From 0957a930dd19b31fc860f9bdcc2aaceecc94e952 Mon Sep 17 00:00:00 2001 From: Zack Brady Date: Sat, 20 Jul 2024 00:57:25 -0400 Subject: [PATCH] removed helm chart --- .github/workflows/release.yaml | 30 ----- .../kubernetes/helm/charts/hauler/.helmignore | 21 --- .../kubernetes/helm/charts/hauler/Chart.yaml | 7 - .../kubernetes/helm/charts/hauler/README.md | 33 ----- .../helm/charts/hauler/app-readme.md | 33 ----- .../helm/charts/hauler/templates/_helpers.tpl | 62 --------- .../hauler-fileserver-deployment.yaml | 76 ----------- .../hauler-fileserver-ingress.yaml | 27 ---- .../hauler-fileserver-service.yaml | 18 --- .../hauler-registry-deployment.yaml | 76 ----------- .../hauler-registry-ingress.yaml | 28 ---- .../hauler-registry-service.yaml | 18 --- .../hauler/templates/hauler/hauler-jobs.yaml | 126 ------------------ .../hauler/templates/hauler/hauler-pvc.yaml | 16 --- .../hauler/templates/hauler/hauler-rbac.yaml | 35 ----- .../kubernetes/helm/charts/hauler/values.yaml | 94 ------------- 16 files changed, 700 deletions(-) delete mode 100644 deploy/kubernetes/helm/charts/hauler/.helmignore delete mode 100644 deploy/kubernetes/helm/charts/hauler/Chart.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/README.md delete mode 100644 deploy/kubernetes/helm/charts/hauler/app-readme.md delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/_helpers.tpl delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-deployment.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-ingress.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-service.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-deployment.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-ingress.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-service.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-jobs.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-pvc.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-rbac.yaml delete mode 100644 deploy/kubernetes/helm/charts/hauler/values.yaml diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 7136ebf..6de8de5 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -74,33 +74,3 @@ jobs: platforms: linux/amd64,linux/arm64 push: true tags: ghcr.io/${{ github.repository }}-debug:${{ github.ref_name }} - - chart-release: - name: Chart Release Job - runs-on: ubuntu-latest - needs: [go-release] - timeout-minutes: 30 - continue-on-error: true - steps: - - name: Checkout - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - - name: Set Up Helm - uses: azure/setup-helm@v4 - - - name: Authenticate to GitHub Container Registry - uses: docker/login-action@v3 - with: - registry: ghcr.io - username: ${{ github.repository_owner }} - password: ${{ secrets.GITHUB_TOKEN }} - - - name: Build Helm Chart - run: | - helm package deploy/kubernetes/helm/charts/hauler --destination deploy/kubernetes/helm/charts/hauler - - - name: Push to GitHub Container Registry - run: | - helm push deploy/kubernetes/helm/charts/hauler/hauler-*.tgz oci://ghcr.io/${{ github.repository_owner }}/charts diff --git a/deploy/kubernetes/helm/charts/hauler/.helmignore b/deploy/kubernetes/helm/charts/hauler/.helmignore deleted file mode 100644 index 5df8cd4..0000000 --- a/deploy/kubernetes/helm/charts/hauler/.helmignore +++ /dev/null @@ -1,21 +0,0 @@ -# HELM IGNORE OPTIONS: -# Patterns to ignore when building Helm packages. -# Supports shell glob matching, relative path matching, and negation (prefixed with !) - -.DS_Store -.git/ -.gitignore -.bzr/ -.bzrignore -.hg/ -.hgignore -.svn/ -*.swp -*.bak -*.tmp -*.orig -*~ -.project -.idea/ -*.tmproj -.vscode/ diff --git a/deploy/kubernetes/helm/charts/hauler/Chart.yaml b/deploy/kubernetes/helm/charts/hauler/Chart.yaml deleted file mode 100644 index b4ad1a9..0000000 --- a/deploy/kubernetes/helm/charts/hauler/Chart.yaml +++ /dev/null @@ -1,7 +0,0 @@ -apiVersion: v2 -name: hauler -description: Hauler Helm Chart - Airgap Swiss Army Knife -icon: https://raw.githubusercontent.com/rancherfederal/hauler/main/static/rgs-hauler-logo-icon.svg -type: application -version: 1.0.4 -appVersion: 1.0.4 diff --git a/deploy/kubernetes/helm/charts/hauler/README.md b/deploy/kubernetes/helm/charts/hauler/README.md deleted file mode 100644 index 83d2b3f..0000000 --- a/deploy/kubernetes/helm/charts/hauler/README.md +++ /dev/null @@ -1,33 +0,0 @@ -# Hauler Helm Chart - -### Airgap Swiss Army Knife - -`Rancher Government Hauler` simplifies the airgap experience without requiring operators to adopt a specific workflow. **Hauler** simplifies the airgapping process, by representing assets (images, charts, files, etc...) as content and collections to allow operators to easily fetch, store, package, and distribute these assets with declarative manifests or through the command line. - -`Hauler` does this by storing contents and collections as OCI Artifacts and allows operators to serve contents and collections with an embedded registry and fileserver. Additionally, `Hauler` has the ability to store and inspect various non-image OCI Artifacts. - -**GitHub Repostiory:** https://github.com/rancherfederal/hauler - -**Documentation:** http://hauler.dev - ---- - -| Type | Chart Version | App Version | -| ----------- | ------------- | ----------- | -| application | `1.0.4` | `1.0.4` | - -## Installing the Chart - -```bash -helm install hauler hauler/hauler -n hauler-system -f values.yaml -``` - -```bash -helm status hauler -n hauler-system -``` - -## Uninstalling the Chart - -```bash -helm uninstall hauler -n hauler-system -``` diff --git a/deploy/kubernetes/helm/charts/hauler/app-readme.md b/deploy/kubernetes/helm/charts/hauler/app-readme.md deleted file mode 100644 index 83d2b3f..0000000 --- a/deploy/kubernetes/helm/charts/hauler/app-readme.md +++ /dev/null @@ -1,33 +0,0 @@ -# Hauler Helm Chart - -### Airgap Swiss Army Knife - -`Rancher Government Hauler` simplifies the airgap experience without requiring operators to adopt a specific workflow. **Hauler** simplifies the airgapping process, by representing assets (images, charts, files, etc...) as content and collections to allow operators to easily fetch, store, package, and distribute these assets with declarative manifests or through the command line. - -`Hauler` does this by storing contents and collections as OCI Artifacts and allows operators to serve contents and collections with an embedded registry and fileserver. Additionally, `Hauler` has the ability to store and inspect various non-image OCI Artifacts. - -**GitHub Repostiory:** https://github.com/rancherfederal/hauler - -**Documentation:** http://hauler.dev - ---- - -| Type | Chart Version | App Version | -| ----------- | ------------- | ----------- | -| application | `1.0.4` | `1.0.4` | - -## Installing the Chart - -```bash -helm install hauler hauler/hauler -n hauler-system -f values.yaml -``` - -```bash -helm status hauler -n hauler-system -``` - -## Uninstalling the Chart - -```bash -helm uninstall hauler -n hauler-system -``` diff --git a/deploy/kubernetes/helm/charts/hauler/templates/_helpers.tpl b/deploy/kubernetes/helm/charts/hauler/templates/_helpers.tpl deleted file mode 100644 index 00ffbfd..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/_helpers.tpl +++ /dev/null @@ -1,62 +0,0 @@ -{{/* -Expand the name of the chart. -*/}} -{{- define "hauler.name" -}} -{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "hauler.fullname" -}} -{{- if .Values.fullnameOverride }} -{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- $name := default .Chart.Name .Values.nameOverride }} -{{- if contains $name .Release.Name }} -{{- .Release.Name | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} -{{- end }} -{{- end }} -{{- end }} - -{{/* -Create chart name and version as used by the chart label. -*/}} -{{- define "hauler.chart" -}} -{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Common labels -*/}} -{{- define "hauler.labels" -}} -helm.sh/chart: {{ include "hauler.chart" . }} -{{ include "hauler.selectorLabels" . }} -{{- if .Chart.AppVersion }} -app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} -{{- end }} -app.kubernetes.io/managed-by: {{ .Release.Service }} -{{- end }} - -{{/* -Selector labels -*/}} -{{- define "hauler.selectorLabels" -}} -app.kubernetes.io/name: {{ include "hauler.name" . }} -app.kubernetes.io/instance: {{ .Release.Name }} -{{- end }} - -{{/* -Create the name of the service account to use -*/}} -{{- define "hauler.serviceAccountName" -}} -{{- if .Values.serviceAccount.create }} -{{- default (include "hauler.fullname" .) .Values.serviceAccount.name }} -{{- else }} -{{- default "default" .Values.serviceAccount.name }} -{{- end }} -{{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-deployment.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-deployment.yaml deleted file mode 100644 index 849cb84..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-deployment.yaml +++ /dev/null @@ -1,76 +0,0 @@ -{{- if .Values.haulerFileserver.enabled }} -apiVersion: apps/v1 -kind: Deployment -metadata: - name: hauler-fileserver - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - replicas: {{ .Values.haulerFileserver.replicas }} - selector: - matchLabels: - app: hauler-fileserver - {{- include "hauler.selectorLabels" . | nindent 6 }} - template: - metadata: - labels: - app: hauler-fileserver - {{- include "hauler.selectorLabels" . | nindent 8 }} - spec: - {{- if or .Values.haulerJobs.hauls.enabled .Values.haulerJobs.manifests.enabled }} - initContainers: - {{- if .Values.haulerJobs.hauls.enabled }} - - name: wait-for-hauler-hauls-job - image: {{ .Values.hauler.initContainers.image.repository }}:{{ .Values.hauler.initContainers.image.tag }} - imagePullPolicy: {{ .Values.hauler.initContainers.imagePullPolicy }} - args: ["wait", "--for=condition=complete", "job", "hauler-hauls-job", "--namespace", "{{ .Release.Namespace }}", "--timeout={{ .Values.hauler.initContainers.timeout }}"] - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - {{- end }} - {{- if .Values.haulerJobs.manifests.enabled }} - - name: wait-for-hauler-manifests-job - image: {{ .Values.hauler.initContainers.image.repository }}:{{ .Values.hauler.initContainers.image.tag }} - imagePullPolicy: {{ .Values.hauler.initContainers.imagePullPolicy }} - args: ["wait", "--for=condition=complete", "job", "hauler-manifests-job", "--namespace", "{{ .Release.Namespace }}", "--timeout={{ .Values.hauler.initContainers.timeout }}"] - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - {{- end }} - {{- end }} - containers: - - name: hauler-fileserver - image: {{ .Values.hauler.image.repository }}:{{ .Values.hauler.image.tag }} - imagePullPolicy: {{ .Values.hauler.imagePullPolicy }} - args: ["store", "serve", "fileserver", "--port", "{{ .Values.haulerFileserver.port }}"] - ports: - - containerPort: {{ .Values.haulerFileserver.port }} - volumeMounts: - - name: hauler-data - mountPath: /store - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - restartPolicy: Always - serviceAccountName: hauler-service-account - volumes: - - name: hauler-data - persistentVolumeClaim: - claimName: hauler-data -{{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-ingress.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-ingress.yaml deleted file mode 100644 index 5807e93..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-ingress.yaml +++ /dev/null @@ -1,27 +0,0 @@ -{{- if and .Values.haulerFileserver.enabled .Values.haulerFileserver.ingress.enabled }} -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: hauler-fileserver - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - rules: - - host: {{ .Values.haulerFileserver.ingress.hostname }} - http: - paths: - - backend: - service: - name: hauler-fileserver - port: - number: {{ .Values.haulerFileserver.service.ports.targetPort }} - path: / - pathType: Prefix - {{- if .Values.haulerFileserver.ingress.tls.enabled }} - tls: - - hosts: - - {{ .Values.haulerFileserver.ingress.hostname }} - secretName: {{ .Values.haulerFileserver.ingress.tls.secretName }} - {{- end }} -{{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-service.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-service.yaml deleted file mode 100644 index 71f7136..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler-fileserver/hauler-fileserver-service.yaml +++ /dev/null @@ -1,18 +0,0 @@ -{{- if and .Values.haulerFileserver.enabled .Values.haulerFileserver.service.enabled }} -apiVersion: v1 -kind: Service -metadata: - name: hauler-fileserver - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - selector: - app: hauler-fileserver - ports: - - name: hauler-fileserver - protocol: {{ .Values.haulerFileserver.service.ports.protocol }} - port: {{ .Values.haulerFileserver.service.ports.port }} - targetPort: {{ .Values.haulerFileserver.service.ports.targetPort }} - type: {{ .Values.haulerFileserver.service.type }} -{{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-deployment.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-deployment.yaml deleted file mode 100644 index 9a3d2b2..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-deployment.yaml +++ /dev/null @@ -1,76 +0,0 @@ -{{- if .Values.haulerRegistry.enabled }} -apiVersion: apps/v1 -kind: Deployment -metadata: - name: hauler-registry - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - replicas: {{ .Values.haulerRegistry.replicas }} - selector: - matchLabels: - app: hauler-registry - {{- include "hauler.selectorLabels" . | nindent 6 }} - template: - metadata: - labels: - app: hauler-registry - {{- include "hauler.selectorLabels" . | nindent 8 }} - spec: - {{- if or .Values.haulerJobs.hauls.enabled .Values.haulerJobs.manifests.enabled }} - initContainers: - {{- if .Values.haulerJobs.hauls.enabled }} - - name: wait-for-hauler-hauls-job - image: {{ .Values.hauler.initContainers.image.repository }}:{{ .Values.hauler.initContainers.image.tag }} - imagePullPolicy: {{ .Values.hauler.initContainers.imagePullPolicy }} - args: ["wait", "--for=condition=complete", "job", "hauler-hauls-job", "--namespace", "{{ .Release.Namespace }}", "--timeout={{ .Values.hauler.initContainers.timeout }}"] - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - {{- end }} - {{- if .Values.haulerJobs.manifests.enabled }} - - name: wait-for-hauler-manifests-job - image: {{ .Values.hauler.initContainers.image.repository }}:{{ .Values.hauler.initContainers.image.tag }} - imagePullPolicy: {{ .Values.hauler.initContainers.imagePullPolicy }} - args: ["wait", "--for=condition=complete", "job", "hauler-manifests-job", "--namespace", "{{ .Release.Namespace }}", "--timeout={{ .Values.hauler.initContainers.timeout }}"] - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - {{- end }} - {{- end }} - containers: - - name: hauler-registry - image: {{ .Values.hauler.image.repository }}:{{ .Values.hauler.image.tag }} - imagePullPolicy: {{ .Values.hauler.imagePullPolicy }} - args: ["store", "serve", "registry", "--port", "{{ .Values.haulerRegistry.port }}"] - ports: - - containerPort: {{ .Values.haulerRegistry.port }} - volumeMounts: - - name: hauler-data - mountPath: /store - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - restartPolicy: Always - serviceAccountName: hauler-service-account - volumes: - - name: hauler-data - persistentVolumeClaim: - claimName: hauler-data -{{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-ingress.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-ingress.yaml deleted file mode 100644 index 0afdfc5..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-ingress.yaml +++ /dev/null @@ -1,28 +0,0 @@ -{{- if and .Values.haulerRegistry.enabled .Values.haulerRegistry.ingress.enabled }} -apiVersion: networking.k8s.io/v1 -kind: Ingress -metadata: - name: hauler-registry - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - rules: - - host: {{ .Values.haulerRegistry.ingress.hostname }} - http: - paths: - - backend: - service: - name: hauler-registry - port: - number: {{ .Values.haulerRegistry.service.ports.targetPort }} - path: / - pathType: Prefix - {{- if .Values.haulerRegistry.ingress.tls.enabled }} - tls: - - hosts: - - {{ .Values.haulerRegistry.ingress.hostname }} - secretName: {{ .Values.haulerRegistry.ingress.tls.secretName }} - {{- end }} -{{- end }} - diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-service.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-service.yaml deleted file mode 100644 index adf7646..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler-registry/hauler-registry-service.yaml +++ /dev/null @@ -1,18 +0,0 @@ -{{- if and .Values.haulerRegistry.enabled .Values.haulerRegistry.service.enabled }} -apiVersion: v1 -kind: Service -metadata: - name: hauler-registry - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - selector: - app: hauler-registry - ports: - - name: hauler-registry - protocol: {{ .Values.haulerRegistry.service.ports.protocol }} - port: {{ .Values.haulerRegistry.service.ports.port }} - targetPort: {{ .Values.haulerRegistry.service.ports.targetPort }} - type: {{ .Values.haulerRegistry.service.type }} -{{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-jobs.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-jobs.yaml deleted file mode 100644 index d46a99d..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-jobs.yaml +++ /dev/null @@ -1,126 +0,0 @@ -{{- if .Values.haulerJobs.hauls.enabled }} -apiVersion: batch/v1 -kind: Job -metadata: - name: hauler-hauls-job - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - template: - spec: - initContainers: - - name: hauler-fetch-hauls - image: {{ .Values.haulerJobs.image.repository }}:{{ .Values.haulerJobs.image.tag }} - imagePullPolicy: {{ .Values.haulerJobs.imagePullPolicy }} - command: ["/bin/sh", "-c"] - args: - - | - {{- range .Values.haulerJobs.hauls.artifacts }} - curl -o /hauls/{{ .name }} {{ .path }} && - {{- end }} - echo hauler fetch completed - volumeMounts: - - name: hauler-data - mountPath: /hauls - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - containers: - - name: hauler-load-hauls - image: {{ .Values.hauler.image.repository }}:{{ .Values.hauler.image.tag }} - imagePullPolicy: {{ .Values.hauler.imagePullPolicy }} - args: - - "store" - - "load" - {{- range .Values.haulerJobs.hauls.artifacts }} - - "/hauls/{{ .name }}" - {{- end }} - volumeMounts: - - name: hauler-data - mountPath: /hauls - - name: hauler-data - mountPath: /store - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - restartPolicy: OnFailure - volumes: - - name: hauler-data - persistentVolumeClaim: - claimName: hauler-data -{{- end }} ---- -{{- if .Values.haulerJobs.manifests.enabled }} -apiVersion: batch/v1 -kind: Job -metadata: - name: hauler-manifests-job - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - template: - spec: - initContainers: - - name: hauler-fetch-manifests - image: {{ .Values.haulerJobs.image.repository }}:{{ .Values.haulerJobs.image.tag }} - imagePullPolicy: {{ .Values.haulerJobs.imagePullPolicy }} - command: ["/bin/sh", "-c"] - args: - - | - {{- range .Values.haulerJobs.manifests.artifacts }} - curl -o /manifests/{{ .name }} {{ .path }} && - {{- end }} - echo hauler fetch completed - volumeMounts: - - name: hauler-data - mountPath: /manifests - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - containers: - - name: hauler-load-manifests - image: {{ .Values.hauler.image.repository }}:{{ .Values.hauler.image.tag }} - imagePullPolicy: {{ .Values.hauler.imagePullPolicy }} - args: - {{- range .Values.haulerJobs.manifests.artifacts }} - - "store" - - "sync" - - "--files" - - "/manifests/{{ .name }}" - {{- end }} - volumeMounts: - - name: hauler-data - mountPath: /manifests - - name: hauler-data - mountPath: /store - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - runAsNonRoot: true - runAsUser: 1001 - seccompProfile: - type: RuntimeDefault - restartPolicy: OnFailure - volumes: - - name: hauler-data - persistentVolumeClaim: - claimName: hauler-data -{{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-pvc.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-pvc.yaml deleted file mode 100644 index 5fd57ea..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-pvc.yaml +++ /dev/null @@ -1,16 +0,0 @@ -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: hauler-data - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -spec: - accessModes: - - {{ .Values.hauler.data.pvc.accessModes }} - resources: - requests: - storage: {{ .Values.hauler.data.pvc.storageRequest }} - {{- if .Values.hauler.data.pvc.storageClass }} - storageClassName: {{ .Values.hauler.data.pvc.storageClass }} - {{- end }} diff --git a/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-rbac.yaml b/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-rbac.yaml deleted file mode 100644 index 36523c0..0000000 --- a/deploy/kubernetes/helm/charts/hauler/templates/hauler/hauler-rbac.yaml +++ /dev/null @@ -1,35 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: hauler-service-account - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: hauler-role - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -rules: -- apiGroups: ["batch"] - resources: ["jobs"] - verbs: ["get", "list", "watch"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: hauler-role-binding - namespace: {{ .Release.Namespace }} - labels: - {{- include "hauler.labels" . | nindent 4 }} -roleRef: - kind: Role - name: hauler-role - apiGroup: rbac.authorization.k8s.io -subjects: - - kind: ServiceAccount - name: hauler-service-account - namespace: {{ .Release.Namespace }} diff --git a/deploy/kubernetes/helm/charts/hauler/values.yaml b/deploy/kubernetes/helm/charts/hauler/values.yaml deleted file mode 100644 index 1ad9d32..0000000 --- a/deploy/kubernetes/helm/charts/hauler/values.yaml +++ /dev/null @@ -1,94 +0,0 @@ -# Helm Chart Values for Hauler -# Docs: https://hauler.dev - -hauler: - image: - repository: ghcr.io/rancherfederal/hauler - tag: v1.0.4 - imagePullPolicy: Always - - initContainers: - image: - repository: rancher/kubectl - tag: v1.28.0 # update to your kubernetes version - imagePullPolicy: Always - timeout: 1h - - data: - pvc: - accessModes: ReadWriteMany - storageClass: longhorn # optional... will use default storage class - storageRequest: 48Gi # recommended size of 3x the artifact(s) - -# Helm Chart Values for the Hauler Jobs -# Docs: https://rancherfederal.github.io/hauler-docs/docs/introduction/quickstart - -haulerJobs: - image: - repository: rancher/shell - tag: v0.1.24 - imagePullPolicy: Always - - hauls: - enabled: true - artifacts: - - path: https://raw.githubusercontent.com/rancherfederal/hauler/main/testdata/haul.tar.zst - name: haul.tar.zst - # - path: /path/to/additional-hauls.tar.zst - # name: additional-hauls.tar.zst - - manifests: - enabled: true - artifacts: - - path: https://raw.githubusercontent.com/rancherfederal/hauler/main/testdata/hauler-manifest.yaml - name: hauler-manifest.yaml - # - path: /path/to/additional-manifests.yaml - # name: additional-manifests.yaml - -# Helm Chart Values for the Hauler Fileserver -# Docs: https://rancherfederal.github.io/hauler-docs/docs/guides-references/command-line/hauler-store#hauler-store-serve-fileserver - -haulerFileserver: - enabled: true - port: 8080 # default port for the fileserver - replicas: 1 - - ingress: - enabled: true - hostname: fileserver.ranchers.io - tls: - enabled: true - source: secret # only supported source - secretName: tls-certs # must be created outside of this chart - - service: - enabled: true - type: ClusterIP - ports: - protocol: TCP - port: 8080 # default port for the fileserver - targetPort: 8080 # default port for the fileserver - -# Helm Chart Values for the Hauler Registry -# Docs: https://rancherfederal.github.io/hauler-docs/docs/guides-references/command-line/hauler-store#hauler-store-serve-registry - -haulerRegistry: - enabled: true - port: 5000 # default port for the registry - replicas: 1 - - ingress: - enabled: true - hostname: registry.ranchers.io - tls: - enabled: true - source: secret # only supported source - secretName: tls-certs # must be created outside of this chart - - service: - enabled: true - type: ClusterIP - ports: - protocol: TCP - port: 5000 # default port for the registry - targetPort: 5000 # default port for the registry