redirectRegex: - description: RedirectRegex holds the redirection configuration. - properties: - permanent: - type: boolean - regex: - type: string - replacement: - type: string - type: object - redirectScheme: - description: RedirectScheme holds the scheme redirection configuration. - properties: - permanent: - type: boolean - port: - type: string - scheme: - type: string - type: object - replacePath: - description: ReplacePath holds the ReplacePath configuration. - properties: - path: - type: string - type: object - replacePathRegex: - description: ReplacePathRegex holds the ReplacePathRegex configuration. - properties: - regex: - type: string - replacement: - type: string - type: object - retry: - description: Retry holds the retry configuration. - properties: - attempts: - type: integer - initialInterval: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - type: object - stripPrefix: - description: StripPrefix holds the StripPrefix configuration. - properties: - forceSlash: - type: boolean - prefixes: - items: - type: string - type: array - type: object - stripPrefixRegex: - description: StripPrefixRegex holds the StripPrefixRegex configuration. - properties: - regex: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/middlewarestcp.yaml b/stable/traefik/7.1.1/crds/middlewarestcp.yaml deleted file mode 100644 index f0d1d5640bd..00000000000 --- a/stable/traefik/7.1.1/crds/middlewarestcp.yaml +++ /dev/null @@ -1,59 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewaretcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: MiddlewareTCP - listKind: MiddlewareTCPList - plural: middlewaretcps - singular: middlewaretcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: MiddlewareTCP is a specification for a MiddlewareTCP resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareTCPSpec holds the MiddlewareTCP configuration. - properties: - ipWhiteList: - description: TCPIPWhiteList holds the TCP ip white list configuration. - properties: - sourceRange: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/serverstransports.yaml b/stable/traefik/7.1.1/crds/serverstransports.yaml deleted file mode 100644 index 78241697d1a..00000000000 --- a/stable/traefik/7.1.1/crds/serverstransports.yaml +++ /dev/null @@ -1,101 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: serverstransports.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: ServersTransport - listKind: ServersTransportList - plural: serverstransports - singular: serverstransport - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: ServersTransport is a specification for a ServersTransport resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServersTransportSpec options to configure communication between - Traefik and the servers. - properties: - certificatesSecrets: - description: Certificates for mTLS. - items: - type: string - type: array - disableHTTP2: - description: Disable HTTP/2 for connections with backend servers. - type: boolean - forwardingTimeouts: - description: Timeouts for requests forwarded to the backend servers. - properties: - dialTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait until a connection to - a backend server can be established. If zero, no timeout exists. - x-kubernetes-int-or-string: true - idleConnTimeout: - anyOf: - - type: integer - - type: string - description: The maximum period for which an idle HTTP keep-alive - connection will remain open before closing itself. - x-kubernetes-int-or-string: true - responseHeaderTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait for a server's response - headers after fully writing the request (including its body, - if any). If zero, no timeout exists. - x-kubernetes-int-or-string: true - type: object - insecureSkipVerify: - description: Disable SSL certificate verification. - type: boolean - maxIdleConnsPerHost: - description: If non-zero, controls the maximum idle (keep-alive) to - keep per-host. If zero, DefaultMaxIdleConnsPerHost is used. - type: integer - rootCAsSecrets: - description: Add cert file for self-signed certificate. - items: - type: string - type: array - serverName: - description: ServerName used to contact the server. - type: string - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/tlsoptions.yaml b/stable/traefik/7.1.1/crds/tlsoptions.yaml deleted file mode 100644 index c901ac2df5e..00000000000 --- a/stable/traefik/7.1.1/crds/tlsoptions.yaml +++ /dev/null @@ -1,87 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsoptions.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSOption - listKind: TLSOptionList - plural: tlsoptions - singular: tlsoption - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSOption is a specification for a TLSOption resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSOptionSpec configures TLS for an entry point. - properties: - cipherSuites: - items: - type: string - type: array - clientAuth: - description: ClientAuth defines the parameters of the client authentication - part of the TLS connection, if any. - properties: - clientAuthType: - description: ClientAuthType defines the client authentication - type to apply. - enum: - - NoClientCert - - RequestClientCert - - VerifyClientCertIfGiven - - RequireAndVerifyClientCert - type: string - secretNames: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - items: - type: string - type: array - type: object - curvePreferences: - items: - type: string - type: array - maxVersion: - type: string - minVersion: - type: string - preferServerCipherSuites: - type: boolean - sniStrict: - type: boolean - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/tlsstores.yaml b/stable/traefik/7.1.1/crds/tlsstores.yaml deleted file mode 100644 index 7bb6193b026..00000000000 --- a/stable/traefik/7.1.1/crds/tlsstores.yaml +++ /dev/null @@ -1,64 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsstores.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSStore - listKind: TLSStoreList - plural: tlsstores - singular: tlsstore - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSStore is a specification for a TLSStore resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSStoreSpec configures a TLSStore resource. - properties: - defaultCertificate: - description: DefaultCertificate holds a secret name for the TLSOption - resource. - properties: - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - required: - - secretName - type: object - required: - - defaultCertificate - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/crds/traefikservices.yaml b/stable/traefik/7.1.1/crds/traefikservices.yaml deleted file mode 100644 index 1d98c25d68d..00000000000 --- a/stable/traefik/7.1.1/crds/traefikservices.yaml +++ /dev/null @@ -1,270 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: traefikservices.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TraefikService - listKind: TraefikServiceList - plural: traefikservices - singular: traefikservice - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TraefikService is the specification for a service (that an IngressRoute - refers to) that is usually not a terminal service (i.e. not a pod of servers), - as opposed to a Kubernetes Service. That is to say, it usually refers to - other (children) services, which themselves can be TraefikServices or Services. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServiceSpec defines whether a TraefikService is a load-balancer - of services or a mirroring service. - properties: - mirroring: - description: Mirroring defines a mirroring service, which is composed - of a main load-balancer, and a list of mirrors. - properties: - kind: - enum: - - Service - - TraefikService - type: string - maxBodySize: - format: int64 - type: integer - mirrors: - items: - description: MirrorService defines one of the mirrors of a Mirroring - service. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - percent: - type: integer - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService object - (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the forward - of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - weighted: - description: WeightedRoundRobin defines a load-balancer of services. - properties: - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.1/helm-values.md b/stable/traefik/7.1.1/helm-values.md deleted file mode 100644 index f807c3aabd8..00000000000 --- a/stable/traefik/7.1.1/helm-values.md +++ /dev/null @@ -1,50 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| additionalArguments[0] | string | `"--metrics.prometheus"` | | -| additionalArguments[1] | string | `"--ping"` | | -| additionalArguments[2] | string | `"--serverstransport.insecureskipverify=true"` | | -| additionalArguments[3] | string | `"--providers.kubernetesingress.allowexternalnameservices=true"` | | -| globalArguments[0] | string | `"--global.checknewversion"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"traefik"` | | -| image.tag | string | `"v2.5"` | | -| ingressClass | object | `{"enabled":false,"fallbackApiVersion":"","isDefaultClass":false}` | Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x | -| ingressRoute | object | `{"dashboard":{"annotations":{},"enabled":true,"labels":{}}}` | Create an IngressRoute for the dashboard | -| logs | object | `{"access":{"enabled":false,"fields":{"general":{"defaultmode":"keep","names":{}},"headers":{"defaultmode":"drop","names":{}}},"filters":{}},"general":{"level":"ERROR"}}` | Logs https://docs.traefik.io/observability/logs/ | -| metrics.prometheus.entryPoint | string | `"metrics"` | | -| middlewares | object | `{"basicAuth":[],"chain":[],"forwardAuth":[],"ipWhiteList":[],"rateLimit":[],"redirectRegex":[],"redirectScheme":[]}` | SCALE Middleware Handlers | -| pilot | object | `{"enabled":false,"token":""}` | Activate Pilot integration | -| podSecurityContext.fsGroup | int | `568` | | -| portalhook.enabled | bool | `true` | | -| probes.liveness | object | See below | Liveness probe configuration | -| probes.liveness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.liveness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.readiness | object | See below | Redainess probe configuration | -| probes.readiness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.readiness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.startup | object | See below | Startup probe configuration | -| probes.startup.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.startup.type | string | "TCP" | sets the probe type when not using a custom probe | -| providers.kubernetesCRD.enabled | bool | `true` | | -| providers.kubernetesCRD.namespaces | list | `[]` | | -| providers.kubernetesIngress.enabled | bool | `true` | | -| providers.kubernetesIngress.namespaces | list | `[]` | | -| providers.kubernetesIngress.publishedService.enabled | bool | `true` | | -| rbac | object | `{"enabled":true,"rules":[{"apiGroups":[""],"resources":["services","endpoints","secrets"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses","ingressclasses"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses/status"],"verbs":["update"]},{"apiGroups":["traefik.containo.us"],"resources":["ingressroutes","ingressroutetcps","ingressrouteudps","middlewares","middlewaretcps","tlsoptions","tlsstores","traefikservices","serverstransports"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created | -| securityContext | object | `{"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsGroup":568,"runAsNonRoot":true,"runAsUser":568}` | Set the container security context To run the container with ports below 1024 this will need to be adjust to run as root | -| service | object | `{"main":{"enabled":true,"ports":{"main":{"enabled":true,"port":9000,"protocol":"HTTP"}},"type":"LoadBalancer"},"metrics":{"enabled":true,"ports":{"metrics":{"enabled":true,"port":9100,"protocol":"HTTP"}},"type":"LoadBalancer"},"tcp":{"enabled":true,"ports":{"web":{"enabled":true,"port":9080,"protocol":"HTTP","redirectTo":"websecure"},"websecure":{"enabled":true,"port":9443,"protocol":"HTTPS"}},"type":"LoadBalancer"},"udp":{"enabled":false}}` | Options for the main traefik service, where the entrypoints traffic comes from from. | -| serviceAccount | object | `{"enabled":true,"name":""}` | The service account the pods will use to interact with the Kubernetes API | -| tlsOptions | object | `{"default":{"cipherSuites":["TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305","TLS_AES_128_GCM_SHA256","TLS_AES_256_GCM_SHA384","TLS_CHACHA20_POLY1305_SHA256"],"curvePreferences":["CurveP521","CurveP384"],"minVersion":"VersionTLS12","sniStrict":false}}` | TLS Options to be created as TLSOption CRDs https://doc.traefik.io/traefik/https/tls/#tls-options Example: | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.1/ix_values.yaml b/stable/traefik/7.1.1/ix_values.yaml deleted file mode 100644 index 11e67e6ee6f..00000000000 --- a/stable/traefik/7.1.1/ix_values.yaml +++ /dev/null @@ -1,181 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5 - pullPolicy: IfNotPresent - -# Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# Configure providers -# -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -# -# Configure Traefik static configuration -# Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - -# TLS Options are created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - - - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.1/questions.yaml b/stable/traefik/7.1.1/questions.yaml deleted file mode 100644 index 047d70d5c75..00000000000 --- a/stable/traefik/7.1.1/questions.yaml +++ /dev/null @@ -1,1258 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Middlewares" - description: "Traefik Middlewares" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "http" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" - path: "/dashboard/" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "RollingUpdate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: pilot - label: "Traefik Pilot" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: token - label: "token" - schema: - type: string - default: "" - - variable: dashboard - label: "Pilot Dashboard" - schema: - type: boolean - default: false - - - variable: ingressClass - label: "ingressClass" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: isDefaultClass - label: "isDefaultClass" - schema: - type: boolean - default: false - - - variable: logs - label: "Logs" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: general - label: "General Logs" - schema: - type: dict - attrs: - - variable: level - label: "Log Level" - schema: - type: string - default: "ERROR" - enum: - - value: "INFO" - description: "Info" - - value: "WARN" - description: "Warnings" - - value: "ERROR" - description: "Errors" - - value: "FATAL" - description: "Fatal Errors" - - value: "PANIC" - description: "Panics" - - value: "DEBUG" - description: "Debug" - - variable: access - label: "Access Logs" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: enabledFilters - label: "Enable Filters" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: filters - label: "Filters" - schema: - type: dict - attrs: - - variable: statuscodes - label: "Status codes" - schema: - type: string - default: "200,300-302" - - variable: retryattempts - label: "retryattempts" - schema: - type: boolean - default: true - - variable: minduration - label: "minduration" - schema: - type: string - default: "10ms" - - variable: fields - label: "Fields" - schema: - type: dict - attrs: - - variable: general - label: "General" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "keep" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - variable: headers - label: "Headers" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "drop" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - - variable: middlewares - label: "" - group: "Middlewares" - schema: - type: dict - attrs: - - variable: basicAuth - label: "basicAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: users - label: "Users" - schema: - type: list - default: [] - items: - - variable: usersEntry - label: "" - schema: - type: dict - attrs: - - variable: username - label: "Username" - schema: - type: string - required: true - default: "" - - variable: password - label: "Password" - schema: - type: string - required: true - default: "" - - - - variable: forwardAuth - label: "forwardAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: address - label: "Address" - schema: - type: string - required: true - default: "" - - variable: trustForwardHeader - label: "trustForwardHeader" - schema: - type: boolean - default: false - - variable: authResponseHeadersRegex - label: "authResponseHeadersRegex" - schema: - type: string - default: "" - - variable: authResponseHeaders - label: "authResponseHeaders" - schema: - type: list - default: [] - items: - - variable: authResponseHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: authRequestHeaders - label: "authRequestHeaders" - schema: - type: list - default: [] - items: - - variable: authRequestHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: chain - label: "chain" - schema: - type: list - default: [] - items: - - variable: chainEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: middlewares - label: "Middlewares to Chain" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - - variable: redirectScheme - label: "redirectScheme" - schema: - type: list - default: [] - items: - - variable: redirectSchemeEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: scheme - label: "Scheme" - schema: - type: string - required: true - default: "https" - enum: - - value: "https" - description: "https" - - value: "http" - description: "http" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: rateLimit - label: "rateLimit" - schema: - type: list - default: [] - items: - - variable: rateLimitEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: average - label: "Average" - schema: - type: int - required: true - default: 300 - - variable: burst - label: "Burst" - schema: - type: int - required: true - default: 200 - - variable: redirectRegex - label: "redirectRegex" - schema: - type: list - default: [] - items: - - variable: redirectRegexEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: regex - label: "Regex" - schema: - type: string - required: true - default: "" - - variable: replacement - label: "Replacement" - schema: - type: string - required: true - default: "" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: ipWhiteList - label: "ipWhiteList" - schema: - type: list - default: [] - items: - - variable: ipWhiteListEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: sourceRange - label: "Source Range" - schema: - type: list - default: [] - items: - - variable: sourceRangeEntry - label: "" - schema: - type: string - required: true - default: "" - - variable: ipStrategy - label: "IP Strategy" - schema: - type: dict - attrs: - - variable: depth - label: "Depth" - schema: - type: int - required: true - - variable: excludedIPs - label: "Excluded IPs" - schema: - type: list - default: [] - items: - - variable: excludedIPsEntry - label: "" - schema: - type: string - required: true - default: "" - - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - - variable: service - group: "Networking and Services" - label: "Configure Service Entrypoint" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: main - label: "Main Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9000 - editable: false - hidden: true - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9000 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9000 - - variable: tcp - label: "Main Service" - description: "The tcp Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: web - label: "web Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9080 - editable: true - required: true - - variable: redirectTo - label: "Redirect to" - schema: - type: string - default: "websecure" - - variable: websecure - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTPS" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9443 - editable: true - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - - variable: udp - label: "UDP Service" - description: "The UDP service for entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "UDP" - enum: - - value: UDP - description: "UDP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: metrics - label: "metrics Service" - description: "The metrics Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: metrics - label: "metrics Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9100 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 9100 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9100 - - - variable: securityContext - group: "Security and Permissions" - label: "Security Context" - schema: - type: dict - attrs: - - variable: privileged - label: "Privileged mode" - schema: - type: boolean - default: false - - variable: readOnlyRootFilesystem - label: "ReadOnly Root Filesystem" - schema: - type: boolean - default: true - - variable: allowPrivilegeEscalation - label: "Allow Privilege Escalation" - schema: - type: boolean - default: false - - - variable: podSecurityContext - group: "Security and Permissions" - label: "Pod Security Context" - schema: - type: dict - attrs: - - variable: runAsNonRoot - label: "runAsNonRoot" - schema: - type: boolean - default: true - - variable: runAsUser - label: "runAsUser" - description: "The UserID of the user running the application" - schema: - type: int - default: 568 - - variable: runAsGroup - label: "runAsGroup" - description: The groupID this App of the user running the application" - schema: - type: int - default: 568 - - variable: fsGroup - label: "fsGroup" - description: "The group that should own ALL storage." - schema: - type: int - default: 568 - - variable: supplementalGroups - label: "supplemental Groups" - schema: - type: list - default: [] - items: - - variable: supplementalGroupsEntry - label: "supplemental Group" - schema: - type: int - - variable: fsGroupChangePolicy - label: "When should we take ownership?" - schema: - type: string - default: "OnRootMismatch" - enum: - - value: "OnRootMismatch" - description: "OnRootMismatch" - - value: "Always" - description: "Always" - - - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/traefik/7.1.1/templates/_args.tpl b/stable/traefik/7.1.1/templates/_args.tpl deleted file mode 100644 index 41e7e44b8fd..00000000000 --- a/stable/traefik/7.1.1/templates/_args.tpl +++ /dev/null @@ -1,141 +0,0 @@ -{{/* Define the args */}} -{{- define "traefik.args" -}} -args: - {{/* merge all ports */}} - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{/* start of actual arguments */}} - {{- with .Values.globalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} - {{- range $name, $config := $ports }} - {{- if $config }} - {{- if or ( eq $config.protocol "HTTP" ) ( eq $config.protocol "HTTPS" ) ( eq $config.protocol "TCP" ) }} - {{- $_ := set $config "protocol" "TCP" }} - {{- end }} - - "--entryPoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}" - {{- end }} - {{- end }} - - "--api.dashboard=true" - - "--ping=true" - {{- if .Values.metrics }} - {{- if .Values.metrics.datadog }} - - "--metrics.datadog=true" - - "--metrics.datadog.address={{ .Values.metrics.datadog.address }}" - {{- end }} - {{- if .Values.metrics.influxdb }} - - "--metrics.influxdb=true" - - "--metrics.influxdb.address={{ .Values.metrics.influxdb.address }}" - - "--metrics.influxdb.protocol={{ .Values.metrics.influxdb.protocol }}" - {{- end }} - {{- if .Values.metrics.prometheus }} - - "--metrics.prometheus=true" - - "--metrics.prometheus.entrypoint={{ .Values.metrics.prometheus.entryPoint }}" - {{- end }} - {{- if .Values.metrics.statsd }} - - "--metrics.statsd=true" - - "--metrics.statsd.address={{ .Values.metrics.statsd.address }}" - {{- end }} - {{- end }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress" - {{- if and .Values.providers.kubernetesIngress.publishedService.enabled }} - - "--providers.kubernetesingress.ingressendpoint.publishedservice={{ template "providers.kubernetesIngress.publishedServicePath" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.labelSelector }} - - "--providers.kubernetesingress.labelSelector={{ .Values.providers.kubernetesIngress.labelSelector }}" - {{- end }} - {{- end }} - {{- if and .Values.rbac.enabled .Values.rbac.namespaced }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd.namespaces={{ template "providers.kubernetesCRD.namespaces" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}" - {{- end }} - {{- end }} - {{- range $entrypoint, $config := $ports }} - {{- if $config.redirectTo }} - {{- $toPort := index $ports $config.redirectTo }} - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $toPort.port }}" - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https" - {{- end }} - {{- if or ( $config.tls ) ( eq $config.protocol "HTTPS" ) }} - {{- if or ( $config.tls.enabled ) ( eq $config.protocol "HTTPS" ) }} - - "--entrypoints.{{ $entrypoint }}.http.tls=true" - {{- if $config.tls.options }} - - "--entrypoints.{{ $entrypoint }}.http.tls.options={{ $config.tls.options }}" - {{- end }} - {{- if $config.tls.certResolver }} - - "--entrypoints.{{ $entrypoint }}.http.tls.certResolver={{ $config.tls.certResolver }}" - {{- end }} - {{- if $config.tls.domains }} - {{- range $index, $domain := $config.tls.domains }} - {{- if $domain.main }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].main={{ $domain.main }}" - {{- end }} - {{- if $domain.sans }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].sans={{ join "," $domain.sans }}" - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- with .Values.logs }} - {{- if .general.format }} - - "--log.format={{ .general.format }}" - {{- end }} - {{- if ne .general.level "ERROR" }} - - "--log.level={{ .general.level | upper }}" - {{- end }} - {{- if .access.enabled }} - - "--accesslog=true" - {{- if .access.format }} - - "--accesslog.format={{ .access.format }}" - {{- end }} - {{- if .access.bufferingsize }} - - "--accesslog.bufferingsize={{ .access.bufferingsize }}" - {{- end }} - {{- if .access.filters }} - {{- if .access.filters.statuscodes }} - - "--accesslog.filters.statuscodes={{ .access.filters.statuscodes }}" - {{- end }} - {{- if .access.filters.retryattempts }} - - "--accesslog.filters.retryattempts" - {{- end }} - {{- if .access.filters.minduration }} - - "--accesslog.filters.minduration={{ .access.filters.minduration }}" - {{- end }} - {{- end }} - - "--accesslog.fields.defaultmode={{ .access.fields.general.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.general.names }} - - "--accesslog.fields.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - - "--accesslog.fields.headers.defaultmode={{ .access.fields.headers.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.headers.names }} - - "--accesslog.fields.headers.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - {{- end }} - {{- end }} - {{- if .Values.pilot.enabled }} - - "--pilot.token={{ .Values.pilot.token }}" - {{- end }} - {{- if hasKey .Values.pilot "dashboard" }} - - "--pilot.dashboard={{ .Values.pilot.dashboard }}" - {{- end }} - {{- with .Values.additionalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.1/templates/_helpers.tpl b/stable/traefik/7.1.1/templates/_helpers.tpl deleted file mode 100644 index 8c6c4ac96bc..00000000000 --- a/stable/traefik/7.1.1/templates/_helpers.tpl +++ /dev/null @@ -1,22 +0,0 @@ -{{/* -Construct the path for the providers.kubernetesingress.ingressendpoint.publishedservice. -By convention this will simply use the / to match the name of the -service generated. -Users can provide an override for an explicit service they want bound via `.Values.providers.kubernetesIngress.publishedService.pathOverride` -*/}} -{{- define "providers.kubernetesIngress.publishedServicePath" -}} -{{- $fullName := include "common.names.fullname" . -}} -{{- $defServiceName := printf "%s/%s-tcp" .Release.Namespace $fullName -}} -{{- $servicePath := default $defServiceName .Values.providers.kubernetesIngress.publishedService.pathOverride }} -{{- print $servicePath | trimSuffix "-" -}} -{{- end -}} - -{{/* -Construct a comma-separated list of whitelisted namespaces -*/}} -{{- define "providers.kubernetesIngress.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesIngress.namespaces) }} -{{- end -}} -{{- define "providers.kubernetesCRD.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesCRD.namespaces) }} -{{- end -}} diff --git a/stable/traefik/7.1.1/templates/_ingressclass.tpl b/stable/traefik/7.1.1/templates/_ingressclass.tpl deleted file mode 100644 index 27f8467fc9e..00000000000 --- a/stable/traefik/7.1.1/templates/_ingressclass.tpl +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Define the ingressClass */}} -{{- define "traefik.ingressClass" -}} -{{- if .Values.ingressClass.enabled }} - {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1/IngressClass" }} -apiVersion: networking.k8s.io/v1 - {{- else if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1/IngressClass" }} -apiVersion: networking.k8s.io/v1beta1 - {{- else if or (eq .Values.ingressClass.fallbackApiVersion "v1beta1") (eq .Values.ingressClass.fallbackApiVersion "v1") }} -apiVersion: {{ printf "networking.k8s.io/%s" .Values.ingressClass.fallbackApiVersion }} - {{- else }} - {{- fail "\n\n ERROR: You must have at least networking.k8s.io/v1beta1 to use ingressClass" }} - {{- end }} ---- -kind: IngressClass -metadata: - annotations: - ingressclass.kubernetes.io/is-default-class: {{ .Values.ingressClass.isDefaultClass | quote }} - labels: - {{- include "common.labels" . | nindent 4 }} - name: {{ .Release.Name }} -spec: - controller: traefik.io/ingress-controller -{{- end }} -{{- end }} diff --git a/stable/traefik/7.1.1/templates/_ingressroute.tpl b/stable/traefik/7.1.1/templates/_ingressroute.tpl deleted file mode 100644 index 83312040d92..00000000000 --- a/stable/traefik/7.1.1/templates/_ingressroute.tpl +++ /dev/null @@ -1,25 +0,0 @@ -{{/* Define the ingressRoute */}} -{{- define "traefik.ingressRoute" -}} -{{- if .Values.ingressRoute.dashboard.enabled -}} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: {{ include "common.names.fullname" . }}-dashboard - annotations: - {{- with .Values.ingressRoute.dashboard.annotations }} - {{- toYaml . | nindent 4 }} - {{- end }} - labels: - {{- include "common.labels" . | nindent 4 }} -spec: - entryPoints: - - main - routes: - - match: PathPrefix(`/dashboard`) || PathPrefix(`/api`) - kind: Rule - services: - - name: api@internal - kind: TraefikService -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.1/templates/_portalhook.tpl b/stable/traefik/7.1.1/templates/_portalhook.tpl deleted file mode 100644 index e3586c5d4e9..00000000000 --- a/stable/traefik/7.1.1/templates/_portalhook.tpl +++ /dev/null @@ -1,26 +0,0 @@ -{{/* Define the portalHook */}} -{{- define "traefik.portalhook" -}} -{{- if .Values.portalhook.enabled }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- - -apiVersion: v1 -kind: ConfigMap -metadata: - name: portalhook - namespace: {{ $namespace }} -data: - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{- range $name, $value := $ports }} - {{ $name }}: {{ $value.port | quote }} - {{- end }} -{{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.1/templates/_tlsoptions.tpl b/stable/traefik/7.1.1/templates/_tlsoptions.tpl deleted file mode 100644 index 3ca31af0859..00000000000 --- a/stable/traefik/7.1.1/templates/_tlsoptions.tpl +++ /dev/null @@ -1,12 +0,0 @@ -{{/* Define the tlsOptions */}} -{{- define "traefik.tlsOptions" -}} -{{- range $name, $config := .Values.tlsOptions }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: TLSOption -metadata: - name: {{ $name }} -spec: - {{- toYaml $config | nindent 2 }} -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.1/templates/common.yaml b/stable/traefik/7.1.1/templates/common.yaml deleted file mode 100644 index a3ba841bdd7..00000000000 --- a/stable/traefik/7.1.1/templates/common.yaml +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{- if .Values.metrics }} -{{- if .Values.metrics.prometheus }} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "true" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/path" "/metrics" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "9100" -}} -{{- end }} -{{- end }} - -{{- $newArgs := (include "traefik.args" . | fromYaml) }} -{{- $_ := set .Values "newArgs" $newArgs -}} -{{- $mergedargs := concat .Values.args .Values.newArgs.args }} -{{- $_ := set .Values "args" $mergedargs -}} - -{{- include "traefik.portalhook" . }} -{{- include "traefik.tlsOptions" . }} -{{- include "traefik.ingressRoute" . }} -{{- include "traefik.ingressClass" . }} - - -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/stable/traefik/7.1.1/templates/middlewares/basic-middleware.yaml b/stable/traefik/7.1.1/templates/middlewares/basic-middleware.yaml deleted file mode 100644 index 145f5c9a594..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/basic-middleware.yaml +++ /dev/null @@ -1,63 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: compress - namespace: {{ $namespace }} -spec: - compress: {} ---- -# Here, an average of 300 requests per second is allowed. -# In addition, a burst of 200 requests is allowed. -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-ratelimit - namespace: {{ $namespace }} -spec: - rateLimit: - average: 300 - burst: 200 ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-secure-headers - namespace: {{ $namespace }} -spec: - headers: - accessControlAllowMethods: - - GET - - OPTIONS - - HEAD - - PUT - accessControlMaxAge: 100 - sslRedirect: true - # stsSeconds: 63072000 - # stsIncludeSubdomains: false - # stsPreload: false - # forceSTSHeader: true - contentTypeNosniff: true - browserXssFilter: true - sslForceHost: true - referrerPolicy: same-origin - customResponseHeaders: - X-Robots-Tag: 'none' - server: '' ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: chain-basic - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: basic-ratelimit - - name: basic-secure-headers - - name: compress diff --git a/stable/traefik/7.1.1/templates/middlewares/basicauth.yaml b/stable/traefik/7.1.1/templates/middlewares/basicauth.yaml deleted file mode 100644 index ccb541742f0..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/basicauth.yaml +++ /dev/null @@ -1,34 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.basicAuth }} ---- -{{- $users := list }} -{{ range $index, $userdata := $middlewareData.users }} - {{ $users = append $users ( htpasswd $userdata.username $userdata.password ) }} -{{ end }} - -apiVersion: v1 -kind: Secret -metadata: - name: {{printf "%v-%v" $middlewareData.name "secret" }} - namespace: {{ $namespace }} -type: Opaque -stringData: - users: | - {{- range $index, $user := $users }} - {{ printf "%s" $user }} - {{- end }} ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - basicAuth: - secret: {{printf "%v-%v" $middlewareData.name "secret" }} -{{ end }} diff --git a/stable/traefik/7.1.1/templates/middlewares/chain.yaml b/stable/traefik/7.1.1/templates/middlewares/chain.yaml deleted file mode 100644 index e22eb312207..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/chain.yaml +++ /dev/null @@ -1,21 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.chain }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - chain: - middlewares: - {{ range $index, $chainData := . }} - - name: {{ printf "%v-%v@%v" $namespace $chainData.name "kubernetescrd" }} - {{ end }} -{{ end }} diff --git a/stable/traefik/7.1.1/templates/middlewares/forwardauth.yaml b/stable/traefik/7.1.1/templates/middlewares/forwardauth.yaml deleted file mode 100644 index 53f4ef5cc18..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/forwardauth.yaml +++ /dev/null @@ -1,28 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.forwardAuth }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - forwardAuth: - address: {{ $middlewareData.address }} - {{- if $middlewareData.authResponseHeaders }} - authResponseHeaders: {{ $middlewareData.authResponseHeaders }} - {{- end }} - {{- if $middlewareData.authRequestHeaders }} - authRequestHeaders: {{ $middlewareData.authRequestHeaders }} - {{- end }} - {{- if $middlewareData.authResponseHeadersRegex }} - authResponseHeadersRegex: {{ $middlewareData.authResponseHeadersRegex }} - {{- end }} - {{- if $middlewareData.trustForwardHeader }} - trustForwardHeader: true - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.1/templates/middlewares/ipwhitelist.yaml b/stable/traefik/7.1.1/templates/middlewares/ipwhitelist.yaml deleted file mode 100644 index 82467dea0b9..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/ipwhitelist.yaml +++ /dev/null @@ -1,33 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.ipWhiteList }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - ipWhiteList: - sourceRange: - {{- range $middlewareData.sourceRange }} - - {{ . }} - {{- end }} - {{- if $middlewareData.ipStrategy }} - ipStrategy: - {{- if $middlewareData.ipStrategy.depth }} - depth: {{ $middlewareData.ipStrategy.depth }} - {{- end }} - {{- if $middlewareData.ipStrategy.excludedIPs }} - excludedIPs: - {{- range $middlewareData.ipStrategy.excludedIPs }} - - {{ . }} - {{- end }} - {{- end }} - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.1/templates/middlewares/ratelimit.yaml b/stable/traefik/7.1.1/templates/middlewares/ratelimit.yaml deleted file mode 100644 index 144b9d8bf38..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/ratelimit.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.rateLimit }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - rateLimit: - average: {{ $middlewareData.average }} - burst: {{ $middlewareData.burst }} -{{ end }} diff --git a/stable/traefik/7.1.1/templates/middlewares/redirectScheme.yaml b/stable/traefik/7.1.1/templates/middlewares/redirectScheme.yaml deleted file mode 100644 index f2413f84e19..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/redirectScheme.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectScheme }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectScheme: - scheme: {{ $middlewareData.scheme }} - permanent: {{ $middlewareData.permanent }} -{{ end }} diff --git a/stable/traefik/7.1.1/templates/middlewares/redirectregex.yaml b/stable/traefik/7.1.1/templates/middlewares/redirectregex.yaml deleted file mode 100644 index 683aec93d72..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/redirectregex.yaml +++ /dev/null @@ -1,20 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectRegex }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: {{ $middlewareData.regex | quote }} - replacement: {{ $middlewareData.replacement | quote }} - permanent: {{ $middlewareData.replacement }} -{{ end }} diff --git a/stable/traefik/7.1.1/templates/middlewares/tc-nextcloud.yaml b/stable/traefik/7.1.1/templates/middlewares/tc-nextcloud.yaml deleted file mode 100644 index 68acb00d210..00000000000 --- a/stable/traefik/7.1.1/templates/middlewares/tc-nextcloud.yaml +++ /dev/null @@ -1,65 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-headers - namespace: {{ $namespace }} -spec: - headers: - stsSeconds: 63072000 - forceSTSHeader: true ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-dav -spec: - redirectRegex: - regex: "https://(.*)/.well-known/(card|cal)dav" - replacement: "https://${1}/remote.php/dav/" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-finger -spec: - redirectRegex: - regex: "https://(.*)/.well-known/webfinger" - replacement: "https://${1}/public.php?service=webfinger" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmeta -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta" - replacement: "https://${1}/public.php?service=host-meta" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmetajson -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta.json" - replacement: "https://${1}/public.php?service=host-meta-json" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-chain - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: tc-nextcloud-headers - - name: tc-nextcloud-redirectregex-dav - - name: tc-nextcloud-redirectregex-finger - - name: tc-nextcloud-redirectregex-hostmetajson - - name: tc-nextcloud-redirectregex-hostmeta diff --git a/stable/traefik/7.1.1/test_values.yaml b/stable/traefik/7.1.1/test_values.yaml deleted file mode 100644 index 349679eabbb..00000000000 --- a/stable/traefik/7.1.1/test_values.yaml +++ /dev/null @@ -1,333 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5 - pullPolicy: IfNotPresent - -# -- Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x -ingressClass: - # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 - enabled: false - isDefaultClass: false - # Use to force a networking.k8s.io API Version for certain CI/CD applications. E.g. "v1beta1" - fallbackApiVersion: "" - -# -- Activate Pilot integration -pilot: - enabled: false - token: "" - # Toggle Pilot Dashboard - # dashboard: false - -# -- Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# -- Configure providers -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -# -- Logs -# https://docs.traefik.io/observability/logs/ -logs: - # Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). - general: - # By default, the logs use a text format (common), but you can - # also ask for the json format in the format option - # format: json - # By default, the level is set to ERROR. Alternative logging levels are DEBUG, PANIC, FATAL, ERROR, WARN, and INFO. - level: ERROR - access: - # To enable access logs - enabled: false - # By default, logs are written using the Common Log Format (CLF). - # To write logs in JSON, use json in the format option. - # If the given format is unsupported, the default (CLF) is used instead. - # format: json - # To write the logs in an asynchronous fashion, specify a bufferingSize option. - # This option represents the number of log lines Traefik will keep in memory before writing - # them to the selected output. In some cases, this option can greatly help performances. - # bufferingSize: 100 - # Filtering https://docs.traefik.io/observability/access-logs/#filtering - filters: {} - # statuscodes: "200,300-302" - # retryattempts: true - # minduration: 10ms - # Fields - # https://docs.traefik.io/observability/access-logs/#limiting-the-fieldsincluding-headers - fields: - general: - defaultmode: keep - names: {} - # Examples: - # ClientUsername: drop - headers: - defaultmode: drop - names: {} - # Examples: - # User-Agent: redact - # Authorization: drop - # Content-Type: keep - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -## -# -- Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - - -# -- TLS Options to be created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - -# -- Options for the main traefik service, where the entrypoints traffic comes from -# from. -service: - main: - enabled: true - type: LoadBalancer - ports: - main: - enabled: true - port: 9000 - protocol: HTTP - tcp: - enabled: true - type: LoadBalancer - ports: - web: - enabled: true - port: 9080 - protocol: HTTP - redirectTo: websecure - websecure: - enabled: true - port: 9443 - protocol: HTTPS -# tcpexample: -# enabled: true -# port: 9443 -# protocol: TCP -# tls: -# enabled: false -# # this is the name of a TLSOption definition -# options: "" -# certResolver: "" -# domains: [] -# # - main: example.com -# # sans: -# # - foo.example.com -# # - bar.example.com - metrics: - enabled: true - type: LoadBalancer - ports: - metrics: - enabled: true - port: 9100 - protocol: HTTP - udp: - enabled: false - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# -- Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# -- The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# -- Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - readOnlyRootFilesystem: true - runAsGroup: 568 - runAsNonRoot: true - runAsUser: 568 - -podSecurityContext: - fsGroup: 568 - -# -- SCALE Middleware Handlers -middlewares: - basicAuth: [] - # - name: basicauthexample - # users: - # - username: testuser - # password: testpassword - forwardAuth: [] - # - name: forwardAuthexample - # address: https://auth.example.com/ - # authResponseHeaders: - # - X-Secret - # - X-Auth-User - # authRequestHeaders: - # - "Accept" - # - "X-CustomHeader" - # authResponseHeadersRegex: "^X-" - # trustForwardHeader: true - chain: [] - # - name: chainname - # middlewares: - # - name: compress - redirectScheme: [] - # - name: redirectSchemeName - # scheme: https - # permanent: true - rateLimit: [] - # - name: rateLimitName - # average: 300 - # burst: 200 - redirectRegex: [] - # - name: redirectRegexName - # regex: putregexhere - # replacement: replacementurlhere - # permanent: false - ipWhiteList: [] - # - name: ipWhiteListName - # sourceRange: [] - # ipStrategy: - # depth: 2 - # excludedIPs: [] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.1/values.yaml b/stable/traefik/7.1.1/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/stable/traefik/7.1.2/CHANGELOG.md b/stable/traefik/7.1.2/CHANGELOG.md deleted file mode 100644 index 773c610fc41..00000000000 --- a/stable/traefik/7.1.2/CHANGELOG.md +++ /dev/null @@ -1,9 +0,0 @@ - - -### [traefik-7.1.2](https://github.com/truecharts/apps/compare/traefik-7.1.1...traefik-7.1.2) (2021-09-08) - -#### Fix - -* only release when version is bumped -* use fixed version for traefik container for consistency - diff --git a/stable/traefik/7.1.2/CONFIG.md b/stable/traefik/7.1.2/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/traefik/7.1.2/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/traefik/7.1.2/Chart.lock b/stable/traefik/7.1.2/Chart.lock deleted file mode 100644 index 0170919b8f5..00000000000 --- a/stable/traefik/7.1.2/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -digest: sha256:7c137b201e33de386c8012e58dd401f81aa3b8e8cade47c7de48db3e58342823 -generated: "2021-09-08T14:46:52.705178838Z" diff --git a/stable/traefik/7.1.2/Chart.yaml b/stable/traefik/7.1.2/Chart.yaml deleted file mode 100644 index c4fc303526a..00000000000 --- a/stable/traefik/7.1.2/Chart.yaml +++ /dev/null @@ -1,25 +0,0 @@ -apiVersion: v2 -appVersion: 2.5.2 -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -deprecated: false -description: Test App for Traefik -home: https://github.com/truecharts/apps/tree/master/charts/stable/traefik -icon: https://raw.githubusercontent.com/traefik/traefik/v2.3/docs/content/assets/img/traefik.logo.png -keywords: -- traefik -- ingress -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: traefik -sources: -- https://github.com/traefik/traefik -- https://github.com/traefik/traefik-helm-chart -- https://traefik.io/ -type: application -version: 7.1.2 diff --git a/stable/traefik/7.1.2/README.md b/stable/traefik/7.1.2/README.md deleted file mode 100644 index 694d4389f5d..00000000000 --- a/stable/traefik/7.1.2/README.md +++ /dev/null @@ -1,39 +0,0 @@ -# Introduction - -Test App for Traefik - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://truecharts.org/ | common | 6.13.8 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.2/app-readme.md b/stable/traefik/7.1.2/app-readme.md deleted file mode 100644 index 823c75135e0..00000000000 --- a/stable/traefik/7.1.2/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -Test App for Traefik - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/traefik/7.1.2/charts/common-6.13.8.tgz b/stable/traefik/7.1.2/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/traefik/7.1.2/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/traefik/7.1.2/crds/ingressroute.yaml b/stable/traefik/7.1.2/crds/ingressroute.yaml deleted file mode 100644 index 3391ba532a4..00000000000 --- a/stable/traefik/7.1.2/crds/ingressroute.yaml +++ /dev/null @@ -1,198 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutes.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRoute - listKind: IngressRouteList - plural: ingressroutes - singular: ingressroute - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRoute is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteSpec is a specification for a IngressRouteSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: Route contains the set of routes. - properties: - kind: - enum: - - Rule - type: string - match: - type: string - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - priority: - type: integer - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The - differentiation between the two is specified in the - Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration - based on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name - references a TraefikService object (and to be precise, - one that embeds a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - required: - - kind - - match - type: object - type: array - tls: - description: "TLS contains the TLS certificates configuration of the - routes. To enable Let's Encrypt, use an empty TLS struct, e.g. in - YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/ingressroutetcp.yaml b/stable/traefik/7.1.2/crds/ingressroutetcp.yaml deleted file mode 100644 index 67e099b47da..00000000000 --- a/stable/traefik/7.1.2/crds/ingressroutetcp.yaml +++ /dev/null @@ -1,160 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutetcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteTCP - listKind: IngressRouteTCPList - plural: ingressroutetcps - singular: ingressroutetcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteTCP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteTCPSpec is a specification for a IngressRouteTCPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteTCP contains the set of routes. - properties: - match: - type: string - middlewares: - description: Middlewares contains references to MiddlewareTCP - resources. - items: - description: ObjectReference is a generic reference to a Traefik - resource. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - services: - items: - description: ServiceTCP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - proxyProtocol: - description: ProxyProtocol holds the ProxyProtocol configuration. - properties: - version: - type: integer - type: object - terminationDelay: - type: integer - weight: - type: integer - required: - - name - - port - type: object - type: array - required: - - match - type: object - type: array - tls: - description: "TLSTCP contains the TLS certificates configuration of - the routes. To enable Let's Encrypt, use an empty TLS struct, e.g. - in YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - passthrough: - type: boolean - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/ingressrouteudp.yaml b/stable/traefik/7.1.2/crds/ingressrouteudp.yaml deleted file mode 100644 index 910acd6c270..00000000000 --- a/stable/traefik/7.1.2/crds/ingressrouteudp.yaml +++ /dev/null @@ -1,84 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressrouteudps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteUDP - listKind: IngressRouteUDPList - plural: ingressrouteudps - singular: ingressrouteudp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteUDP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteUDPSpec is a specification for a IngressRouteUDPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteUDP contains the set of routes. - properties: - services: - items: - description: ServiceUDP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - weight: - type: integer - required: - - name - - port - type: object - type: array - type: object - type: array - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/middlewares.yaml b/stable/traefik/7.1.2/crds/middlewares.yaml deleted file mode 100644 index 1770587a327..00000000000 --- a/stable/traefik/7.1.2/crds/middlewares.yaml +++ /dev/null @@ -1,563 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewares.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: Middleware - listKind: MiddlewareList - plural: middlewares - singular: middleware - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: Middleware is a specification for a Middleware resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareSpec holds the Middleware configuration. - properties: - addPrefix: - description: AddPrefix holds the AddPrefix configuration. - properties: - prefix: - type: string - type: object - basicAuth: - description: BasicAuth holds the HTTP basic authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - buffering: - description: Buffering holds the request/response buffering configuration. - properties: - maxRequestBodyBytes: - format: int64 - type: integer - maxResponseBodyBytes: - format: int64 - type: integer - memRequestBodyBytes: - format: int64 - type: integer - memResponseBodyBytes: - format: int64 - type: integer - retryExpression: - type: string - type: object - chain: - description: Chain holds a chain of middlewares. - properties: - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - type: object - circuitBreaker: - description: CircuitBreaker holds the circuit breaker configuration. - properties: - expression: - type: string - type: object - compress: - description: Compress holds the compress configuration. - properties: - excludedContentTypes: - items: - type: string - type: array - type: object - contentType: - description: ContentType middleware - or rather its unique `autoDetect` - option - specifies whether to let the `Content-Type` header, if - it has not been set by the backend, be automatically set to a value - derived from the contents of the response. As a proxy, the default - behavior should be to leave the header alone, regardless of what - the backend did with it. However, the historic default was to always - auto-detect and set the header if it was nil, and it is going to - be kept that way in order to support users currently relying on - it. This middleware exists to enable the correct behavior until - at least the default one can be changed in a future version. - properties: - autoDetect: - type: boolean - type: object - digestAuth: - description: DigestAuth holds the Digest HTTP authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - errors: - description: ErrorPage holds the custom error page configuration. - properties: - query: - type: string - service: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the - forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - status: - items: - type: string - type: array - type: object - forwardAuth: - description: ForwardAuth holds the http forward authentication configuration. - properties: - address: - type: string - authRequestHeaders: - items: - type: string - type: array - authResponseHeaders: - items: - type: string - type: array - authResponseHeadersRegex: - type: string - tls: - description: ClientTLS holds TLS specific configurations as client. - properties: - caOptional: - type: boolean - caSecret: - type: string - certSecret: - type: string - insecureSkipVerify: - type: boolean - type: object - trustForwardHeader: - type: boolean - type: object - headers: - description: Headers holds the custom header configuration. - properties: - accessControlAllowCredentials: - description: AccessControlAllowCredentials is only valid if true. - false is ignored. - type: boolean - accessControlAllowHeaders: - description: AccessControlAllowHeaders must be used in response - to a preflight request with Access-Control-Request-Headers set. - items: - type: string - type: array - accessControlAllowMethods: - description: AccessControlAllowMethods must be used in response - to a preflight request with Access-Control-Request-Method set. - items: - type: string - type: array - accessControlAllowOriginList: - description: AccessControlAllowOriginList is a list of allowable - origins. Can also be a wildcard origin "*". - items: - type: string - type: array - accessControlAllowOriginListRegex: - description: AccessControlAllowOriginListRegex is a list of allowable - origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/). - items: - type: string - type: array - accessControlExposeHeaders: - description: AccessControlExposeHeaders sets valid headers for - the response. - items: - type: string - type: array - accessControlMaxAge: - description: AccessControlMaxAge sets the time that a preflight - request may be cached. - format: int64 - type: integer - addVaryHeader: - description: AddVaryHeader controls if the Vary header is automatically - added/updated when the AccessControlAllowOriginList is set. - type: boolean - allowedHosts: - items: - type: string - type: array - browserXssFilter: - type: boolean - contentSecurityPolicy: - type: string - contentTypeNosniff: - type: boolean - customBrowserXSSValue: - type: string - customFrameOptionsValue: - type: string - customRequestHeaders: - additionalProperties: - type: string - type: object - customResponseHeaders: - additionalProperties: - type: string - type: object - featurePolicy: - type: string - forceSTSHeader: - type: boolean - frameDeny: - type: boolean - hostsProxyHeaders: - items: - type: string - type: array - isDevelopment: - type: boolean - publicKey: - type: string - referrerPolicy: - type: string - sslForceHost: - description: 'Deprecated: use RedirectRegex instead.' - type: boolean - sslHost: - description: 'Deprecated: use RedirectRegex instead.' - type: string - sslProxyHeaders: - additionalProperties: - type: string - type: object - sslRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - sslTemporaryRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - stsIncludeSubdomains: - type: boolean - stsPreload: - type: boolean - stsSeconds: - format: int64 - type: integer - type: object - inFlightReq: - description: InFlightReq limits the number of requests being processed - and served concurrently. - properties: - amount: - format: int64 - type: integer - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - ipWhiteList: - description: IPWhiteList holds the ip white list configuration. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - sourceRange: - items: - type: string - type: array - type: object - passTLSClientCert: - description: PassTLSClientCert holds the TLS client cert headers configuration. - properties: - info: - description: TLSClientCertificateInfo holds the client TLS certificate - info configuration. - properties: - issuer: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - notAfter: - type: boolean - notBefore: - type: boolean - sans: - type: boolean - serialNumber: - type: boolean - subject: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - type: object - pem: - type: boolean - type: object - plugin: - additionalProperties: - x-kubernetes-preserve-unknown-fields: true - type: object - rateLimit: - description: RateLimit holds the rate limiting configuration for a - given router. - properties: - average: - format: int64 - type: integer - burst: - format: int64 - type: integer - period: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - redirectRegex: - description: RedirectRegex holds the redirection configuration. - properties: - permanent: - type: boolean - regex: - type: string - replacement: - type: string - type: object - redirectScheme: - description: RedirectScheme holds the scheme redirection configuration. - properties: - permanent: - type: boolean - port: - type: string - scheme: - type: string - type: object - replacePath: - description: ReplacePath holds the ReplacePath configuration. - properties: - path: - type: string - type: object - replacePathRegex: - description: ReplacePathRegex holds the ReplacePathRegex configuration. - properties: - regex: - type: string - replacement: - type: string - type: object - retry: - description: Retry holds the retry configuration. - properties: - attempts: - type: integer - initialInterval: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - type: object - stripPrefix: - description: StripPrefix holds the StripPrefix configuration. - properties: - forceSlash: - type: boolean - prefixes: - items: - type: string - type: array - type: object - stripPrefixRegex: - description: StripPrefixRegex holds the StripPrefixRegex configuration. - properties: - regex: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/middlewarestcp.yaml b/stable/traefik/7.1.2/crds/middlewarestcp.yaml deleted file mode 100644 index f0d1d5640bd..00000000000 --- a/stable/traefik/7.1.2/crds/middlewarestcp.yaml +++ /dev/null @@ -1,59 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewaretcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: MiddlewareTCP - listKind: MiddlewareTCPList - plural: middlewaretcps - singular: middlewaretcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: MiddlewareTCP is a specification for a MiddlewareTCP resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareTCPSpec holds the MiddlewareTCP configuration. - properties: - ipWhiteList: - description: TCPIPWhiteList holds the TCP ip white list configuration. - properties: - sourceRange: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/serverstransports.yaml b/stable/traefik/7.1.2/crds/serverstransports.yaml deleted file mode 100644 index 78241697d1a..00000000000 --- a/stable/traefik/7.1.2/crds/serverstransports.yaml +++ /dev/null @@ -1,101 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: serverstransports.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: ServersTransport - listKind: ServersTransportList - plural: serverstransports - singular: serverstransport - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: ServersTransport is a specification for a ServersTransport resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServersTransportSpec options to configure communication between - Traefik and the servers. - properties: - certificatesSecrets: - description: Certificates for mTLS. - items: - type: string - type: array - disableHTTP2: - description: Disable HTTP/2 for connections with backend servers. - type: boolean - forwardingTimeouts: - description: Timeouts for requests forwarded to the backend servers. - properties: - dialTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait until a connection to - a backend server can be established. If zero, no timeout exists. - x-kubernetes-int-or-string: true - idleConnTimeout: - anyOf: - - type: integer - - type: string - description: The maximum period for which an idle HTTP keep-alive - connection will remain open before closing itself. - x-kubernetes-int-or-string: true - responseHeaderTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait for a server's response - headers after fully writing the request (including its body, - if any). If zero, no timeout exists. - x-kubernetes-int-or-string: true - type: object - insecureSkipVerify: - description: Disable SSL certificate verification. - type: boolean - maxIdleConnsPerHost: - description: If non-zero, controls the maximum idle (keep-alive) to - keep per-host. If zero, DefaultMaxIdleConnsPerHost is used. - type: integer - rootCAsSecrets: - description: Add cert file for self-signed certificate. - items: - type: string - type: array - serverName: - description: ServerName used to contact the server. - type: string - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/tlsoptions.yaml b/stable/traefik/7.1.2/crds/tlsoptions.yaml deleted file mode 100644 index c901ac2df5e..00000000000 --- a/stable/traefik/7.1.2/crds/tlsoptions.yaml +++ /dev/null @@ -1,87 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsoptions.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSOption - listKind: TLSOptionList - plural: tlsoptions - singular: tlsoption - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSOption is a specification for a TLSOption resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSOptionSpec configures TLS for an entry point. - properties: - cipherSuites: - items: - type: string - type: array - clientAuth: - description: ClientAuth defines the parameters of the client authentication - part of the TLS connection, if any. - properties: - clientAuthType: - description: ClientAuthType defines the client authentication - type to apply. - enum: - - NoClientCert - - RequestClientCert - - VerifyClientCertIfGiven - - RequireAndVerifyClientCert - type: string - secretNames: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - items: - type: string - type: array - type: object - curvePreferences: - items: - type: string - type: array - maxVersion: - type: string - minVersion: - type: string - preferServerCipherSuites: - type: boolean - sniStrict: - type: boolean - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/tlsstores.yaml b/stable/traefik/7.1.2/crds/tlsstores.yaml deleted file mode 100644 index 7bb6193b026..00000000000 --- a/stable/traefik/7.1.2/crds/tlsstores.yaml +++ /dev/null @@ -1,64 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsstores.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSStore - listKind: TLSStoreList - plural: tlsstores - singular: tlsstore - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSStore is a specification for a TLSStore resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSStoreSpec configures a TLSStore resource. - properties: - defaultCertificate: - description: DefaultCertificate holds a secret name for the TLSOption - resource. - properties: - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - required: - - secretName - type: object - required: - - defaultCertificate - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/crds/traefikservices.yaml b/stable/traefik/7.1.2/crds/traefikservices.yaml deleted file mode 100644 index 1d98c25d68d..00000000000 --- a/stable/traefik/7.1.2/crds/traefikservices.yaml +++ /dev/null @@ -1,270 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: traefikservices.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TraefikService - listKind: TraefikServiceList - plural: traefikservices - singular: traefikservice - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TraefikService is the specification for a service (that an IngressRoute - refers to) that is usually not a terminal service (i.e. not a pod of servers), - as opposed to a Kubernetes Service. That is to say, it usually refers to - other (children) services, which themselves can be TraefikServices or Services. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServiceSpec defines whether a TraefikService is a load-balancer - of services or a mirroring service. - properties: - mirroring: - description: Mirroring defines a mirroring service, which is composed - of a main load-balancer, and a list of mirrors. - properties: - kind: - enum: - - Service - - TraefikService - type: string - maxBodySize: - format: int64 - type: integer - mirrors: - items: - description: MirrorService defines one of the mirrors of a Mirroring - service. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - percent: - type: integer - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService object - (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the forward - of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - weighted: - description: WeightedRoundRobin defines a load-balancer of services. - properties: - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.2/helm-values.md b/stable/traefik/7.1.2/helm-values.md deleted file mode 100644 index 9e570f86dd6..00000000000 --- a/stable/traefik/7.1.2/helm-values.md +++ /dev/null @@ -1,50 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| additionalArguments[0] | string | `"--metrics.prometheus"` | | -| additionalArguments[1] | string | `"--ping"` | | -| additionalArguments[2] | string | `"--serverstransport.insecureskipverify=true"` | | -| additionalArguments[3] | string | `"--providers.kubernetesingress.allowexternalnameservices=true"` | | -| globalArguments[0] | string | `"--global.checknewversion"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"traefik"` | | -| image.tag | string | `"v2.5.2"` | | -| ingressClass | object | `{"enabled":false,"fallbackApiVersion":"","isDefaultClass":false}` | Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x | -| ingressRoute | object | `{"dashboard":{"annotations":{},"enabled":true,"labels":{}}}` | Create an IngressRoute for the dashboard | -| logs | object | `{"access":{"enabled":false,"fields":{"general":{"defaultmode":"keep","names":{}},"headers":{"defaultmode":"drop","names":{}}},"filters":{}},"general":{"level":"ERROR"}}` | Logs https://docs.traefik.io/observability/logs/ | -| metrics.prometheus.entryPoint | string | `"metrics"` | | -| middlewares | object | `{"basicAuth":[],"chain":[],"forwardAuth":[],"ipWhiteList":[],"rateLimit":[],"redirectRegex":[],"redirectScheme":[]}` | SCALE Middleware Handlers | -| pilot | object | `{"enabled":false,"token":""}` | Activate Pilot integration | -| podSecurityContext.fsGroup | int | `568` | | -| portalhook.enabled | bool | `true` | | -| probes.liveness | object | See below | Liveness probe configuration | -| probes.liveness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.liveness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.readiness | object | See below | Redainess probe configuration | -| probes.readiness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.readiness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.startup | object | See below | Startup probe configuration | -| probes.startup.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.startup.type | string | "TCP" | sets the probe type when not using a custom probe | -| providers.kubernetesCRD.enabled | bool | `true` | | -| providers.kubernetesCRD.namespaces | list | `[]` | | -| providers.kubernetesIngress.enabled | bool | `true` | | -| providers.kubernetesIngress.namespaces | list | `[]` | | -| providers.kubernetesIngress.publishedService.enabled | bool | `true` | | -| rbac | object | `{"enabled":true,"rules":[{"apiGroups":[""],"resources":["services","endpoints","secrets"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses","ingressclasses"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses/status"],"verbs":["update"]},{"apiGroups":["traefik.containo.us"],"resources":["ingressroutes","ingressroutetcps","ingressrouteudps","middlewares","middlewaretcps","tlsoptions","tlsstores","traefikservices","serverstransports"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created | -| securityContext | object | `{"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsGroup":568,"runAsNonRoot":true,"runAsUser":568}` | Set the container security context To run the container with ports below 1024 this will need to be adjust to run as root | -| service | object | `{"main":{"enabled":true,"ports":{"main":{"enabled":true,"port":9000,"protocol":"HTTP"}},"type":"LoadBalancer"},"metrics":{"enabled":true,"ports":{"metrics":{"enabled":true,"port":9100,"protocol":"HTTP"}},"type":"LoadBalancer"},"tcp":{"enabled":true,"ports":{"web":{"enabled":true,"port":9080,"protocol":"HTTP","redirectTo":"websecure"},"websecure":{"enabled":true,"port":9443,"protocol":"HTTPS"}},"type":"LoadBalancer"},"udp":{"enabled":false}}` | Options for the main traefik service, where the entrypoints traffic comes from from. | -| serviceAccount | object | `{"enabled":true,"name":""}` | The service account the pods will use to interact with the Kubernetes API | -| tlsOptions | object | `{"default":{"cipherSuites":["TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305","TLS_AES_128_GCM_SHA256","TLS_AES_256_GCM_SHA384","TLS_CHACHA20_POLY1305_SHA256"],"curvePreferences":["CurveP521","CurveP384"],"minVersion":"VersionTLS12","sniStrict":false}}` | TLS Options to be created as TLSOption CRDs https://doc.traefik.io/traefik/https/tls/#tls-options Example: | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.2/ix_values.yaml b/stable/traefik/7.1.2/ix_values.yaml deleted file mode 100644 index b940b843664..00000000000 --- a/stable/traefik/7.1.2/ix_values.yaml +++ /dev/null @@ -1,181 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5.2 - pullPolicy: IfNotPresent - -# Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# Configure providers -# -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -# -# Configure Traefik static configuration -# Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - -# TLS Options are created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - - - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.2/questions.yaml b/stable/traefik/7.1.2/questions.yaml deleted file mode 100644 index 047d70d5c75..00000000000 --- a/stable/traefik/7.1.2/questions.yaml +++ /dev/null @@ -1,1258 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Middlewares" - description: "Traefik Middlewares" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "http" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" - path: "/dashboard/" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "RollingUpdate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: pilot - label: "Traefik Pilot" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: token - label: "token" - schema: - type: string - default: "" - - variable: dashboard - label: "Pilot Dashboard" - schema: - type: boolean - default: false - - - variable: ingressClass - label: "ingressClass" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: isDefaultClass - label: "isDefaultClass" - schema: - type: boolean - default: false - - - variable: logs - label: "Logs" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: general - label: "General Logs" - schema: - type: dict - attrs: - - variable: level - label: "Log Level" - schema: - type: string - default: "ERROR" - enum: - - value: "INFO" - description: "Info" - - value: "WARN" - description: "Warnings" - - value: "ERROR" - description: "Errors" - - value: "FATAL" - description: "Fatal Errors" - - value: "PANIC" - description: "Panics" - - value: "DEBUG" - description: "Debug" - - variable: access - label: "Access Logs" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: enabledFilters - label: "Enable Filters" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: filters - label: "Filters" - schema: - type: dict - attrs: - - variable: statuscodes - label: "Status codes" - schema: - type: string - default: "200,300-302" - - variable: retryattempts - label: "retryattempts" - schema: - type: boolean - default: true - - variable: minduration - label: "minduration" - schema: - type: string - default: "10ms" - - variable: fields - label: "Fields" - schema: - type: dict - attrs: - - variable: general - label: "General" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "keep" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - variable: headers - label: "Headers" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "drop" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - - variable: middlewares - label: "" - group: "Middlewares" - schema: - type: dict - attrs: - - variable: basicAuth - label: "basicAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: users - label: "Users" - schema: - type: list - default: [] - items: - - variable: usersEntry - label: "" - schema: - type: dict - attrs: - - variable: username - label: "Username" - schema: - type: string - required: true - default: "" - - variable: password - label: "Password" - schema: - type: string - required: true - default: "" - - - - variable: forwardAuth - label: "forwardAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: address - label: "Address" - schema: - type: string - required: true - default: "" - - variable: trustForwardHeader - label: "trustForwardHeader" - schema: - type: boolean - default: false - - variable: authResponseHeadersRegex - label: "authResponseHeadersRegex" - schema: - type: string - default: "" - - variable: authResponseHeaders - label: "authResponseHeaders" - schema: - type: list - default: [] - items: - - variable: authResponseHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: authRequestHeaders - label: "authRequestHeaders" - schema: - type: list - default: [] - items: - - variable: authRequestHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: chain - label: "chain" - schema: - type: list - default: [] - items: - - variable: chainEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: middlewares - label: "Middlewares to Chain" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - - variable: redirectScheme - label: "redirectScheme" - schema: - type: list - default: [] - items: - - variable: redirectSchemeEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: scheme - label: "Scheme" - schema: - type: string - required: true - default: "https" - enum: - - value: "https" - description: "https" - - value: "http" - description: "http" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: rateLimit - label: "rateLimit" - schema: - type: list - default: [] - items: - - variable: rateLimitEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: average - label: "Average" - schema: - type: int - required: true - default: 300 - - variable: burst - label: "Burst" - schema: - type: int - required: true - default: 200 - - variable: redirectRegex - label: "redirectRegex" - schema: - type: list - default: [] - items: - - variable: redirectRegexEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: regex - label: "Regex" - schema: - type: string - required: true - default: "" - - variable: replacement - label: "Replacement" - schema: - type: string - required: true - default: "" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: ipWhiteList - label: "ipWhiteList" - schema: - type: list - default: [] - items: - - variable: ipWhiteListEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: sourceRange - label: "Source Range" - schema: - type: list - default: [] - items: - - variable: sourceRangeEntry - label: "" - schema: - type: string - required: true - default: "" - - variable: ipStrategy - label: "IP Strategy" - schema: - type: dict - attrs: - - variable: depth - label: "Depth" - schema: - type: int - required: true - - variable: excludedIPs - label: "Excluded IPs" - schema: - type: list - default: [] - items: - - variable: excludedIPsEntry - label: "" - schema: - type: string - required: true - default: "" - - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - - variable: service - group: "Networking and Services" - label: "Configure Service Entrypoint" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: main - label: "Main Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9000 - editable: false - hidden: true - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9000 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9000 - - variable: tcp - label: "Main Service" - description: "The tcp Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: web - label: "web Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9080 - editable: true - required: true - - variable: redirectTo - label: "Redirect to" - schema: - type: string - default: "websecure" - - variable: websecure - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTPS" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9443 - editable: true - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - - variable: udp - label: "UDP Service" - description: "The UDP service for entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "UDP" - enum: - - value: UDP - description: "UDP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: metrics - label: "metrics Service" - description: "The metrics Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: metrics - label: "metrics Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9100 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 9100 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9100 - - - variable: securityContext - group: "Security and Permissions" - label: "Security Context" - schema: - type: dict - attrs: - - variable: privileged - label: "Privileged mode" - schema: - type: boolean - default: false - - variable: readOnlyRootFilesystem - label: "ReadOnly Root Filesystem" - schema: - type: boolean - default: true - - variable: allowPrivilegeEscalation - label: "Allow Privilege Escalation" - schema: - type: boolean - default: false - - - variable: podSecurityContext - group: "Security and Permissions" - label: "Pod Security Context" - schema: - type: dict - attrs: - - variable: runAsNonRoot - label: "runAsNonRoot" - schema: - type: boolean - default: true - - variable: runAsUser - label: "runAsUser" - description: "The UserID of the user running the application" - schema: - type: int - default: 568 - - variable: runAsGroup - label: "runAsGroup" - description: The groupID this App of the user running the application" - schema: - type: int - default: 568 - - variable: fsGroup - label: "fsGroup" - description: "The group that should own ALL storage." - schema: - type: int - default: 568 - - variable: supplementalGroups - label: "supplemental Groups" - schema: - type: list - default: [] - items: - - variable: supplementalGroupsEntry - label: "supplemental Group" - schema: - type: int - - variable: fsGroupChangePolicy - label: "When should we take ownership?" - schema: - type: string - default: "OnRootMismatch" - enum: - - value: "OnRootMismatch" - description: "OnRootMismatch" - - value: "Always" - description: "Always" - - - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/traefik/7.1.2/templates/_args.tpl b/stable/traefik/7.1.2/templates/_args.tpl deleted file mode 100644 index 41e7e44b8fd..00000000000 --- a/stable/traefik/7.1.2/templates/_args.tpl +++ /dev/null @@ -1,141 +0,0 @@ -{{/* Define the args */}} -{{- define "traefik.args" -}} -args: - {{/* merge all ports */}} - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{/* start of actual arguments */}} - {{- with .Values.globalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} - {{- range $name, $config := $ports }} - {{- if $config }} - {{- if or ( eq $config.protocol "HTTP" ) ( eq $config.protocol "HTTPS" ) ( eq $config.protocol "TCP" ) }} - {{- $_ := set $config "protocol" "TCP" }} - {{- end }} - - "--entryPoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}" - {{- end }} - {{- end }} - - "--api.dashboard=true" - - "--ping=true" - {{- if .Values.metrics }} - {{- if .Values.metrics.datadog }} - - "--metrics.datadog=true" - - "--metrics.datadog.address={{ .Values.metrics.datadog.address }}" - {{- end }} - {{- if .Values.metrics.influxdb }} - - "--metrics.influxdb=true" - - "--metrics.influxdb.address={{ .Values.metrics.influxdb.address }}" - - "--metrics.influxdb.protocol={{ .Values.metrics.influxdb.protocol }}" - {{- end }} - {{- if .Values.metrics.prometheus }} - - "--metrics.prometheus=true" - - "--metrics.prometheus.entrypoint={{ .Values.metrics.prometheus.entryPoint }}" - {{- end }} - {{- if .Values.metrics.statsd }} - - "--metrics.statsd=true" - - "--metrics.statsd.address={{ .Values.metrics.statsd.address }}" - {{- end }} - {{- end }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress" - {{- if and .Values.providers.kubernetesIngress.publishedService.enabled }} - - "--providers.kubernetesingress.ingressendpoint.publishedservice={{ template "providers.kubernetesIngress.publishedServicePath" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.labelSelector }} - - "--providers.kubernetesingress.labelSelector={{ .Values.providers.kubernetesIngress.labelSelector }}" - {{- end }} - {{- end }} - {{- if and .Values.rbac.enabled .Values.rbac.namespaced }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd.namespaces={{ template "providers.kubernetesCRD.namespaces" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}" - {{- end }} - {{- end }} - {{- range $entrypoint, $config := $ports }} - {{- if $config.redirectTo }} - {{- $toPort := index $ports $config.redirectTo }} - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $toPort.port }}" - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https" - {{- end }} - {{- if or ( $config.tls ) ( eq $config.protocol "HTTPS" ) }} - {{- if or ( $config.tls.enabled ) ( eq $config.protocol "HTTPS" ) }} - - "--entrypoints.{{ $entrypoint }}.http.tls=true" - {{- if $config.tls.options }} - - "--entrypoints.{{ $entrypoint }}.http.tls.options={{ $config.tls.options }}" - {{- end }} - {{- if $config.tls.certResolver }} - - "--entrypoints.{{ $entrypoint }}.http.tls.certResolver={{ $config.tls.certResolver }}" - {{- end }} - {{- if $config.tls.domains }} - {{- range $index, $domain := $config.tls.domains }} - {{- if $domain.main }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].main={{ $domain.main }}" - {{- end }} - {{- if $domain.sans }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].sans={{ join "," $domain.sans }}" - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- with .Values.logs }} - {{- if .general.format }} - - "--log.format={{ .general.format }}" - {{- end }} - {{- if ne .general.level "ERROR" }} - - "--log.level={{ .general.level | upper }}" - {{- end }} - {{- if .access.enabled }} - - "--accesslog=true" - {{- if .access.format }} - - "--accesslog.format={{ .access.format }}" - {{- end }} - {{- if .access.bufferingsize }} - - "--accesslog.bufferingsize={{ .access.bufferingsize }}" - {{- end }} - {{- if .access.filters }} - {{- if .access.filters.statuscodes }} - - "--accesslog.filters.statuscodes={{ .access.filters.statuscodes }}" - {{- end }} - {{- if .access.filters.retryattempts }} - - "--accesslog.filters.retryattempts" - {{- end }} - {{- if .access.filters.minduration }} - - "--accesslog.filters.minduration={{ .access.filters.minduration }}" - {{- end }} - {{- end }} - - "--accesslog.fields.defaultmode={{ .access.fields.general.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.general.names }} - - "--accesslog.fields.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - - "--accesslog.fields.headers.defaultmode={{ .access.fields.headers.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.headers.names }} - - "--accesslog.fields.headers.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - {{- end }} - {{- end }} - {{- if .Values.pilot.enabled }} - - "--pilot.token={{ .Values.pilot.token }}" - {{- end }} - {{- if hasKey .Values.pilot "dashboard" }} - - "--pilot.dashboard={{ .Values.pilot.dashboard }}" - {{- end }} - {{- with .Values.additionalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.2/templates/_helpers.tpl b/stable/traefik/7.1.2/templates/_helpers.tpl deleted file mode 100644 index 8c6c4ac96bc..00000000000 --- a/stable/traefik/7.1.2/templates/_helpers.tpl +++ /dev/null @@ -1,22 +0,0 @@ -{{/* -Construct the path for the providers.kubernetesingress.ingressendpoint.publishedservice. -By convention this will simply use the / to match the name of the -service generated. -Users can provide an override for an explicit service they want bound via `.Values.providers.kubernetesIngress.publishedService.pathOverride` -*/}} -{{- define "providers.kubernetesIngress.publishedServicePath" -}} -{{- $fullName := include "common.names.fullname" . -}} -{{- $defServiceName := printf "%s/%s-tcp" .Release.Namespace $fullName -}} -{{- $servicePath := default $defServiceName .Values.providers.kubernetesIngress.publishedService.pathOverride }} -{{- print $servicePath | trimSuffix "-" -}} -{{- end -}} - -{{/* -Construct a comma-separated list of whitelisted namespaces -*/}} -{{- define "providers.kubernetesIngress.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesIngress.namespaces) }} -{{- end -}} -{{- define "providers.kubernetesCRD.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesCRD.namespaces) }} -{{- end -}} diff --git a/stable/traefik/7.1.2/templates/_ingressclass.tpl b/stable/traefik/7.1.2/templates/_ingressclass.tpl deleted file mode 100644 index 27f8467fc9e..00000000000 --- a/stable/traefik/7.1.2/templates/_ingressclass.tpl +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Define the ingressClass */}} -{{- define "traefik.ingressClass" -}} -{{- if .Values.ingressClass.enabled }} - {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1/IngressClass" }} -apiVersion: networking.k8s.io/v1 - {{- else if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1/IngressClass" }} -apiVersion: networking.k8s.io/v1beta1 - {{- else if or (eq .Values.ingressClass.fallbackApiVersion "v1beta1") (eq .Values.ingressClass.fallbackApiVersion "v1") }} -apiVersion: {{ printf "networking.k8s.io/%s" .Values.ingressClass.fallbackApiVersion }} - {{- else }} - {{- fail "\n\n ERROR: You must have at least networking.k8s.io/v1beta1 to use ingressClass" }} - {{- end }} ---- -kind: IngressClass -metadata: - annotations: - ingressclass.kubernetes.io/is-default-class: {{ .Values.ingressClass.isDefaultClass | quote }} - labels: - {{- include "common.labels" . | nindent 4 }} - name: {{ .Release.Name }} -spec: - controller: traefik.io/ingress-controller -{{- end }} -{{- end }} diff --git a/stable/traefik/7.1.2/templates/_ingressroute.tpl b/stable/traefik/7.1.2/templates/_ingressroute.tpl deleted file mode 100644 index 83312040d92..00000000000 --- a/stable/traefik/7.1.2/templates/_ingressroute.tpl +++ /dev/null @@ -1,25 +0,0 @@ -{{/* Define the ingressRoute */}} -{{- define "traefik.ingressRoute" -}} -{{- if .Values.ingressRoute.dashboard.enabled -}} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: {{ include "common.names.fullname" . }}-dashboard - annotations: - {{- with .Values.ingressRoute.dashboard.annotations }} - {{- toYaml . | nindent 4 }} - {{- end }} - labels: - {{- include "common.labels" . | nindent 4 }} -spec: - entryPoints: - - main - routes: - - match: PathPrefix(`/dashboard`) || PathPrefix(`/api`) - kind: Rule - services: - - name: api@internal - kind: TraefikService -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.2/templates/_portalhook.tpl b/stable/traefik/7.1.2/templates/_portalhook.tpl deleted file mode 100644 index e3586c5d4e9..00000000000 --- a/stable/traefik/7.1.2/templates/_portalhook.tpl +++ /dev/null @@ -1,26 +0,0 @@ -{{/* Define the portalHook */}} -{{- define "traefik.portalhook" -}} -{{- if .Values.portalhook.enabled }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- - -apiVersion: v1 -kind: ConfigMap -metadata: - name: portalhook - namespace: {{ $namespace }} -data: - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{- range $name, $value := $ports }} - {{ $name }}: {{ $value.port | quote }} - {{- end }} -{{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.2/templates/_tlsoptions.tpl b/stable/traefik/7.1.2/templates/_tlsoptions.tpl deleted file mode 100644 index 3ca31af0859..00000000000 --- a/stable/traefik/7.1.2/templates/_tlsoptions.tpl +++ /dev/null @@ -1,12 +0,0 @@ -{{/* Define the tlsOptions */}} -{{- define "traefik.tlsOptions" -}} -{{- range $name, $config := .Values.tlsOptions }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: TLSOption -metadata: - name: {{ $name }} -spec: - {{- toYaml $config | nindent 2 }} -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.2/templates/common.yaml b/stable/traefik/7.1.2/templates/common.yaml deleted file mode 100644 index a3ba841bdd7..00000000000 --- a/stable/traefik/7.1.2/templates/common.yaml +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{- if .Values.metrics }} -{{- if .Values.metrics.prometheus }} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "true" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/path" "/metrics" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "9100" -}} -{{- end }} -{{- end }} - -{{- $newArgs := (include "traefik.args" . | fromYaml) }} -{{- $_ := set .Values "newArgs" $newArgs -}} -{{- $mergedargs := concat .Values.args .Values.newArgs.args }} -{{- $_ := set .Values "args" $mergedargs -}} - -{{- include "traefik.portalhook" . }} -{{- include "traefik.tlsOptions" . }} -{{- include "traefik.ingressRoute" . }} -{{- include "traefik.ingressClass" . }} - - -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/stable/traefik/7.1.2/templates/middlewares/basic-middleware.yaml b/stable/traefik/7.1.2/templates/middlewares/basic-middleware.yaml deleted file mode 100644 index 145f5c9a594..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/basic-middleware.yaml +++ /dev/null @@ -1,63 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: compress - namespace: {{ $namespace }} -spec: - compress: {} ---- -# Here, an average of 300 requests per second is allowed. -# In addition, a burst of 200 requests is allowed. -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-ratelimit - namespace: {{ $namespace }} -spec: - rateLimit: - average: 300 - burst: 200 ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-secure-headers - namespace: {{ $namespace }} -spec: - headers: - accessControlAllowMethods: - - GET - - OPTIONS - - HEAD - - PUT - accessControlMaxAge: 100 - sslRedirect: true - # stsSeconds: 63072000 - # stsIncludeSubdomains: false - # stsPreload: false - # forceSTSHeader: true - contentTypeNosniff: true - browserXssFilter: true - sslForceHost: true - referrerPolicy: same-origin - customResponseHeaders: - X-Robots-Tag: 'none' - server: '' ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: chain-basic - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: basic-ratelimit - - name: basic-secure-headers - - name: compress diff --git a/stable/traefik/7.1.2/templates/middlewares/basicauth.yaml b/stable/traefik/7.1.2/templates/middlewares/basicauth.yaml deleted file mode 100644 index ccb541742f0..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/basicauth.yaml +++ /dev/null @@ -1,34 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.basicAuth }} ---- -{{- $users := list }} -{{ range $index, $userdata := $middlewareData.users }} - {{ $users = append $users ( htpasswd $userdata.username $userdata.password ) }} -{{ end }} - -apiVersion: v1 -kind: Secret -metadata: - name: {{printf "%v-%v" $middlewareData.name "secret" }} - namespace: {{ $namespace }} -type: Opaque -stringData: - users: | - {{- range $index, $user := $users }} - {{ printf "%s" $user }} - {{- end }} ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - basicAuth: - secret: {{printf "%v-%v" $middlewareData.name "secret" }} -{{ end }} diff --git a/stable/traefik/7.1.2/templates/middlewares/chain.yaml b/stable/traefik/7.1.2/templates/middlewares/chain.yaml deleted file mode 100644 index e22eb312207..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/chain.yaml +++ /dev/null @@ -1,21 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.chain }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - chain: - middlewares: - {{ range $index, $chainData := . }} - - name: {{ printf "%v-%v@%v" $namespace $chainData.name "kubernetescrd" }} - {{ end }} -{{ end }} diff --git a/stable/traefik/7.1.2/templates/middlewares/forwardauth.yaml b/stable/traefik/7.1.2/templates/middlewares/forwardauth.yaml deleted file mode 100644 index 53f4ef5cc18..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/forwardauth.yaml +++ /dev/null @@ -1,28 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.forwardAuth }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - forwardAuth: - address: {{ $middlewareData.address }} - {{- if $middlewareData.authResponseHeaders }} - authResponseHeaders: {{ $middlewareData.authResponseHeaders }} - {{- end }} - {{- if $middlewareData.authRequestHeaders }} - authRequestHeaders: {{ $middlewareData.authRequestHeaders }} - {{- end }} - {{- if $middlewareData.authResponseHeadersRegex }} - authResponseHeadersRegex: {{ $middlewareData.authResponseHeadersRegex }} - {{- end }} - {{- if $middlewareData.trustForwardHeader }} - trustForwardHeader: true - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.2/templates/middlewares/ipwhitelist.yaml b/stable/traefik/7.1.2/templates/middlewares/ipwhitelist.yaml deleted file mode 100644 index 82467dea0b9..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/ipwhitelist.yaml +++ /dev/null @@ -1,33 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.ipWhiteList }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - ipWhiteList: - sourceRange: - {{- range $middlewareData.sourceRange }} - - {{ . }} - {{- end }} - {{- if $middlewareData.ipStrategy }} - ipStrategy: - {{- if $middlewareData.ipStrategy.depth }} - depth: {{ $middlewareData.ipStrategy.depth }} - {{- end }} - {{- if $middlewareData.ipStrategy.excludedIPs }} - excludedIPs: - {{- range $middlewareData.ipStrategy.excludedIPs }} - - {{ . }} - {{- end }} - {{- end }} - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.2/templates/middlewares/ratelimit.yaml b/stable/traefik/7.1.2/templates/middlewares/ratelimit.yaml deleted file mode 100644 index 144b9d8bf38..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/ratelimit.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.rateLimit }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - rateLimit: - average: {{ $middlewareData.average }} - burst: {{ $middlewareData.burst }} -{{ end }} diff --git a/stable/traefik/7.1.2/templates/middlewares/redirectScheme.yaml b/stable/traefik/7.1.2/templates/middlewares/redirectScheme.yaml deleted file mode 100644 index f2413f84e19..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/redirectScheme.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectScheme }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectScheme: - scheme: {{ $middlewareData.scheme }} - permanent: {{ $middlewareData.permanent }} -{{ end }} diff --git a/stable/traefik/7.1.2/templates/middlewares/redirectregex.yaml b/stable/traefik/7.1.2/templates/middlewares/redirectregex.yaml deleted file mode 100644 index 683aec93d72..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/redirectregex.yaml +++ /dev/null @@ -1,20 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectRegex }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: {{ $middlewareData.regex | quote }} - replacement: {{ $middlewareData.replacement | quote }} - permanent: {{ $middlewareData.replacement }} -{{ end }} diff --git a/stable/traefik/7.1.2/templates/middlewares/tc-nextcloud.yaml b/stable/traefik/7.1.2/templates/middlewares/tc-nextcloud.yaml deleted file mode 100644 index 68acb00d210..00000000000 --- a/stable/traefik/7.1.2/templates/middlewares/tc-nextcloud.yaml +++ /dev/null @@ -1,65 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-headers - namespace: {{ $namespace }} -spec: - headers: - stsSeconds: 63072000 - forceSTSHeader: true ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-dav -spec: - redirectRegex: - regex: "https://(.*)/.well-known/(card|cal)dav" - replacement: "https://${1}/remote.php/dav/" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-finger -spec: - redirectRegex: - regex: "https://(.*)/.well-known/webfinger" - replacement: "https://${1}/public.php?service=webfinger" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmeta -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta" - replacement: "https://${1}/public.php?service=host-meta" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmetajson -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta.json" - replacement: "https://${1}/public.php?service=host-meta-json" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-chain - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: tc-nextcloud-headers - - name: tc-nextcloud-redirectregex-dav - - name: tc-nextcloud-redirectregex-finger - - name: tc-nextcloud-redirectregex-hostmetajson - - name: tc-nextcloud-redirectregex-hostmeta diff --git a/stable/traefik/7.1.2/test_values.yaml b/stable/traefik/7.1.2/test_values.yaml deleted file mode 100644 index 0cb9f617ac8..00000000000 --- a/stable/traefik/7.1.2/test_values.yaml +++ /dev/null @@ -1,333 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5.2 - pullPolicy: IfNotPresent - -# -- Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x -ingressClass: - # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 - enabled: false - isDefaultClass: false - # Use to force a networking.k8s.io API Version for certain CI/CD applications. E.g. "v1beta1" - fallbackApiVersion: "" - -# -- Activate Pilot integration -pilot: - enabled: false - token: "" - # Toggle Pilot Dashboard - # dashboard: false - -# -- Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# -- Configure providers -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -# -- Logs -# https://docs.traefik.io/observability/logs/ -logs: - # Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). - general: - # By default, the logs use a text format (common), but you can - # also ask for the json format in the format option - # format: json - # By default, the level is set to ERROR. Alternative logging levels are DEBUG, PANIC, FATAL, ERROR, WARN, and INFO. - level: ERROR - access: - # To enable access logs - enabled: false - # By default, logs are written using the Common Log Format (CLF). - # To write logs in JSON, use json in the format option. - # If the given format is unsupported, the default (CLF) is used instead. - # format: json - # To write the logs in an asynchronous fashion, specify a bufferingSize option. - # This option represents the number of log lines Traefik will keep in memory before writing - # them to the selected output. In some cases, this option can greatly help performances. - # bufferingSize: 100 - # Filtering https://docs.traefik.io/observability/access-logs/#filtering - filters: {} - # statuscodes: "200,300-302" - # retryattempts: true - # minduration: 10ms - # Fields - # https://docs.traefik.io/observability/access-logs/#limiting-the-fieldsincluding-headers - fields: - general: - defaultmode: keep - names: {} - # Examples: - # ClientUsername: drop - headers: - defaultmode: drop - names: {} - # Examples: - # User-Agent: redact - # Authorization: drop - # Content-Type: keep - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -## -# -- Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - - -# -- TLS Options to be created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - -# -- Options for the main traefik service, where the entrypoints traffic comes from -# from. -service: - main: - enabled: true - type: LoadBalancer - ports: - main: - enabled: true - port: 9000 - protocol: HTTP - tcp: - enabled: true - type: LoadBalancer - ports: - web: - enabled: true - port: 9080 - protocol: HTTP - redirectTo: websecure - websecure: - enabled: true - port: 9443 - protocol: HTTPS -# tcpexample: -# enabled: true -# port: 9443 -# protocol: TCP -# tls: -# enabled: false -# # this is the name of a TLSOption definition -# options: "" -# certResolver: "" -# domains: [] -# # - main: example.com -# # sans: -# # - foo.example.com -# # - bar.example.com - metrics: - enabled: true - type: LoadBalancer - ports: - metrics: - enabled: true - port: 9100 - protocol: HTTP - udp: - enabled: false - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# -- Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# -- The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# -- Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - readOnlyRootFilesystem: true - runAsGroup: 568 - runAsNonRoot: true - runAsUser: 568 - -podSecurityContext: - fsGroup: 568 - -# -- SCALE Middleware Handlers -middlewares: - basicAuth: [] - # - name: basicauthexample - # users: - # - username: testuser - # password: testpassword - forwardAuth: [] - # - name: forwardAuthexample - # address: https://auth.example.com/ - # authResponseHeaders: - # - X-Secret - # - X-Auth-User - # authRequestHeaders: - # - "Accept" - # - "X-CustomHeader" - # authResponseHeadersRegex: "^X-" - # trustForwardHeader: true - chain: [] - # - name: chainname - # middlewares: - # - name: compress - redirectScheme: [] - # - name: redirectSchemeName - # scheme: https - # permanent: true - rateLimit: [] - # - name: rateLimitName - # average: 300 - # burst: 200 - redirectRegex: [] - # - name: redirectRegexName - # regex: putregexhere - # replacement: replacementurlhere - # permanent: false - ipWhiteList: [] - # - name: ipWhiteListName - # sourceRange: [] - # ipStrategy: - # depth: 2 - # excludedIPs: [] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.2/values.yaml b/stable/traefik/7.1.2/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/stable/traefik/7.1.3/CHANGELOG.md b/stable/traefik/7.1.3/CHANGELOG.md deleted file mode 100644 index ed329ab4fda..00000000000 --- a/stable/traefik/7.1.3/CHANGELOG.md +++ /dev/null @@ -1,8 +0,0 @@ - - -### [traefik-7.1.3](https://github.com/truecharts/apps/compare/traefik-7.1.2...traefik-7.1.3) (2021-09-08) - -#### Fix - -* correct nextcloud middleware namespaces - diff --git a/stable/traefik/7.1.3/CONFIG.md b/stable/traefik/7.1.3/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/traefik/7.1.3/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/traefik/7.1.3/Chart.lock b/stable/traefik/7.1.3/Chart.lock deleted file mode 100644 index f5f567e7850..00000000000 --- a/stable/traefik/7.1.3/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -digest: sha256:7c137b201e33de386c8012e58dd401f81aa3b8e8cade47c7de48db3e58342823 -generated: "2021-09-08T22:26:51.024227188Z" diff --git a/stable/traefik/7.1.3/Chart.yaml b/stable/traefik/7.1.3/Chart.yaml deleted file mode 100644 index baa9ca03654..00000000000 --- a/stable/traefik/7.1.3/Chart.yaml +++ /dev/null @@ -1,25 +0,0 @@ -apiVersion: v2 -appVersion: 2.5.2 -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -deprecated: false -description: Test App for Traefik -home: https://github.com/truecharts/apps/tree/master/charts/stable/traefik -icon: https://raw.githubusercontent.com/traefik/traefik/v2.3/docs/content/assets/img/traefik.logo.png -keywords: -- traefik -- ingress -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: traefik -sources: -- https://github.com/traefik/traefik -- https://github.com/traefik/traefik-helm-chart -- https://traefik.io/ -type: application -version: 7.1.3 diff --git a/stable/traefik/7.1.3/README.md b/stable/traefik/7.1.3/README.md deleted file mode 100644 index 694d4389f5d..00000000000 --- a/stable/traefik/7.1.3/README.md +++ /dev/null @@ -1,39 +0,0 @@ -# Introduction - -Test App for Traefik - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://truecharts.org/ | common | 6.13.8 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.3/app-readme.md b/stable/traefik/7.1.3/app-readme.md deleted file mode 100644 index 823c75135e0..00000000000 --- a/stable/traefik/7.1.3/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -Test App for Traefik - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/traefik/7.1.3/charts/common-6.13.8.tgz b/stable/traefik/7.1.3/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/traefik/7.1.3/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/traefik/7.1.3/crds/ingressroute.yaml b/stable/traefik/7.1.3/crds/ingressroute.yaml deleted file mode 100644 index 3391ba532a4..00000000000 --- a/stable/traefik/7.1.3/crds/ingressroute.yaml +++ /dev/null @@ -1,198 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutes.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRoute - listKind: IngressRouteList - plural: ingressroutes - singular: ingressroute - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRoute is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteSpec is a specification for a IngressRouteSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: Route contains the set of routes. - properties: - kind: - enum: - - Rule - type: string - match: - type: string - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - priority: - type: integer - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The - differentiation between the two is specified in the - Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration - based on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name - references a TraefikService object (and to be precise, - one that embeds a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - required: - - kind - - match - type: object - type: array - tls: - description: "TLS contains the TLS certificates configuration of the - routes. To enable Let's Encrypt, use an empty TLS struct, e.g. in - YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/ingressroutetcp.yaml b/stable/traefik/7.1.3/crds/ingressroutetcp.yaml deleted file mode 100644 index 67e099b47da..00000000000 --- a/stable/traefik/7.1.3/crds/ingressroutetcp.yaml +++ /dev/null @@ -1,160 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressroutetcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteTCP - listKind: IngressRouteTCPList - plural: ingressroutetcps - singular: ingressroutetcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteTCP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteTCPSpec is a specification for a IngressRouteTCPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteTCP contains the set of routes. - properties: - match: - type: string - middlewares: - description: Middlewares contains references to MiddlewareTCP - resources. - items: - description: ObjectReference is a generic reference to a Traefik - resource. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - services: - items: - description: ServiceTCP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - proxyProtocol: - description: ProxyProtocol holds the ProxyProtocol configuration. - properties: - version: - type: integer - type: object - terminationDelay: - type: integer - weight: - type: integer - required: - - name - - port - type: object - type: array - required: - - match - type: object - type: array - tls: - description: "TLSTCP contains the TLS certificates configuration of - the routes. To enable Let's Encrypt, use an empty TLS struct, e.g. - in YAML: \n \t tls: {} # inline format \n \t tls: \t secretName: - # block format" - properties: - certResolver: - type: string - domains: - items: - description: Domain holds a domain name with SANs. - properties: - main: - type: string - sans: - items: - type: string - type: array - type: object - type: array - options: - description: Options is a reference to a TLSOption, that specifies - the parameters of the TLS connection. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - passthrough: - type: boolean - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - store: - description: Store is a reference to a TLSStore, that specifies - the parameters of the TLS store. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: object - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/ingressrouteudp.yaml b/stable/traefik/7.1.3/crds/ingressrouteudp.yaml deleted file mode 100644 index 910acd6c270..00000000000 --- a/stable/traefik/7.1.3/crds/ingressrouteudp.yaml +++ /dev/null @@ -1,84 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: ingressrouteudps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: IngressRouteUDP - listKind: IngressRouteUDPList - plural: ingressrouteudps - singular: ingressrouteudp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: IngressRouteUDP is an Ingress CRD specification. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: IngressRouteUDPSpec is a specification for a IngressRouteUDPSpec - resource. - properties: - entryPoints: - items: - type: string - type: array - routes: - items: - description: RouteUDP contains the set of routes. - properties: - services: - items: - description: ServiceUDP defines an upstream to proxy traffic. - properties: - name: - type: string - namespace: - type: string - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - weight: - type: integer - required: - - name - - port - type: object - type: array - type: object - type: array - required: - - routes - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/middlewares.yaml b/stable/traefik/7.1.3/crds/middlewares.yaml deleted file mode 100644 index 1770587a327..00000000000 --- a/stable/traefik/7.1.3/crds/middlewares.yaml +++ /dev/null @@ -1,563 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewares.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: Middleware - listKind: MiddlewareList - plural: middlewares - singular: middleware - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: Middleware is a specification for a Middleware resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareSpec holds the Middleware configuration. - properties: - addPrefix: - description: AddPrefix holds the AddPrefix configuration. - properties: - prefix: - type: string - type: object - basicAuth: - description: BasicAuth holds the HTTP basic authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - buffering: - description: Buffering holds the request/response buffering configuration. - properties: - maxRequestBodyBytes: - format: int64 - type: integer - maxResponseBodyBytes: - format: int64 - type: integer - memRequestBodyBytes: - format: int64 - type: integer - memResponseBodyBytes: - format: int64 - type: integer - retryExpression: - type: string - type: object - chain: - description: Chain holds a chain of middlewares. - properties: - middlewares: - items: - description: MiddlewareRef is a ref to the Middleware resources. - properties: - name: - type: string - namespace: - type: string - required: - - name - type: object - type: array - type: object - circuitBreaker: - description: CircuitBreaker holds the circuit breaker configuration. - properties: - expression: - type: string - type: object - compress: - description: Compress holds the compress configuration. - properties: - excludedContentTypes: - items: - type: string - type: array - type: object - contentType: - description: ContentType middleware - or rather its unique `autoDetect` - option - specifies whether to let the `Content-Type` header, if - it has not been set by the backend, be automatically set to a value - derived from the contents of the response. As a proxy, the default - behavior should be to leave the header alone, regardless of what - the backend did with it. However, the historic default was to always - auto-detect and set the header if it was nil, and it is going to - be kept that way in order to support users currently relying on - it. This middleware exists to enable the correct behavior until - at least the default one can be changed in a future version. - properties: - autoDetect: - type: boolean - type: object - digestAuth: - description: DigestAuth holds the Digest HTTP authentication configuration. - properties: - headerField: - type: string - realm: - type: string - removeHeader: - type: boolean - secret: - type: string - type: object - errors: - description: ErrorPage holds the custom error page configuration. - properties: - query: - type: string - service: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the - forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - status: - items: - type: string - type: array - type: object - forwardAuth: - description: ForwardAuth holds the http forward authentication configuration. - properties: - address: - type: string - authRequestHeaders: - items: - type: string - type: array - authResponseHeaders: - items: - type: string - type: array - authResponseHeadersRegex: - type: string - tls: - description: ClientTLS holds TLS specific configurations as client. - properties: - caOptional: - type: boolean - caSecret: - type: string - certSecret: - type: string - insecureSkipVerify: - type: boolean - type: object - trustForwardHeader: - type: boolean - type: object - headers: - description: Headers holds the custom header configuration. - properties: - accessControlAllowCredentials: - description: AccessControlAllowCredentials is only valid if true. - false is ignored. - type: boolean - accessControlAllowHeaders: - description: AccessControlAllowHeaders must be used in response - to a preflight request with Access-Control-Request-Headers set. - items: - type: string - type: array - accessControlAllowMethods: - description: AccessControlAllowMethods must be used in response - to a preflight request with Access-Control-Request-Method set. - items: - type: string - type: array - accessControlAllowOriginList: - description: AccessControlAllowOriginList is a list of allowable - origins. Can also be a wildcard origin "*". - items: - type: string - type: array - accessControlAllowOriginListRegex: - description: AccessControlAllowOriginListRegex is a list of allowable - origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/). - items: - type: string - type: array - accessControlExposeHeaders: - description: AccessControlExposeHeaders sets valid headers for - the response. - items: - type: string - type: array - accessControlMaxAge: - description: AccessControlMaxAge sets the time that a preflight - request may be cached. - format: int64 - type: integer - addVaryHeader: - description: AddVaryHeader controls if the Vary header is automatically - added/updated when the AccessControlAllowOriginList is set. - type: boolean - allowedHosts: - items: - type: string - type: array - browserXssFilter: - type: boolean - contentSecurityPolicy: - type: string - contentTypeNosniff: - type: boolean - customBrowserXSSValue: - type: string - customFrameOptionsValue: - type: string - customRequestHeaders: - additionalProperties: - type: string - type: object - customResponseHeaders: - additionalProperties: - type: string - type: object - featurePolicy: - type: string - forceSTSHeader: - type: boolean - frameDeny: - type: boolean - hostsProxyHeaders: - items: - type: string - type: array - isDevelopment: - type: boolean - publicKey: - type: string - referrerPolicy: - type: string - sslForceHost: - description: 'Deprecated: use RedirectRegex instead.' - type: boolean - sslHost: - description: 'Deprecated: use RedirectRegex instead.' - type: string - sslProxyHeaders: - additionalProperties: - type: string - type: object - sslRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - sslTemporaryRedirect: - description: 'Deprecated: use EntryPoint redirection or RedirectScheme - instead.' - type: boolean - stsIncludeSubdomains: - type: boolean - stsPreload: - type: boolean - stsSeconds: - format: int64 - type: integer - type: object - inFlightReq: - description: InFlightReq limits the number of requests being processed - and served concurrently. - properties: - amount: - format: int64 - type: integer - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - ipWhiteList: - description: IPWhiteList holds the ip white list configuration. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - sourceRange: - items: - type: string - type: array - type: object - passTLSClientCert: - description: PassTLSClientCert holds the TLS client cert headers configuration. - properties: - info: - description: TLSClientCertificateInfo holds the client TLS certificate - info configuration. - properties: - issuer: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - notAfter: - type: boolean - notBefore: - type: boolean - sans: - type: boolean - serialNumber: - type: boolean - subject: - description: TLSCLientCertificateDNInfo holds the client TLS - certificate distinguished name info configuration. cf https://tools.ietf.org/html/rfc3739 - properties: - commonName: - type: boolean - country: - type: boolean - domainComponent: - type: boolean - locality: - type: boolean - organization: - type: boolean - province: - type: boolean - serialNumber: - type: boolean - type: object - type: object - pem: - type: boolean - type: object - plugin: - additionalProperties: - x-kubernetes-preserve-unknown-fields: true - type: object - rateLimit: - description: RateLimit holds the rate limiting configuration for a - given router. - properties: - average: - format: int64 - type: integer - burst: - format: int64 - type: integer - period: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - sourceCriterion: - description: SourceCriterion defines what criterion is used to - group requests as originating from a common source. If none - are set, the default is to use the request's remote address - field. All fields are mutually exclusive. - properties: - ipStrategy: - description: IPStrategy holds the ip strategy configuration. - properties: - depth: - type: integer - excludedIPs: - items: - type: string - type: array - type: object - requestHeaderName: - type: string - requestHost: - type: boolean - type: object - type: object - redirectRegex: - description: RedirectRegex holds the redirection configuration. - properties: - permanent: - type: boolean - regex: - type: string - replacement: - type: string - type: object - redirectScheme: - description: RedirectScheme holds the scheme redirection configuration. - properties: - permanent: - type: boolean - port: - type: string - scheme: - type: string - type: object - replacePath: - description: ReplacePath holds the ReplacePath configuration. - properties: - path: - type: string - type: object - replacePathRegex: - description: ReplacePathRegex holds the ReplacePathRegex configuration. - properties: - regex: - type: string - replacement: - type: string - type: object - retry: - description: Retry holds the retry configuration. - properties: - attempts: - type: integer - initialInterval: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - type: object - stripPrefix: - description: StripPrefix holds the StripPrefix configuration. - properties: - forceSlash: - type: boolean - prefixes: - items: - type: string - type: array - type: object - stripPrefixRegex: - description: StripPrefixRegex holds the StripPrefixRegex configuration. - properties: - regex: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/middlewarestcp.yaml b/stable/traefik/7.1.3/crds/middlewarestcp.yaml deleted file mode 100644 index f0d1d5640bd..00000000000 --- a/stable/traefik/7.1.3/crds/middlewarestcp.yaml +++ /dev/null @@ -1,59 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: middlewaretcps.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: MiddlewareTCP - listKind: MiddlewareTCPList - plural: middlewaretcps - singular: middlewaretcp - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: MiddlewareTCP is a specification for a MiddlewareTCP resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: MiddlewareTCPSpec holds the MiddlewareTCP configuration. - properties: - ipWhiteList: - description: TCPIPWhiteList holds the TCP ip white list configuration. - properties: - sourceRange: - items: - type: string - type: array - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/serverstransports.yaml b/stable/traefik/7.1.3/crds/serverstransports.yaml deleted file mode 100644 index 78241697d1a..00000000000 --- a/stable/traefik/7.1.3/crds/serverstransports.yaml +++ /dev/null @@ -1,101 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: serverstransports.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: ServersTransport - listKind: ServersTransportList - plural: serverstransports - singular: serverstransport - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: ServersTransport is a specification for a ServersTransport resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServersTransportSpec options to configure communication between - Traefik and the servers. - properties: - certificatesSecrets: - description: Certificates for mTLS. - items: - type: string - type: array - disableHTTP2: - description: Disable HTTP/2 for connections with backend servers. - type: boolean - forwardingTimeouts: - description: Timeouts for requests forwarded to the backend servers. - properties: - dialTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait until a connection to - a backend server can be established. If zero, no timeout exists. - x-kubernetes-int-or-string: true - idleConnTimeout: - anyOf: - - type: integer - - type: string - description: The maximum period for which an idle HTTP keep-alive - connection will remain open before closing itself. - x-kubernetes-int-or-string: true - responseHeaderTimeout: - anyOf: - - type: integer - - type: string - description: The amount of time to wait for a server's response - headers after fully writing the request (including its body, - if any). If zero, no timeout exists. - x-kubernetes-int-or-string: true - type: object - insecureSkipVerify: - description: Disable SSL certificate verification. - type: boolean - maxIdleConnsPerHost: - description: If non-zero, controls the maximum idle (keep-alive) to - keep per-host. If zero, DefaultMaxIdleConnsPerHost is used. - type: integer - rootCAsSecrets: - description: Add cert file for self-signed certificate. - items: - type: string - type: array - serverName: - description: ServerName used to contact the server. - type: string - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/tlsoptions.yaml b/stable/traefik/7.1.3/crds/tlsoptions.yaml deleted file mode 100644 index c901ac2df5e..00000000000 --- a/stable/traefik/7.1.3/crds/tlsoptions.yaml +++ /dev/null @@ -1,87 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsoptions.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSOption - listKind: TLSOptionList - plural: tlsoptions - singular: tlsoption - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSOption is a specification for a TLSOption resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSOptionSpec configures TLS for an entry point. - properties: - cipherSuites: - items: - type: string - type: array - clientAuth: - description: ClientAuth defines the parameters of the client authentication - part of the TLS connection, if any. - properties: - clientAuthType: - description: ClientAuthType defines the client authentication - type to apply. - enum: - - NoClientCert - - RequestClientCert - - VerifyClientCertIfGiven - - RequireAndVerifyClientCert - type: string - secretNames: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - items: - type: string - type: array - type: object - curvePreferences: - items: - type: string - type: array - maxVersion: - type: string - minVersion: - type: string - preferServerCipherSuites: - type: boolean - sniStrict: - type: boolean - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/tlsstores.yaml b/stable/traefik/7.1.3/crds/tlsstores.yaml deleted file mode 100644 index 7bb6193b026..00000000000 --- a/stable/traefik/7.1.3/crds/tlsstores.yaml +++ /dev/null @@ -1,64 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: tlsstores.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TLSStore - listKind: TLSStoreList - plural: tlsstores - singular: tlsstore - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TLSStore is a specification for a TLSStore resource. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: TLSStoreSpec configures a TLSStore resource. - properties: - defaultCertificate: - description: DefaultCertificate holds a secret name for the TLSOption - resource. - properties: - secretName: - description: SecretName is the name of the referenced Kubernetes - Secret to specify the certificate details. - type: string - required: - - secretName - type: object - required: - - defaultCertificate - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/crds/traefikservices.yaml b/stable/traefik/7.1.3/crds/traefikservices.yaml deleted file mode 100644 index 1d98c25d68d..00000000000 --- a/stable/traefik/7.1.3/crds/traefikservices.yaml +++ /dev/null @@ -1,270 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - annotations: - "helm.sh/resource-policy": keep - "helm.sh/hook": pre-install,pre-upgrade,pre-rollback - controller-gen.kubebuilder.io/version: v0.4.1 - creationTimestamp: null - name: traefikservices.traefik.containo.us -spec: - group: traefik.containo.us - names: - kind: TraefikService - listKind: TraefikServiceList - plural: traefikservices - singular: traefikservice - scope: Namespaced - versions: - - name: v1alpha1 - schema: - openAPIV3Schema: - description: TraefikService is the specification for a service (that an IngressRoute - refers to) that is usually not a terminal service (i.e. not a pod of servers), - as opposed to a Kubernetes Service. That is to say, it usually refers to - other (children) services, which themselves can be TraefikServices or Services. - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - type: object - spec: - description: ServiceSpec defines whether a TraefikService is a load-balancer - of services or a mirroring service. - properties: - mirroring: - description: Mirroring defines a mirroring service, which is composed - of a main load-balancer, and a list of mirrors. - properties: - kind: - enum: - - Service - - TraefikService - type: string - maxBodySize: - format: int64 - type: integer - mirrors: - items: - description: MirrorService defines one of the mirrors of a Mirroring - service. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - percent: - type: integer - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - name: - description: Name is a reference to a Kubernetes Service object - (for a load-balancer of servers), or to a TraefikService object - (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for the forward - of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - weighted: - description: WeightedRoundRobin defines a load-balancer of services. - properties: - services: - items: - description: Service defines an upstream to proxy traffic. - properties: - kind: - enum: - - Service - - TraefikService - type: string - name: - description: Name is a reference to a Kubernetes Service - object (for a load-balancer of servers), or to a TraefikService - object (service load-balancer, mirroring, etc). The differentiation - between the two is specified in the Kind field. - type: string - namespace: - type: string - passHostHeader: - type: boolean - port: - anyOf: - - type: integer - - type: string - x-kubernetes-int-or-string: true - responseForwarding: - description: ResponseForwarding holds configuration for - the forward of the response. - properties: - flushInterval: - type: string - type: object - scheme: - type: string - serversTransport: - type: string - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based - on cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - strategy: - type: string - weight: - description: Weight should only be specified when Name references - a TraefikService object (and to be precise, one that embeds - a Weighted Round Robin). - type: integer - required: - - name - type: object - type: array - sticky: - description: Sticky holds the sticky configuration. - properties: - cookie: - description: Cookie holds the sticky configuration based on - cookie. - properties: - httpOnly: - type: boolean - name: - type: string - sameSite: - type: string - secure: - type: boolean - type: object - type: object - type: object - type: object - required: - - metadata - - spec - type: object - served: true - storage: true -status: - acceptedNames: - kind: "" - plural: "" - conditions: [] - storedVersions: [] diff --git a/stable/traefik/7.1.3/helm-values.md b/stable/traefik/7.1.3/helm-values.md deleted file mode 100644 index 9e570f86dd6..00000000000 --- a/stable/traefik/7.1.3/helm-values.md +++ /dev/null @@ -1,50 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| additionalArguments[0] | string | `"--metrics.prometheus"` | | -| additionalArguments[1] | string | `"--ping"` | | -| additionalArguments[2] | string | `"--serverstransport.insecureskipverify=true"` | | -| additionalArguments[3] | string | `"--providers.kubernetesingress.allowexternalnameservices=true"` | | -| globalArguments[0] | string | `"--global.checknewversion"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"traefik"` | | -| image.tag | string | `"v2.5.2"` | | -| ingressClass | object | `{"enabled":false,"fallbackApiVersion":"","isDefaultClass":false}` | Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x | -| ingressRoute | object | `{"dashboard":{"annotations":{},"enabled":true,"labels":{}}}` | Create an IngressRoute for the dashboard | -| logs | object | `{"access":{"enabled":false,"fields":{"general":{"defaultmode":"keep","names":{}},"headers":{"defaultmode":"drop","names":{}}},"filters":{}},"general":{"level":"ERROR"}}` | Logs https://docs.traefik.io/observability/logs/ | -| metrics.prometheus.entryPoint | string | `"metrics"` | | -| middlewares | object | `{"basicAuth":[],"chain":[],"forwardAuth":[],"ipWhiteList":[],"rateLimit":[],"redirectRegex":[],"redirectScheme":[]}` | SCALE Middleware Handlers | -| pilot | object | `{"enabled":false,"token":""}` | Activate Pilot integration | -| podSecurityContext.fsGroup | int | `568` | | -| portalhook.enabled | bool | `true` | | -| probes.liveness | object | See below | Liveness probe configuration | -| probes.liveness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.liveness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.readiness | object | See below | Redainess probe configuration | -| probes.readiness.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.readiness.type | string | "TCP" | sets the probe type when not using a custom probe | -| probes.startup | object | See below | Startup probe configuration | -| probes.startup.path | string | "/" | If a HTTP probe is used (default for HTTP/HTTPS services) this path is used | -| probes.startup.type | string | "TCP" | sets the probe type when not using a custom probe | -| providers.kubernetesCRD.enabled | bool | `true` | | -| providers.kubernetesCRD.namespaces | list | `[]` | | -| providers.kubernetesIngress.enabled | bool | `true` | | -| providers.kubernetesIngress.namespaces | list | `[]` | | -| providers.kubernetesIngress.publishedService.enabled | bool | `true` | | -| rbac | object | `{"enabled":true,"rules":[{"apiGroups":[""],"resources":["services","endpoints","secrets"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses","ingressclasses"],"verbs":["get","list","watch"]},{"apiGroups":["extensions","networking.k8s.io"],"resources":["ingresses/status"],"verbs":["update"]},{"apiGroups":["traefik.containo.us"],"resources":["ingressroutes","ingressroutetcps","ingressrouteudps","middlewares","middlewaretcps","tlsoptions","tlsstores","traefikservices","serverstransports"],"verbs":["get","list","watch"]}]}` | Whether Role Based Access Control objects like roles and rolebindings should be created | -| securityContext | object | `{"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsGroup":568,"runAsNonRoot":true,"runAsUser":568}` | Set the container security context To run the container with ports below 1024 this will need to be adjust to run as root | -| service | object | `{"main":{"enabled":true,"ports":{"main":{"enabled":true,"port":9000,"protocol":"HTTP"}},"type":"LoadBalancer"},"metrics":{"enabled":true,"ports":{"metrics":{"enabled":true,"port":9100,"protocol":"HTTP"}},"type":"LoadBalancer"},"tcp":{"enabled":true,"ports":{"web":{"enabled":true,"port":9080,"protocol":"HTTP","redirectTo":"websecure"},"websecure":{"enabled":true,"port":9443,"protocol":"HTTPS"}},"type":"LoadBalancer"},"udp":{"enabled":false}}` | Options for the main traefik service, where the entrypoints traffic comes from from. | -| serviceAccount | object | `{"enabled":true,"name":""}` | The service account the pods will use to interact with the Kubernetes API | -| tlsOptions | object | `{"default":{"cipherSuites":["TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305","TLS_AES_128_GCM_SHA256","TLS_AES_256_GCM_SHA384","TLS_CHACHA20_POLY1305_SHA256"],"curvePreferences":["CurveP521","CurveP384"],"minVersion":"VersionTLS12","sniStrict":false}}` | TLS Options to be created as TLSOption CRDs https://doc.traefik.io/traefik/https/tls/#tls-options Example: | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/traefik/7.1.3/ix_values.yaml b/stable/traefik/7.1.3/ix_values.yaml deleted file mode 100644 index b940b843664..00000000000 --- a/stable/traefik/7.1.3/ix_values.yaml +++ /dev/null @@ -1,181 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5.2 - pullPolicy: IfNotPresent - -# Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# Configure providers -# -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -# -# Configure Traefik static configuration -# Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - -# TLS Options are created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - - - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.3/questions.yaml b/stable/traefik/7.1.3/questions.yaml deleted file mode 100644 index 047d70d5c75..00000000000 --- a/stable/traefik/7.1.3/questions.yaml +++ /dev/null @@ -1,1258 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Middlewares" - description: "Traefik Middlewares" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "http" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" - path: "/dashboard/" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "RollingUpdate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: pilot - label: "Traefik Pilot" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: token - label: "token" - schema: - type: string - default: "" - - variable: dashboard - label: "Pilot Dashboard" - schema: - type: boolean - default: false - - - variable: ingressClass - label: "ingressClass" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: isDefaultClass - label: "isDefaultClass" - schema: - type: boolean - default: false - - - variable: logs - label: "Logs" - group: "App Configuration" - schema: - type: dict - attrs: - - variable: general - label: "General Logs" - schema: - type: dict - attrs: - - variable: level - label: "Log Level" - schema: - type: string - default: "ERROR" - enum: - - value: "INFO" - description: "Info" - - value: "WARN" - description: "Warnings" - - value: "ERROR" - description: "Errors" - - value: "FATAL" - description: "Fatal Errors" - - value: "PANIC" - description: "Panics" - - value: "DEBUG" - description: "Debug" - - variable: access - label: "Access Logs" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: enabledFilters - label: "Enable Filters" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: filters - label: "Filters" - schema: - type: dict - attrs: - - variable: statuscodes - label: "Status codes" - schema: - type: string - default: "200,300-302" - - variable: retryattempts - label: "retryattempts" - schema: - type: boolean - default: true - - variable: minduration - label: "minduration" - schema: - type: string - default: "10ms" - - variable: fields - label: "Fields" - schema: - type: dict - attrs: - - variable: general - label: "General" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "keep" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - variable: headers - label: "Headers" - schema: - type: dict - attrs: - - variable: defaultmode - label: "Default Mode" - schema: - type: string - default: "drop" - enum: - - value: "keep" - description: "Keep" - - value: "drop" - description: "Drop" - - - variable: middlewares - label: "" - group: "Middlewares" - schema: - type: dict - attrs: - - variable: basicAuth - label: "basicAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: users - label: "Users" - schema: - type: list - default: [] - items: - - variable: usersEntry - label: "" - schema: - type: dict - attrs: - - variable: username - label: "Username" - schema: - type: string - required: true - default: "" - - variable: password - label: "Password" - schema: - type: string - required: true - default: "" - - - - variable: forwardAuth - label: "forwardAuth" - schema: - type: list - default: [] - items: - - variable: basicAuthEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: address - label: "Address" - schema: - type: string - required: true - default: "" - - variable: trustForwardHeader - label: "trustForwardHeader" - schema: - type: boolean - default: false - - variable: authResponseHeadersRegex - label: "authResponseHeadersRegex" - schema: - type: string - default: "" - - variable: authResponseHeaders - label: "authResponseHeaders" - schema: - type: list - default: [] - items: - - variable: authResponseHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: authRequestHeaders - label: "authRequestHeaders" - schema: - type: list - default: [] - items: - - variable: authRequestHeadersEntry - label: "" - schema: - type: string - default: "" - - variable: chain - label: "chain" - schema: - type: list - default: [] - items: - - variable: chainEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: middlewares - label: "Middlewares to Chain" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - - variable: redirectScheme - label: "redirectScheme" - schema: - type: list - default: [] - items: - - variable: redirectSchemeEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: scheme - label: "Scheme" - schema: - type: string - required: true - default: "https" - enum: - - value: "https" - description: "https" - - value: "http" - description: "http" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: rateLimit - label: "rateLimit" - schema: - type: list - default: [] - items: - - variable: rateLimitEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: average - label: "Average" - schema: - type: int - required: true - default: 300 - - variable: burst - label: "Burst" - schema: - type: int - required: true - default: 200 - - variable: redirectRegex - label: "redirectRegex" - schema: - type: list - default: [] - items: - - variable: redirectRegexEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - - variable: regex - label: "Regex" - schema: - type: string - required: true - default: "" - - variable: replacement - label: "Replacement" - schema: - type: string - required: true - default: "" - - variable: permanent - label: "Permanent" - schema: - type: boolean - required: true - default: false - - - variable: ipWhiteList - label: "ipWhiteList" - schema: - type: list - default: [] - items: - - variable: ipWhiteListEntry - label: "" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - required: true - default: "" - - variable: sourceRange - label: "Source Range" - schema: - type: list - default: [] - items: - - variable: sourceRangeEntry - label: "" - schema: - type: string - required: true - default: "" - - variable: ipStrategy - label: "IP Strategy" - schema: - type: dict - attrs: - - variable: depth - label: "Depth" - schema: - type: int - required: true - - variable: excludedIPs - label: "Excluded IPs" - schema: - type: list - default: [] - items: - - variable: excludedIPsEntry - label: "" - schema: - type: string - required: true - default: "" - - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - - variable: service - group: "Networking and Services" - label: "Configure Service Entrypoint" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: main - label: "Main Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9000 - editable: false - hidden: true - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9000 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9000 - - variable: tcp - label: "Main Service" - description: "The tcp Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: web - label: "web Entrypoint Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9080 - editable: true - required: true - - variable: redirectTo - label: "Redirect to" - schema: - type: string - default: "websecure" - - variable: websecure - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTPS" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Entrypoints Port" - schema: - type: int - default: 9443 - editable: true - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: tls - label: "websecure Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - - variable: udp - label: "UDP Service" - description: "The UDP service for entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: portsList - label: "Additional TCP Entrypoints" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom Entrypoints" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Entrypoints Name" - schema: - type: string - default: "" - - variable: protocol - label: "Entrypoints Type" - schema: - type: string - default: "UDP" - enum: - - value: UDP - description: "UDP" - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: metrics - label: "metrics Service" - description: "The metrics Entrypoint service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Entrypoints Configuration" - schema: - type: dict - attrs: - - variable: metrics - label: "metrics Entrypoints Configurations" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 9100 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 9100 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 9100 - - - variable: securityContext - group: "Security and Permissions" - label: "Security Context" - schema: - type: dict - attrs: - - variable: privileged - label: "Privileged mode" - schema: - type: boolean - default: false - - variable: readOnlyRootFilesystem - label: "ReadOnly Root Filesystem" - schema: - type: boolean - default: true - - variable: allowPrivilegeEscalation - label: "Allow Privilege Escalation" - schema: - type: boolean - default: false - - - variable: podSecurityContext - group: "Security and Permissions" - label: "Pod Security Context" - schema: - type: dict - attrs: - - variable: runAsNonRoot - label: "runAsNonRoot" - schema: - type: boolean - default: true - - variable: runAsUser - label: "runAsUser" - description: "The UserID of the user running the application" - schema: - type: int - default: 568 - - variable: runAsGroup - label: "runAsGroup" - description: The groupID this App of the user running the application" - schema: - type: int - default: 568 - - variable: fsGroup - label: "fsGroup" - description: "The group that should own ALL storage." - schema: - type: int - default: 568 - - variable: supplementalGroups - label: "supplemental Groups" - schema: - type: list - default: [] - items: - - variable: supplementalGroupsEntry - label: "supplemental Group" - schema: - type: int - - variable: fsGroupChangePolicy - label: "When should we take ownership?" - schema: - type: string - default: "OnRootMismatch" - enum: - - value: "OnRootMismatch" - description: "OnRootMismatch" - - value: "Always" - description: "Always" - - - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/traefik/7.1.3/templates/_args.tpl b/stable/traefik/7.1.3/templates/_args.tpl deleted file mode 100644 index 41e7e44b8fd..00000000000 --- a/stable/traefik/7.1.3/templates/_args.tpl +++ /dev/null @@ -1,141 +0,0 @@ -{{/* Define the args */}} -{{- define "traefik.args" -}} -args: - {{/* merge all ports */}} - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{/* start of actual arguments */}} - {{- with .Values.globalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} - {{- range $name, $config := $ports }} - {{- if $config }} - {{- if or ( eq $config.protocol "HTTP" ) ( eq $config.protocol "HTTPS" ) ( eq $config.protocol "TCP" ) }} - {{- $_ := set $config "protocol" "TCP" }} - {{- end }} - - "--entryPoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}" - {{- end }} - {{- end }} - - "--api.dashboard=true" - - "--ping=true" - {{- if .Values.metrics }} - {{- if .Values.metrics.datadog }} - - "--metrics.datadog=true" - - "--metrics.datadog.address={{ .Values.metrics.datadog.address }}" - {{- end }} - {{- if .Values.metrics.influxdb }} - - "--metrics.influxdb=true" - - "--metrics.influxdb.address={{ .Values.metrics.influxdb.address }}" - - "--metrics.influxdb.protocol={{ .Values.metrics.influxdb.protocol }}" - {{- end }} - {{- if .Values.metrics.prometheus }} - - "--metrics.prometheus=true" - - "--metrics.prometheus.entrypoint={{ .Values.metrics.prometheus.entryPoint }}" - {{- end }} - {{- if .Values.metrics.statsd }} - - "--metrics.statsd=true" - - "--metrics.statsd.address={{ .Values.metrics.statsd.address }}" - {{- end }} - {{- end }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress" - {{- if and .Values.providers.kubernetesIngress.publishedService.enabled }} - - "--providers.kubernetesingress.ingressendpoint.publishedservice={{ template "providers.kubernetesIngress.publishedServicePath" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.labelSelector }} - - "--providers.kubernetesingress.labelSelector={{ .Values.providers.kubernetesIngress.labelSelector }}" - {{- end }} - {{- end }} - {{- if and .Values.rbac.enabled .Values.rbac.namespaced }} - {{- if .Values.providers.kubernetesCRD.enabled }} - - "--providers.kubernetescrd.namespaces={{ template "providers.kubernetesCRD.namespaces" . }}" - {{- end }} - {{- if .Values.providers.kubernetesIngress.enabled }} - - "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}" - {{- end }} - {{- end }} - {{- range $entrypoint, $config := $ports }} - {{- if $config.redirectTo }} - {{- $toPort := index $ports $config.redirectTo }} - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $toPort.port }}" - - "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https" - {{- end }} - {{- if or ( $config.tls ) ( eq $config.protocol "HTTPS" ) }} - {{- if or ( $config.tls.enabled ) ( eq $config.protocol "HTTPS" ) }} - - "--entrypoints.{{ $entrypoint }}.http.tls=true" - {{- if $config.tls.options }} - - "--entrypoints.{{ $entrypoint }}.http.tls.options={{ $config.tls.options }}" - {{- end }} - {{- if $config.tls.certResolver }} - - "--entrypoints.{{ $entrypoint }}.http.tls.certResolver={{ $config.tls.certResolver }}" - {{- end }} - {{- if $config.tls.domains }} - {{- range $index, $domain := $config.tls.domains }} - {{- if $domain.main }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].main={{ $domain.main }}" - {{- end }} - {{- if $domain.sans }} - - "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].sans={{ join "," $domain.sans }}" - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- end }} - {{- with .Values.logs }} - {{- if .general.format }} - - "--log.format={{ .general.format }}" - {{- end }} - {{- if ne .general.level "ERROR" }} - - "--log.level={{ .general.level | upper }}" - {{- end }} - {{- if .access.enabled }} - - "--accesslog=true" - {{- if .access.format }} - - "--accesslog.format={{ .access.format }}" - {{- end }} - {{- if .access.bufferingsize }} - - "--accesslog.bufferingsize={{ .access.bufferingsize }}" - {{- end }} - {{- if .access.filters }} - {{- if .access.filters.statuscodes }} - - "--accesslog.filters.statuscodes={{ .access.filters.statuscodes }}" - {{- end }} - {{- if .access.filters.retryattempts }} - - "--accesslog.filters.retryattempts" - {{- end }} - {{- if .access.filters.minduration }} - - "--accesslog.filters.minduration={{ .access.filters.minduration }}" - {{- end }} - {{- end }} - - "--accesslog.fields.defaultmode={{ .access.fields.general.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.general.names }} - - "--accesslog.fields.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - - "--accesslog.fields.headers.defaultmode={{ .access.fields.headers.defaultmode }}" - {{- range $fieldname, $fieldaction := .access.fields.headers.names }} - - "--accesslog.fields.headers.names.{{ $fieldname }}={{ $fieldaction }}" - {{- end }} - {{- end }} - {{- end }} - {{- if .Values.pilot.enabled }} - - "--pilot.token={{ .Values.pilot.token }}" - {{- end }} - {{- if hasKey .Values.pilot "dashboard" }} - - "--pilot.dashboard={{ .Values.pilot.dashboard }}" - {{- end }} - {{- with .Values.additionalArguments }} - {{- range . }} - - {{ . | quote }} - {{- end }} - {{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.3/templates/_helpers.tpl b/stable/traefik/7.1.3/templates/_helpers.tpl deleted file mode 100644 index 8c6c4ac96bc..00000000000 --- a/stable/traefik/7.1.3/templates/_helpers.tpl +++ /dev/null @@ -1,22 +0,0 @@ -{{/* -Construct the path for the providers.kubernetesingress.ingressendpoint.publishedservice. -By convention this will simply use the / to match the name of the -service generated. -Users can provide an override for an explicit service they want bound via `.Values.providers.kubernetesIngress.publishedService.pathOverride` -*/}} -{{- define "providers.kubernetesIngress.publishedServicePath" -}} -{{- $fullName := include "common.names.fullname" . -}} -{{- $defServiceName := printf "%s/%s-tcp" .Release.Namespace $fullName -}} -{{- $servicePath := default $defServiceName .Values.providers.kubernetesIngress.publishedService.pathOverride }} -{{- print $servicePath | trimSuffix "-" -}} -{{- end -}} - -{{/* -Construct a comma-separated list of whitelisted namespaces -*/}} -{{- define "providers.kubernetesIngress.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesIngress.namespaces) }} -{{- end -}} -{{- define "providers.kubernetesCRD.namespaces" -}} -{{- default .Release.Namespace (join "," .Values.providers.kubernetesCRD.namespaces) }} -{{- end -}} diff --git a/stable/traefik/7.1.3/templates/_ingressclass.tpl b/stable/traefik/7.1.3/templates/_ingressclass.tpl deleted file mode 100644 index 27f8467fc9e..00000000000 --- a/stable/traefik/7.1.3/templates/_ingressclass.tpl +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Define the ingressClass */}} -{{- define "traefik.ingressClass" -}} -{{- if .Values.ingressClass.enabled }} - {{- if .Capabilities.APIVersions.Has "networking.k8s.io/v1/IngressClass" }} -apiVersion: networking.k8s.io/v1 - {{- else if .Capabilities.APIVersions.Has "networking.k8s.io/v1beta1/IngressClass" }} -apiVersion: networking.k8s.io/v1beta1 - {{- else if or (eq .Values.ingressClass.fallbackApiVersion "v1beta1") (eq .Values.ingressClass.fallbackApiVersion "v1") }} -apiVersion: {{ printf "networking.k8s.io/%s" .Values.ingressClass.fallbackApiVersion }} - {{- else }} - {{- fail "\n\n ERROR: You must have at least networking.k8s.io/v1beta1 to use ingressClass" }} - {{- end }} ---- -kind: IngressClass -metadata: - annotations: - ingressclass.kubernetes.io/is-default-class: {{ .Values.ingressClass.isDefaultClass | quote }} - labels: - {{- include "common.labels" . | nindent 4 }} - name: {{ .Release.Name }} -spec: - controller: traefik.io/ingress-controller -{{- end }} -{{- end }} diff --git a/stable/traefik/7.1.3/templates/_ingressroute.tpl b/stable/traefik/7.1.3/templates/_ingressroute.tpl deleted file mode 100644 index 83312040d92..00000000000 --- a/stable/traefik/7.1.3/templates/_ingressroute.tpl +++ /dev/null @@ -1,25 +0,0 @@ -{{/* Define the ingressRoute */}} -{{- define "traefik.ingressRoute" -}} -{{- if .Values.ingressRoute.dashboard.enabled -}} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: {{ include "common.names.fullname" . }}-dashboard - annotations: - {{- with .Values.ingressRoute.dashboard.annotations }} - {{- toYaml . | nindent 4 }} - {{- end }} - labels: - {{- include "common.labels" . | nindent 4 }} -spec: - entryPoints: - - main - routes: - - match: PathPrefix(`/dashboard`) || PathPrefix(`/api`) - kind: Rule - services: - - name: api@internal - kind: TraefikService -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.3/templates/_portalhook.tpl b/stable/traefik/7.1.3/templates/_portalhook.tpl deleted file mode 100644 index e3586c5d4e9..00000000000 --- a/stable/traefik/7.1.3/templates/_portalhook.tpl +++ /dev/null @@ -1,26 +0,0 @@ -{{/* Define the portalHook */}} -{{- define "traefik.portalhook" -}} -{{- if .Values.portalhook.enabled }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- - -apiVersion: v1 -kind: ConfigMap -metadata: - name: portalhook - namespace: {{ $namespace }} -data: - {{- $ports := dict }} - {{- range $.Values.service }} - {{- range $name, $value := .ports }} - {{- $_ := set $ports $name $value }} - {{- end }} - {{- end }} - {{- range $name, $value := $ports }} - {{ $name }}: {{ $value.port | quote }} - {{- end }} -{{- end }} -{{- end -}} diff --git a/stable/traefik/7.1.3/templates/_tlsoptions.tpl b/stable/traefik/7.1.3/templates/_tlsoptions.tpl deleted file mode 100644 index 3ca31af0859..00000000000 --- a/stable/traefik/7.1.3/templates/_tlsoptions.tpl +++ /dev/null @@ -1,12 +0,0 @@ -{{/* Define the tlsOptions */}} -{{- define "traefik.tlsOptions" -}} -{{- range $name, $config := .Values.tlsOptions }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: TLSOption -metadata: - name: {{ $name }} -spec: - {{- toYaml $config | nindent 2 }} -{{- end -}} -{{- end -}} diff --git a/stable/traefik/7.1.3/templates/common.yaml b/stable/traefik/7.1.3/templates/common.yaml deleted file mode 100644 index a3ba841bdd7..00000000000 --- a/stable/traefik/7.1.3/templates/common.yaml +++ /dev/null @@ -1,24 +0,0 @@ -{{/* Make sure all variables are set properly */}} -{{- include "common.values.setup" . }} - -{{- if .Values.metrics }} -{{- if .Values.metrics.prometheus }} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "true" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/path" "/metrics" -}} -{{- $_ := set .Values.podAnnotations "prometheus.io/scrape" "9100" -}} -{{- end }} -{{- end }} - -{{- $newArgs := (include "traefik.args" . | fromYaml) }} -{{- $_ := set .Values "newArgs" $newArgs -}} -{{- $mergedargs := concat .Values.args .Values.newArgs.args }} -{{- $_ := set .Values "args" $mergedargs -}} - -{{- include "traefik.portalhook" . }} -{{- include "traefik.tlsOptions" . }} -{{- include "traefik.ingressRoute" . }} -{{- include "traefik.ingressClass" . }} - - -{{/* Render the templates */}} -{{ include "common.all" . }} diff --git a/stable/traefik/7.1.3/templates/middlewares/basic-middleware.yaml b/stable/traefik/7.1.3/templates/middlewares/basic-middleware.yaml deleted file mode 100644 index 145f5c9a594..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/basic-middleware.yaml +++ /dev/null @@ -1,63 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: compress - namespace: {{ $namespace }} -spec: - compress: {} ---- -# Here, an average of 300 requests per second is allowed. -# In addition, a burst of 200 requests is allowed. -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-ratelimit - namespace: {{ $namespace }} -spec: - rateLimit: - average: 300 - burst: 200 ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: basic-secure-headers - namespace: {{ $namespace }} -spec: - headers: - accessControlAllowMethods: - - GET - - OPTIONS - - HEAD - - PUT - accessControlMaxAge: 100 - sslRedirect: true - # stsSeconds: 63072000 - # stsIncludeSubdomains: false - # stsPreload: false - # forceSTSHeader: true - contentTypeNosniff: true - browserXssFilter: true - sslForceHost: true - referrerPolicy: same-origin - customResponseHeaders: - X-Robots-Tag: 'none' - server: '' ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: chain-basic - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: basic-ratelimit - - name: basic-secure-headers - - name: compress diff --git a/stable/traefik/7.1.3/templates/middlewares/basicauth.yaml b/stable/traefik/7.1.3/templates/middlewares/basicauth.yaml deleted file mode 100644 index ccb541742f0..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/basicauth.yaml +++ /dev/null @@ -1,34 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.basicAuth }} ---- -{{- $users := list }} -{{ range $index, $userdata := $middlewareData.users }} - {{ $users = append $users ( htpasswd $userdata.username $userdata.password ) }} -{{ end }} - -apiVersion: v1 -kind: Secret -metadata: - name: {{printf "%v-%v" $middlewareData.name "secret" }} - namespace: {{ $namespace }} -type: Opaque -stringData: - users: | - {{- range $index, $user := $users }} - {{ printf "%s" $user }} - {{- end }} ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - basicAuth: - secret: {{printf "%v-%v" $middlewareData.name "secret" }} -{{ end }} diff --git a/stable/traefik/7.1.3/templates/middlewares/chain.yaml b/stable/traefik/7.1.3/templates/middlewares/chain.yaml deleted file mode 100644 index e22eb312207..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/chain.yaml +++ /dev/null @@ -1,21 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.chain }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - chain: - middlewares: - {{ range $index, $chainData := . }} - - name: {{ printf "%v-%v@%v" $namespace $chainData.name "kubernetescrd" }} - {{ end }} -{{ end }} diff --git a/stable/traefik/7.1.3/templates/middlewares/forwardauth.yaml b/stable/traefik/7.1.3/templates/middlewares/forwardauth.yaml deleted file mode 100644 index 53f4ef5cc18..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/forwardauth.yaml +++ /dev/null @@ -1,28 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.forwardAuth }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - forwardAuth: - address: {{ $middlewareData.address }} - {{- if $middlewareData.authResponseHeaders }} - authResponseHeaders: {{ $middlewareData.authResponseHeaders }} - {{- end }} - {{- if $middlewareData.authRequestHeaders }} - authRequestHeaders: {{ $middlewareData.authRequestHeaders }} - {{- end }} - {{- if $middlewareData.authResponseHeadersRegex }} - authResponseHeadersRegex: {{ $middlewareData.authResponseHeadersRegex }} - {{- end }} - {{- if $middlewareData.trustForwardHeader }} - trustForwardHeader: true - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.3/templates/middlewares/ipwhitelist.yaml b/stable/traefik/7.1.3/templates/middlewares/ipwhitelist.yaml deleted file mode 100644 index 82467dea0b9..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/ipwhitelist.yaml +++ /dev/null @@ -1,33 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.ipWhiteList }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - ipWhiteList: - sourceRange: - {{- range $middlewareData.sourceRange }} - - {{ . }} - {{- end }} - {{- if $middlewareData.ipStrategy }} - ipStrategy: - {{- if $middlewareData.ipStrategy.depth }} - depth: {{ $middlewareData.ipStrategy.depth }} - {{- end }} - {{- if $middlewareData.ipStrategy.excludedIPs }} - excludedIPs: - {{- range $middlewareData.ipStrategy.excludedIPs }} - - {{ . }} - {{- end }} - {{- end }} - {{- end }} -{{ end }} diff --git a/stable/traefik/7.1.3/templates/middlewares/ratelimit.yaml b/stable/traefik/7.1.3/templates/middlewares/ratelimit.yaml deleted file mode 100644 index 144b9d8bf38..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/ratelimit.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.rateLimit }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - rateLimit: - average: {{ $middlewareData.average }} - burst: {{ $middlewareData.burst }} -{{ end }} diff --git a/stable/traefik/7.1.3/templates/middlewares/redirectScheme.yaml b/stable/traefik/7.1.3/templates/middlewares/redirectScheme.yaml deleted file mode 100644 index f2413f84e19..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/redirectScheme.yaml +++ /dev/null @@ -1,19 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectScheme }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectScheme: - scheme: {{ $middlewareData.scheme }} - permanent: {{ $middlewareData.permanent }} -{{ end }} diff --git a/stable/traefik/7.1.3/templates/middlewares/redirectregex.yaml b/stable/traefik/7.1.3/templates/middlewares/redirectregex.yaml deleted file mode 100644 index 683aec93d72..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/redirectregex.yaml +++ /dev/null @@ -1,20 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} -{{ range $index, $middlewareData := .Values.middlewares.redirectRegex }} - ---- -# Declaring the user list -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: {{ $middlewareData.name }} - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: {{ $middlewareData.regex | quote }} - replacement: {{ $middlewareData.replacement | quote }} - permanent: {{ $middlewareData.replacement }} -{{ end }} diff --git a/stable/traefik/7.1.3/templates/middlewares/tc-nextcloud.yaml b/stable/traefik/7.1.3/templates/middlewares/tc-nextcloud.yaml deleted file mode 100644 index aa445bccfee..00000000000 --- a/stable/traefik/7.1.3/templates/middlewares/tc-nextcloud.yaml +++ /dev/null @@ -1,69 +0,0 @@ -{{- $values := .Values }} -{{- $namespace := ( printf "ix-%s" .Release.Name ) }} -{{- if or ( not .Values.ingressClass.enabled ) ( and ( .Values.ingressClass.enabled ) ( .Values.ingressClass.isDefaultClass ) ) }} -{{- $namespace = "default" }} -{{- end }} ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-headers - namespace: {{ $namespace }} -spec: - headers: - stsSeconds: 63072000 - forceSTSHeader: true ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-dav - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: "https://(.*)/.well-known/(card|cal)dav" - replacement: "https://${1}/remote.php/dav/" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-finger - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: "https://(.*)/.well-known/webfinger" - replacement: "https://${1}/public.php?service=webfinger" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmeta - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta" - replacement: "https://${1}/public.php?service=host-meta" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-redirectregex-hostmetajson - namespace: {{ $namespace }} -spec: - redirectRegex: - regex: "https://(.*)/.well-known/host-meta.json" - replacement: "https://${1}/public.php?service=host-meta-json" ---- -apiVersion: traefik.containo.us/v1alpha1 -kind: Middleware -metadata: - name: tc-nextcloud-chain - namespace: {{ $namespace }} -spec: - chain: - middlewares: - - name: tc-nextcloud-headers - - name: tc-nextcloud-redirectregex-dav - - name: tc-nextcloud-redirectregex-finger - - name: tc-nextcloud-redirectregex-hostmetajson - - name: tc-nextcloud-redirectregex-hostmeta diff --git a/stable/traefik/7.1.3/test_values.yaml b/stable/traefik/7.1.3/test_values.yaml deleted file mode 100644 index 0cb9f617ac8..00000000000 --- a/stable/traefik/7.1.3/test_values.yaml +++ /dev/null @@ -1,333 +0,0 @@ -# Default values for Traefik -image: - repository: traefik - # defaults to appVersion - tag: v2.5.2 - pullPolicy: IfNotPresent - -# -- Use ingressClass. Ignored if Traefik version < 2.3 / kubernetes < 1.18.x -ingressClass: - # true is not unit-testable yet, pending https://github.com/rancher/helm-unittest/pull/12 - enabled: false - isDefaultClass: false - # Use to force a networking.k8s.io API Version for certain CI/CD applications. E.g. "v1beta1" - fallbackApiVersion: "" - -# -- Activate Pilot integration -pilot: - enabled: false - token: "" - # Toggle Pilot Dashboard - # dashboard: false - -# -- Create an IngressRoute for the dashboard -ingressRoute: - dashboard: - enabled: true - # Additional ingressRoute annotations (e.g. for kubernetes.io/ingress.class) - annotations: {} - # Additional ingressRoute labels (e.g. for filtering IngressRoute by custom labels) - labels: {} - -# -# -- Configure providers -providers: - kubernetesCRD: - enabled: true - namespaces: [] - # - "default" - kubernetesIngress: - enabled: true - # labelSelector: environment=production,method=traefik - namespaces: [] - # - "default" - # IP used for Kubernetes Ingress endpoints - publishedService: - enabled: true - # Published Kubernetes Service to copy status from. Format: namespace/servicename - # By default this Traefik service - # pathOverride: "" - - -# -- Logs -# https://docs.traefik.io/observability/logs/ -logs: - # Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). - general: - # By default, the logs use a text format (common), but you can - # also ask for the json format in the format option - # format: json - # By default, the level is set to ERROR. Alternative logging levels are DEBUG, PANIC, FATAL, ERROR, WARN, and INFO. - level: ERROR - access: - # To enable access logs - enabled: false - # By default, logs are written using the Common Log Format (CLF). - # To write logs in JSON, use json in the format option. - # If the given format is unsupported, the default (CLF) is used instead. - # format: json - # To write the logs in an asynchronous fashion, specify a bufferingSize option. - # This option represents the number of log lines Traefik will keep in memory before writing - # them to the selected output. In some cases, this option can greatly help performances. - # bufferingSize: 100 - # Filtering https://docs.traefik.io/observability/access-logs/#filtering - filters: {} - # statuscodes: "200,300-302" - # retryattempts: true - # minduration: 10ms - # Fields - # https://docs.traefik.io/observability/access-logs/#limiting-the-fieldsincluding-headers - fields: - general: - defaultmode: keep - names: {} - # Examples: - # ClientUsername: drop - headers: - defaultmode: drop - names: {} - # Examples: - # User-Agent: redact - # Authorization: drop - # Content-Type: keep - -metrics: - # datadog: - # address: 127.0.0.1:8125 - # influxdb: - # address: localhost:8089 - # protocol: udp - prometheus: - entryPoint: metrics - # statsd: - # address: localhost:8125 - -globalArguments: - - "--global.checknewversion" - -## -# -- Additional arguments to be passed at Traefik's binary -# All available options available on https://docs.traefik.io/reference/static-configuration/cli/ -## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"` -additionalArguments: - - "--metrics.prometheus" - - "--ping" - - "--serverstransport.insecureskipverify=true" - - "--providers.kubernetesingress.allowexternalnameservices=true" - - -# -- TLS Options to be created as TLSOption CRDs -# https://doc.traefik.io/traefik/https/tls/#tls-options -# Example: -tlsOptions: - default: - sniStrict: false - minVersion: VersionTLS12 - curvePreferences: - - CurveP521 - - CurveP384 - cipherSuites: - - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 - - TLS_AES_128_GCM_SHA256 - - TLS_AES_256_GCM_SHA384 - - TLS_CHACHA20_POLY1305_SHA256 - -# -- Options for the main traefik service, where the entrypoints traffic comes from -# from. -service: - main: - enabled: true - type: LoadBalancer - ports: - main: - enabled: true - port: 9000 - protocol: HTTP - tcp: - enabled: true - type: LoadBalancer - ports: - web: - enabled: true - port: 9080 - protocol: HTTP - redirectTo: websecure - websecure: - enabled: true - port: 9443 - protocol: HTTPS -# tcpexample: -# enabled: true -# port: 9443 -# protocol: TCP -# tls: -# enabled: false -# # this is the name of a TLSOption definition -# options: "" -# certResolver: "" -# domains: [] -# # - main: example.com -# # sans: -# # - foo.example.com -# # - bar.example.com - metrics: - enabled: true - type: LoadBalancer - ports: - metrics: - enabled: true - port: 9100 - protocol: HTTP - udp: - enabled: false - - -probes: - # -- Liveness probe configuration - # @default -- See below - liveness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Redainess probe configuration - # @default -- See below - readiness: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - - # -- Startup probe configuration - # @default -- See below - startup: - # -- sets the probe type when not using a custom probe - # @default -- "TCP" - type: HTTP - # -- If a HTTP probe is used (default for HTTP/HTTPS services) this path is used - # @default -- "/" - path: "/ping" - - -# -- Whether Role Based Access Control objects like roles and rolebindings should be created -rbac: - enabled: true - rules: - - apiGroups: - - "" - resources: - - services - - endpoints - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - - ingressclasses - verbs: - - get - - list - - watch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses/status - verbs: - - update - - apiGroups: - - traefik.containo.us - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch - - -# -- The service account the pods will use to interact with the Kubernetes API -serviceAccount: - enabled: true - # If set, an existing service account is used - # If not set, a service account is created automatically using the fullname template - name: "" - -# -- Set the container security context -# To run the container with ports below 1024 this will need to be adjust to run as root -securityContext: - capabilities: - drop: [ALL] - readOnlyRootFilesystem: true - runAsGroup: 568 - runAsNonRoot: true - runAsUser: 568 - -podSecurityContext: - fsGroup: 568 - -# -- SCALE Middleware Handlers -middlewares: - basicAuth: [] - # - name: basicauthexample - # users: - # - username: testuser - # password: testpassword - forwardAuth: [] - # - name: forwardAuthexample - # address: https://auth.example.com/ - # authResponseHeaders: - # - X-Secret - # - X-Auth-User - # authRequestHeaders: - # - "Accept" - # - "X-CustomHeader" - # authResponseHeadersRegex: "^X-" - # trustForwardHeader: true - chain: [] - # - name: chainname - # middlewares: - # - name: compress - redirectScheme: [] - # - name: redirectSchemeName - # scheme: https - # permanent: true - rateLimit: [] - # - name: rateLimitName - # average: 300 - # burst: 200 - redirectRegex: [] - # - name: redirectRegexName - # regex: putregexhere - # replacement: replacementurlhere - # permanent: false - ipWhiteList: [] - # - name: ipWhiteListName - # sourceRange: [] - # ipStrategy: - # depth: 2 - # excludedIPs: [] - -portalhook: - enabled: true diff --git a/stable/traefik/7.1.3/values.yaml b/stable/traefik/7.1.3/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/stable/unifi/6.11.15/CHANGELOG.md b/stable/unifi/6.11.15/CHANGELOG.md deleted file mode 100644 index ec01bcc857d..00000000000 --- a/stable/unifi/6.11.15/CHANGELOG.md +++ /dev/null @@ -1,8 +0,0 @@ - - -## [unifi-6.11.15](https://github.com/truecharts/apps/compare/unifi-6.11.14...unifi-6.11.15) (2021-09-08) - -### Fix - -* repair Hyperion and some misplaced GUI elements ([#922](https://github.com/truecharts/apps/issues/922)) - diff --git a/stable/unifi/6.11.15/CONFIG.md b/stable/unifi/6.11.15/CONFIG.md deleted file mode 100644 index fc9b2fa2d5f..00000000000 --- a/stable/unifi/6.11.15/CONFIG.md +++ /dev/null @@ -1,8 +0,0 @@ -# Configuration Options - -##### Connecting to other apps -If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide: -https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/ - -##### Available config options -In the future this page is going to contain an automated list of options available in the installation/edit UI. diff --git a/stable/unifi/6.11.15/Chart.lock b/stable/unifi/6.11.15/Chart.lock deleted file mode 100644 index 4d7c5467cf0..00000000000 --- a/stable/unifi/6.11.15/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -digest: sha256:7c137b201e33de386c8012e58dd401f81aa3b8e8cade47c7de48db3e58342823 -generated: "2021-09-08T03:29:47.561116272Z" diff --git a/stable/unifi/6.11.15/Chart.yaml b/stable/unifi/6.11.15/Chart.yaml deleted file mode 100644 index 61c343e0c89..00000000000 --- a/stable/unifi/6.11.15/Chart.yaml +++ /dev/null @@ -1,24 +0,0 @@ -apiVersion: v2 -appVersion: auto -dependencies: -- name: common - repository: https://truecharts.org/ - version: 6.13.8 -deprecated: false -description: Ubiquiti Network's Unifi Controller -home: https://github.com/truecharts/apps/tree/master/charts/incubator/unifi -icon: https://dl.ubnt.com/press/logo-UniFi.png -keywords: -- ubiquiti -- unifi -kubeVersion: '>=1.16.0-0' -maintainers: -- email: info@truecharts.org - name: TrueCharts - url: truecharts.org -name: unifi -sources: -- https://github.com/jacobalberty/unifi-docker -- https://unifi-network.ui.com -type: application -version: 6.11.15 diff --git a/stable/unifi/6.11.15/README.md b/stable/unifi/6.11.15/README.md deleted file mode 100644 index 650f40912be..00000000000 --- a/stable/unifi/6.11.15/README.md +++ /dev/null @@ -1,38 +0,0 @@ -# Introduction - -Ubiquiti Network's Unifi Controller - -TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation. -**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)** - -## Source Code - -* -* - -## Requirements - -Kubernetes: `>=1.16.0-0` - -## Dependencies - -| Repository | Name | Version | -|------------|------|---------| -| https://truecharts.org/ | common | 6.13.8 | - -## Installing the Chart - -To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/). - -## Uninstalling the Chart - -To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/). - -## Support - -- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first. -- See the [Wiki](https://truecharts.org) -- Check our [Discord](https://discord.gg/tVsPTHWTtr) -- Open a [issue](https://github.com/truecharts/apps/issues/new/choose) ---- -All Rights Reserved - The TrueCharts Project diff --git a/stable/unifi/6.11.15/app-readme.md b/stable/unifi/6.11.15/app-readme.md deleted file mode 100644 index 7c759aa8254..00000000000 --- a/stable/unifi/6.11.15/app-readme.md +++ /dev/null @@ -1,3 +0,0 @@ -Ubiquiti Network's Unifi Controller - -This App is supplied by TrueCharts, for more information please visit https://truecharts.org diff --git a/stable/unifi/6.11.15/charts/common-6.13.8.tgz b/stable/unifi/6.11.15/charts/common-6.13.8.tgz deleted file mode 100644 index d3fd2fa87de..00000000000 Binary files a/stable/unifi/6.11.15/charts/common-6.13.8.tgz and /dev/null differ diff --git a/stable/unifi/6.11.15/helm-values.md b/stable/unifi/6.11.15/helm-values.md deleted file mode 100644 index 70ecd004a6b..00000000000 --- a/stable/unifi/6.11.15/helm-values.md +++ /dev/null @@ -1,40 +0,0 @@ -# Default Helm-Values - -TrueCharts is primarily build to supply TrueNAS SCALE Apps. -However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file. - -Most of our Apps also consume our "common" Helm Chart. -If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart. -You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document. - -## Values - -| Key | Type | Default | Description | -|-----|------|---------|-------------| -| env.PGID | string | `"568"` | | -| env.PUID | string | `"568"` | | -| envTpl.UNIFI_GID | string | `"{{ .Values.env.PUID }}"` | | -| envTpl.UNIFI_UID | string | `"{{ .Values.env.PGID }}"` | | -| image.pullPolicy | string | `"IfNotPresent"` | | -| image.repository | string | `"jacobalberty/unifi"` | | -| image.tag | string | `"v6.2.26"` | | -| persistence.config.accessMode | string | `"ReadWriteOnce"` | | -| persistence.config.enabled | bool | `true` | | -| persistence.config.mountPath | string | `"/unifi"` | | -| persistence.config.size | string | `"100Gi"` | | -| persistence.config.type | string | `"pvc"` | | -| service.comm.enabled | bool | `true` | | -| service.comm.ports.tcp.enabled | bool | `true` | | -| service.comm.ports.tcp.port | int | `8080` | | -| service.comm.ports.tcp.protocol | string | `"TCP"` | | -| service.comm.ports.tcp.targetPort | int | `8080` | | -| service.main.ports.main.port | int | `8443` | | -| service.main.ports.main.protocol | string | `"HTTPS"` | | -| service.stun.enabled | bool | `true` | | -| service.stun.ports.udp.enabled | bool | `true` | | -| service.stun.ports.udp.port | int | `3478` | | -| service.stun.ports.udp.protocol | string | `"UDP"` | | -| service.stun.ports.udp.targetPort | int | `3478` | | -| strategy.type | string | `"Recreate"` | | - -All Rights Reserved - The TrueCharts Project diff --git a/stable/unifi/6.11.15/ix_values.yaml b/stable/unifi/6.11.15/ix_values.yaml deleted file mode 100644 index c32ec8b42a3..00000000000 --- a/stable/unifi/6.11.15/ix_values.yaml +++ /dev/null @@ -1,19 +0,0 @@ -## -# This file contains Values.yaml content that gets added to the output of questions.yaml -# It's ONLY meant for content that the user is NOT expected to change. -# Example: Everything under "image" is not included in questions.yaml but is included here. -## - -image: - repository: jacobalberty/unifi - tag: v6.2.26 - pullPolicy: IfNotPresent - -envTpl: - # Permissions Settings - UNIFI_GID: "{{ .Values.env.PUID }}" - UNIFI_UID: "{{ .Values.env.PGID }}" -## -# Most other defaults are set in questions.yaml -# For other options please refer to the wiki, default_values.yaml or the common library chart -## diff --git a/stable/unifi/6.11.15/questions.yaml b/stable/unifi/6.11.15/questions.yaml deleted file mode 100644 index 5a6e41d5ca1..00000000000 --- a/stable/unifi/6.11.15/questions.yaml +++ /dev/null @@ -1,1257 +0,0 @@ -groups: - - name: "Container Image" - description: "Image to be used for container" - - name: "Controller" - description: "Configure workload deployment" - - name: "Container Configuration" - description: "additional container configuration" - - name: "App Configuration" - description: "App specific config options" - - name: "Networking and Services" - description: "Configure Network and Services for container" - - name: "Storage and Persistence" - description: "Persist and share data that is separate from the container" - - name: "Ingress" - description: "Ingress Configuration" - - name: "Security and Permissions" - description: "Configure security context and permissions" - - name: "Resources and Devices" - description: "Specify resources/devices to be allocated to workload" - - name: "Advanced" - description: "Advanced Configuration" -portals: - web_portal: - protocols: - - "$kubernetes-resource_configmap_portal_protocol" - host: - - "$kubernetes-resource_configmap_portal_host" - ports: - - "$kubernetes-resource_configmap_portal_port" -questions: - - variable: portal - group: "Container Image" - label: "Configure Portal Button" - schema: - type: dict - hidden: true - attrs: - - variable: enabled - label: "Enable" - description: "enable the portal button" - schema: - hidden: true - editable: false - type: boolean - default: true - - variable: controller - group: "Controller" - label: "" - schema: - type: dict - attrs: - - variable: type - description: "Please specify type of workload to deploy" - label: "(Advanced) Controller Type" - schema: - type: string - default: "deployment" - required: true - enum: - - value: "deployment" - description: "Deployment" - - value: "statefulset" - description: "Statefulset" - - value: "daemonset" - description: "Daemonset" - - variable: replicas - description: "Number of desired pod replicas" - label: "Desired Replicas" - schema: - type: int - default: 1 - required: true - - variable: strategy - description: "Please specify type of workload to deploy" - label: "(Advanced) Update Strategy" - schema: - type: string - default: "Recreate" - required: true - enum: - - value: "Recreate" - description: "Recreate: Kill existing pods before creating new ones" - - value: "RollingUpdate" - description: "RollingUpdate: Create new pods and then kill old ones" - - value: "OnDelete" - description: "(Legacy) OnDelete: ignore .spec.template changes" - - variable: labelsList - label: "Controller Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: " Controller Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - - variable: podLabelsList - group: "Container Configuration" - label: "Pod Labels" - schema: - type: list - default: [] - items: - - variable: podLabelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: podAnnotationsList - group: "Container Configuration" - label: "Pod Annotations" - schema: - type: list - default: [] - items: - - variable: podAnnotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: termination - group: "Container Configuration" - label: "Termination settings" - schema: - type: dict - attrs: - - variable: gracePeriodSeconds - label: "Grace Period Seconds" - schema: - type: int - default: 10 - - variable: env - group: "Container Configuration" - label: "Image Environment" - schema: - type: dict - attrs: - - variable: TZ - label: "Timezone" - schema: - type: string - default: "Etc/UTC" - $ref: - - "definitions/timezone" - - variable: PUID - label: "PUID" - description: "Sets the PUID env var for LinuxServer.io (compatible) containers" - schema: - type: int - default: 568 - - variable: PGID - label: "PGID" - description: "Sets the PGID env var for LinuxServer.io (compatible) containers" - schema: - type: int - default: 568 - - variable: UMASK - label: "UMASK" - description: "Sets the UMASK env var for LinuxServer.io (compatible) containers" - schema: - type: string - default: "002" - # Configure Enviroment Variables - - variable: envList - label: "Image environment" - group: "Container Configuration" - schema: - type: list - default: [] - items: - - variable: envItem - label: "Environment Variable" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - - variable: hostNetwork - group: "Networking and Services" - label: "Enable Host Networking" - schema: - type: boolean - default: false - - - variable: service - group: "Networking and Services" - label: "Configure Service(s)" - schema: - type: dict - attrs: - - variable: main - label: "Main Service" - description: "The Primary service on which the healthcheck runs, often the webUI" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: main - label: "Main Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "HTTPS" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 8443 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 8443 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - default: 36035 - - variable: comm - label: "Unifi Device Communication Service" - description: "Unifi Device Communication Service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: tcp - label: "TCP Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 8080 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 8080 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - - variable: stun - label: "STUN Device Communication Service" - description: "STUN Device Communication Service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "LoadBalancer" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: ports - label: "Service's Port(s) Configuration" - schema: - type: dict - attrs: - - variable: udp - label: "TCP Service Port Configuration" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: protocol - label: "Port Type" - schema: - type: string - default: "UDP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - default: 3478 - editable: false - hidden: true - - variable: port - label: "Container Port" - schema: - type: int - default: 3478 - editable: true - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - - - variable: serviceList - label: "Additional Services" - group: "Networking and Services" - schema: - type: list - default: [] - items: - - variable: serviceListEntry - label: "Custom Service" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the service" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Name" - schema: - type: string - default: "" - - variable: type - label: "Service Type" - description: "ClusterIP's are only internally available, nodePorts expose the container to the host node System, Loadbalancer exposes the service using the system loadbalancer" - schema: - type: string - default: "NodePort" - enum: - - value: "NodePort" - description: "NodePort" - - value: "ClusterIP" - description: "ClusterIP" - - value: "LoadBalancer" - description: "LoadBalancer" - - variable: loadBalancerIP - label: "LoadBalancer IP" - description: "LoadBalancerIP" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: string - default: "" - - variable: externalIPs - label: "External IP's" - description: "External IP's" - schema: - show_if: [["type", "=", "LoadBalancer"]] - type: list - default: [] - items: - - variable: externalIP - label: "External IP" - schema: - type: string - - variable: portsList - label: "Additional Service Ports" - schema: - type: list - default: [] - items: - - variable: portsListEntry - label: "Custom ports" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the port" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Port Name" - schema: - type: string - default: "" - - variable: protocol - label: "Port Type" - schema: - type: string - default: "TCP" - enum: - - value: HTTP - description: "HTTP" - - value: "HTTPS" - description: "HTTPS" - - value: TCP - description: "TCP" - - value: "UDP" - description: "UDP" - - variable: targetPort - label: "Target Port" - description: "This port exposes the container port on the service" - schema: - type: int - required: true - - variable: port - label: "Container Port" - schema: - type: int - required: true - - variable: nodePort - label: "Node Port (Optional)" - description: "This port gets exposed to the node. Only considered when service type is NodePort" - schema: - type: int - min: 9000 - max: 65535 - - - variable: persistence - label: "Integrated Persistent Storage" - description: "Integrated Persistent Storage" - group: "Storage and Persistence" - schema: - type: dict - attrs: - - variable: config - label: "App Config Storage" - description: "Stores the Application Configuration." - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "pvc" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - default: "/unifi" - hidden: true - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PV" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - variable: persistenceList - label: "Additional app storage" - group: "Storage and Persistence" - schema: - type: list - default: [] - items: - - variable: persistenceListEntry - label: "Custom Storage" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable the storage" - schema: - type: boolean - default: true - - variable: type - label: "(Advanced) Type of Storage" - description: "Sets the persistence type" - schema: - type: string - default: "hostPath" - enum: - - value: "pvc" - description: "pvc" - - value: "emptyDir" - description: "emptyDir" - - value: "hostPath" - description: "hostPath" - - variable: storageClass - label: "(Advanced) storageClass" - description: " Warning: Anything other than SCALE-ZFS will break rollback!" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "SCALE-ZFS" - - variable: setPermissions - label: "Automatic Permissions" - description: "Automatically set permissions on install" - schema: - show_if: [["type", "=", "hostPath"]] - type: boolean - default: true - - variable: readOnly - label: "readOnly" - schema: - type: boolean - default: false - - variable: hostPath - label: "hostPath" - description: "Path inside the container the storage is mounted" - schema: - show_if: [["type", "=", "hostPath"]] - type: hostpath - - variable: hostPathType - label: "hostPath Type" - schema: - show_if: [["type", "=", "hostPath"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "DirectoryOrCreate" - description: "DirectoryOrCreate" - - value: "Directory" - description: "Directory" - - value: "FileOrCreate" - description: "FileOrCreate" - - value: "File" - description: "File" - - value: "Socket" - description: "Socket" - - value: "CharDevice" - description: "CharDevice" - - value: "BlockDevice" - description: "BlockDevice" - - variable: mountPath - label: "mountPath" - description: "Path inside the container the storage is mounted" - schema: - type: string - required: true - default: "" - - variable: medium - label: "EmptyDir Medium" - schema: - show_if: [["type", "=", "emptyDir"]] - type: string - default: "" - enum: - - value: "" - description: "Default" - - value: "Memory" - description: "Memory" - - variable: accessMode - label: "Access Mode (Advanced)" - description: "Allow or disallow multiple PVC's writhing to the same PVC" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "ReadWriteOnce" - enum: - - value: "ReadWriteOnce" - description: "ReadWriteOnce" - - value: "ReadOnlyMany" - description: "ReadOnlyMany" - - value: "ReadWriteMany" - description: "ReadWriteMany" - - variable: size - label: "Size quotum of storage" - schema: - show_if: [["type", "=", "pvc"]] - type: string - default: "100Gi" - - - variable: ingress - label: "" - group: "Ingress" - schema: - type: dict - attrs: - - variable: main - label: "Main Ingress" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable Ingress" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: hosts - label: "Hosts" - schema: - type: list - default: [] - items: - - variable: hostEntry - label: "Host" - schema: - type: dict - attrs: - - variable: host - label: "HostName" - schema: - type: string - default: "" - required: true - - variable: paths - label: "Paths" - schema: - type: list - default: [] - items: - - variable: pathEntry - label: "Host" - schema: - type: dict - attrs: - - variable: path - label: "path" - schema: - type: string - required: true - default: "/" - - variable: pathType - label: "pathType" - schema: - type: string - required: true - default: "Prefix" - - variable: tls - label: "TLS-Settings" - schema: - type: list - default: [] - items: - - variable: tlsEntry - label: "Host" - schema: - type: dict - attrs: - - variable: hosts - label: "Certificate Hosts" - schema: - type: list - default: [] - items: - - variable: host - label: "Host" - schema: - type: string - default: "" - required: true - - variable: scaleCert - label: "Select TrueNAS SCALE Certificate" - schema: - type: int - $ref: - - "definitions/certificate" - - variable: entrypoint - label: "Traefik Entrypoint" - description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" - schema: - type: string - default: "websecure" - required: true - - variable: middlewares - label: "Traefik Middlewares" - description: "Add previously created Traefik Middlewares to this Ingress" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - default: "" - required: true - - - - - variable: ingressList - label: "Additional Ingress" - group: "Ingress" - schema: - type: list - default: [] - items: - - variable: ingressListEntry - label: "Custom Ingress" - schema: - type: dict - attrs: - - variable: enabled - label: "Enable Ingress" - schema: - type: boolean - default: true - hidden: true - - variable: name - label: "Name" - schema: - type: string - default: "" - - variable: ingressClassName - label: "IngressClass Name" - schema: - type: string - default: "" - - variable: labelsList - label: "Labels" - schema: - type: list - default: [] - items: - - variable: labelItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: annotationsList - label: "Annotations" - schema: - type: list - default: [] - items: - - variable: annotationItem - label: "Label" - schema: - type: dict - attrs: - - variable: name - label: "Name" - schema: - type: string - - variable: value - label: "Value" - schema: - type: string - - variable: hosts - label: "Hosts" - schema: - type: list - default: [] - items: - - variable: hostEntry - label: "Host" - schema: - type: dict - attrs: - - variable: host - label: "HostName" - schema: - type: string - default: "" - required: true - - variable: paths - label: "Paths" - schema: - type: list - default: [] - items: - - variable: pathEntry - label: "Host" - schema: - type: dict - attrs: - - variable: path - label: "path" - schema: - type: string - required: true - default: "/" - - variable: pathType - label: "pathType" - schema: - type: string - required: true - default: "Prefix" - - variable: service - label: "Linked Service" - schema: - type: dict - attrs: - - variable: name - label: "Service Name" - schema: - type: string - default: "" - - variable: port - label: "Service Port" - schema: - type: int - - variable: tls - label: "TLS-Settings" - schema: - type: list - default: [] - items: - - variable: tlsEntry - label: "Host" - schema: - type: dict - attrs: - - variable: hosts - label: "Certificate Hosts" - schema: - type: list - default: [] - items: - - variable: host - label: "Host" - schema: - type: string - default: "" - required: true - - variable: scaleCert - label: "Select TrueNAS SCALE Certificate" - schema: - type: int - $ref: - - "definitions/certificate" - - variable: entrypoint - label: "Traefik Entrypoint" - description: "Entrypoint used by Traefik when using Traefik as Ingress Provider" - schema: - type: string - default: "websecure" - required: true - - variable: middlewares - label: "Traefik Middlewares" - description: "Add previously created Traefik Middlewares to this Ingress" - schema: - type: list - default: [] - items: - - variable: name - label: "Name" - schema: - type: string - default: "" - required: true - - - variable: securityContext - group: "Security and Permissions" - label: "Security Context" - schema: - type: dict - attrs: - - variable: privileged - label: "Privileged mode" - schema: - type: boolean - default: false - - variable: readOnlyRootFilesystem - label: "ReadOnly Root Filesystem" - schema: - type: boolean - default: false - - variable: allowPrivilegeEscalation - label: "Allow Privilege Escalation" - schema: - type: boolean - default: true - - variable: resources - group: "Resources and Devices" - label: "" - schema: - type: dict - attrs: - - variable: limits - label: "Advanced Limit Resource Consumption" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "2000m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "2Gi" - - variable: requests - label: "Advanced Request minimum resources required" - schema: - type: dict - attrs: - - variable: cpu - label: "CPU" - schema: - type: string - default: "10m" - - variable: memory - label: "Memory RAM" - schema: - type: string - default: "50Mi" - - - - variable: autoscaling - group: "Resources and Devices" - label: "Horizontal Pod Autoscaler" - schema: - type: dict - attrs: - - variable: enabled - label: "enabled" - schema: - type: boolean - default: false - show_subquestions_if: true - subquestions: - - variable: target - label: "Target" - description: "deployment name, defaults to main deployment" - schema: - type: string - default: "" - - variable: minReplicas - label: "Minimum Replicas" - schema: - type: int - default: 1 - - variable: maxReplicas - label: "Maximum Replicas" - schema: - type: int - default: 5 - - variable: targetCPUUtilizationPercentage - label: "Target CPU Utilization Percentage" - schema: - type: int - default: 80 - - variable: targetMemoryUtilizationPercentage - label: "Target Memory Utilization Percentage" - schema: - type: int - default: 80 diff --git a/stable/unifi/6.11.15/templates/common.yaml b/stable/unifi/6.11.15/templates/common.yaml deleted file mode 100644 index a6613c2ce21..00000000000 --- a/stable/unifi/6.11.15/templates/common.yaml +++ /dev/null @@ -1 +0,0 @@ -{{ include "common.all" . }} diff --git a/stable/unifi/6.11.15/test_values.yaml b/stable/unifi/6.11.15/test_values.yaml deleted file mode 100644 index 28ecee7e990..00000000000 --- a/stable/unifi/6.11.15/test_values.yaml +++ /dev/null @@ -1,50 +0,0 @@ -# Default values for Unifi. - -image: - repository: jacobalberty/unifi - tag: v6.2.26 - pullPolicy: IfNotPresent - -strategy: - type: Recreate - -envTpl: - # Permissions Settings - UNIFI_GID: "{{ .Values.env.PUID }}" - UNIFI_UID: "{{ .Values.env.PGID }}" - -service: - main: - ports: - main: - protocol: HTTPS - port: 8443 - comm: - enabled: true - ports: - tcp: - enabled: true - port: 8080 - targetPort: 8080 - protocol: TCP - stun: - enabled: true - ports: - udp: - enabled: true - port: 3478 - targetPort: 3478 - protocol: UDP - -env: - # TZ: - PUID: "568" - PGID: "568" - -persistence: - config: - enabled: true - mountPath: "/unifi" - type: pvc - accessMode: ReadWriteOnce - size: "100Gi" diff --git a/stable/unifi/6.11.15/values.yaml b/stable/unifi/6.11.15/values.yaml deleted file mode 100644 index e69de29bb2d..00000000000