feat(soft-serve) add soft-serve (#5527)

* feat(soft-serve) add soft-serve

* changs

* whoopsies

* initial admin key is optional

* diff paths

* commnet out

* rofs

* root

Co-authored-by: Stavros kois <s.kois@outlook.com>

charts/incubator/soft-serve/.helmignore

@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png

charts/incubator/soft-serve/CHANGELOG.md

@@ -0,0 +1 @@
+# Changelog

charts/incubator/soft-serve/Chart.yaml

@@ -0,0 +1,29 @@
+apiVersion: v2
+appVersion: "0.4.4"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 11.0.7
+deprecated: false
+description: A tasty, self-hostable Git server for the command line.
+home: https://truecharts.org/docs/charts/stable/soft-serve
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/soft-serve.png
+keywords:
+  - soft-serve
+  - git
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: soft-serve
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/stable/soft-serve
+  - https://github.com/charmbracelet/soft-serve
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - git
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

charts/incubator/soft-serve/README.md

@@ -0,0 +1 @@
+# soft-serve

charts/incubator/soft-serve/questions.yaml

@@ -0,0 +1,150 @@
+# Include{groups}
+portals: {}
+questions:
+# Include{global}
+# Include{controller}
+# Include{replicas}
+# Include{replica1}
+# Include{controllerExpertExtraArgs}
+  - variable: softserve
+    group: App Configuration
+    label: Soft Serve Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: init_admin_key
+          label: Soft Serve Initial Admin Key (Optional, Only during installation)
+          description: The public key that will initially have admin access to repos
+          schema:
+            type: string
+            default: ""
+            private: true
+        - variable: key_path
+          label: Soft Serve Host
+          description: SSH host key-pair PATH
+          schema:
+            type: string
+            required: true
+            default: /.ssh/soft_serve_server_ed25519
+        - variable: host
+          label: Soft Serve Host
+          description: Address to use in public clone URLs
+          schema:
+            type: string
+            required: true
+            $ref:
+              - "definitions/nodeIP"
+# Include{containerConfig}
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 23231
+                              required: true
+# Include{serviceExpertRoot}
+            default: false
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: App Config Storage
+          description: Stores the Application Configuration.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: ssh
+          label: App SSH Storage
+          description: Stores the Application SSH.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: repo
+          label: App Repo Storage
+          description: Stores the Application Repo.
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: Main Ingress
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressList}
+# Include{security}
+# Include{securityContextAdvancedRoot}
+              - variable: privileged
+                label: Privileged mode
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: ReadOnly Root Filesystem
+                schema:
+                  type: boolean
+                  default: false
+              - variable: allowPrivilegeEscalation
+                label: Allow Privilege Escalation
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: runAsNonRoot
+                schema:
+                  type: boolean
+                  default: false
+# Include{podSecurityContextRoot}
+        - variable: runAsUser
+          label: runAsUser
+          description: The UserID of the user running the application
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: runAsGroup
+          description: The groupID this App of the user running the application
+          schema:
+            type: int
+            default: 0
+        - variable: fsGroup
+          label: fsGroup
+          description: The group that should own ALL storage.
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{vpn}
+# Include{documentation}

charts/incubator/soft-serve/templates/_secret.tpl

@@ -0,0 +1,21 @@
+{{/* Define the secret */}}
+{{- define "softserve.secret" -}}
+
+{{- $secretName := printf "%s-env-secret" (include "tc.common.names.fullname" .) }}
+
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $secretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  SOFT_SERVE_BIND_ADDRESS: "0.0.0.0"
+  SOFT_SERVE_REPO_PATH: {{ .Values.persistence.repos.mountPath | quote }}
+  SOFT_SERVE_PORT: {{ .Values.service.main.ports.main.port | quote }}
+  SOFT_SERVE_HOST: {{ .Values.softserve.host | quote }}
+  SOFT_SERVE_KEY_PATH: {{ .Values.softserve.key_path | quote }}
+  SOFT_SERVE_INITIAL_ADMIN_KEY: {{ .Values.softserve.init_admin_key | quote }}
+{{- end }}

charts/incubator/soft-serve/templates/common.yaml

@@ -0,0 +1,8 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.common.loader.init" . }}
+
+{{/* Render secret */}}
+{{- include "softserve.secret" . }}
+
+{{/* Render the templates */}}
+{{ include "tc.common.loader.apply" . }}

charts/incubator/soft-serve/values.yaml

@@ -0,0 +1,42 @@
+image:
+  repository: tccr.io/truecharts/soft-serve
+  pullPolicy: IfNotPresent
+  tag: 0.4.4@sha256:758d04854964a10967c0895e3abca055ad569c8630664e3efe5907003c1647fc
+
+podSecurityContext:
+  runAsGroup: 0
+  runAsUser: 0
+
+securityContext:
+  readOnlyRootFilesystem: false
+  runAsNonRoot: false
+
+softserve:
+  host: localhost
+  key_path: /.ssh/soft_serve_server_ed25519
+  init_admin_key: ""
+
+envFrom:
+  - secretRef:
+      name: '{{ include "tc.common.names.fullname" . }}-env-secret'
+
+service:
+  main:
+    ports:
+      main:
+        protocol: TCP
+        port: 23231
+
+persistence:
+  config:
+    enabled: true
+    mountPath: /soft-serve
+  ssh:
+    enabled: true
+    mountPath: /.ssh
+  repos:
+    enabled: true
+    mountPath: /repos
+
+portal:
+  enabled: false