diff --git a/.github/ct-install.yaml b/.github/ct-install.yaml index 8263ea3c259..cf24ea2cedd 100644 --- a/.github/ct-install.yaml +++ b/.github/ct-install.yaml @@ -11,6 +11,7 @@ chart-dirs: - charts/operators excluded-charts: - charts/dependency/subchart + - charts/incubator/twingate-connector - charts/incubator/orbital-sync - charts/incubator/plex-meta-manager - charts/incubator/tauticord diff --git a/charts/incubator/twingate-connector/.helmignore b/charts/incubator/twingate-connector/.helmignore new file mode 100644 index 00000000000..77ca5567b26 --- /dev/null +++ b/charts/incubator/twingate-connector/.helmignore @@ -0,0 +1,30 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ +# OWNERS file for Kubernetes +OWNERS +# helm-docs templates +*.gotmpl +# docs folder +/docs +# icon +icon.png diff --git a/charts/incubator/twingate-connector/CHANGELOG.md b/charts/incubator/twingate-connector/CHANGELOG.md new file mode 100644 index 00000000000..825c32f0d03 --- /dev/null +++ b/charts/incubator/twingate-connector/CHANGELOG.md @@ -0,0 +1 @@ +# Changelog diff --git a/charts/incubator/twingate-connector/Chart.yaml b/charts/incubator/twingate-connector/Chart.yaml new file mode 100644 index 00000000000..da8db8a48f5 --- /dev/null +++ b/charts/incubator/twingate-connector/Chart.yaml @@ -0,0 +1,29 @@ +apiVersion: v2 +appVersion: "1.56.0" +dependencies: + - name: common + repository: https://library-charts.truecharts.org + version: 12.14.6 +deprecated: false +description: Twingate is remote access for the modern world. +home: https://truecharts.org/charts/twingate-connector +icon: https://truecharts.org/img/hotlink-ok/chart-icons/twingate-connector.png +keywords: + - twingate-connector + - networking +kubeVersion: ">=1.16.0-0" +maintainers: + - email: info@truecharts.org + name: TrueCharts + url: https://truecharts.org +name: twingate-connector +sources: + - https://github.com/truecharts/charts/tree/master/charts/twingate-connector + - https://www.twingate.com/docs/connector-deployment +type: application +version: 0.0.1 +annotations: + truecharts.org/catagories: | + - network + truecharts.org/SCALE-support: "true" + truecharts.org/grade: U diff --git a/charts/incubator/twingate-connector/README.md b/charts/incubator/twingate-connector/README.md new file mode 100644 index 00000000000..7e59600739c --- /dev/null +++ b/charts/incubator/twingate-connector/README.md @@ -0,0 +1 @@ +# README diff --git a/charts/incubator/twingate-connector/docs/installation_notes.md b/charts/incubator/twingate-connector/docs/installation_notes.md new file mode 100644 index 00000000000..354383190ac --- /dev/null +++ b/charts/incubator/twingate-connector/docs/installation_notes.md @@ -0,0 +1,16 @@ +# Installation Notes + +- Requires the following sysctl added to system settings -> advanced -> sysctl: + +variable: **net.ipv4.ping_group_range** + +value: **0 2147483647** + +Setting this up may require a reboot. + +Go to [twingate](https://www.twingate.com/) and create a network. + +Set your tenant name to **TwinGate Network**. +Optionally set a custom DNS to TwinGate DNS. + +Setup a connector and generate your **TwinGate Access Token** and **TwinGate Refresh Token**. diff --git a/charts/incubator/twingate-connector/icon.png b/charts/incubator/twingate-connector/icon.png new file mode 100644 index 00000000000..09d1e9494cd Binary files /dev/null and b/charts/incubator/twingate-connector/icon.png differ diff --git a/charts/incubator/twingate-connector/questions.yaml b/charts/incubator/twingate-connector/questions.yaml new file mode 100644 index 00000000000..c99a0d0884f --- /dev/null +++ b/charts/incubator/twingate-connector/questions.yaml @@ -0,0 +1,86 @@ +# Include{groups} +portals: {} +questions: +# Include{global} +# Include{workload} +# Include{workloadDeployment} + +# Include{replicas1} +# Include{podSpec} +# Include{containerMain} + + - variable: env + group: "App Configuration" + label: "Image Environment" + schema: + additional_attrs: true + type: dict + attrs: + - variable: TWINGATE_NETWORK + label: "TwinGate Network" + description: "Name of your Twingate Network" + schema: + type: string + required: true + default: "" + - variable: TWINGATE_DNS + label: "TwinGate DNS" + description: "Custom DNS" + schema: + type: string + default: "" + - variable: TWINGATE_ACCESS_TOKEN + label: "TwinGate Access Token" + schema: + type: string + required: true + private: true + default: "" + - variable: TWINGATE_REFRESH_TOKEN + label: "TwinGate Refresh Token" + schema: + type: string + required: true + private: true + default: "" + +# Include{containerBasic} +# Include{containerAdvanced} + +# Include{containerConfig} +# Include{podOptions} +# Include{serviceExpertRoot} +# Include{serviceExpert} +# Include{serviceList} +# Include{persistenceList} +# Include{securityContextRoot} + + - variable: runAsUser + label: "runAsUser" + description: "The UserID of the user running the application" + schema: + type: int + default: 568 + - variable: runAsGroup + label: "runAsGroup" + description: "The groupID of the user running the application" + schema: + type: int + default: 568 +# Include{securityContextContainer} +# Include{securityContextAdvanced} +# Include{securityContextPod} + - variable: fsGroup + label: "fsGroup" + description: "The group that should own ALL storage." + schema: + type: int + default: 568 + +# Include{resources} +# Include{advanced} +# Include{addons} +# Include{codeserver} +# Include{netshoot} +# Include{vpn} +# Include{documentation} diff --git a/charts/incubator/twingate-connector/templates/common.yaml b/charts/incubator/twingate-connector/templates/common.yaml new file mode 100644 index 00000000000..b51394e00a4 --- /dev/null +++ b/charts/incubator/twingate-connector/templates/common.yaml @@ -0,0 +1 @@ +{{ include "tc.v1.common.loader.all" . }} diff --git a/charts/incubator/twingate-connector/values.yaml b/charts/incubator/twingate-connector/values.yaml new file mode 100644 index 00000000000..cf62d674bf4 --- /dev/null +++ b/charts/incubator/twingate-connector/values.yaml @@ -0,0 +1,33 @@ +image: + repository: tccr.io/truecharts/twingate-connector + pullPolicy: IfNotPresent + tag: v1.56.0@sha256:d329ef493caf335c7ff78d8f12323dd1c13fac965995caee39718fae2eb2829b + +workload: + main: + podSpec: + containers: + main: + probes: + liveness: + enabled: false + readiness: + enabled: false + startup: + enabled: false + env: + TWINGATE_NETWORK: "" + TWINGATE_ACCESS_TOKEN: "" + TWINGATE_REFRESH_TOKEN: "" + TWINGATE_DNS: "1.1.1.1" + +service: + main: + enabled: false + ports: + main: + enabled: false + +portal: + open: + enabled: false