Compare commits

...

9 Commits

Author SHA1 Message Date
renovate[bot]
1d5b7ff5bf [statping] Update helm chart postgresql to v10 (#210)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: ᗪєνιη ᗷυнʟ <onedr0p@users.noreply.github.com>
2020-11-24 11:16:01 -05:00
renovate[bot]
7fc5825da9 [teslamate] Update helm chart postgresql to v10 (#211)
* [teslamate] Update helm chart postgresql to v10

* bump minor

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: ᗪєνιη ᗷυнʟ <onedr0p@users.noreply.github.com>
2020-11-24 11:10:45 -05:00
Bᴇʀɴᴅ Sᴄʜᴏʀɢᴇʀs
e621f470f5 [home-assistant] Upgrade dependencies (#212)
Co-authored-by: ᗪєνιη ᗷυнʟ <onedr0p@users.noreply.github.com>
2020-11-24 11:04:08 -05:00
renovate[bot]
23f9c09612 [statping] Update helm chart postgresql to v9.8.12 (#203)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-24 10:26:46 -05:00
renovate[bot]
5a1ae94997 [powerdns] Update helm chart postgresql to v9.8.12 (#202)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-24 09:42:32 -05:00
renovate[bot]
415f618e2b [powerdns] Update helm chart mariadb to v7.10.4 (#201)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-11-24 09:32:56 -05:00
renovate[bot]
118ed4cc26 Configure Renovate (#196)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: ᗪєνιη ᗷυнʟ <onedr0p@users.noreply.github.com>
2020-11-24 09:17:38 -05:00
Mark McWhirter
3b0b096427 [traefik-forward-auth] Add cookie secret to values (#197)
Co-authored-by: ᗪєνιη ᗷυнʟ <onedr0p@users.noreply.github.com>
2020-11-24 09:15:11 -05:00
ᗪєνιη ᗷυнʟ
a05b836cd1 [workflow] update linting and release workflows (#195) 2020-11-24 08:30:11 -05:00
17 changed files with 189 additions and 80 deletions

View File

@@ -1,8 +1,10 @@
remote: origin
target-branch: master
helm-extra-args: --timeout 600s
chart-dirs:
- charts
excluded-charts:
- common
chart-repos:
- bitnami=https://charts.bitnami.com/bitnami
- k8s-at-home=https://k8s-at-home.com/charts
excluded-charts:
- common

26
.github/renovate.json vendored Normal file
View File

@@ -0,0 +1,26 @@
{
"enabled": true,
"gitAuthor": "Renovate Bot <renovate@whitesourcesoftware.com>",
"commitMessagePrefix": "[{{{parentDir}}}]",
"branchTopic": "{{{parentDir}}}-{{{depNameSanitized}}}-{{{newMajor}}}{{#if isPatch}}.{{{newMinor}}}{{/if}}.x{{#if isLockfileUpdate}}-lockfile{{/if}}",
"assigneesFromCodeOwners": true,
"reviewersFromCodeOwners": true,
"helm-values": {
"enabled": false
},
"helmv3": {
"fileMatch": ["charts/.+/Chart\\.yaml$"]
},
"packageRules": [
{
"updateTypes": ["major"],
"bumpVersion": "major",
"labels": ["dependency/major"]
},
{
"updateTypes": ["minor", "patch"],
"bumpVersion": "minor",
"labels": ["dependency/minor"]
}
]
}

View File

@@ -1,28 +1,45 @@
name: Lint and Test Charts
on: pull_request
jobs:
lint-test:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
- name: Fetch history
with:
fetch-depth: 0
- name: Install Helm
uses: azure/setup-helm@v1
with:
version: v3.4.0
- uses: actions/setup-python@v2
with:
python-version: 3.7
- name: Set up chart-testing
uses: helm/chart-testing-action@v2.0.1
- name: Run chart-testing (list-changed)
id: list-changed
run: |
git fetch --prune --unshallow;
echo "commitmsg=$(git log --format=%B -n 1 ${{ github.event.after }})" >> $GITHUB_ENV
changed=$(ct list-changed --config .github/ct.yaml)
if [[ -n "$changed" ]]; then
echo "::set-output name=changed::true"
fi
- name: Run chart-testing (lint)
id: lint
uses: helm/chart-testing-action@v1.0.0
if: "! contains(env.commitmsg, '[skip lint]')"
with:
command: lint
config: ct.yaml
run: ct lint --config .github/ct.yaml
if: steps.list-changed.outputs.changed == 'true'
- name: Create kind cluster
uses: helm/kind-action@v1.0.0
if: "steps.lint.outputs.changed == 'true' && ! contains(env.commitmsg, '[skip install]')"
uses: helm/kind-action@v1.1.0
if: steps.list-changed.outputs.changed == 'true'
- name: Run chart-testing (install)
uses: helm/chart-testing-action@v1.0.0
if: "steps.lint.outputs.changed == 'true' && ! contains(env.commitmsg, '[skip install]')"
with:
command: install
config: ct.yaml
run: ct install --config .github/ct.yaml
if: steps.list-changed.outputs.changed == 'true'

View File

@@ -1,10 +1,11 @@
name: Release Charts
on:
push:
branches:
- master
paths:
- "charts/**"
jobs:
release:
@@ -13,6 +14,8 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@v2
with:
fetch-depth: 0
- name: Turnstyle
uses: softprops/turnstyle@v1
@@ -21,25 +24,47 @@ jobs:
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Fetch history
run: git fetch --prune --unshallow
- name: Configure Git
run: |
git config user.name "$GITHUB_ACTOR"
git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
- name: Install Helm
uses: azure/setup-helm@v1
with:
version: v3.4.0
- name: Run chart-releaser
uses: helm/chart-releaser-action@v1.1.0
with:
charts_repo_url: https://k8s-at-home.com/charts/
env:
CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
# Update the generated timestamp in the index.yaml
# needed until https://github.com/helm/chart-releaser/issues/90
# or helm/chart-releaser-action supports this
post-release:
runs-on: ubuntu-latest
needs: release
steps:
- name: Checkout
uses: actions/checkout@v2
with:
ref: "gh-pages"
fetch-depth: 0
- name: Configure Git
run: |
git config user.name "$GITHUB_ACTOR"
git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
# See https://github.com/helm/chart-releaser-action/issues/6
- name: Install Helm
- name: Commit and push timestamp updates
run: |
curl -fsSLo get_helm.sh https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3
chmod 700 get_helm.sh
./get_helm.sh
- name: Add dependency chart repos
run: |
helm repo add stable https://charts.helm.sh/stable
- name: Run chart-releaser
uses: helm/chart-releaser-action@v1.0.0
with:
charts_repo_url: https://k8s-at-home.com/charts/
env:
CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
if [[ -f index.yaml ]]; then
export generated_date=$(date --utc +%FT%T.%9NZ)
sed -i -e "s/^generated:.*/generated: \"$generated_date\"/" index.yaml
git add index.yaml
git commit -sm "Update generated timestamp [ci-skip]" || exit 0
git push
fi

View File

@@ -0,0 +1,34 @@
# Changelog
All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## [3.0.0]
### Changed
- The default `home-assistant` image has been updated to v0.118.3.
- The default `vscode` image has been updated to 3.7.2
- :warning: Upgraded `influxdb` subchart from version 0.6.7 to version 1.0.0.
- :warning: Upgraded `postgresql` subchart from version 9.1.2 to version 10.1.0.
This is a major version update, [requiring changes](https://github.com/bitnami/charts/tree/master/bitnami/postgresql#to-1000) in your `values.yaml` if you use it!
- :warning: Upgraded `mariadb` subchart from version 7.7.1 to version 9.0.1.
This is a major version update, [requiring changes](https://github.com/bitnami/charts/tree/master/bitnami/mariadb#to-900) in your `values.yaml` if you use it!
### Removed
- Subchart support for `esphome` was removed as it is really a separate application and integration was only limited to sharing a secrets file.
### Fixed
- Fixed some formatting errors that were causing the pipeline to fail.
## [2.7.0]
This is the last version before starting this changelog. All sorts of cool stuff was changed, but only `git log` remembers what that was :slightly_frowning_face:
[3.0.0]: https://github.com/k8s-at-home/charts/tree/home-assistant-3.0.0/charts/home-assistant
[2.7.0]: https://github.com/k8s-at-home/charts/tree/home-assistant-2.7.0/charts/home-assistant

View File

@@ -1,8 +1,8 @@
apiVersion: v2
appVersion: 0.116.1
appVersion: 0.118.3
description: Home Assistant
name: home-assistant
version: 2.7.0
version: 3.0.0
keywords:
- home-assistant
- hass
@@ -20,19 +20,15 @@ maintainers:
- name: runningman84
email: phil@hellmi.de
dependencies:
- name: esphome
repository: https://k8s-at-home.com/charts/
version: ~2.2.0
condition: esphome.enabled
- name: postgresql
version: 9.1.2
version: 10.1.0
repository: https://charts.bitnami.com/bitnami
condition: postgresql.enabled
- name: mariadb
version: 7.7.1
version: 9.0.1
repository: https://charts.bitnami.com/bitnami
condition: mariadb.enabled
- name: influxdb
version: 0.6.7
version: 1.0.0
repository: https://charts.bitnami.com/bitnami
condition: influxdb.enabled

View File

@@ -2,6 +2,8 @@
This is a helm chart for [Home Assistant](https://www.home-assistant.io/)
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/k8s-at-home/charts/issues/new/choose)**
## TL;DR;
```shell
@@ -9,6 +11,10 @@ helm repo add k8s-at-home https://k8s-at-home.com/charts/
helm install k8s-at-home/home-assistant
```
## :star2: Changelog
Please refer to [CHANGELOG.md](CHANGELOG.md) for an overview of notable changes to the chart. **This is especially important for major version updates!**
## Introduction
This code is adapted for [the official home assistant docker image](https://hub.docker.com/r/homeassistant/home-assistant/)
@@ -38,7 +44,7 @@ The following tables lists the configurable parameters of the Home Assistant cha
| Parameter | Description | Default |
|-------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------|
| `image.repository` | Image repository | `homeassistant/home-assistant` |
| `image.tag` | Image tag. Possible values listed [here](https://hub.docker.com/r/homeassistant/home-assistant/tags/). | `0.114.0` |
| `image.tag` | Image tag. Possible values listed [here](https://hub.docker.com/r/homeassistant/home-assistant/tags/). | `0.118.3` |
| `image.pullPolicy` | Image pull policy | `IfNotPresent` |
| `image.pullSecrets` | Secrets to use when pulling the image | `[]` |
| `strategyType` | Specifies the strategy used to replace old Pods by new ones | `Recreate` |
@@ -130,7 +136,7 @@ The following tables lists the configurable parameters of the Home Assistant cha
| `configurator.service.loadBalancerSourceRanges` | Loadbalancer client IP restriction range for the configurator UI | `[]` |
| `vscode.enabled` | Enable the optional [VS Code Server Sidecar](https://github.com/cdr/code-server) | `false` |
| `vscode.image.repository` | Image repository | `codercom/code-server` |
| `vscode.image.tag` | Image tag | `3.4.1` |
| `vscode.image.tag` | Image tag | `3.7.2` |
| `vscode.image.pullPolicy` | Image pull policy | `IfNotPresent` |
| `vscode.hassConfig` | Base path of the home assistant configuration files | `/config` |
| `vscode.vscodePath` | Base path of the VS Code configuration files | `/config/.vscode` |
@@ -174,7 +180,6 @@ The following tables lists the configurable parameters of the Home Assistant cha
| `appdaemon.service.externalIPs` | External IPs for the AppDaemon UI | `[]` |
| `appdaemon.service.loadBalancerIP` | Loadbalancer IP for the AppDaemon UI | `` |
| `appdaemon.service.loadBalancerSourceRanges` | Loadbalancer client IP restriction range for the VS Code UI | `[]` |
| `esphome.enabled` | Enable the optional [ESPHome](https://esphome.io) deployment | `false` |
| `mariadb.enabled` | Enable the optional [Mariadb](https://github.com/bitnami/charts) deployment | `false` |
| `postgresql.enabled` | Enable the optional [Postgres](https://github.com/bitnami/charts) deployment | `false` |
| `influxdb.enabled` | Enable the optional [Influxdb](https://github.com/bitnami/charts) deployment | `false` |

View File

@@ -1,4 +1,5 @@
{{- if .Values.configurator.enabled }}
---
apiVersion: v1
kind: Secret
metadata:
@@ -20,8 +21,9 @@ data:
password: {{ .Values.configurator.password | b64enc | quote }}
{{- end }}
{{- end }}
---
{{- if .Values.vscode.enabled }}
---
apiVersion: v1
kind: Secret
metadata:
@@ -37,8 +39,9 @@ data:
password: {{ .Values.vscode.password | b64enc | quote }}
{{- end }}
{{- end }}
---
{{- if .Values.appdaemon.enabled }}
---
apiVersion: v1
kind: Secret
metadata:

View File

@@ -4,7 +4,7 @@
image:
repository: homeassistant/home-assistant
tag: 0.116.1
tag: 0.118.3
pullPolicy: IfNotPresent
pullSecrets: []
@@ -252,7 +252,7 @@ vscode:
##
image:
repository: codercom/code-server
tag: 3.4.1
tag: 3.7.2
pullPolicy: IfNotPresent
## VSCode password
@@ -350,31 +350,17 @@ appdaemon:
loadBalancerSourceRanges: []
# nodePort: 30000
esphome:
enabled: false
# Mount home-assistant's secrets.yaml into the esphome container.
extraVolumes:
- name: ha-config
persistentVolumeClaim:
claimName: home-assistant
extraVolumeMounts:
- name: ha-config
mountPath: /config/secrets.yaml
subPath: secrets.yaml
# Enabled mariadb
# ... for more options see https://github.com/bitnami/charts/tree/master/bitnami/mariadb
mariadb:
enabled: false
db:
name: home-assistant
user: home-assistant
architecture: standalone
auth:
database: home-assistant
username: home-assistant
password: home-assistant-pass
replication:
enabled: false
rootUser:
password: home-assistantrootpass
master:
rootPassword: home-assistantrootpass
primary:
persistence:
enabled: false
# storageClass: ""

View File

@@ -2,7 +2,7 @@ apiVersion: v2
appVersion: v4.3.0
description: PowerDNS is a DNS server, written in C++ and licensed under the GPL. It runs on most Unix derivatives. PowerDNS features a large number of different backends ranging from simple BIND style zonefiles to relational databases and load balancing/failover algorithms. A DNS recursor is provided as a separate program.
name: powerdns
version: 2.0.1
version: 2.2.0
home: https://www.powerdns.com/
sources:
- http://www.github.com/PowerDNS/
@@ -12,10 +12,10 @@ maintainers:
email: ryan@ryanholt.net
dependencies:
- name: postgresql
version: 9.1.2
version: 9.8.12
repository: https://charts.bitnami.com/bitnami
condition: postgres.enabled
- name: mariadb
version: 7.7.1
version: 7.10.4
repository: https://charts.bitnami.com/bitnami
condition: mariadb.enabled

View File

@@ -2,7 +2,7 @@ apiVersion: v2
name: statping
description: Status page for monitoring your websites and applications
type: application
version: 1.0.1
version: 1.1.1
appVersion: v0.90.65
keywords:
- statping
@@ -18,5 +18,5 @@ icon: https://github.com/statping/statping/blob/dev/frontend/src/assets/logo.png
dependencies:
- name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 9.4.0
version: 10.1.0
condition: postgres.posgresql.enabled

View File

@@ -2,7 +2,7 @@ apiVersion: v2
appVersion: v1.20.0
description: A self-hosted data logger for your Tesla 🚘
name: teslamate
version: 3.0.2
version: 3.0.3
keywords:
- teslamate
- tesla
@@ -12,7 +12,7 @@ sources:
- https://github.com/adriankumpf/teslamate
dependencies:
- name: postgresql
version: 9.1.2
version: 10.1.0
repository: https://charts.bitnami.com/bitnami
condition: postgresql.enabled
maintainers:

View File

@@ -2,7 +2,7 @@ apiVersion: v2
name: traefik-forward-auth
description: A minimal forward authentication service that provides OAuth/SSO login and authentication for the traefik reverse proxy/load balancer
type: application
version: 1.0.2
version: 1.0.3
appVersion: 2.2.0
keywords:
- traefik

View File

@@ -61,6 +61,7 @@ helm install traefik-forward-auth k8s-at-home/traefik-forward-auth --values valu
| cookie.domain | string | `""` | Domain(s) to set auth cookie on. (Comma delimited) |
| cookie.insecure | string | `""` | Use insecure cookies |
| cookie.name | string | `""` | Cookie Name (default: _forward_auth) |
| cookie.secret | string| `""` | Cookie Secret - useful when running multiple instances |
| default.action | string | `""` | [auth|allow] Default action (default: auth) |
| default.provider | string | `""` | [google|oidc|generic-oauth] Default provider (default: google) |
| env | list | `[]` | |

View File

@@ -95,6 +95,13 @@ spec:
- name: URL_PATH
value: {{ .Values.urlPath | quote }}
{{- end }}
{{- if .Values.cookie.secret }}
- name: COOKIE_SECRET
valueFrom:
secretKeyRef:
name: {{ $fullName }}
key: cookie-secret
{{- end }}
{{- if ne .Values.secret "-" }}
- name: SECRET
{{- if .Values.secret }}

View File

@@ -1,4 +1,4 @@
{{- if and (ne .Values.secret "-") (not .Values.secret) }}
{{- if or (and (ne .Values.secret "-") (not .Values.secret)) .Values.cookie.secret }}
apiVersion: v1
kind: Secret
metadata:
@@ -7,5 +7,10 @@ metadata:
{{- include "traefik-forward-auth.labels" . | nindent 4 }}
type: Opaque
data:
{{- if not .Values.secret }}
secret: {{ randAlphaNum 16 | b64enc | quote }}
{{- end }}
{{- end }}
{{- if .Values.cookie.secret }}
cookie-secret: {{ .Values.cookie.secret | b64enc | quote }}
{{- end }}
{{- end }}

View File

@@ -35,6 +35,8 @@ cookie:
name: ""
# cookie.csrfName -- CSRF Cookie Name (default: _forward_auth_csrf)
csrfName: ""
# cookie.secret -- Cookie Secret used for authentication across multiple instances / clusters (default: randomly generated)
secret: ""
default:
# default.action -- [auth|allow] Default action (default: auth)
action: ""