App/chartmuseum (#950)

* update ingress for chartmuseum

* update ingress for chartmuseum

* update chartmuseum using helm chart

apps/chartmuseum/base/deployment.yaml

@@ -1,45 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: chartmuseum
-  namespace: chartmuseum
-  labels:
-    app.kubernetes.io/name: chartmuseum
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: chartmuseum
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: chartmuseum
-    spec:
-      securityContext:
-        runAsUser: 1000
-        runAsGroup: 1000
-      containers:
-        - name: homer
-          image: ghcr.io/helm/chartmuseum:v0.16.2
-          securityContext:
-            allowPrivilegeEscalation: false
-          env:
-            - name: DEBUG
-              value: "1"
-            - name: STORAGE
-              value: "local"
-            - name: STORAGE_LOCAL_ROOTDIR
-              value: "/charts"
-          ports:
-            - protocol: TCP
-              containerPort: 8080
-              name: http
-          volumeMounts:
-            - name: charts
-              mountPath: /charts
-      volumes:
-        - name: charts
-          hostPath:
-            path: /mnt/nfs/AppData/chartmuseum/charts
-            type: Directory
-      nodeSelector:
-        kubernetes.io/os: linux

apps/chartmuseum/base/kustomization.yaml

@@ -1,5 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ./deployment.yaml
-  - ./service.yaml

apps/chartmuseum/base/service.yaml

@@ -1,20 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: chartmuseum
-  namespace: chartmuseum
-  annotations:
-    metallb.universe.tf/address-pool: k3s-cluster-ip-pool
-    metallb.universe.tf/allow-shared-ip: k3s-cluster
-  labels:
-    app.kubernetes.io/name: chartmuseum
-spec:
-  selector:
-    app.kubernetes.io/name: chartmuseum
-  type: LoadBalancer
-  internalTrafficPolicy: Cluster
-  ports:
-    - protocol: TCP
-      port: 8899
-      targetPort: 8080
-      name: http

apps/chartmuseum/env/k3s-cluster/ingress.yaml

@@ -1,35 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: chartmuseum-ingress
-  namespace: chartmuseum
-  annotations:
-    nginx.ingress.kubernetes.io/ssl-redirect: "false"
-    nginx.ingress.kubernetes.io/use-regex: "true"
-spec:
-  ingressClassName: nginx
-  tls:
-    - hosts:
-        - "chartmuseum.cluster.edward.sydney"
-      secretName: "chartmuseum-tls"
-  rules:
-    - host: "chartmuseum.cluster.edward.sydney"
-      http:
-        paths:
-          - pathType: Prefix
-            path: "/"
-            backend:
-              service:
-                name: chartmuseum
-                port:
-                  number: 8899
-    - host: "chartmuseum.cluster.local"
-      http:
-        paths:
-          - pathType: Prefix
-            path: "/"
-            backend:
-              service:
-                name: chartmuseum
-                port:
-                  number: 8899

apps/chartmuseum/env/k3s-cluster/kustomization.yaml

@@ -1,5 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-resources:
-  - ../../base
-  - ./ingress.yaml
+helmCharts:
+  - name: chartmuseum
+    repo: https://chartmuseum.github.io/charts
+    version: 3.10.3
+    releaseName: chartmuseum
+    valuesFile: values.yaml

apps/chartmuseum/env/k3s-cluster/values.yaml

@@ -0,0 +1,25 @@
+env:
+  open:
+    AUTH_ANONYMOUS_GET: true
+    CACHE: redis
+    CACHE_REDIS_ADDR: redis-master.redis.svc.cluster.local:6379
+    CACHE_REDIS_DB: chartmuseum
+  existingSecret: chartmuseum-secrets
+  existingSecretMappings:
+    BASIC_AUTH_USER: auth-user
+    BASIC_AUTH_PASS: auth-password
+    CACHE_REDIS_PASSWORD: redis-password
+deployment:
+service:
+  type: LoadBalancer
+  externalPort: 8899
+persistent:
+  enabled: true
+  existingClaim: chartmuseum-pvc
+ingress:
+  enabled: true
+  hosts:
+    - name: chartmuseum.cluster.edward.sydney
+      tls: true
+      tlsSecret: chartmuseum-tls
+  ingressClassName: nginx