feat(stable): BREAKING CHANGE migrate to new common part 1 (#7900)

**Description**
Part 1 of the migration to new common on the stable train.
This basically breaks most/all charts requiring a reinstall on SCALE as
well.

Helm users shouldn't need a reinstall but could migrate their
values.yaml modification manually besides backing-up and porting the
databases.

There be Dragons basically, as we obviously cannot 100% go over
each-and-every single app in the stable train like we did in the
enterprise train.

**⚙️ Type of change**

- [x] ⚙️ Feature/App addition
- [x] 🪛 Bugfix
- [x] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [x] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
Via CI and manually validation in a lot of cases where the CI did not
correctly check things.
Additional catalog item creation tooling for local testing has been
added as well.

**📃 Notes:**
There will be issues in the future but we should get as much working
well as we can.

**✔️ Checklist:**

- [x] ⚖️ My code follows the style guidelines of this project
- [x] 👀 I have performed a self-review of my own code
- [x] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [x] 📄 I have made corresponding changes to the documentation
- [x] ⚠️ My changes generate no new warnings
- [x] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [x] ⬆️ I increased versions for any altered app according to semantic
versioning

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
This commit is contained in:
Kjeld Schouten-Lebbing
2023-04-11 12:07:17 +02:00
committed by GitHub
parent 14bc83d3c7
commit 0b726419d4
1146 changed files with 15731 additions and 17107 deletions
+2 -2
View File
@@ -7,7 +7,7 @@ appVersion: "1.12.0"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 11.1.2
version: 12.2.32
deprecated: false
description: Kasm Workspaces is a streaming platform for delivering browser-based access to desktops, applications, and web services.
home: https://truecharts.org/charts/stable/kasm
@@ -27,4 +27,4 @@ sources:
- https://github.com/orgs/linuxserver/packages/container/package/kasm
- https://github.com/linuxserver/docker-kasm#readme
type: application
version: 3.2.5
version: 4.0.0
+106
View File
@@ -0,0 +1,106 @@
Business Source License 1.1
Parameters
Licensor: The TrueCharts Project, it's owner and it's contributors
Licensed Work: The TrueCharts "Blocky" Helm Chart
Additional Use Grant: You may use the licensed work in production, as long
as it is directly sourced from a TrueCharts provided
official repository, catalog or source. You may also make private
modification to the directly sourced licenced work,
when used in production.
The following cases are, due to their nature, also
defined as 'production use' and explicitly prohibited:
- Bundling, including or displaying the licensed work
with(in) another work intended for production use,
with the apparent intend of facilitating and/or
promoting production use by third parties in
violation of this license.
Change Date: 2050-01-01
Change License: 3-clause BSD license
For information about alternative licensing arrangements for the Software,
please contact: legal@truecharts.org
Notice
The Business Source License (this document, or the “License”) is not an Open
Source license. However, the Licensed Work will eventually be made available
under an Open Source License, as stated in this License.
License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
“Business Source License” is a trademark of MariaDB Corporation Ab.
-----------------------------------------------------------------------------
Business Source License 1.1
Terms
The Licensor hereby grants you the right to copy, modify, create derivative
works, redistribute, and make non-production use of the Licensed Work. The
Licensor may make an Additional Use Grant, above, permitting limited
production use.
Effective on the Change Date, or the fourth anniversary of the first publicly
available distribution of a specific version of the Licensed Work under this
License, whichever comes first, the Licensor hereby grants you rights under
the terms of the Change License, and the rights granted in the paragraph
above terminate.
If your use of the Licensed Work does not comply with the requirements
currently in effect as described in this License, you must purchase a
commercial license from the Licensor, its affiliated entities, or authorized
resellers, or you must refrain from using the Licensed Work.
All copies of the original and modified Licensed Work, and derivative works
of the Licensed Work, are subject to this License. This License applies
separately for each version of the Licensed Work and the Change Date may vary
for each version of the Licensed Work released by Licensor.
You must conspicuously display this License on each original or modified copy
of the Licensed Work. If you receive the Licensed Work in original or
modified form from a third party, the terms and conditions set forth in this
License apply to your use of that work.
Any use of the Licensed Work in violation of this License will automatically
terminate your rights under this License for the current and all other
versions of the Licensed Work.
This License does not grant you any right in any trademark or logo of
Licensor or its affiliates (provided that you may use a trademark or logo of
Licensor as expressly required by this License).
TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
TITLE.
MariaDB hereby grants you permission to use this License’s text to license
your works, and to refer to it using the trademark “Business Source License”,
as long as you comply with the Covenants of Licensor below.
Covenants of Licensor
In consideration of the right to use this License’s text and the “Business
Source License” name and trademark, Licensor covenants to MariaDB, and to all
other recipients of the licensed work to be provided by Licensor:
1. To specify as the Change License the GPL Version 2.0 or any later version,
or a license that is compatible with GPL Version 2.0 or a later version,
where “compatible” means that software provided under the Change License can
be included in a program with software provided under GPL Version 2.0 or a
later version. Licensor may specify additional Change Licenses without
limitation.
2. To either: (a) specify an additional grant of rights to use that does not
impose any additional restriction on the right granted in this License, as
the Additional Use Grant; or (b) insert the text “None”.
3. To specify a Change Date.
4. Not to modify this License in any other way.
+43 -45
View File
@@ -17,29 +17,32 @@ questions:
# Include{replicas1}
# Include{podSpec}
# Include{containerMain}
- variable: env
group: "App Configuration"
label: "Image Environment"
schema:
additional_attrs: true
type: dict
attrs:
- variable: DOCKER_HUB_USERNAME
label: Docker Hub Username
description: Optionally specify a DockerHub Username to pull private images.
schema:
type: string
default: ""
- variable: DOCKER_HUB_PASSWORD
label: Docker Hub Password
description: Optionally specify a DockerHub password to pull private images.
schema:
type: string
private: true
default: ""
# Include{containerBasic}
# Include{containerAdvanced}
- variable: secretEnv
group: App Configuration
label: Image Secrets
schema:
additional_attrs: true
type: dict
attrs:
- variable: DOCKER_HUB_USERNAME
label: Docker Hub Username
description: Optionally specify a DockerHub Username to pull private images.
schema:
type: string
default: ""
- variable: DOCKER_HUB_PASSWORD
label: Docker Hub Password
description: Optionally specify a DockerHub password to pull private images.
schema:
type: string
private: true
default: ""
- variable: kasm
group: App Configuration
label: KASM Configuration
@@ -59,15 +62,10 @@ questions:
schema:
type: boolean
default: false
# Include{containerConfig}
# Include{serviceRoot}
- variable: main
label: Main Service
description: The Primary service on which the healthcheck runs, often the webUI
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceMain}
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: main
@@ -132,27 +130,27 @@ questions:
# Include{ingressList}
# Include{securityContextRoot}
- variable: runAsUser
label: runAsUser
description: The UserID of the user running the application
schema:
type: int
default: 0
- variable: runAsGroup
label: runAsGroup
description: The groupID this App of the user running the application
schema:
type: int
default: 0
- variable: runAsUser
label: "runAsUser"
description: "The UserID of the user running the application"
schema:
type: int
default: 0
- variable: runAsGroup
label: "runAsGroup"
description: "The groupID this App of the user running the application"
schema:
type: int
default: 0
# Include{securityContextContainer}
# Include{securityContextAdvanced}
# Include{securityContextPod}
- variable: fsGroup
label: fsGroup
description: The group that should own ALL storage.
schema:
type: int
default: 0
- variable: fsGroup
label: "fsGroup"
description: "The group that should own ALL storage."
schema:
type: int
default: 0
# Include{resources}
# Include{advanced}
+1
View File
@@ -0,0 +1 @@
{{- include "tc.v1.common.lib.chart.notes" $ -}}
+2 -2
View File
@@ -1,5 +1,5 @@
{{/* Make sure all variables are set properly */}}
{{- include "tc.common.loader.init" . }}
{{- include "tc.v1.common.loader.init" . }}
{{- if hasKey .Values "kasm" -}}
{{- if .Values.kasm.mountUdev -}}
@@ -12,4 +12,4 @@
{{- end -}}
{{/* Render the templates */}}
{{ include "tc.common.loader.apply" . }}
{{ include "tc.v1.common.loader.apply" . }}
+35 -39
View File
@@ -2,64 +2,60 @@ image:
pullPolicy: IfNotPresent
repository: tccr.io/truecharts/kasm
tag: 1.12.0@sha256:18c929908d80199b2240b0a1787f93393272220750b4003978c8a7513b08cb0d
podSecurityContext:
runAsGroup: 0
runAsUser: 0
fsGroup: 0
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
allowPrivilegeEscalation: true
privileged: true
secretEnv:
DOCKER_HUB_PASSWORD: ""
DOCKER_HUB_USERNAME: ""
env:
KASM_PORT: "{{ .Values.service.main.ports.main.port }}"
kasm:
mountUdev: false
mountInput: false
probes:
liveness:
type: HTTPS
path: /
port: "{{ .Values.service.admin.ports.admin.targetPort }}"
readiness:
type: HTTPS
path: /
port: "{{ .Values.service.admin.ports.admin.targetPort }}"
startup:
type: HTTPS
path: /
port: "{{ .Values.service.admin.ports.admin.targetPort }}"
service:
main:
ports:
main:
port: 10350
protocol: HTTPS
protocol: https
admin:
enabled: true
ports:
admin:
enabled: true
port: 10351
protocol: HTTPS
protocol: https
targetPort: 3000
persistence:
data:
enabled: true
mountPath: /opt
varrun:
enabled: true
portal:
enabled: true
open:
enabled: true
securityContext:
container:
readOnlyRootFilesystem: false
runAsNonRoot: false
allowPrivilegeEscalation: true
privileged: true
runAsGroup: 0
runAsUser: 0
fsGroup: 0
workload:
main:
podSpec:
containers:
main:
probes:
liveness:
type: https
path: /
port: "{{ .Values.service.admin.ports.admin.targetPort }}"
readiness:
type: https
path: /
port: "{{ .Values.service.admin.ports.admin.targetPort }}"
startup:
type: https
path: /
port: "{{ .Values.service.admin.ports.admin.targetPort }}"
env:
KASM_PORT: "{{ .Values.service.main.ports.main.port }}"
DOCKER_HUB_PASSWORD: ""
DOCKER_HUB_USERNAME: ""