diff --git a/charts/incubator/drone-runner/.helmignore b/charts/incubator/drone-runner/.helmignore new file mode 100644 index 00000000000..77ca5567b26 --- /dev/null +++ b/charts/incubator/drone-runner/.helmignore @@ -0,0 +1,30 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ +# OWNERS file for Kubernetes +OWNERS +# helm-docs templates +*.gotmpl +# docs folder +/docs +# icon +icon.png diff --git a/charts/incubator/drone-runner/Chart.yaml b/charts/incubator/drone-runner/Chart.yaml new file mode 100644 index 00000000000..f1d37a720ea --- /dev/null +++ b/charts/incubator/drone-runner/Chart.yaml @@ -0,0 +1,28 @@ +apiVersion: v2 +appVersion: "latest" +dependencies: + - name: common + repository: https://library-charts.truecharts.org + version: 10.4.12 +deprecated: false +description: "Drone by Harness™ is a modern Continuous Integration platform" +home: https://truecharts.org/docs/charts/incubator/drone-runner +icon: https://truecharts.org/img/hotlink-ok/chart-icons/drone-runner.png +keywords: + - drone + - productivity +kubeVersion: ">=1.16.0-0" +maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: drone-runner +sources: + - https://github.com/truecharts/charts/tree/master/charts/incubator/drone-runner + - https://docs.drone.io +type: application +version: 0.0.1 +annotations: + truecharts.org/SCALE-support: "true" + truecharts.org/catagories: | + - productivity diff --git a/charts/incubator/drone-runner/README.md b/charts/incubator/drone-runner/README.md new file mode 100644 index 00000000000..e69de29bb2d diff --git a/charts/incubator/drone-runner/icon.png b/charts/incubator/drone-runner/icon.png new file mode 100644 index 00000000000..dd95d7f14e5 Binary files /dev/null and b/charts/incubator/drone-runner/icon.png differ diff --git a/charts/incubator/drone-runner/questions.yaml b/charts/incubator/drone-runner/questions.yaml new file mode 100644 index 00000000000..24cc68476a8 --- /dev/null +++ b/charts/incubator/drone-runner/questions.yaml @@ -0,0 +1,167 @@ +# Include{groups} +portals: + open: +# Include{portalLink} +questions: +# Include{global} +# Include{controller} +# Include{controllerDeployment} +# Include{replicas} +# Include{replica1} +# Include{strategy} +# Include{recreate} +# Include{controllerExpert} +# Include{controllerExpertExtraArgs} + - variable: env + group: "Container Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: DRONE_RPC_HOST + label: "DRONE_RPC_HOST" + description: "DRONE RPC HOST" + schema: + type: string + default: "" + required: true + - variable: DRONE_RPC_PROTO + label: "DRONE_RPC_PROTO" + description: "DRONE RPC PROTO" + schema: + type: string + default: "http" + required: true + - variable: DRONE_RPC_SECRET + label: " DRONE_RPC_SECRET" + description: " DRONE RPC SECRET" + schema: + type: string + default: "" + required: true +# Include{containerConfig} +# Include{serviceRoot} + - variable: main + label: "Main Service" + description: "The Primary service on which the healthcheck runs, often the webUI" + schema: + additional_attrs: true + type: dict + attrs: +# Include{serviceSelector} + - variable: main + label: "Main Service Port Configuration" + schema: + additional_attrs: true + type: dict + attrs: + - variable: port + label: "Port" + description: "This port exposes the container port on the service" + schema: + type: int + default: 3000 + required: true + - variable: advanced + label: "Show Advanced settings" + schema: + type: boolean + default: false + show_subquestions_if: true + subquestions: + - variable: protocol + label: "Port Type" + schema: + type: string + default: "HTTP" + enum: + - value: HTTP + description: "HTTP" + - value: "HTTPS" + description: "HTTPS" + - value: TCP + description: "TCP" + - value: "UDP" + description: "UDP" + - variable: nodePort + label: "Node Port (Optional)" + description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer" + schema: + type: int + min: 9000 + max: 65535 + - variable: targetPort + label: "Target Port" + description: "The internal(!) port on the container the Application runs on" + schema: + type: int + default: 3000 +# Include{serviceExpertRoot} + default: false +# Include{serviceExpert} +# Include{serviceList} +# Include{persistenceRoot} + +# Include{persistenceBasic} +# Include{persistenceAdvanced} +# Include{persistenceList} +# Include{ingressRoot} + - variable: main + label: "Main Ingress" + schema: + additional_attrs: true + type: dict + attrs: +# Include{ingressDefault} +# Include{ingressTLS} +# Include{ingressTraefik} +# Include{ingressExpert} +# Include{ingressList} +# Include{security} +# Include{securityContextAdvancedRoot} + - variable: privileged + label: "Privileged mode" + schema: + type: boolean + default: false + - variable: readOnlyRootFilesystem + label: "ReadOnly Root Filesystem" + schema: + type: boolean + default: true + - variable: allowPrivilegeEscalation + label: "Allow Privilege Escalation" + schema: + type: boolean + default: false + - variable: runAsNonRoot + label: "runAsNonRoot" + schema: + type: boolean + default: true +# Include{securityContextAdvanced} +# Include{podSecurityContextRoot} + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: "The groupID this App of the user running the application" + schema: + type: int + default: 568 + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 +# Include{podSecurityContextAdvanced} +# Include{resources} +# Include{advanced} +# Include{addons} +# Include{documentation} diff --git a/charts/incubator/drone-runner/templates/_rolebinding.tpl b/charts/incubator/drone-runner/templates/_rolebinding.tpl new file mode 100644 index 00000000000..e7a427c0a7e --- /dev/null +++ b/charts/incubator/drone-runner/templates/_rolebinding.tpl @@ -0,0 +1,16 @@ +{{/* Define the rolebinding */}} +{{- define "drone-runner.rolebinding" -}} +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: {{ .Release.Name }} + namespace: {{ .Release.Namespace }} +subjects: +- kind: ServiceAccount + name: {{ .Release.Name }} + namespace: {{ .Release.Namespace }} +roleRef: + kind: Role + name: {{ .Release.Name }} + apiGroup: rbac.authorization.k8s.io +{{- end -}} diff --git a/charts/incubator/drone-runner/templates/common.yaml b/charts/incubator/drone-runner/templates/common.yaml new file mode 100644 index 00000000000..673ed7f5db4 --- /dev/null +++ b/charts/incubator/drone-runner/templates/common.yaml @@ -0,0 +1,7 @@ +{{/* Make sure all variables are set properly */}} +{{- include "tc.common.loader.init" . }} + +{{- include "drone-runner.rolebinding" . }} + +{{/* Render the templates */}} +{{ include "tc.common.loader.apply" . }} diff --git a/charts/incubator/drone-runner/values.yaml b/charts/incubator/drone-runner/values.yaml new file mode 100644 index 00000000000..472a0c3a333 --- /dev/null +++ b/charts/incubator/drone-runner/values.yaml @@ -0,0 +1,43 @@ +image: + repository: drone/drone-runner-kube + pullPolicy: IfNotPresent + tag: latest@sha256:003848908e19a23b8f3eb97c763cc634e48826517c587d526707e0668feb22b7 + +env: + DRONE_RPC_HOST: "" + DRONE_RPC_PROTO: "http" + DRONE_RPC_SECRET: "" + +service: + main: + ports: + main: + port: 3000 + targetPort: 3000 + +rbac: + main: + enabled: true + rules: + - apiGroups: + - "" + resources: + - secrets + verbs: + - create + - delete + - apiGroups: + - "" + resources: + - pods + - pods/log + verbs: + - get + - create + - delete + - list + - watch + - update + +portal: + enabled: true