From 70118e5aeb620ddc2221dd0a3b075d9a9d803565 Mon Sep 17 00:00:00 2001 From: Thomas Blarre Date: Wed, 13 Nov 2024 18:47:14 +0000 Subject: [PATCH] Prepared vaultwarden --- vaultwarden-argocd-apps/.helmignore | 23 +++++++ vaultwarden-argocd-apps/Chart.yaml | 5 ++ .../templates/_helpers.tpl | 62 +++++++++++++++++++ vaultwarden-argocd-apps/values.yaml | 0 vaultwarden-postinstall/.helmignore | 23 +++++++ vaultwarden-postinstall/Chart.yaml | 5 ++ .../templates/_helpers.tpl | 62 +++++++++++++++++++ vaultwarden-postinstall/values.yaml | 0 vaultwarden-requirements/.helmignore | 23 +++++++ vaultwarden-requirements/Chart.yaml | 5 ++ .../templates/_helpers.tpl | 62 +++++++++++++++++++ .../templates/db-cluster.yaml | 8 +++ .../templates/vaultwarden-data.yaml | 11 ++++ vaultwarden-requirements/values.yaml | 8 +++ 14 files changed, 297 insertions(+) create mode 100644 vaultwarden-argocd-apps/.helmignore create mode 100644 vaultwarden-argocd-apps/Chart.yaml create mode 100644 vaultwarden-argocd-apps/templates/_helpers.tpl create mode 100644 vaultwarden-argocd-apps/values.yaml create mode 100644 vaultwarden-postinstall/.helmignore create mode 100644 vaultwarden-postinstall/Chart.yaml create mode 100644 vaultwarden-postinstall/templates/_helpers.tpl create mode 100644 vaultwarden-postinstall/values.yaml create mode 100644 vaultwarden-requirements/.helmignore create mode 100644 vaultwarden-requirements/Chart.yaml create mode 100644 vaultwarden-requirements/templates/_helpers.tpl create mode 100644 vaultwarden-requirements/templates/db-cluster.yaml create mode 100644 vaultwarden-requirements/templates/vaultwarden-data.yaml create mode 100644 vaultwarden-requirements/values.yaml diff --git a/vaultwarden-argocd-apps/.helmignore b/vaultwarden-argocd-apps/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/vaultwarden-argocd-apps/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/vaultwarden-argocd-apps/Chart.yaml b/vaultwarden-argocd-apps/Chart.yaml new file mode 100644 index 0000000..30cabad --- /dev/null +++ b/vaultwarden-argocd-apps/Chart.yaml @@ -0,0 +1,5 @@ +apiVersion: v2 +name: vaultwarden-argocd-apps +description: A Helm chart for Kubernetes +type: application +version: 0.1.0 diff --git a/vaultwarden-argocd-apps/templates/_helpers.tpl b/vaultwarden-argocd-apps/templates/_helpers.tpl new file mode 100644 index 0000000..71c0dfd --- /dev/null +++ b/vaultwarden-argocd-apps/templates/_helpers.tpl @@ -0,0 +1,62 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "vaultwarden-argocd-apps.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "vaultwarden-argocd-apps.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "vaultwarden-argocd-apps.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "vaultwarden-argocd-apps.labels" -}} +helm.sh/chart: {{ include "vaultwarden-argocd-apps.chart" . }} +{{ include "vaultwarden-argocd-apps.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "vaultwarden-argocd-apps.selectorLabels" -}} +app.kubernetes.io/name: {{ include "vaultwarden-argocd-apps.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "vaultwarden-argocd-apps.serviceAccountName" -}} +{{- if .Values.serviceAccount.create }} +{{- default (include "vaultwarden-argocd-apps.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} diff --git a/vaultwarden-argocd-apps/values.yaml b/vaultwarden-argocd-apps/values.yaml new file mode 100644 index 0000000..e69de29 diff --git a/vaultwarden-postinstall/.helmignore b/vaultwarden-postinstall/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/vaultwarden-postinstall/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/vaultwarden-postinstall/Chart.yaml b/vaultwarden-postinstall/Chart.yaml new file mode 100644 index 0000000..5b39f93 --- /dev/null +++ b/vaultwarden-postinstall/Chart.yaml @@ -0,0 +1,5 @@ +apiVersion: v2 +name: vaultwarden-postinstall +description: A Helm chart for Kubernetes +type: application +version: 0.1.0 diff --git a/vaultwarden-postinstall/templates/_helpers.tpl b/vaultwarden-postinstall/templates/_helpers.tpl new file mode 100644 index 0000000..f5f8d4e --- /dev/null +++ b/vaultwarden-postinstall/templates/_helpers.tpl @@ -0,0 +1,62 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "vaultwarden-postinstall.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "vaultwarden-postinstall.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "vaultwarden-postinstall.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "vaultwarden-postinstall.labels" -}} +helm.sh/chart: {{ include "vaultwarden-postinstall.chart" . }} +{{ include "vaultwarden-postinstall.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "vaultwarden-postinstall.selectorLabels" -}} +app.kubernetes.io/name: {{ include "vaultwarden-postinstall.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "vaultwarden-postinstall.serviceAccountName" -}} +{{- if .Values.serviceAccount.create }} +{{- default (include "vaultwarden-postinstall.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} diff --git a/vaultwarden-postinstall/values.yaml b/vaultwarden-postinstall/values.yaml new file mode 100644 index 0000000..e69de29 diff --git a/vaultwarden-requirements/.helmignore b/vaultwarden-requirements/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/vaultwarden-requirements/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/vaultwarden-requirements/Chart.yaml b/vaultwarden-requirements/Chart.yaml new file mode 100644 index 0000000..38b5d46 --- /dev/null +++ b/vaultwarden-requirements/Chart.yaml @@ -0,0 +1,5 @@ +apiVersion: v2 +name: vaultwarden-requirements +description: A Helm chart for deploying the dbcluster and pvc for vaultwarden +type: application +version: 0.1.0 diff --git a/vaultwarden-requirements/templates/_helpers.tpl b/vaultwarden-requirements/templates/_helpers.tpl new file mode 100644 index 0000000..a01c686 --- /dev/null +++ b/vaultwarden-requirements/templates/_helpers.tpl @@ -0,0 +1,62 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "vaultwarden-requirements.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "vaultwarden-requirements.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "vaultwarden-requirements.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "vaultwarden-requirements.labels" -}} +helm.sh/chart: {{ include "vaultwarden-requirements.chart" . }} +{{ include "vaultwarden-requirements.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "vaultwarden-requirements.selectorLabels" -}} +app.kubernetes.io/name: {{ include "vaultwarden-requirements.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "vaultwarden-requirements.serviceAccountName" -}} +{{- if .Values.serviceAccount.create }} +{{- default (include "vaultwarden-requirements.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} diff --git a/vaultwarden-requirements/templates/db-cluster.yaml b/vaultwarden-requirements/templates/db-cluster.yaml new file mode 100644 index 0000000..d93f794 --- /dev/null +++ b/vaultwarden-requirements/templates/db-cluster.yaml @@ -0,0 +1,8 @@ +apiVersion: postgresql.cnpg.io/v1 +kind: Cluster +metadata: + name: vaultwarden-db +spec: + instances: {{ .Values.vaultwarden.dbCluster.numInstances }} + storage: + size: {{ .Values.vaultwarden.dbCluster.size }} diff --git a/vaultwarden-requirements/templates/vaultwarden-data.yaml b/vaultwarden-requirements/templates/vaultwarden-data.yaml new file mode 100644 index 0000000..85f90d0 --- /dev/null +++ b/vaultwarden-requirements/templates/vaultwarden-data.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: {{ .Values.vaultwarden.dataPvc.name }} +spec: + storageClassName: {{ .Values.vaultwarden.dataPvc.storageClassName }} + accessModes: + - ReadWriteOnce + resources: + requests: + storage: {{ .Values.vaultwarden.dataPvc.size }} diff --git a/vaultwarden-requirements/values.yaml b/vaultwarden-requirements/values.yaml new file mode 100644 index 0000000..4662ce9 --- /dev/null +++ b/vaultwarden-requirements/values.yaml @@ -0,0 +1,8 @@ +vaultwarden: + dbCluster: + numInstances: 3 + size: 10Gi + dataPvc: + name: vaultwarden-data + storageClassName: '' + size: 10Gi