├── .gitattributes ├── .github ├── ISSUE_TEMPLATE │ ├── bug_report.md │ └── feature_request.md └── workflows │ ├── release-compose.yml │ ├── release-docker-image.yml.bak │ └── release-helm-chart.yml ├── .gitignore ├── .gitlab-ci.yml ├── CHANGELOG.md ├── LICENSE ├── README.md ├── argo ├── argo.yaml └── rbac.yaml ├── docker ├── Dockerfile ├── README.md ├── compose │ ├── .env │ ├── README.md │ ├── configs │ │ ├── casdoor │ │ │ ├── conf │ │ │ │ ├── app.conf.sample │ │ │ │ └── init_data.json.sample │ │ │ └── token_jwt_key.pem │ │ ├── coredns │ │ │ └── Corefile.sample │ │ ├── fluentd │ │ │ └── fluent.conf.sample │ │ ├── gitaly │ │ │ └── config.toml.sample │ │ ├── gitlab-shell │ │ │ └── config.yml │ │ ├── nats │ │ │ └── nats-server.conf.sample │ │ ├── nginx │ │ │ ├── nginx.conf.domain.sample │ │ │ ├── nginx.conf.domain.ssl.sample │ │ │ ├── nginx.conf.sample │ │ │ └── nginx.conf.ssl.sample │ │ └── server │ │ │ └── scripts │ │ │ ├── 01_promote_root.sql │ │ │ ├── 02_seed_space_resources.sql │ │ │ ├── 05_seed_tag_categories.sql │ │ │ └── update_casdoor.sql.sample │ ├── configure │ └── docker-compose.yml ├── etc │ ├── casdoor │ │ ├── app.conf.sample │ │ ├── files │ │ │ └── avatar │ │ │ │ └── OpenCSG │ │ │ │ ├── background.png │ │ │ │ ├── favicon.png │ │ │ │ ├── logo.png │ │ │ │ └── robot.png │ │ ├── init_data.json.sample │ │ └── token_jwt_key.pem │ ├── gitaly │ │ └── config.toml.sample │ ├── gitlab-shell │ │ ├── .gitaly_token.sample │ │ └── config.yml │ ├── nats │ │ └── nats.conf.sample │ ├── nginx │ │ └── nginx.conf.sample │ ├── profile.d │ │ ├── alias.sh │ │ └── csghub_config_load.sh │ ├── redis │ │ └── redis.conf │ ├── registry │ │ └── config.yml.sample │ ├── server │ │ └── scripts │ │ │ ├── 01_promote_root.sql │ │ │ ├── 02_seed_space_resources.sql │ │ │ ├── 03_seed_runtime_frameworks.sql │ │ │ ├── 04_seed_runtime_architectures.sql │ │ │ ├── 05_seed_tag_categories.sql │ │ │ └── update_casdoor.sql.sample │ ├── supervisord.with_k8s.conf │ └── supervisord.without_k8s.conf ├── logger │ ├── go.mod │ ├── go.sum │ └── main.go ├── quick_install.sh └── scripts │ ├── Dockerfile-python3.10 │ ├── Dockerfile-python3.10-cuda11.8.0 │ ├── casdoor-process-wrapper │ ├── csghub-accounting-process-wrapper │ ├── csghub-builder-process-wrapper │ ├── csghub-dataviewer-process-wrapper │ ├── csghub-portal-process-wrapper │ ├── csghub-proxy-process-wrapper │ ├── csghub-runner-process-wrapper │ ├── csghub-server-process-wrapper │ ├── csghub-user-process-wrapper │ ├── dnsmasq-process-wrapper │ ├── entrypoint.sh │ ├── gitaly-process-wrapper │ ├── gitlab-shell-process-wrapper │ ├── init.sh │ ├── k3s-install.sh │ ├── k8s-init-job.sh │ ├── minio-init-job.sh │ ├── minio-process-wrapper │ ├── mirror-init-job.sh │ ├── mirror-lfs-process-wrapper │ ├── mirror-repo-process-wrapper │ ├── nats-process-wrapper │ ├── nginx-process-wrapper │ ├── postgres-init-job.sh │ ├── postgres-process-wrapper │ ├── redis-process-wrapper │ ├── registry-process-wrapper │ ├── seed-init-job.sh │ ├── temporal-auto-setup.sh │ ├── temporal-process-wrapper │ ├── temporal-start.sh │ └── temporal-ui-process-wrapper ├── docs ├── en │ ├── install_argo.md │ ├── install_knative_serving.md │ ├── install_lws.md │ ├── install_nvidia_device_plugin.md │ └── simulate_dynamic_pv.md └── zh │ ├── README_cn.md │ ├── install_argo_cn.md │ ├── install_csghub_by_compose_cn.md │ ├── install_csghub_by_docker_cn.md │ ├── install_csghub_by_helm_cn.md │ ├── install_knative_serving_cn.md │ ├── install_lws_cn.md │ ├── install_nvidia_device_plugin_cn.md │ └── simulate_dynamic_pv_cn.md ├── helm ├── README.md ├── charts │ └── csghub │ │ ├── .helmignore │ │ ├── Chart.lock │ │ ├── Chart.yaml │ │ ├── charts │ │ ├── accounting │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── aigateway │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── deployment.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── casdoor │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ ├── job.yaml │ │ │ │ ├── secret.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── coredns │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── dataviewer │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── deployment.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── fluentd │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── README.md │ │ │ ├── dashboards │ │ │ │ └── fluentd.json │ │ │ ├── templates │ │ │ │ ├── NOTES.txt │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── _pod.tpl │ │ │ │ ├── clusterrole.yaml │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ ├── configmap-dashboards.yaml │ │ │ │ ├── daemonset.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ ├── files.conf │ │ │ │ │ ├── prometheus.yaml │ │ │ │ │ └── systemd.yaml │ │ │ │ ├── fluentd-configurations-cm.yaml │ │ │ │ ├── hpa.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ ├── podsecuritypolicy.yaml │ │ │ │ ├── prometheusrules.yaml │ │ │ │ ├── service.yaml │ │ │ │ ├── serviceaccount.yaml │ │ │ │ ├── servicemonitor.yaml │ │ │ │ ├── statefulset.yaml │ │ │ │ └── tests │ │ │ │ │ └── test-connection.yaml │ │ │ └── values.yaml │ │ ├── gitaly │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── service.yaml │ │ │ │ └── statefulset.yaml │ │ │ └── values.yaml │ │ ├── gitlab-shell │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── job.yaml │ │ │ │ ├── role.yaml │ │ │ │ ├── roleBinding.yaml │ │ │ │ ├── service.yaml │ │ │ │ ├── serviceAccount.yaml │ │ │ │ └── statefulset.yaml │ │ │ └── values.yaml │ │ ├── ingress-nginx │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── OWNERS │ │ │ ├── README.md │ │ │ ├── README.md.gotmpl │ │ │ ├── changelog │ │ │ │ ├── helm-chart-2.10.0.md │ │ │ │ ├── helm-chart-2.11.0.md │ │ │ │ ├── helm-chart-2.11.1.md │ │ │ │ ├── helm-chart-2.11.2.md │ │ │ │ ├── helm-chart-2.11.3.md │ │ │ │ ├── helm-chart-2.12.0.md │ │ │ │ ├── helm-chart-2.12.1.md │ │ │ │ ├── helm-chart-2.13.0.md │ │ │ │ ├── helm-chart-2.14.0.md │ │ │ │ ├── helm-chart-2.15.0.md │ │ │ │ ├── helm-chart-2.16.0.md │ │ │ │ ├── helm-chart-2.9.0.md │ │ │ │ ├── helm-chart-2.9.1.md │ │ │ │ ├── helm-chart-3.0.0.md │ │ │ │ ├── helm-chart-3.10.0.md │ │ │ │ ├── helm-chart-3.10.1.md │ │ │ │ ├── helm-chart-3.11.0.md │ │ │ │ ├── helm-chart-3.11.1.md │ │ │ │ ├── helm-chart-3.12.0.md │ │ │ │ ├── helm-chart-3.13.0.md │ │ │ │ ├── helm-chart-3.14.0.md │ │ │ │ ├── helm-chart-3.15.0.md │ │ │ │ ├── helm-chart-3.15.1.md │ │ │ │ ├── helm-chart-3.16.0.md │ │ │ │ ├── helm-chart-3.16.1.md │ │ │ │ ├── helm-chart-3.17.0.md │ │ │ │ ├── helm-chart-3.18.0.md │ │ │ │ ├── helm-chart-3.19.0.md │ │ │ │ ├── helm-chart-3.20.0.md │ │ │ │ ├── helm-chart-3.20.1.md │ │ │ │ ├── helm-chart-3.21.0.md │ │ │ │ ├── helm-chart-3.22.0.md │ │ │ │ ├── helm-chart-3.23.0.md │ │ │ │ ├── helm-chart-3.24.0.md │ │ │ │ ├── helm-chart-3.25.0.md │ │ │ │ ├── helm-chart-3.26.0.md │ │ │ │ ├── helm-chart-3.27.0.md │ │ │ │ ├── helm-chart-3.28.0.md │ │ │ │ ├── helm-chart-3.29.0.md │ │ │ │ ├── helm-chart-3.3.0.md │ │ │ │ ├── helm-chart-3.3.1.md │ │ │ │ ├── helm-chart-3.30.0.md │ │ │ │ ├── helm-chart-3.31.0.md │ │ │ │ ├── helm-chart-3.32.0.md │ │ │ │ ├── helm-chart-3.33.0.md │ │ │ │ ├── helm-chart-3.34.0.md │ │ │ │ ├── helm-chart-3.4.0.md │ │ │ │ ├── helm-chart-3.5.0.md │ │ │ │ ├── helm-chart-3.5.1.md │ │ │ │ ├── helm-chart-3.6.0.md │ │ │ │ ├── helm-chart-3.7.0.md │ │ │ │ ├── helm-chart-3.7.1.md │ │ │ │ ├── helm-chart-3.8.0.md │ │ │ │ ├── helm-chart-3.9.0.md │ │ │ │ ├── helm-chart-4.0.1.md │ │ │ │ ├── helm-chart-4.0.10.md │ │ │ │ ├── helm-chart-4.0.11.md │ │ │ │ ├── helm-chart-4.0.12.md │ │ │ │ ├── helm-chart-4.0.13.md │ │ │ │ ├── helm-chart-4.0.14.md │ │ │ │ ├── helm-chart-4.0.15.md │ │ │ │ ├── helm-chart-4.0.18.md │ │ │ │ ├── helm-chart-4.0.2.md │ │ │ │ ├── helm-chart-4.0.3.md │ │ │ │ ├── helm-chart-4.0.5.md │ │ │ │ ├── helm-chart-4.0.6.md │ │ │ │ ├── helm-chart-4.0.7.md │ │ │ │ ├── helm-chart-4.0.9.md │ │ │ │ ├── helm-chart-4.1.0.md │ │ │ │ ├── helm-chart-4.1.2.md │ │ │ │ ├── helm-chart-4.10.0.md │ │ │ │ ├── helm-chart-4.10.1.md │ │ │ │ ├── helm-chart-4.10.2.md │ │ │ │ ├── helm-chart-4.10.3.md │ │ │ │ ├── helm-chart-4.10.4.md │ │ │ │ ├── helm-chart-4.11.0.md │ │ │ │ ├── helm-chart-4.11.1.md │ │ │ │ ├── helm-chart-4.11.2.md │ │ │ │ ├── helm-chart-4.12.0-beta.0.md │ │ │ │ ├── helm-chart-4.12.0.md │ │ │ │ ├── helm-chart-4.2.0.md │ │ │ │ ├── helm-chart-4.2.1.md │ │ │ │ ├── helm-chart-4.3.0.md │ │ │ │ ├── helm-chart-4.4.0.md │ │ │ │ ├── helm-chart-4.5.2.md │ │ │ │ ├── helm-chart-4.6.0.md │ │ │ │ ├── helm-chart-4.6.1.md │ │ │ │ ├── helm-chart-4.7.0.md │ │ │ │ ├── helm-chart-4.7.1.md │ │ │ │ ├── helm-chart-4.7.2.md │ │ │ │ ├── helm-chart-4.8.0-beta.0.md │ │ │ │ ├── helm-chart-4.8.0.md │ │ │ │ ├── helm-chart-4.8.1.md │ │ │ │ ├── helm-chart-4.8.2.md │ │ │ │ ├── helm-chart-4.8.3.md │ │ │ │ ├── helm-chart-4.9.0.md │ │ │ │ ├── helm-chart-4.9.1.md │ │ │ │ └── helm-chart.md.gotmpl │ │ │ ├── ci │ │ │ │ ├── admission-webhooks-cert-manager-values.yaml │ │ │ │ ├── controller-configmap-addheaders-values.yaml │ │ │ │ ├── controller-configmap-proxyheaders-values.yaml │ │ │ │ ├── controller-configmap-values.yaml │ │ │ │ ├── controller-daemonset-metrics-values.yaml │ │ │ │ ├── controller-daemonset-podannotations-values.yaml │ │ │ │ ├── controller-daemonset-values.yaml │ │ │ │ ├── controller-deployment-metrics-values.yaml │ │ │ │ ├── controller-deployment-podannotations-values.yaml │ │ │ │ ├── controller-deployment-values.yaml │ │ │ │ ├── controller-hpa-values.yaml │ │ │ │ ├── controller-ingressclass-values.yaml │ │ │ │ ├── controller-service-internal-values.yaml │ │ │ │ └── controller-service-values.yaml │ │ │ ├── templates │ │ │ │ ├── NOTES.txt │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── _params.tpl │ │ │ │ ├── admission-webhooks │ │ │ │ │ ├── cert-manager.yaml │ │ │ │ │ ├── job-patch │ │ │ │ │ │ ├── clusterrole.yaml │ │ │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ │ │ ├── job-createSecret.yaml │ │ │ │ │ │ ├── job-patchWebhook.yaml │ │ │ │ │ │ ├── networkpolicy.yaml │ │ │ │ │ │ ├── role.yaml │ │ │ │ │ │ ├── rolebinding.yaml │ │ │ │ │ │ └── serviceaccount.yaml │ │ │ │ │ └── validating-webhook.yaml │ │ │ │ ├── clusterrole.yaml │ │ │ │ ├── clusterrolebinding.yaml │ │ │ │ ├── controller-configmap-addheaders.yaml │ │ │ │ ├── controller-configmap-proxyheaders.yaml │ │ │ │ ├── controller-configmap-tcp.yaml │ │ │ │ ├── controller-configmap-udp.yaml │ │ │ │ ├── controller-configmap.yaml │ │ │ │ ├── controller-daemonset.yaml │ │ │ │ ├── controller-deployment.yaml │ │ │ │ ├── controller-hpa.yaml │ │ │ │ ├── controller-ingressclass-aliases.yaml │ │ │ │ ├── controller-ingressclass.yaml │ │ │ │ ├── controller-keda.yaml │ │ │ │ ├── controller-networkpolicy.yaml │ │ │ │ ├── controller-poddisruptionbudget.yaml │ │ │ │ ├── controller-prometheusrule.yaml │ │ │ │ ├── controller-role.yaml │ │ │ │ ├── controller-rolebinding.yaml │ │ │ │ ├── controller-secret.yaml │ │ │ │ ├── controller-service-internal.yaml │ │ │ │ ├── controller-service-metrics.yaml │ │ │ │ ├── controller-service-webhook.yaml │ │ │ │ ├── controller-service.yaml │ │ │ │ ├── controller-serviceaccount.yaml │ │ │ │ ├── controller-servicemonitor.yaml │ │ │ │ ├── default-backend-deployment.yaml │ │ │ │ ├── default-backend-extra-configmaps.yaml │ │ │ │ ├── default-backend-hpa.yaml │ │ │ │ ├── default-backend-networkpolicy.yaml │ │ │ │ ├── default-backend-poddisruptionbudget.yaml │ │ │ │ ├── default-backend-service.yaml │ │ │ │ └── default-backend-serviceaccount.yaml │ │ │ ├── tests │ │ │ │ ├── admission-webhooks │ │ │ │ │ ├── job-patch │ │ │ │ │ │ ├── clusterrole_test.yaml │ │ │ │ │ │ ├── clusterrolebinding_test.yaml │ │ │ │ │ │ ├── role_test.yaml │ │ │ │ │ │ ├── rolebinding_test.yaml │ │ │ │ │ │ └── serviceaccount_test.yaml │ │ │ │ │ └── validating-webhook_test.yaml │ │ │ │ ├── controller-configmap-addheaders_test.yaml │ │ │ │ ├── controller-configmap-proxyheaders_test.yaml │ │ │ │ ├── controller-configmap_test.yaml │ │ │ │ ├── controller-daemonset_test.yaml │ │ │ │ ├── controller-deployment_test.yaml │ │ │ │ ├── controller-hpa_test.yaml │ │ │ │ ├── controller-ingressclass-aliases_test.yaml │ │ │ │ ├── controller-ingressclass_test.yaml │ │ │ │ ├── controller-keda_test.yaml │ │ │ │ ├── controller-networkpolicy_test.yaml │ │ │ │ ├── controller-poddisruptionbudget_test.yaml │ │ │ │ ├── controller-prometheusrule_test.yaml │ │ │ │ ├── controller-service-internal_test.yaml │ │ │ │ ├── controller-service-metrics_test.yaml │ │ │ │ ├── controller-service-webhook_test.yaml │ │ │ │ ├── controller-service_test.yaml │ │ │ │ ├── controller-serviceaccount_test.yaml │ │ │ │ ├── controller-servicemonitor_test.yaml │ │ │ │ ├── default-backend-deployment_test.yaml │ │ │ │ ├── default-backend-extra-configmaps_test.yaml │ │ │ │ ├── default-backend-poddisruptionbudget_test.yaml │ │ │ │ ├── default-backend-service_test.yaml │ │ │ │ └── default-backend-serviceaccount_test.yaml │ │ │ └── values.yaml │ │ ├── minio │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ ├── job-post.yaml │ │ │ │ ├── job.yaml │ │ │ │ ├── secret.yaml │ │ │ │ ├── service.yaml │ │ │ │ └── statefulset.yaml │ │ │ └── values.yaml │ │ ├── mirror │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ └── deployment.yaml │ │ │ └── values.yaml │ │ ├── moderation │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── nats │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── service.yaml │ │ │ │ └── statefulset.yaml │ │ │ └── values.yaml │ │ ├── portal │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── autoscaler.yaml │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── postgresql │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── job-post.yaml │ │ │ │ ├── job.yaml │ │ │ │ ├── secret.yaml │ │ │ │ ├── service.yaml │ │ │ │ └── statefulset.yaml │ │ │ └── values.yaml │ │ ├── proxy │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── redis │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── secret.yaml │ │ │ │ ├── service.yaml │ │ │ │ └── statefulset.yaml │ │ │ └── values.yaml │ │ ├── registry │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ ├── secret.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── runner │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap-argo.yaml │ │ │ │ ├── configmap-knative.yaml │ │ │ │ ├── configmap-lws.yaml │ │ │ │ ├── configmap-space.yaml │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ ├── job.yaml │ │ │ │ ├── namespace.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── server │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── scripts │ │ │ │ ├── 01_promote_root.sql │ │ │ │ ├── 02_seed_space_resources.sql │ │ │ │ └── 05_seed_tag_categories.sql │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── autoscaler.yaml │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ ├── job.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── temporal │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── configmap.yaml │ │ │ │ ├── deployment.yaml │ │ │ │ ├── ingress.yaml │ │ │ │ ├── secret.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ ├── user │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ │ ├── _helpers.tpl │ │ │ │ ├── deployment.yaml │ │ │ │ └── service.yaml │ │ │ └── values.yaml │ │ └── watcher │ │ │ ├── .helmignore │ │ │ ├── Chart.yaml │ │ │ ├── templates │ │ │ ├── clusterRole.yaml │ │ │ ├── clusterRoleBinding.yaml │ │ │ ├── configmap.yaml │ │ │ ├── deployment.yaml │ │ │ └── serviceAccount.yaml │ │ │ └── values.yaml │ │ ├── templates │ │ ├── NOTES.txt │ │ ├── _capabilities.tpl │ │ ├── _csghub.tpl │ │ ├── _database.tpl │ │ ├── _domain.tpl │ │ ├── _gitaly.tpl │ │ ├── _ingress.tpl │ │ ├── _labels.tpl │ │ ├── _names.tpl │ │ ├── _objectStore.tpl │ │ ├── _redis.tpl │ │ ├── _registry.tpl │ │ └── podDisruptionBudget.yaml │ │ └── values.yaml └── quick_install.sh └── knative ├── kourier.yaml ├── serving-core.yaml ├── serving-crds.yaml ├── serving-default-domain.yaml └── serving-hpa.yaml /.gitattributes: -------------------------------------------------------------------------------- 1 | **/*.tar.gz filter=lfs diff=lfs merge=lfs -text 2 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/bug_report.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Bug report 3 | about: Create a report to help us improve 4 | title: '' 5 | labels: '' 6 | assignees: '' 7 | 8 | --- 9 | 10 | **Describe the bug** 11 | A clear and concise description of what the bug is. 12 | 13 | **To Reproduce** 14 | Steps to reproduce the behavior: 15 | 1. Go to '...' 16 | 2. Click on '....' 17 | 3. Scroll down to '....' 18 | 4. See error 19 | 20 | **Expected behavior** 21 | A clear and concise description of what you expected to happen. 22 | 23 | **Screenshots** 24 | If applicable, add screenshots to help explain your problem. 25 | 26 | **Desktop (please complete the following information):** 27 | - OS: [e.g. iOS] 28 | - Browser [e.g. chrome, safari] 29 | - Version [e.g. 22] 30 | 31 | **Smartphone (please complete the following information):** 32 | - Device: [e.g. iPhone6] 33 | - OS: [e.g. iOS8.1] 34 | - Browser [e.g. stock browser, safari] 35 | - Version [e.g. 22] 36 | 37 | **Additional context** 38 | Add any other context about the problem here. 39 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/feature_request.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Feature request 3 | about: Suggest an idea for this project 4 | title: '' 5 | labels: '' 6 | assignees: '' 7 | 8 | --- 9 | 10 | **Is your feature request related to a problem? Please describe.** 11 | A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] 12 | 13 | **Describe the solution you'd like** 14 | A clear and concise description of what you want to happen. 15 | 16 | **Describe alternatives you've considered** 17 | A clear and concise description of any alternative solutions or features you've considered. 18 | 19 | **Additional context** 20 | Add any other context or screenshots about the feature request here. 21 | -------------------------------------------------------------------------------- /.github/workflows/release-helm-chart.yml: -------------------------------------------------------------------------------- 1 | name: Release CSGHub Helm Chart 2 | 3 | on: 4 | push: 5 | tags: 6 | - 'v\d+\.\d+\.\d+' 7 | 8 | jobs: 9 | package: 10 | permissions: 11 | contents: write 12 | runs-on: ubuntu-latest 13 | 14 | steps: 15 | - name: Checkout 16 | uses: actions/checkout@v4 17 | with: 18 | fetch-depth: 0 19 | lfs: true 20 | 21 | - name: Configure Git 22 | run: | 23 | git config user.name "$GITHUB_ACTOR" 24 | git config user.email "$GITHUB_ACTOR@users.noreply.github.com" 25 | 26 | - name: Install Helm 27 | uses: azure/setup-helm@v4 28 | 29 | - name: Run chart-releaser 30 | uses: helm/chart-releaser-action@v1.6.0 31 | with: 32 | charts_dir: helm/charts 33 | env: 34 | CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | .idea 2 | .kube 3 | tls.* 4 | *.crt 5 | *.key 6 | **/.kube/* 7 | .DS_Store 8 | -------------------------------------------------------------------------------- /.gitlab-ci.yml: -------------------------------------------------------------------------------- 1 | workflow: 2 | rules: 3 | - if: $CI_COMMIT_TAG =~ /^v\d+.\d+.\d+$/ 4 | 5 | stages: 6 | - package 7 | - publish 8 | 9 | variables: 10 | CHART_NAME: "csghub" 11 | CHART_PATH: "./helm/charts/csghub" 12 | HELM_REGISTRY: "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/packages/helm/stable" 13 | 14 | before_script: 15 | - apt update && apt install -y curl git 16 | - curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 17 | - chmod 700 get_helm.sh 18 | - ./get_helm.sh 19 | 20 | package: 21 | stage: package 22 | image: ubuntu:22.04 23 | script: 24 | - helm package $CHART_PATH -d ./ 25 | - helm repo add --username $CI_REGISTRY_USER --password $CI_REGISTRY_PASSWORD $CHART_NAME $HELM_REGISTRY 26 | - helm plugin install https://github.com/chartmuseum/helm-push 27 | - helm cm-push *.tgz $CHART_NAME 28 | tags: 29 | - external 30 | artifacts: 31 | paths: 32 | - "*.tgz" 33 | expire_in: 1 week 34 | 35 | -------------------------------------------------------------------------------- /docker/compose/configs/casdoor/conf/app.conf.sample: -------------------------------------------------------------------------------- 1 | appname = casdoor 2 | httpport = 8000 3 | runmode = prod 4 | copyrequestbody = true 5 | driverName = postgres 6 | dataSourceName = "user=_POSTGRES_USER password=_POSTGRES_PASSWORD host=_POSTGRES_HOST port=_POSTGRES_PORT sslmode=disable dbname=csghub_casdoor" 7 | dbName = 8 | tableNamePrefix = 9 | showSql = false 10 | redisEndpoint = 11 | defaultStorageProvider = 12 | isCloudIntranet = false 13 | authState = "casdoor" 14 | socks5Proxy = "127.0.0.1:10808" 15 | verificationCodeTimeout = 10 16 | initScore = 0 17 | logPostOnly = true 18 | origin = 19 | originFrontend = 20 | staticBaseUrl = "https://cdn.casbin.org" 21 | isDemoMode = false 22 | batchSize = 100 23 | enableGzip = true 24 | ldapServerPort = 389 25 | radiusServerPort = 1812 26 | radiusSecret = "secret" 27 | quota = {"organization": -1, "user": -1, "application": -1, "provider": -1} 28 | logConfig = {"filename": "logs/casdoor.log", "maxdays":99999, "perm":"0770"} 29 | initDataFile = "/conf/init_data.json" 30 | initDataNewOnly = true 31 | frontendBaseDir = "../casdoor" 32 | -------------------------------------------------------------------------------- /docker/compose/configs/coredns/Corefile.sample: -------------------------------------------------------------------------------- 1 | internal { 2 | file /etc/coredns/_SPACE_APP_NAMESPACE._SPACE_APP_INTERNAL_DOMAIN 3 | log 4 | errors 5 | } 6 | 7 | .:53 { 8 | log 9 | forward . /etc/resolv.conf 10 | errors 11 | } -------------------------------------------------------------------------------- /docker/compose/configs/fluentd/fluent.conf.sample: -------------------------------------------------------------------------------- 1 | # fluentd.conf 2 | 3 | 4 | @type forward 5 | port 24224 6 | 7 | -------------------------------------------------------------------------------- /docker/compose/configs/gitaly/config.toml.sample: -------------------------------------------------------------------------------- 1 | ## Gitaly configuration (default) 2 | # The directory where Gitaly's executables are stored 3 | bin_dir = "/usr/local/bin" 4 | 5 | # listen on a TCP socket. This is insecure (no authentication) 6 | listen_addr = "0.0.0.0:8075" 7 | 8 | # Git executable settings 9 | [git] 10 | use_bundled_binaries = true 11 | 12 | # storage configuration, expected in $HOME 13 | [[storage]] 14 | name = "default" 15 | path = "/home/git/repositories" 16 | 17 | [logging] 18 | format = "json" 19 | level = "info" 20 | dir = "/var/log/gitaly" 21 | 22 | [auth] 23 | token = '_GITALY_AUTH_TOKEN' 24 | 25 | [gitlab] 26 | # # URL of the GitLab server. 27 | url = "http://csghub-server:8080" 28 | # # 'relative_url_root' is only needed if a UNIX socket is used in 'url' and GitLab is configured to 29 | # # use a relative path. For example, '/gitlab'. 30 | # relative_url_root = '/' 31 | # # Path of the file containing the secret token used to authenticate with GitLab. Use either 'secret_token' or 'secret' 32 | # # but not both. 33 | # secret_file = "/Users/zzh/working/gitaly/gitlab-shell/.gitlab_shell_secret" 34 | # # Secret token used to authenticate with GitLab. 35 | secret = "signing-key" 36 | -------------------------------------------------------------------------------- /docker/compose/configs/nats/nats-server.conf.sample: -------------------------------------------------------------------------------- 1 | debug = false 2 | trace = false 3 | 4 | # Client port of 4222 on all interfaces 5 | port: 4222 6 | 7 | # HTTP monitoring port 8 | monitor_port: 8222 9 | 10 | jetstream: enabled 11 | 12 | jetstream { 13 | store_dir: /data/jetstream 14 | max_mem: 8G 15 | max_file: 10G 16 | } 17 | 18 | authorization { 19 | ADMIN = { 20 | publish = ">" 21 | subscribe = ">" 22 | } 23 | 24 | users = [ 25 | {user: '_NATS_ROOT_USER', password: '_NATS_ROOT_PASSWORD_HTPASSWD', permissions: $ADMIN} 26 | ] 27 | } 28 | 29 | # This is for clustering multiple servers together. 30 | # server_name=nats-master 31 | # cluster { 32 | # # It is recommended to set a cluster name 33 | # name: "nats_cluster" 34 | 35 | # # Route connections to be received on any interface on port 6222 36 | # port: 6222 37 | 38 | # # Routes are protected, so need to use them with --routes flag 39 | # # e.g. --routes=nats-route://ruser:cT20ApSv3c2sr3xtbg@otherdockerhost:6222 40 | # authorization { 41 | # user: ruser 42 | # password: cT20ApSv3c2sr3xtbg 43 | # timeout: 2 44 | # } 45 | 46 | # # Routes are actively solicited and connected to from this server. 47 | # # This Docker image has none by default, but you can pass a 48 | # # flag to the nats-server docker image to create one to an existing server. 49 | # routes = [] 50 | # } 51 | -------------------------------------------------------------------------------- /docker/compose/configs/server/scripts/update_casdoor.sql.sample: -------------------------------------------------------------------------------- 1 | -- 2 | -- Record Timestamp 3 | -- 4 | SELECT now() as "Execute Timestamp"; 5 | 6 | -- 7 | -- PostgreSQL database dump 8 | -- 9 | SET exit_on_error = on; 10 | SET statement_timeout = 0; 11 | SET lock_timeout = 0; 12 | SET idle_in_transaction_session_timeout = 0; 13 | SET client_encoding = 'UTF8'; 14 | SET standard_conforming_strings = on; 15 | SET check_function_bodies = false; 16 | SET xmloption = content; 17 | SET client_min_messages = warning; 18 | SET row_security = off; 19 | 20 | -- 21 | -- Set Default Schema for All Tables 22 | -- 23 | 24 | SELECT pg_catalog.set_config('search_path', 'public', false); 25 | 26 | -- 27 | -- Name: application; Type: TABLE; Schema: public; Owner: csghub 28 | -- 29 | -- Connect to casdoor management database 30 | \connect csghub_casdoor 31 | 32 | -- Update RedirectURLs 33 | UPDATE 34 | application 35 | SET 36 | redirect_uris = '["_SERVER_PROTOCOL://_SERVER_DOMAIN:_SERVER_PORT/api/v1/callback/casdoor","_SERVER_PROTOCOL://_SERVER_DOMAIN/api/v1/callback/casdoor"]' 37 | WHERE 38 | name = 'CSGHub'; 39 | 40 | -- Reset admin user default password 41 | UPDATE 42 | "user" 43 | SET 44 | password = 'Root@1234' 45 | WHERE 46 | name = 'admin' 47 | AND password = '123'; -------------------------------------------------------------------------------- /docker/etc/casdoor/app.conf.sample: -------------------------------------------------------------------------------- 1 | appname = casdoor 2 | httpport = 8087 3 | runmode = prod 4 | copyrequestbody = true 5 | driverName = postgres 6 | dataSourceName = "user=${POSTGRES_CASDOOR_USER} password=${POSTGRES_CASDOOR_PASS} host=${POSTGRES_HOST} port=${POSTGRES_PORT} sslmode=disable dbname=${POSTGRES_CASDOOR_DB}" 7 | dbName = 8 | tableNamePrefix = 9 | showSql = false 10 | redisEndpoint = 11 | defaultStorageProvider = 12 | isCloudIntranet = false 13 | authState = "casdoor" 14 | socks5Proxy = "127.0.0.1:10808" 15 | verificationCodeTimeout = 10 16 | initScore = 0 17 | logPostOnly = true 18 | origin = 19 | originFrontend = 20 | staticBaseUrl = "https://cdn.casbin.org" 21 | isDemoMode = false 22 | batchSize = 100 23 | enableGzip = true 24 | ldapServerPort = 389 25 | radiusServerPort = 1812 26 | radiusSecret = "secret" 27 | quota = {"organization": -1, "user": -1, "application": -1, "provider": -1} 28 | logConfig = {"filename": "logs/casdoor.log", "maxdays":99999, "perm":"0770"} 29 | initDataFile = "./conf/init_data.json" 30 | initDataNewOnly = true 31 | frontendBaseDir = "../casdoor" 32 | inactiveTimeoutMinutes = 30 33 | -------------------------------------------------------------------------------- /docker/etc/casdoor/files/avatar/OpenCSG/background.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OpenCSGs/csghub-installer/0986b8c5e7869861ec7be4d366dceaf36efb930a/docker/etc/casdoor/files/avatar/OpenCSG/background.png -------------------------------------------------------------------------------- /docker/etc/casdoor/files/avatar/OpenCSG/favicon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OpenCSGs/csghub-installer/0986b8c5e7869861ec7be4d366dceaf36efb930a/docker/etc/casdoor/files/avatar/OpenCSG/favicon.png -------------------------------------------------------------------------------- /docker/etc/casdoor/files/avatar/OpenCSG/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OpenCSGs/csghub-installer/0986b8c5e7869861ec7be4d366dceaf36efb930a/docker/etc/casdoor/files/avatar/OpenCSG/logo.png -------------------------------------------------------------------------------- /docker/etc/casdoor/files/avatar/OpenCSG/robot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/OpenCSGs/csghub-installer/0986b8c5e7869861ec7be4d366dceaf36efb930a/docker/etc/casdoor/files/avatar/OpenCSG/robot.png -------------------------------------------------------------------------------- /docker/etc/gitaly/config.toml.sample: -------------------------------------------------------------------------------- 1 | ## Gitaly configuration (default) 2 | # The directory where Gitaly's executables are stored 3 | bin_dir = "/usr/bin" 4 | 5 | # listen on a TCP socket. This is insecure (no authentication) 6 | listen_addr = "127.0.0.1:8075" 7 | 8 | # Git executable settings 9 | [git] 10 | use_bundled_binaries = true 11 | 12 | # storage configuration, expected in $HOME 13 | [[storage]] 14 | name = "default" 15 | path = "/var/opt/gitaly/repositories" 16 | 17 | [logging] 18 | format = "json" 19 | level = "info" 20 | dir = "/var/log/gitaly" 21 | 22 | [auth] 23 | token = "${GITALY_TOKEN}" 24 | 25 | [gitlab] 26 | # # URL of the GitLab server. 27 | url = "http://127.0.0.1:8080" 28 | # # 'relative_url_root' is only needed if a UNIX socket is used in 'url' and GitLab is configured to 29 | # # use a relative path. For example, '/gitlab'. 30 | # relative_url_root = '/' 31 | # # Path of the file containing the secret token used to authenticate with GitLab. Use either 'secret_token' or 'secret' 32 | # # but not both. 33 | # secret_file = "/etc/gitaly/.gitaly_token" 34 | # # Secret token used to authenticate with GitLab. 35 | secret = "signing-key" -------------------------------------------------------------------------------- /docker/etc/gitlab-shell/.gitaly_token.sample: -------------------------------------------------------------------------------- 1 | ${GITALY_TOKEN} -------------------------------------------------------------------------------- /docker/etc/nats/nats.conf.sample: -------------------------------------------------------------------------------- 1 | debug = false 2 | trace = false 3 | 4 | # Client port of 4222 on all interfaces 5 | port: 4222 6 | 7 | # HTTP monitoring port 8 | monitor_port: 8222 9 | 10 | jetstream: enabled 11 | 12 | jetstream { 13 | store_dir: /var/opt/nats/data/jetstream 14 | max_mem: 8G 15 | max_file: 10G 16 | } 17 | 18 | authorization { 19 | ADMIN = { 20 | publish = ">" 21 | subscribe = ">" 22 | } 23 | 24 | users = [ 25 | {user: "${NATS_USERNAME}", password: "$BCRYPT_NATS_PASSWORD", permissions: ${DOLLAR}ADMIN} 26 | ] 27 | } 28 | 29 | # This is for clustering multiple servers together. 30 | # server_name=nats-master 31 | # cluster { 32 | # # It is recommended to set a cluster name 33 | # name: "nats_cluster" 34 | 35 | # # Route connections to be received on any interface on port 6222 36 | # port: 6222 37 | 38 | # # Routes are protected, so need to use them with --routes flag 39 | # # e.g. --routes=nats-route://ruser:cT20ApSv3c2sr3xtbg@otherdockerhost:6222 40 | # authorization { 41 | # user: ruser 42 | # password: cT20ApSv3c2sr3xtbg 43 | # timeout: 2 44 | # } 45 | 46 | # # Routes are actively solicited and connected to from this server. 47 | # # This Docker image has none by default, but you can pass a 48 | # # flag to the nats-server docker image to create one to an existing server. 49 | # routes = [] 50 | # } 51 | -------------------------------------------------------------------------------- /docker/etc/profile.d/alias.sh: -------------------------------------------------------------------------------- 1 | csghub-ctl() { 2 | case "$1" in 3 | status) 4 | command supervisorctl status | grep -v -w init-job 5 | ;; 6 | jobs) 7 | command supervisorctl status | grep init-job 8 | ;; 9 | tail) 10 | if [[ "$2" == "-f" && $# -eq 2 ]] || [[ $# -eq 1 ]]; then 11 | /usr/bin/logger 12 | else 13 | has_f=false 14 | for arg in "$@"; do 15 | if [[ "$arg" == "-f" ]]; then 16 | has_f=true 17 | break 18 | fi 19 | done 20 | 21 | if [ "$has_f" = false ]; then 22 | command supervisorctl "$1" -f "${@:2}" 23 | else 24 | command supervisorctl "$@" 25 | fi 26 | fi 27 | ;; 28 | *) 29 | command supervisorctl "$@" 30 | ;; 31 | esac 32 | } -------------------------------------------------------------------------------- /docker/etc/redis/redis.conf: -------------------------------------------------------------------------------- 1 | bind 127.0.0.1 -::1 2 | protected-mode yes 3 | port 6379 4 | tcp-backlog 511 5 | unixsocket /var/run/redis/redis.sock 6 | unixsocketperm 770 7 | timeout 0 8 | tcp-keepalive 300 9 | loglevel notice 10 | logfile /var/log/redis/redis.log 11 | databases 16 12 | always-show-logo no 13 | set-proc-title yes 14 | appendonly yes 15 | appendfilename "appendonly.aof" 16 | appenddirname "appendonlydir" 17 | appendfsync everysec 18 | no-appendfsync-on-rewrite no 19 | auto-aof-rewrite-percentage 100 20 | auto-aof-rewrite-min-size 64mb 21 | aof-load-truncated yes 22 | aof-use-rdb-preamble yes 23 | aof-timestamp-enabled no 24 | dir /var/opt/redis -------------------------------------------------------------------------------- /docker/etc/registry/config.yml.sample: -------------------------------------------------------------------------------- 1 | version: 0.1 2 | log: 3 | fields: 4 | service: registry 5 | storage: 6 | cache: 7 | blobdescriptor: inmemory 8 | s3: 9 | accesskey: ${REGISTRY_S3_ACCESS_KEY} 10 | secretkey: ${REGISTRY_S3_ACCESS_SECRET} 11 | region: ${REGISTRY_S3_REGION} 12 | regionendpoint: ${REGISTRY_S3_ENDPOINT} 13 | bucket: ${REGISTRY_S3_BUCKET} 14 | encrypt: false 15 | secure: false 16 | http: 17 | addr: :5000 18 | headers: 19 | X-Content-Type-Options: [nosniff] 20 | auth: 21 | htpasswd: 22 | realm: basic-realm 23 | path: /etc/registry/.htpasswd 24 | health: 25 | storagedriver: 26 | enabled: true 27 | interval: 10s 28 | threshold: 3 29 | -------------------------------------------------------------------------------- /docker/etc/server/scripts/update_casdoor.sql.sample: -------------------------------------------------------------------------------- 1 | -- 2 | -- Record Timestamp 3 | -- 4 | SELECT now() as "Execute Timestamp"; 5 | 6 | -- 7 | -- PostgreSQL database dump 8 | -- 9 | SET exit_on_error = on; 10 | SET statement_timeout = 0; 11 | SET lock_timeout = 0; 12 | SET idle_in_transaction_session_timeout = 0; 13 | SET client_encoding = 'UTF8'; 14 | SET standard_conforming_strings = on; 15 | SET check_function_bodies = false; 16 | SET xmloption = content; 17 | SET client_min_messages = warning; 18 | SET row_security = off; 19 | 20 | -- 21 | -- Set Default Schema for All Tables 22 | -- 23 | 24 | SELECT pg_catalog.set_config('search_path', 'public', false); 25 | 26 | -- 27 | -- Name: application; Type: TABLE; Schema: public; Owner: csghub 28 | -- 29 | -- Connect to casdoor management database 30 | \connect csghub_casdoor 31 | 32 | -- Update RedirectURLs 33 | UPDATE 34 | application 35 | SET 36 | redirect_uris = '["http://_SERVER_DOMAIN:_SERVER_PORT/api/v1/callback/casdoor","http://_SERVER_DOMAIN/api/v1/callback/casdoor"]' 37 | WHERE 38 | name = 'CSGHub'; 39 | 40 | -- Reset admin user default password 41 | UPDATE 42 | "user" 43 | SET 44 | password = 'Root@1234' 45 | WHERE 46 | name = 'admin' 47 | AND password = '123'; -------------------------------------------------------------------------------- /docker/logger/go.mod: -------------------------------------------------------------------------------- 1 | module logout 2 | 3 | go 1.22.3 4 | 5 | require ( 6 | github.com/fsnotify/fsnotify v1.8.0 // indirect 7 | golang.org/x/sys v0.26.0 // indirect 8 | ) 9 | -------------------------------------------------------------------------------- /docker/logger/go.sum: -------------------------------------------------------------------------------- 1 | github.com/fsnotify/fsnotify v1.8.0 h1:dAwr6QBTBZIkG8roQaJjGof0pp0EeF+tNV7YBP3F/8M= 2 | github.com/fsnotify/fsnotify v1.8.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0= 3 | golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= 4 | golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= 5 | -------------------------------------------------------------------------------- /docker/scripts/casdoor-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | export PGHOST=${POSTGRES_HOST} 6 | export PGPORT=${POSTGRES_PORT} 7 | export PGUSER=${POSTGRES_CASDOOR_USER} 8 | export PGPASSWORD=${POSTGRES_CASDOOR_PASS:-"$POSTGRES_CASDOOR_USER"} 9 | export PGDATABASE=${POSTGRES_CASDOOR_DB:-"$POSTGRES_CASDOOR_USER"} 10 | 11 | check_postgresql() { 12 | echo "Waiting PostgreSQL ready..." 13 | until su - postgres -lc 'psql -t -A -c \\du' | grep -q "${POSTGRES_CASDOOR_USER}"; do 14 | sleep 2 15 | done 16 | echo "PostgreSQL is ready." 17 | } 18 | 19 | check_postgresql 20 | 21 | export POSTGRES_CASDOOR_PASS=${POSTGRES_CASDOOR_PASS:-POSTGRES_CASDOOR_USER} 22 | export POSTGRES_CASDOOR_DB=${POSTGRES_CASDOOR_DB:-$POSTGRES_CASDOOR_USER} 23 | 24 | if [ -f "/etc/casdoor/app.conf.sample" ] && [ -f "/etc/casdoor/init_data.json.sample" ]; then 25 | mkdir -p /etc/casdoor/conf 26 | 27 | envsubst < /etc/casdoor/app.conf.sample > /etc/casdoor/conf/app.conf 28 | envsubst < /etc/casdoor/init_data.json.sample > /etc/casdoor/conf/init_data.json 29 | fi 30 | 31 | echo "Starting casdoor..." 32 | cd /etc/casdoor && exec /usr/bin/casdoor -------------------------------------------------------------------------------- /docker/scripts/csghub-accounting-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_server 14 | 15 | echo "Starting accounting..." 16 | exec /usr/bin/csghub-server accounting launch -------------------------------------------------------------------------------- /docker/scripts/csghub-builder-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | export SPACE_BUILDER_PORT=${SPACE_BUILDER_PORT:-"8089"} 4 | export SPACE_DATA_PATH=${SPACE_DATA_PATH:-/var/opt/csghub-builder} 5 | export PIP_INDEX_URL=${PIP_INDEX_URL:-""} 6 | 7 | # Keep all other 8 | cd / && exec /usr/bin/builder "$@" 9 | -------------------------------------------------------------------------------- /docker/scripts/csghub-dataviewer-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_server 14 | 15 | echo "Starting dataviewer..." 16 | exec /usr/bin/csghub-server dataviewer launch -------------------------------------------------------------------------------- /docker/scripts/csghub-portal-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | export PGHOST=${POSTGRES_HOST} 4 | export PGPORT=${POSTGRES_PORT} 5 | export PGUSER=${POSTGRES_PORTAL_USER} 6 | export PGPASSWORD=${POSTGRES_PORTAL_PASS:-"$POSTGRES_PORTAL_USER"} 7 | export PGDATABASE=${POSTGRES_PORTAL_DB:-"$POSTGRES_PORTAL_USER"} 8 | 9 | check_postgresql_isready() { 10 | until pg_isready -q -d $PGDATABASE; do 11 | sleep 2 12 | done 13 | } 14 | 15 | check_postgresql() { 16 | check_postgresql_isready 17 | 18 | echo "Waiting PostgreSQL ready..." 19 | until su - postgres -lc 'psql -t -A -c \\du' | grep -q "${POSTGRES_PORTAL_USER}"; do 20 | sleep 2 21 | done 22 | echo "PostgreSQL is ready." 23 | } 24 | 25 | check_minio() { 26 | echo "Waiting MinIO ready..." 27 | until /usr/bin/curl -s http://${CSGHUB_PORTAL_S3_ENDPOINT}/minio/health/live; do 28 | sleep 2 29 | done 30 | echo "MinIO is ready." 31 | } 32 | 33 | check_postgresql 34 | 35 | if [ "$MINIO_ROOT_USER" == "minio" ]; then 36 | check_minio 37 | fi 38 | 39 | echo "Initializing database migrations..." 40 | /usr/bin/csghub-portal migration init 41 | 42 | echo "Running database migrations..." 43 | /usr/bin/csghub-portal migration migrate 44 | 45 | echo "Starting portal..." 46 | cd /var/log/csghub-portal && exec /usr/bin/csghub-portal start server -------------------------------------------------------------------------------- /docker/scripts/csghub-proxy-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_server 14 | 15 | echo "Starting rproxy..." 16 | exec /usr/bin/csghub-server start rproxy -------------------------------------------------------------------------------- /docker/scripts/csghub-runner-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_server 14 | 15 | echo "Starting runner..." 16 | exec /usr/bin/csghub-server deploy runner -------------------------------------------------------------------------------- /docker/scripts/csghub-user-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_server 14 | 15 | echo "Starting user..." 16 | exec /usr/bin/csghub-server user launch -------------------------------------------------------------------------------- /docker/scripts/dnsmasq-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | if [ -f "/etc/resolv.conf" ]; then 6 | if ! grep -q '127.0.0.1' /etc/resolv.conf; then 7 | cp -f /etc/resolv.conf /tmp/resolv.conf.bak 8 | sed '0,/nameserver/s//nameserver 127.0.0.1\n&/' /tmp/resolv.conf.bak > /etc/resolv.conf 9 | fi 10 | fi 11 | 12 | if [ "$(pgrep -l -c -x dnsmasq)" -eq 1 ]; then 13 | pkill dnsmasq 14 | fi 15 | 16 | echo "Starting dnsmasq..." 17 | exec /usr/sbin/dnsmasq --conf-dir=/etc/dnsmasq.d --no-daemon -------------------------------------------------------------------------------- /docker/scripts/gitaly-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | GITALY_CONFIG_FILE="${GITALY_CONFIG_FILE:-/etc/gitaly/config.toml}" 6 | PRAEFECT_CONFIG_FILE="${PRAEFECT_CONFIG_FILE:-/etc/gitaly/config.toml}" 7 | GITALY_DATA="/var/opt/gitaly/repositories" 8 | 9 | if [ -f "/etc/gitaly/config.toml.sample" ]; then 10 | envsubst < /etc/gitaly/config.toml.sample > /etc/gitaly/config.toml 11 | fi 12 | 13 | if [ ! -d "$GITALY_DATA" ]; then 14 | mkdir -p /var/opt/gitaly $GITALY_DATA 2>/dev/null 15 | fi 16 | 17 | if [ "${USE_PRAEFECT_SERVICE:-0}" -eq 1 ]; then 18 | echo "Starting praefect..." 19 | 20 | if [ "${PRAEFECT_AUTO_MIGRATE:-1}" -eq 1 ]; then 21 | echo "Running migrations" 22 | /usr/bin/praefect -config "$PRAEFECT_CONFIG_FILE" sql-migrate 23 | fi 24 | 25 | exec /usr/bin/praefect -config "$PRAEFECT_CONFIG_FILE" >> /var/log/gitaly/praefect.log 2>&1 26 | else 27 | echo "Starting gitaly..." 28 | exec /usr/bin/gitaly "$GITALY_CONFIG_FILE" 29 | fi -------------------------------------------------------------------------------- /docker/scripts/gitlab-shell-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | KEYS_DIRECTORY="${KEYS_DIRECTORY:-/etc/ssh}" 6 | SSH_DAEMON="${SSH_DAEMON:-"gitlab-sshd"}" 7 | 8 | if [ -f "/etc/gitlab-shell/.gitaly_token.sample" ]; then 9 | envsubst < /etc/gitlab-shell/.gitaly_token.sample > /etc/gitlab-shell/.gitaly_token 10 | fi 11 | 12 | if ls $KEYS_DIRECTORY/ssh_host_* 1> /dev/null 2>&1; then 13 | echo "Using existing Host Keys" 14 | # copy from KEYS_DIRECTORY to /etc/ssh as needed 15 | if [ "$KEYS_DIRECTORY" != "/etc/ssh" ]; then 16 | cp $KEYS_DIRECTORY/ssh_host_* "/etc/ssh/" 17 | fi 18 | else 19 | echo "Generating Host Keys" 20 | # generate host keys, placed into `/etc/ssh` 21 | ssh-keygen -A 22 | cp /etc/ssh/ssh_host_* "$KEYS_DIRECTORY/" 23 | fi 24 | 25 | if [ "${SSH_DAEMON}" == "gitlab-sshd" ]; then 26 | exec /usr/bin/gitlab-sshd -config-dir /etc/gitlab-shell 27 | else 28 | if [ "${USE_GITLAB_LOGGER-0}" -eq 1 ]; then 29 | /usr/bin/gitlab-logger /var/log/gitlab-shell & 30 | else 31 | if command -v xtail >/dev/null; then 32 | xtail /var/log/gitlab-shell & 33 | else 34 | touch /var/log/gitlab-shell/gitlab-shell.log 35 | tail -f /var/log/gitlab-shell/* & 36 | fi 37 | fi 38 | 39 | exec /usr/sbin/sshd -D -E /var/log/gitlab-shell/gitlab-shell.log 40 | fi -------------------------------------------------------------------------------- /docker/scripts/minio-init-job.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | check_minio() { 4 | echo "Waiting MinIO ready..." 5 | until /usr/bin/curl -s http://127.0.0.1:9000/minio/health/live; do 6 | sleep 2 7 | done 8 | echo "MinIO is ready." 9 | } 10 | 11 | check_minio 12 | 13 | echo "Initialize minio buckets" 14 | export MC_CONFIG_DIR=/tmp 15 | mc alias set myMinio "http://127.0.0.1:9000" "${MINIO_ROOT_USER}" "${MINIO_ROOT_PASSWORD}" 16 | echo "Create buckets..." 17 | for BUCKET in "$STARHUB_SERVER_S3_BUCKET" "$CSGHUB_PORTAL_S3_BUCKET" "$REGISTRY_S3_BUCKET"; do 18 | if ! mc ls myMinio/"$BUCKET"; then 19 | mc mb myMinio/"$BUCKET" 20 | echo "Bucket $BUCKET created." 21 | else 22 | echo "Bucket $BUCKET already exits." 23 | fi 24 | done -------------------------------------------------------------------------------- /docker/scripts/minio-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | export MINIO_ROOT_USER=${S3_ACCESS_KEY:-"$MINIO_ROOT_USER"} 6 | export MINIO_ROOT_PASSWORD=${S3_ACCESS_SECRET:-"$MINIO_ROOT_PASSWORD"} 7 | export MINIO_REGION_NAME=${S3_REGION:-"$MINIO_REGION_NAME"} 8 | export MINIO_DATA="/var/opt/minio/data" 9 | 10 | if [ ! -d "$MINIO_DATA" ]; then 11 | mkdir -p $MINIO_DATA 2>/dev/null 12 | fi 13 | 14 | if [ -z "$MINIO_ROOT_USER" ] || [ -z "$MINIO_ROOT_PASSWORD" ]; then 15 | echo "environment MINIO_ROOT_USER and MINIO_ROOT_PASSWORD must be provided." 16 | fi 17 | 18 | if [[ "$(pgrep -l -c -x minio)" -eq 1 ]]; then 19 | echo "minio is already running." 20 | else 21 | echo "start minio..." 22 | exec /usr/bin/minio server --address :9000 --console-address :9001 $MINIO_DATA 23 | fi -------------------------------------------------------------------------------- /docker/scripts/mirror-lfs-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_server 14 | 15 | echo "Starting mirror lfs..." 16 | exec /usr/bin/csghub-server mirror lfs-sync -------------------------------------------------------------------------------- /docker/scripts/mirror-repo-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_server 14 | 15 | echo "Starting mirror repo..." 16 | exec /usr/bin/csghub-server mirror repo-sync -------------------------------------------------------------------------------- /docker/scripts/nats-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | if [ -f "/etc/nats/nats.conf.sample" ]; then 6 | export BCRYPT_NATS_PASSWORD=$(htpasswd -Bbn "$NATS_USERNAME" "$NATS_PASSWORD" | cut -d : -f 2) 7 | envsubst < /etc/nats/nats.conf.sample > /etc/nats/nats.conf 8 | fi 9 | 10 | if [ -f "/etc/nats/nats.conf" ]; then 11 | echo "Starting nats server..." 12 | exec /usr/bin/nats-server -c /etc/nats/nats.conf 13 | fi -------------------------------------------------------------------------------- /docker/scripts/nginx-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | check_server() { 6 | echo "Waiting CSGHub-Server ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:8080/api/v1/tags; do 8 | sleep 2 9 | done 10 | echo "CSGHub-Server is ready." 11 | } 12 | 13 | check_portal() { 14 | echo "Waiting CSGHub-Portal ready..." 15 | until /usr/bin/curl -s http://127.0.0.1:8090; do 16 | sleep 2 17 | done 18 | echo "CSGHub-Portal is ready." 19 | } 20 | 21 | check_server 22 | check_portal 23 | 24 | echo "Create htpasswd file." 25 | htpasswd -Bb -c /etc/nginx/.htpasswd "$TEMPORAL_USER" "$TEMPORAL_PASS" 26 | 27 | if [ -f "/etc/nginx/nginx.conf.sample" ]; then 28 | envsubst < /etc/nginx/nginx.conf.sample > /etc/nginx/nginx.conf 29 | fi 30 | 31 | if [ -f "/etc/nginx/nginx.conf" ]; then 32 | echo "Starting nginx..." 33 | exec /usr/sbin/nginx -c /etc/nginx/nginx.conf 34 | fi -------------------------------------------------------------------------------- /docker/scripts/redis-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | REDIS_DATA="/var/opt/redis" 6 | 7 | if [ -f "$UNIX_SOCK/redis.sock" ]; then 8 | echo "redis is already running." 9 | else 10 | echo "start redis..." 11 | exec /usr/bin/redis-server /etc/redis/redis.conf --daemonize no --logfile "" --appendonly yes --appendfilename "redis.aof" --dir $REDIS_DATA 12 | fi -------------------------------------------------------------------------------- /docker/scripts/registry-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -e 4 | 5 | echo "Create htpasswd file." 6 | htpasswd -Bb -c /etc/registry/.htpasswd $REGISTRY_USERNAME $REGISTRY_PASSWORD 7 | 8 | if [ -f "/etc/registry/config.yml.sample" ]; then 9 | envsubst < /etc/registry/config.yml.sample > /etc/registry/config.yml 10 | fi 11 | 12 | if [[ "$(pgrep -l -c -x registry)" -eq 1 ]]; then 13 | echo "distribution registry is already running." 14 | else 15 | if [ -f "/etc/registry/.htpasswd" ]; then 16 | echo "start distribution registry..." 17 | exec /usr/bin/registry serve /etc/registry/config.yml 18 | else 19 | echo "htpasswd auth file cannot be found." 20 | fi 21 | fi -------------------------------------------------------------------------------- /docker/scripts/temporal-start.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -eu -o pipefail 4 | 5 | : "${SERVICES:=}" 6 | 7 | flags=() 8 | if [[ -n ${SERVICES} ]]; then 9 | # Convert colon (or comma, for backward compatibility) separated string (i.e. "history:matching") 10 | # to valid flag list (i.e. "--service=history --service=matching"). 11 | SERVICES="${SERVICES//:/,}" 12 | SERVICES="${SERVICES//,/ }" 13 | for i in $SERVICES; do flags+=("--service=$i"); done 14 | fi 15 | 16 | 17 | exec temporal-server --allow-no-auth --config /etc/temporal/config --env docker start "${flags[@]}" 18 | -------------------------------------------------------------------------------- /docker/scripts/temporal-ui-process-wrapper: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -eu -o pipefail 4 | 5 | check_temporal() { 6 | echo "Waiting Temporal ready..." 7 | until /usr/bin/curl -s -o /dev/null http://127.0.0.1:7243; do 8 | sleep 2 9 | done 10 | echo "Temporal is ready." 11 | } 12 | 13 | check_temporal 14 | 15 | if [ -f /etc/temporal-ui/config-template.yaml ]; then 16 | dockerize -template /etc/temporal-ui/config-template.yaml:/etc/temporal-ui/config/docker.yaml 17 | fi 18 | 19 | # Run bash instead of ui-server if "bash" is passed as an argument (convenient to debug docker image). 20 | for arg in "$@" ; do [[ ${arg} == "bash" ]] && bash && exit 0 ; done 21 | 22 | exec /usr/bin/ui-server --config /etc/temporal-ui/config --env docker start 23 | -------------------------------------------------------------------------------- /helm/charts/csghub/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/Chart.lock: -------------------------------------------------------------------------------- 1 | dependencies: 2 | - name: ingress-nginx 3 | repository: file://charts/ingress-nginx 4 | version: 4.12.0 5 | - name: fluentd 6 | repository: file://charts/fluentd 7 | version: 0.5.2 8 | digest: sha256:c312d7df3f2675b549d35fa2009016c99b3d2a64941c2280aa07e23e3529511e 9 | generated: "2025-01-21T23:48:50.298182+08:00" 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/accounting/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/accounting/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for accounting 8 | */}} 9 | {{- define "accounting.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "accounting") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for accounting 15 | */}} 16 | {{- define "accounting.internal.port" -}} 17 | {{- $port := "8086" }} 18 | {{- if hasKey .Values.global "accounting" }} 19 | {{- if hasKey .Values.global.accounting "service" }} 20 | {{- if hasKey .Values.global.accounting.service "port" }} 21 | {{- $port = .Values.global.accounting.service.port }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port | toString -}} 26 | {{- end }} 27 | 28 | {{/* 29 | Define the internal endpoint for accounting 30 | */}} 31 | {{- define "accounting.internal.endpoint" -}} 32 | {{- printf "http://%s:%s" (include "accounting.internal.domain" .) (include "accounting.internal.port" .) -}} 33 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/accounting/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: ConfigMap 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | annotations: 13 | resource.dependencies/deployments: | 14 | {{ include "common.names.custom" . }} 15 | data: 16 | OPENCSG_ACCOUNTING_SERVER_PORT: {{ include "accounting.internal.port" . | quote }} 17 | OPENCSG_ACCOUNTING_FEE_EVENT_SUBJECT: "accounting.fee.>" 18 | OPENCSG_ACCOUNTING_NOTIFY_NOBALANCE_SUBJECT: "accounting.notify.nobalance" 19 | OPENCSG_ACCOUNTING_MSG_FETCH_TIMEOUTINSEC: "5" 20 | OPENCSG_ACCOUNTING_CHARGING_ENABLE: "true" 21 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/accounting/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: Service 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | ports: 15 | - port: {{ .Values.service.port }} 16 | targetPort: 8086 17 | protocol: TCP 18 | name: accounting 19 | selector: 20 | {{- include "common.labels.selector" . | nindent 4 }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/aigateway/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/aigateway/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for aigateway 8 | */}} 9 | {{- define "aigateway.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "aigateway") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for aigateway 15 | */}} 16 | {{- define "aigateway.internal.port" -}} 17 | {{- $port := "8084" }} 18 | {{- if hasKey .Values.global "aigateway" }} 19 | {{- if hasKey .Values.global.aigateway "service" }} 20 | {{- if hasKey .Values.global.aigateway.service "port" }} 21 | {{- $port = .Values.global.aigateway.service.port | toString }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port -}} 26 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/aigateway/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: Service 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | ports: 15 | - port: {{ .Values.service.port }} 16 | targetPort: 8084 17 | protocol: TCP 18 | name: aigateway 19 | selector: 20 | {{- include "common.labels.selector" . | nindent 4 }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/casdoor/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/casdoor/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | name: casdoor 3 | home: https://casdoor.org/ 4 | sources: 5 | - https://github.com/casdoor/casdoor 6 | maintainers: 7 | - name: OpenCSG Inc. 8 | email: support@opencsg.com 9 | 10 | # A chart can be either an 'application' or a 'library' chart. 11 | # 12 | # Application charts are a collection of templates that can be packaged into versioned archives 13 | # to be deployed. 14 | # 15 | # Library charts provide useful utilities or functions for the chart developer. They're included as 16 | # a dependency of application charts to inject those utilities and functions into the rendering 17 | # pipeline. Library charts do not define any templates and therefore cannot be deployed. 18 | type: application 19 | 20 | # This is the chart version. This version number should be incremented each time you make changes 21 | # to the chart and its templates, including the app version. 22 | # Versions are expected to follow Semantic Versioning (https://semver.org/) 23 | version: 1.799.0 24 | 25 | # This is the version number of the application being deployed. This version number should be 26 | # incremented each time you make changes to the application. Versions are not expected to 27 | # follow Semantic Versioning. They should reflect the version the application is using. 28 | # It is recommended to use it with quotes. 29 | appVersion: "1.799.0" 30 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/casdoor/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | type: {{ .Values.service.type }} 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 8000 18 | protocol: TCP 19 | name: casdoor 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/coredns/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/coredns/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the ip of coredns within kube-system 8 | */}} 9 | {{- define "system.coredns.ip" -}} 10 | {{- $kubeDNSClusterIP := ""}} 11 | {{- $kubeDNS := (lookup "v1" "Service" "kube-system" "kube-dns") }} 12 | {{- if $kubeDNS }} 13 | {{- $kubeDNSClusterIP = $kubeDNS.spec.clusterIP }} 14 | {{- $kubeDNSClusterIP -}} 15 | {{- end }} 16 | {{- end }} 17 | 18 | {{/* 19 | Define the ip of coredns self-managed 20 | */}} 21 | {{- define "coredns.csghub" -}} 22 | {{- $kubeDNSClusterIP := include "system.coredns.ip" . }} 23 | {{- $csghubDNSClusterIP := regexReplaceAll "[0-9]+$" $kubeDNSClusterIP "166" }} 24 | {{- $csghubDNSClusterIP -}} 25 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/coredns/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and .Values.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | type: {{ .Values.service.type }} 15 | clusterIP: {{ include "coredns.csghub" . }} 16 | ports: 17 | - port: {{ .Values.service.port }} 18 | targetPort: 53 19 | protocol: TCP 20 | name: coredns-tcp 21 | - port: {{ .Values.service.port }} 22 | targetPort: 53 23 | protocol: UDP 24 | name: coredns-udp 25 | selector: 26 | {{- include "common.labels.selector" . | nindent 4 }} 27 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/dataviewer/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/dataviewer/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for dataviewer 8 | */}} 9 | {{- define "dataviewer.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "dataviewer") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for dataviewer 15 | */}} 16 | {{- define "dataviewer.internal.port" -}} 17 | {{- $port := "8093" }} 18 | {{- if hasKey .Values.global "dataviewer" }} 19 | {{- if hasKey .Values.global.dataviewer "service" }} 20 | {{- if hasKey .Values.global.dataviewer.service "port" }} 21 | {{- $port = .Values.global.dataviewer.service.port | toString }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port -}} 26 | {{- end }} 27 | 28 | {{/* 29 | Define the internal endpoint for dataviewer 30 | */}} 31 | {{- define "dataviewer.internal.endpoint" -}} 32 | {{- printf "http://%s:%s" (include "dataviewer.internal.domain" .) (include "dataviewer.internal.port" .) }} 33 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/dataviewer/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | clusterIP: None 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 8093 18 | protocol: TCP 19 | name: dataviewer 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | appVersion: v1.16.2 3 | description: A Helm chart for Kubernetes 4 | home: https://www.fluentd.org/ 5 | icon: https://www.fluentd.org/images/miscellany/fluentd-logo_2x.png 6 | maintainers: 7 | - email: eduardo@treasure-data.com 8 | name: edsiper 9 | - email: diogo.filipe.tomas.guerra@cern.ch 10 | name: dioguerra 11 | name: fluentd 12 | sources: 13 | - https://github.com/fluent/fluentd/ 14 | - https://github.com/fluent/fluentd-kubernetes-daemonset 15 | version: 0.5.2 16 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/NOTES.txt: -------------------------------------------------------------------------------- 1 | Get Fluentd build information by running these commands: 2 | 3 | export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "fluentd.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") 4 | kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 24231:24231 5 | curl http://127.0.0.1:24231/metrics 6 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: {{ include "fluentd.fullname" . }} 6 | labels: 7 | {{- include "fluentd.labels" . | nindent 4 }} 8 | rules: 9 | - apiGroups: 10 | - "" 11 | resources: 12 | - pods 13 | - namespaces 14 | verbs: 15 | - get 16 | - list 17 | - watch 18 | {{- if and .Values.podSecurityPolicy.enabled (semverCompare "<1.25-0" .Capabilities.KubeVersion.GitVersion) }} 19 | - apiGroups: 20 | - policy 21 | resourceNames: 22 | - {{ include "fluentd.fullname" . }} 23 | resources: 24 | - podsecuritypolicies 25 | verbs: 26 | - use 27 | {{- end }} 28 | {{- end -}} 29 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: {{ include "fluentd.fullname" . }} 6 | labels: 7 | {{- include "fluentd.labels" . | nindent 4 }} 8 | roleRef: 9 | apiGroup: rbac.authorization.k8s.io 10 | kind: ClusterRole 11 | name: {{ include "fluentd.fullname" . }} 12 | subjects: 13 | - kind: ServiceAccount 14 | name: {{ include "fluentd.serviceAccountName" . }} 15 | namespace: {{ .Release.Namespace }} 16 | {{- end -}} 17 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/configmap-dashboards.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.dashboards.enabled -}} 2 | {{- range $path, $_ := .Files.Glob "dashboards/*.json" }} 3 | apiVersion: v1 4 | kind: ConfigMap 5 | metadata: 6 | name: dashboard-{{ trimSuffix ".json" (base $path) }}-{{ include "fluentd.shortReleaseName" $ }} 7 | namespace: {{ $.Values.dashboards.namespace | default $.Release.Namespace }} 8 | labels: 9 | {{- include "fluentd.labels" $ | nindent 4 }} 10 | {{- range $key, $val := $.Values.dashboards.labels }} 11 | {{ $key }}: {{ $val }} 12 | {{- end }} 13 | data: 14 | {{ base $path }}: |- 15 | {{- $.Files.Get $path | nindent 4 }} 16 | --- 17 | {{- end }} 18 | {{- end -}} 19 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/daemonset.yaml: -------------------------------------------------------------------------------- 1 | {{- if eq .Values.kind "DaemonSet" }} 2 | apiVersion: apps/v1 3 | kind: DaemonSet 4 | metadata: 5 | name: {{ include "fluentd.fullname" . }} 6 | labels: 7 | {{- include "fluentd.labels" . | nindent 4 }} 8 | {{- with .Values.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | {{- with .Values.annotations }} 12 | annotations: 13 | {{- toYaml . | nindent 4 }} 14 | {{- end }} 15 | spec: 16 | selector: 17 | matchLabels: 18 | {{- include "fluentd.selectorLabels" . | nindent 6 }} 19 | {{- with .Values.updateStrategy }} 20 | updateStrategy: 21 | {{- toYaml . | nindent 4 }} 22 | {{- end }} 23 | {{- with .Values.minReadySeconds }} 24 | minReadySeconds: {{ . }} 25 | {{- end }} 26 | template: 27 | metadata: 28 | annotations: 29 | checksum/config: {{ include (print $.Template.BasePath "/fluentd-configurations-cm.yaml") . | sha256sum }} 30 | {{- with .Values.podAnnotations }} 31 | {{- toYaml . | nindent 8 }} 32 | {{- end }} 33 | labels: 34 | {{- include "fluentd.selectorLabels" . | nindent 8 }} 35 | {{- with .Values.podLabels }} 36 | {{- toYaml . | nindent 8 }} 37 | {{- end }} 38 | spec: 39 | {{- include "fluentd.pod" . | nindent 6 }} 40 | {{- end }} 41 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/deployment.yaml: -------------------------------------------------------------------------------- 1 | {{- if eq .Values.kind "Deployment" }} 2 | apiVersion: apps/v1 3 | kind: Deployment 4 | metadata: 5 | name: {{ include "fluentd.fullname" . }} 6 | labels: 7 | {{- include "fluentd.labels" . | nindent 4 }} 8 | {{- with .Values.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | {{- with .Values.annotations }} 12 | annotations: 13 | {{- toYaml . | nindent 4 }} 14 | {{- end }} 15 | spec: 16 | replicas: {{ .Values.replicaCount }} 17 | {{- with .Values.updateStrategy }} 18 | strategy: 19 | {{- toYaml . | nindent 4 }} 20 | {{- end }} 21 | selector: 22 | matchLabels: 23 | {{- include "fluentd.selectorLabels" . | nindent 6 }} 24 | {{- with .Values.minReadySeconds }} 25 | minReadySeconds: {{ . }} 26 | {{- end }} 27 | template: 28 | metadata: 29 | annotations: 30 | checksum/config: {{ include (print $.Template.BasePath "/fluentd-configurations-cm.yaml") . | sha256sum }} 31 | {{- with .Values.podAnnotations }} 32 | {{- toYaml . | nindent 8 }} 33 | {{- end }} 34 | labels: 35 | {{- include "fluentd.selectorLabels" . | nindent 8 }} 36 | {{- with .Values.podLabels }} 37 | {{- toYaml . | nindent 8 }} 38 | {{- end }} 39 | spec: 40 | {{- include "fluentd.pod" . | nindent 6 }} 41 | {{- end }} 42 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/files.conf/prometheus.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: ConfigMap 3 | metadata: 4 | labels: 5 | {{- include "fluentd.labels" . | nindent 4 }} 6 | name: fluentd-prometheus-conf-{{ include "fluentd.shortReleaseName" . }} 7 | data: 8 | prometheus.conf: |- 9 | 10 | @type prometheus 11 | @id in_prometheus 12 | bind "0.0.0.0" 13 | port 24231 14 | metrics_path "/metrics" 15 | 16 | 17 | 18 | @type prometheus_monitor 19 | @id in_prometheus_monitor 20 | 21 | 22 | 23 | @type prometheus_output_monitor 24 | @id in_prometheus_output_monitor 25 | 26 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/fluentd-configurations-cm.yaml: -------------------------------------------------------------------------------- 1 | {{- if not .Values.extraFilesConfigMapNameOverride }} 2 | --- 3 | apiVersion: v1 4 | kind: ConfigMap 5 | metadata: 6 | name: fluentd-config-{{ include "fluentd.shortReleaseName" . }} 7 | labels: 8 | {{- include "fluentd.labels" . | nindent 4 }} 9 | data: 10 | {{- range $key, $value := .Values.fileConfigs }} 11 | {{$key }}: |- 12 | {{- $value | nindent 4 }} 13 | {{- end }} 14 | {{- end }} 15 | 16 | {{- if not .Values.mainConfigMapNameOverride }} 17 | --- 18 | apiVersion: v1 19 | kind: ConfigMap 20 | metadata: 21 | name: fluentd-main-{{ include "fluentd.shortReleaseName" . }} 22 | labels: 23 | {{- include "fluentd.labels" . | nindent 4 }} 24 | data: 25 | fluent.conf: |- 26 | # do not collect fluentd logs to avoid infinite loops. 27 | 33 | 34 | @include config.d/*.conf 35 | {{- range $key := .Values.configMapConfigs }} 36 | {{- print "@include " $key ".d/*" | nindent 4 }} 37 | {{- end }} 38 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/ingress.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.ingress.enabled -}} 2 | {{- $fullName := include "fluentd.fullname" . -}} 3 | apiVersion: networking.k8s.io/v1 4 | kind: Ingress 5 | metadata: 6 | name: {{ include "fluentd.fullname" . }} 7 | labels: 8 | {{- include "fluentd.labels" . | nindent 4 }} 9 | {{- with .Values.labels }} 10 | {{- toYaml . | nindent 4 }} 11 | {{- end }} 12 | {{- with .Values.ingress.annotations }} 13 | annotations: 14 | {{- toYaml . | nindent 4 }} 15 | {{- end }} 16 | spec: 17 | {{- if .Values.ingress.tls }} 18 | tls: 19 | {{- range .Values.ingress.tls }} 20 | - hosts: 21 | {{- range .hosts }} 22 | - {{ . | quote }} 23 | {{- end }} 24 | {{- with .secretName }} 25 | secretName: {{ . }} 26 | {{- end }} 27 | {{- end }} 28 | {{- end }} 29 | rules: 30 | {{- range .Values.ingress.hosts }} 31 | - http: 32 | paths: 33 | - path: / 34 | pathType: Prefix 35 | backend: 36 | service: 37 | name: {{ $fullName }} 38 | port: 39 | number: {{ .port }} 40 | {{ if .host -}} 41 | host: {{ .host | quote }} 42 | {{- end -}} 43 | {{- end -}} 44 | {{- end -}} 45 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/podsecuritypolicy.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.podSecurityPolicy.enabled (semverCompare "<1.25-0" .Capabilities.KubeVersion.GitVersion) -}} 2 | apiVersion: policy/v1beta1 3 | kind: PodSecurityPolicy 4 | metadata: 5 | name: {{ include "fluentd.fullname" . }} 6 | labels: 7 | {{- include "fluentd.labels" . | nindent 4 }} 8 | {{- if .Values.podSecurityPolicy.annotations }} 9 | annotations: 10 | {{ toYaml .Values.podSecurityPolicy.annotations | indent 4 }} 11 | {{- end }} 12 | spec: 13 | privileged: false 14 | allowPrivilegeEscalation: false 15 | requiredDropCapabilities: 16 | - ALL 17 | hostNetwork: false 18 | hostIPC: false 19 | hostPID: false 20 | volumes: 21 | - 'configMap' 22 | - 'secret' 23 | - 'hostPath' 24 | {{- if .Values.persistence.enabled }} 25 | - 'persistentVolumeClaim' 26 | {{- end }} 27 | runAsUser: 28 | rule: 'RunAsAny' 29 | seLinux: 30 | rule: 'RunAsAny' 31 | supplementalGroups: 32 | rule: 'MustRunAs' 33 | ranges: 34 | - min: 1 35 | max: 65535 36 | fsGroup: 37 | rule: 'MustRunAs' 38 | ranges: 39 | - min: 1 40 | max: 65535 41 | readOnlyRootFilesystem: false 42 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/prometheusrules.yaml: -------------------------------------------------------------------------------- 1 | {{- if and ( .Capabilities.APIVersions.Has "monitoring.coreos.com/v1" ) .Values.metrics.prometheusRule.enabled }} 2 | apiVersion: monitoring.coreos.com/v1 3 | kind: PrometheusRule 4 | metadata: 5 | name: {{ template "fluentd.fullname" . }} 6 | {{- if .Values.metrics.prometheusRule.namespace }} 7 | namespace: {{ .Values.metrics.prometheusRule.namespace }} 8 | {{- end }} 9 | labels: 10 | {{- include "fluentd.labels" . | nindent 4 }} 11 | {{- with .Values.metrics.prometheusRule.additionalLabels }} 12 | {{- toYaml . | nindent 4 }} 13 | {{- end }} 14 | spec: 15 | {{- with .Values.metrics.prometheusRule.rules }} 16 | groups: 17 | - name: {{ template "fluentd.fullname" $ }} 18 | rules: 19 | {{- toYaml . | nindent 4 }} 20 | {{- end }} 21 | {{- end }} 22 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.service.enabled -}} 2 | apiVersion: v1 3 | kind: Service 4 | metadata: 5 | name: {{ include "fluentd.fullname" . }} 6 | labels: 7 | {{- include "fluentd.labels" . | nindent 4 }} 8 | {{- with .Values.service.annotations }} 9 | annotations: 10 | {{- toYaml . | nindent 4 }} 11 | {{- end }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | {{- if .Values.service.loadBalancerIP }} 15 | loadBalancerIP: {{ .Values.service.loadBalancerIP }} 16 | {{- end }} 17 | {{- if .Values.service.externalTrafficPolicy }} 18 | externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }} 19 | {{- end }} 20 | ports: 21 | - port: 24231 22 | targetPort: metrics 23 | protocol: TCP 24 | name: metrics 25 | {{- if .Values.service.ports }} 26 | {{- range $port := .Values.service.ports }} 27 | - name: {{ $port.name }} 28 | port: {{ $port.containerPort }} 29 | targetPort: {{ $port.containerPort }} 30 | protocol: {{ $port.protocol }} 31 | {{- end }} 32 | {{- end }} 33 | selector: 34 | {{- include "fluentd.selectorLabels" . | nindent 4 }} 35 | {{- end -}} 36 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "fluentd.serviceAccountName" . }} 6 | labels: 7 | {{- include "fluentd.labels" . | nindent 4 }} 8 | {{- with .Values.serviceAccount.annotations }} 9 | annotations: 10 | {{- toYaml . | nindent 4 }} 11 | {{- end }} 12 | {{- end -}} 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/fluentd/templates/tests/test-connection.yaml: -------------------------------------------------------------------------------- 1 | {{/* 2 | Target the very simple case where 3 | fluentd is deployed with the default values 4 | If the fluentd config is overriden and the metrics server removed 5 | this will fail. 6 | */}} 7 | {{ if empty .Values.service.ports }} 8 | apiVersion: v1 9 | kind: Pod 10 | metadata: 11 | name: "{{ include "fluentd.fullname" . }}-test-connection" 12 | labels: 13 | {{- include "fluentd.labels" . | nindent 4 }} 14 | annotations: 15 | "helm.sh/hook": test-success 16 | spec: 17 | containers: 18 | - name: wget 19 | image: busybox 20 | command: 21 | - sh 22 | - -c 23 | - | 24 | set -e 25 | # Give fluentd some time to start up 26 | while :; do nc -vz {{ include "fluentd.fullname" . }}:24231 && break; sleep 1; done 27 | wget '{{ include "fluentd.fullname" . }}:24231/metrics' 28 | restartPolicy: Never 29 | {{ end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitaly/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitaly/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for gitaly 8 | */}} 9 | {{- define "gitaly.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "gitaly") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for gitaly 15 | */}} 16 | {{- define "gitaly.internal.port" -}} 17 | {{- $port := "8075" }} 18 | {{- if hasKey .Values.global "gitaly" }} 19 | {{- if hasKey .Values.global.gitaly "service" }} 20 | {{- if hasKey .Values.global.gitaly.service "port" }} 21 | {{- $port = .Values.global.gitaly.service.port }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port | toString -}} 26 | {{- end }} 27 | 28 | {{/* 29 | Define the internal token for gitaly 30 | */}} 31 | {{- define "gitaly.internal.token" -}} 32 | {{- printf "%s@1234!" .Release.Name | b64enc -}} 33 | {{- end }} 34 | 35 | {{/* 36 | Define the internal endpoint for gitaly 37 | */}} 38 | {{- define "gitaly.internal.endpoint" -}} 39 | {{- printf "http://%s:%s" (include "gitaly.internal.domain" .) (include "gitaly.internal.port" .) -}} 40 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitaly/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if not .Values.global.gitaly.external }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | clusterIP: None 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 8075 18 | protocol: TCP 19 | name: gitaly 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitlab-shell/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitlab-shell/templates/role.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and .Values.enabled .Values.serviceAccount.create }} 7 | apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }} 8 | kind: Role 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | rules: 13 | - apiGroups: [""] 14 | resources: ["configmaps"] 15 | verbs: ["get", "list", "watch", "patch"] 16 | {{- end }} 17 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitlab-shell/templates/roleBinding.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and .Values.enabled .Values.serviceAccount.create }} 7 | apiVersion: rbac.authorization.k8s.io/v1 8 | kind: RoleBinding 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | subjects: 13 | - kind: ServiceAccount 14 | name: {{ include "common.names.custom" . }} 15 | namespace: {{ .Release.Namespace }} 16 | roleRef: 17 | kind: Role 18 | name: {{ include "common.names.custom" . }} 19 | apiGroup: rbac.authorization.k8s.io 20 | {{- end }} 21 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitlab-shell/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | annotations: {{ .Values.annotations | toYaml | nindent 4 }} 14 | spec: 15 | clusterIP: None 16 | ports: 17 | - port: {{ .Values.service.port }} 18 | targetPort: 22 19 | protocol: TCP 20 | name: gitlab-shell 21 | selector: 22 | {{- include "common.labels.selector" . | nindent 4 }} 23 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/gitlab-shell/templates/serviceAccount.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and .Values.enabled .Values.serviceAccount.create }} 7 | apiVersion: v1 8 | kind: ServiceAccount 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *~ 18 | # Various IDEs 19 | .project 20 | .idea/ 21 | *.tmproj 22 | .vscode/ 23 | __snapshot__ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/Chart.yaml: -------------------------------------------------------------------------------- 1 | annotations: 2 | artifacthub.io/changes: | 3 | - 'CI: Fix chart testing. (#12258)' 4 | - Update Ingress-Nginx version controller-v1.12.0 5 | artifacthub.io/prerelease: "false" 6 | apiVersion: v2 7 | appVersion: 1.12.0 8 | description: Ingress controller for Kubernetes using NGINX as a reverse proxy and 9 | load balancer 10 | home: https://github.com/kubernetes/ingress-nginx 11 | icon: https://upload.wikimedia.org/wikipedia/commons/thumb/c/c5/Nginx_logo.svg/500px-Nginx_logo.svg.png 12 | keywords: 13 | - ingress 14 | - nginx 15 | kubeVersion: '>=1.21.0-0' 16 | maintainers: 17 | - name: cpanato 18 | - name: Gacko 19 | - name: strongjz 20 | - name: tao12345666333 21 | name: ingress-nginx 22 | sources: 23 | - https://github.com/kubernetes/ingress-nginx 24 | version: 4.12.0 25 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/OWNERS: -------------------------------------------------------------------------------- 1 | # See the OWNERS docs: https://www.kubernetes.dev/docs/guide/owners 2 | 3 | labels: 4 | - area/helm 5 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.10.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.10.0 6 | 7 | * [#5843](https://github.com/kubernetes/ingress-nginx/pull/5843) Update jettech/kube-webhook-certgen image 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.9.1...ingress-nginx-2.10.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.11.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.11.0 6 | 7 | * [#5879](https://github.com/kubernetes/ingress-nginx/pull/5879) Update helm chart for v0.34.0 8 | * [#5671](https://github.com/kubernetes/ingress-nginx/pull/5671) Make liveness probe more fault tolerant than readiness probe 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.10.0...ingress-nginx-2.11.0 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.11.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.11.1 6 | 7 | * [#5900](https://github.com/kubernetes/ingress-nginx/pull/5900) Release helm chart for v0.34.1 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.11.0...ingress-nginx-2.11.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.11.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.11.2 6 | 7 | * [#5951](https://github.com/kubernetes/ingress-nginx/pull/5951) Bump chart patch version 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.11.1...ingress-nginx-2.11.2 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.11.3.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.11.3 6 | 7 | * [#6038](https://github.com/kubernetes/ingress-nginx/pull/6038) Bump chart version PATCH 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.11.2...ingress-nginx-2.11.3 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.12.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.12.0 6 | 7 | * [#6039](https://github.com/kubernetes/ingress-nginx/pull/6039) Add configurable serviceMonitor metricRelabelling and targetLabels 8 | * [#6044](https://github.com/kubernetes/ingress-nginx/pull/6044) Fix YAML linting 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.11.3...ingress-nginx-2.12.0 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.12.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.12.1 6 | 7 | * [#6075](https://github.com/kubernetes/ingress-nginx/pull/6075) Sync helm chart affinity examples 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.12.0...ingress-nginx-2.12.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.13.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.13.0 6 | 7 | * [#6093](https://github.com/kubernetes/ingress-nginx/pull/6093) Release v0.35.0 8 | * [#6080](https://github.com/kubernetes/ingress-nginx/pull/6080) Switch images to k8s.gcr.io after Vanity Domain Flip 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.12.1...ingress-nginx-2.13.0 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.14.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.14.0 6 | 7 | * [#6104](https://github.com/kubernetes/ingress-nginx/pull/6104) Misc fixes for nginx-ingress chart for better keel and prometheus-operator integration 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.13.0...ingress-nginx-2.14.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.15.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.15.0 6 | 7 | * [#6087](https://github.com/kubernetes/ingress-nginx/pull/6087) Adding parameter for externalTrafficPolicy in internal controller service spec 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.14.0...ingress-nginx-2.15.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.16.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.16.0 6 | 7 | * [#6154](https://github.com/kubernetes/ingress-nginx/pull/6154) add `topologySpreadConstraint` to controller 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.15.0...ingress-nginx-2.16.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.9.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.9.0 6 | 7 | * [#5795](https://github.com/kubernetes/ingress-nginx/pull/5795) Use fully qualified images to avoid cri-o issues 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-TODO...ingress-nginx-2.9.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-2.9.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 2.9.1 6 | 7 | * [#5823](https://github.com/kubernetes/ingress-nginx/pull/5823) Add quoting to sysctls because numeric values need to be presented as strings (#5823) 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.9.0...ingress-nginx-2.9.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.0.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.0.0 6 | 7 | * [#6167](https://github.com/kubernetes/ingress-nginx/pull/6167) Update chart requirements 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-2.16.0...ingress-nginx-3.0.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.10.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.10.0 6 | 7 | * Fix routing regression introduced in 0.41.0 with PathType Exact 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.9.0...ingress-nginx-3.10.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.10.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.10.1 6 | 7 | * Fix regression introduced in 0.41.0 with external authentication 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.10.0...ingress-nginx-3.10.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.11.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.11.0 6 | 7 | * Support Keda Autoscaling 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.10.1...ingress-nginx-3.11.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.11.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.11.1 6 | 7 | * [#6505](https://github.com/kubernetes/ingress-nginx/pull/6505) Reorder HPA resource list to work with GitOps tooling 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.11.0...ingress-nginx-3.11.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.12.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.12.0 6 | 7 | * [#6514](https://github.com/kubernetes/ingress-nginx/pull/6514) Remove helm2 support and update docs 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.11.1...ingress-nginx-3.12.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.13.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.13.0 6 | 7 | * [#6544](https://github.com/kubernetes/ingress-nginx/pull/6544) Fix default backend HPA name variable 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.12.0...ingress-nginx-3.13.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.14.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.14.0 6 | 7 | * [#6469](https://github.com/kubernetes/ingress-nginx/pull/6469) Allow custom service names for controller and backend 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.13.0...ingress-nginx-3.14.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.15.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.15.0 6 | 7 | * [#6586](https://github.com/kubernetes/ingress-nginx/pull/6586) Fix 'maxmindLicenseKey' location in values.yaml 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.14.0...ingress-nginx-3.15.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.15.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.15.1 6 | 7 | * Fix chart-releaser action 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.15.0...ingress-nginx-3.15.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.16.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.16.0 6 | 7 | * [#6646](https://github.com/kubernetes/ingress-nginx/pull/6646) Added LoadBalancerIP value for internal service 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.15.1...helm-chart-3.16.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.16.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.16.1 6 | 7 | * Fix chart-releaser action 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.16.0...helm-chart-3.16.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.17.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.17.0 6 | 7 | * Update ingress-nginx v0.42.0 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.16.1...helm-chart-3.17.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.18.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.18.0 6 | 7 | * [#6688](https://github.com/kubernetes/ingress-nginx/pull/6688) Allow volume-type emptyDir in controller podsecuritypolicy 8 | * [#6691](https://github.com/kubernetes/ingress-nginx/pull/6691) Improve parsing of helm parameters 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.17.0...helm-chart-3.18.0 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.19.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.19.0 6 | 7 | * Update ingress-nginx v0.43.0 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.18.0...helm-chart-3.19.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.20.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.20.0 6 | 7 | * [#6730](https://github.com/kubernetes/ingress-nginx/pull/6730) Do not create HPA for defaultBackend if not enabled. 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.19.0...helm-chart-3.20.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.20.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.20.1 6 | 7 | * Do not create KEDA in case of DaemonSets. 8 | * Fix KEDA v2 definition 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.20.0...helm-chart-3.20.1 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.21.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.21.0 6 | 7 | * [#6783](https://github.com/kubernetes/ingress-nginx/pull/6783) Add custom annotations to ScaledObject 8 | * [#6761](https://github.com/kubernetes/ingress-nginx/pull/6761) Adding quotes in the serviceAccount name in Helm values 9 | * [#6767](https://github.com/kubernetes/ingress-nginx/pull/6767) Remove ClusterRole when scope option is enabled 10 | * [#6785](https://github.com/kubernetes/ingress-nginx/pull/6785) Update kube-webhook-certgen image to v1.5.1 11 | 12 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.20.1...helm-chart-3.21.0 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.22.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.22.0 6 | 7 | * [#6802](https://github.com/kubernetes/ingress-nginx/pull/6802) Add value for configuring a custom Diffie-Hellman parameters file 8 | * [#6815](https://github.com/kubernetes/ingress-nginx/pull/6815) Allow use of numeric namespaces in helm chart 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.21.0...helm-chart-3.22.0 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.23.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.23.0 6 | 7 | * Update ingress-nginx v0.44.0 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.22.0...helm-chart-3.23.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.24.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.24.0 6 | 7 | * [#6908](https://github.com/kubernetes/ingress-nginx/pull/6908) Add volumes to default-backend deployment 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.23.0...helm-chart-3.24.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.25.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.25.0 6 | 7 | * [#6957](https://github.com/kubernetes/ingress-nginx/pull/6957) Add ability to specify automountServiceAccountToken 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.24.0...helm-chart-3.25.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.26.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.26.0 6 | 7 | * [#6979](https://github.com/kubernetes/ingress-nginx/pull/6979) Changed servicePort value for metrics 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.25.0...helm-chart-3.26.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.27.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.27.0 6 | 7 | * Update ingress-nginx v0.45.0 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.26.0...helm-chart-3.27.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.28.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.28.0 6 | 7 | * [#6900](https://github.com/kubernetes/ingress-nginx/pull/6900) Support existing PSPs 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.27.0...helm-chart-3.28.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.29.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.29.0 6 | 7 | * [#6945](https://github.com/kubernetes/ingress-nginx/pull/7020) Add option to specify job label for ServiceMonitor 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.28.0...helm-chart-3.29.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.3.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.3.0 6 | 7 | * [#6203](https://github.com/kubernetes/ingress-nginx/pull/6203) Refactor parsing of key values 8 | * [#6162](https://github.com/kubernetes/ingress-nginx/pull/6162) Add helm chart options to expose metrics service as NodePort 9 | * [#6180](https://github.com/kubernetes/ingress-nginx/pull/6180) Fix helm chart admissionReviewVersions regression 10 | * [#6169](https://github.com/kubernetes/ingress-nginx/pull/6169) Fix Typo in example prometheus rules 11 | 12 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.0.0...ingress-nginx-3.3.0 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.3.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.3.1 6 | 7 | * [#6259](https://github.com/kubernetes/ingress-nginx/pull/6259) Release helm chart 8 | * [#6258](https://github.com/kubernetes/ingress-nginx/pull/6258) Fix chart markdown link 9 | * [#6253](https://github.com/kubernetes/ingress-nginx/pull/6253) Release v0.40.0 10 | * [#6233](https://github.com/kubernetes/ingress-nginx/pull/6233) Add admission controller e2e test 11 | 12 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.3.0...ingress-nginx-3.3.1 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.30.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.30.0 6 | 7 | * [#7092](https://github.com/kubernetes/ingress-nginx/pull/7092) Removes the possibility of using localhost in ExternalNames as endpoints 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.29.0...helm-chart-3.30.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.31.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.31.0 6 | 7 | * [7137] https://github.com/kubernetes/ingress-nginx/pull/7137 Add support for custom probes 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.30.0...helm-chart-3.31.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.32.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.32.0 6 | 7 | * [7117] https://github.com/kubernetes/ingress-nginx/pull/7117 Add annotations for HPA 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.31.0...helm-chart-3.32.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.33.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.33.0 6 | 7 | * [7164] https://github.com/kubernetes/ingress-nginx/pull/7164 Update nginx to v1.20.1 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.32.0...helm-chart-3.33.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.34.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.34.0 6 | 7 | * [7256] https://github.com/kubernetes/ingress-nginx/pull/7256 Add namespace field in the namespace scoped resource templates 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.33.0...helm-chart-3.34.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.4.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.4.0 6 | 7 | * [#6268](https://github.com/kubernetes/ingress-nginx/pull/6268) Update to 0.40.2 in helm chart #6288 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.3.1...ingress-nginx-3.4.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.5.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.5.0 6 | 7 | * [#6260](https://github.com/kubernetes/ingress-nginx/pull/6260) Allow Helm Chart to customize admission webhook's annotations, timeoutSeconds, namespaceSelector, objectSelector and cert files locations 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.4.0...ingress-nginx-3.5.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.5.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.5.1 6 | 7 | * [#6299](https://github.com/kubernetes/ingress-nginx/pull/6299) Fix helm chart release 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.5.0...ingress-nginx-3.5.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.6.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.6.0 6 | 7 | * [#6305](https://github.com/kubernetes/ingress-nginx/pull/6305) Add default linux nodeSelector 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.5.1...ingress-nginx-3.6.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.7.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.7.0 6 | 7 | * [#6316](https://github.com/kubernetes/ingress-nginx/pull/6316) Numerals in podAnnotations in quotes [#6315](https://github.com/kubernetes/ingress-nginx/issues/6315) 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.6.0...ingress-nginx-3.7.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.7.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.7.1 6 | 7 | * [#6326](https://github.com/kubernetes/ingress-nginx/pull/6326) Fix liveness and readiness probe path in daemonset chart 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.7.0...ingress-nginx-3.7.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.8.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.8.0 6 | 7 | * [#6395](https://github.com/kubernetes/ingress-nginx/pull/6395) Update jettech/kube-webhook-certgen image 8 | * [#6377](https://github.com/kubernetes/ingress-nginx/pull/6377) Added loadBalancerSourceRanges for internal lbs 9 | * [#6356](https://github.com/kubernetes/ingress-nginx/pull/6356) Add securitycontext settings on defaultbackend 10 | * [#6401](https://github.com/kubernetes/ingress-nginx/pull/6401) Fix controller service annotations 11 | * [#6403](https://github.com/kubernetes/ingress-nginx/pull/6403) Initial helm chart changelog 12 | 13 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.7.1...ingress-nginx-3.8.0 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-3.9.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 3.9.0 6 | 7 | * [#6423](https://github.com/kubernetes/ingress-nginx/pull/6423) Add Default backend HPA autoscaling 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/ingress-nginx-3.8.0...ingress-nginx-3.9.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.1 6 | 7 | * [7535] https://github.com/kubernetes/ingress-nginx/pull/7535 Release v1.0.0 ingress-nginx 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-3.34.0...helm-chart-4.0.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.10.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.10 6 | 7 | * [7964] https://github.com/kubernetes/ingress-nginx/pull/7964 Update controller version to v1.1.0 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.9...helm-chart-4.0.10 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.11.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.11 6 | 7 | * [7873] https://github.com/kubernetes/ingress-nginx/pull/7873 Makes the [appProtocol](https://kubernetes.io/docs/concepts/services-networking/_print/#application-protocol) field optional. 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.10...helm-chart-4.0.11 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.12.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.12 6 | 7 | * [7978] https://github.com/kubernetes/ingress-nginx/pull/7979 Support custom annotations in admissions Jobs 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.11...helm-chart-4.0.12 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.13.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.13 6 | 7 | * [8008] https://github.com/kubernetes/ingress-nginx/pull/8008 Add relabelings in controller-servicemonitor.yaml 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.12...helm-chart-4.0.13 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.14.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.14 6 | 7 | * [8061] https://github.com/kubernetes/ingress-nginx/pull/8061 Using helm-docs to populate values table in README.md 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.13...helm-chart-4.0.14 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.2 6 | 7 | * [7681] https://github.com/kubernetes/ingress-nginx/pull/7681 Release v1.0.1 of ingress-nginx 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.1...helm-chart-4.0.2 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.3.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.3 6 | 7 | * [7707] https://github.com/kubernetes/ingress-nginx/pull/7707 Release v1.0.2 of ingress-nginx 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.2...helm-chart-4.0.3 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.5.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.5 6 | 7 | * [7740] https://github.com/kubernetes/ingress-nginx/pull/7740 Release v1.0.3 of ingress-nginx 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.3...helm-chart-4.0.5 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.6.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.6 6 | 7 | * [7804] https://github.com/kubernetes/ingress-nginx/pull/7804 Release v1.0.4 of ingress-nginx 8 | * [7651] https://github.com/kubernetes/ingress-nginx/pull/7651 Support ipFamilyPolicy and ipFamilies fields in Helm Chart 9 | * [7798] https://github.com/kubernetes/ingress-nginx/pull/7798 Exoscale: use HTTP Healthcheck mode 10 | * [7793] https://github.com/kubernetes/ingress-nginx/pull/7793 Update kube-webhook-certgen to v1.1.1 11 | 12 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.5...helm-chart-4.0.6 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.7.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.7 6 | 7 | * [7923] https://github.com/kubernetes/ingress-nginx/pull/7923 Release v1.0.5 of ingress-nginx 8 | * [7806] https://github.com/kubernetes/ingress-nginx/pull/7806 Choice option for internal/external loadbalancer type service 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.6...helm-chart-4.0.7 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.0.9.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.0.9 6 | 7 | * [6992] https://github.com/kubernetes/ingress-nginx/pull/6992 Add ability to specify labels for all resources 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.0.7...helm-chart-4.0.9 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.1.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.1.2 6 | 7 | * [8587](https://github.com/kubernetes/ingress-nginx/pull/8587) Add CAP_SYS_CHROOT to DS/PSP when needed 8 | * [8458](https://github.com/kubernetes/ingress-nginx/pull/8458) Add portNamePrefix Helm chart parameter 9 | * [8522](https://github.com/kubernetes/ingress-nginx/pull/8522) Add documentation for controller.service.loadBalancerIP in Helm chart 10 | 11 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.1.0...helm-chart-4.1.2 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.10.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.10.0 6 | 7 | * - "Update Ingress-Nginx version controller-v1.10.0" 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.9.1...helm-chart-4.10.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.10.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.10.1 6 | 7 | * - "update post submit helm ci and clean up (#11221)" 8 | * - "refactor helm ci tests part I (#11188)" 9 | * - "Update Ingress-Nginx version controller-v1.10.1" 10 | 11 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.10.0...helm-chart-4.10.1 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.10.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.10.2 6 | 7 | * Chores: Align security contacts & chart maintainers to actual owners. (#11480) 8 | * Fix helm install on cloud provider admonition block (#11412) 9 | * edited helm-install tips (#11411) 10 | * added info for aws helm install (#11410) 11 | * add workflow to helm release and update ct for branch (#11317) 12 | * Merge pull request #11277 from strongjz/chart-1.10.1 (#11314) 13 | * release helm chart from release branch (#11278) 14 | * update post submit helm ci and clean up (#11221) 15 | * refactor helm ci tests part I (#11188) 16 | * Update Ingress-Nginx version controller-v1.10.2 17 | 18 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.10.1...helm-chart-4.10.2 19 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.10.3.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.10.3 6 | 7 | * Update Ingress-Nginx version controller-v1.10.3 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.10.2...helm-chart-4.10.3 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.10.4.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.10.4 6 | 7 | * Update Ingress-Nginx version controller-v1.10.4 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.10.3...helm-chart-4.10.4 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.11.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.11.0 6 | 7 | * Chores: Align security contacts & chart maintainers to actual owners. (#11465) 8 | * Merge pull request #11277 from strongjz/chart-1.10.1 (#11415) 9 | * Fix helm install on cloud provider admonition block (#11394) 10 | * edited helm-install tips (#11393) 11 | * added info for aws helm install (#11390) 12 | * add workflow to helm release and update ct for branch (#11378) 13 | * release helm chart from release branch (#11276) 14 | * update post submit helm ci and clean up (#11220) 15 | * refactor helm ci tests part I (#11178) 16 | * Update Ingress-Nginx version controller-v1.11.0 17 | 18 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.10.2...helm-chart-4.11.0 19 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.11.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.11.1 6 | 7 | * Update Ingress-Nginx version controller-v1.11.1 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.11.0...helm-chart-4.11.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.11.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.11.2 6 | 7 | * Update Ingress-Nginx version controller-v1.11.2 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.11.1...helm-chart-4.11.2 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.12.0-beta.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.12.0-beta.0 6 | 7 | * Update Ingress-Nginx version controller-v1.12.0-beta.0 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.11.0...helm-chart-4.12.0-beta.0 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.12.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.12.0 6 | 7 | * CI: Fix chart testing. (#12258) 8 | * Update Ingress-Nginx version controller-v1.12.0 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.11.0...helm-chart-4.12.0 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.2.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.2.1 6 | 7 | * The sha of kube-webhook-certgen image & the opentelemetry image, in values file, was changed to new images built on alpine-v3.16.1 8 | * [8896](https://github.com/kubernetes/ingress-nginx/pull/8896) updated to new images built today 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.2.0...helm-chart-4.2.1 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.3.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.3.0 6 | 7 | * Support for Kubernetes v.1.25.0 was added and support for endpoint slices 8 | * Support for Kubernetes v1.20.0 and v1.21.0 was removed 9 | * [8890](https://github.com/kubernetes/ingress-nginx/pull/8890) migrate to endpointslices 10 | * [9059](https://github.com/kubernetes/ingress-nginx/pull/9059) kubewebhookcertgen sha change after go1191 11 | * [9046](https://github.com/kubernetes/ingress-nginx/pull/9046) Parameterize metrics port name 12 | * [9104](https://github.com/kubernetes/ingress-nginx/pull/9104) Fix yaml formatting error with multiple annotations 13 | 14 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.2.1...helm-chart-4.3.0 15 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.4.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.4.0 6 | 7 | * Adding support for disabling liveness and readiness probes to the Helm chart by @njegosrailic in https://github.com/kubernetes/ingress-nginx/pull/9238 8 | * add:(admission-webhooks) ability to set securityContext by @ybelMekk in https://github.com/kubernetes/ingress-nginx/pull/9186 9 | * #7652 - Updated Helm chart to use the fullname for the electionID if not specified. by @FutureMatt in https://github.com/kubernetes/ingress-nginx/pull/9133 10 | * Rename controller-wehbooks-networkpolicy.yaml. by @Gacko in https://github.com/kubernetes/ingress-nginx/pull/9123 11 | 12 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.3.0...helm-chart-4.4.0 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.5.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.5.2 6 | 7 | * add lint on chart before release (#9570) 8 | * ci: remove setup-helm step (#9404) 9 | * feat(helm): Optionally use cert-manager instead admission patch (#9279) 10 | * run helm release on main only and when the chart/value changes only (#9290) 11 | * Update Ingress-Nginx version controller-v1.6.4 12 | 13 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.4.3...helm-chart-4.5.2 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.6.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.5.3 6 | 7 | * docs(helm): fix value key in readme for enabling certManager (#9640) 8 | * Upgrade alpine 3.17.2 9 | * Upgrade golang 1.20 10 | * Drop testing/support for Kubernetes 1.23 11 | * docs(helm): fix value key in readme for enabling certManager (#9640) 12 | * Update Ingress-Nginx version controller-v1.7.0 13 | * feat: OpenTelemetry module integration (#9062) 14 | * canary-weight-total annotation ignored in rule backends (#9729) 15 | * fix controller psp's volume config (#9740) 16 | * Fix several Helm YAML issues with extraModules and extraInitContainers (#9709) 17 | * Chart: Drop `controller.headers`, rework DH param secret. (#9659) 18 | * Deployment/DaemonSet: Label pods using `ingress-nginx.labels`. (#9732) 19 | * HPA: autoscaling/v2beta1 deprecated, bump apiVersion to v2 for defaultBackend (#9731) 20 | * Fix incorrect annotation name in upstream hashing configuration (#9617) 21 | 22 | * Update Ingress-Nginx version controller-v1.7.0 23 | 24 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.5.2...helm-chart-4.6.0 25 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.6.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.6.1 6 | 7 | * [helm] Support custom port configuration for internal service (#9846) 8 | * Adding resource type to default HPA configuration to resolve issues with Terraform helm chart usage (#9803) 9 | * Update Ingress-Nginx version controller-v1.7.1 10 | 11 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.6.0...helm-chart-4.6.1 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.7.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.7.0 6 | 7 | * helm: Fix opentelemetry module installation for daemonset (#9792) 8 | * Update charts/* to keep project name display aligned (#9931) 9 | * HPA: Use capabilities & align manifests. (#9521) 10 | * PodDisruptionBudget spec logic update (#9904) 11 | * add option for annotations in PodDisruptionBudget (#9843) 12 | * Update Ingress-Nginx version controller-v1.8.0 13 | 14 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.6.1...helm-chart-4.7.0 15 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.7.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.7.1 6 | 7 | * Added a doc line to the missing helm value service.internal.loadBalancerIP (#9406) 8 | * feat(helm): Add loadBalancerClass (#9562) 9 | * added helmshowvalues example (#10019) 10 | * Update Ingress-Nginx version controller-v1.8.1 11 | 12 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.7.0...helm-chart-4.7.1 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.7.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.7.2 6 | 7 | * Update Ingress-Nginx version controller-v1.8.2 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.7.1...helm-chart-4.7.2 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.8.0-beta.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.8.0-beta.0 6 | 7 | * ci(helm): fix Helm Chart release action 422 error (#10237) 8 | * helm: Use .Release.Namespace as default for ServiceMonitor namespace (#10249) 9 | * [helm] configure allow to configure hostAliases (#10180) 10 | * [helm] pass service annotations through helm tpl engine (#10084) 11 | * Update Ingress-Nginx version controller-v1.9.0-beta.0 12 | 13 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.7.2...helm-chart-4.8.0-beta.0 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.8.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.8.0 6 | 7 | * ci(helm): fix Helm Chart release action 422 error (#10237) 8 | * helm: Use .Release.Namespace as default for ServiceMonitor namespace (#10249) 9 | * [helm] configure allow to configure hostAliases (#10180) 10 | * [helm] pass service annotations through helm tpl engine (#10084) 11 | * Update Ingress-Nginx version controller-v1.9.0 12 | 13 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.7.2...helm-chart-4.8.0 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.8.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.8.1 6 | 7 | * Update Ingress-Nginx version controller-v1.9.1 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.8.0...helm-chart-4.8.1 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.8.2.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.8.2 6 | 7 | * update nginx base, httpbun, e2e, helm webhook cert gen (#10506) 8 | * Update Ingress-Nginx version controller-v1.9.3 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.8.1...helm-chart-4.8.2 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.8.3.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.8.3 6 | 7 | * Update Ingress-Nginx version controller-v1.9.4 8 | 9 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.8.2...helm-chart-4.8.3 10 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.9.0.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.9.0 6 | 7 | * - "Add controller.metrics.serviceMonitor.annotations in Helm chart" 8 | * - "fix(labels): use complete labels variable on default-backend deployment" 9 | * - "chart: allow setting allocateLoadBalancerNodePorts (#10693)" 10 | * - "[release-1.9] feat(helm): add documentation about metric args (#10695)" 11 | * - "Update Ingress-Nginx version controller-v1.9.5" 12 | 13 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.8.3...helm-chart-4.9.0 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart-4.9.1.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### 4.9.1 6 | 7 | * - "update web hook cert gen to latest release v20231226-1a7112e06" 8 | * - "Update Ingress-Nginx version controller-v1.9.6" 9 | 10 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-4.9.0...helm-chart-4.9.1 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/changelog/helm-chart.md.gotmpl: -------------------------------------------------------------------------------- 1 | # Changelog 2 | 3 | This file documents all notable changes to [ingress-nginx](https://github.com/kubernetes/ingress-nginx) Helm Chart. The release numbering uses [semantic versioning](http://semver.org). 4 | 5 | ### {{ .NewHelmChartVersion }} 6 | {{ with .HelmUpdates }} 7 | {{- range . }} 8 | * {{ . }} 9 | {{- end }} 10 | {{ end }} 11 | **Full Changelog**: https://github.com/kubernetes/ingress-nginx/compare/helm-chart-{{ .PreviousHelmChartVersion }}...helm-chart-{{ .NewHelmChartVersion }} 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/admission-webhooks-cert-manager-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | admissionWebhooks: 11 | certManager: 12 | enabled: true 13 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-configmap-addheaders-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | addHeaders: 11 | X-Frame-Options: deny 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-configmap-proxyheaders-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | proxySetHeaders: 11 | X-Forwarded-Proto: https 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-configmap-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | config: 11 | use-proxy-protocol: "true" 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-daemonset-metrics-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | kind: DaemonSet 11 | 12 | metrics: 13 | enabled: true 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-daemonset-podannotations-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | kind: DaemonSet 11 | 12 | podAnnotations: 13 | prometheus.io/scrape: "true" 14 | prometheus.io/port: "10254" 15 | prometheus.io/scheme: http 16 | prometheus.io/path: /metrics 17 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-daemonset-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | kind: DaemonSet 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-deployment-metrics-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | kind: Deployment 11 | 12 | metrics: 13 | enabled: true 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-deployment-podannotations-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | kind: Deployment 11 | 12 | podAnnotations: 13 | prometheus.io/scrape: "true" 14 | prometheus.io/port: "10254" 15 | prometheus.io/scheme: http 16 | prometheus.io/path: /metrics 17 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-deployment-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | kind: Deployment 11 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-hpa-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | autoscaling: 11 | enabled: true 12 | behavior: 13 | scaleDown: 14 | stabilizationWindowSeconds: 300 15 | policies: 16 | - type: Pods 17 | value: 1 18 | periodSeconds: 180 19 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-ingressclass-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | ingressClassResource: 11 | name: custom-nginx 12 | default: true 13 | controllerValue: k8s.io/custom-nginx 14 | 15 | watchIngressWithoutClass: true 16 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-service-internal-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: ClusterIP 9 | 10 | internal: 11 | enabled: true 12 | annotations: 13 | service.beta.kubernetes.io/aws-load-balancer-internal: "true" 14 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/ci/controller-service-values.yaml: -------------------------------------------------------------------------------- 1 | controller: 2 | image: 3 | repository: ingress-controller/controller 4 | tag: 1.0.0-dev 5 | digest: null 6 | 7 | service: 8 | type: NodePort 9 | 10 | nodePorts: 11 | tcp: 12 | 9000: 30090 13 | udp: 14 | 9001: 30091 15 | 16 | portNamePrefix: port 17 | 18 | tcp: 19 | 9000: default/test:8080 20 | 21 | udp: 22 | 9001: default/test:8080 23 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/admission-webhooks/job-patch/clusterrole.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.controller.admissionWebhooks.patch.rbac.create (not .Values.controller.admissionWebhooks.certManager.enabled) -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRole 4 | metadata: 5 | name: {{ include "ingress-nginx.admissionWebhooks.fullname" . }} 6 | annotations: 7 | "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade 8 | "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded 9 | labels: 10 | {{- include "ingress-nginx.labels" . | nindent 4 }} 11 | app.kubernetes.io/component: admission-webhook 12 | {{- with .Values.controller.admissionWebhooks.patch.labels }} 13 | {{- toYaml . | nindent 4 }} 14 | {{- end }} 15 | rules: 16 | - apiGroups: 17 | - admissionregistration.k8s.io 18 | resources: 19 | - validatingwebhookconfigurations 20 | verbs: 21 | - get 22 | - update 23 | {{- end }} 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/admission-webhooks/job-patch/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.controller.admissionWebhooks.patch.rbac.create (not .Values.controller.admissionWebhooks.certManager.enabled) -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | name: {{ include "ingress-nginx.admissionWebhooks.fullname" . }} 6 | annotations: 7 | "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade 8 | "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded 9 | labels: 10 | {{- include "ingress-nginx.labels" . | nindent 4 }} 11 | app.kubernetes.io/component: admission-webhook 12 | {{- with .Values.controller.admissionWebhooks.patch.labels }} 13 | {{- toYaml . | nindent 4 }} 14 | {{- end }} 15 | roleRef: 16 | apiGroup: rbac.authorization.k8s.io 17 | kind: ClusterRole 18 | name: {{ include "ingress-nginx.admissionWebhooks.fullname" . }} 19 | subjects: 20 | - kind: ServiceAccount 21 | name: {{ include "ingress-nginx.admissionWebhooks.patch.serviceAccountName" . }} 22 | namespace: {{ include "ingress-nginx.namespace" . }} 23 | {{- end }} 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/admission-webhooks/job-patch/networkpolicy.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.controller.admissionWebhooks.patch.networkPolicy.enabled (not .Values.controller.admissionWebhooks.certManager.enabled) -}} 2 | apiVersion: networking.k8s.io/v1 3 | kind: NetworkPolicy 4 | metadata: 5 | name: {{ include "ingress-nginx.admissionWebhooks.fullname" . }} 6 | namespace: {{ include "ingress-nginx.namespace" . }} 7 | annotations: 8 | "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade 9 | "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded 10 | labels: 11 | {{- include "ingress-nginx.labels" . | nindent 4 }} 12 | app.kubernetes.io/component: admission-webhook 13 | {{- with .Values.controller.admissionWebhooks.patch.labels }} 14 | {{- toYaml . | nindent 4 }} 15 | {{- end }} 16 | spec: 17 | podSelector: 18 | matchLabels: 19 | {{- include "ingress-nginx.selectorLabels" . | nindent 6 }} 20 | app.kubernetes.io/component: admission-webhook 21 | policyTypes: 22 | - Ingress 23 | - Egress 24 | egress: 25 | - {} 26 | {{- end }} 27 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/admission-webhooks/job-patch/role.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.controller.admissionWebhooks.patch.rbac.create (not .Values.controller.admissionWebhooks.certManager.enabled) -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: Role 4 | metadata: 5 | name: {{ include "ingress-nginx.admissionWebhooks.fullname" . }} 6 | namespace: {{ include "ingress-nginx.namespace" . }} 7 | annotations: 8 | "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade 9 | "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded 10 | labels: 11 | {{- include "ingress-nginx.labels" . | nindent 4 }} 12 | app.kubernetes.io/component: admission-webhook 13 | {{- with .Values.controller.admissionWebhooks.patch.labels }} 14 | {{- toYaml . | nindent 4 }} 15 | {{- end }} 16 | rules: 17 | - apiGroups: 18 | - "" 19 | resources: 20 | - secrets 21 | verbs: 22 | - get 23 | - create 24 | {{- end }} 25 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/admission-webhooks/job-patch/rolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.controller.admissionWebhooks.patch.rbac.create (not .Values.controller.admissionWebhooks.certManager.enabled) -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: RoleBinding 4 | metadata: 5 | name: {{ include "ingress-nginx.admissionWebhooks.fullname" . }} 6 | namespace: {{ include "ingress-nginx.namespace" . }} 7 | annotations: 8 | "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade 9 | "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded 10 | labels: 11 | {{- include "ingress-nginx.labels" . | nindent 4 }} 12 | app.kubernetes.io/component: admission-webhook 13 | {{- with .Values.controller.admissionWebhooks.patch.labels }} 14 | {{- toYaml . | nindent 4 }} 15 | {{- end }} 16 | roleRef: 17 | apiGroup: rbac.authorization.k8s.io 18 | kind: Role 19 | name: {{ include "ingress-nginx.admissionWebhooks.fullname" . }} 20 | subjects: 21 | - kind: ServiceAccount 22 | name: {{ include "ingress-nginx.admissionWebhooks.patch.serviceAccountName" . }} 23 | namespace: {{ include "ingress-nginx.namespace" . }} 24 | {{- end }} 25 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/admission-webhooks/job-patch/serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.controller.admissionWebhooks.enabled .Values.controller.admissionWebhooks.patch.enabled .Values.controller.admissionWebhooks.patch.serviceAccount.create (not .Values.controller.admissionWebhooks.certManager.enabled) -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | name: {{ include "ingress-nginx.admissionWebhooks.patch.serviceAccountName" . }} 6 | namespace: {{ include "ingress-nginx.namespace" . }} 7 | annotations: 8 | "helm.sh/hook": pre-install,pre-upgrade,post-install,post-upgrade 9 | "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded 10 | labels: 11 | {{- include "ingress-nginx.labels" . | nindent 4 }} 12 | app.kubernetes.io/component: admission-webhook 13 | {{- with .Values.controller.admissionWebhooks.patch.labels }} 14 | {{- toYaml . | nindent 4 }} 15 | {{- end }} 16 | automountServiceAccountToken: {{ .Values.controller.admissionWebhooks.patch.serviceAccount.automountServiceAccountToken }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/clusterrolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.rbac.create (not .Values.rbac.scope) -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: ClusterRoleBinding 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | {{- with .Values.controller.labels }} 8 | {{- toYaml . | nindent 4 }} 9 | {{- end }} 10 | name: {{ include "ingress-nginx.fullname" . }} 11 | roleRef: 12 | apiGroup: rbac.authorization.k8s.io 13 | kind: ClusterRole 14 | name: {{ include "ingress-nginx.fullname" . }} 15 | subjects: 16 | - kind: ServiceAccount 17 | name: {{ template "ingress-nginx.serviceAccountName" . }} 18 | namespace: {{ include "ingress-nginx.namespace" . }} 19 | {{- end }} 20 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-configmap-addheaders.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.controller.addHeaders -}} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ include "ingress-nginx.fullname" . }}-custom-add-headers 12 | namespace: {{ include "ingress-nginx.namespace" . }} 13 | data: {{ toYaml .Values.controller.addHeaders | nindent 2 }} 14 | {{- end }} 15 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-configmap-proxyheaders.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.controller.proxySetHeaders -}} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ include "ingress-nginx.fullname" . }}-custom-proxy-headers 12 | namespace: {{ include "ingress-nginx.namespace" . }} 13 | data: {{ toYaml .Values.controller.proxySetHeaders | nindent 2 }} 14 | {{- end }} 15 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-configmap-tcp.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.tcp -}} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | {{- if .Values.controller.tcp.annotations }} 12 | annotations: {{ toYaml .Values.controller.tcp.annotations | nindent 4 }} 13 | {{- end }} 14 | name: {{ include "ingress-nginx.fullname" . }}-tcp 15 | namespace: {{ include "ingress-nginx.namespace" . }} 16 | data: {{ tpl (toYaml .Values.tcp) . | nindent 2 }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-configmap-udp.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.udp -}} 2 | apiVersion: v1 3 | kind: ConfigMap 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | {{- if .Values.controller.udp.annotations }} 12 | annotations: {{ toYaml .Values.controller.udp.annotations | nindent 4 }} 13 | {{- end }} 14 | name: {{ include "ingress-nginx.fullname" . }}-udp 15 | namespace: {{ include "ingress-nginx.namespace" . }} 16 | data: {{ tpl (toYaml .Values.udp) . | nindent 2 }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-ingressclass-aliases.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.controller.ingressClassResource.enabled -}} 2 | {{- range .Values.controller.ingressClassResource.aliases }} 3 | --- 4 | apiVersion: networking.k8s.io/v1 5 | kind: IngressClass 6 | metadata: 7 | labels: 8 | {{- include "ingress-nginx.labels" $ | nindent 4 }} 9 | app.kubernetes.io/component: controller 10 | {{- with $.Values.controller.labels }} 11 | {{- toYaml . | nindent 4 }} 12 | {{- end }} 13 | name: {{ . }} 14 | {{- if $.Values.controller.ingressClassResource.annotations }} 15 | annotations: {{ toYaml $.Values.controller.ingressClassResource.annotations | nindent 4 }} 16 | {{- end }} 17 | spec: 18 | controller: {{ $.Values.controller.ingressClassResource.controllerValue }} 19 | {{- with $.Values.controller.ingressClassResource.parameters }} 20 | parameters: {{ toYaml . | nindent 4 }} 21 | {{- end }} 22 | {{- end }} 23 | {{- end }} 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-ingressclass.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.controller.ingressClassResource.enabled -}} 2 | apiVersion: networking.k8s.io/v1 3 | kind: IngressClass 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ .Values.controller.ingressClassResource.name }} 12 | {{- if or .Values.controller.ingressClassResource.default .Values.controller.ingressClassResource.annotations }} 13 | annotations: 14 | {{- if .Values.controller.ingressClassResource.default }} 15 | ingressclass.kubernetes.io/is-default-class: "true" 16 | {{- end }} 17 | {{- if .Values.controller.ingressClassResource.annotations }} 18 | {{- toYaml .Values.controller.ingressClassResource.annotations | nindent 4 }} 19 | {{- end }} 20 | {{- end }} 21 | spec: 22 | controller: {{ .Values.controller.ingressClassResource.controllerValue }} 23 | {{- with .Values.controller.ingressClassResource.parameters }} 24 | parameters: {{ toYaml . | nindent 4 }} 25 | {{- end }} 26 | {{- end }} 27 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-prometheusrule.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.controller.metrics.enabled .Values.controller.metrics.prometheusRule.enabled -}} 2 | apiVersion: monitoring.coreos.com/v1 3 | kind: PrometheusRule 4 | metadata: 5 | name: {{ include "ingress-nginx.controller.fullname" . }} 6 | {{- if .Values.controller.metrics.prometheusRule.namespace }} 7 | namespace: {{ .Values.controller.metrics.prometheusRule.namespace }} 8 | {{- else }} 9 | namespace: {{ include "ingress-nginx.namespace" . }} 10 | {{- end }} 11 | labels: 12 | {{- include "ingress-nginx.labels" . | nindent 4 }} 13 | app.kubernetes.io/component: controller 14 | {{- if .Values.controller.metrics.prometheusRule.additionalLabels }} 15 | {{- toYaml .Values.controller.metrics.prometheusRule.additionalLabels | nindent 4 }} 16 | {{- end }} 17 | {{- if .Values.controller.metrics.prometheusRule.annotations }} 18 | annotations: {{ toYaml .Values.controller.metrics.prometheusRule.annotations | nindent 4 }} 19 | {{- end }} 20 | spec: 21 | {{- if .Values.controller.metrics.prometheusRule.rules }} 22 | groups: 23 | - name: {{ template "ingress-nginx.name" . }} 24 | rules: {{- toYaml .Values.controller.metrics.prometheusRule.rules | nindent 4 }} 25 | {{- end }} 26 | {{- end }} 27 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-rolebinding.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.rbac.create -}} 2 | apiVersion: rbac.authorization.k8s.io/v1 3 | kind: RoleBinding 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ include "ingress-nginx.fullname" . }} 12 | namespace: {{ include "ingress-nginx.namespace" . }} 13 | roleRef: 14 | apiGroup: rbac.authorization.k8s.io 15 | kind: Role 16 | name: {{ include "ingress-nginx.fullname" . }} 17 | subjects: 18 | - kind: ServiceAccount 19 | name: {{ template "ingress-nginx.serviceAccountName" . }} 20 | namespace: {{ include "ingress-nginx.namespace" . }} 21 | {{- end }} 22 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-secret.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.dhParam -}} 2 | apiVersion: v1 3 | kind: Secret 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ include "ingress-nginx.controller.fullname" . }} 12 | namespace: {{ include "ingress-nginx.namespace" . }} 13 | data: 14 | dhparam.pem: {{ .Values.dhParam }} 15 | {{- end }} 16 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/controller-serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if or .Values.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: controller 8 | {{- with .Values.controller.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ template "ingress-nginx.serviceAccountName" . }} 12 | namespace: {{ include "ingress-nginx.namespace" . }} 13 | {{- if .Values.serviceAccount.annotations }} 14 | annotations: {{ toYaml .Values.serviceAccount.annotations | nindent 4 }} 15 | {{- end }} 16 | automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }} 17 | {{- end }} 18 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/default-backend-extra-configmaps.yaml: -------------------------------------------------------------------------------- 1 | {{- if .Values.defaultBackend.enabled }} 2 | {{- range .Values.defaultBackend.extraConfigMaps }} 3 | --- 4 | apiVersion: v1 5 | kind: ConfigMap 6 | metadata: 7 | labels: 8 | {{- include "ingress-nginx.labels" $ | nindent 4 }} 9 | app.kubernetes.io/component: default-backend 10 | {{- with $.Values.defaultBackend.labels }} 11 | {{- toYaml . | nindent 4 }} 12 | {{- end }} 13 | {{- with .labels }} 14 | {{- toYaml . | nindent 4 }} 15 | {{- end }} 16 | name: {{ .name }} 17 | namespace: {{ include "ingress-nginx.namespace" $ }} 18 | data: 19 | {{- with .data }} 20 | {{- toYaml . | nindent 2 }} 21 | {{- end }} 22 | {{- end }} 23 | {{- end }} 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/default-backend-networkpolicy.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.defaultBackend.enabled .Values.defaultBackend.networkPolicy.enabled }} 2 | apiVersion: networking.k8s.io/v1 3 | kind: NetworkPolicy 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: default-backend 8 | {{- with .Values.defaultBackend.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ include "ingress-nginx.defaultBackend.fullname" . }} 12 | namespace: {{ include "ingress-nginx.namespace" . }} 13 | spec: 14 | podSelector: 15 | matchLabels: 16 | {{- include "ingress-nginx.selectorLabels" . | nindent 6 }} 17 | app.kubernetes.io/component: default-backend 18 | policyTypes: 19 | - Ingress 20 | - Egress 21 | ingress: 22 | - ports: 23 | - protocol: TCP 24 | port: {{ .Values.defaultBackend.port }} 25 | {{- end }} 26 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/templates/default-backend-serviceaccount.yaml: -------------------------------------------------------------------------------- 1 | {{- if and .Values.defaultBackend.enabled .Values.defaultBackend.serviceAccount.create -}} 2 | apiVersion: v1 3 | kind: ServiceAccount 4 | metadata: 5 | labels: 6 | {{- include "ingress-nginx.labels" . | nindent 4 }} 7 | app.kubernetes.io/component: default-backend 8 | {{- with .Values.defaultBackend.labels }} 9 | {{- toYaml . | nindent 4 }} 10 | {{- end }} 11 | name: {{ include "ingress-nginx.defaultBackend.serviceAccountName" . }} 12 | namespace: {{ include "ingress-nginx.namespace" . }} 13 | automountServiceAccountToken: {{ .Values.defaultBackend.serviceAccount.automountServiceAccountToken }} 14 | {{- end }} 15 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/admission-webhooks/job-patch/clusterrole_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Admission Webhooks > Patch Job > ClusterRole 2 | templates: 3 | - admission-webhooks/job-patch/clusterrole.yaml 4 | 5 | tests: 6 | - it: should not create a ClusterRole if `controller.admissionWebhooks.patch.rbac.create` is false 7 | set: 8 | controller.admissionWebhooks.patch.rbac.create: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/admission-webhooks/job-patch/clusterrolebinding_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Admission Webhooks > Patch Job > ClusterRoleBinding 2 | templates: 3 | - admission-webhooks/job-patch/clusterrolebinding.yaml 4 | 5 | tests: 6 | - it: should not create a ClusterRoleBinding if `controller.admissionWebhooks.patch.rbac.create` is false 7 | set: 8 | controller.admissionWebhooks.patch.rbac.create: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/admission-webhooks/job-patch/role_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Admission Webhooks > Patch Job > Role 2 | templates: 3 | - admission-webhooks/job-patch/role.yaml 4 | 5 | tests: 6 | - it: should not create a Role if `controller.admissionWebhooks.patch.rbac.create` is false 7 | set: 8 | controller.admissionWebhooks.patch.rbac.create: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/admission-webhooks/job-patch/rolebinding_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Admission Webhooks > Patch Job > RoleBinding 2 | templates: 3 | - admission-webhooks/job-patch/rolebinding.yaml 4 | 5 | tests: 6 | - it: should not create a RoleBinding if `controller.admissionWebhooks.patch.rbac.create` is false 7 | set: 8 | controller.admissionWebhooks.patch.rbac.create: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/admission-webhooks/validating-webhook_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Admission Webhooks > ValidatingWebhookConfiguration 2 | templates: 3 | - admission-webhooks/validating-webhook.yaml 4 | 5 | tests: 6 | - it: should not create a ValidatingWebhookConfiguration if `controller.admissionWebhooks.enabled` is false 7 | set: 8 | controller.admissionWebhooks.enabled: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create a ValidatingWebhookConfiguration if `controller.admissionWebhooks.enabled` is true 14 | set: 15 | controller.admissionWebhooks.enabled: true 16 | asserts: 17 | - hasDocuments: 18 | count: 1 19 | - isKind: 20 | of: ValidatingWebhookConfiguration 21 | - equal: 22 | path: metadata.name 23 | value: RELEASE-NAME-ingress-nginx-admission 24 | 25 | - it: should create a ValidatingWebhookConfiguration with a custom port if `controller.admissionWebhooks.service.servicePort` is set 26 | set: 27 | controller.admissionWebhooks.enabled: true 28 | controller.admissionWebhooks.service.servicePort: 9443 29 | asserts: 30 | - equal: 31 | path: webhooks[0].clientConfig.service.port 32 | value: 9443 33 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-configmap-addheaders_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > ConfigMap > Add Headers 2 | templates: 3 | - controller-configmap-addheaders.yaml 4 | 5 | tests: 6 | - it: should not create a ConfigMap if `controller.addHeaders` is not set 7 | set: 8 | controller.addHeaders: null 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create a ConfigMap if `controller.addHeaders` is set 14 | set: 15 | controller.addHeaders: 16 | X-Another-Custom-Header: Value 17 | asserts: 18 | - hasDocuments: 19 | count: 1 20 | - isKind: 21 | of: ConfigMap 22 | - equal: 23 | path: metadata.name 24 | value: RELEASE-NAME-ingress-nginx-custom-add-headers 25 | - equal: 26 | path: data.X-Another-Custom-Header 27 | value: Value 28 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-configmap-proxyheaders_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > ConfigMap > Proxy Headers 2 | templates: 3 | - controller-configmap-proxyheaders.yaml 4 | 5 | tests: 6 | - it: should not create a ConfigMap if `controller.proxySetHeaders` is not set 7 | set: 8 | controller.proxySetHeaders: null 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create a ConfigMap if `controller.proxySetHeaders` is set 14 | set: 15 | controller.proxySetHeaders: 16 | X-Custom-Header: Value 17 | asserts: 18 | - hasDocuments: 19 | count: 1 20 | - isKind: 21 | of: ConfigMap 22 | - equal: 23 | path: metadata.name 24 | value: RELEASE-NAME-ingress-nginx-custom-proxy-headers 25 | - equal: 26 | path: data.X-Custom-Header 27 | value: Value 28 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-configmap_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > ConfigMap 2 | templates: 3 | - controller-configmap.yaml 4 | 5 | tests: 6 | - it: should create a ConfigMap 7 | asserts: 8 | - hasDocuments: 9 | count: 1 10 | - isKind: 11 | of: ConfigMap 12 | - equal: 13 | path: metadata.name 14 | value: RELEASE-NAME-ingress-nginx-controller 15 | 16 | - it: should create a ConfigMap with templated values if `controller.config` contains templates 17 | set: 18 | controller.config: 19 | template: "test.{{ .Release.Namespace }}.svc.kubernetes.local" 20 | integer: 12345 21 | boolean: true 22 | asserts: 23 | - equal: 24 | path: data.template 25 | value: test.NAMESPACE.svc.kubernetes.local 26 | - equal: 27 | path: data.integer 28 | value: "12345" 29 | - equal: 30 | path: data.boolean 31 | value: "true" 32 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-hpa_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > HPA 2 | templates: 3 | - controller-hpa.yaml 4 | 5 | tests: 6 | - it: should create an HPA if `controller.autoscaling.enabled` is true 7 | set: 8 | controller.autoscaling.enabled: true 9 | asserts: 10 | - hasDocuments: 11 | count: 1 12 | - isKind: 13 | of: HorizontalPodAutoscaler 14 | - equal: 15 | path: metadata.name 16 | value: RELEASE-NAME-ingress-nginx-controller 17 | 18 | - it: should not create an HPA if `controller.autoscaling.enabled` is true and `controller.keda.enabled` is true 19 | set: 20 | controller.autoscaling.enabled: true 21 | controller.keda.enabled: true 22 | asserts: 23 | - hasDocuments: 24 | count: 0 25 | 26 | - it: should not create an HPA if `controller.kind` is "DaemonSet" 27 | set: 28 | controller.kind: DaemonSet 29 | asserts: 30 | - hasDocuments: 31 | count: 0 32 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-keda_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > KEDA 2 | templates: 3 | - controller-keda.yaml 4 | 5 | tests: 6 | - it: should create a ScaledObject if `controller.keda.enabled` is true 7 | set: 8 | controller.keda.enabled: true 9 | asserts: 10 | - hasDocuments: 11 | count: 1 12 | - isKind: 13 | of: ScaledObject 14 | - equal: 15 | path: metadata.name 16 | value: RELEASE-NAME-ingress-nginx-controller 17 | 18 | - it: should not create a ScaledObject if `controller.keda.enabled` is true and `controller.autoscaling.enabled` is true 19 | set: 20 | controller.keda.enabled: true 21 | controller.autoscaling.enabled: true 22 | asserts: 23 | - hasDocuments: 24 | count: 0 25 | 26 | - it: should not create a ScaledObject if `controller.kind` is "DaemonSet" 27 | set: 28 | controller.kind: DaemonSet 29 | asserts: 30 | - hasDocuments: 31 | count: 0 32 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-networkpolicy_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > NetworkPolicy 2 | templates: 3 | - controller-networkpolicy.yaml 4 | 5 | tests: 6 | - it: should not create a NetworkPolicy if `controller.networkPolicy.enabled` is false 7 | set: 8 | controller.networkPolicy.enabled: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create a NetworkPolicy if `controller.networkPolicy.enabled` is true 14 | set: 15 | controller.networkPolicy.enabled: true 16 | asserts: 17 | - hasDocuments: 18 | count: 1 19 | - isKind: 20 | of: NetworkPolicy 21 | - equal: 22 | path: metadata.name 23 | value: RELEASE-NAME-ingress-nginx-controller 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-prometheusrule_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > PrometheusRule 2 | templates: 3 | - controller-prometheusrule.yaml 4 | 5 | tests: 6 | - it: should create a PrometheusRule if `controller.metrics.prometheusRule.enabled` is true 7 | set: 8 | controller.metrics.enabled: true 9 | controller.metrics.prometheusRule.enabled: true 10 | asserts: 11 | - hasDocuments: 12 | count: 1 13 | - isKind: 14 | of: PrometheusRule 15 | - equal: 16 | path: metadata.name 17 | value: RELEASE-NAME-ingress-nginx-controller 18 | 19 | - it: should create a PrometheusRule with annotations if `controller.metrics.prometheusRule.annotations` is set 20 | set: 21 | controller.metrics.enabled: true 22 | controller.metrics.prometheusRule.enabled: true 23 | controller.metrics.prometheusRule.annotations: 24 | my-little-annotation: test-value 25 | asserts: 26 | - equal: 27 | path: metadata.annotations 28 | value: 29 | my-little-annotation: test-value 30 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-service-internal_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > Service > Internal 2 | templates: 3 | - controller-service-internal.yaml 4 | 5 | tests: 6 | - it: should not create an internal Service if `controller.service.internal.enabled` is false 7 | set: 8 | controller.service.internal.enabled: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create an internal Service if `controller.service.internal.enabled` is true and `controller.service.internal.annotations` are set 14 | set: 15 | controller.service.internal.enabled: true 16 | controller.service.internal.annotations: 17 | test.annotation: "true" 18 | asserts: 19 | - hasDocuments: 20 | count: 1 21 | - isKind: 22 | of: Service 23 | - equal: 24 | path: metadata.name 25 | value: RELEASE-NAME-ingress-nginx-controller-internal 26 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-service-webhook_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > Service > Webhook 2 | templates: 3 | - controller-service-webhook.yaml 4 | 5 | tests: 6 | - it: should not create a webhook Service if `controller.admissionWebhooks.enabled` is false 7 | set: 8 | controller.admissionWebhooks.enabled: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create a webhook Service if `controller.admissionWebhooks.enabled` is true 14 | set: 15 | controller.admissionWebhooks.enabled: true 16 | asserts: 17 | - hasDocuments: 18 | count: 1 19 | - isKind: 20 | of: Service 21 | - equal: 22 | path: metadata.name 23 | value: RELEASE-NAME-ingress-nginx-controller-admission 24 | 25 | - it: should create a webhook Service with a custom port if `controller.admissionWebhooks.service.servicePort` is set 26 | set: 27 | controller.admissionWebhooks.enabled: true 28 | controller.admissionWebhooks.service.servicePort: 9443 29 | asserts: 30 | - equal: 31 | path: spec.ports[0].port 32 | value: 9443 33 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-service_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > Service 2 | templates: 3 | - controller-service.yaml 4 | 5 | tests: 6 | - it: should not create a Service if `controller.service.external.enabled` is false 7 | set: 8 | controller.service.external.enabled: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create a Service if `controller.service.external.enabled` is true 14 | set: 15 | controller.service.external.enabled: true 16 | asserts: 17 | - hasDocuments: 18 | count: 1 19 | - isKind: 20 | of: Service 21 | - equal: 22 | path: metadata.name 23 | value: RELEASE-NAME-ingress-nginx-controller 24 | 25 | - it: should create a Service of type "NodePort" if `controller.service.external.enabled` is true and `controller.service.type` is "NodePort" 26 | set: 27 | controller.service.external.enabled: true 28 | controller.service.type: NodePort 29 | asserts: 30 | - equal: 31 | path: spec.type 32 | value: NodePort 33 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/controller-servicemonitor_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Controller > ServiceMonitor 2 | templates: 3 | - controller-servicemonitor.yaml 4 | 5 | tests: 6 | - it: should create a ServiceMonitor if `controller.metrics.serviceMonitor.enabled` is true 7 | set: 8 | controller.metrics.enabled: true 9 | controller.metrics.serviceMonitor.enabled: true 10 | asserts: 11 | - hasDocuments: 12 | count: 1 13 | - isKind: 14 | of: ServiceMonitor 15 | - equal: 16 | path: metadata.name 17 | value: RELEASE-NAME-ingress-nginx-controller 18 | 19 | - it: should create a ServiceMonitor with annotations if `controller.metrics.serviceMonitor.annotations` is set 20 | set: 21 | controller.metrics.enabled: true 22 | controller.metrics.serviceMonitor.enabled: true 23 | controller.metrics.serviceMonitor.annotations: 24 | my-little-annotation: test-value 25 | asserts: 26 | - equal: 27 | path: metadata.annotations 28 | value: 29 | my-little-annotation: test-value 30 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/ingress-nginx/tests/default-backend-service_test.yaml: -------------------------------------------------------------------------------- 1 | suite: Default Backend > Service 2 | templates: 3 | - default-backend-service.yaml 4 | 5 | tests: 6 | - it: should not create a Service if `defaultBackend.enabled` is false 7 | set: 8 | defaultBackend.enabled: false 9 | asserts: 10 | - hasDocuments: 11 | count: 0 12 | 13 | - it: should create a Service if `defaultBackend.enabled` is true 14 | set: 15 | defaultBackend.enabled: true 16 | asserts: 17 | - hasDocuments: 18 | count: 1 19 | - isKind: 20 | of: Service 21 | - equal: 22 | path: metadata.name 23 | value: RELEASE-NAME-ingress-nginx-defaultbackend 24 | 25 | - it: should create a Service with port 80 if `defaultBackend.service.port` is 80 26 | set: 27 | defaultBackend.enabled: true 28 | defaultBackend.service.port: 80 29 | asserts: 30 | - equal: 31 | path: spec.ports[0].port 32 | value: 80 33 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/minio/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/minio/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if not .Values.global.objectStore.external }} 7 | apiVersion: v1 8 | kind: ConfigMap 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | data: 14 | initialize.sh: | 15 | #!/bin/bash 16 | set -eu 17 | # Create alias 18 | ALIAS="myMinio" 19 | {{ printf "mc alias set $ALIAS %s $MINIO_ROOT_USER $MINIO_ROOT_PASSWORD" (include "minio.internal.endpoint" .) }} 20 | 21 | # Apply region 22 | {{- $REGION := .Values.region | default "cn-north-1" }} 23 | mc admin config set "$ALIAS" region name={{ $REGION }} 24 | mc admin service restart "$ALIAS" --quiet 25 | 26 | set +e 27 | {{- $ARGS := "" }} 28 | {{- if $.Values.buckets.versioning }} 29 | {{- $ARGS = printf "--region=%s --ignore-existing --with-versioning" $REGION }} 30 | {{- else }} 31 | {{- $ARGS = printf "--region=%s --ignore-existing" $REGION }} 32 | {{- end }} 33 | # Create buckets 34 | {{- range $BUCKET := .Values.buckets.defaults }} 35 | {{- printf "mc mb %s $ALIAS/%s" $ARGS $BUCKET | nindent 4 }} 36 | {{- end }} 37 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/minio/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if not .Values.global.objectStore.external }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | clusterIP: None 15 | ports: 16 | - port: {{ .Values.service.ports.api }} 17 | targetPort: 9000 18 | protocol: TCP 19 | name: api 20 | - port: {{ add .Values.service.ports.console }} 21 | targetPort: 9001 22 | protocol: TCP 23 | name: console 24 | selector: 25 | {{- include "common.labels.selector" . | nindent 4 }} 26 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/mirror/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/moderation/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/moderation/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for moderation 8 | */}} 9 | {{- define "moderation.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "moderation") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for moderation 15 | */}} 16 | {{- define "moderation.internal.port" -}} 17 | {{- $port := "8089" }} 18 | {{- if hasKey .Values.global "moderation" }} 19 | {{- if hasKey .Values.global.moderation "service" }} 20 | {{- if hasKey .Values.global.moderation.service "port" }} 21 | {{- $port = .Values.global.moderation.service.port | toString }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port -}} 26 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/moderation/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.global.moderation.enabled }} 7 | apiVersion: v1 8 | kind: ConfigMap 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | data: 14 | STARHUB_SERVER_SENSITIVE_CHECK_ENABLE: "true" 15 | STARHUB_SERVER_SENSITIVE_CHECK_ACCESS_KEY_ID: {{ .Values.global.moderation.accessKeyId }} 16 | STARHUB_SERVER_SENSITIVE_CHECK_ACCESS_KEY_SECRET: {{ .Values.global.moderation.accessKeySecret }} 17 | STARHUB_SERVER_SENSITIVE_CHECK_REGION: {{ .Values.global.moderation.region }} 18 | {{- end }} 19 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/moderation/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.global.moderation.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | type: {{ .Values.service.type }} 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 8089 18 | protocol: TCP 19 | name: moderation 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/nats/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/nats/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: Service 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | ports: 15 | - port: {{ .Values.service.ports.api }} 16 | targetPort: 4222 17 | protocol: TCP 18 | name: api 19 | - port: {{ .Values.service.ports.cluster }} 20 | targetPort: 6222 21 | protocol: TCP 22 | name: cluster 23 | - port: {{ .Values.service.ports.monitor }} 24 | targetPort: 8222 25 | protocol: TCP 26 | name: monitor 27 | selector: 28 | {{- include "common.labels.selector" . | nindent 4 }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/portal/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/portal/templates/autoscaler.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.autoscaling.enabled }} 7 | apiVersion: {{ include "common.capabilities.hpa.apiVersion" . }} 8 | kind: HorizontalPodAutoscaler 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | scaleTargetRef: 15 | apiVersion: {{ include "common.capabilities.deployment.apiVersion" . }} 16 | kind: Deployment 17 | name: {{ include "common.names.custom" . }} 18 | minReplicas: {{ .Values.autoscaling.minReplicas | default 1 }} 19 | maxReplicas: {{ .Values.autoscaling.maxReplicas | default 3 }} 20 | metrics: 21 | - type: Resource 22 | resource: 23 | name: cpu 24 | target: 25 | type: Utilization 26 | averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage | default 80 }} 27 | - type: Resource 28 | resource: 29 | name: memory 30 | target: 31 | type: Utilization 32 | averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage | default 80 }} 33 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/portal/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: Service 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | ports: 15 | - port: {{ .Values.service.port }} 16 | targetPort: 8090 17 | protocol: TCP 18 | name: portal 19 | selector: 20 | {{- include "common.labels.selector" . | nindent 4 }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/postgresql/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/postgresql/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for postgresql 8 | */}} 9 | {{- define "postgresql.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "postgresql") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for postgresql 15 | */}} 16 | {{- define "postgresql.internal.port" -}} 17 | {{- $port := "5432" }} 18 | {{- if hasKey .Values.global "postgresql" }} 19 | {{- if hasKey .Values.global.postgresql "service" }} 20 | {{- if hasKey .Values.global.postgresql.service "port" }} 21 | {{- $port = .Values.global.postgresql.service.port }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port | toString -}} 26 | {{- end }} 27 | 28 | {{/* 29 | Random Password for which password not set 30 | */}} 31 | {{- define "postgresql.initPass" -}} 32 | {{- printf "%s@%s" (now | date "15/04") . | b64enc | sha256sum | trunc 16 -}} 33 | {{- end }} 34 | 35 | {{/* 36 | Define a custom urlencode function. 37 | */}} 38 | {{- define "postgresql.encode" -}} 39 | {{- $value := . -}} 40 | {{- $value | replace "@" "%40" | replace ":" "%3A" -}} 41 | {{- end -}} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/postgresql/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if not .Values.global.postgresql.external }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | clusterIP: None 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 5432 18 | protocol: TCP 19 | name: postgresql 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/proxy/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/proxy/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: Service 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | clusterIP: {{ include "proxy.nginx.ip" . }} 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 8083 18 | protocol: TCP 19 | name: proxy 20 | - port: 80 21 | targetPort: 80 22 | protocol: TCP 23 | name: proxy-nginx 24 | selector: 25 | {{- include "common.labels.selector" . | nindent 4 }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/redis/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/redis/templates/secret.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if not .Values.global.redis.external }} 7 | apiVersion: v1 8 | kind: Secret 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | annotations: 14 | helm.sh/resource-policy: keep 15 | resource.dependencies/deployments: | 16 | {{ include "common.names.custom" (list . "mirror") }} 17 | {{ include "common.names.custom" (list . "proxy") }} 18 | {{ include "common.names.custom" (list . "server") }} 19 | {{ include "common.names.custom" (list . "dataviewer") }} 20 | resource.dependencies/statefulsets: | 21 | {{ include "common.names.custom" . }} 22 | {{ include "common.names.custom" (list . "builder") }} 23 | type: Opaque 24 | data: 25 | {{- $password := include "csghub.redis.password" . | b64enc }} 26 | {{- $secretData := (lookup "v1" "Secret" .Release.Namespace (include "common.names.custom" .)).data }} 27 | {{- if $secretData }} 28 | {{- $secretPass := index $secretData "REDIS_PASSWD" }} 29 | {{- if $secretPass }} 30 | {{- $password = $secretPass }} 31 | {{- end }} 32 | {{- end }} 33 | REDIS_PASSWD: {{ $password | quote }} 34 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/redis/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if not .Values.global.redis.external }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | clusterIP: None 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 6379 18 | protocol: TCP 19 | name: redis 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/registry/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/registry/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the external domain for registry 8 | */}} 9 | {{- define "registry.external.domain" -}} 10 | {{- include "global.domain" (list . "registry") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the external endpoint for registry 15 | */}} 16 | {{- define "registry.external.endpoint" -}} 17 | {{- $domain := include "registry.external.domain" . }} 18 | {{- if eq .Values.global.ingress.service.type "NodePort" }} 19 | {{- if eq (include "global.ingress.tls.enabled" .) "true" }} 20 | {{- printf "%s:%s" $domain "30443" -}} 21 | {{- else }} 22 | {{- printf "%s:%s" $domain "30080" -}} 23 | {{- end }} 24 | {{- else }} 25 | {{- printf "%s" $domain -}} 26 | {{- end }} 27 | {{- end }} 28 | 29 | {{/* 30 | Random Password for which password not set 31 | */}} 32 | {{- define "registry.initPass" -}} 33 | {{- printf "%s@%s" (now | date "15/04") . | b64enc | sha256sum | trunc 16 -}} 34 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/registry/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and (not .Values.global.registry.external) .Values.global.deploy.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | type: {{ .Values.service.type }} 15 | ports: 16 | - port: 5000 17 | targetPort: 5000 18 | protocol: TCP 19 | name: registry 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/runner/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/runner/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for runner 8 | */}} 9 | {{- define "runner.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "runner") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for runner 15 | */}} 16 | {{- define "runner.internal.port" -}} 17 | {{- $port := "8082" }} 18 | {{- if hasKey .Values.global "runner" }} 19 | {{- if hasKey .Values.global.runner "service" }} 20 | {{- if hasKey .Values.global.runner.service "port" }} 21 | {{- $port = .Values.global.runner.service.port }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port | toString -}} 26 | {{- end }} 27 | 28 | {{/* 29 | Define the internal endpoint for runner 30 | */}} 31 | {{- define "runner.internal.endpoint" -}} 32 | {{- printf "http://%s:%s" (include "runner.internal.domain" .) (include "runner.internal.port" .) -}} 33 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/runner/templates/namespace.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.global.deploy.enabled }} 7 | apiVersion: v1 8 | kind: Namespace 9 | metadata: 10 | name: {{ .Values.global.deploy.namespace }} 11 | labels: 12 | kubernetes.io/metadata.name: {{ .Values.global.deploy.namespace }} 13 | helm.sh/resource-policy: keep 14 | {{ include "common.labels" . | nindent 4 }} 15 | {{- if not .Values.global.deploy.mergingNamespace }} 16 | apiVersion: v1 17 | kind: Namespace 18 | metadata: 19 | name: {{ .Values.global.deploy.imageBuilder.namespace }} 20 | labels: 21 | kubernetes.io/metadata.name: {{ .Values.global.deploy.imageBuilder.namespace }} 22 | helm.sh/resource-policy: keep 23 | {{ include "common.labels" . | nindent 4 }} 24 | {{- end }} 25 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/runner/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.global.deploy.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | type: {{ .Values.service.type }} 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 8082 18 | protocol: TCP 19 | name: runner 20 | selector: 21 | {{- include "common.labels.selector" . | nindent 4 }} 22 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/server/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/server/templates/autoscaler.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.autoscaling.enabled }} 7 | apiVersion: {{ include "common.capabilities.hpa.apiVersion" . }} 8 | kind: HorizontalPodAutoscaler 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | scaleTargetRef: 15 | apiVersion: {{ include "common.capabilities.deployment.apiVersion" . }} 16 | kind: Deployment 17 | name: {{ include "common.names.custom" . }} 18 | minReplicas: {{ .Values.autoscaling.minReplicas | default 1 }} 19 | maxReplicas: {{ .Values.autoscaling.maxReplicas | default 3 }} 20 | metrics: 21 | - type: Resource 22 | resource: 23 | name: cpu 24 | target: 25 | type: Utilization 26 | averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage | default 80 }} 27 | - type: Resource 28 | resource: 29 | name: memory 30 | target: 31 | type: Utilization 32 | averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage | default 80 }} 33 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/server/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: Service 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | ports: 15 | - port: {{ .Values.service.port }} 16 | targetPort: 8080 17 | protocol: TCP 18 | name: server 19 | selector: 20 | {{- include "common.labels.selector" . | nindent 4 }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/temporal/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/temporal/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.enabled }} 7 | apiVersion: v1 8 | kind: Service 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | spec: 14 | type: {{ .Values.service.type }} 15 | ports: 16 | - port: {{ .Values.service.port }} 17 | targetPort: 7233 18 | protocol: TCP 19 | name: temporal 20 | - port: 8080 21 | targetPort: 8080 22 | protocol: TCP 23 | name: temporal-ui 24 | selector: 25 | {{- include "common.labels.selector" . | nindent 4 }} 26 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/user/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/user/templates/_helpers.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define the internal domain for user 8 | */}} 9 | {{- define "user.internal.domain" -}} 10 | {{- include "common.names.custom" (list . "user") }} 11 | {{- end }} 12 | 13 | {{/* 14 | Define the internal port for user 15 | */}} 16 | {{- define "user.internal.port" -}} 17 | {{- $port := "8080" }} 18 | {{- if hasKey .Values.global "user" }} 19 | {{- if hasKey .Values.global.user "service" }} 20 | {{- if hasKey .Values.global.user.service "port" }} 21 | {{- $port = .Values.global.user.service.port }} 22 | {{- end }} 23 | {{- end }} 24 | {{- end }} 25 | {{- $port | toString -}} 26 | {{- end }} 27 | 28 | {{/* 29 | Define the internal endpoint for user 30 | */}} 31 | {{- define "user.internal.endpoint" -}} 32 | {{- printf "http://%s:%s" (include "user.internal.domain" .) (include "user.internal.port" .) -}} 33 | {{- end }} 34 | 35 | {{/* 36 | Define the password of user root 37 | */}} 38 | {{- define "user.password" -}} 39 | {{- "Root@1234" -}} 40 | {{- end }} 41 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/user/templates/service.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | apiVersion: v1 7 | kind: Service 8 | metadata: 9 | name: {{ include "common.names.custom" . }} 10 | namespace: {{ .Release.Namespace }} 11 | labels: {{ include "common.labels" . | nindent 4 }} 12 | spec: 13 | type: {{ .Values.service.type }} 14 | ports: 15 | - port: {{ .Values.service.port }} 16 | targetPort: 8080 17 | protocol: TCP 18 | name: user 19 | selector: 20 | {{- include "common.labels.selector" . | nindent 4 }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/watcher/.helmignore: -------------------------------------------------------------------------------- 1 | # Patterns to ignore when building packages. 2 | # This supports shell glob matching, relative path matching, and 3 | # negation (prefixed with !). Only one pattern per line. 4 | .DS_Store 5 | # Common VCS dirs 6 | .git/ 7 | .gitignore 8 | .bzr/ 9 | .bzrignore 10 | .hg/ 11 | .hgignore 12 | .svn/ 13 | # Common backup files 14 | *.swp 15 | *.bak 16 | *.tmp 17 | *.orig 18 | *~ 19 | # Various IDEs 20 | .project 21 | .idea/ 22 | *.tmproj 23 | .vscode/ 24 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/watcher/Chart.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v2 2 | name: watcher 3 | description: A job to watcher configmap and secret to refresh deployments and statefulsets 4 | 5 | # A chart can be either an 'application' or a 'library' chart. 6 | # 7 | # Application charts are a collection of templates that can be packaged into versioned archives 8 | # to be deployed. 9 | # 10 | # Library charts provide useful utilities or functions for the chart developer. They're included as 11 | # a dependency of application charts to inject those utilities and functions into the rendering 12 | # pipeline. Library charts do not define any templates and therefore cannot be deployed. 13 | type: application 14 | 15 | # This is the chart version. This version number should be incremented each time you make changes 16 | # to the chart and its templates, including the app version. 17 | # Versions are expected to follow Semantic Versioning (https://semver.org/) 18 | version: 1.1.1 19 | 20 | # This is the version number of the application being deployed. This version number should be 21 | # incremented each time you make changes to the application. Versions are not expected to 22 | # follow Semantic Versioning. They should reflect the version the application is using. 23 | # It is recommended to use it with quotes. 24 | appVersion: "1.1.1" 25 | -------------------------------------------------------------------------------- /helm/charts/csghub/charts/watcher/templates/clusterRole.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and .Values.enabled .Values.serviceAccount.create }} 7 | apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }} 8 | kind: ClusterRole 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | rules: 14 | - apiGroups: [""] 15 | resources: ["secrets", "configmaps"] 16 | verbs: ["get", "watch", "list"] 17 | - apiGroups: ["apps"] 18 | resources: ["deployments", "statefulsets"] 19 | verbs: ["get", "watch", "list", "delete", "create", "update", "patch"] 20 | - apiGroups: [""] 21 | resources: ["pods"] 22 | verbs: ["get", "watch", "list", "delete"] 23 | - apiGroups: [ "apps" ] 24 | resources: [ "controllerrevisions" ] 25 | verbs: [ "get", "list", "watch" ] 26 | - apiGroups: [ "apps" ] 27 | resources: [ "replicasets" ] 28 | verbs: [ "get", "list", "watch" ] 29 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/watcher/templates/clusterRoleBinding.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and .Values.enabled .Values.serviceAccount.create }} 7 | apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }} 8 | kind: ClusterRoleBinding 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | subjects: 14 | - kind: ServiceAccount 15 | name: {{ include "common.names.custom" . }} 16 | namespace: {{ .Release.Namespace }} 17 | roleRef: 18 | kind: ClusterRole 19 | name: {{ include "common.names.custom" . }} 20 | apiGroup: rbac.authorization.k8s.io 21 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/watcher/templates/configmap.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.enabled }} 7 | apiVersion: v1 8 | kind: ConfigMap 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | data: 14 | wait-for-ready.sh: | 15 | #!/usr/bin/env bash 16 | while true; do 17 | if [[ $(kubectl get pods -n {{ .Release.Namespace }} -o jsonpath='{.items[?(@.status.phase!="Running")].metadata.name}' | grep -v "$HOSTNAME") ]]; then 18 | echo "Not all pods are running yet. Waiting..." 19 | sleep 5 20 | else 21 | break 22 | fi 23 | done 24 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/charts/watcher/templates/serviceAccount.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if and .Values.enabled .Values.serviceAccount.create }} 7 | apiVersion: v1 8 | kind: ServiceAccount 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: {{ include "common.labels" . | nindent 4 }} 13 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/templates/_ingress.tpl: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{/* 7 | Define if Ingress TLS enabled 8 | */}} 9 | {{- define "global.ingress.tls.enabled" -}} 10 | {{- $enabled := false }} 11 | {{- if hasKey .Values.global.ingress "tls" }} 12 | {{- if hasKey .Values.global.ingress.tls "enabled" }} 13 | {{- $enabled = .Values.global.ingress.tls.enabled }} 14 | {{- end }} 15 | {{- end }} 16 | {{- $localEnabled := false }} 17 | {{- if hasKey .Values "ingress" }} 18 | {{- if hasKey .Values.ingress "tls" }} 19 | {{- if hasKey .Values.ingress.tls "enabled" }} 20 | {{- $localEnabled = .Values.ingress.tls.enabled }} 21 | {{- end }} 22 | {{- end }} 23 | {{- end }} 24 | {{- or $enabled $localEnabled }} 25 | {{- end }} 26 | 27 | {{/* 28 | Define if Ingress TLS secret 29 | */}} 30 | {{- define "global.ingress.tls.secret" -}} 31 | {{- $secret := "" }} 32 | {{- if hasKey .Values.global.ingress "tls" }} 33 | {{- if hasKey .Values.global.ingress.tls "secretName" }} 34 | {{- if .Values.global.ingress.tls.secretName }} 35 | {{- $secret = .Values.global.ingress.tls.secretName }} 36 | {{- end }} 37 | {{- end }} 38 | {{- end }} 39 | {{- $secret }} 40 | {{- end }} -------------------------------------------------------------------------------- /helm/charts/csghub/templates/podDisruptionBudget.yaml: -------------------------------------------------------------------------------- 1 | {{- /* 2 | Copyright OpenCSG, Inc. All Rights Reserved. 3 | SPDX-License-Identifier: APACHE-2.0 4 | */}} 5 | 6 | {{- if .Values.global.pdb.create }} 7 | apiVersion: {{ include "common.capabilities.policy.apiVersion" . }} 8 | kind: PodDisruptionBudget 9 | metadata: 10 | name: {{ include "common.names.custom" . }} 11 | namespace: {{ .Release.Namespace }} 12 | labels: 13 | {{- include "common.labels" . | nindent 4 }} 14 | spec: 15 | {{- if .Values.global.pdb.minAvailable }} 16 | minAvailable: {{ .Values.global.pdb.minAvailable }} 17 | {{- end }} 18 | {{- if or .Values.global.pdb.maxUnavailable ( not .Values.global.pdb.minAvailable ) }} 19 | maxUnavailable: {{ .Values.global.pdb.maxUnavailable | default 1 }} 20 | {{- end }} 21 | selector: 22 | matchLabels: 23 | app.kubernetes.io/instance: {{ .Release.Name }} 24 | {{- end }} --------------------------------------------------------------------------------