[statping] Update helm chart postgresql to v9.8.12 (#203)

Co-authored-by: Renovate Bot <bot@renovateapp.com>

.github/ct.yaml

@@ -1,8 +1,10 @@
+remote: origin
+target-branch: master
 helm-extra-args: --timeout 600s
 chart-dirs:
   - charts
+excluded-charts:
+  - common
 chart-repos:
   - bitnami=https://charts.bitnami.com/bitnami
   - k8s-at-home=https://k8s-at-home.com/charts
-excluded-charts:
-  - common

.github/renovate.json

@@ -0,0 +1,26 @@
+{
+  "enabled": true,
+  "gitAuthor": "Renovate Bot <renovate@whitesourcesoftware.com>",
+  "commitMessagePrefix": "[{{{parentDir}}}]",
+  "branchTopic": "{{{parentDir}}}-{{{depNameSanitized}}}-{{{newMajor}}}{{#if isPatch}}.{{{newMinor}}}{{/if}}.x{{#if isLockfileUpdate}}-lockfile{{/if}}",
+  "assigneesFromCodeOwners": true,
+  "reviewersFromCodeOwners": true,
+  "helm-values": {
+    "enabled": false
+  },
+  "helmv3": {
+    "fileMatch": ["charts/.+/Chart\\.yaml$"]
+  },
+  "packageRules": [
+    {
+      "updateTypes": ["major"],
+      "bumpVersion": "major",
+      "labels": ["dependency/major"]
+    },
+    {
+      "updateTypes": ["minor", "patch"],
+      "bumpVersion": "minor",
+      "labels": ["dependency/minor"]
+    }
+  ]
+}

.github/workflows/lint-test.yaml

@@ -1,28 +1,45 @@
 name: Lint and Test Charts
+
 on: pull_request
+
 jobs:
   lint-test:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v2
-      - name: Fetch history
+        with:
+          fetch-depth: 0
+
+      - name: Install Helm
+        uses: azure/setup-helm@v1
+        with:
+          version: v3.4.0
+
+      - uses: actions/setup-python@v2
+        with:
+          python-version: 3.7
+
+      - name: Set up chart-testing
+        uses: helm/chart-testing-action@v2.0.1
+
+      - name: Run chart-testing (list-changed)
+        id: list-changed
         run: |
-          git fetch --prune --unshallow;
-          echo "commitmsg=$(git log --format=%B -n 1 ${{ github.event.after }})" >> $GITHUB_ENV
+          changed=$(ct list-changed --config .github/ct.yaml)
+          if [[ -n "$changed" ]]; then
+            echo "::set-output name=changed::true"
+          fi
+
       - name: Run chart-testing (lint)
         id: lint
-        uses: helm/chart-testing-action@v1.0.0
-        if: "! contains(env.commitmsg, '[skip lint]')"
-        with:
-          command: lint
-          config: ct.yaml
+        run: ct lint --config .github/ct.yaml
+        if: steps.list-changed.outputs.changed == 'true'
+
       - name: Create kind cluster
-        uses: helm/kind-action@v1.0.0
-        if: "steps.lint.outputs.changed == 'true' && ! contains(env.commitmsg, '[skip install]')"
+        uses: helm/kind-action@v1.1.0
+        if: steps.list-changed.outputs.changed == 'true'
+
       - name: Run chart-testing (install)
-        uses: helm/chart-testing-action@v1.0.0
-        if: "steps.lint.outputs.changed == 'true' && ! contains(env.commitmsg, '[skip install]')"
-        with:
-          command: install
-          config: ct.yaml
+        run: ct install --config .github/ct.yaml
+        if: steps.list-changed.outputs.changed == 'true'

.github/workflows/release.yaml

@@ -1,10 +1,11 @@
-
 name: Release Charts
 
 on:
   push:
     branches:
       - master
+    paths:
+      - "charts/**"
 
 jobs:
   release:
@@ -13,6 +14,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
 
       - name: Turnstyle
         uses: softprops/turnstyle@v1
@@ -21,25 +24,47 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Fetch history
-        run: git fetch --prune --unshallow
+      - name: Configure Git
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
+
+      - name: Install Helm
+        uses: azure/setup-helm@v1
+        with:
+          version: v3.4.0
+
+      - name: Run chart-releaser
+        uses: helm/chart-releaser-action@v1.1.0
+        with:
+          charts_repo_url: https://k8s-at-home.com/charts/
+        env:
+          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+  
+  # Update the generated timestamp in the index.yaml
+  # needed until https://github.com/helm/chart-releaser/issues/90
+  # or helm/chart-releaser-action supports this
+  post-release:
+    runs-on: ubuntu-latest
+    needs: release
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          ref: "gh-pages"
+          fetch-depth: 0
 
       - name: Configure Git
         run: |
           git config user.name "$GITHUB_ACTOR"
           git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
-      # See https://github.com/helm/chart-releaser-action/issues/6
-      - name: Install Helm
+
+      - name: Commit and push timestamp updates
         run: |
-          curl -fsSLo get_helm.sh https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3
-          chmod 700 get_helm.sh
-          ./get_helm.sh
-      - name: Add dependency chart repos
-        run: |
-          helm repo add stable https://charts.helm.sh/stable
-      - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.0.0
-        with:
-          charts_repo_url: https://k8s-at-home.com/charts/
-        env:
-          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+          if [[ -f index.yaml ]]; then
+            export generated_date=$(date --utc +%FT%T.%9NZ)
+            sed -i -e "s/^generated:.*/generated: \"$generated_date\"/" index.yaml
+            git add index.yaml
+            git commit -sm "Update generated timestamp [ci-skip]" || exit 0
+            git push
+          fi

charts/powerdns/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 appVersion: v4.3.0
 description: PowerDNS is a DNS server, written in C++ and licensed under the GPL. It runs on most Unix derivatives. PowerDNS features a large number of different backends ranging from simple BIND style zonefiles to relational databases and load balancing/failover algorithms. A DNS recursor is provided as a separate program.
 name: powerdns
-version: 2.0.1
+version: 2.2.0
 home: https://www.powerdns.com/
 sources:
   - http://www.github.com/PowerDNS/
@@ -12,10 +12,10 @@ maintainers:
     email: ryan@ryanholt.net
 dependencies:
   - name: postgresql
-    version: 9.1.2
+    version: 9.8.12
     repository: https://charts.bitnami.com/bitnami
     condition: postgres.enabled
   - name: mariadb
-    version: 7.7.1
+    version: 7.10.4
     repository: https://charts.bitnami.com/bitnami
     condition: mariadb.enabled

charts/statping/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: statping
 description: Status page for monitoring your websites and applications
 type: application
-version: 1.0.1
+version: 1.1.0
 appVersion: v0.90.65
 keywords:
   - statping
@@ -18,5 +18,5 @@ icon: https://github.com/statping/statping/blob/dev/frontend/src/assets/logo.png
 dependencies:
   - name: postgresql
     repository: https://charts.bitnami.com/bitnami
-    version: 9.4.0
+    version: 9.8.12
     condition: postgres.posgresql.enabled

charts/traefik-forward-auth/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: traefik-forward-auth
 description: A minimal forward authentication service that provides OAuth/SSO login and authentication for the traefik reverse proxy/load balancer
 type: application
-version: 1.0.2
+version: 1.0.3
 appVersion: 2.2.0
 keywords:
   - traefik

charts/traefik-forward-auth/README.md

@@ -61,6 +61,7 @@ helm install traefik-forward-auth k8s-at-home/traefik-forward-auth --values valu
 | cookie.domain | string | `""` | Domain(s) to set auth cookie on. (Comma delimited) |
 | cookie.insecure | string | `""` | Use insecure cookies |
 | cookie.name | string | `""` | Cookie Name (default: _forward_auth) |
+| cookie.secret | string| `""` | Cookie Secret - useful when running multiple instances |
 | default.action | string | `""` | [auth|allow] Default action (default: auth) |
 | default.provider | string | `""` | [google|oidc|generic-oauth] Default provider (default: google) |
 | env | list | `[]` |  |

charts/traefik-forward-auth/templates/deployment.yaml

@@ -95,6 +95,13 @@ spec:
             - name: URL_PATH
               value: {{ .Values.urlPath | quote }}
             {{- end }}
+            {{- if .Values.cookie.secret }}
+            - name: COOKIE_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: {{ $fullName }}
+                  key: cookie-secret
+            {{- end }}
             {{- if ne .Values.secret "-" }}
             - name: SECRET
               {{- if .Values.secret }}

charts/traefik-forward-auth/templates/secret.yaml

@@ -1,4 +1,4 @@
-{{- if and (ne .Values.secret "-") (not .Values.secret) }}
+{{- if or (and (ne .Values.secret "-") (not .Values.secret)) .Values.cookie.secret }}
 apiVersion: v1
 kind: Secret
 metadata:
@@ -7,5 +7,10 @@ metadata:
   {{- include "traefik-forward-auth.labels" . | nindent 4 }}
 type: Opaque
 data:
+  {{- if not .Values.secret }}
   secret: {{ randAlphaNum 16 | b64enc | quote }}
-  {{- end }}
+  {{- end }}
+  {{- if .Values.cookie.secret }}
+  cookie-secret: {{ .Values.cookie.secret | b64enc | quote }}
+  {{- end }}
+  {{- end }}

charts/traefik-forward-auth/values.yaml

@@ -35,6 +35,8 @@ cookie:
   name: ""
   # cookie.csrfName -- CSRF Cookie Name (default: _forward_auth_csrf)
   csrfName: ""
+  # cookie.secret -- Cookie Secret used for authentication across multiple instances / clusters (default: randomly generated)
+  secret: ""
 default:
   # default.action -- [auth|allow] Default action (default: auth)
   action: ""