Commit new Chart releases for TrueCharts

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
2022-12-24 20:37:50 +00:00 · 2022-12-24 20:37:50 +00:00 · 03807edf9a
parent dcb2efe7a6
commit 03807edf9a
15 changed files with 2630 additions and 0 deletions
--- a/incubator/penpot/1.0.0/CHANGELOG.md
+++ b/incubator/penpot/1.0.0/CHANGELOG.md
@ -0,0 +1,27 @@
+**Important:**
+*for the complete changelog, please refer to the website*
+
+
+
+
+## [penpot-1.0.0](https://github.com/truecharts/charts/compare/penpot-0.0.2...penpot-1.0.0) (2022-12-24)
+
+### Chore
+
+- fix flags ([#5685](https://github.com/truecharts/charts/issues/5685))
+  
+  
+
+
+## [penpot-0.0.2](https://github.com/truecharts/charts/compare/penpot-0.0.1...penpot-0.0.2) (2022-12-24)
+
+
+
+
+## [penpot-0.0.1]penpot-0.0.1 (2022-12-24)
+
+### Feat
+
+- add Penpot ([#4785](https://github.com/truecharts/charts/issues/4785))
+  
+  
--- a/incubator/penpot/1.0.0/Chart.yaml
+++ b/incubator/penpot/1.0.0/Chart.yaml
@ -0,0 +1,40 @@
+apiVersion: v2
+appVersion: "latest"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 11.0.9
+  - condition: postgresql.enabled
+    name: postgresql
+    repository: https://charts.truecharts.org/
+    version: 11.0.13
+  - condition: redis.enabled
+    name: redis
+    repository: https://charts.truecharts.org
+    version: 5.0.17
+deprecated: false
+description: Open Source design and prototyping platform.
+home: https://truecharts.org/docs/charts/incubator/penpot
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/penpot.png
+keywords:
+  - penpot
+  - media
+  - design
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: penpot
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/penpot
+  - https://github.com/penpot/penpot
+  - https://hub.docker.com/r/penpotapp/frontend
+  - https://hub.docker.com/r/penpotapp/backend
+type: application
+version: 1.0.0
+annotations:
+  truecharts.org/catagories: |
+    - media
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U
--- a/incubator/penpot/1.0.0/README.md
+++ b/incubator/penpot/1.0.0/README.md
@ -0,0 +1 @@
+# penpot
--- a/incubator/penpot/1.0.0/app-changelog.md
+++ b/incubator/penpot/1.0.0/app-changelog.md
@ -0,0 +1,9 @@
+
+
+## [penpot-1.0.0](https://github.com/truecharts/charts/compare/penpot-0.0.2...penpot-1.0.0) (2022-12-24)
+
+### Chore
+
+- fix flags ([#5685](https://github.com/truecharts/charts/issues/5685))
+  
+  
--- a/incubator/penpot/1.0.0/app-readme.md
+++ b/incubator/penpot/1.0.0/app-readme.md
@ -0,0 +1,8 @@
+Open Source design and prototyping platform.
+
+This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/docs/charts/incubator/penpot](https://truecharts.org/docs/charts/incubator/penpot)
+
+---
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/docs/about/sponsor) or contributing back to the project any way you can!
--- a/incubator/penpot/1.0.0/charts/common-11.0.9.tgz
+++ b/incubator/penpot/1.0.0/charts/common-11.0.9.tgz
--- a/incubator/penpot/1.0.0/charts/postgresql-11.0.13.tgz
+++ b/incubator/penpot/1.0.0/charts/postgresql-11.0.13.tgz
--- a/incubator/penpot/1.0.0/charts/redis-5.0.17.tgz
+++ b/incubator/penpot/1.0.0/charts/redis-5.0.17.tgz
--- a/incubator/penpot/1.0.0/ix_values.yaml
+++ b/incubator/penpot/1.0.0/ix_values.yaml
@ -0,0 +1,136 @@
+image:
+  repository: tccr.io/truecharts/penpot-frontend
+  pullPolicy: IfNotPresent
+  tag: 1.16.2@sha256:c41349dcd43eccf1bf61809e9d46d54dcb22bfbd31c6fb199630e2fbec54d628
+
+backendImage:
+  repository: tccr.io/truecharts/penpot-backend
+  pullPolicy: IfNotPresent
+  tag: 1.16.2@sha256:99997f7640b27274f0b1570cd8c839266661e54a3314dd1f1caf4dd1220de752
+
+exporterImage:
+  repository: tccr.io/truecharts/penpot-exporter
+  pullPolicy: IfNotPresent
+  tag: 1.16.2@sha256:8104c3dd90001ca94023b4e0f6a47bdd3868610a31f25fb2aa9e61d2f10130b3
+
+securityContext:
+  runAsNonRoot: false
+  readOnlyRootFilesystem: false
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+hostAliases:
+  - ip: 127.0.0.1
+    hostnames:
+      - penpot-backend
+      - penpot-exporter
+      - penpot-frontend
+
+penpot:
+  public_uri: "http://localhost:{{ .Values.service.main.ports.main.port }}"
+  flags:
+    registration: true
+    insecure_register: false
+    login: true
+    demo_users: false
+    demo_warning: false
+    user_feedback: false
+    mail_verification: true
+    log_invitation_token: false
+    log_emails: false
+    secure_session_cookies: true
+    cors: false
+    backend_api_doc: false
+  telemetry_enabled: false
+  registration_domain_whitelist: []
+  smtp:
+    enabled: false
+    default_from: "no-reply@example.com"
+    default_reply_to: "no-reply@example.com"
+    tls: true
+    ssl: false
+    host: ""
+    port: 587
+    user: ""
+    pass: ""
+  identity_providers:
+    google:
+      enabled: false
+      client_id: ""
+      client_secret: ""
+    github:
+      enabled: false
+      client_id: ""
+      client_secret: ""
+    gitlab:
+      enabled: false
+      base_uri: ""
+      client_id: ""
+      client_secret: ""
+    oidc:
+      enabled: false
+      base_uri: ""
+      client_id: ""
+      client_secret: ""
+    ldap:
+      enabled: false
+      host: ""
+      port: 10389
+      ssl: false
+      starttls: false
+      base_dn: ""
+      bind_dn: ""
+      bind_pass: ""
+      attrs_username: ""
+      attrs_email: ""
+      attrs_fullname: ""
+
+envFrom:
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-common-secret'
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-frontend-secret'
+
+probes:
+  liveness:
+    type: HTTP
+    path: /
+  readiness:
+    type: HTTP
+    path: /
+  startup:
+    type: HTTP
+    path: /
+
+service:
+  main:
+    ports:
+      main:
+        protocol: HTTP
+        targetPort: 80
+        port: 10592
+
+persistence:
+  data:
+    enabled: true
+    mountPath: /opt/data
+    noMount: true
+  assets:
+    enabled: true
+    mountPath: /opt/data/assets
+
+postgresql:
+  enabled: true
+  existingSecret: dbcreds
+  postgresqlDatabase: penpot
+  postgresqlUsername: penpot
+
+redis:
+  enabled: true
+  existingSecret: rediscreds
+  redisUsername: penpot
+
+portal:
+  enabled: true
--- a/incubator/penpot/1.0.0/questions.yaml
+++ b/incubator/penpot/1.0.0/questions.yaml
--- a/incubator/penpot/1.0.0/templates/_backend.tpl
+++ b/incubator/penpot/1.0.0/templates/_backend.tpl
@ -0,0 +1,39 @@
+{{/* Define the backend container */}}
+{{- define "penpot.backend" -}}
+image: {{ .Values.backendImage.repository }}:{{ .Values.backendImage.tag }}
+imagePullPolicy: '{{ .Values.backendImage.pullPolicy }}'
+securityContext:
+  runAsUser: {{ .Values.podSecurityContext.runAsUser }}
+  runAsGroup: {{ .Values.podSecurityContext.runAsGroup }}
+  readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
+  runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
+volumeMounts:
+  - name: data
+    mountPath: {{ .Values.persistence.data.mountPath }}
+envFrom:
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-common-secret'
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-backend-exporter-secret'
+readinessProbe:
+  tcpSocket:
+    port: 6060
+  initialDelaySeconds: {{ .Values.probes.readiness.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.readiness.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.readiness.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.readiness.spec.failureThreshold }}
+livenessProbe:
+  tcpSocket:
+    port: 6060
+  initialDelaySeconds: {{ .Values.probes.liveness.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.liveness.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.liveness.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.liveness.spec.failureThreshold }}
+startupProbe:
+  tcpSocket:
+    port: 6060
+  initialDelaySeconds: {{ .Values.probes.startup.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.startup.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.startup.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.startup.spec.failureThreshold }}
+{{- end }}
--- a/incubator/penpot/1.0.0/templates/_exporter.tpl
+++ b/incubator/penpot/1.0.0/templates/_exporter.tpl
@ -0,0 +1,39 @@
+{{/* Define the exporter container */}}
+{{- define "penpot.exporter" -}}
+image: {{ .Values.exporterImage.repository }}:{{ .Values.exporterImage.tag }}
+imagePullPolicy: '{{ .Values.exporterImage.pullPolicy }}'
+securityContext:
+  runAsUser: {{ .Values.podSecurityContext.runAsUser }}
+  runAsGroup: {{ .Values.podSecurityContext.runAsGroup }}
+  readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
+  runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
+envFrom:
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-common-secret'
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-exporter-secret'
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-backend-exporter-secret'
+readinessProbe:
+  tcpSocket:
+    port: 6061
+  initialDelaySeconds: {{ .Values.probes.readiness.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.readiness.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.readiness.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.readiness.spec.failureThreshold }}
+livenessProbe:
+  httpGet:
+  tcpSocket:
+    port: 6061
+  initialDelaySeconds: {{ .Values.probes.liveness.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.liveness.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.liveness.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.liveness.spec.failureThreshold }}
+startupProbe:
+  tcpSocket:
+    port: 6061
+  initialDelaySeconds: {{ .Values.probes.startup.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.startup.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.startup.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.startup.spec.failureThreshold }}
+{{- end }}
--- a/incubator/penpot/1.0.0/templates/_secret.tpl
+++ b/incubator/penpot/1.0.0/templates/_secret.tpl
@ -0,0 +1,132 @@
+{{/* Define the secret */}}
+{{- define "penpot.secret" -}}
+
+{{- $commonSecretName := printf "%s-common-secret" (include "tc.common.names.fullname" .) }}
+{{- $exporterSecretName := printf "%s-exporter-secret" (include "tc.common.names.fullname" .) }}
+{{- $frontendSecretName := printf "%s-frontend-secret" (include "tc.common.names.fullname" .) }}
+{{- $backendAndExporterSecretName := printf "%s-backend-exporter-secret" (include "tc.common.names.fullname" .) }}
+
+{{- $backendFlags := list }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-smtp" (ternary "enable" "disable" .Values.penpot.smtp.enabled)) }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-email-verification" (ternary "enable" "disable" .Values.penpot.flags.mail_verification)) }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-log-invitation-tokens" (ternary "enable" "disable" .Values.penpot.flags.log_invitation_token)) }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-log-emails" (ternary "enable" "disable" (and .Values.penpot.flags.log_emails (not .Values.penpot.smtp.enabled)))) }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-secure-session-cookies" (ternary "enable" "disable" .Values.penpot.flags.secure_session_cookies)) }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-insecure-register" (ternary "enable" "disable" .Values.penpot.flags.insecure_register)) }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-cors" (ternary "enable" "disable" .Values.penpot.flags.backend_api_doc)) }}
+{{- $backendFlags = mustAppend $backendFlags (printf "%s-backend-api-doc" (ternary "enable" "disable" .Values.penpot.flags.backend_api_doc)) }}
+
+{{- $frontendFlags := list }}
+{{- $frontendFlags = mustAppend $frontendFlags (printf "%s-demo-warning" (ternary "enable" "disable" .Values.penpot.flags.demo_warning)) }}
+
+{{- $commonFlags := list }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-login" (ternary "enable" "disable" .Values.penpot.flags.login)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-registration" (ternary "enable" "disable" .Values.penpot.flags.registration)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-demo-users" (ternary "enable" "disable" .Values.penpot.flags.demo_users)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-user-feedback" (ternary "enable" "disable" .Values.penpot.flags.user_feedback)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-login-with-google" (ternary "enable" "disable" .Values.penpot.identity_providers.google.enabled)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-login-with-github" (ternary "enable" "disable" .Values.penpot.identity_providers.github.enabled)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-login-with-gitlab" (ternary "enable" "disable" .Values.penpot.identity_providers.gitlab.enabled)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-login-with-oidc" (ternary "enable" "disable" .Values.penpot.identity_providers.oidc.enabled)) }}
+{{- $commonFlags = mustAppend $commonFlags (printf "%s-login-with-ldap" (ternary "enable" "disable" .Values.penpot.identity_providers.ldap.enabled)) }}
+
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $commonSecretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  PENPOT_TELEMETRY_ENABLED: {{ .Values.penpot.telemetry_enabled | quote }}
+  {{- with .Values.penpot.registration_domain_whitelist }}
+  PENPOT_REGISTRATION_DOMAIN_WHITELIST: {{ join "," . }}
+  {{- end }}
+  {{- if .Values.penpot.identity_providers.google.enabled }}
+  PENPOT_GOOGLE_CLIENT_ID: {{ .Values.penpot.identity_providers.google.client_id | quote }}
+  PENPOT_GOOGLE_CLIENT_SECRET: {{ .Values.penpot.identity_providers.google.client_secret | quote }}
+  {{- end }}
+  {{- if .Values.penpot.identity_providers.github.enabled }}
+  PENPOT_GITHUB_CLIENT_ID: {{ .Values.penpot.identity_providers.github.client_id | quote }}
+  PENPOT_GITHUB_CLIENT_ID: {{ .Values.penpot.identity_providers.github.client_secret | quote }}
+  {{- end }}
+  {{- if .Values.penpot.identity_providers.gitlab.enabled }}
+  PENPOT_GITLAB_BASE_URI: {{ .Values.penpot.identity_providers.gitlab.base_uri | quote }}
+  PENPOT_GITLAB_CLIENT_ID: {{ .Values.penpot.identity_providers.gitlab.client_id | quote }}
+  PENPOT_GITLAB_CLIENT_SECRET: {{ .Values.penpot.identity_providers.gitlab.client_secret | quote }}
+  {{- end }}
+  {{- if .Values.penpot.identity_providers.oidc.enabled }}
+  PENPOT_OIDC_BASE_URI: {{ .Values.penpot.identity_providers.oidc.base_uri | quote }}
+  PENPOT_OIDC_CLIENT_ID: {{ .Values.penpot.identity_providers.oidc.client_id | quote }}
+  PENPOT_OIDC_CLIENT_SECRET: {{ .Values.penpot.identity_providers.oidc.client_secret | quote }}
+  {{- end }}
+  {{- if .Values.penpot.identity_providers.ldap.enabled }}
+  PENPOT_LDAP_HOST: {{ .Values.penpot.identity_providers.ldap.host | quote }}
+  PENPOT_LDAP_PORT: {{ .Values.penpot.identity_providers.ldap.port | quote }}
+  PENPOT_LDAP_SSL: {{ .Values.penpot.identity_providers.ldap.ssl | quote }}
+  PENPOT_LDAP_STARTTLS: {{ .Values.penpot.identity_providers.ldap.starttls | quote }}
+  PENPOT_LDAP_BASE_DN: {{ .Values.penpot.identity_providers.ldap.base_dn | quote }}
+  PENPOT_LDAP_BIND_DN: {{ .Values.penpot.identity_providers.ldap.bind_dn | quote }}
+  PENPOT_LDAP_BIND_PASSWORD: {{ .Values.penpot.identity_providers.ldap.bind_pass | quote }}
+  PENPOT_LDAP_ATTRS_USERNAME: {{ .Values.penpot.identity_providers.ldap.attrs_username | quote }}
+  PENPOT_LDAP_ATTRS_EMAIL: {{ .Values.penpot.identity_providers.ldap.attrs_email | quote }}
+  PENPOT_LDAP_ATTRS_FULLNAME: {{ .Values.penpot.identity_providers.ldap.attrs_fullname | quote }}
+  {{- end }}
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $exporterSecretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  PENPOT_PUBLIC_URI: http://penpot-frontend:{{ .Values.service.main.ports.main.targetPort }}
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $backendAndExporterSecretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  PENPOT_FLAGS: {{ join " " (concat $commonFlags $backendFlags) | quote }}
+  PENPOT_PUBLIC_URI: {{ .Values.penpot.public_uri | quote }}
+  {{- with (lookup "v1" "Secret" .Release.Namespace $backendAndExporterSecretName) }}
+  PENPOT_SECRET_KEY: {{ index .data "PENPOT_SECRET_KEY" }}
+  {{- else }}
+  PENPOT_SECRET_KEY: {{ randAlphaNum 32 | b64enc }}
+  {{- end }}
+  {{/* Dependencies */}}
+  PENPOT_DATABASE_URI: {{ printf "postgresql://%v/%v" (.Values.postgresql.url.plainport | trimAll "\"") .Values.postgresql.postgresqlDatabase }}
+  PENPOT_DATABASE_USERNAME: {{ .Values.postgresql.postgresqlUsername }}
+  PENPOT_DATABASE_PASSWORD: {{ .Values.postgresql.postgresqlPassword | trimAll "\"" }}
+  PENPOT_REDIS_URI: {{ printf "redis://%v:%v@%v/%v" "default" (.Values.redis.redisPassword | trimAll "\"") (.Values.redis.url.plainport | trimAll "\"") "0" }}
+  {{/* Penpot */}}
+  {{- if .Values.penpot.smtp.enabled }}
+  PENPOT_SMTP_DEFAULT_FROM: {{ .Values.penpot.smtp.default_from | quote }}
+  PENPOT_SMTP_DEFAULT_REPLY_TO: {{ .Values.penpot.smtp.default_reply_to | quote }}
+  PENPOT_SMTP_HOST: {{ .Values.penpot.smtp.host | quote }}
+  PENPOT_SMTP_PORT: {{ .Values.penpot.smtp.port | quote }}
+  PENPOT_SMTP_USERNAME: {{ .Values.penpot.smtp.user | quote }}
+  PENPOT_SMTP_PASSWORD: {{ .Values.penpot.smtp.pass | quote }}
+  PENPOT_SMTP_TLS: {{ .Values.penpot.smtp.tls | quote }}
+  PENPOT_SMTP_SSL: {{ .Values.penpot.smtp.ssl | quote }}
+  {{- end }}
+  PENPOT_STORAGE_ASSETS_FS_DIRECTORY: {{ .Values.persistence.assets.mountPath }}
+  PENPOT_ASSETS_STORAGE_BACKEND: assets-fs
+  PENPOT_HTTP_SERVER_HOST: "0.0.0.0"
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $frontendSecretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  PENPOT_PUBLIC_URI: {{ .Values.penpot.public_uri | quote }}
+  PENPOT_FLAGS: {{ join " " (concat $commonFlags $frontendFlags) | quote }}
+{{- end }}
--- a/incubator/penpot/1.0.0/templates/common.yaml
+++ b/incubator/penpot/1.0.0/templates/common.yaml
@ -0,0 +1,10 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.common.loader.init" . }}
+
+{{- include "penpot.secret" . -}}
+
+{{- $_ := set .Values.additionalContainers "backend" (include "penpot.backend" . | fromYaml) -}}
+{{- $_ := set .Values.additionalContainers "exporter" (include "penpot.exporter" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "tc.common.loader.apply" . }}
--- a/incubator/penpot/1.0.0/values.yaml
+++ b/incubator/penpot/1.0.0/values.yaml