-
Notifications
You must be signed in to change notification settings - Fork 35
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
48 changed files
with
1,215 additions
and
151 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,10 @@ | ||
| charts/* | ||
| values-sec.yaml | ||
| *.vim | ||
| secret.asc | ||
| public.asc | ||
| passbolt | ||
| mkcert | ||
| helm | ||
| kubectl | ||
| kind |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,76 @@ | ||
| Announcing the immediate availability of passbolt's official helm chart 0.7.2. | ||
| Announcing the immediate availability of passbolt's helm chart 1.0.0. | ||
| This is a major release that introduces some breaking changes contributed | ||
| by the community. | ||
|
|
||
| This is a minor change release that fixes a bug when generating the postgresql | ||
| credentials secret. | ||
| Thanks to all the community members that helped us to improve this chart | ||
| and reach version 1.0.0!! :tada: | ||
|
|
||
| @chris968 | ||
| @jouve | ||
| @Kuruyia | ||
|
|
||
| Following there is a list of breaking changes and possible migration paths | ||
| from previous chart versions. Please keep in mind that we can't cover all | ||
| possible scenarios. | ||
|
|
||
| If you are having issues upgrading from older chart versions please let us | ||
| known by opening an issue in Github | ||
|
|
||
| # TL;DR | ||
|
|
||
| List of breaking changes: | ||
|
|
||
| - Global `tls` value has been removed in favour of `ingress.tls` and `app.tls` | ||
| - `ingress.tls[].secretName` has been removed in favour of `ingress.tls[].existingSecret` | ||
| - `extraVolumes` and `extraVolumeMounts` values are now a list instead of a string. | ||
| - Expose the HTTP port in the service. `service.port`, `service.name` and | ||
| `service.targetPort` have been removed in favour of `service.ports` | ||
| in order to expose configurable http and https ports. | ||
|
|
||
| # Ingress and TLS related changes | ||
|
|
||
| Global `tls` value has been removed to allow users to have different TLS | ||
| certificates injected on ingress objects and passbolt containers. | ||
| Ingress TLS is now managed with `ingress.tls` value, while passbolt TLS | ||
| is managed with `app.tls` field in the values file. | ||
|
|
||
| ## Migrate from old TLS configuration | ||
|
|
||
| `ingress.tls[].secretName` has been removed in favour of | ||
| `ingress.tls[].existingSecret` for clarity. | ||
|
|
||
| ## Inject same SSL certificate on ingress and service | ||
|
|
||
| Users that were injecting the same secret on Ingress objects and passbolt | ||
| container will have to migrate to a configuration similar to: | ||
|
|
||
| ```yaml | ||
| ingress.tls: | ||
| - autogenerate: false | ||
| existingSecret: mySSLSecret | ||
| hosts: [yourhost.com] | ||
| ``` | ||
| ```yaml | ||
| app.tls: | ||
| - autogenerate: false | ||
| existingSecret: mySSLSecret | ||
| ``` | ||
| ## Inject separate certificates on ingress and service | ||
| Users who want to inject different SSL certificates on ingress objects and passbolt | ||
| containers now they have a way to do it by setting: | ||
| ```yaml | ||
| ingress.tls: | ||
| - autogenerate: false | ||
| existingSecret: myIngressSSLSecret | ||
| hosts: [yourhost.com] | ||
| ``` | ||
| ```yaml | ||
| app.tls: | ||
| - autogenerate: false | ||
| existingSecret: mypassboltSSLSecret | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,93 @@ | ||
| #!/bin/bash | ||
|
|
||
| set -eo pipefail | ||
|
|
||
| RUN_UNIT=false | ||
| RUN_LINT=false | ||
| RUN_INTEGRATION=false | ||
| RUN_ALL=true | ||
| CLEAN_INTEGRATION_ASSETS=true | ||
|
|
||
| function run_linter { | ||
| if [[ "$RUN_LINT" == "true" || "$RUN_ALL" == "true" ]]; then | ||
| helm lint . | ||
| fi | ||
| } | ||
|
|
||
| function run_unit_tests { | ||
| if [[ "$RUN_UNIT" == "true" || "$RUN_ALL" == "true" ]]; then | ||
| helm unittest --color . | ||
| fi | ||
| } | ||
|
|
||
| function run_integration_tests { | ||
| if [[ "$RUN_INTEGRATION" == "true" || "$RUN_ALL" == "true" ]]; then | ||
| source tests/integration/fixtures/install_dependencies.sh | ||
| installDependencies | ||
| bash tests/integration/fixtures/create-cluster-with-passbolt.sh | ||
| "$HELM_BINARY" test --logs passbolt -n default | ||
| fi | ||
| } | ||
|
|
||
| function clean_integration_assets { | ||
| if [[ "$RUN_INTEGRATION" == "true" ]] || [[ "$RUN_ALL" == "true" ]] && [[ "$CLEAN_INTEGRATION_ASSETS" == "true" ]]; then | ||
| echo Cleaning integration testing assets... | ||
| rm -f helm kubectl kind mkcerts passbolt | ||
| fi | ||
| } | ||
|
|
||
| function showHelp { | ||
| echo "Run the available tests for passbolt helm charts" | ||
| echo | ||
| echo "Syntax: $0 [options]" | ||
| echo "$0 with no arguments will run all of the available tests." | ||
| echo | ||
| echo "options:" | ||
| echo "-h|--help Show this message." | ||
| echo "-l|--lint Run helm lint." | ||
| echo "-u|--unit Run helm unittest tests." | ||
| echo "-i|--integration Run integration tests." | ||
| echo "-no-clean Skip cleaning step." | ||
| echo | ||
| exit 0 | ||
| } | ||
|
|
||
| function run_all { | ||
| run_linter | ||
| run_unit_tests | ||
| run_integration_tests | ||
| clean_integration_assets | ||
| } | ||
|
|
||
| while [[ $# -gt 0 ]]; do | ||
| case $1 in | ||
| -h | --help) | ||
| showHelp | ||
| ;; | ||
| -l | --lint) | ||
| RUN_ALL=false | ||
| RUN_LINT=true | ||
| shift | ||
| ;; | ||
| -u | --unit) | ||
| RUN_ALL=false | ||
| RUN_UNIT=true | ||
| shift | ||
| ;; | ||
| -i | --integration) | ||
| RUN_ALL=false | ||
| RUN_INTEGRATION=true | ||
| shift | ||
| ;; | ||
| --no-clean) | ||
| CLEAN_INTEGRATION_ASSETS=false | ||
| shift | ||
| ;; | ||
| *) | ||
| echo "Unknown argurment $1" | ||
| shift | ||
| ;; | ||
| esac | ||
| done | ||
|
|
||
| run_all |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.