diff --git a/helm/dbrepo/Chart.lock b/helm/dbrepo/Chart.lock index 297b4b1a9287732c869533cd2f2fe261ae43f4a5..e26b869016fcfee00e7f08f1a1f18a306429a6fa 100644 --- a/helm/dbrepo/Chart.lock +++ b/helm/dbrepo/Chart.lock @@ -26,5 +26,5 @@ dependencies: - name: nginx repository: https://charts.bitnami.com/bitnami version: 18.3.1 -digest: sha256:aa148a5f656ad17971203ea710206117d6de6f27b6940f9d532a6c5762e5df25 -generated: "2025-02-04T22:01:27.370259572+01:00" +digest: sha256:acb36fe9078b39dd50381a03827c318897d401c1946aee453611b3b58c924a54 +generated: "2025-04-01T13:07:24.905667677+02:00" diff --git a/helm/dbrepo/README.md b/helm/dbrepo/README.md index 8b251feba2ac47bc0daf11be2700287833577de2..50e41787d0092f7e3b425c1f6f8d5c15a8203c42 100644 --- a/helm/dbrepo/README.md +++ b/helm/dbrepo/README.md @@ -113,6 +113,8 @@ The command removes all the Kubernetes components associated with the chart and | `datadb.rootUser.user` | The root username. | `root` | | `datadb.rootUser.password` | The root user password. | `dbrepo` | | `datadb.db.name` | The database name. | `dbrepo` | +| `datadb.db.user` | The database username for the dashboard service. | `user` | +| `datadb.db.password` | The database user password for the dashboard service. | `user` | | `datadb.galera.mariabackup.user` | The database backup username. | `backup` | | `datadb.galera.mariabackup.password` | The database backup user password | `backup` | | `datadb.jdbcExtraArgs` | The extra arguments for JDBC connections in the microservices. | `""` | @@ -137,32 +139,6 @@ The command removes all the Kubernetes components associated with the chart and | `searchdb.data.replicaCount` | The number of pod replicas. | `1` | | `searchdb.clusterName` | The cluster name. | `search-db` | -### Upload Service - -| Name | Description | Value | -| ----------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------- | -------------------------------- | -| `uploadservice.enabled` | Enable the Upload Service. | `true` | -| `uploadservice.s3.endpoint` | The S3-capable endpoint the microservice connects to. | `http://storage-service-s3:8333` | -| `uploadservice.s3.bucket` | The S3 bucket name. | `dbrepo` | -| `uploadservice.s3.maxSize` | The maximum file size in bytes. | `2000000000` | -| `uploadservice.podSecurityContext.enabled` | Enable pods' Security Context | `true` | -| `uploadservice.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` | -| `uploadservice.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` | -| `uploadservice.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` | -| `uploadservice.podSecurityContext.fsGroup` | Set RabbitMQ pod's Security Context fsGroup | `0` | -| `uploadservice.containerSecurityContext.enabled` | Enable containers' Security Context | `true` | -| `uploadservice.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` | -| `uploadservice.containerSecurityContext.runAsUser` | Set RabbitMQ containers' Security Context runAsUser | `1000` | -| `uploadservice.containerSecurityContext.runAsGroup` | Set RabbitMQ containers' Security Context runAsGroup | `1000` | -| `uploadservice.containerSecurityContext.runAsNonRoot` | Set RabbitMQ container's Security Context runAsNonRoot | `true` | -| `uploadservice.containerSecurityContext.allowPrivilegeEscalation` | Set container's privilege escalation | `false` | -| `uploadservice.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `false` | -| `uploadservice.containerSecurityContext.capabilities.drop` | Set container's Security Context runAsNonRoot | `["ALL"]` | -| `uploadservice.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` | -| `uploadservice.resourcesPreset` | The container resource preset | `nano` | -| `uploadservice.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` | -| `uploadservice.replicaCount` | The number of replicas. | `2` | - ### Broker Service | Name | Description | Value | @@ -406,17 +382,45 @@ mqtt.prefetch = 10 ### Dashboard Service -| Name | Description | Value | -| --------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- | ------ | -| `dashboardservice.enabled` | Enable the Dashboard Service. | `true` | -| `dashboardservice.metrics.enabled` | Enable the metrics sidecar. | `true` | -| `dashboardservice.dashboardsProvider.enabled` | Enable the default dashboard provisioning provider to routinely import dashboards from /opt/bitnami/grafana/dashboards | `true` | +| Name | Description | Value | +| -------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------- | ---------------- | +| `dashboardservice.enabled` | Enable the Dashboard Service. | `true` | +| `dashboardservice.podSecurityContext.enabled` | Enable pods' Security Context | `true` | +| `dashboardservice.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` | +| `dashboardservice.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` | +| `dashboardservice.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` | +| `dashboardservice.podSecurityContext.fsGroup` | Set RabbitMQ pod's Security Context fsGroup | `0` | +| `dashboardservice.containerSecurityContext.enabled` | Enable containers' Security Context | `true` | +| `dashboardservice.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` | +| `dashboardservice.containerSecurityContext.runAsUser` | Set RabbitMQ containers' Security Context runAsUser | `1001` | +| `dashboardservice.containerSecurityContext.runAsGroup` | Set RabbitMQ containers' Security Context runAsGroup | `1001` | +| `dashboardservice.containerSecurityContext.runAsNonRoot` | Set RabbitMQ container's Security Context runAsNonRoot | `true` | +| `dashboardservice.containerSecurityContext.allowPrivilegeEscalation` | Set container's privilege escalation | `false` | +| `dashboardservice.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `false` | +| `dashboardservice.containerSecurityContext.capabilities.drop` | Set container's Security Context runAsNonRoot | `["ALL"]` | +| `dashboardservice.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` | +| `dashboardservice.resourcesPreset` | The container resource preset | `micro` | +| `dashboardservice.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` | +| `dashboardservice.replicaCount` | The number of replicas. | `2` | +| `dashboardservice.init.resourcesPreset` | The container resource preset | `nano` | +| `dashboardservice.init.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` | +| `dashboardservice.replicaCount` | The number of replicas. | `2` | + +### Dashboard UI + +| Name | Description | Value | +| ---------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- | -------------------------- | +| `dashboardui.enabled` | Enable the Dashboard UI. | `true` | +| `dashboardui.metrics.enabled` | Enable the metrics sidecar. | `true` | +| `dashboardui.endpoint` | The endpoint for the microservices. | `http://dashboard-ui:3000` | +| `dashboardui.dashboardsProvider.enabled` | Enable the default dashboard provisioning provider to routinely import dashboards from /opt/bitnami/grafana/dashboards | `true` | ### Metric Service -| Name | Description | Value | -| ------------------ | -------------------------- | ------ | -| `metricdb.enabled` | Enable the Metric Service. | `true` | +| Name | Description | Value | +| ------------------- | ------------------------------- | ------------------------- | +| `metricdb.enabled` | Enable the Metric Service. | `true` | +| `metricdb.endpoint` | The endpoint for microservices. | `http://metric-db-server` | ### Gateway Service diff --git a/helm/dbrepo/charts/seaweedfs-4.2.1.tgz b/helm/dbrepo/charts/seaweedfs-4.2.1.tgz index b26358e59779d3206d9c834f59b08e7f2f84149b..ca2effba9822297a3a08fa86851edf02e827afee 100644 Binary files a/helm/dbrepo/charts/seaweedfs-4.2.1.tgz and b/helm/dbrepo/charts/seaweedfs-4.2.1.tgz differ diff --git a/helm/dbrepo/values.schema.json b/helm/dbrepo/values.schema.json index f99941e2f829db6b86e837ce71e8c132af9e9bc2..aed6547c451cf57ff8323ca48383fc906829f689 100644 --- a/helm/dbrepo/values.schema.json +++ b/helm/dbrepo/values.schema.json @@ -458,43 +458,130 @@ }, "dashboardservice": { "properties": { - "dashboardsProvider": { + "containerSecurityContext": { "properties": { + "allowPrivilegeEscalation": { + "type": "boolean" + }, + "capabilities": { + "properties": { + "drop": { + "items": { + "type": "string" + }, + "type": "array" + } + }, + "type": "object" + }, "enabled": { "type": "boolean" + }, + "readOnlyRootFilesystem": { + "type": "boolean" + }, + "runAsGroup": { + "type": "integer" + }, + "runAsNonRoot": { + "type": "boolean" + }, + "runAsUser": { + "type": "integer" + }, + "seLinuxOptions": { + "properties": {}, + "type": "object" + }, + "seccompProfile": { + "properties": { + "type": { + "type": "string" + } + }, + "type": "object" } }, "type": "object" }, - "datasources": { + "enabled": { + "type": "boolean" + }, + "image": { + "properties": { + "name": { + "type": "string" + } + }, + "type": "object" + }, + "init": { "properties": { - "secretDefinition": { + "image": { "properties": { - "apiVersion": { - "type": "integer" - }, - "datasources": { - "items": { - "properties": { - "name": { - "type": "string" - }, - "type": { - "type": "string" - }, - "uid": { - "type": "string" - }, - "url": { - "type": "string" - } - }, - "type": "object" - }, - "type": "array" + "name": { + "type": "string" } }, "type": "object" + }, + "resources": { + "properties": {}, + "type": "object" + }, + "resourcesPreset": { + "type": "string" + } + }, + "type": "object" + }, + "podSecurityContext": { + "properties": { + "enabled": { + "type": "boolean" + }, + "fsGroup": { + "type": "integer" + }, + "fsGroupChangePolicy": { + "type": "string" + }, + "supplementalGroups": { + "type": "array" + }, + "sysctls": { + "type": "array" + } + }, + "type": "object" + }, + "replicaCount": { + "type": "integer" + }, + "resources": { + "properties": {}, + "type": "object" + }, + "resourcesPreset": { + "type": "string" + } + }, + "type": "object" + }, + "dashboardui": { + "properties": { + "dashboardsProvider": { + "properties": { + "enabled": { + "type": "boolean" + } + }, + "type": "object" + }, + "datasources": { + "properties": { + "secretName": { + "type": "string" } }, "type": "object" @@ -502,28 +589,14 @@ "enabled": { "type": "boolean" }, + "endpoint": { + "type": "string" + }, "fullnameOverride": { "type": "string" }, "grafana": { "properties": { - "extraConfigmaps": { - "items": { - "properties": { - "mountPath": { - "type": "string" - }, - "name": { - "type": "string" - }, - "readOnly": { - "type": "boolean" - } - }, - "type": "object" - }, - "type": "array" - }, "extraEnvVarsSecret": { "type": "string" }, @@ -569,6 +642,12 @@ "properties": { "name": { "type": "string" + }, + "password": { + "type": "string" + }, + "user": { + "type": "string" } }, "type": "object" @@ -1302,6 +1381,9 @@ "enabled": { "type": "boolean" }, + "endpoint": { + "type": "string" + }, "fullnameOverride": { "type": "string" }, @@ -1880,173 +1962,6 @@ } }, "type": "object" - }, - "uploadservice": { - "properties": { - "containerArgs": { - "items": { - "type": "string" - }, - "type": "array" - }, - "containerSecurityContext": { - "properties": { - "allowPrivilegeEscalation": { - "type": "boolean" - }, - "capabilities": { - "properties": { - "drop": { - "items": { - "type": "string" - }, - "type": "array" - } - }, - "type": "object" - }, - "enabled": { - "type": "boolean" - }, - "readOnlyRootFilesystem": { - "type": "boolean" - }, - "runAsGroup": { - "type": "integer" - }, - "runAsNonRoot": { - "type": "boolean" - }, - "runAsUser": { - "type": "integer" - }, - "seLinuxOptions": { - "properties": {}, - "type": "object" - }, - "seccompProfile": { - "properties": { - "type": { - "type": "string" - } - }, - "type": "object" - } - }, - "type": "object" - }, - "enabled": { - "type": "boolean" - }, - "envFrom": { - "items": { - "properties": { - "secretRef": { - "properties": { - "name": { - "type": "string" - } - }, - "type": "object" - } - }, - "type": "object" - }, - "type": "array" - }, - "image": { - "properties": { - "name": { - "type": "string" - } - }, - "type": "object" - }, - "podSecurityContext": { - "properties": { - "enabled": { - "type": "boolean" - }, - "fsGroup": { - "type": "integer" - }, - "fsGroupChangePolicy": { - "type": "string" - }, - "supplementalGroups": { - "type": "array" - }, - "sysctls": { - "type": "array" - } - }, - "type": "object" - }, - "replicaCount": { - "type": "integer" - }, - "resources": { - "properties": {}, - "type": "object" - }, - "resourcesPreset": { - "type": "string" - }, - "s3": { - "properties": { - "bucket": { - "type": "string" - }, - "endpoint": { - "type": "string" - }, - "maxSize": { - "type": "string" - } - }, - "type": "object" - }, - "volumeMounts": { - "items": { - "properties": { - "mountPath": { - "type": "string" - }, - "name": { - "type": "string" - }, - "subPath": { - "type": "string" - } - }, - "type": "object" - }, - "type": "array" - }, - "volumes": { - "items": { - "properties": { - "configMap": { - "properties": { - "defaultMode": { - "type": "integer" - }, - "name": { - "type": "string" - } - }, - "type": "object" - }, - "name": { - "type": "string" - } - }, - "type": "object" - }, - "type": "array" - } - }, - "type": "object" } }, "type": "object" diff --git a/helm/dbrepo/values.yaml b/helm/dbrepo/values.yaml index 4afbf2c70e55fdb961860797f8d5082ac92eb09f..b84f6c1e6c45c1e22b7ee04b3fde7802038bd76c 100644 --- a/helm/dbrepo/values.yaml +++ b/helm/dbrepo/values.yaml @@ -975,6 +975,7 @@ dashboardui: metrics: ## @param dashboardui.metrics.enabled Enable the metrics sidecar. enabled: true + ## @param dashboardui.endpoint The endpoint for the microservices. endpoint: http://dashboard-ui:3000 ldap: ## @skip dashboardui.ldap.enabled @@ -990,7 +991,7 @@ dashboardui: ## @skip dashboardui.grafana.extraEnvVarsSecret extraEnvVarsSecret: dashboard-ui-secret datasources: - ## @skip dashboardservice.datasources.secretDefinition + ## @skip dashboardui.datasources.secretName secretName: "dashboard-ui-prov-datasources-secret" dashboardsProvider: ## @param dashboardui.dashboardsProvider.enabled Enable the default dashboard provisioning provider to routinely import dashboards from /opt/bitnami/grafana/dashboards diff --git a/helm/seaweedfs/Chart.lock b/helm/seaweedfs/Chart.lock index a6802a09cf77b8371a86d178399c67d7717544c5..775b1e81f93de470835107658007a907cd82df66 100644 --- a/helm/seaweedfs/Chart.lock +++ b/helm/seaweedfs/Chart.lock @@ -1,12 +1,12 @@ dependencies: - name: mariadb repository: oci://registry-1.docker.io/bitnamicharts - version: 20.4.1 + version: 20.4.2 - name: postgresql repository: oci://registry-1.docker.io/bitnamicharts - version: 16.4.16 + version: 16.6.0 - name: common repository: oci://registry-1.docker.io/bitnamicharts version: 2.30.0 -digest: sha256:20dba9f2a4322ee4b5e734cc85f7f10a47a090b0cc34bf9c1658feb774fad06e -generated: "2025-03-04T21:41:17.631905476+01:00" +digest: sha256:d254c9a52e16d0b7cb0f2b1a33ca9b0ac162589b72708e55848f2b0d316c1e7b +generated: "2025-04-01T13:05:20.598251993+02:00" diff --git a/helm/seaweedfs/charts/mariadb-20.4.1.tgz b/helm/seaweedfs/charts/mariadb-20.4.1.tgz deleted file mode 100644 index 924d07c3e7f88655b179085c3546f5d3de5c6e75..0000000000000000000000000000000000000000 Binary files a/helm/seaweedfs/charts/mariadb-20.4.1.tgz and /dev/null differ diff --git a/helm/seaweedfs/charts/mariadb-20.4.2.tgz b/helm/seaweedfs/charts/mariadb-20.4.2.tgz new file mode 100644 index 0000000000000000000000000000000000000000..5d58a0a1104ab1c9d8312d3117d5d2ece8b1d5a9 Binary files /dev/null and b/helm/seaweedfs/charts/mariadb-20.4.2.tgz differ diff --git a/helm/seaweedfs/charts/postgresql-16.4.16.tgz b/helm/seaweedfs/charts/postgresql-16.4.16.tgz deleted file mode 100644 index b862ff5d0d42b34d83ea4f479ed90070f1e4ee16..0000000000000000000000000000000000000000 Binary files a/helm/seaweedfs/charts/postgresql-16.4.16.tgz and /dev/null differ diff --git a/helm/seaweedfs/charts/postgresql-16.6.0.tgz b/helm/seaweedfs/charts/postgresql-16.6.0.tgz new file mode 100644 index 0000000000000000000000000000000000000000..865acadee30f59e1a872f84f12eaeae096f457aa Binary files /dev/null and b/helm/seaweedfs/charts/postgresql-16.6.0.tgz differ