chore(guacamole-client): clean logs (#1720)

* chore(guacamole-client): clean logs * At least make it whole :P * bump * move to stable train * db is ready at this point
2022-01-16 11:56:02 +01:00
parent 1a06a3353a
commit 070da8b0a0
13 changed files with 14 additions and 35 deletions
@@ -0,0 +1,18 @@
+# Changelog<br>
+
+
+<a name="guacamole-client-0.0.2"></a>
+### [guacamole-client-0.0.2](https://github.com/truecharts/apps/compare/guacamole-client-0.0.1...guacamole-client-0.0.2) (2022-01-14)
+
+#### Fix
+
+* Use correct user on questions.yaml ([#1719](https://github.com/truecharts/apps/issues/1719))
+
+
+
+<a name="guacamole-client-0.0.1"></a>
+### guacamole-client-0.0.1 (2022-01-14)
+
+#### Feat
+
+* Add guacamole-client ([#1696](https://github.com/truecharts/apps/issues/1696))
@@ -0,0 +1,8 @@
+# Configuration Options
+
+##### Connecting to other apps
+If you need to connect this App to other Apps on TrueNAS SCALE, please refer to our "Linking Apps Internally" quick-start guide:
+https://truecharts.org/manual/Quick-Start%20Guides/14-linking-apps/
+
+##### Available config options
+In the future this page is going to contain an automated list of options available in the installation/edit UI.
@@ -0,0 +1,33 @@
+apiVersion: v2
+appVersion: "1.4.0"
+dependencies:
+- name: common
+  repository: https://truecharts.org
+  version: 8.13.0
+- condition: postgresql.enabled
+  name: postgresql
+  repository: https://truecharts.org/
+  version: 6.0.49
+description: Apache Guacamole is a clientless remote desktop gateway.
+home: https://github.com/truecharts/apps/tree/master/charts/stable/guacamole-client
+icon: https://truecharts.org/_static/img/appicons/guacamole-client-icon.png
+keywords:
+- guacamole
+- remote
+kubeVersion: '>=1.16.0-0'
+maintainers:
+- email: info@truecharts.org
+  name: TrueCharts
+  url: https://truecharts.org
+name: guacamole-client
+sources:
+- https://github.com/apache/guacamole-client
+- https://hub.docker.com/r/guacamole/guacamole
+- http://guacamole.incubator.apache.org/doc/gug/introduction.html
+type: application
+version: 1.0.0
+annotations:
+  truecharts.org/catagories: |
+    - utilities
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U
@@ -0,0 +1,40 @@
+# Introduction
+
+Apache Guacamole is a clientless remote desktop gateway.
+
+TrueCharts are designed to be installed as TrueNAS SCALE app only. We can not guarantee this charts works as a stand-alone helm installation.
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/apps/issues/new/choose)**
+
+## Source Code
+
+* <https://github.com/apache/guacamole-client>
+* <https://hub.docker.com/r/guacamole/guacamole>
+* <http://guacamole.incubator.apache.org/doc/gug/introduction.html>
+
+## Requirements
+
+Kubernetes: `>=1.16.0-0`
+
+## Dependencies
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://truecharts.org/ | postgresql | 6.0.49 |
+| https://truecharts.org | common | 8.13.0 |
+
+## Installing the Chart
+
+To install this App on TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/03-Installing-an-App/).
+
+## Uninstalling the Chart
+
+To remove this App from TrueNAS SCALE check our [Quick-Start Guide](https://truecharts.org/manual/Quick-Start%20Guides/07-Deleting-an-App/).
+
+## Support
+
+- Please check our [quick-start guides](https://truecharts.org/manual/Quick-Start%20Guides/01-Open-Apps/) first.
+- See the [Wiki](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/apps/issues/new/choose)
+---
+All Rights Reserved - The TrueCharts Project
@@ -0,0 +1,97 @@
+# Default Helm-Values
+
+TrueCharts is primarily build to supply TrueNAS SCALE Apps.
+However, we also supply all Apps as standard Helm-Charts. In this document we aim to document the default values in our values.yaml file.
+
+Most of our Apps also consume our "common" Helm Chart.
+If this is the case, this means that all values.yaml values are set to the common chart values.yaml by default. This values.yaml file will only contain values that deviate from the common chart.
+You will, however, be able to use all values referenced in the common chart here, besides the values listed in this document.
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| api | object | `{}` |  |
+| cas | object | `{}` |  |
+| duo | object | `{}` |  |
+| env.GUACD_HOSTNAME | string | `"localhost"` |  |
+| env.GUACD_PORT | int | `4822` |  |
+| env.POSTGRES_DATABASE | string | `"{{ .Values.postgresql.postgresqlDatabase }}"` |  |
+| env.POSTGRES_PORT | int | `5432` |  |
+| env.POSTGRES_USER | string | `"{{ .Values.postgresql.postgresqlUsername }}"` |  |
+| envFrom[0].configMapRef.name | string | `"guacamole-client-env"` |  |
+| envValueFrom.POSTGRES_HOSTNAME.secretKeyRef.key | string | `"plainhost"` |  |
+| envValueFrom.POSTGRES_HOSTNAME.secretKeyRef.name | string | `"dbcreds"` |  |
+| envValueFrom.POSTGRES_PASSWORD.secretKeyRef.key | string | `"postgresql-password"` |  |
+| envValueFrom.POSTGRES_PASSWORD.secretKeyRef.name | string | `"dbcreds"` |  |
+| header.HEADER_ENABLED | bool | `false` |  |
+| image.pullPolicy | string | `"IfNotPresent"` |  |
+| image.repository | string | `"tccr.io/truecharts/guacamole-client"` |  |
+| image.tag | string | `"v1.4.0@sha256:43f7b0575173f509b5215a89170dfea80ea07f0b2bfed405882a4bc7ec9dfa52"` |  |
+| initContainers.1-creat-initdb-file.args[0] | string | `"echo \"Creating initdb.sql file...\"; /opt/guacamole/bin/initdb.sh --postgres > /initdbdata/initdb.sql; if [ -e /initdbdata/initdb.sql ]; then\n  echo \"Init file created successfully!\";\n  exit 0;\nelse\n  echo \"Init file failed to create.\";\n  exit 1;\nfi;\n"` |  |
+| initContainers.1-creat-initdb-file.command[0] | string | `"/bin/sh"` |  |
+| initContainers.1-creat-initdb-file.command[1] | string | `"-c"` |  |
+| initContainers.1-creat-initdb-file.image | string | `"{{ .Values.image.repository }}:{{ .Values.image.tag }}"` |  |
+| initContainers.1-creat-initdb-file.volumeMounts[0].mountPath | string | `"/initdbdata"` |  |
+| initContainers.1-creat-initdb-file.volumeMounts[0].name | string | `"initdbdata"` |  |
+| initContainers.2-initdb.args[0] | string | `"echo \"Waiting for DB to be ready...\"; DBREADY=0; for i in {1..10}; do pg_isready -t 5 -h $POSTGRES_HOSTNAME -d $POSTGRES_DATABASE -U $POSTGRES_USER -p $POSTGRES_PORT;\n  if [ $? -eq 0 ];\n    then\n      echo \"DB is ready!\";\n      DBREADY=1;\n      break;\n    else\n      echo \"DB not ready yet.\";\n  fi;\n  echo \"Waiting...\";\n  sleep 5;\ndone; if [ $DBREADY -eq 1 ];\n  then\n    psql -h $POSTGRES_HOSTNAME -d $POSTGRES_DATABASE -U $POSTGRES_USER -p $POSTGRES_PORT -q -c 'SELECT * FROM public.guacamole_user';\n    if [ $? -eq 0 ];\n      then\n        echo \"DB already initialized. Skipping...\";\n      else\n        echo \"Initializing DB's schema...\";\n        psql -h $POSTGRES_HOSTNAME -d $POSTGRES_DATABASE -U $POSTGRES_USER -p $POSTGRES_PORT -a -w -f /initdbdata/initdb.sql;\n        if [ $? -eq 0 ];\n          then\n            echo \"DB's schema initialized successfully!\";\n            exit 0;\n          else\n            echo \"DB's schema failed to initialize.\";\n            exit 1;\n        fi;\n    fi;\n  else\n    echo \"DB failed to start.\";\nfi;\n"` |  |
+| initContainers.2-initdb.command[0] | string | `"/bin/sh"` |  |
+| initContainers.2-initdb.command[1] | string | `"-c"` |  |
+| initContainers.2-initdb.env[0].name | string | `"POSTGRES_DATABASE"` |  |
+| initContainers.2-initdb.env[0].value | string | `"{{ .Values.postgresql.postgresqlDatabase }}"` |  |
+| initContainers.2-initdb.env[1].name | string | `"POSTGRES_USER"` |  |
+| initContainers.2-initdb.env[1].value | string | `"{{ .Values.postgresql.postgresqlUsername }}"` |  |
+| initContainers.2-initdb.env[2].name | string | `"POSTGRES_PORT"` |  |
+| initContainers.2-initdb.env[2].value | string | `"5432"` |  |
+| initContainers.2-initdb.env[3].name | string | `"POSTGRES_HOSTNAME"` |  |
+| initContainers.2-initdb.env[3].valueFrom.secretKeyRef.key | string | `"plainhost"` |  |
+| initContainers.2-initdb.env[3].valueFrom.secretKeyRef.name | string | `"dbcreds"` |  |
+| initContainers.2-initdb.env[4].name | string | `"PGPASSWORD"` |  |
+| initContainers.2-initdb.env[4].valueFrom.secretKeyRef.key | string | `"postgresql-password"` |  |
+| initContainers.2-initdb.env[4].valueFrom.secretKeyRef.name | string | `"dbcreds"` |  |
+| initContainers.2-initdb.image | string | `"{{ .Values.postgresqlImage.repository }}:{{ .Values.postgresqlImage.tag }}"` |  |
+| initContainers.2-initdb.volumeMounts[0].mountPath | string | `"/initdbdata"` |  |
+| initContainers.2-initdb.volumeMounts[0].name | string | `"initdbdata"` |  |
+| initContainers.3-temp-hack.args[0] | string | `"echo \"Checing postgresql driver version...\"; if [ -e /opt/guacamole/postgresql/postgresql-42.2.24.jre7.jar ];\n  then\n    echo \"Version found is correct.\";\n    exit 0;\n  else\n    echo \"Old version found. Will try to download a known-to-work version.\";\n    echo \"Downloading (postgresql-42.2.24.jre7.jar)...\";\n    curl -L \"https://jdbc.postgresql.org/download/postgresql-42.2.24.jre7.jar\" > \"/opt/guacamole/postgresql-hack/postgresql-42.2.24.jre7.jar\";\n    if [ -e /opt/guacamole/postgresql-hack/postgresql-42.2.24.jre7.jar ];\n      then\n        echo \"Downloaded successfully!\";\n        cp -r /opt/guacamole/postgresql/* /opt/guacamole/postgresql-hack/;\n        if [ -e /opt/guacamole/postgresql-hack/postgresql-9.4-1201.jdbc41.jar ];\n          then\n            echo \"Removing old version... (postgresql-9.4-1201.jdbc41.jar)\";\n            rm \"/opt/guacamole/postgresql-hack/postgresql-9.4-1201.jdbc41.jar\";\n            if [ $? -eq 0 ];\n              then\n                echo \"Removed successfully!\";\n              else\n                echo \"Failed to remove.\";\n                exit 1;\n            fi;\n        fi;\n      else\n        echo \"Failed to download.\";\n        exit 1;\n    fi;\nfi;\n"` |  |
+| initContainers.3-temp-hack.command[0] | string | `"/bin/sh"` |  |
+| initContainers.3-temp-hack.command[1] | string | `"-c"` |  |
+| initContainers.3-temp-hack.image | string | `"{{ .Values.image.repository }}:{{ .Values.image.tag }}"` |  |
+| initContainers.3-temp-hack.securityContext.runAsGroup | int | `1001` |  |
+| initContainers.3-temp-hack.securityContext.runAsUser | int | `1001` |  |
+| initContainers.3-temp-hack.volumeMounts[0].mountPath | string | `"/opt/guacamole/postgresql-hack"` |  |
+| initContainers.3-temp-hack.volumeMounts[0].name | string | `"temphack"` |  |
+| initContainers.4-temp-hack.args[0] | string | `"echo \"Copying postgres driver into the final destination.\"; cp -r /opt/guacamole/postgresql-hack/* /opt/guacamole/postgresql/; if [ -e /opt/guacamole/postgresql/postgresql-42.2.24.jre7.jar ];\n  then\n    echo \"Driver copied successfully!\";\n  else\n    echo \"Failed to copy the driver\";\nfi;\n"` |  |
+| initContainers.4-temp-hack.command[0] | string | `"/bin/sh"` |  |
+| initContainers.4-temp-hack.command[1] | string | `"-c"` |  |
+| initContainers.4-temp-hack.image | string | `"{{ .Values.image.repository }}:{{ .Values.image.tag }}"` |  |
+| initContainers.4-temp-hack.securityContext.runAsGroup | int | `1001` |  |
+| initContainers.4-temp-hack.securityContext.runAsUser | int | `1001` |  |
+| initContainers.4-temp-hack.volumeMounts[0].mountPath | string | `"/opt/guacamole/postgresql-hack"` |  |
+| initContainers.4-temp-hack.volumeMounts[0].name | string | `"temphack"` |  |
+| initContainers.4-temp-hack.volumeMounts[1].mountPath | string | `"/opt/guacamole/postgresql"` |  |
+| initContainers.4-temp-hack.volumeMounts[1].name | string | `"temphackalso"` |  |
+| json | object | `{}` |  |
+| ldap | object | `{}` |  |
+| openid | object | `{}` |  |
+| persistence.initdbdata.enabled | bool | `true` |  |
+| persistence.initdbdata.mountPath | string | `"/initdbdata"` |  |
+| persistence.temphack.enabled | bool | `true` |  |
+| persistence.temphack.mountPath | string | `"/opt/guacamole/postgresql-hack"` |  |
+| persistence.temphackalso.enabled | bool | `true` |  |
+| persistence.temphackalso.mountPath | string | `"/opt/guacamole/postgresql"` |  |
+| podSecurityContext.runAsGroup | int | `1001` |  |
+| podSecurityContext.runAsUser | int | `1001` |  |
+| postgresql.enabled | bool | `true` |  |
+| postgresql.existingSecret | string | `"dbcreds"` |  |
+| postgresql.postgresqlDatabase | string | `"guacamole"` |  |
+| postgresql.postgresqlUsername | string | `"guacamole"` |  |
+| probes.liveness.path | string | `"/guacamole"` |  |
+| probes.readiness.path | string | `"/guacamole"` |  |
+| probes.startup.path | string | `"/guacamole"` |  |
+| radius | object | `{}` |  |
+| securityContext.readOnlyRootFilesystem | bool | `false` |  |
+| service.main.ports.main.port | int | `9998` |  |
+| service.main.ports.main.targetPort | int | `8080` |  |
+| totp.TOTP_ENABLED | bool | `false` |  |
+
+All Rights Reserved - The TrueCharts Project
@@ -0,0 +1,813 @@
+# Include{groups}
+portals:
+  web_portal:
+    protocols:
+      - "$kubernetes-resource_configmap_portal_protocol"
+    host:
+      - "$kubernetes-resource_configmap_portal_host"
+    ports:
+      - "$kubernetes-resource_configmap_portal_port"
+    path: "/guacamole"
+questions:
+  - variable: portal
+    group: "Container Image"
+    label: "Configure Portal Button"
+    schema:
+      type: dict
+      hidden: true
+      attrs:
+        - variable: enabled
+          label: "Enable"
+          description: "enable the portal button"
+          schema:
+            hidden: true
+            editable: false
+            type: boolean
+            default: true
+# Include{global}
+  - variable: controller
+    group: "Controller"
+    label: ""
+    schema:
+      type: dict
+      attrs:
+        - variable: advanced
+          label: "Show Advanced Controller Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: type
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Controller Type"
+                schema:
+                  type: string
+                  default: "deployment"
+                  required: true
+                  enum:
+                    - value: "deployment"
+                      description: "Deployment"
+                    - value: "statefulset"
+                      description: "Statefulset"
+                    - value: "daemonset"
+                      description: "Daemonset"
+              - variable: replicas
+                description: "Number of desired pod replicas"
+                label: "Desired Replicas"
+                schema:
+                  type: int
+                  default: 1
+                  required: true
+              - variable: strategy
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Update Strategy"
+                schema:
+                  type: string
+                  default: "Recreate"
+                  required: true
+                  enum:
+                    - value: "Recreate"
+                      description: "Recreate: Kill existing pods before creating new ones"
+                    - value: "RollingUpdate"
+                      description: "RollingUpdate: Create new pods and then kill old ones"
+                    - value: "OnDelete"
+                      description: "(Legacy) OnDelete: ignore .spec.template changes"
+# Include{controllerExpert}
+
+  - variable: env
+    group: "Container Configuration"
+    label: "Image Environment"
+    schema:
+      type: dict
+      attrs:
+# Include{fixedEnv}
+        - variable: GUACD_HOSTNAME
+          label: "Guacd Hostname"
+          description: "The hostname of the guacd instance to use to establish remote desktop connections"
+          schema:
+            type: string
+            required: true
+            default: ""
+        - variable: GUACD_PORT
+          label: "Guacd Port"
+          description: "The port that Guacamole should use when connecting to guacd."
+          schema:
+            type: int
+            required: true
+            default: 4822
+
+# Include{containerConfig}
+  - variable: api
+    group: "App Configuration"
+    label: "API Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: API_SESSION_TIMEOUT
+          label: "API Session Timeout (Leave blank for default)"
+          schema:
+            type: string
+            default: ""
+  - variable: totp
+    group: "App Configuration"
+    label: "TOTP Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: TOTP_ENABLED
+          label: "Enable TOTP"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: TOTP_ISSUER
+                label: "TOTP Issuer (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: TOTP_PERIOD
+                label: "TOTP Period (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: TOTP_DIGITS
+                label: "TOTP Digits"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "default"
+                    - value: "6"
+                      description: "6"
+                    - value: "7"
+                      description: "7"
+                    - value: "8"
+                      description: "8"
+              - variable: TOTP_MODE
+                label: "TOTP Mode"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "default"
+                    - value: "sha1"
+                      description: "sha1"
+                    - value: "sha256"
+                      description: "sha256"
+                    - value: "sha512"
+                      description: "sha512"
+  - variable: header
+    group: "App Configuration"
+    label: "Header Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: HEADER_ENABLED
+          label: "Enable Header"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: HTTP_AUTH_HEADER
+                label: "HTTP Auth Header (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+  - variable: json
+    group: "App Configuration"
+    label: "JSON Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: json_enabled
+          label: "Enable JSON"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: JSON_SECRET_KEY
+                label: "JSON Secret Key"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: JSON_TRUSTED_NETWORKS
+                label: "JSON Trusted Networks (Leave blank for unrestricted"
+                description: "Comma separated list e.g.: 127.0.0.0/8, 10.0.0.0/8"
+                schema:
+                  type: string
+                  default: ""
+  - variable: duo
+    group: "App Configuration"
+    label: "DUO Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: duo_enabled
+          label: "Enable DUO"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: DUO_API_HOSTNAME
+                label: "DUO API Hostname (api-XXXXXXXX.duosecurity.com)"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: DUO_INTEGRATION_KEY
+                label: "DUO Integration Key (Exactly 20 chars)"
+                schema:
+                  min_length: 20
+                  max_length: 20
+                  type: string
+                  required: true
+                  default: ""
+              - variable: DUO_SECRET_KEY
+                label: "DUO Secret Key (Exactly 40 chars)"
+                schema:
+                  min_length: 40
+                  max_length: 40
+                  type: string
+                  required: true
+                  default: ""
+              - variable: DUO_APPLICATION_KEY
+                label: "DUO Application Key (At least 40 chars)"
+                schema:
+                  min_length: 40
+                  type: string
+                  required: true
+                  default: ""
+  - variable: cas
+    group: "App Configuration"
+    label: "CAS Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: cas_enabled
+          label: "Enable CAS"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: CAS_AUTHORIZATION_ENDPOINT
+                label: "CAS Authorization Endpoint"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: CAS_REDIRECT_URI
+                label: "CAS Redirect URI"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: CAS_CLEARPASS_KEY
+                label: "CAS Clearpass Key"
+                schema:
+                  type: string
+                  default: ""
+              - variable: CAS_GROUP_ATTRIBUTE
+                label: "CAS Group Attribute"
+                schema:
+                  type: string
+                  default: ""
+              - variable: CAS_GROUP_LDAP_BASE_DN
+                label: "CAS Group LDAP Base DN"
+                schema:
+                  type: string
+                  default: ""
+              - variable: CAS_GROUP_LDAP_ATTRIBUTE
+                label: "CAS Group LDAP Attribute"
+                schema:
+                  type: string
+                  default: ""
+              - variable: CAS_GROUP_FORMAT
+                label: "CAS Group Format"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "default"
+                    - value: "plain"
+                      description: "plain"
+                    - value: "ldap"
+                      description: "ldap"
+  - variable: openid
+    group: "App Configuration"
+    label: "OpenID Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: openid_enabled
+          label: "Enable OpenID"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: OPENID_AUTHORIZATION_ENDPOINT
+                label: "OpenID Authorization Endpoint"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: OPENID_JWKS_ENDPOINT
+                label: "OpenID JWKS Endpoint"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: OPENID_ISSUER
+                label: "OpenID Issuer"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: OPENID_CLIENT_ID
+                label: "OpenID Client ID"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: OPENID_REDIRECT_URI
+                label: "OpenID Redirect URI"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: OPENID_USERNAME_CLAIM_TYPE
+                label: "OpenID Username Claim Type (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OPENID_GROUPS_CLAIM_TYPE
+                label: "OpenID Groups Claim Type (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: OPENID_MAX_TOKEN_VALIDITY
+                label: "OpenID Max Token Validity (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+  - variable: radius
+    group: "App Configuration"
+    label: "Radius Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: radius_enabled
+          label: "Enable Radius"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: RADIUS_SHARED_SECRET
+                label: "Radius Shared Secret"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: RADIUS_AUTH_PROTOCOL
+                label: "Radius Auth Protocol"
+                schema:
+                  type: string
+                  required: true
+                  default: "eap-tls"
+                  enum:
+                    - value: "pap"
+                      description: "pap"
+                    - value: "chap"
+                      description: "chap"
+                    - value: "mschapv1"
+                      description: "mschapv1"
+                    - value: "mschapv2"
+                      description: "mschapv2"
+                    - value: "eap-md5"
+                      description: "eap-md5"
+                    - value: "eap-tls"
+                      description: "eap-tls"
+                    - value: "eap-ttls"
+                      description: "eap-ttls"
+              - variable: RADIUS_HOSTNAME
+                label: "Radius Hostname (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_AUTH_PORT
+                label: "Radius Auth Port (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_KEY_FILE
+                label: "Radius Key File (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_KEY_TYPE
+                label: "Radius Key Type"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "pem"
+                      description: "pem"
+                    - value: "jceks"
+                      description: "jceks"
+                    - value: "jks"
+                      description: "jks"
+                    - value: "pkcs12"
+                      description: "pkcs12"
+              - variable: RADIUS_KEY_PASSWORD
+                label: "Radius Key Password (Leave blank if no password)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_CA_FILE
+                label: "Radius CA File (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_CA_TYPE
+                label: "Radius CA Type"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "pem"
+                      description: "pem"
+                    - value: "jceks"
+                      description: "jceks"
+                    - value: "jks"
+                      description: "jks"
+                    - value: "pkcs12"
+                      description: "pkcs12"
+              - variable: RADIUS_CA_PASSWORD
+                label: "Radius CA Password (Leave blank if no password)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_TRUST_ALL
+                label: "Radius Trust All"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: RADIUS_RETRIES
+                label: "Radius Retries (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_TIMEOUT
+                label: "Radius Timeout (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: RADIUS_EAP_TTLS_INNER_PROTOCOL
+                label: "Radius eap-ttls Inner Protocol"
+                description: "Only has effect when RADIUS_AUTH_PROTOCOL is set to eap-ttls"
+                schema:
+                  type: string
+                  default: "eap-tls"
+                  enum:
+                    - value: "pap"
+                      description: "pap"
+                    - value: "chap"
+                      description: "chap"
+                    - value: "mschapv1"
+                      description: "mschapv1"
+                    - value: "mschapv2"
+                      description: "mschapv2"
+                    - value: "eap-md5"
+                      description: "eap-md5"
+                    - value: "eap-tls"
+                      description: "eap-tls"
+  - variable: ldap
+    group: "App Configuration"
+    label: "LDAP Configuration"
+    schema:
+      type: dict
+      attrs:
+        - variable: ldap_enabled
+          label: "Enable LDAP"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: LDAP_HOSTNAME
+                label: "LDAP Hostname (Leave blank for default)"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: LDAP_USER_BASE_DN
+                label: "LDAP User Base DN"
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: LDAP_PORT
+                label: "LDAP Port (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_ENCRYPTION_METHOD
+                label: "LDAP Encryption Method (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "none"
+                      description: "none"
+                    - value: "ssl"
+                      description: "ssl"
+                    - value: "starttls"
+                      description: "starttls"
+              - variable: LDAP_MAX_SEARCH_RESULTS
+                label: "LDAP Max Search Results (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_SEARCH_BIND_DN
+                label: "LDAP Search Bind DN (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_USER_ATTRIBUTES
+                label: "LDAP User Attributes"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_SEARCH_BIND_PASSWORD
+                label: "LDAP Search Bind Password (Leave blank if no password)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_USERNAME_ATTRIBUTE
+                label: "LDAP Username Attribute"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_MEMBER_ATTRIBUTE
+                label: "LDAP Member Attribute"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_USER_SEARCH_FILTER
+                label: "LDAP User Search Filter (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_CONFIG_BASE_DN
+                label: "LDAP Config Base DN"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_GROUP_BASE_DN
+                label: "LDAP Group Base DN"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_GROUP_SEARCH_FILTER
+                label: "LDAP Group Search Filter (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_MEMBER_ATTRIBUTE_TYPE
+                label: "LDAP Encryption Method"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "dn"
+                      description: "dn"
+                    - value: "uid"
+                      description: "uid"
+              - variable: LDAP_GROUP_NAME_ATTRIBUTE
+                label: "LDAP Group Name Attribute (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_DEREFERENCE_ALIASES
+                label: "LDAP Dereference Aliases"
+                schema:
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "never"
+                      description: "never"
+                    - value: "searching"
+                      description: "searching"
+                    - value: "finding"
+                      description: "finding"
+                    - value: "always"
+                      description: "always"
+              - variable: LDAP_FOLLOW_REFERRALS
+                label: "LDAP Follow Referrals"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: LDAP_MAX_REFERRAL_HOPS
+                label: "LDAP Max Referrals Hops (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+              - variable: LDAP_OPERATION_TIMEOUT
+                label: "LDAP Operation Timeout (Leave blank for default)"
+                schema:
+                  type: string
+                  default: ""
+
+  - variable: service
+    group: "Networking and Services"
+    label: "Configure Service(s)"
+    schema:
+      type: dict
+      attrs:
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            type: dict
+            attrs:
+# Include{serviceSelector}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 9998
+                              required: true
+                          - variable: advanced
+                            label: "Show Advanced settings"
+                            schema:
+                              type: boolean
+                              default: false
+                              show_subquestions_if: true
+                              subquestions:
+                                - variable: enabled
+                                  label: "Enable the port"
+                                  schema:
+                                    type: boolean
+                                    default: true
+                                - variable: protocol
+                                  label: "Port Type"
+                                  schema:
+                                    type: string
+                                    default: "HTTP"
+                                    enum:
+                                      - value: HTTP
+                                        description: "HTTP"
+                                      - value: "HTTPS"
+                                        description: "HTTPS"
+                                      - value: TCP
+                                        description: "TCP"
+                                      - value: "UDP"
+                                        description: "UDP"
+                                - variable: nodePort
+                                  label: "Node Port (Optional)"
+                                  description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
+                                  schema:
+                                    type: int
+                                    min: 9000
+                                    max: 65535
+                                - variable: targetPort
+                                  label: "Target Port"
+                                  description: "The internal(!) port on the container the Application runs on"
+                                  schema:
+                                    type: int
+                                    default: 8080
+
+  - variable: serviceexpert
+    group: "Networking and Services"
+    label: "Show Expert Config"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: hostNetwork
+          group: "Networking and Services"
+          label: "Host-Networking (Complicated)"
+          schema:
+            type: boolean
+            default: false
+
+# Include{serviceExpert}
+
+# Include{serviceList}
+
+# Include{persistenceList}
+
+  - variable: ingress
+    label: ""
+    group: "Ingress"
+    schema:
+      type: dict
+      attrs:
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            type: dict
+            attrs:
+# Include{ingressDefault}
+
+# Include{ingressTLS}
+
+# Include{ingressTraefik}
+
+# Include{ingressExpert}
+
+# Include{ingressList}
+
+  - variable: advancedSecurity
+    label: "Show Advanced Security Settings"
+    group: "Security and Permissions"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: securityContext
+          label: "Security Context"
+          schema:
+            type: dict
+            attrs:
+              - variable: privileged
+                label: "Privileged mode"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: "ReadOnly Root Filesystem"
+                schema:
+                  type: boolean
+                  default: true
+              - variable: allowPrivilegeEscalation
+                label: "Allow Privilege Escalation"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: "runAsNonRoot"
+                schema:
+                  type: boolean
+                  default: true
+# Include{securityContextAdvanced}
+  - variable: podSecurityContext
+    group: "Security and Permissions"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 1001
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 1001
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+
+# Include{resources}
+
+# Include{advanced}
+
+# Include{addons}
@@ -0,0 +1,189 @@
+{{/* Define the configmap */}}
+{{- define "guacamole-client.configmap" -}}
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: guacamole-client-env
+data:
+  {{/*  API */}}
+  {{- if .Values.api.API_SESSION_TIMEOUT }}
+  API_SESSION_TIMEOUT: {{ .Values.api.API_SESSION_TIMEOUT | quote }}
+  {{- end }}
+  {{/* TOTP */}}
+  {{- if eq .Values.totp.TOTP_ENABLED true }}
+  TOTP_ENABLED: {{ .Values.totp.TOTP_ENABLED | quote }}
+  {{- if .Values.totp.TOTP_ISSUER }}
+  TOTP_ISSUER: {{ .Values.totp.TOTP_ISSUER | quote }}
+  {{- end }}
+  {{- if .Values.totp.TOTP_DIGITS }}
+  TOTP_DIGITS: {{ .Values.totp.TOTP_DIGITS | quote }}
+  {{- end }}
+  {{- if .Values.totp.TOTP_PERIOD }}
+  TOTP_PERIOD: {{ .Values.totp.TOTP_PERIOD | quote }}
+  {{- end }}
+  {{- if .Values.totp.TOTP_MODE }}
+  TOTP_MODE: {{ .Values.totp.TOTP_MODE | quote }}
+  {{- end }}
+  {{- end }}
+  {{/*  HEADER */}}
+  {{- if eq .Values.header.HEADER_ENABLED true }}
+  HEADER_ENABLED: {{ .Values.header.HEADER_ENABLED | quote }}
+  {{- if .Values.header.HTTP_AUTH_HEADER }}
+  HTTP_AUTH_HEADER: {{ .Values.header.HTTP_AUTH_HEADER | quote }}
+  {{- end }}
+  {{- end }}
+  {{/*  JSON */}}
+  {{- if .Values.json.JSON_SECRET_KEY }}
+  JSON_SECRET_KEY: {{ .Values.json.JSON_SECRET_KEY | quote }}
+  {{- if .Values.json.JSON_TRUSTED_NETWORKS }}
+  JSON_TRUSTED_NETWORKS: {{ .Values.json.JSON_TRUSTED_NETWORKS | quote }}
+  {{- end }}
+  {{- end }}
+  {{/*  DUO */}}
+  {{- if and .Values.duo.DUO_API_HOSTNAME .Values.duo.DUO_INTEGRATION_KEY .Values.duo.DUO_SECRET_KEY .Values.duo.DUO_APPLICATION_KEY }}
+  DUO_API_HOSTNAME: {{ .Values.duo.DUO_API_HOSTNAME | quote }}
+  DUO_INTEGRATION_KEY: {{ .Values.duo.DUO_INTEGRATION_KEY | quote }}
+  DUO_SECRET_KEY: {{ .Values.duo.DUO_SECRET_KEY | quote }}
+  DUO_APPLICATION_KEY: {{ .Values.duo.DUO_APPLICATION_KEY | quote }}
+  {{- end }}
+  {{/*  CAS */}}
+  {{- if and .Values.cas.CAS_AUTHORIZATION_ENDPOINT .Values.cas.CAS_REDIRECT_URI }}
+  CAS_AUTHORIZATION_ENDPOINT: {{ .Values.cas.CAS_AUTHORIZATION_ENDPOINT | quote }}
+  CAS_REDIRECT_URI: {{ .Values.cas.CAS_REDIRECT_URI | quote }}
+  {{- if .Values.cas.CAS_CLEARPASS_KEY }}
+  CAS_CLEARPASS_KEY: {{ .Values.cas.CAS_CLEARPASS_KEY | quote }}
+  {{- end }}
+  {{- if .Values.cas.CAS_GROUP_ATTRIBUTE }}
+  CAS_GROUP_ATTRIBUTE: {{ .Values.cas.CAS_GROUP_ATTRIBUTE | quote }}
+  {{- if .Values.cas.CAS_GROUP_FORMAT }}
+  CAS_GROUP_FORMAT: {{ .Values.cas.CAS_GROUP_FORMAT | quote }}
+  {{- if eq .Values.cas.CAS_GROUP_FORMAT "ldap" }}
+  {{- if .Values.cas.CAS_GROUP_LDAP_BASE_DN }}
+  CAS_GROUP_LDAP_BASE_DN: {{ .Values.cas.CAS_GROUP_LDAP_BASE_DN | quote }}
+  {{- if .Values.cas.CAS_GROUP_LDAP_ATTRIBUTE }}
+  CAS_GROUP_LDAP_ATTRIBUTE: {{ .Values.cas.CAS_GROUP_LDAP_ATTRIBUTE | quote }}
+  {{- end }}
+  {{- end }}
+  {{- end }}
+  {{- end }}
+  {{- end }}
+  {{- end }}
+  {{/*  OpenID */}}
+  {{- if and .Values.openid.OPENID_AUTHORIZATION_ENDPOINT .Values.openid.OPENID_JWKS_ENDPOINT .Values.openid.OPENID_ISSUER .Values.openid.OPENID_CLIENT_ID .Values.openid.OPENID_REDIRECT_URI }}
+  OPENID_AUTHORIZATION_ENDPOINT: {{ .Values.openid.OPENID_AUTHORIZATION_ENDPOINT | quote }}
+  OPENID_JWKS_ENDPOINT: {{ .Values.openid.OPENID_JWKS_ENDPOINT | quote }}
+  OPENID_ISSUER: {{ .Values.openid.OPENID_ISSUER | quote }}
+  OPENID_CLIENT_ID: {{ .Values.openid.OPENID_CLIENT_ID | quote }}
+  OPENID_REDIRECT_URI: {{ .Values.openid.OPENID_REDIRECT_URI | quote }}
+  {{- if .Values.openid.OPENID_USERNAME_CLAIM_TYPE }}
+  OPENID_USERNAME_CLAIM_TYPE: {{ .Values.openid.OPENID_USERNAME_CLAIM_TYPE | quote }}
+  {{- end }}
+  {{- if .Values.openid.OPENID_GROUPS_CLAIM_TYPE }}
+  OPENID_GROUPS_CLAIM_TYPE: {{ .Values.openid.OPENID_GROUPS_CLAIM_TYPE | quote }}
+  {{- end }}
+  {{- if .Values.openid.OPENID_MAX_TOKEN_VALIDITY }}
+  OPENID_MAX_TOKEN_VALIDITY: {{ .Values.openid.OPENID_MAX_TOKEN_VALIDITY | quote }}
+  {{- end }}
+  {{- end }}
+  {{/*  RADIUS */}}
+  {{- if and .Values.radius.RADIUS_SHARED_SECRET .Values.radius.RADIUS_AUTH_PROTOCOL }}
+  RADIUS_SHARED_SECRET: {{ .Values.radius.RADIUS_SHARED_SECRET | quote }}
+  RADIUS_AUTH_PROTOCOL: {{ .Values.radius.RADIUS_AUTH_PROTOCOL | quote }}
+  {{- if .Values.radius.RADIUS_HOSTNAME }}
+  RADIUS_HOSTNAME: {{ .Values.radius.RADIUS_HOSTNAME | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_AUTH_PORT }}
+  RADIUS_AUTH_PORT: {{ .Values.radius.RADIUS_AUTH_PORT | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_KEY_FILE }}
+  RADIUS_KEY_FILE: {{ .Values.radius.RADIUS_KEY_FILE | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_KEY_TYPE }}
+  RADIUS_KEY_TYPE: {{ .Values.radius.RADIUS_KEY_TYPE | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_KEY_PASSWORD }}
+  RADIUS_KEY_PASSWORD: {{ .Values.radius.RADIUS_KEY_PASSWORD | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_CA_FILE }}
+  RADIUS_CA_FILE: {{ .Values.radius.RADIUS_CA_FILE | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_CA_TYPE }}
+  RADIUS_CA_TYPE: {{ .Values.radius.RADIUS_CA_TYPE | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_CA_PASSWORD }}
+  RADIUS_CA_PASSWORD: {{ .Values.radius.RADIUS_CA_PASSWORD | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_TRUST_ALL }}
+  RADIUS_TRUST_ALL: {{ .Values.radius.RADIUS_TRUST_ALL | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_RETRIES }}
+  RADIUS_RETRIES: {{ .Values.radius.RADIUS_RETRIES | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_TIMEOUT }}
+  RADIUS_TIMEOUT: {{ .Values.radius.RADIUS_TIMEOUT | quote }}
+  {{- end }}
+  {{- if .Values.radius.RADIUS_EAP_TTLS_INNER_PROTOCOL }}
+  RADIUS_EAP_TTLS_INNER_PROTOCOL: {{ .Values.radius.RADIUS_EAP_TTLS_INNER_PROTOCOL | quote }}
+  {{- end }}
+  {{- end }}
+  {{/*  LDAP */}}
+  {{- if and .Values.ldap.LDAP_HOSTNAME .Values.ldap.LDAP_USER_BASE_DN }}
+  LDAP_HOSTNAME: {{ .Values.ldap.LDAP_HOSTNAME | quote }}
+  LDAP_USER_BASE_DN: {{ .Values.ldap.LDAP_USER_BASE_DN | quote }}
+  {{- if .Values.ldap.LDAP_PORT }}
+  LDAP_PORT: {{ .Values.ldap.LDAP_PORT | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_ENCRYPTION_METHOD }}
+  LDAP_ENCRYPTION_METHOD: {{ .Values.ldap.LDAP_ENCRYPTION_METHOD | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_MAX_SEARCH_RESULTS }}
+  LDAP_MAX_SEARCH_RESULTS: {{ .Values.ldap.LDAP_MAX_SEARCH_RESULTS | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_SEARCH_BIND_DN }}
+  LDAP_SEARCH_BIND_DN: {{ .Values.ldap.LDAP_SEARCH_BIND_DN | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_USER_ATTRIBUTES }}
+  LDAP_USER_ATTRIBUTES: {{ .Values.ldap.LDAP_USER_ATTRIBUTES | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_SEARCH_BIND_PASSWORD }}
+  LDAP_SEARCH_BIND_PASSWORD: {{ .Values.ldap.LDAP_SEARCH_BIND_PASSWORD | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_USERNAME_ATTRIBUTE }}
+  LDAP_USERNAME_ATTRIBUTE: {{ .Values.ldap.LDAP_USERNAME_ATTRIBUTE | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_MEMBER_ATTRIBUTE }}
+  LDAP_MEMBER_ATTRIBUTE: {{ .Values.ldap.LDAP_MEMBER_ATTRIBUTE | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_USER_SEARCH_FILTER }}
+  LDAP_USER_SEARCH_FILTER: {{ .Values.ldap.LDAP_USER_SEARCH_FILTER | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_CONFIG_BASE_DN }}
+  LDAP_CONFIG_BASE_DN: {{ .Values.ldap.LDAP_CONFIG_BASE_DN | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_GROUP_BASE_DN }}
+  LDAP_GROUP_BASE_DN: {{ .Values.ldap.LDAP_GROUP_BASE_DN | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_GROUP_SEARCH_FILTER }}
+  LDAP_GROUP_SEARCH_FILTER: {{ .Values.ldap.LDAP_GROUP_SEARCH_FILTER | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_MEMBER_ATTRIBUTE_TYPE }}
+  LDAP_MEMBER_ATTRIBUTE_TYPE: {{ .Values.ldap.LDAP_MEMBER_ATTRIBUTE_TYPE | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_GROUP_NAME_ATTRIBUTE }}
+  LDAP_GROUP_NAME_ATTRIBUTE: {{ .Values.ldap.LDAP_GROUP_NAME_ATTRIBUTE | quote }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_DEREFERENCE_ALIASES }}
+  LDAP_DEREFERENCE_ALIASES: {{ .Values.ldap.LDAP_DEREFERENCE_ALIASES | quote }}
+  {{- end }}
+  {{- if eq .Values.ldap.LDAP_FOLLOW_REFERRALS "true"}}
+  LDAP_FOLLOW_REFERRALS: {{ .Values.ldap.LDAP_FOLLOW_REFERRALS | quote }}
+  {{- if .Values.ldap.LDAP_MAX_REFERRAL_HOPS }}
+  LDAP_MAX_REFERRAL_HOPS: {{ .Values.ldap.LDAP_MAX_REFERRAL_HOPS | quote }}
+  {{- end }}
+  {{- end }}
+  {{- if .Values.ldap.LDAP_OPERATION_TIMEOUT }}
+  LDAP_OPERATION_TIMEOUT: {{ .Values.ldap.LDAP_OPERATION_TIMEOUT | quote }}
+  {{- end }}
+  {{- end }}
+{{- end -}}
@@ -0,0 +1,8 @@
+{{/* Make sure all variables are set properly */}}
+{{ include "common.setup" . }}
+
+{{/* Render configmap for vaultwarden */}}
+{{- include "guacamole-client.configmap" . }}
+
+{{/* Render the templates */}}
+{{ include "common.postSetup" . }}
@@ -0,0 +1,273 @@
+image:
+  repository: tccr.io/truecharts/guacamole-client
+  pullPolicy: IfNotPresent
+  tag: v1.4.0@sha256:43f7b0575173f509b5215a89170dfea80ea07f0b2bfed405882a4bc7ec9dfa52
+
+podSecurityContext:
+  runAsUser: 1001
+  runAsGroup: 1001
+
+securityContext:
+  readOnlyRootFilesystem: false
+
+service:
+  main:
+    ports:
+      main:
+        port: 9998
+        targetPort: 8080
+
+env:
+  POSTGRES_DATABASE: "{{ .Values.postgresql.postgresqlDatabase }}"
+  POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}"
+  POSTGRES_PORT: 5432
+  GUACD_HOSTNAME: "localhost"
+  GUACD_PORT: 4822
+
+envFrom:
+  - configMapRef:
+      name: guacamole-client-env
+
+totp:
+  TOTP_ENABLED: false
+  # TOTP_ISSUER: "Apache Guacamole"
+  # TOTP_DIGITS: "6"
+  # TOTP_PERIOD: "30"
+  # TOTP_MODE: "sha1"
+
+header:
+  HEADER_ENABLED: false
+  # HTTP_AUTH_HEADER: "REMOTE_USER"
+
+api: {}
+  # API_SESSION_TIMEOUT: "60"
+
+json: {}
+  # JSON_SECRET_KEY: "random32charkey"
+  # JSON_TRUSTED_NETWORKS: "127.0.0.0/8, 10.0.0.0/8"
+
+duo: {}
+  # DUO_API_HOSTNAME: "api-XXXXXXXX.duosecurity.com"
+  # DUO_INTEGRATION_KEY: "exactly20charkey"
+  # DUO_SECRET_KEY: "exactly40charkey"
+  # DUO_APPLICATION_KEY: "atleast40charkey"
+
+cas: {}
+  # CAS_AUTHORIZATION_ENDPOINT: ""
+  # CAS_REDIRECT_URI: ""
+  # CAS_CLEARPASS_KEY: ""
+  # CAS_GROUP_ATTRIBUTE: ""
+  # CAS_GROUP_FORMAT: "plain"
+  # CAS_GROUP_LDAP_BASE_DN: ""
+  # CAS_GROUP_LDAP_ATTRIBUTE: ""
+
+openid: {}
+  # OPENID_AUTHORIZATION_ENDPOINT: ""
+  # OPENID_JWKS_ENDPOINT: ""
+  # OPENID_ISSUER: ""
+  # OPENID_CLIENT_ID: ""
+  # OPENID_REDIRECT_URI: ""
+  # OPENID_USERNAME_CLAIM_TYPE: "email"
+  # OPENID_GROUPS_CLAIM_TYPE: "groups"
+  # OPENID_MAX_TOKEN_VALIDITY: "300"
+
+radius: {}
+  # RADIUS_HOSTNAME: "localhost"
+  # RADIUS_AUTH_PORT: "1812"
+  # RADIUS_SHARED_SECRET: ""
+  # RADIUS_AUTH_PROTOCOL: "eap-tls"
+  # RADIUS_KEY_FILE: ""
+  # RADIUS_KEY_TYPE: "pkcs12"
+  # RADIUS_KEY_PASSWORD: ""
+  # RADIUS_CA_FILE: ""
+  # RADIUS_CA_TYPE: "pem"
+  # RADIUS_CA_PASSWORD: ""
+  # RADIUS_TRUST_ALL: "false"
+  # RADIUS_RETRIES: "5"
+  # RADIUS_TIMEOUT: "60"
+  # RADIUS_EAP_TTLS_INNER_PROTOCOL: "eap-tls"
+
+ldap: {}
+  # LDAP_HOSTNAME: "localhost"
+  # LDAP_USER_BASE_DN: ""
+  # LDAP_PORT: "389"
+  # LDAP_ENCRYPTION_METHOD: "none"
+  # LDAP_MAX_SEARCH_RESULTS: "1000"
+  # LDAP_SEARCH_BIND_DN: ""
+  # LDAP_USER_ATTRIBUTES: ""
+  # LDAP_SEARCH_BIND_PASSWORD: ""
+  # LDAP_USERNAME_ATTRIBUTE: ""
+  # LDAP_MEMBER_ATTRIBUTE: ""
+  # LDAP_USER_SEARCH_FILTER: "(objectClass=*)"
+  # LDAP_CONFIG_BASE_DN: ""
+  # LDAP_GROUP_BASE_DN: ""
+  # LDAP_GROUP_SEARCH_FILTER: "(objectClass=*)"
+  # LDAP_MEMBER_ATTRIBUTE_TYPE: "dn"
+  # LDAP_GROUP_NAME_ATTRIBUTE: "cn"
+  # LDAP_DEREFERENCE_ALIASES: "never"
+  # LDAP_FOLLOW_REFERRALS: "false"
+  # LDAP_MAX_REFERRAL_HOPS: "5"
+  # LDAP_OPERATION_TIMEOUT: "30"
+
+postgresql:
+  enabled: true
+  existingSecret: "dbcreds"
+  postgresqlUsername: guacamole
+  postgresqlDatabase: guacamole
+
+envValueFrom:
+  POSTGRES_HOSTNAME:
+    secretKeyRef:
+      name: dbcreds
+      key: plainhost
+  POSTGRES_PASSWORD:
+    secretKeyRef:
+      name: dbcreds
+      key: postgresql-password
+
+probes:
+  liveness:
+    path: "/guacamole"
+  readiness:
+    path: "/guacamole"
+  startup:
+    path: "/guacamole"
+
+persistence:
+  initdbdata:
+    enabled: true
+    mountPath: "/initdbdata"
+# Both temphack and temphackalso will be removed on the next image release
+  temphack:
+    enabled: true
+    mountPath: "/opt/guacamole/postgresql-hack"
+  temphackalso:
+    enabled: true
+    mountPath: "/opt/guacamole/postgresql"
+
+initContainers:
+  1-creat-initdb-file:
+    image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+    volumeMounts:
+      - name: initdbdata
+        mountPath: "/initdbdata"
+    command: ["/bin/sh", "-c"]
+    args:
+      - >
+        echo "Creating initdb.sql file...";
+        /opt/guacamole/bin/initdb.sh --postgres > /initdbdata/initdb.sql;
+        if [ -e /initdbdata/initdb.sql ];
+        then
+          echo "Init file created successfully!";
+          exit 0;
+        else
+          echo "Init file failed to create.";
+          exit 1;
+        fi;
+  2-initdb:
+    image: "{{ .Values.postgresqlImage.repository }}:{{ .Values.postgresqlImage.tag }}"
+    env:
+      - name: POSTGRES_DATABASE
+        value: "{{ .Values.postgresql.postgresqlDatabase }}"
+      - name: POSTGRES_USER
+        value: "{{ .Values.postgresql.postgresqlUsername }}"
+      - name: POSTGRES_PORT
+        value: "5432"
+      - name: POSTGRES_HOSTNAME
+        valueFrom:
+          secretKeyRef:
+            name: dbcreds
+            key: plainhost
+      - name: PGPASSWORD
+        valueFrom:
+          secretKeyRef:
+            name: dbcreds
+            key: postgresql-password
+    volumeMounts:
+      - name: initdbdata
+        mountPath: "/initdbdata"
+    command: ["/bin/sh", "-c"]
+    args:
+      - >
+        psql -h $POSTGRES_HOSTNAME -d $POSTGRES_DATABASE -U $POSTGRES_USER -p $POSTGRES_PORT -o '/dev/null' -c 'SELECT * FROM public.guacamole_user';
+        if [ $? -eq 0 ];
+          then
+            echo "DB already initialized. Skipping...";
+          else
+            echo "Initializing DB's schema...";
+            psql -h $POSTGRES_HOSTNAME -d $POSTGRES_DATABASE -U $POSTGRES_USER -p $POSTGRES_PORT -a -w -f /initdbdata/initdb.sql;
+            if [ $? -eq 0 ];
+              then
+                echo "DB's schema initialized successfully!";
+                exit 0;
+              else
+                echo "DB's schema failed to initialize.";
+                exit 1;
+            fi;
+        fi;
+    # Until they release an image with the updated driver, we need to manually replace it.
+    # https://issues.apache.org/jira/browse/GUACAMOLE-1433
+    # https://github.com/apache/guacamole-client/pull/655
+    # Both 3-temp-hach and 4-temp-hack will be removed on the next image release
+  3-temp-hack:
+    image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+    securityContext:
+      runAsUser: 1001
+      runAsGroup: 1001
+    volumeMounts:
+      - name: temphack
+        mountPath: "/opt/guacamole/postgresql-hack"
+    command: ["/bin/sh", "-c"]
+    args:
+    - >
+      echo "Checing postgresql driver version...";
+      if [ -e /opt/guacamole/postgresql/postgresql-42.2.24.jre7.jar ];
+        then
+          echo "Version found is correct.";
+          exit 0;
+        else
+          echo "Old version found. Will try to download a known-to-work version.";
+          echo "Downloading (postgresql-42.2.24.jre7.jar)...";
+          curl -L "https://jdbc.postgresql.org/download/postgresql-42.2.24.jre7.jar" > "/opt/guacamole/postgresql-hack/postgresql-42.2.24.jre7.jar";
+          if [ -e /opt/guacamole/postgresql-hack/postgresql-42.2.24.jre7.jar ];
+            then
+              echo "Downloaded successfully!";
+              cp -r /opt/guacamole/postgresql/* /opt/guacamole/postgresql-hack/;
+              if [ -e /opt/guacamole/postgresql-hack/postgresql-9.4-1201.jdbc41.jar ];
+                then
+                  echo "Removing old version... (postgresql-9.4-1201.jdbc41.jar)";
+                  rm "/opt/guacamole/postgresql-hack/postgresql-9.4-1201.jdbc41.jar";
+                  if [ $? -eq 0 ];
+                    then
+                      echo "Removed successfully!";
+                    else
+                      echo "Failed to remove.";
+                      exit 1;
+                  fi;
+              fi;
+            else
+              echo "Failed to download.";
+              exit 1;
+          fi;
+      fi;
+  4-temp-hack:
+    image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+    securityContext:
+      runAsUser: 1001
+      runAsGroup: 1001
+    volumeMounts:
+      - name: temphack
+        mountPath: "/opt/guacamole/postgresql-hack"
+      - name: temphackalso
+        mountPath: "/opt/guacamole/postgresql"
+    command: ["/bin/sh", "-c"]
+    args:
+    - >
+      echo "Copying postgres driver into the final destination.";
+      cp -r /opt/guacamole/postgresql-hack/* /opt/guacamole/postgresql/;
+      if [ -e /opt/guacamole/postgresql/postgresql-42.2.24.jre7.jar ];
+        then
+          echo "Driver copied successfully!";
+        else
+          echo "Failed to copy the driver";
+      fi;