Commit new Chart releases for TrueCharts

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
This commit is contained in:
TrueCharts-Bot 2023-09-09 17:10:36 +00:00
parent a6706869d3
commit b1d56afe38
14 changed files with 39 additions and 33 deletions

View File

@ -1,4 +0,0 @@
## [firezone-0.1.0](https://github.com/truecharts/charts/compare/firezone-0.0.8...firezone-0.1.0) (2023-09-07)

View File

@ -1,28 +0,0 @@
{{/* Define the secrets */}}
{{- define "firezone.secrets" -}}
{{- $secretName := (printf "%s-firezone-secrets" (include "tc.v1.common.lib.chart.names.fullname" $)) -}}
{{- $keyGuardian := randAlphaNum 64 -}}
{{- $keyDatabase := randAlphaNum 64 -}}
{{- $keySecret := randAlphaNum 64 -}}
{{- $keyLive := randAlphaNum 64 -}}
{{- $keyCookieSigning := randAlphaNum 64 -}}
{{- $keyCookieEncrypt := randAlphaNum 64 -}}
{{- with (lookup "v1" "Secret" .Release.Namespace $secretName) -}}
{{- $keyGuardian = index .data "GUARDIAN_SECRET_KEY" | b64dec -}}
{{- $keyDatabase = index .data "DATABASE_ENCRYPTION_KEY" | b64dec -}}
{{- $keySecret = index .data "SECRET_KEY_BASE" | b64dec -}}
{{- $keyLive = index .data "LIVE_VIEW_SIGNING_SALT" | b64dec -}}
{{- $keyCookieSigning = index .data "COOKIE_SIGNING_SALT" | b64dec -}}
{{- $keyCookieEncrypt = index .data "COOKIE_ENCRYPTION_SALT" | b64dec -}}
{{- end }}
enabled: true
data:
# firezone requires all these keys to be in base 64 format presented in the container, so this b64enc here is intentional
# https://www.firezone.dev/docs/reference/env-vars#secrets-and-encryption
GUARDIAN_SECRET_KEY: {{ $keyGuardian | b64enc }}
DATABASE_ENCRYPTION_KEY: {{ $keyDatabase | b64enc }}
SECRET_KEY_BASE: {{ $keySecret | b64enc }}
LIVE_VIEW_SIGNING_SALT: {{ $keyLive | b64enc }}
COOKIE_SIGNING_SALT: {{ $keyCookieSigning | b64enc }}
COOKIE_ENCRYPTION_SALT: {{ $keyCookieEncrypt | b64enc }}
{{- end -}}

View File

@ -4,6 +4,11 @@
## [firezone-0.2.0](https://github.com/truecharts/charts/compare/firezone-0.1.0...firezone-0.2.0) (2023-09-09)
## [firezone-0.1.0](https://github.com/truecharts/charts/compare/firezone-0.0.8...firezone-0.1.0) (2023-09-07)

View File

@ -22,7 +22,7 @@ sources:
- https://github.com/truecharts/charts/tree/master/charts/incubator/firezone
- https://github.com/firezone/firezone
type: application
version: 0.1.0
version: 0.2.0
annotations:
truecharts.org/catagories: |
- vpn

View File

@ -0,0 +1,4 @@
## [firezone-0.2.0](https://github.com/truecharts/charts/compare/firezone-0.1.0...firezone-0.2.0) (2023-09-09)

View File

@ -0,0 +1,29 @@
{{/* Define the secrets */}}
{{- define "firezone.secrets" -}}
{{- $secretName := (printf "%s-firezone-secrets" (include "tc.v1.common.lib.chart.names.fullname" $)) -}}
# firezone requires all these keys to be in base 64 | b64enc format presented in the container, so this b64enc here is intentional
# https://www.firezone.dev/docs/reference/env-vars#secrets-and-encryption
{{- $keyGuardian := randAlphaNum 64 | b64enc -}}
{{- $keyDatabase := randAlphaNum 64 | b64enc -}}
{{- $keySecret := randAlphaNum 64 | b64enc -}}
{{- $keyLive := randAlphaNum 64 | b64enc -}}
{{- $keyCookieSigning := randAlphaNum 64 | b64enc -}}
{{- $keyCookieEncrypt := randAlphaNum 64 | b64enc -}}
{{- with (lookup "v1" "Secret" .Release.Namespace $secretName) -}}
{{- $keyGuardian = index .data "GUARDIAN_SECRET_KEY" | b64dec -}}
{{- $keyDatabase = index .data "DATABASE_ENCRYPTION_KEY" | b64dec -}}
{{- $keySecret = index .data "SECRET_KEY_BASE" | b64dec -}}
{{- $keyLive = index .data "LIVE_VIEW_SIGNING_SALT" | b64dec -}}
{{- $keyCookieSigning = index .data "COOKIE_SIGNING_SALT" | b64dec -}}
{{- $keyCookieEncrypt = index .data "COOKIE_ENCRYPTION_SALT" | b64dec -}}
{{- end }}
enabled: true
data:
GUARDIAN_SECRET_KEY: {{ $keyGuardian }}
DATABASE_ENCRYPTION_KEY: {{ $keyDatabase }}
SECRET_KEY_BASE: {{ $keySecret }}
LIVE_VIEW_SIGNING_SALT: {{ $keyLive }}
COOKIE_SIGNING_SALT: {{ $keyCookieSigning }}
COOKIE_ENCRYPTION_SALT: {{ $keyCookieEncrypt }}
{{- end -}}