feat(matomo): Add matomo (#2115)

* feat(matomo): Add matomo

* add vol mount in cron

* mimic nextcloud

* mimic

* root

* add envs

* drop cap

* update cron

* test cron tpl

* update default

* no tpl in cron

* test bitnami

* adjust storage

* update questions and run with debug logs on tests

* probes

* other probe

* probe

* delay probes for testing

* increase

* default probe times

* Update charts/incubator/matomo/values.yaml

* Update charts/incubator/matomo/values.yaml
This commit is contained in:
Stavros Kois 2022-03-09 22:02:54 +02:00 committed by GitHub
parent 2c79ddcb0d
commit 4a72b43fa9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
6 changed files with 607 additions and 0 deletions

View File

@ -0,0 +1,31 @@
apiVersion: v2
appVersion: "4.7.1"
dependencies:
- name: common
repository: https://truecharts.org
version: 9.1.2
- condition: mariadb.enabled
name: mariadb
repository: https://truecharts.org/
version: 2.0.1
description: Matomo is the leading Free/Libre open analytics platform
home: https://github.com/truecharts/apps/tree/master/charts/stable/matomo
icon: https://truecharts.org/_static/img/appicons/matomo.png
keywords:
- analytics
kubeVersion: '>=1.16.0-0'
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: https://truecharts.org
name: matomo
sources:
- https://hub.docker.com/_/matomo
- https://github.com/matomo-org/docker
- https://github.com/matomo-org/matomo
version: 0.0.1
annotations:
truecharts.org/catagories: |
- productivity
truecharts.org/SCALE-support: "true"
truecharts.org/grade: U

View File

@ -0,0 +1,477 @@
# Include{groups}
portals:
open:
protocols:
- "$kubernetes-resource_configmap_portal_protocol"
host:
- "$kubernetes-resource_configmap_portal_host"
ports:
- "$kubernetes-resource_configmap_portal_port"
questions:
- variable: portal
group: "Container Image"
label: "Configure Portal Button"
schema:
type: dict
hidden: true
attrs:
- variable: enabled
label: "Enable"
description: "enable the portal button"
schema:
hidden: true
editable: false
type: boolean
default: true
# Include{global}
- variable: controller
group: "Controller"
label: ""
schema:
additional_attrs: true
type: dict
attrs:
- variable: advanced
label: "Show Advanced Controller Settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: type
description: "Please specify type of workload to deploy"
label: "(Advanced) Controller Type"
schema:
type: string
default: "deployment"
required: true
enum:
- value: "deployment"
description: "Deployment"
- value: "statefulset"
description: "Statefulset"
- value: "daemonset"
description: "Daemonset"
- variable: replicas
description: "Number of desired pod replicas"
label: "Desired Replicas"
schema:
type: int
default: 1
required: true
- variable: strategy
description: "Please specify type of workload to deploy"
label: "(Advanced) Update Strategy"
schema:
type: string
default: "Recreate"
required: true
enum:
- value: "Recreate"
description: "Recreate: Kill existing pods before creating new ones"
- value: "RollingUpdate"
description: "RollingUpdate: Create new pods and then kill old ones"
- value: "OnDelete"
description: "(Legacy) OnDelete: ignore .spec.template changes"
# Include{controllerExpert}
- variable: env
group: "Container Configuration"
label: "Image Environment"
schema:
additional_attrs: true
type: dict
attrs:
- variable: BITNAMI_DEBUG
label: "BITNAMI_DEBUG"
description: "Increase verbosity on initialization logs."
schema:
type: boolean
default: false
- variable: MATOMO_USERNAME
label: "MATOMO_USERNAME (First Install Only)"
description: "Matomo application username"
schema:
type: string
required: true
default: "admin"
- variable: MATOMO_PASSWORD
label: "MATOMO_PASSWORD (First Install Only)"
description: "Matomo application password"
schema:
type: string
required: true
private: true
default: ""
- variable: MATOMO_HOST
label: "MATOMO_HOST (First Install Only)"
description: "Matomo application host"
schema:
type: string
required: true
default: "127.0.0.1"
- variable: MATOMO_EMAIL
label: "MATOMO_EMAIL (First Install Only)"
description: "Matomo application email"
schema:
type: string
required: true
default: "email@example.com"
- variable: MATOMO_WEBSITE_NAME
label: "MATOMO_WEBSITE_NAME (First Install Only)"
description: "Name of a website to track in Matomo"
schema:
type: string
required: true
default: "My Website"
- variable: MATOMO_WEBSITE_HOST
label: "MATOMO_WEBSITE_HOST (First Install Only)"
description: "Website's host or domain to track in Matomo"
schema:
type: string
required: true
default: "https://web.example.com"
- variable: MATOMO_SMTP_HOST
label: "MATOMO_SMTP_HOST (First Install Only)"
description: "Matomo SMTP host"
schema:
type: string
default: ""
- variable: MATOMO_SMTP_PORT
label: "MATOMO_SMTP_PORT (First Install Only)"
description: "Matomo SMTP port"
schema:
type: string
default: ""
- variable: MATOMO_SMTP_USER
label: "MATOMO_SMTP_USER (First Install Only)"
description: "Matomo SMTP user"
schema:
type: string
default: ""
- variable: MATOMO_SMTP_PASSWORD
label: "MATOMO_SMTP_PASSWORD (First Install Only)"
description: "Matomo SMTP password"
schema:
type: string
private: true
default: ""
- variable: MATOMO_SMTP_PROTOCOL
label: "MATOMO_SMTP_PROTOCOL (First Install Only)"
description: "Matomo SMTP protocol"
schema:
type: string
private: true
default: "none"
enum:
- value: ssl
description: "ssl"
- value: "tls"
description: "tls"
- value: none
description: "none"
- variable: MATOMO_SMTP_AUTH
label: "MATOMO_SMTP_AUTH (First Install Only)"
description: "Matomo SMTP authentication mechanism to use"
schema:
type: string
private: true
default: "Plain"
enum:
- value: Crammd5
description: "Crammd5"
- value: "Login"
description: "Login"
- value: Plain
description: "Plain"
- variable: phpconfig
label: "PHP Config (Advanced)"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: PHP_MEMORY_LIMIT
label: "PHP_MEMORY_LIMIT"
description: "Memory limit for PHP scripts"
schema:
type: string
default: "2048M"
- variable: PHP_ENABLE_OPCACHE
label: "PHP_ENABLE_OPCACHE"
description: "Enable OPcache for PHP scripts"
schema:
type: boolean
default: true
- variable: PHP_EXPOSE_PHP
label: "PHP_EXPOSE_PHP"
description: "Enables HTTP header with PHP version"
schema:
type: boolean
default: true
- variable: PHP_MAX_EXECUTION_TIME
label: "PHP_MAX_EXECUTION_TIME"
description: "Maximum execution time for PHP scripts"
schema:
type: string
default: ""
- variable: PHP_MAX_INPUT_TIME
label: "PHP_MAX_INPUT_TIME"
description: "Maximum input time for PHP scripts"
schema:
type: string
default: ""
- variable: PHP_MAX_INPUT_VARS
label: "PHP_MAX_INPUT_VARS"
description: "Maximum amount of input variables for PHP scripts"
schema:
type: string
default: ""
- variable: PHP_POST_MAX_SIZE
label: "PHP_POST_MAX_SIZE"
description: "Maximum size for PHP POST requests"
schema:
type: string
default: ""
- variable: PHP_UPLOAD_MAX_FILESIZE
label: "PHP_UPLOAD_MAX_FILESIZE"
description: "Maximum file size for PHP uploads"
schema:
type: string
default: ""
# Include{containerConfig}
- variable: service
group: "Networking and Services"
label: "Configure Service(s)"
schema:
additional_attrs: true
type: dict
attrs:
- variable: main
label: "Main Service"
description: "The Primary service on which the healthcheck runs, often the webUI"
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelector}
- variable: main
label: "Main Service Port Configuration"
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: "Port"
description: "This port exposes the container port on the service"
schema:
type: int
default: 10172
required: true
- variable: advanced
label: "Show Advanced settings"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: enabled
label: "Enable the port"
schema:
type: boolean
default: true
- variable: protocol
label: "Port Type"
schema:
type: string
default: "HTTP"
enum:
- value: HTTP
description: "HTTP"
- value: "HTTPS"
description: "HTTPS"
- value: TCP
description: "TCP"
- value: "UDP"
description: "UDP"
- variable: nodePort
label: "Node Port (Optional)"
description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
schema:
type: int
min: 9000
max: 65535
- variable: targetPort
label: "Target Port"
description: "The internal(!) port on the container the Application runs on"
schema:
type: int
default: 80
- variable: serviceexpert
group: "Networking and Services"
label: "Show Expert Config"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: hostNetwork
group: "Networking and Services"
label: "Host-Networking (Complicated)"
schema:
type: boolean
default: false
# Include{serviceExpert}
# Include{serviceList}
- variable: persistence
label: "Integrated Persistent Storage"
description: "Integrated Persistent Storage"
group: "Storage and Persistence"
schema:
additional_attrs: true
type: dict
attrs:
- variable: data
label: "App Config Storage"
description: "Stores the Application Configuration."
schema:
additional_attrs: true
type: dict
attrs:
- variable: type
label: "Type of Storage"
description: "Sets the persistence type, Anything other than PVC could break rollback!"
schema:
type: string
default: "simplePVC"
enum:
- value: "simplePVC"
description: "PVC (simple)"
- value: "simpleHP"
description: "HostPath (simple)"
- value: "emptyDir"
description: "emptyDir"
- value: "pvc"
description: "pvc"
- value: "hostPath"
description: "hostPath"
# Include{persistenceBasic}
- variable: hostPath
label: "hostPath"
description: "Path inside the container the storage is mounted"
schema:
show_if: [["type", "=", "hostPath"]]
type: hostpath
- variable: medium
label: "EmptyDir Medium"
schema:
show_if: [["type", "=", "emptyDir"]]
type: string
default: ""
enum:
- value: ""
description: "Default"
- value: "Memory"
description: "Memory"
# Include{persistenceAdvanced}
# Include{persistenceList}
- variable: ingress
label: ""
group: "Ingress"
schema:
additional_attrs: true
type: dict
attrs:
- variable: main
label: "Main Ingress"
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressTLS}
# Include{ingressTraefik}
# Include{ingressExpert}
# Include{ingressList}
# Include{security}
- variable: advancedSecurity
label: "Show Advanced Security Settings"
group: "Security and Permissions"
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: securityContext
label: "Security Context"
schema:
additional_attrs: true
type: dict
attrs:
- variable: privileged
label: "Privileged mode"
schema:
type: boolean
default: false
- variable: readOnlyRootFilesystem
label: "ReadOnly Root Filesystem"
schema:
type: boolean
default: false
- variable: allowPrivilegeEscalation
label: "Allow Privilege Escalation"
schema:
type: boolean
default: false
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
type: boolean
default: false
# Include{securityContextAdvanced}
- variable: podSecurityContext
group: "Security and Permissions"
label: "Pod Security Context"
schema:
additional_attrs: true
type: dict
attrs:
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: The groupID this App of the user running the application"
schema:
type: int
default: 0
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 568
# Include{podSecurityContextAdvanced}
# Include{resources}
# Include{advanced}
# Include{addons}

View File

@ -0,0 +1 @@
{{ include "common.all" . }}

View File

@ -0,0 +1,96 @@
image:
repository: tccr.io/truecharts/matomo
tag: v4.7.1@sha256:dbfe95441f661fa5093c43b4cfca8a357a0e963dd79917e0f09cc4b2e4379013
pullPolicy: IfNotPresent
securityContext:
runAsNonRoot: false
readOnlyRootFilesystem: false
# Run as root for the cron to work
podSecurityContext:
runAsUser: 0
runAsGroup: 0
env:
BITNAMI_DEBUG: true
APACHE_HTTP_PORT_NUMBER: "{{ .Values.service.main.ports.main.port }}"
APACHE_HTTPS_PORT_NUMBER: "{{ .Values.service.https.ports.https.port }}"
MATOMO_DATABASE_PORT_NUMBER: 3306
MATOMO_DATABASE_NAME: "{{ .Values.mariadb.mariadbDatabase }}"
MATOMO_DATABASE_USER: "{{ .Values.mariadb.mariadbUsername }}"
PHP_DATE_TIMEZONE: "{{ .Values.TZ }}"
# User / Site Config
MATOMO_USERNAME: "admin"
MATOMO_PASSWORD: "password"
MATOMO_EMAIL: "myemail@example.com"
MATOMO_WEBSITE_NAME: "My Website"
MATOMO_WEBSITE_HOST: "https://web.example.com"
MATOMO_HOST: "127.0.0.1"
# Reverse Proxy Config
MATOMO_ENABLE_PROXY_URI_HEADER: false
MATOMO_ENABLE_ASSUME_SECURE_PROTOCOL: false
MATOMO_ENABLE_FORCE_SSL: false
# No defaults, but usually this header is used
# MATOMO_PROXY_CLIENT_HEADER: "HTTP_X_FORWARDED_FOR"
# SMTP Config
MATOMO_SMTP_HOST: ""
MATOMO_SMTP_PORT: ""
MATOMO_SMTP_USER: ""
MATOMO_SMTP_PASSWORD: ""
# Available protocols are: "ssl", "tls", "none"
MATOMO_SMTP_PROTOCOL: ""
# Available mechanisms are: "Plain", "Login", "Crammd5"
MATOMO_SMTP_AUTH: "Plain"
# PHP Config
PHP_MEMORY_LIMIT: "2048M"
PHP_ENABLE_OPCACHE: true
# PHP_EXPOSE_PHP:
# PHP_MAX_EXECUTION_TIME:
# PHP_MAX_INPUT_TIME:
# PHP_MAX_INPUT_VARS:
# PHP_POST_MAX_SIZE:
# PHP_UPLOAD_MAX_FILESIZE:
probes:
liveness:
path: "/index.php"
readiness:
path: "/index.php"
startup:
path: "/index.php"
service:
main:
ports:
main:
protocol: HTTP
port: 10172
targetPort: 10172
https:
ports:
https:
protocol: HTTPS
port: 10173
targetPort: 10173
persistence:
data:
enabled: true
mountPath: "/bitnami/matomo"
envValueFrom:
MATOMO_DATABASE_HOST:
secretKeyRef:
name: mariadbcreds
key: plainhost
MATOMO_DATABASE_PASSWORD:
secretKeyRef:
name: mariadbcreds
key: mariadb-password
mariadb:
enabled: true
mariadbUsername: matomo
mariadbDatabase: matomo
existingSecret: "mariadbcreds"

BIN
docs/_static/img/appicons/matomo.png vendored Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 5.2 KiB

View File

@ -329,6 +329,8 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
| openhab | main | main | 10169 | HTTP | |
| openhab | https | https | 10170 | HTTPS | |
| redmine | main | main | 10171 | HTTP | |
| matomo | main | main | 10172 | HTTP | |
| matomo | https | https | 10173 | HTTPS | |
| satisfactory | beacon | beacon | 15000 | UDP | |
| satisfactory | query | query | 15777 | UDP | |
| minecraft-bedrock | main | main | 19132 | UDP | |