feat(soft-serve) add soft-serve (#5527)

* feat(soft-serve) add soft-serve

* changs

* whoopsies

* initial admin key is optional

* diff paths

* commnet out

* rofs

* root

Co-authored-by: Stavros kois <s.kois@outlook.com>
This commit is contained in:
Xstar97
2022-12-31 13:28:26 +02:00
committed by GitHub
co-authored by Stavros kois
parent 61d26eda69
commit 27f7c5889c
9 changed files with 282 additions and 0 deletions
+30
View File
@@ -0,0 +1,30 @@
# Patterns to ignore when building packages.
# This supports shell glob matching, relative path matching, and
# negation (prefixed with !). Only one pattern per line.
.DS_Store
# Common VCS dirs
.git/
.gitignore
.bzr/
.bzrignore
.hg/
.hgignore
.svn/
# Common backup files
*.swp
*.bak
*.tmp
*~
# Various IDEs
.project
.idea/
*.tmproj
.vscode/
# OWNERS file for Kubernetes
OWNERS
# helm-docs templates
*.gotmpl
# docs folder
/docs
# icon
icon.png
+1
View File
@@ -0,0 +1 @@
# Changelog
+29
View File
@@ -0,0 +1,29 @@
apiVersion: v2
appVersion: "0.4.4"
dependencies:
- name: common
repository: https://library-charts.truecharts.org
version: 11.0.7
deprecated: false
description: A tasty, self-hostable Git server for the command line.
home: https://truecharts.org/docs/charts/stable/soft-serve
icon: https://truecharts.org/img/hotlink-ok/chart-icons/soft-serve.png
keywords:
- soft-serve
- git
kubeVersion: ">=1.16.0-0"
maintainers:
- email: info@truecharts.org
name: TrueCharts
url: https://truecharts.org
name: soft-serve
sources:
- https://github.com/truecharts/charts/tree/master/charts/stable/soft-serve
- https://github.com/charmbracelet/soft-serve
type: application
version: 0.0.1
annotations:
truecharts.org/catagories: |
- git
truecharts.org/SCALE-support: "true"
truecharts.org/grade: U
+1
View File
@@ -0,0 +1 @@
# soft-serve
Binary file not shown.

After

Width:  |  Height:  |  Size: 106 KiB

+150
View File
@@ -0,0 +1,150 @@
# Include{groups}
portals: {}
questions:
# Include{global}
# Include{controller}
# Include{replicas}
# Include{replica1}
# Include{controllerExpertExtraArgs}
- variable: softserve
group: App Configuration
label: Soft Serve Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: init_admin_key
label: Soft Serve Initial Admin Key (Optional, Only during installation)
description: The public key that will initially have admin access to repos
schema:
type: string
default: ""
private: true
- variable: key_path
label: Soft Serve Host
description: SSH host key-pair PATH
schema:
type: string
required: true
default: /.ssh/soft_serve_server_ed25519
- variable: host
label: Soft Serve Host
description: Address to use in public clone URLs
schema:
type: string
required: true
$ref:
- "definitions/nodeIP"
# Include{containerConfig}
# Include{serviceRoot}
- variable: main
label: Main Service
description: The Primary service on which the healthcheck runs, often the webUI
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: main
label: Main Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 23231
required: true
# Include{serviceExpertRoot}
default: false
# Include{serviceExpert}
# Include{serviceList}
# Include{persistenceRoot}
- variable: config
label: App Config Storage
description: Stores the Application Configuration.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
- variable: ssh
label: App SSH Storage
description: Stores the Application SSH.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
- variable: repo
label: App Repo Storage
description: Stores the Application Repo.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
# Include{persistenceList}
# Include{ingressRoot}
- variable: main
label: Main Ingress
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressTLS}
# Include{ingressTraefik}
# Include{ingressList}
# Include{security}
# Include{securityContextAdvancedRoot}
- variable: privileged
label: Privileged mode
schema:
type: boolean
default: false
- variable: readOnlyRootFilesystem
label: ReadOnly Root Filesystem
schema:
type: boolean
default: false
- variable: allowPrivilegeEscalation
label: Allow Privilege Escalation
schema:
type: boolean
default: false
- variable: runAsNonRoot
label: runAsNonRoot
schema:
type: boolean
default: false
# Include{podSecurityContextRoot}
- variable: runAsUser
label: runAsUser
description: The UserID of the user running the application
schema:
type: int
default: 0
- variable: runAsGroup
label: runAsGroup
description: The groupID this App of the user running the application
schema:
type: int
default: 0
- variable: fsGroup
label: fsGroup
description: The group that should own ALL storage.
schema:
type: int
default: 568
# Include{podSecurityContextAdvanced}
# Include{resources}
# Include{advanced}
# Include{addons}
# Include{codeserver}
# Include{vpn}
# Include{documentation}
@@ -0,0 +1,21 @@
{{/* Define the secret */}}
{{- define "softserve.secret" -}}
{{- $secretName := printf "%s-env-secret" (include "tc.common.names.fullname" .) }}
---
apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: {{ $secretName }}
labels:
{{- include "tc.common.labels" . | nindent 4 }}
stringData:
SOFT_SERVE_BIND_ADDRESS: "0.0.0.0"
SOFT_SERVE_REPO_PATH: {{ .Values.persistence.repos.mountPath | quote }}
SOFT_SERVE_PORT: {{ .Values.service.main.ports.main.port | quote }}
SOFT_SERVE_HOST: {{ .Values.softserve.host | quote }}
SOFT_SERVE_KEY_PATH: {{ .Values.softserve.key_path | quote }}
SOFT_SERVE_INITIAL_ADMIN_KEY: {{ .Values.softserve.init_admin_key | quote }}
{{- end }}
@@ -0,0 +1,8 @@
{{/* Make sure all variables are set properly */}}
{{- include "tc.common.loader.init" . }}
{{/* Render secret */}}
{{- include "softserve.secret" . }}
{{/* Render the templates */}}
{{ include "tc.common.loader.apply" . }}
+42
View File
@@ -0,0 +1,42 @@
image:
repository: tccr.io/truecharts/soft-serve
pullPolicy: IfNotPresent
tag: 0.4.4@sha256:758d04854964a10967c0895e3abca055ad569c8630664e3efe5907003c1647fc
podSecurityContext:
runAsGroup: 0
runAsUser: 0
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
softserve:
host: localhost
key_path: /.ssh/soft_serve_server_ed25519
init_admin_key: ""
envFrom:
- secretRef:
name: '{{ include "tc.common.names.fullname" . }}-env-secret'
service:
main:
ports:
main:
protocol: TCP
port: 23231
persistence:
config:
enabled: true
mountPath: /soft-serve
ssh:
enabled: true
mountPath: /.ssh
repos:
enabled: true
mountPath: /repos
portal:
enabled: false