[recipes] reverse proxy auth support (#1467 )

Co-authored-by: angelnu <git@angelnucom>
chore: Auto-update chart README [skip ci]
2022-03-28 09:31:43 +02:00 · 2022-03-20 21:24:08 +00:00 · 2022-03-20 17:23:40 -04:00 · 2022-03-20 21:22:58 +00:00 · 2022-03-20 17:22:34 -04:00 · 2022-03-19 11:16:10 +00:00
32 changed files with 513 additions and 96 deletions
--- a/.taskfiles/Taskfile_chart.yml
+++ b/.taskfiles/Taskfile_chart.yml
@@ -52,7 +52,7 @@ tasks:

  helm-docs:
    desc: generate helm-docs
-    dir: "{{.GIT_ROOT}}/hack"
+    dir: "{{.GIT_ROOT}}/.github/scripts"
    cmds:
    - ./gen-helm-docs.sh "{{.CHART_TYPE}}" "{{.CHART}}"
    deps:
--- a/charts/README.md
+++ b/charts/README.md
@@ -95,6 +95,7 @@
 | [openemr](stable/openemr) | OpenEMR is the most popular open source electronic health records and medical practice management solution. |
 | [openkm](stable/openkm) | OpenKM integrates all essential documents management, collaboration and an advanced search functionality into one easy to use solution. |
 | [organizr](stable/organizr) | HTPC/Homelab Services Organizer |
+| [otel-collector](stable/otel-collector) | OpenTelemetry collector helm package |
 | [overleaf](stable/overleaf) | A web-based collaborative LaTeX editor |
 | [overseerr](stable/overseerr) | Overseerr is a free and open source software application for managing requests for your media library. It integrates with your existing services such as Sonarr, Radarr and Plex! |
 | [owncast](stable/owncast) | Take control over your live stream video by running it yourself. Streaming + chat out of the box. |
@@ -179,6 +180,7 @@
 | [lancache](incubator/lancache) | LanCache Monolithic - a caching proxy server for game download content |
 | [openhab](incubator/openhab) | openhab helm package |
 | [scrypted](incubator/scrypted) | scrypted helm package |
+| [signal-cli-rest-api](incubator/signal-cli-rest-api) | Dockerized Signal Messenger REST API |
 | [sinusbot](incubator/sinusbot) | TeamSpeak & Discord Bot |
 | [strongswan](incubator/strongswan) | strongSwan – the OpenSource IPsec-based VPN Solution |
 | [teamspeak](incubator/teamspeak) | TeamSpeak Server |
--- a/charts/incubator/dendrite/Chart.yaml
+++ b/charts/incubator/dendrite/Chart.yaml
@@ -3,7 +3,7 @@ apiVersion: v2
 appVersion: v0.6.3
 description: Dendrite Matrix Homeserver
 name: dendrite
-version: 3.0.1
+version: 3.0.2
 kubeVersion: ">=1.16.0-0"
 keywords:
  - dendrite
@@ -87,5 +87,5 @@ dependencies:
    condition: dendrite.polylithEnabled
 annotations:
  artifacthub.io/changes: |
-    - kind: changed
-      description: Bumped app version to v0.6.3
+    - kind: fixed
+      description: Fixed image tag not being followed in polylith deployments
--- a/charts/incubator/dendrite/README.md
+++ b/charts/incubator/dendrite/README.md
@@ -1,6 +1,6 @@
 # dendrite

-![Version: 3.0.1](https://img.shields.io/badge/Version-3.0.1-informational?style=flat-square) ![AppVersion: v0.6.3](https://img.shields.io/badge/AppVersion-v0.6.3-informational?style=flat-square)
+![Version: 3.0.2](https://img.shields.io/badge/Version-3.0.2-informational?style=flat-square) ![AppVersion: v0.6.3](https://img.shields.io/badge/AppVersion-v0.6.3-informational?style=flat-square)

 Dendrite Matrix Homeserver

@@ -179,7 +179,7 @@ For more information see:

 ## Changelog

-### Version 3.0.1
+### Version 3.0.2

 #### Added

@@ -187,11 +187,11 @@ N/A

 #### Changed

-* Bumped app version to v0.6.3
+N/A

 #### Fixed

-N/A
+* Fixed image tag not being followed in polylith deployments

 ### Older versions

--- a/charts/incubator/dendrite/templates/common.yaml
+++ b/charts/incubator/dendrite/templates/common.yaml
@@ -4,7 +4,7 @@
    {{- include "common.values.setup" (index $.Subcharts .) }}
    {{- with (index $.Values .) }}
      {{- with .image }}
-        {{- $_ := set . "tag" (default .tag $.Chart.AppVersion) -}}
+        {{- $_ := set . "tag" (default $.Chart.AppVersion .tag) -}}
      {{- end -}}
      {{- if not .persistence }}
        {{- $_ := set . "persistence" (dict)}}
--- a/charts/incubator/dendrite/values.yaml
+++ b/charts/incubator/dendrite/values.yaml
@@ -229,7 +229,7 @@ syncapi:
    repository: matrixdotorg/dendrite-polylith
    # -- image tag
    # @default -- chart.appVersion
-    tag:
+    tag: latest
    # -- image pull policy
    pullPolicy: IfNotPresent
  service:
--- a/charts/stable/influxdb-exporter/Chart.yaml
+++ b/charts/stable/influxdb-exporter/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
-appVersion: 0.8.1
+appVersion: v0.9.0
 description: An exporter for metrics in the InfluxDB format, transforms them and exposes them for consumption by Prometheus.
 name: influxdb-exporter
-version: 1.0.1
+version: 1.0.2
 kubeVersion: ">=1.16.0-0"
 keywords:
  - influxdb-exporter
@@ -20,4 +20,4 @@ dependencies:
 annotations:
  artifacthub.io/changes: |
    - kind: fixed
-      description: Add the description and custom configuration to the README.md
+      description: Update image to 0.9.0 (InfluxDB v2 clients support), use differnt port for UDP.
--- a/charts/stable/influxdb-exporter/README.md
+++ b/charts/stable/influxdb-exporter/README.md
@@ -1,6 +1,6 @@
 # influxdb-exporter

-![Version: 1.0.1](https://img.shields.io/badge/Version-1.0.1-informational?style=flat-square) ![AppVersion: 0.8.1](https://img.shields.io/badge/AppVersion-0.8.1-informational?style=flat-square)
+![Version: 1.0.2](https://img.shields.io/badge/Version-1.0.2-informational?style=flat-square) ![AppVersion: v0.9.0](https://img.shields.io/badge/AppVersion-v0.9.0-informational?style=flat-square)

 An exporter for metrics in the InfluxDB format, transforms them and exposes them for consumption by Prometheus.

@@ -91,11 +91,12 @@ Override the default container `args:` with optons:

 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
+| args | list | `["--udp.bind-address=0.0.0.0:9123"]` | Override the args for the default container |
 | env | object | See below | environment variables. See more environment variables in the [influxdb-exporter documentation](https://influxdb-exporter.org/docs). |
 | env.TZ | string | `"UTC"` | Set the container timezone |
 | image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
 | image.repository | string | `"prom/influxdb-exporter"` | image repository |
-| image.tag | string | `"v0.8.1"` | image tag |
+| image.tag | string | `"v0.9.0"` | image tag |
 | metrics.enabled | bool | See values.yaml | Enable and configure prometheus-qbittorrent-exporter sidecar and Prometheus podMonitor. |
 | metrics.serviceMonitor.interval | string | `"15s"` |  |
 | metrics.serviceMonitor.labels | object | `{}` |  |
@@ -104,7 +105,7 @@ Override the default container `args:` with optons:

 ## Changelog

-### Version 1.0.1
+### Version 1.0.2

 #### Added

@@ -116,7 +117,7 @@ N/A

 #### Fixed

-* Add the description and custom configuration to the README.md
+* Update image to 0.9.0 (InfluxDB v2 clients support), use differnt port for UDP.

 ### Older versions

--- a/charts/stable/influxdb-exporter/templates/servicemonitor.yaml
+++ b/charts/stable/influxdb-exporter/templates/servicemonitor.yaml
@@ -13,7 +13,7 @@ spec:
    matchLabels:
      {{- include "common.labels.selectorLabels" . | nindent 6 }}
  endpoints:
-    - port: main
+    - port: http
      {{- with .Values.metrics.serviceMonitor.interval }}
      interval: {{ . }}
      {{- end }}
@@ -21,7 +21,7 @@ spec:
      scrapeTimeout: {{ . }}
      {{- end }}
      path: /metrics
-    - port: main
+    - port: http
      {{- with .Values.metrics.serviceMonitor.interval }}
      interval: {{ . }}
      {{- end }}
--- a/charts/stable/influxdb-exporter/values.yaml
+++ b/charts/stable/influxdb-exporter/values.yaml
@@ -9,7 +9,7 @@ image:
  # -- image repository
  repository: prom/influxdb-exporter
  # -- image tag
-  tag: v0.8.1
+  tag: v0.9.0
  # -- image pull policy
  pullPolicy: IfNotPresent

@@ -19,6 +19,10 @@ env:
  # -- Set the container timezone
  TZ: UTC

+# -- Override the args for the default container
+args:
+  - "--udp.bind-address=0.0.0.0:9123"
+
 # -- Configures service settings for the chart.
 # @default -- See values.yaml
 service:
@@ -27,15 +31,17 @@ service:
    ports:
      http:
        port: 9122
+        targetPort: 9122
  udp:
    enabled: true
    type: LoadBalancer
+    loadBalancerIP: ""
    ports:
      udp:
        enabled: true
-        port: 9122
        protocol: UDP
-        targetPort: 9122
+        port: 9123
+        targetPort: 9123

 metrics:
  # -- Enable and configure prometheus-qbittorrent-exporter sidecar and Prometheus podMonitor.
--- a/charts/stable/mealie/Chart.yaml
+++ b/charts/stable/mealie/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
-appVersion: v0.5.1
+appVersion: v0.5.6
 description: Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family.
 name: mealie
-version: 3.3.0
+version: 4.0.0
 kubeVersion: ">=1.16.0-0"
 keywords:
  - grocy
@@ -24,6 +24,6 @@ dependencies:
 annotations:
  artifacthub.io/changes: |
    - kind: changed
-      description: Upgraded `common` chart dependency to version `4.3.0`.
+      description: Upgraded app version `v0.5.6`.
    - kind: changed
-      description: Upgraded `postgresql` chart dependency to version `10.14.4`.
+      description: Removed deprecated DB_TYPE environment variable in favour of DB_ENGINE.
--- a/charts/stable/mealie/README.md
+++ b/charts/stable/mealie/README.md
@@ -1,6 +1,6 @@
 # mealie

-![Version: 3.3.0](https://img.shields.io/badge/Version-3.3.0-informational?style=flat-square) ![AppVersion: v0.5.1](https://img.shields.io/badge/AppVersion-v0.5.1-informational?style=flat-square)
+![Version: 4.0.0](https://img.shields.io/badge/Version-4.0.0-informational?style=flat-square) ![AppVersion: v0.5.6](https://img.shields.io/badge/AppVersion-v0.5.6-informational?style=flat-square)

 Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family.

@@ -77,11 +77,11 @@ N/A
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | env | object | See below | environment variables. See [image docs](https://hay-kot.github.io/mealie/documentation/getting-started/install/#env-variables) for more details. |
-| env.DB_TYPE | string | `"sqlite"` | Set the application database type |
+| env.DB_ENGINE | string | `"sqlite"` | Set the application database type |
 | env.TZ | string | `"UTC"` | Set the container timezone |
 | image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
 | image.repository | string | `"hkotel/mealie"` | image repository |
-| image.tag | string | `"v0.5.1"` | image tag |
+| image.tag | string | chart.appVersion | image tag |
 | ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
 | persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
 | postgresql | object | See values.yaml | Enable and configure postgresql database subchart under this key.    For more options see [postgresql chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/postgresql) |
@@ -89,7 +89,7 @@ N/A

 ## Changelog

-### Version 3.3.0
+### Version 4.0.0

 #### Added

@@ -97,8 +97,8 @@ N/A

 #### Changed

-* Upgraded `common` chart dependency to version `4.3.0`.
-* Upgraded `postgresql` chart dependency to version `10.14.4`.
+* Upgraded app version `v0.5.6`.
+* Removed deprecated DB_TYPE environment variable in favour of DB_ENGINE.

 #### Fixed

--- a/charts/stable/mealie/values.yaml
+++ b/charts/stable/mealie/values.yaml
@@ -9,7 +9,8 @@ image:
  # -- image repository
  repository: hkotel/mealie
  # -- image tag
-  tag: v0.5.1
+  # @default -- chart.appVersion
+  tag:
  # -- image pull policy
  pullPolicy: IfNotPresent

@@ -19,7 +20,7 @@ env:
  # -- Set the container timezone
  TZ: UTC
  # -- Set the application database type
-  DB_TYPE: sqlite
+  DB_ENGINE: sqlite

 # -- Configures service settings for the chart.
 # @default -- See values.yaml
--- a/charts/stable/monica/Chart.yaml
+++ b/charts/stable/monica/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: 3.7.0-apache
 description: A Personal Relationship Management tool to help you organize your social life
 name: monica
-version: 7.0.1
+version: 7.0.2
 kubeVersion: ">=1.16.0-0"
 keywords:
  - crm
@@ -25,4 +25,4 @@ dependencies:
 annotations:
  artifacthub.io/changes: |
    - kind: changed
-      description: Upgraded app to version `3.7.0-apache` from `3.1.1-apache`.
+      description: Removed the forced env {} so they can be populated elsewhere (envFrom secrets for example)
--- a/charts/stable/monica/README.md
+++ b/charts/stable/monica/README.md
@@ -1,6 +1,6 @@
 # monica

-![Version: 7.0.1](https://img.shields.io/badge/Version-7.0.1-informational?style=flat-square) ![AppVersion: 3.7.0-apache](https://img.shields.io/badge/AppVersion-3.7.0--apache-informational?style=flat-square)
+![Version: 7.0.2](https://img.shields.io/badge/Version-7.0.2-informational?style=flat-square) ![AppVersion: 3.7.0-apache](https://img.shields.io/badge/AppVersion-3.7.0--apache-informational?style=flat-square)

 A Personal Relationship Management tool to help you organize your social life

@@ -79,12 +79,6 @@ N/A
 |-----|------|---------|-------------|
 | env | object | See below | environment variables. See [monica documentation](https://raw.githubusercontent.com/monicahq/monica/master/.env.example) for more details. |
 | env.APP_ENV | string | `"production"` | Use `local` if you want to install Monica as a development version. Use `production` otherwise. |
-| env.APP_KEY | string | `nil` | The encryption key. This is the most important part of the application. Keep this secure otherwise, everyone will be able to access your application. Must be 32 characters long exactly. Use `php artisan key:generate` or `echo -n 'base64:'; openssl rand -base64 32` to generate a random key. |
-| env.APP_URL | string | `"https://crm.k8s-at-home.com"` | The URL of your application. |
-| env.DB_DATABASE | string | `nil` | Database to connect to |
-| env.DB_HOST | string | `nil` | Database hostname |
-| env.DB_PASSWORD | string | `nil` | Database password |
-| env.DB_USERNAME | string | `nil` | Database username |
 | env.TZ | string | `"UTC"` | Set the container timezone |
 | image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
 | image.repository | string | `"monica"` | image repository |
@@ -96,7 +90,7 @@ N/A

 ## Changelog

-### Version 7.0.1
+### Version 7.0.2

 #### Added

@@ -104,7 +98,7 @@ N/A

 #### Changed

-* Upgraded app to version `3.7.0-apache` from `3.1.1-apache`.
+* Removed the forced env {} so they can be populated elsewhere (envFrom secrets for example)

 #### Fixed

--- a/charts/stable/monica/values.yaml
+++ b/charts/stable/monica/values.yaml
@@ -21,21 +21,16 @@ env:
  TZ: UTC
  # -- Use `local` if you want to install Monica as a development version. Use `production` otherwise.
  APP_ENV: production
-  # -- The encryption key. This is the most important part of the application.
+  # APP_KEY -- The encryption key. This is the most important part of the application.
  # Keep this secure otherwise, everyone will be able to access your application.
  # Must be 32 characters long exactly.
  # Use `php artisan key:generate` or `echo -n 'base64:'; openssl rand -base64 32` to generate a random key.
-  APP_KEY:
  # -- The URL of your application.
  APP_URL: https://crm.k8s-at-home.com
-  # -- Database hostname
-  DB_HOST:  # monica-mariadb
-  # -- Database to connect to
-  DB_DATABASE:  # monica
-  # -- Database username
-  DB_USERNAME:  # monica
-  # -- Database password
-  DB_PASSWORD:  # monicapass
+  # DB_HOST -- Database hostname
+  # DB_DATABASE -- Database to connect to
+  # DB_USERNAME -- Database username
+  # DB_PASSWORD -- Database password

 # -- Configures service settings for the chart.
 # @default -- See values.yaml
--- a/charts/stable/otel-collector/.helmignore
+++ b/charts/stable/otel-collector/.helmignore
@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
--- a/charts/stable/otel-collector/Chart.yaml
+++ b/charts/stable/otel-collector/Chart.yaml
@@ -0,0 +1,23 @@
+apiVersion: v2
+appVersion: 0.46.0
+description: OpenTelemetry collector helm package
+name: otel-collector
+version: 1.0.0
+kubeVersion: ">=1.16.0-0"
+keywords:
+- otel-collector, open telemetry, tracing
+home: https://github.com/k8s-at-home/charts/tree/master/charts/stable/otel-collector
+icon: https://otel-collector.org/icon
+sources:
+- https://github.com/otel-collector/otel-collector-docker
+maintainers:
+- name: mterhar
+  email: mike@terhar.com
+dependencies:
+- name: common
+  repository: https://library-charts.k8s-at-home.com
+  version: 4.3.0
+annotations:
+  artifacthub.io/changes: |
+    - kind: added
+      description: Initial version
--- a/charts/stable/otel-collector/README.md
+++ b/charts/stable/otel-collector/README.md
@@ -0,0 +1,50 @@
+# otel-collector
+
+![Version: 1.0.0](https://img.shields.io/badge/Version-1.0.0-informational?style=flat-square) ![AppVersion: 0.46.0](https://img.shields.io/badge/AppVersion-0.46.0-informational?style=flat-square)
+
+OpenTelemetry collector helm package
+
+**Homepage:** <https://github.com/k8s-at-home/charts/tree/master/charts/stable/otel-collector>
+
+## Maintainers
+
+| Name | Email | Url |
+| ---- | ------ | --- |
+| mterhar | mike@terhar.com |  |
+
+## Source Code
+
+* <https://github.com/otel-collector/otel-collector-docker>
+
+## Requirements
+
+Kubernetes: `>=1.16.0-0`
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://library-charts.k8s-at-home.com | common | 4.3.0 |
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| configFile | string | `nil` | Create a new secret with the following multi-line spec which gets mounted to /conf/otel-collector-config.yaml. For more information, see the [otel docs](https://opentelemetry.io/docs/collector/configuration/) |
+| configFileSecret | string | `nil` | Configure the open telemetry secret using an existing secret or create a configuration file using the `configFile` below The secret needs a single key inside it called `otelConfigFile` |
+| image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
+| image.repository | string | `"otel/opentelemetry-collector-contrib"` | image repository |
+| image.tag | string | `nil` | image tag |
+| ingress.main | object | disabled | Enable and configure ingress settings for the chart under this key. This OTEL Collector is built to trust items within the same cluster so exposing externally will allow unauthenticated traces to be processed. |
+| metrics.enabled | bool | enabled: false is set so it can scrape itself but | Configure Prometheus serviceMonitor for the built-in exporter. circular dependencies are never good enable this for a secondary scraper |
+| metrics.prometheusRule | object | See values.yaml | Enable and configure Prometheus Rules for the chart under this key. |
+| metrics.prometheusRule.rules | list | See prometheusrules.yaml | Configure additionial rules for the chart under this key. |
+| metrics.serviceMonitor.interval | string | `"3m"` |  |
+| metrics.serviceMonitor.labels | object | `{}` |  |
+| metrics.serviceMonitor.scrapeTimeout | string | `"1m"` |  |
+| probes | object | expects config to include `extensions:health_check:endpoint: 0.0.0.0:13133` | probes is configured to use an otel extension to get health information from the pod |
+| service | object | The defaults expose the services needed to receive http and otlp traces | Configures service settings for the chart. |
+| serviceAccount.annotations | object | `{}` | Annotations to add to the service account |
+| serviceAccount.create | bool | `false` | Specifies whether a service account should be created |
+| serviceAccount.name | string | `""` | The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v1.7.0](https://github.com/norwoodj/helm-docs/releases/v1.7.0)
--- a/charts/stable/otel-collector/README_CONFIG.md.gotmpl
+++ b/charts/stable/otel-collector/README_CONFIG.md.gotmpl
@@ -0,0 +1,105 @@
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+The open telemetry collector is used to receive, process, and deliver open telemetry traces to a backend.
+There are many backends that can be used by setting "exporter" configurations.
+The example configuration in the repository sends data to [Honeycomb.io](https://honeycomb.io) since they provide a free plan with 50,000,000 events per month.
+See the values.yaml file for an example configuration and reference the [Open Telemetry docs](https://opentelemetry.io/docs/collector/configuration/) for additional options.
+
+Be sure to replace all configurations in the values file which are encased in double brackets like `[[something]]`.
+The example below has many different telemetry system configurations for example purposes.
+Most people will have only one telemetry backend, though the example shows how to send to multiple.
+If you do not wish to use a service, for example to remove NewRelic delete the exporter called `otlp/newrelic` and then remove pipeline `traces/2` which sends to that exporter and remove the `otlp/newrelic` exporter from the metrics pipeline.
+
+```yaml
+configFile: |-
+  receivers:
+    otlp:
+      protocols:
+        grpc:
+          endpoint: "0.0.0.0:4317"
+        http:
+          endpoint: "0.0.0.0:4318"
+  processors:
+    batch:
+    memory_limiter:
+      # 80% of maximum memory up to 2G
+      limit_mib: 1500
+      # 25% of limit up to 2G
+      spike_limit_mib: 512
+      check_interval: 5s
+
+  extensions:
+    health_check:
+      endpoint: 0.0.0.0:13133
+    zpages: {}
+    memory_ballast:
+      # Memory Ballast size should be max 1/3 to 1/2 of memory.
+      size_mib: 683
+  exporters:
+    logging:
+      logLevel: debug
+
+    otlp/honeycombtraces:
+      endpoint: api.honeycomb.io:443
+      headers:
+        x-honeycomb-team: [[YourAPIKeyHere]]
+        x-honeycomb-dataset: [[YouApplicationDataSetHere]]
+
+    otlp/newrelic:
+      endpoint: otlp.nr-data.net:4317
+      headers:
+        api-key: [[YourTokenHere]]
+
+    otlp/lightstep:
+      endpoint: ingest.lightstep.com:443
+      headers:
+        {"lightstep-access-token": "[[YourTokenHere]]"}
+
+    otlp/sapm:
+      access_token: [[YourTokenHere]]
+      access_token_passthrough: true
+      endpoint: https://ingest.us0.otlp/signalfx.com/v2/trace
+      max_connections: 100
+      num_workers: 8
+
+    otlp/signalfx:
+      access_token: [[YourTokenHere]]
+      realm: us0
+      correlation:
+
+  service:
+    extensions: [zpages, memory_ballast, health_check]
+    pipelines:
+      traces:
+        receivers: [otlp]
+        processors: [memory_limiter, batch]
+        exporters: [otlp/honeycombtraces]
+
+      traces/2:
+        receivers: [otlp]
+        processors: [memory_limiter, batch]
+        exporters: [otlp/newrelic]
+
+      traces/3:
+        receivers: [otlp]
+        processors: [memory_limiter, attributes, batch]
+        exporters: [otlp/sapm, otlp/signalfx]
+
+      traces/4:
+        receivers: [otlp]
+        processors: [memory_limiter, batch]
+        exporters: [otlp/lightstep]
+```
+
+To get the secret for troubleshooting, you can use a command like:
+
+```bash
+kubectl get secret -A --selector=configsecret=otelcollector -o go-template='{{range .items}}{{"----\n# "}}{{ .metadata.name }}{{"."}}{{ .metadata.namespace }}{{":"}}{{"\n"}}{{.data.otelConfigFile|base64decode}}{{end}}'
+```
+
+{{- end -}}
--- a/charts/stable/otel-collector/templates/NOTES.txt
+++ b/charts/stable/otel-collector/templates/NOTES.txt
@@ -0,0 +1,6 @@
+Send telemetry to this pod via the clusterIP:
+
+1. http://{{ include "common.names.fullname" . }}.{{ .Release.Namespace }}:{{ .Values.service.otlpports.ports.otlpgrpc.port }}
+2. GRPC to {{ include "common.names.fullname" . }}.{{ .Release.Namespace }}:{{ .Values.service.otlpports.ports.otlphttp.port }}
+
+It will then be processed and sent to exporters based on the configFile or configFileSecret.
--- a/charts/stable/otel-collector/templates/common.yaml
+++ b/charts/stable/otel-collector/templates/common.yaml
@@ -0,0 +1,28 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "common.values.setup" . }}
+
+{{/* Append the hardcoded settings */}}
+{{- define "otel-collector.harcodedValues" -}}
+  {{/* merge config file path argument which is hard coded*/}}
+  args:
+  - "--config=/conf/otel-collector-config.yaml"
+
+  {{/* Append the config secret volume to the volumes */}}
+  persistence:
+    otel-config-file:
+      enabled: true
+      type: "custom"
+      mountPath: "/conf/otel-collector-config.yaml"
+      subPath: "otelConfigFile"
+      volumeSpec:
+        secret:
+          {{- if .Values.configFileSecret }}
+          secretName: "{{ .Values.configSecretName }}"
+          {{- else }}
+          secretName: "{{ include "common.names.fullname" . }}-otelconfig"
+          {{- end }}
+{{- end -}}
+{{- $_ := mergeOverwrite .Values (include "otel-collector.harcodedValues" . | fromYaml) -}}
+
+
+{{ include "common.all" . }}
--- a/charts/stable/otel-collector/templates/secret.yaml
+++ b/charts/stable/otel-collector/templates/secret.yaml
@@ -0,0 +1,18 @@
+{{/*
+The open telemetry config secret to be included.
+*/}}
+{{- if and .Values.configFile (not .Values.configFileSecret) }}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "common.names.fullname" . }}-otelconfig
+  labels:
+    configsecret: otelcollector
+    {{- include "common.labels" $ | nindent 4 }}
+stringData:
+  {{- with .Values.configFile }}
+  otelConfigFile: |-
+    {{- . | nindent 4}}
+  {{- end }}
+{{- end -}}
--- a/charts/stable/otel-collector/templates/servicemonitor.yaml
+++ b/charts/stable/otel-collector/templates/servicemonitor.yaml
@@ -0,0 +1,24 @@
+{{- if .Values.metrics.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: {{ include "common.names.fullname" . }}
+  labels:
+    {{- include "common.labels" . | nindent 4 }}
+    {{- with .Values.metrics.serviceMonitor.labels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+spec:
+  selector:
+    matchLabels:
+      {{- include "common.labels.selectorLabels" . | nindent 6 }}
+  endpoints:
+    - port: metrics
+      {{- with .Values.metrics.serviceMonitor.interval }}
+      interval: {{ . }}
+      {{- end }}
+      {{- with .Values.metrics.serviceMonitor.scrapeTimeout }}
+      scrapeTimeout: {{ . }}
+      {{- end }}
+      path: /
+{{- end }}
--- a/charts/stable/otel-collector/values.yaml
+++ b/charts/stable/otel-collector/values.yaml
@@ -0,0 +1,151 @@
+#
+# IMPORTANT NOTE
+#
+# This chart inherits from our common library chart. You can check the default values/options here:
+# https://github.com/k8s-at-home/library-charts/tree/main/charts/stable/common/values.yaml
+#
+
+image:
+  # -- image repository
+  repository: otel/opentelemetry-collector-contrib
+  # -- image tag
+  tag:
+  # -- image pull policy
+  pullPolicy: IfNotPresent
+
+# -- Configures service settings for the chart.
+# @default -- The defaults expose the services needed to receive http and otlp traces
+service:
+  main:
+    enabled: false
+  otlpports:
+    enabled: true
+    type: ClusterIP
+    ports:
+      # Default endpoint for OpenTelemetry gRPC receiver.
+      otlpgrpc:
+        enabled: true
+        protocol: TCP
+        port: 4317
+        targetPort: 4317
+      # Default endpoint for OpenTelemetry HTTP receiver.
+      otlphttp:
+        enabled: true
+        protocol: TCP
+        port: 4318
+        targetPort: 4318
+      # Default endpoint for querying metrics.
+      metrics:
+        enabled: true
+        protocol: TCP
+        port: 8888
+        targetPort: 8888
+
+# -- probes is configured to use an otel extension to get health information from the pod
+# @default -- expects config to include `extensions:health_check:endpoint: 0.0.0.0:13133`
+probes:
+  liveness:
+    enabled: true
+    custom: true
+    spec:
+      initialDelaySeconds: 30
+      periodSeconds: 10
+      timeoutSeconds: 1
+      failureThreshold: 3
+      httpGet:
+        path: /
+        port: 13133
+  readiness:
+    enabled: false
+  startup:
+    enabled: false
+
+ingress:
+  # -- Enable and configure ingress settings for the chart under this key.
+  # This OTEL Collector is built to trust items within the same cluster so
+  # exposing externally will allow unauthenticated traces to be processed.
+  # @default -- disabled
+  main:
+    enabled: false
+
+# -- Configure the open telemetry secret using an existing secret or create
+# a configuration file using the `configFile` below
+# The secret needs a single key inside it called `otelConfigFile`
+configFileSecret:
+
+# -- Create a new secret with the following multi-line spec which gets mounted
+# to /conf/otel-collector-config.yaml. For more information, see the
+# [otel docs](https://opentelemetry.io/docs/collector/configuration/)
+configFile: |-
+  receivers:
+    otlp:
+      protocols:
+        grpc:
+          endpoint: "0.0.0.0:4317"
+        http:
+          endpoint: "0.0.0.0:4318"
+  processors:
+    batch:
+    memory_limiter:
+      # 80% of maximum memory up to 2G
+      limit_mib: 1500
+      # 25% of limit up to 2G
+      spike_limit_mib: 512
+      check_interval: 5s
+
+  extensions:
+    health_check:
+      endpoint: 0.0.0.0:13133
+    zpages: {}
+    memory_ballast:
+      # Memory Ballast size should be max 1/3 to 1/2 of memory.
+      size_mib: 683
+  exporters:
+    logging:
+      logLevel: debug
+
+  service:
+    extensions: [zpages, memory_ballast, health_check]
+    pipelines:
+      traces:
+        receivers: [otlp]
+        processors: [memory_limiter, batch]
+        exporters: [logging]
+
+metrics:
+  # -- Configure Prometheus serviceMonitor for the built-in exporter.
+  # @default -- enabled: false is set so it can scrape itself but
+  # circular dependencies are never good enable this for a secondary scraper
+  enabled: false
+  serviceMonitor:
+    interval: 3m
+    scrapeTimeout: 1m
+    labels: {}
+  # -- Enable and configure Prometheus Rules for the chart under this key.
+  # @default -- See values.yaml
+  prometheusRule:
+    enabled: false
+    labels: {}
+    # -- Configure additionial rules for the chart under this key.
+    # @default -- See prometheusrules.yaml
+    rules: []
+      # - alert: OtelCollectorDown
+      #   annotations:
+      #     description: Otel Collector service is down.
+      #     summary: Otel Collector is down.
+      #   expr: |
+      #     up == 0
+      #   for: 5m
+      #   labels:
+      #     severity: critical
+
+serviceAccount:
+  # -- Specifies whether a service account should be created
+  create: false
+
+  # -- Annotations to add to the service account
+  annotations: {}
+
+  # -- The name of the service account to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name: ""
--- a/charts/stable/recipes/Chart.yaml
+++ b/charts/stable/recipes/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: 1.0.5.2
 description: Recipes is a Django application to manage, tag and search recipes using either built in models or external storage providers hosting PDF's, Images or other files.
 name: recipes
-version: 6.3.0
+version: 6.4.0
 kubeVersion: ">=1.16.0-0"
 keywords:
  - recipes
@@ -21,5 +21,5 @@ dependencies:
    version: 4.3.0
 annotations:
  artifacthub.io/changes: |
-    - kind: changed
-      description: Upgraded `tandoor` to version `1.0.5.2` and `nginx` sidecar `1.21.6`.
+    - kind: added
+      description: Support for reverse proxy authentication.
--- a/charts/stable/recipes/README.md
+++ b/charts/stable/recipes/README.md
@@ -1,6 +1,6 @@
 # recipes

-![Version: 6.3.0](https://img.shields.io/badge/Version-6.3.0-informational?style=flat-square) ![AppVersion: 1.0.5.2](https://img.shields.io/badge/AppVersion-1.0.5.2-informational?style=flat-square)
+![Version: 6.4.0](https://img.shields.io/badge/Version-6.4.0-informational?style=flat-square) ![AppVersion: 1.0.5.2](https://img.shields.io/badge/AppVersion-1.0.5.2-informational?style=flat-square)

 Recipes is a Django application to manage, tag and search recipes using either built in models or external storage providers hosting PDF's, Images or other files.

@@ -83,22 +83,23 @@ N/A
 | ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
 | persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
 | service | object | See values.yaml | Configures service settings for the chart. |
-| sidecar.config | object | `{"client_max_body_size":"128M"}` | specify nginx related configs |
+| sidecar.config.client_max_body_size | string | `"128M"` | define the max body size to allow larger files to be uploaded |
+| sidecar.config.reverse_proxy_header_username | string | `"x_authentik_username"` | define the name of the variable in the header containing the authenticated user. It is used together with enabling `REVERSE_PROXY_AUTH` |
 | sidecar.image.pullPolicy | string | `"IfNotPresent"` | nginx sidecar image pull policy |
 | sidecar.image.repository | string | `"nginx"` | nginx sidecar image repository |
 | sidecar.image.tag | string | `"1.21.6"` | nginx sidecar image tag |

 ## Changelog

-### Version 6.3.0
+### Version 6.4.0

 #### Added

-N/A
+* Support for reverse proxy authentication.

 #### Changed

-* Upgraded `tandoor` to version `1.0.5.2` and `nginx` sidecar `1.21.6`.
+N/A

 #### Fixed

--- a/charts/stable/recipes/templates/configmap.yaml
+++ b/charts/stable/recipes/templates/configmap.yaml
@@ -27,6 +27,7 @@ data:
        # pass requests for dynamic content to gunicorn
        location / {
          proxy_set_header Host $host;
+          proxy_set_header REMOTE-USER $http_{{ .Values.sidecar.config.reverse_proxy_header_username }};
          proxy_pass http://localhost:8080;
        }
      }
--- a/charts/stable/recipes/values.yaml
+++ b/charts/stable/recipes/values.yaml
@@ -21,9 +21,11 @@ sidecar:
    tag: 1.21.6
    # -- nginx sidecar image pull policy
    pullPolicy: IfNotPresent
-  # -- specify nginx related configs
  config:
+    # -- define the max body size to allow larger files to be uploaded
    client_max_body_size: "128M"
+    # -- define the name of the variable in the header containing the authenticated user. It is used together with enabling `REVERSE_PROXY_AUTH`
+    reverse_proxy_header_username: x_authentik_username

 # -- environment variables. See [project docs](https://raw.githubusercontent.com/vabene1111/recipes/master/.env.template) for more details.
 # @default -- See below
@@ -42,6 +44,7 @@ env:
  FRACTION_PREF_DEFAULT: "0"
  COMMENT_PREF_DEFAULT: "1"
  SHOPPING_MIN_AUTOSYNC_INTERVAL: "5"
+  REVERSE_PROXY_AUTH: 0

 # -- Configures service settings for the chart.
 # @default -- See values.yaml
--- a/charts/stable/wikijs/Chart.yaml
+++ b/charts/stable/wikijs/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: version-2.5.201
 description: Make documentation a joy to write using Wiki.js's beautiful and intuitive interface!
 name: wikijs
-version: 6.2.0
+version: 6.2.1
 kubeVersion: ">=1.16.0-0"
 keywords:
  - wiki
@@ -22,4 +22,4 @@ dependencies:
 annotations:
  artifacthub.io/changes: |
    - kind: changed
-      description: Upgraded `common` chart dependency to version `4.3.0`.
+      description: Removed the forced env {} so they can be populated elsewhere (envFrom secrets for example)
--- a/charts/stable/wikijs/README.md
+++ b/charts/stable/wikijs/README.md
@@ -1,6 +1,6 @@
 # wikijs

-![Version: 6.2.0](https://img.shields.io/badge/Version-6.2.0-informational?style=flat-square) ![AppVersion: version-2.5.201](https://img.shields.io/badge/AppVersion-version--2.5.201-informational?style=flat-square)
+![Version: 6.2.1](https://img.shields.io/badge/Version-6.2.1-informational?style=flat-square) ![AppVersion: version-2.5.201](https://img.shields.io/badge/AppVersion-version--2.5.201-informational?style=flat-square)

 Make documentation a joy to write using Wiki.js's beautiful and intuitive interface!

@@ -77,15 +77,6 @@ N/A
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | env | object | See below | environment variables. See [image docs](https://docs.linuxserver.io/images/docker-wikijs#environment-variables-e) for more details. |
-| env.DB_FILEPATH | string | `"/app/wiki/data/db.sqlite"` | Path to the SQLite file |
-| env.DB_NAME | string | `nil` | Database name |
-| env.DB_PASS | string | `nil` | Password to connect to the database |
-| env.DB_PASS_FILE | string | `nil` | Path to the mapped file containing to the database password. (optional, replaces `DB_PASS`) |
-| env.DB_PORT | string | `nil` | Port of the database |
-| env.DB_SSL | string | `nil` | Set to either 1 or true to enable. (optional, off if omitted) |
-| env.DB_SSL_CA | string | `nil` | Database CA certificate content, as a single line string (without spaces or new lines), without the prefix and suffix lines. (optional, requires 2.3+) |
-| env.DB_TYPE | string | `"sqlite"` | mysql, postgres, mariadb, mssql or sqlite |
-| env.DB_USER | string | `nil` | Username to connect to the database |
 | env.TZ | string | `"UTC"` | Set the container timezone |
 | image | object | `{"pullPolicy":"IfNotPresent","repository":"ghcr.io/linuxserver/wikijs","tag":"version-2.5.201"}` | This is the default, you can also use requarks/wiki |
 | image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
@@ -97,7 +88,7 @@ N/A

 ## Changelog

-### Version 6.2.0
+### Version 6.2.1

 #### Added

@@ -105,7 +96,7 @@ N/A

 #### Changed

-* Upgraded `common` chart dependency to version `4.3.0`.
+* Removed the forced env {} so they can be populated elsewhere (envFrom secrets for example)

 #### Fixed

--- a/charts/stable/wikijs/values.yaml
+++ b/charts/stable/wikijs/values.yaml
@@ -21,24 +21,15 @@ image:
 env:
  # -- Set the container timezone
  TZ: UTC
-  # -- mysql, postgres, mariadb, mssql or sqlite
-  DB_TYPE: sqlite
-  # -- Path to the SQLite file
-  DB_FILEPATH: /app/wiki/data/db.sqlite
-  # -- Port of the database
-  DB_PORT:
-  # -- Username to connect to the database
-  DB_USER:
-  # -- Password to connect to the database
-  DB_PASS:
-  # -- Database name
-  DB_NAME:
-  # -- Set to either 1 or true to enable. (optional, off if omitted)
-  DB_SSL:
-  # -- Database CA certificate content, as a single line string (without spaces or new lines), without the prefix and suffix lines. (optional, requires 2.3+)
-  DB_SSL_CA:
-  # -- Path to the mapped file containing to the database password. (optional, replaces `DB_PASS`)
-  DB_PASS_FILE:
+  # DB_TYPE -- mysql, postgres, mariadb, mssql or sqlite
+  # DB_FILEPATH -- Path to the SQLite file
+  # DB_PORT -- Port of the database
+  # DB_USER -- Username to connect to the database
+  # DB_PASS -- Password to connect to the database
+  # DB_NAME -- Database name
+  # DB_SSL -- Set to either 1 or true to enable. (optional, off if omitted)
+  # DB_SSL_CA -- Database CA certificate content, as a single line string (without spaces or new lines), without the prefix and suffix lines. (optional, requires 2.3+)
+  # DB_PASS_FILE -- Path to the mapped file containing to the database password. (optional, replaces `DB_PASS`)

 # -- Configures service settings for the chart.
 # @default -- See values.yaml
Author	SHA1	Message	Date
Angel Nunez Mencias	9a8fe0e854	[recipes] reverse proxy auth support (#1467 ) Co-authored-by: angelnu <git@angelnucom>	2022-03-28 09:31:43 +02:00
k8s-at-home[bot]	7b85e388a1	chore: Auto-update chart README [skip ci]	2022-03-20 21:24:08 +00:00
Francesco Astegiano	1d89c3f86e	[influxdb-exporter] update img to 0.9.0, use other port for UDP (#1453 ) * [influxdb-exporter] update img to 0.9.0, use other port for UDP Signed-off-by: Francesco Astegiano <francesco.astegiano@gmail.com> * [influxdb-exporter] Fix ServiceMonitor port Signed-off-by: Francesco Astegiano <francesco.astegiano@gmail.com>	2022-03-20 17:23:40 -04:00
k8s-at-home[bot]	236bd21e02	chore: Auto-update chart README [skip ci]	2022-03-20 21:22:58 +00:00
Gavin Mogan	dc60a1911c	Remove default empty env variables for monica - along the same lines as #1455 (#1460 ) Signed-off-by: Gavin Mogan <git@gavinmogan.com>	2022-03-20 17:22:34 -04:00
k8s-at-home[bot]	a10c53cce3	chore: Auto-update chart README [skip ci]	2022-03-19 11:16:10 +00:00
Gavin Mogan	7f3a976430	Remove default empty env variables for wikijs - fixes #1455 (#1456 ) Signed-off-by: Gavin Mogan <git@gavinmogan.com>	2022-03-19 07:15:44 -04:00
k8s-at-home[bot]	1f35105f3c	Auto-generate chart summary [no ci]	2022-03-14 19:14:14 +00:00
Mike Terhar	7c19db377d	[otel-collector] add open telemetry collector with example config (#1447 ) Co-authored-by: Mike Terhar <mike@terhar.com> Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>	2022-03-14 15:13:08 -04:00
k8s-at-home[bot]	798bfdf3af	chore: Auto-update chart README [skip ci]	2022-03-11 17:11:43 +00:00
Jonathan Bartlett	0fa3722295	Remove deprecated env and update app version (#1452 )	2022-03-11 12:10:24 -05:00
k8s-at-home[bot]	e1d68c84f2	chore: Auto-update chart README [skip ci]	2022-03-11 17:10:15 +00:00
Jonathan Bartlett	05af1b178a	Fix image tag not followed in polylith (#1451 )	2022-03-11 12:09:43 -05:00
k8s-at-home[bot]	8856491aaa	Auto-generate chart summary [no ci]	2022-03-11 13:13:34 +00:00