chore (move): charts from private to public

.github/workflows/common.yaml

@@ -16,6 +16,7 @@ jobs:
       chartName: common
       additionalTestFilesCommand: ''
       chartRepos: 'bitnami=https://charts.bitnami.com/bitnami,openfga=https://openfga.github.io/helm-charts'
+      skipVulnerabilityScan: true
     secrets: inherit
 
   updateVersionFile:

.github/workflows/extension-manager-operator-crds.yaml

@@ -0,0 +1,28 @@
+name: Build extension-manager-operator-crds Workflow
+on:
+  push:
+    paths:
+      - 'charts/extension-manager-operator-crds/**'
+      - '.github/workflows/extension-manager-operator-crds.yaml'
+
+jobs:
+  pipeline:
+    concurrency:
+      group: extension-manager-operator-crds-${{ github.ref }}
+      cancel-in-progress: true
+    uses: openmfp/gha/.github/workflows/pipeline-chart.yml@main
+    with:
+      chartFolder: charts
+      chartName: extension-manager-operator-crds
+      additionalTestFilesCommand: ''
+      chartRepos: 'bitnami=https://charts.bitnami.com/bitnami,openfga=https://openfga.github.io/helm-charts'
+    secrets: inherit
+
+  updateVersionFile:
+    if: ${{ github.ref == 'refs/heads/main' }}
+    needs: [pipeline]
+    uses: openmfp/gha/.github/workflows/job-update-version-file.yml@main
+    secrets: inherit
+    with:
+      componentVersionKey: "extension-manager-operator-crds"
+      version: ${{ needs.pipeline.outputs.version }}

.github/workflows/extension-manager-operator.yaml

@@ -0,0 +1,28 @@
+name: Build extension-manager-operator Workflow
+on:
+  push:
+    paths:
+      - 'charts/extension-manager-operator/**'
+      - '.github/workflows/extension-manager-operator.yaml'
+
+jobs:
+  pipeline:
+    concurrency:
+      group: extension-manager-operator-${{ github.ref }}
+      cancel-in-progress: true
+    uses: openmfp/gha/.github/workflows/pipeline-chart.yml@main
+    with:
+      chartFolder: charts
+      chartName: extension-manager-operator
+      additionalTestFilesCommand: ''
+      chartRepos: 'bitnami=https://charts.bitnami.com/bitnami,openfga=https://openfga.github.io/helm-charts'
+    secrets: inherit
+
+  updateVersionFile:
+    if: ${{ github.ref == 'refs/heads/main' }}
+    needs: [pipeline]
+    uses: openmfp/gha/.github/workflows/job-update-version-file.yml@main
+    secrets: inherit
+    with:
+      componentVersionKey: "extension-manager-operator"
+      version: ${{ needs.pipeline.outputs.version }}

.gitignore

@@ -1,2 +1,3 @@
 .idea
 .vscode/settings.json
+bin/

Taskfile.yaml

@@ -5,14 +5,21 @@ vars:
   CHARTS:
     sh: "ls charts/ | sed 's/^/charts\\//g' | paste -sd ',' -"
 tasks:
+  ## Setup
+  setup:kube-lint:
+    internal: true
+    cmds:
+      - mkdir -p $(pwd)/{{.LOCAL_BIN}}
+      - test -s {{.LOCAL_BIN}}/kube-linter || GOBIN=$(pwd)/{{.LOCAL_BIN}} go install golang.stackrox.io/kube-linter/cmd/kube-linter@latest
+      - chmod +x $(pwd)/{{.LOCAL_BIN}}/kube-linter
   ## Development
   lint:
     deps: []
     cmds:
       - "ct lint --target-branch main --validate-maintainers=false --charts={{.CHARTS}}"
-  package:
-    cmds:
-      - helm package ./charts/openmfp
+  # package:
+  #   cmds: 
+  #     - helm package ./charts/openmfp
   helmtest:
     cmds:
       - "for chart in $(echo {{.CHARTS}} | tr ',' ' '); do helm unittest $chart; done"
@@ -25,5 +32,11 @@ tasks:
   validate:
     cmds:
       - task: lint
-      - task: package
-      - task: test
+      # - task: package
+      - task: test
+      - task: vulnerability
+  vulnerability:
+    deps:
+      - task: setup:kube-lint
+    cmds:
+      - "{{.LOCAL_BIN}}/kube-linter lint \"charts/\" --format \"plain\""

charts/account-operator/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 0.1.5
 - name: common
   repository: file://../common
-  version: 0.1.4
-digest: sha256:9d2466bb6f196f2355a55ff621f6017cee086f9600280b009e55249ab6a6335f
-generated: "2024-11-21T17:36:43.666194+01:00"
+  version: 0.1.5
+digest: sha256:aafc16fff19ce4062f7159ec49b45fa72b0271941f433ef7b90eb4cc8a6f08f0
+generated: "2024-11-22T16:15:50.68652326+02:00"

charts/account-operator/Chart.yaml

@@ -2,13 +2,13 @@ apiVersion: v2
 name: account-operator
 description: A Helm chart for Kubernetes
 type: application
-version: 0.4.16
+version: 0.4.17
 appVersion: "0.104.0"
 dependencies:
   - name: account-operator-crds
     version: 0.1.5
     condition: crds.enabled
     repository: file://../account-operator-crds
   - name: common
-    version: 0.1.4
+    version: 0.1.5
     repository: file://../common

charts/account-operator/templates/deployment.yaml

@@ -39,6 +39,7 @@ spec:
           name: manager
           securityContext:
             runAsNonRoot: true
+            readOnlyRootFilesystem: true
           ports:
           - containerPort: {{ .Values.metrics.port }}
             name: metrics

charts/account-operator/tests/__snapshot__/deployment_test.yaml.snap

@@ -354,6 +354,7 @@ operator match the snapshot:
                   cpu: 150m
                   memory: 128Mi
               securityContext:
+                readOnlyRootFilesystem: true
                 runAsNonRoot: true
               volumeMounts: null
           serviceAccountName: RELEASE-NAME-account-operator
@@ -725,6 +726,7 @@ operator match the snapshot (with kubeconfigSecret):
                   cpu: 150m
                   memory: 128Mi
               securityContext:
+                readOnlyRootFilesystem: true
                 runAsNonRoot: true
               volumeMounts:
                 - mountPath: /api-kubeconfig
@@ -1105,6 +1107,7 @@ operator match the snapshot with webhook enabled:
                   cpu: 150m
                   memory: 128Mi
               securityContext:
+                readOnlyRootFilesystem: true
                 runAsNonRoot: true
               volumeMounts:
                 - mountPath: /certs

charts/common/Chart.yaml

@@ -4,4 +4,4 @@ description: A Helm chart for Kubernetes
 
 type: library
 
-version: 0.1.4
+version: 0.1.5

charts/common/templates/_tplvalues.tpl

@@ -0,0 +1,19 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Renders a value that contains template perhaps with scope if the scope is present.
+Usage:
+{{ include "common.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $ ) }}
+{{ include "common.tplvalues.render" ( dict "value" .Values.path.to.the.Value "context" $ "scope" $app ) }}
+*/}}
+{{- define "common.tplvalues.render" -}}
+{{- $value := typeIs "string" .value | ternary .value (.value | toYaml) }}
+{{- if contains "{{" (toJson .value) }}
+  {{- if .scope }}
+      {{- tpl (cat "{{- with $.RelativeScope -}}" $value "{{- end }}") (merge (dict "RelativeScope" .scope) .context) }}
+  {{- else }}
+    {{- tpl $value .context }}
+  {{- end }}
+{{- else }}
+    {{- $value }}
+{{- end }}
+{{- end -}}

charts/extension-manager-operator-crds/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/extension-manager-operator-crds/Chart.yaml

@@ -0,0 +1,24 @@
+apiVersion: v2
+name: extension-manager-operator-crds
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.3
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "1.16.0"

charts/extension-manager-operator-crds/README.md

@@ -0,0 +1,48 @@
+# Extension Manager Operator CRDs
+
+This directory contains the Custom Resource Definitions (CRDs) for the Extension Manager Operator.
+
+## Prerequisites
+
+- Kubernetes 1.16+
+- Helm 3.0+
+
+## Installation
+
+To install the CRDs along with the Extension Manager Operator chart:
+
+```bash
+helm install my-release ./charts/extension-manager-operator --set crds.enabled=true
+```
+
+## Uninstallation
+
+To uninstall/delete the CRDs along with the `my-release` deployment:
+
+```bash
+helm uninstall my-release
+```
+
+## Configuration
+
+The following table lists the configurable parameters of the Extension Manager Operator CRDs and their default values.
+
+| Parameter                | Description                                | Default |
+|--------------------------|--------------------------------------------|---------|
+| `crds.enabled`           | Enable CRDs                                | `true`  |
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example:
+
+```bash
+helm install my-release ./charts/extension-manager-operator --set crds.enabled=false
+```
+
+Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example:
+
+```bash
+helm install my-release ./charts/extension-manager-operator -f values.yaml
+```
+
+## License
+
+This project is licensed under the Apache 2.0 License. See the [LICENSE](https://github.com/openmfp/extension-content-operator/blob/main/LICENSE) file for details.