more fixes and cleanup

* fix penpot multi secre

* fix disc gsm secret name and enable it

* fix CFddns

* fix shiori

* fix soft-serve

* fix focalborad

* whoops on penpot

* fix immich

* fix inventree

* fix k8s-gateway

* whoops on k8s-gateway

* fix mealie

* fix nocodb

* fix nextcloud

* fix statpingng

* fix synapse

* fix tailscale

* whoops on mealie

* whops on noco

* whoops on synapse

* fix wbo

* fix wireguard

* fix wger

* fix meshcentral

* fix authentik

* whoops

* fix typo

* fix more

* fix

* fix more

.all-contributorsrc

@@ -1320,6 +1320,51 @@
       "contributions": [
         "doc"
       ]
+    },
+    {
+      "login": "l-moon-git",
+      "name": "l-moon-git",
+      "avatar_url": "https://avatars.githubusercontent.com/u/103282929?v=4",
+      "profile": "https://github.com/l-moon-git",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "hughes5",
+      "name": "hughes5",
+      "avatar_url": "https://avatars.githubusercontent.com/u/6740468?v=4",
+      "profile": "https://github.com/hughes5",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "sdimovv",
+      "name": "sdimovv",
+      "avatar_url": "https://avatars.githubusercontent.com/u/36302090?v=4",
+      "profile": "https://github.com/sdimovv",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "AllieQpzm",
+      "name": "AllieQpzm",
+      "avatar_url": "https://avatars.githubusercontent.com/u/2895565?v=4",
+      "profile": "https://github.com/AllieQpzm",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "dominch",
+      "name": "Dominik",
+      "avatar_url": "https://avatars.githubusercontent.com/u/10815109?v=4",
+      "profile": "http://www.dominik.net.pl",
+      "contributions": [
+        "bug"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/CODEOWNERS

@@ -1,11 +1,9 @@
 # Default code owners
-*      @ornias1993
-*      @truecharts-bot
-/charts/stable/     @stavros-k
-/charts/incubator/       @stavros-k
-/charts/SCALE/      @ornias1993
-/charts/core/      @ornias1993
-/charts/dependency/      @ornias1993
-/charts/enterprise/      @ornias1993
-/charts/dev/      @ornias1993
-/docs/      @ornias1993 @stavros-k
+*                       @ornias1993
+/charts/stable/         @truecharts/stable-maintainers @ornias1993
+/charts/incubator/      @truecharts/incubator-maintainers @Ornias1993
+/charts/dependency/     @truecharts/enterprise-maintainers @ornias1993
+/charts/enterprise/     @truecharts/enterprise-maintainers @ornias1993
+/charts/dev/            @ornias1993
+/.github/               @truecharts/ci-maintainers @ornias1993 
+docs/                   @truecharts/docs-maintainers @ornias1993

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-140-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-145-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -316,6 +316,13 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://reb.gg"><img src="https://avatars.githubusercontent.com/u/16991201?v=4?s=100" width="100px;" alt="Rob Herley"/><br /><sub><b>Rob Herley</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=robherley" title="Documentation">📖</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/oblivioncth"><img src="https://avatars.githubusercontent.com/u/24661585?v=4?s=100" width="100px;" alt="Christian Heimlich"/><br /><sub><b>Christian Heimlich</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=oblivioncth" title="Documentation">📖</a></td>
     </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/l-moon-git"><img src="https://avatars.githubusercontent.com/u/103282929?v=4?s=100" width="100px;" alt="l-moon-git"/><br /><sub><b>l-moon-git</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=l-moon-git" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/hughes5"><img src="https://avatars.githubusercontent.com/u/6740468?v=4?s=100" width="100px;" alt="hughes5"/><br /><sub><b>hughes5</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=hughes5" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/sdimovv"><img src="https://avatars.githubusercontent.com/u/36302090?v=4?s=100" width="100px;" alt="sdimovv"/><br /><sub><b>sdimovv</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sdimovv" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/AllieQpzm"><img src="https://avatars.githubusercontent.com/u/2895565?v=4?s=100" width="100px;" alt="AllieQpzm"/><br /><sub><b>AllieQpzm</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=AllieQpzm" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="http://www.dominik.net.pl"><img src="https://avatars.githubusercontent.com/u/10815109?v=4?s=100" width="100px;" alt="Dominik"/><br /><sub><b>Dominik</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adominch" title="Bug reports">🐛</a></td>
+    </tr>
   </tbody>
 </table>
 

.github/lintconf.yaml

@@ -0,0 +1,46 @@
+---
+rules:
+  braces:
+    min-spaces-inside: 0
+    max-spaces-inside: 0
+    min-spaces-inside-empty: -1
+    max-spaces-inside-empty: -1
+  brackets:
+    min-spaces-inside: 0
+    max-spaces-inside: 0
+    min-spaces-inside-empty: -1
+    max-spaces-inside-empty: -1
+  colons:
+    max-spaces-before: 0
+    max-spaces-after: 1
+  commas:
+    max-spaces-before: 0
+    min-spaces-after: 1
+    max-spaces-after: 1
+  comments:
+    require-starting-space: true
+    min-spaces-from-content: 2
+  document-end: disable
+  # No --- to start a file
+  document-start: disable
+  empty-lines:
+    max: 2
+    max-start: 0
+    max-end: 0
+  hyphens:
+    max-spaces-after: 1
+  indentation:
+    spaces: consistent
+    # - list indentation will handle both indentation and without
+    indent-sequences: whatever
+    check-multi-line-strings: false
+  key-duplicates:
+    enable
+    # Lines can be any length
+  line-length: disable
+  new-line-at-end-of-file: enable
+  new-lines:
+    type: unix
+  trailing-spaces: enable
+  truthy:
+    level: warning

.github/renovate.json5

@@ -260,6 +260,11 @@
       "matchPackagePrefixes": ["tccr.io/truecharts/rickroll"],
       "groupName": "rickroll",
     },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackagePrefixes": ["tccr.io/truecharts/scrypted"],
+      "groupName": "scrypted",
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackagePrefixes": ["tccr.io/truecharts/docspell"],

.github/scripts/changelog.sh

@@ -14,7 +14,7 @@ if [[ -d "charts/${1}" ]]; then
     rm -rf ${chart}/app-changelog.md || echo "changelog not found..."
     echo "Generating changelogs for: ${chartname}"
     # SCALE "Changelog" containing only last change
-    git-chglog --next-tag ${chartname}-${chartversion} --tag-filter-pattern ${chartname} --path ${chart} -o ${chart}/app-changelog.md ${chartname}-${chartversion} || echo "changelog generation failed..."
+    git-chglog --next-tag ${chartname}-${chartversion} --tag-filter-pattern "^${chartname}-\d+\.\d+\.\d+\$" --path ${chart} -o ${chart}/app-changelog.md ${chartname}-${chartversion} || echo "changelog generation failed..."
 else
     echo "Chart 'charts/${1}' no longer exists in repo. Skipping it..."
 fi

.github/workflows/catalog-test.yaml

@@ -15,7 +15,7 @@ jobs:
     name: Test SCALE Catalog
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:3b53132c6c6e14393f8f69e64e2237c8460a466753c285542324aa993ed1795d
+      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
     steps:
       - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
         name: Checkout

.github/workflows/charts-changelog.yaml

@@ -50,7 +50,7 @@ jobs:
 
       - name: Install Kubernetes tools
         if: inputs.isRenovatePR == 'true'
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             yq

.github/workflows/charts-lint.yaml

@@ -113,7 +113,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -147,7 +147,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -181,7 +181,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -215,7 +215,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -249,7 +249,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -283,7 +283,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: lint Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3

.github/workflows/charts-release.yaml

@@ -11,15 +11,59 @@ on:
       - "charts/**"
 
 jobs:
+
+  release-helm:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
+    steps:
+      - name: Checkout
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+        with:
+          token: ${{ secrets.BOT_TOKEN }}
+          fetch-depth: 1
+          
+      - name: Checkout Helm-Staging
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+        with:
+          fetch-depth: 1
+          repository: truecharts/helm-staging
+          token: ${{ secrets.BOT_TOKEN }}
+          path: helm
+          
+      - name: Fix Pre-Commit issues
+        shell: bash
+        run: |
+          echo "Running pre-commit test-and-cleanup..."
+          pre-commit run --all ||:
+          # Fix sh files to always be executable
+          find . -name '*.sh' | xargs chmod +x
+          
+      - name: Commit Helm Changes
+        run: |
+          rm -rf helm/charts
+          mkdir helm/charts
+          cp -rf charts helm
+
+      - name: Commit Helm Changes
+        run: |
+          cd helm
+          git config user.name "TrueCharts-Bot"
+          git config user.email "bot@truecharts.org"
+          git add --all
+          git commit -sm "Commit released Helm Charts for TrueCharts" || exit 0
+          git push
+          cd -
+
   release-scale:
     runs-on: ubuntu-latest
     outputs:
       ref: ${{ steps.save-commit-hash.outputs.commit_hash }}
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:3b53132c6c6e14393f8f69e64e2237c8460a466753c285542324aa993ed1795d
+      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
     steps:
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -179,6 +223,7 @@ jobs:
           git add --all
           git commit -sm "Commit released docs for TrueCharts" || exit 0
           git push
+        
 
       - name: Checkout Catalog
         uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
@@ -233,7 +278,7 @@ jobs:
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
           charts_dir: charts/dependency
-          charts_repo_url: https://charts.truecharts.org
+          charts_repo_url: https://deps.truecharts.org
         env:
           CR_TOKEN: "${{ secrets.BOT_TOKEN }}"
           CR_SKIP_EXISTING: "true"

.github/workflows/charts-test.yaml

@@ -22,7 +22,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -146,7 +146,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -171,7 +171,7 @@ jobs:
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
 
   install-charts2:
     needs:
@@ -191,7 +191,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -217,7 +217,7 @@ jobs:
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
 
   install-charts3:
     needs:
@@ -237,7 +237,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -262,7 +262,7 @@ jobs:
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
 
   install-charts4:
     needs:
@@ -282,7 +282,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -307,7 +307,7 @@ jobs:
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
 
   install-charts5:
     needs:
@@ -327,7 +327,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -352,7 +352,7 @@ jobs:
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
 
   install-charts6:
     needs:
@@ -372,7 +372,7 @@ jobs:
           ref: ${{ inputs.checkoutCommit }}
 
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -397,7 +397,7 @@ jobs:
           kubectl taint --all=true nodes node.cloudprovider.kubernetes.io/uninitialized- || true
 
       - name: Run chart-testing (install)
-        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" --upgrade
+        run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" #--upgrade
 
   # Summarize matrix https://github.community/t/status-check-for-a-matrix-jobs/127354/7
   install_success:

.github/workflows/daily.yaml

@@ -1,14 +1,23 @@
 name: "Chore: Daily Tasks"
 
 on:
+  schedule:
+    - cron: '0 0 * * *'
   workflow_dispatch:
 
+permissions:
+  issues: write
+  pull-requests: write
+
+concurrency:
+  group: lock
+
 jobs:
   generate-readme:
     runs-on: ubuntu-latest
     name: "Generate readme files"
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:3b53132c6c6e14393f8f69e64e2237c8460a466753c285542324aa993ed1795d
+      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
     steps:
       - name: Checkout
         uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
@@ -59,57 +68,132 @@ jobs:
           # Designed to ensure the appversion in Chart.yaml is in sync with the primary Chart tag if found
           # Also makes sure that home link is pointing to the correct url
           sync_tag() {
-              local chart="$1"
-              local chartname="$2"
-              local train="$3"
-              echo "Attempting to sync primary tag with appversion for: ${chartname}"
-              local tag="$(cat ${chart}/values.yaml | grep '^  tag: ' | awk -F" " '{ print $2 }' | head -1)"
-              tag="${tag%%@*}"
-              tag="${tag:-auto}"
-              tag=$(echo $tag | sed "s/release-//g")
-              tag=$(echo $tag | sed "s/release_//g")
-              tag=$(echo $tag | sed "s/version-//g")
-              tag=$(echo $tag | sed "s/version_//g")
-              tag="${tag#*V.}"
-              tag="${tag#*v-}"
-              tag="${tag#*v}"
-              tag="${tag%-*}"
-              tag="${tag:0:10}"
-              tag="${tag%-}"
-              tag="${tag%_}"
-              tag="${tag%.}"
-              echo "Updating tag of ${chartname} to ${tag}..."
-              sed -i -e "s|appVersion: .*|appVersion: \"${tag}\"|" "${chart}/Chart.yaml"
-              echo "Updating icon of ${chartname}..."
-              sed -i -e "s|icon: .*|icon: https:\/\/truecharts.org\/img\/hotlink-ok\/chart-icons\/${chartname}.png|" "${chart}/Chart.yaml"
-              echo "Updating home of ${chartname}..."
-              sed -i -e "s|home: .*|home: https:\/\/truecharts.org\/charts\/${train}\/${chartname}|" "${chart}/Chart.yaml"
-              echo "Attempting to update sources of ${chartname}..."
-              echo "Using go-yq verion: <$(go-yq -V)>"
-              # Get all sources (except truecharts)
-              curr_sources=$(go-yq '.sources[] | select(. != "https://github.com/truecharts*" and . != "https://ghcr*" and . != "https://hub.docker*" and . != "https://quay*" and . != "https://github.com/truecharts/containers*")' "${chart}/Chart.yaml")
-              # Empty sources list in-place
-              go-yq -i 'del(.sources.[])' "${chart}/Chart.yaml"
-              # Add truechart source
-              tcsource="https://github.com/truecharts/charts/tree/master/charts/$train/$chartname" go-yq -i '.sources += env(tcsource)' "${chart}/Chart.yaml"
-              container=$(cat website/docs/charts/description_list.md | grep "\[${chartname}\]" | cut -f3 -d '|' | grep -v 'Not Found' || echo "")
-              if [ ! -z "$container" ]; then
-                prefix="https://hub.docker.com/"
-                if echo ${container} | grep 'ghcr'; then
-                prefix="https://ghcr.com/"
-                elif echo ${container} | grep 'quay'; then
-                prefix="https://quay.com/"
-                elif echo ${container} | grep 'tccr'; then
-                prefix="https://github.com/truecharts/containers/tree/master/mirror/"
-                fi
+            local chart="$1"
+            local chartname="$2"
+            local train="$3"
+            echo "Attempting to sync primary tag with appversion for: ${chartname}"
+            local tag="$(cat ${chart}/values.yaml | grep '^  tag: ' | awk -F" " '{ print $2 }' | head -1)"
+            tag="${tag%%@*}"
+            tag="${tag:-auto}"
+            tag=$(echo $tag | sed "s/release-//g")
+            tag=$(echo $tag | sed "s/release_//g")
+            tag=$(echo $tag | sed "s/version-//g")
+            tag=$(echo $tag | sed "s/version_//g")
+            tag="${tag#*V.}"
+            tag="${tag#*v-}"
+            tag="${tag#*v}"
+            tag="${tag%-*}"
+            tag="${tag:0:10}"
+            tag="${tag%-}"
+            tag="${tag%_}"
+            tag="${tag%.}"
+            echo "Updating tag of ${chartname} to ${tag}..."
+            sed -i -e "s|appVersion: .*|appVersion: \"${tag}\"|" "${chart}/Chart.yaml"
+            echo "Updating icon of ${chartname}..."
+            sed -i -e "s|icon: .*|icon: https:\/\/truecharts.org\/img\/hotlink-ok\/chart-icons\/${chartname}.png|" "${chart}/Chart.yaml"
+            echo "Updating home of ${chartname}..."
+            sed -i -e "s|home: .*|home: https:\/\/truecharts.org\/charts\/${train}\/${chartname}|" "${chart}/Chart.yaml"
+            echo "Attempting to update sources of ${chartname}..."
+            echo "Using go-yq verion: <$(go-yq -V)>"
+            # Get current sources, exluding those that may have been added automatically.
+            curr_sources=$(
+              go-yq '
+                .sources[] |
+                select(
+                  . != "https://github.com/truecharts*" and
+                  . != "https://ghcr*" and
+                  . != "docker.io*" and
+                  . != "https://docker.io*" and
+                  . != "https://hub.docker*" and
+                  . != "https://fleet.*" and
+                  . != "https://github.com/truecharts/containers/tree/master/mirror/*" and
+                  . != "https://public.ecr.aws*" and
+                  . != "https://ocir.io*" and
+                  . != "https://gcr*" and
+                  . != "https://azurecr*" and
+                  . != "https://quay*" and
+                  . != "https://lscr*" and
+                  . != "https://github.com/truecharts/containers*" and
+                  . == "http*"
+                )
+                ' \
+              "${chart}/Chart.yaml"
+            )
+            # Empty sources list in-place
+            go-yq -i 'del(.sources.[])' "${chart}/Chart.yaml"
+            # Add truechart source
+            tcsource="https://github.com/truecharts/charts/tree/master/charts/$train/$chartname" go-yq -i '.sources += env(tcsource)' "${chart}/Chart.yaml"
+            # Get the container image name that was parsed out of the Dockerfile for the website.
+            container=$(cat website/docs/charts/description_list.md | grep "\[${chartname}\]" | cut -f3 -d '|' | grep -v 'Not Found' || echo "")
+            # Convert the container image name to a URL.
+            if [ ! -z "$container" ]; then
+              prefix=""
+              case "$container" in
+                lscr.io/linuxserver/*)
+                  prefix="https://fleet.linuxserver.io/image?name="
+                  container=${container#lscr.io/}
+                  ;;
+                tccr.io/truecharts/*)
+                  prefix="https://github.com/truecharts/containers/tree/master/mirror"
+                  container=${container#tccr.io/truecharts/}
+                  ;;
+                mcr.microsoft.com/*)
+                  prefix=""
+                  ;;
+                public.ecr.aws/*)
+                  prefix="https://gallery.ecr.aws/"
+                  container=${container#public.ecr.aws/}
+                  ;;
+                ghcr.io/*)
+                  prefix="https://"
+                  ;;
+                quay.io/*)
+                  prefix="https://"
+                  ;;
+                gcr.io/*)
+                  prefix="https://"
+                  ;;
+                *.azurecr.io/*)
+                  prefix=""
+                  ;;
+                *.ocir.io/*)
+                  prefix=""
+                  ;;
+                # There have been a number of domains used for the Docker Hub registry over the years.
+                # NOTE:  This is also the default case!
+                docker.io/*|index.docker.io/*|registry-1.docker.io/*|registry.hub.docker.com/*|*)
+                  prefix="https://hub.docker.com/r/"
+                  container=${container#docker.io/}
+                  container=${container#index.docker.io/}
+                  container=${container#registry-1.docker.io/}
+                  container=${container#registry.hub.docker.com/}
+                  # If the image name does not contain a slash it is a Docker Official Image.
+                  if [ "$container" == "${container////}" ]; then
+                    prefix="https://hub.docker.com/_/"
+                  # If the user name is library it is a Docker Official Image.
+                  elif [ "${container%%/*}" == "library" ]; then
+                    prefix="https://hub.docker.com/_/"
+                    container=${container#library/}
+                  fi
+                  # Avoid creating a bad link since an unsupported registry may have been used.
+                  slashes=${container//[^\/]/}
+                  # Bail out if the image name has more than 1 slash.
+                  if [ ${#slashes} -gt 1 ]; then
+                    prefix=""
+                    echo "WARNING: Not assuming '$container' is a Docker Hub image"
+                  fi
+                  ;;
+              esac
+              if [ -n "${prefix}" ]; then
                 container="${prefix}${container}" go-yq -i '.sources += env(container) | .sources |= unique' "${chart}/Chart.yaml"
               fi
-              # Add the rest of the sources
-              while IFS= read -r line; do
-                src="$line" go-yq -i '.sources += env(src)' "${chart}/Chart.yaml" || echo "src set error"
-              done <<< "$curr_sources"
-              echo "Sources of ${chartname} updated!"
-              }
+            fi
+            # Add the rest of the sources
+            while IFS= read -r line; do
+              src="$line" go-yq -i '.sources += env(src)' "${chart}/Chart.yaml" || echo "src set error"
+            done <<< "$curr_sources"
+            echo "Sources of ${chartname} updated!"
+          }
           export -f sync_tag
 
           for train in enterprise stable incubator dependency; do
@@ -138,10 +222,10 @@ jobs:
     runs-on: ubuntu-latest
     name: "Generate Security Reports"
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:3b53132c6c6e14393f8f69e64e2237c8460a466753c285542324aa993ed1795d
+      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
     steps:
       - name: Install Kubernetes tools
-        uses: yokawasa/action-setup-kube-tools@b91bb02bc122bd84ac7bbea5f25ed6b0f2ec6275 # tag=v0.9.2
+        uses: yokawasa/action-setup-kube-tools@af4ebb1af1efd30c5bd84a2e9773355ad6362a33 # v0.9.3
         with:
           setup-tools: |
             helmv3
@@ -264,3 +348,18 @@ jobs:
           git add --all
           git commit -sm "Commit released docs for TrueCharts" || exit 0
           git push
+
+  lock-threads:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dessant/lock-threads@c1b35aecc5cdb1a34539d14196df55838bb2f836 # v4
+        with:
+          github-token: ${{ secrets.BOT_TOKEN }}
+          issue-inactive-days: '7'
+          exclude-any-issue-labels: ''
+          issue-comment: 'This issue is locked to prevent necro-posting on closed issues. Please create a new issue or contact staff on discord of the problem persists'
+          issue-lock-reason: ''
+          pr-inactive-days: '7'
+          pr-comment: 'This PR is locked to prevent necro-posting on closed PRs. Please create a issue or contact staff on discord if you want to further discuss this'
+          pr-lock-reason: 'resolved'
+          log-output: true

.github/workflows/meta-label-pr-ci-status.yaml

@@ -19,7 +19,7 @@ jobs:
           token: ${{ secrets.BOT_TOKEN }}
 
       - name: Download workflow artifact
-        uses: dawidd6/action-download-artifact@bd10f381a96414ce2b13a11bfa89902ba7cea07f # v2.24.3
+        uses: dawidd6/action-download-artifact@5e780fc7bbd0cac69fc73271ed86edf5dcb72d67 # v2.26.0
         with:
           github_token: ${{ secrets.BOT_TOKEN }}
           workflow: pr-validate.yaml
@@ -34,7 +34,7 @@ jobs:
           path: ./pr_metadata/pr_number.txt
 
       - name: "Get workflow job status"
-        uses: actions/github-script@d556feaca394842dc55e4734bf3bb9f685482fa0 # tag=v6
+        uses: actions/github-script@98814c53be79b1d30f795b907e553d8679345975 # v6
         id: get-workflow-jobs
         with:
           github-token: ${{ secrets.BOT_TOKEN }}

.github/workflows/pr-validate.yaml

@@ -71,7 +71,7 @@ jobs:
         id: get_head_commit_message
         run: echo "::set-output name=headCommitMsg::$(git show -s --format=%s)"
 
-  automerge:
+  automerge-and-approve:
     needs:
       - pr-metadata
       - catalog-test
@@ -79,11 +79,14 @@ jobs:
       - charts-lint
       - print_head_msg
     if: needs.print_head_msg.outputs.head-commit-message == 'Commit bumped Chart Version'
-    name: Automerge build
+    name: Automerge and Approve build
     runs-on: ubuntu-latest
     steps:
+      - uses: hmarr/auto-approve-action@v3
+        with:
+          github-token: "${{ secrets.PERS_PAT }}"
       - name: automerge
-        uses: pascalgn/automerge-action@eb68b061739cb9d81564f8e812d0b3c45f0fb09a # tag=v0.15.5
+        uses: pascalgn/automerge-action@22948e0bc22f0aa673800da838595a3e7347e584 # v0.15.6
         env:
           GITHUB_TOKEN: "${{ secrets.BOT_TOKEN }}"
           UPDATE_RETRIES: 12

.github/workflows/prune.yaml

@@ -12,6 +12,6 @@ jobs:
         uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
         with:
           fetch-depth: 0
-      - uses: actions/delete-package-versions@a31a43afa6c2d3afdf8b5f1e311b2dc75585932e # tag=v3
+      - uses: actions/delete-package-versions@ba4d22f25141387e5ab82cfec079de6d2df96815 # v4
         with:
           min-versions-to-keep: 200

.github/workflows/renovate-bump.yaml

@@ -12,7 +12,7 @@ jobs:
     name: Get changed Apps
     runs-on: ubuntu-20.04
     container:
-      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:3b53132c6c6e14393f8f69e64e2237c8460a466753c285542324aa993ed1795d
+      image: ghcr.io/truecharts/devcontainer:v3.1.1@sha256:44047909bbf54cb1ce3551ae0b342244a5bdcd62562a7f2f07caad4bf8856ee4
     steps:
       - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
         name: Checkout

.github/workflows/renovate.yml

@@ -1,8 +1,8 @@
 name: Renovate
 on:
   workflow_dispatch:
-  schedule:
-    - cron: "0 */1 * * *"
+  # schedule:
+  #   - cron: "0 */1 * * *"
 jobs:
   renovate:
     runs-on: ubuntu-latest
@@ -12,7 +12,7 @@ jobs:
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@c4ea9ea73ec458a71cdb70b08acfb91492946072 # v34.109.1
+        uses: renovatebot/github-action@1b6d32d6058e85e60825f27572934f36b00ebbd3 # v34.153.1
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/stale.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
       - name: Check for stale issues and PRs
-        uses: actions/stale@5ebf00ea0e4c1561e9b43a292ed34424fb1d4578 # tag=v6
+        uses: actions/stale@6f05e4244c9a0b2ed3401882b05d701dd0a7289b # v7
         with:
           repo-token: ${{ secrets.BOT_TOKEN }}
           days-before-issue-stale: 180

.gitignore

@@ -56,3 +56,4 @@ website/
 pub/
 tgz_cache/
 index_cache/
+helm/

.pre-commit-config.yaml

@@ -8,23 +8,33 @@ repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v4.0.1
     hooks:
-      - id: trailing-whitespace # trims trailing whitespace.
-      - id: end-of-file-fixer # ensures that a file is either empty, or ends with one newline.
+      # trims trailing whitespace.
+      - id: trailing-whitespace
+      # ensures that a file is either empty, or ends with one newline.
+      - id: end-of-file-fixer
       - id: fix-byte-order-marker
-      - id: mixed-line-ending # replaces or checks mixed line ending.
-      - id: check-merge-conflict # checks for files that contain merge conflict strings.
-      - id: check-case-conflict # checks for files that would conflict in case-insensitive filesystems.
-      - id: check-executables-have-shebangs # ensures that (non-binary) executables have a shebang.
-      - id: check-shebang-scripts-are-executable # ensures that (non-binary) files with a shebang are executable.
+      # replaces or checks mixed line ending.
+      - id: mixed-line-ending
+      # checks for files that contain merge conflict strings.
+      - id: check-merge-conflict
+      # checks for files that would conflict in case-insensitive filesystems.
+      - id: check-case-conflict
+      # ensures that (non-binary) executables have a shebang.
+      - id: check-executables-have-shebangs
+      # ensures that (non-binary) files with a shebang are executable.
+      - id: check-shebang-scripts-are-executable
       - id: check-docstring-first
       - id: check-symlinks
       - id: destroyed-symlinks
-      - id: fix-byte-order-marker # removes utf-8 byte order marker.
-      - id: requirements-txt-fixer # sorts entries in requirements.txt.
-      - id: check-added-large-files # prevents giant files from being committed.
-      - id: check-yaml # checks yaml files for parseable syntax.
+      # removes utf-8 byte order marker.
+      - id: fix-byte-order-marker
+      # sorts entries in requirements.txt.
+      - id: requirements-txt-fixer
+      # checks yaml files for parseable syntax.
+      - id: check-yaml
         exclude: (templates\/.*|crds\/.*|questions.yaml|chart_schema.yaml)
-      - id: detect-private-key # detects the presence of private keys.
+        # detects the presence of private keys.
+      - id: detect-private-key
 
   - repo: https://github.com/pre-commit/pygrep-hooks
     rev: v1.9.0
@@ -38,3 +48,13 @@ repos:
       - id: prettier
         exclude: (templates\/.*|crds\/.*|README.md|CHANGELOG.md|questions.yaml|devcontainer.json)
         files: \.(js|ts|jsx|tsx|css|less|html|json|markdown|md|yaml|yml)$
+
+  # Update the rev variable with the release version that you want, from the yamllint repo
+  # You can pass your custom .yamllint with args attribute.
+  - repo: https://github.com/adrienverge/yamllint.git
+    rev: v1.17.0
+    hooks:
+      - id: yamllint
+        exclude: (templates\/.*|crds\/.*|README.md|CHANGELOG.md|questions.yaml|devcontainer.json|chart_schema.yaml)
+        files: \.(yaml|yml)$
+        args: [-c=.github/lintconf.yaml]

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.1.2.9"
+appVersion: "23.2.1.253"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -20,10 +20,10 @@ maintainers:
 name: clickhouse
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
-  - https://hub.docker.com/clickhouse/clickhouse-server
+  - https://hub.docker.com/r/clickhouse/clickhouse-server
   - https://clickhouse.com/
 type: application
-version: 3.0.18
+version: 4.0.9
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/clickhouse/ci/basic-values.yaml

@@ -0,0 +1 @@
+clickhousePassword: "testpassword"

charts/dependency/clickhouse/questions.yaml

@@ -1,10 +1,15 @@
 # Include{groups}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
 # Include{containerConfig}
   - variable: clickhouseDatabase
     group: "App Configuration"
@@ -96,51 +101,34 @@ questions:
             attrs:
 # Include{persistenceBasic}
 # Include{persistenceList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
                 schema:
-                  type: boolean
-                  default: true
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
+                  type: int
+                  default: 568
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
+
 # Include{resources}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
+# Include{netshoot}
 # Include{vpn}
 # Include{documentation}

charts/dependency/clickhouse/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/dependency/clickhouse/templates/common.yaml

@@ -1 +1 @@
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/clickhouse/values.yaml

@@ -1,32 +1,56 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: 23.1.2.9@sha256:d5fcecb813f5692f9f9cfbfd1d4822bb0ea8dcfa8f066d0fa6769b19ca32d9d3
+  tag: 23.2.1.2537@sha256:669278d98936a2d12bf8f331067afb6a34e5570fdcb37b854bb5d0b2d8f30108
 
-controller:
-  type: statefulset
-  strategy: RollingUpdate
-  rollingUpdate:
-    unavailable: 1
+workload:
+  main:
+    type: StatefulSet
+    replicas: 1
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          env:
+            CLICKHOUSE_DB: "{{ .Values.clickhouseDatabase }}"
+            CLICKHOUSE_USER: "{{ .Values.clickhouseUsername }}"
+            CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: "{{ .Values.clickhouseDefaultAccessManagement }}"
+            CLICKHOUSE_PASSWORD:
+              secretKeyRef:
+                expandObjectName: "{{ if .Values.clickhousePassword }}true{{ else }}false{{ end }}"
+                name: '{{ if .Values.clickhousePassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "clickhousecreds" }}{{ end }}'
+                key: "clickhouse-password"
+
+          probes:
+            liveness:
+              type: http
+              path: /ping
+            readiness:
+              type: http
+              path: /ping
+            startup:
+              type: http
+              path: /ping
 
 securityContext:
-  readOnlyRootFilesystem: false
-  # Optional capabilities advanced ClickHouse features. See also:
-  # https://github.com/ClickHouse/ClickHouse/blob/master/docker/server/README.md#linux-capabilities
-  # https://kb.altinity.com/altinity-kb-setup-and-maintenance/altinity-kb-clickhouse-in-docker/
-  # https://github.com/ClickHouse/ClickHouse/blob/b844c36a9d5e76300a88b4f49e6debccf1ad22e4/programs/install/Install.cpp#L793-L804
-  # capabilities:
-  #   add:
-  #     - IPC_LOCK
-  #     - NET_ADMIN
-  #     - SYS_NICE
+  container:
+    readOnlyRootFilesystem: false
+    # Optional capabilities advanced ClickHouse features. See also:
+    # https://github.com/ClickHouse/ClickHouse/blob/master/docker/server/README.md#linux-capabilities
+    # https://kb.altinity.com/altinity-kb-setup-and-maintenance/altinity-kb-clickhouse-in-docker/
+    # https://github.com/ClickHouse/ClickHouse/blob/b844c36a9d5e76300a88b4f49e6debccf1ad22e4/programs/install/Install.cpp#L793-L804
+    # capabilities:
+    #   add:
+    #     - IPC_LOCK
+    #     - NET_ADMIN
+    #     - SYS_NICE
 
 service:
   main:
     ports:
       main:
         port: 8123
-        protocol: HTTP
+        protocol: http
         targetPort: 8123
 
 volumeClaimTemplates:
@@ -34,21 +58,13 @@ volumeClaimTemplates:
     enabled: true
     mountPath: /var/lib/clickhouse
 
-probes:
-  liveness:
-    type: HTTP
-    path: /ping
-  readiness:
-    type: HTTP
-    path: /ping
-  startup:
-    type: HTTP
-    path: /ping
-
 clickhouseDatabase: "test"
 clickhouseUsername: "test"
-clickhousePassword: "testpass"
 clickhouseDefaultAccessManagement: 0
+
+# -- Secret or password
+# One of these options is required, unless used as a dependency for another TrueCharts chart.
+clickhousePassword: ""
 existingSecret: ""
 
 secret:
@@ -57,17 +73,9 @@ secret:
     data:
       clickhouse-password: '{{ ( .Values.clickhousePassword | default "empty" ) }}'
 
-env:
-  CLICKHOUSE_DB: "{{ .Values.clickhouseDatabase }}"
-  CLICKHOUSE_USER: "{{ .Values.clickhouseUsername }}"
-  CLICKHOUSE_DEFAULT_ACCESS_MANAGEMENT: "{{ .Values.clickhouseDefaultAccessManagement }}"
-  CLICKHOUSE_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "clickhouse-password"
-
 portal:
-  enabled: false
+  open:
+    enabled: false
 
-manifests:
+manifestManager:
   enabled: false

charts/dependency/collabora-online/questions.yaml

@@ -1,160 +0,0 @@
-# Include{groups}
-portals:
-  open:
-# Include{portalLink}
-    path: "/"
-  admin:
-# Include{portalLink}
-    path: "/browser/dist/admin/admin.html"
-questions:
-# Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
-  - variable: secretEnv
-    group: "App Configuration"
-    label: "Image Secrets"
-    schema:
-      additional_attrs: true
-      type: dict
-      attrs:
-        - variable: username
-          label: "Username for WebUI"
-          schema:
-            type: string
-            default: "admin"
-            required: true
-        - variable: password
-          label: "Password for WebUI"
-          schema:
-            type: string
-            valid_chars: "[a-zA-Z0-9!@#$%^&*?]{8,}"
-            private: true
-            required: true
-            default: "REPLACETHIS"
-  - variable: env
-    group: "App Configuration"
-    label: "Image Environment"
-    schema:
-      additional_attrs: true
-      type: dict
-      attrs:
-        - variable: aliasgroup1
-          label: "aliasgroup1"
-          description: "Comma separated hosts list."
-          schema:
-            type: string
-            default: ""
-        - variable: dictionaries
-          label: "Dictionaries to use, leave empty to use all"
-          schema:
-            type: string
-            default: "de_DE en_GB en_US es_ES fr_FR it nl pt_BR pt_PT ru"
-        - variable: extra_params
-          label: "Extra Parameters to add"
-          description: 'e.g. "--o:welcome.enable=false", See more on /etc/loolwsd/loolwsd.xml. Separate params with space'
-          schema:
-            type: string
-            default: "--o:welcome.enable=false --o:logging.level=information --o:user_interface.mode=notebookbar --o:ssl.termination=true --o:ssl.enable=false"
-        - variable: DONT_GEN_SSL_CERT
-          label: "DONT_GEN_SSL_CERT"
-          description: "When set to true it does NOT generate an SSL cert, you have to use your own"
-          schema:
-            type: boolean
-            default: true
-        - variable: server_name
-          label: "Server Name"
-          description: "When this environment variable is set (is not empty), then its value will be used as server name in /etc/loolwsd/loolwsd.xml. Without this, CODE is not delivering a correct host for the websocket connection in case of a proxy in front of it."
-          schema:
-            type: string
-            default: 'collabora.domain.tld'
-            valid_chars: '^((([a-z\d](-?[a-z\d]){0,62})\.)*(([a-z\d](-?[a-z\d]){0,62})\.)([a-z](-?[a-z\d]){1,62})|((\d{1,3}\.){3}\d{1,3}))$'
-# Include{containerConfig}
-# Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{serviceSelectorLoadBalancer}
-# Include{serviceSelectorExtras}
-                    - variable: main
-                      label: "Main Service Port Configuration"
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
-                            schema:
-                              type: int
-                              default: 10105
-                              required: true
-# Include{serviceExpertRoot}
-            default: false
-# Include{serviceExpert}
-# Include{serviceList}
-# Include{persistenceList}
-# Include{ingressRoot}
-        - variable: main
-          label: "Main Ingress"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{ingressDefault}
-# Include{ingressTLS}
-# Include{ingressTraefik}
-# Include{ingressList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
-                schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
-                schema:
-                  type: boolean
-                  default: false
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
-                schema:
-                  type: boolean
-                  default: true
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 104
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 106
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
-# Include{resources}
-# Include{advanced}
-# Include{addons}
-# Include{codeserver}
-# Include{vpn}
-# Include{documentation}

charts/dependency/collabora-online/values.yaml

@@ -1,54 +0,0 @@
-image:
-  repository: tccr.io/truecharts/collabora
-  tag: 22.05.9.3.1@sha256:59dfb2d36e8b7a415e68e5be7f0dc403d6af3e97f60219411b1677534fe4f3c6
-  pullPolicy: IfNotPresent
-
-controller:
-  # -- Set the controller type.
-  # Valid options are deployment, daemonset or statefulset
-  type: statefulset
-  # -- Number of desired pods
-  replicas: 1
-  # -- Set the controller upgrade strategy
-  # For Deployments, valid values are Recreate (default) and RollingUpdate.
-  # For StatefulSets, valid values are OnDelete and RollingUpdate (default).
-  # DaemonSets ignore this.
-  strategy: RollingUpdate
-  rollingUpdate:
-    # -- Set deployment RollingUpdate max unavailable
-    unavailable: 1
-    # -- Set deployment RollingUpdate max surge
-    surge:
-    # -- Set statefulset RollingUpdate partition
-    partition:
-  # -- ReplicaSet revision history limit
-  revisionHistoryLimit: 3
-
-securityContext:
-  readOnlyRootFilesystem: false
-  allowPrivilegeEscalation: true
-
-podSecurityContext:
-  runAsUser: 104
-  runAsGroup: 106
-
-service:
-  main:
-    ports:
-      main:
-        port: 10105
-        targetPort: 9980
-
-secretEnv:
-  username: ""
-  password: ""
-
-env:
-  aliasgroup1: ""
-  dictionaries: "de_DE en_GB en_US es_ES fr_FR it nl pt_BR pt_PT ru"
-  extra_params: "--o:welcome.enable=false --o:logging.level=information --o:user_interface.mode=notebookbar --o:ssl.termination=true --o:ssl.enable=false "
-  server_name: "collabora.domain.tld"
-  DONT_GEN_SSL_CERT: true
-
-portal:
-  enabled: true

charts/dependency/mariadb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.10.2"
+appVersion: "10.11.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -21,12 +21,12 @@ maintainers:
 name: mariadb
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/mariadb
-  - https://hub.docker.com/bitnami/mariadb
+  - https://hub.docker.com/r/bitnami/mariadb
   - https://github.com/bitnami/bitnami-docker-mariadb
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 5.0.26
+version: 6.0.9
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/ci/basic-values.yaml

@@ -0,0 +1 @@
+mariadbPassword: "testpassword"

charts/dependency/mariadb/questions.yaml

@@ -1,10 +1,15 @@
 # Include{groups}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
 # Include{containerConfig}
   - variable: mariadbDatabase
     group: "App Configuration"
@@ -74,51 +79,34 @@ questions:
             attrs:
 # Include{persistenceBasic}
 # Include{persistenceList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 0
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
+
 # Include{resources}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
+# Include{netshoot}
 # Include{vpn}
 # Include{documentation}

charts/dependency/mariadb/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/dependency/mariadb/templates/common.yaml

@@ -1 +1 @@
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/mariadb/values.yaml

@@ -1,28 +1,51 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: 10.10.2@sha256:1a90d0e738834982de7e9f0046f2bbdf1f4b3388987359fb868e610c2cca6efa
+  tag: 10.11.2@sha256:fc01102eef1de92155b5097636ef738700c8bef1735f52a397b1505cbf455c0f
 
-controller:
-  # -- Set the controller type.
-  # Valid options are deployment, daemonset or statefulset
-  type: statefulset
-  # -- Number of desired pods
-  replicas: 1
-  # -- Set the controller upgrade strategy
-  # For Deployments, valid values are Recreate (default) and RollingUpdate.
-  # For StatefulSets, valid values are OnDelete and RollingUpdate (default).
-  # DaemonSets ignore this.
-  strategy: RollingUpdate
-  rollingUpdate:
-    # -- Set deployment RollingUpdate max unavailable
-    unavailable: 1
-    # -- Set deployment RollingUpdate max surge
-    surge:
-    # -- Set statefulset RollingUpdate partition
-    partition:
-  # -- ReplicaSet revision history limit
-  revisionHistoryLimit: 3
+workload:
+  main:
+    replicas: 1
+    type: StatefulSet
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          env:
+            MARIADB_PASSWORD:
+              secretKeyRef:
+                expandObjectName: "{{ if .Values.mariadbPassword }}true{{ else }}false{{ end }}"
+                name: '{{ if .Values.mariadbPassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "mariadbcreds" }}{{ end }}'
+                key: "mariadb-password"
+            MARIADB_ROOT_PASSWORD:
+              secretKeyRef:
+                expandObjectName: "{{ if .Values.mariadbPassword }}true{{ else }}false{{ end }}"
+                name: '{{ if .Values.mariadbPassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "mariadbcreds" }}{{ end }}'
+                key: "mariadb-root-password"
+            MARIADB_USER: "{{ .Values.mariadbUsername }}"
+            MARIADB_DATABASE: "{{ .Values.mariadbDatabase }}"
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command:
+                - /bin/bash
+                - -ec
+                - "until /opt/bitnami/scripts/mariadb/healthcheck.sh; do sleep 2; done"
+            readiness:
+              enabled: true
+              type: exec
+              command:
+                - /bin/bash
+                - -ec
+                - "until /opt/bitnami/scripts/mariadb/healthcheck.sh; do sleep 2; done"
+            startup:
+              enabled: true
+              type: exec
+              command:
+                - /bin/bash
+                - -ec
+                - "until /opt/bitnami/scripts/mariadb/healthcheck.sh; do sleep 2; done"
 
 service:
   main:
@@ -32,7 +55,9 @@ service:
         targetPort: 3306
 
 securityContext:
-  readOnlyRootFilesystem: false
+  container:
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
 
 secret:
   credentials:
@@ -41,87 +66,23 @@ secret:
       mariadb-password: '{{ ( .Values.mariadbPassword | default "empty" ) }}'
       mariadb-root-password: '{{ ( .Values.mariadbRootPassword | default "empty" ) }}'
 
-env:
-  MARIADB_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "mariadb-password"
-  MARIADB_ROOT_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "mariadb-root-password"
-  MARIADB_USER: "{{ .Values.mariadbUsername }}"
-  MARIADB_DATABASE: "{{ .Values.mariadbDatabase }}"
-
-podSecurityContext:
-  runAsGroup: 0
-
 volumeClaimTemplates:
   data:
     enabled: true
     mountPath: "/bitnami/mariadb"
 
-# -- Probe configuration
-# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
-# @default -- See below
-probes:
-  # -- Liveness probe configuration
-  # @default -- See below
-  liveness:
-    # -- Enable the liveness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own livenessProbe
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - "until /opt/bitnami/scripts/mariadb/healthcheck.sh; do sleep 2; done"
-
-  # -- Redainess probe configuration
-  # @default -- See below
-  readiness:
-    # -- Enable the readiness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own readinessProbe
-    custom: true
-    # -- The spec field contains the values for the default readinessProbe.
-    # If you selected `custom: true`, this field holds the definition of the readinessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - "until /opt/bitnami/scripts/mariadb/healthcheck.sh; do sleep 2; done"
-  # -- Startup probe configuration
-  # @default -- See below
-  startup:
-    # -- Enable the startup probe
-    enabled: true
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - "until /opt/bitnami/scripts/mariadb/healthcheck.sh; do sleep 2; done"
-
-mariadbPassword: "testpass"
 mariadbUsername: "test"
 mariadbDatabase: "test"
 mariadbRootPassword: "testroot"
+
+# -- Secret or password
+# One of these options is required, unless used as a dependency for another TrueCharts chart.
+mariadbPassword: ""
 existingSecret: ""
 
 portal:
-  enabled: false
+  open:
+    enabled: false
 
-manifests:
+manifestManager:
   enabled: false

charts/dependency/memcached/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.18"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -20,11 +20,11 @@ maintainers:
 name: memcached
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/memcached
-  - https://hub.docker.com/bitnami/memcached
+  - https://hub.docker.com/r/bitnami/memcached
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 5.0.25
+version: 6.0.9
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/questions.yaml

@@ -1,32 +1,14 @@
 # Include{groups}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
 # Include{containerConfig}
-  - variable: postgresqlDatabase
-    group: "App Configuration"
-    label: "Database Name"
-    schema:
-      type: string
-      default: "mydatabase"
-      required: true
-  - variable: postgresqlUsername
-    group: "App Configuration"
-    label: "Database User"
-    schema:
-      type: string
-      default: "mydatabaseuser"
-      required: true
-  - variable: postgresqlPassword
-    group: "App Configuration"
-    label: "Database Password"
-    schema:
-      type: string
-      default: ""
-      required: true
 # Include{serviceRoot}
         - variable: main
           label: "Main Service"
@@ -55,51 +37,34 @@ questions:
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
                 schema:
-                  type: boolean
-                  default: true
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
+                  type: int
+                  default: 568
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
+
 # Include{resources}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
+# Include{netshoot}
 # Include{vpn}
 # Include{documentation}

charts/dependency/memcached/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/dependency/memcached/templates/common.yaml

@@ -1,2 +1,2 @@
 
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/memcached/values.yaml

@@ -1,17 +1,19 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: 1.6.18@sha256:e53803598eedae2c5da839832bf49fcc054b3367608325ec15a2e51c299cca91
+  tag: 1.6.18@sha256:49998f1e9bb4c1537c559c9e6a757c93a346d2ea6b03d03ecdca3bda3c8d4ab6
 
 service:
   main:
     ports:
       main:
         port: 11211
+        protocol: tcp
         targetPort: 11211
 
 portal:
-  enabled: false
+  open:
+    enabled: false
 
-manifests:
+manifestManager:
   enabled: false

charts/dependency/mongodb/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "6.0.4"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -20,12 +20,11 @@ maintainers:
 name: mongodb
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/mongodb
-  - https://hub.docker.com/bitnami/mongodb
-  - bitnami/mongodb mongoclient/mongoclient
+  - https://hub.docker.com/r/bitnami/mongodb
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 4.0.28
+version: 5.0.9
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/ci/basic-values.yaml

@@ -0,0 +1 @@
+mongodbPassword: "testpassword"

charts/dependency/mongodb/questions.yaml

@@ -1,10 +1,15 @@
 # Include{groups}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
 # Include{containerConfig}
   - variable: mongodbDatabase
     group: "App Configuration"
@@ -74,51 +79,34 @@ questions:
             attrs:
 # Include{persistenceBasic}
 # Include{persistenceList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 0
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
+
 # Include{resources}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
+# Include{netshoot}
 # Include{vpn}
 # Include{documentation}

charts/dependency/mongodb/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/dependency/mongodb/templates/common.yaml

@@ -1 +1 @@
-{{- include "tc.common.loader.all" . }}
+{{- include "tc.v1.common.loader.all" . }}

charts/dependency/mongodb/values.yaml

@@ -1,28 +1,82 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: 6.0.4@sha256:e62f402b73e6663d7d1ab8195906153eb9f1487b464673e627125171478b40de
+  tag: 6.0.4@sha256:3600c9f13d96311ddad4d2de6520d54c89a8708ee36798e4dc6fb93f59c1eab4
 
-controller:
-  # -- Set the controller type.
-  # Valid options are deployment, daemonset or statefulset
-  type: statefulset
-  # -- Number of desired pods
-  replicas: 1
-  # -- Set the controller upgrade strategy
-  # For Deployments, valid values are Recreate (default) and RollingUpdate.
-  # For StatefulSets, valid values are OnDelete and RollingUpdate (default).
-  # DaemonSets ignore this.
-  strategy: RollingUpdate
-  rollingUpdate:
-    # -- Set deployment RollingUpdate max unavailable
-    unavailable: 1
-    # -- Set deployment RollingUpdate max surge
-    surge:
-    # -- Set statefulset RollingUpdate partition
-    partition:
-  # -- ReplicaSet revision history limit
-  revisionHistoryLimit: 3
+workload:
+  main:
+    replicas: 1
+    type: StatefulSet
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          env:
+            MONGODB_USERNAME: "{{ .Values.mongodbUsername }}"
+            MONGODB_DATABASE: "{{ .Values.mongodbDatabase }}"
+            MONGODB_PASSWORD:
+              secretKeyRef:
+                expandObjectName: "{{ if .Values.mongodbPassword }}true{{ else }}false{{ end }}"
+                name: '{{ if .Values.mongodbPassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "mongodbcreds" }}{{ end }}'
+                key: "mongodb-password"
+            MONGODB_ROOT_PASSWORD:
+              secretKeyRef:
+                expandObjectName: "{{ if .Values.mongodbPassword }}true{{ else }}false{{ end }}"
+                name: '{{ if .Values.mongodbPassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "mongodbcreds" }}{{ end }}'
+                key: "mongodb-root-password"
+          # -- Probe configuration
+          # -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
+          # @default -- See below
+          probes:
+            # -- Liveness probe configuration
+            # @default -- See below
+            liveness:
+              # -- Enable the liveness probe
+              enabled: true
+              # -- Set this to `true` if you wish to specify your own livenessProbe
+              custom: true
+              # -- The spec field contains the values for the default livenessProbe.
+              # If you selected `custom: true`, this field holds the definition of the livenessProbe.
+              # @default -- See below
+              spec:
+                exec:
+                  command:
+                    - /bin/bash
+                    - -ec
+                    - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
+
+            # -- Redainess probe configuration
+            # @default -- See below
+            readiness:
+              # -- Enable the readiness probe
+              enabled: true
+              # -- Set this to `true` if you wish to specify your own readinessProbe
+              custom: true
+              # -- The spec field contains the values for the default readinessProbe.
+              # If you selected `custom: true`, this field holds the definition of the readinessProbe.
+              # @default -- See below
+              spec:
+                exec:
+                  command:
+                    - /bin/bash
+                    - -ec
+                    - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
+
+            # -- Startup probe configuration
+            # @default -- See below
+            startup:
+              # -- Enable the startup probe
+              enabled: true
+              custom: true
+              # -- The spec field contains the values for the default livenessProbe.
+              # If you selected `custom: true`, this field holds the definition of the livenessProbe.
+              # @default -- See below
+              spec:
+                exec:
+                  command:
+                    - /bin/bash
+                    - -ec
+                    - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
 
 service:
   main:
@@ -32,74 +86,22 @@ service:
         targetPort: 27017
 
 securityContext:
-  readOnlyRootFilesystem: false
-
-podSecurityContext:
-  runAsGroup: 0
+  container:
+    runAsGroup: 0
+    readOnlyRootFilesystem: false
 
 volumeClaimTemplates:
   data:
     enabled: true
     mountPath: "/bitnami/mongodb"
 
-# -- Probe configuration
-# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
-# @default -- See below
-probes:
-  # -- Liveness probe configuration
-  # @default -- See below
-  liveness:
-    # -- Enable the liveness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own livenessProbe
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
-
-  # -- Redainess probe configuration
-  # @default -- See below
-  readiness:
-    # -- Enable the readiness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own readinessProbe
-    custom: true
-    # -- The spec field contains the values for the default readinessProbe.
-    # If you selected `custom: true`, this field holds the definition of the readinessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
-
-  # -- Startup probe configuration
-  # @default -- See below
-  startup:
-    # -- Enable the startup probe
-    enabled: true
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - echo "db.runCommand(\"ping\")" | mongosh --host localhost --port 27017 ${MONGODB_DATABASE} --quiet
-
-mongodbPassword: "testpass"
 mongodbUsername: "test"
 mongodbDatabase: "test"
 mongodbRootPassword: "testroot"
+
+# -- Secret or password
+# One of these options is required, unless used as a dependency for another TrueCharts chart.
+mongodbPassword: ""
 existingSecret: ""
 
 secret:
@@ -109,20 +111,9 @@ secret:
       mongodb-password: '{{ ( .Values.mongodbPassword | default "empty" ) }}'
       mongodb-root-password: '{{ ( .Values.mongodbRootPassword | default "empty" ) }}'
 
-env:
-  MONGODB_USERNAME: "{{ .Values.mongodbUsername }}"
-  MONGODB_DATABASE: "{{ .Values.mongodbDatabase }}"
-  MONGODB_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "mongodb-password"
-  MONGODB_ROOT_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "mongodb-root-password"
-
 portal:
-  enabled: false
+  open:
+    enabled: false
 
-manifests:
+manifestManager:
   enabled: false

charts/dependency/postgresql/questions.yaml

@@ -1,124 +0,0 @@
-# Include{groups}
-questions:
-# Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
-# Include{containerConfig}
-  - variable: postgresqlDatabase
-    group: "App Configuration"
-    label: "Database Name"
-    schema:
-      type: string
-      default: "mydatabase"
-      required: true
-  - variable: postgresqlUsername
-    group: "App Configuration"
-    label: "Database User"
-    schema:
-      type: string
-      default: "mydatabaseuser"
-      required: true
-  - variable: postgresqlPassword
-    group: "App Configuration"
-    label: "Database Password"
-    schema:
-      type: string
-      default: ""
-      required: true
-  - variable: postgrespassword
-    group: "App Configuration"
-    label: "Root Password"
-    schema:
-      type: string
-      default: ""
-      required: true
-# Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{serviceSelectorLoadBalancer}
-# Include{serviceSelectorExtras}
-                    - variable: main
-                      label: "Main Service Port Configuration"
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
-                            schema:
-                              type: int
-                              default: 5432
-                              required: true
-# Include{serviceExpertRoot}
-            default: false
-# Include{serviceExpert}
-# Include{serviceList}
-# Include{vctRoot}
-      additional_attrs: true
-      type: dict
-      attrs:
-        - variable: db
-          label: "DB Storage"
-          description: "Stores the old Application Database."
-          schema:
-            type: dict
-            hidden: true
-            attrs:
-# Include{persistenceBasic}
-# Include{persistenceList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
-                schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
-                schema:
-                  type: boolean
-                  default: false
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
-                schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 0
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
-# Include{resources}
-# Include{advanced}
-# Include{addons}
-# Include{codeserver}
-# Include{vpn}
-# Include{documentation}

charts/dependency/postgresql/values.yaml

@@ -1,132 +0,0 @@
-image:
-  repository: tccr.io/truecharts/postgresql
-  pullPolicy: IfNotPresent
-  tag: 14.6.0@sha256:101b616f2cd0d4d3c1963ecdffd5ffc5704f202967288e718f7aa2ae526600bc
-
-controller:
-  # -- Set the controller type.
-  # Valid options are deployment, daemonset or statefulset
-  type: statefulset
-  # -- Number of desired pods
-  replicas: 1
-  # -- Set the controller upgrade strategy
-  # For Deployments, valid values are Recreate (default) and RollingUpdate.
-  # For StatefulSets, valid values are OnDelete and RollingUpdate (default).
-  # DaemonSets ignore this.
-  strategy: RollingUpdate
-  rollingUpdate:
-    # -- Set deployment RollingUpdate max unavailable
-    unavailable: 1
-    # -- Set deployment RollingUpdate max surge
-    surge:
-    # -- Set statefulset RollingUpdate partition
-    partition:
-  # -- ReplicaSet revision history limit
-  revisionHistoryLimit: 3
-
-securityContext:
-  readOnlyRootFilesystem: false
-
-service:
-  main:
-    ports:
-      main:
-        port: 5432
-        targetPort: 5432
-
-## TODO: Fix the backup-on-upgrade system
-enableUpgradeBackup: false
-
-podSecurityContext:
-  runAsGroup: 0
-
-volumeClaimTemplates:
-  db:
-    enabled: true
-    mountPath: "/bitnami/postgresql"
-
-# -- Probe configuration
-# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
-# @default -- See below
-probes:
-  # -- Liveness probe configuration
-  # @default -- See below
-  liveness:
-    # -- Enable the liveness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own livenessProbe
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - sh
-          - -c
-          - "until pg_isready -U ${POSTGRES_USER} -h localhost; do sleep 2 ; done"
-
-  # -- Redainess probe configuration
-  # @default -- See below
-  readiness:
-    # -- Enable the readiness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own readinessProbe
-    custom: true
-    # -- The spec field contains the values for the default readinessProbe.
-    # If you selected `custom: true`, this field holds the definition of the readinessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - sh
-          - -c
-          - "until pg_isready -U ${POSTGRES_USER} -h localhost; do sleep 2 ; done"
-  # -- Startup probe configuration
-  # @default -- See below
-  startup:
-    # -- Enable the startup probe
-    enabled: true
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - sh
-          - -c
-          - "until pg_isready -U ${POSTGRES_USER} -h localhost; do sleep 2 ; done"
-
-postgresqlPassword: "testpass"
-postgresqlUsername: "test"
-postgresqlDatabase: "test"
-postgrespassword: "testroot"
-existingSecret: ""
-
-secret:
-  credentials:
-    enabled: true
-    data:
-      postgresql-password: '{{ ( .Values.postgresqlPassword | default "empty" ) }}'
-      postgresql-postgres-password: '{{ ( .Values.postgrespassword | default "empty" ) }}'
-
-env:
-  POSTGRES_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "postgresql-password"
-  POSTGRESQL_POSTGRES_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "postgresql-postgres-password"
-  POSTGRES_USER: "{{ .Values.postgresqlUsername }}"
-  POSTGRES_DB: "{{ .Values.postgresqlDatabase }}"
-# POSTGRESQL_POSTGRES_PASSWORD: "{{ .Values.postgrespassword }}"
-# POSTGRESQL_PASSWORD: "{{ .Values.password }}"
-
-portal:
-  enabled: false
-
-manifests:
-  enabled: false

charts/dependency/promtail/CHANGELOG.md

@@ -1,990 +0,0 @@
-# Changelog
-
-
-
-## [promtail-4.0.0](https://github.com/truecharts/charts/compare/promtail-3.0.80...promtail-4.0.0) (2022-11-10)
-
-### Chore
-
-- Major Change to GUI
-
-
-
-
-## [promtail-3.0.80](https://github.com/truecharts/charts/compare/promtail-3.0.79...promtail-3.0.80) (2022-11-09)
-
-### Chore
-
-- update helm chart common to v10.9.5
-
-
-
-
-## [promtail-3.0.79](https://github.com/truecharts/charts/compare/promtail-3.0.78...promtail-3.0.79) (2022-11-08)
-
-### Chore
-
-- update helm chart common to v10.9.4
-
-
-
-
-## [promtail-3.0.78](https://github.com/truecharts/charts/compare/promtail-3.0.77...promtail-3.0.78) (2022-11-08)
-
-### Chore
-
-- update helm chart common to v10.9.3 ([#4348](https://github.com/truecharts/charts/issues/4348))
-
-
-
-
-## [promtail-3.0.77](https://github.com/truecharts/charts/compare/promtail-3.0.76...promtail-3.0.77) (2022-11-07)
-
-### Chore
-
-- update helm chart common to v10.9.1 ([#4339](https://github.com/truecharts/charts/issues/4339))
-
-
-
-
-## [promtail-3.0.76](https://github.com/truecharts/charts/compare/promtail-3.0.75...promtail-3.0.76) (2022-11-07)
-
-### Chore
-
-- update helm chart common to v10.9.0 ([#4337](https://github.com/truecharts/charts/issues/4337))
-
-
-
-
-## [redis-3.0.117](https://github.com/truecharts/charts/compare/redisinsight-0.0.37...redis-3.0.117) (2022-11-06)
-
-### Chore
-
-- update helm chart common to v10.8.1 ([#4326](https://github.com/truecharts/charts/issues/4326))
-
-
-
-
-## [redis-3.0.116](https://github.com/truecharts/charts/compare/redis-3.0.114...redis-3.0.116) (2022-11-05)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.8.0 ([#4305](https://github.com/truecharts/charts/issues/4305))
-  - update helm chart common to v10.7.19 ([#4305](https://github.com/truecharts/charts/issues/4305))
-
-
-
-
-## [redis-3.0.114](https://github.com/truecharts/charts/compare/redis-3.0.113...redis-3.0.114) (2022-11-04)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.15
-
-
-
-
-
-## [redis-3.0.112](https://github.com/truecharts/charts/compare/redisinsight-0.0.35...redis-3.0.112) (2022-11-03)
-
-### Chore
-
-- update helm chart common to v10.7.14
-
-
-
-
-## [redis-3.0.111](https://github.com/truecharts/charts/compare/redis-3.0.110...redis-3.0.111) (2022-11-01)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.13 ([#4268](https://github.com/truecharts/charts/issues/4268))
-
-
-
-
-## [redis-3.0.110](https://github.com/truecharts/charts/compare/redis-3.0.109...redis-3.0.110) (2022-11-01)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#4260](https://github.com/truecharts/charts/issues/4260))
-
-
-
-
-## [redis-3.0.109](https://github.com/truecharts/charts/compare/redis-3.0.108...redis-3.0.109) (2022-10-30)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.12
-
-
-
-
-## [redis-3.0.108](https://github.com/truecharts/charts/compare/redis-3.0.107...redis-3.0.108) (2022-10-29)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.11 ([#4232](https://github.com/truecharts/charts/issues/4232))
-
-
-
-
-## [redis-3.0.107](https://github.com/truecharts/charts/compare/redis-3.0.106...redis-3.0.107) (2022-10-29)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#4230](https://github.com/truecharts/charts/issues/4230))
-
-
-
-
-## [redis-3.0.106](https://github.com/truecharts/charts/compare/redis-3.0.105...redis-3.0.106) (2022-10-28)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.10
-
-
-
-
-
-## [redis-3.0.104](https://github.com/truecharts/charts/compare/redis-3.0.103...redis-3.0.104) (2022-10-27)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.8 ([#4203](https://github.com/truecharts/charts/issues/4203))
-
-
-
-
-## [redis-3.0.104](https://github.com/truecharts/charts/compare/redis-3.0.103...redis-3.0.104) (2022-10-27)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.8 ([#4203](https://github.com/truecharts/charts/issues/4203))
-
-
-
-
-## [redis-3.0.103](https://github.com/truecharts/charts/compare/redisinsight-0.0.33...redis-3.0.103) (2022-10-26)
-
-### Chore
-
-- update docker general non-major ([#4189](https://github.com/truecharts/charts/issues/4189))
-
-
-
-
-## [redis-3.0.102](https://github.com/truecharts/charts/compare/redis-3.0.101...redis-3.0.102) (2022-10-23)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#4165](https://github.com/truecharts/charts/issues/4165))
-
-
-
-
-## [redis-3.0.101](https://github.com/truecharts/charts/compare/redis-3.0.100...redis-3.0.101) (2022-10-22)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.7 ([#4162](https://github.com/truecharts/charts/issues/4162))
-
-
-
-
-## [redis-3.0.100](https://github.com/truecharts/charts/compare/redis-3.0.99...redis-3.0.100) (2022-10-21)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.6
-
-
-
-
-## [redis-3.0.99](https://github.com/truecharts/charts/compare/redis-3.0.98...redis-3.0.99) (2022-10-21)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.4 ([#4147](https://github.com/truecharts/charts/issues/4147))
-  - update docker general non-major ([#4139](https://github.com/truecharts/charts/issues/4139))
-
-
-
-
-## [redis-3.0.98](https://github.com/truecharts/charts/compare/tubearchivist-redisjson-0.0.30...redis-3.0.98) (2022-10-21)
-
-### Chore
-
-- update helm chart common to v10.7.2 ([#4143](https://github.com/truecharts/charts/issues/4143))
-
-
-
-
-## [redis-3.0.97](https://github.com/truecharts/charts/compare/redis-3.0.96...redis-3.0.97) (2022-10-17)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#4119](https://github.com/truecharts/charts/issues/4119))
-
-
-
-
-## [redis-3.0.96](https://github.com/truecharts/charts/compare/redis-3.0.95...redis-3.0.96) (2022-10-15)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.7.1
-
-
-
-
-## [redis-3.0.95](https://github.com/truecharts/charts/compare/redisinsight-0.0.31...redis-3.0.95) (2022-10-14)
-
-### Chore
-
-- update docker general non-major ([#4084](https://github.com/truecharts/charts/issues/4084))
-
-
-
-
-## [redis-3.0.94](https://github.com/truecharts/charts/compare/redis-3.0.93...redis-3.0.94) (2022-10-11)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#4070](https://github.com/truecharts/charts/issues/4070))
-
-
-
-
-## [redis-3.0.93](https://github.com/truecharts/charts/compare/redisinsight-0.0.30...redis-3.0.93) (2022-10-10)
-
-### Chore
-
-- update helm chart common to v10.7.0 ([#4063](https://github.com/truecharts/charts/issues/4063))
-
-
-
-
-## [redis-3.0.92](https://github.com/truecharts/charts/compare/redis-3.0.91...redis-3.0.92) (2022-10-07)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major
-
-
-
-
-## [redis-3.0.91](https://github.com/truecharts/charts/compare/redisinsight-0.0.29...redis-3.0.91) (2022-10-07)
-
-### Chore
-
-- update helm chart common to v10.6.11 ([#4021](https://github.com/truecharts/charts/issues/4021))
-
-
-
-
-## [redis-3.0.90](https://github.com/truecharts/charts/compare/redisinsight-0.0.28...redis-3.0.90) (2022-10-05)
-
-### Chore
-
-- split addons in smaller templates ([#3979](https://github.com/truecharts/charts/issues/3979))
-  - update docker general non-major ([#4010](https://github.com/truecharts/charts/issues/4010))
-  - update docker general non-major
-
-
-
-
-## [redis-3.0.89](https://github.com/truecharts/charts/compare/redis-3.0.88...redis-3.0.89) (2022-10-01)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#3975](https://github.com/truecharts/charts/issues/3975))
-
-
-
-
-## [redis-3.0.88](https://github.com/truecharts/charts/compare/redis-3.0.87...redis-3.0.88) (2022-10-01)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.6.8
-
-
-
-
-## [redis-3.0.87](https://github.com/truecharts/charts/compare/redis-3.0.86...redis-3.0.87) (2022-09-29)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.6.5 ([#3946](https://github.com/truecharts/charts/issues/3946))
-
-
-
-
-
-## [redis-3.0.85](https://github.com/truecharts/charts/compare/redisinsight-0.0.26...redis-3.0.85) (2022-09-26)
-
-### Chore
-
-- update helm chart common to v10.6.4 ([#3914](https://github.com/truecharts/charts/issues/3914))
-
-
-
-
-## [redis-3.0.84](https://github.com/truecharts/charts/compare/redis-3.0.83...redis-3.0.84) (2022-09-25)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.6.1 ([#3893](https://github.com/truecharts/charts/issues/3893))
-
-
-
-
-## [redis-3.0.83](https://github.com/truecharts/charts/compare/redis-3.0.82...redis-3.0.83) (2022-09-25)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#3881](https://github.com/truecharts/charts/issues/3881))
-
-
-
-
-## [redis-3.0.82](https://github.com/truecharts/charts/compare/redis-3.0.81...redis-3.0.82) (2022-09-24)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.6.0
-
-
-
-
-## [redis-3.0.81](https://github.com/truecharts/charts/compare/tubearchivist-redisjson-0.0.24...redis-3.0.81) (2022-09-23)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - update docker general non-major ([#3850](https://github.com/truecharts/charts/issues/3850))
-  - update helm chart common to v10.5.12
-
-
-
-
-## [redis-3.0.80](https://github.com/truecharts/charts/compare/redis-3.0.79...redis-3.0.80) (2022-09-22)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.5.12
-
-
-
-
-## [redis-3.0.79](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.79) (2022-09-22)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3827](https://github.com/truecharts/charts/issues/3827))
-  - update helm chart common to v10.5.11 ([#3832](https://github.com/truecharts/charts/issues/3832))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.79](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.79) (2022-09-21)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update helm chart common to v10.5.11 ([#3832](https://github.com/truecharts/charts/issues/3832))
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3827](https://github.com/truecharts/charts/issues/3827))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.77](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.77) (2022-09-21)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.77](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.77) (2022-09-20)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.77](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.77) (2022-09-20)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.77](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.77) (2022-09-19)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.77](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.77) (2022-09-19)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.77](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.77) (2022-09-19)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3790](https://github.com/truecharts/charts/issues/3790))
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.76](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.76) (2022-09-17)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - refactor Services SCALE GUI
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.76](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.76) (2022-09-18)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.76](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.76) (2022-09-16)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.76](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.76) (2022-09-16)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.76](https://github.com/truecharts/charts/compare/redis-3.0.75...redis-3.0.76) (2022-09-15)
-
-### Chore
-
-- update docker general non-major ([#3772](https://github.com/truecharts/charts/issues/3772))
-
-
-
-
-## [redis-3.0.75](https://github.com/truecharts/charts/compare/tubearchivist-redisjson-0.0.23...redis-3.0.75) (2022-09-15)
-
-### Chore
-
-- remove unneeded element from UI ([#3779](https://github.com/truecharts/charts/issues/3779))
-
-
-
-
-## [redis-3.0.74](https://github.com/truecharts/charts/compare/redisinsight-0.0.24...redis-3.0.74) (2022-09-13)
-
-### Chore
-
-- update helm chart common to v10.5.10
-
-
-
-
-## [redis-3.0.73](https://github.com/truecharts/charts/compare/redis-3.0.72...redis-3.0.73) (2022-09-12)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - Auto-update chart README [skip ci]
-  - update docker general non-major ([#3743](https://github.com/truecharts/charts/issues/3743))
-
-
-
-
-## [redis-3.0.73](https://github.com/truecharts/charts/compare/redis-3.0.72...redis-3.0.73) (2022-09-12)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update docker general non-major ([#3743](https://github.com/truecharts/charts/issues/3743))
-
-
-
-
-## [redis-3.0.73](https://github.com/truecharts/charts/compare/redis-3.0.72...redis-3.0.73) (2022-09-12)
-
-### Chore
-
-- update docker general non-major ([#3743](https://github.com/truecharts/charts/issues/3743))
-
-
-
-
-## [redis-3.0.72](https://github.com/truecharts/charts/compare/redis-3.0.71...redis-3.0.72) (2022-09-11)
-
-### Chore
-
-- update helm chart common to v10.5.9
-
-
-
-
-## [redis-3.0.71](https://github.com/truecharts/charts/compare/redis-3.0.70...redis-3.0.71) (2022-09-10)
-
-### Chore
-
-- update helm chart common to v10.5.8 ([#3729](https://github.com/truecharts/charts/issues/3729))
-  - update docker general non-major ([#3727](https://github.com/truecharts/charts/issues/3727))
-
-
-
-
-## [redis-3.0.70](https://github.com/truecharts/charts/compare/redis-3.0.69...redis-3.0.70) (2022-09-05)
-
-### Chore
-
-- update docker general non-major ([#3700](https://github.com/truecharts/charts/issues/3700))
-
-
-
-
-## [redis-3.0.69](https://github.com/truecharts/charts/compare/redis-3.0.68...redis-3.0.69) (2022-09-03)
-
-### Chore
-
-- update helm chart common to v10.5.7 ([#3676](https://github.com/truecharts/charts/issues/3676))
-
-
-
-
-## [mongodb-2.0.6](https://github.com/truecharts/charts/compare/mongodb-2.0.5...mongodb-2.0.6) (2022-09-02)
-
-### Chore
-
-- update docker general non-major ([#3660](https://github.com/truecharts/charts/issues/3660))
-
-
-
-
-## [mongodb-2.0.5](https://github.com/truecharts/charts/compare/mongodb-2.0.3...mongodb-2.0.5) (2022-08-30)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.5.6 ([#3635](https://github.com/truecharts/charts/issues/3635))
-  - update helm chart common to v10.5.5
-
-
-
-
-## [mongodb-2.0.4](https://github.com/truecharts/charts/compare/mongodb-2.0.3...mongodb-2.0.4) (2022-08-30)
-
-### Chore
-
-- update helm chart common to v10.5.5
-
-
-
-
-## [memcached-3.0.66](https://github.com/truecharts/charts/compare/memcached-3.0.65...memcached-3.0.66) (2022-08-30)
-
-### Chore
-
-- update docker general non-major ([#3623](https://github.com/truecharts/charts/issues/3623))
-
-
-
-
-## [memcached-3.0.65](https://github.com/truecharts/charts/compare/memcached-3.0.64...memcached-3.0.65) (2022-08-29)
-
-### Chore
-
-- update helm chart common to v10.5.4 ([#3613](https://github.com/truecharts/charts/issues/3613))
-
-
-
-
-## [memcached-3.0.64](https://github.com/truecharts/charts/compare/memcached-3.0.63...memcached-3.0.64) (2022-08-29)
-
-### Chore
-
-- update helm chart common to v10.5.3 ([#3610](https://github.com/truecharts/charts/issues/3610))
-
-
-
-
-
-## [memcached-3.0.62](https://github.com/truecharts/charts/compare/memcached-3.0.61...memcached-3.0.62) (2022-08-25)
-
-### Chore
-
-- update docker general non-major ([#3561](https://github.com/truecharts/charts/issues/3561))
-
-
-
-
-## [clickhouse-1.0.13](https://github.com/truecharts/charts/compare/clickhouse-1.0.12...clickhouse-1.0.13) (2022-08-25)
-
-### Chore
-
-- update helm chart common to v10.5.1 ([#3562](https://github.com/truecharts/charts/issues/3562))
-
-
-
-
-## [clickhouse-1.0.12](https://github.com/truecharts/charts/compare/clickhouse-1.0.11...clickhouse-1.0.12) (2022-08-23)
-
-### Chore
-
-- update helm chart common to v10.5.0 ([#3546](https://github.com/truecharts/charts/issues/3546))
-
-
-
-
-## [clickhouse-1.0.11](https://github.com/truecharts/charts/compare/clickhouse-1.0.10...clickhouse-1.0.11) (2022-08-19)
-
-### Chore
-
-- update docker general non-major docker tags ([#3512](https://github.com/truecharts/charts/issues/3512))
-
-
-
-
-## [clickhouse-1.0.10](https://github.com/truecharts/charts/compare/clickhouse-1.0.9...clickhouse-1.0.10) (2022-08-17)
-
-### Chore
-
-- update helm chart common to v10.4.13
-
-
-
-
-## [clickhouse-1.0.9](https://github.com/truecharts/charts/compare/clickhouse-1.0.8...clickhouse-1.0.9) (2022-08-14)
-
-### Chore
-
-- update docker general non-major docker tags ([#3465](https://github.com/truecharts/charts/issues/3465))
-
-
-
-
-## [clickhouse-1.0.8](https://github.com/truecharts/charts/compare/clickhouse-1.0.7...clickhouse-1.0.8) (2022-08-12)
-
-### Chore
-
-- add documentation checkbox/section to all SCALE Apps
-  - update helm chart common to v10.4.12
-
-  ### Fix
-
-- move extraArgs from .Values.controller to .Values ([#3447](https://github.com/truecharts/charts/issues/3447))
-
-
-
-
-## [clickhouse-1.0.7](https://github.com/truecharts/charts/compare/clickhouse-1.0.6...clickhouse-1.0.7) (2022-08-10)
-
-### Chore
-
-- update helm chart common to v10.4.11 ([#3428](https://github.com/truecharts/charts/issues/3428))
-
-
-
-
-## [clickhouse-1.0.6](https://github.com/truecharts/charts/compare/clickhouse-1.0.5...clickhouse-1.0.6) (2022-08-10)
-
-### Chore
-
-- update docker general non-major ([#3421](https://github.com/truecharts/charts/issues/3421))
-  - replace questions parts with templates ([#3402](https://github.com/truecharts/charts/issues/3402))
-
-
-
-
-## [clickhouse-1.0.5](https://github.com/truecharts/apps/compare/clickhouse-1.0.4...clickhouse-1.0.5) (2022-07-29)
-
-### Chore
-
-- update home links ([#3291](https://github.com/truecharts/apps/issues/3291))
-  - update helm chart common to v10.4.9
-
-
-
-
-## [clickhouse-1.0.4](https://github.com/truecharts/apps/compare/clickhouse-1.0.2...clickhouse-1.0.4) (2022-07-25)
-
-### Chore
-
-- Auto-update chart README [skip ci]
-  - update helm chart common to v10.4.8 ([#3296](https://github.com/truecharts/apps/issues/3296))
-  - update docker general non-major ([#3295](https://github.com/truecharts/apps/issues/3295))
-
-
-
-
-## [clickhouse-1.0.3](https://github.com/truecharts/apps/compare/clickhouse-1.0.2...clickhouse-1.0.3) (2022-07-25)
-
-### Chore
-
-- update docker general non-major ([#3295](https://github.com/truecharts/apps/issues/3295))
-
-
-
-
-## [clickhouse-1.0.2](https://github.com/truecharts/apps/compare/clickhouse-1.0.1...clickhouse-1.0.2) (2022-07-23)
-
-### Chore
-
-- update helm chart common to v10.4.7 ([#3277](https://github.com/truecharts/apps/issues/3277))
-
-
-
-
-## [clickhouse-1.0.1](https://github.com/truecharts/apps/compare/clickhouse-1.0.0...clickhouse-1.0.1) (2022-07-22)
-
-### Chore
-
-- Bump all charts to generate config and container references due to huge increase of repository
-  - update docker general non-major ([#3266](https://github.com/truecharts/apps/issues/3266))
-
-
-
-## [clickhouse-1.0.0](https://github.com/truecharts/apps/compare/clickhouse-0.0.12...clickhouse-1.0.0) (2022-07-21)
-
-### Chore
-
-- move clickhouse to dependency train, remove 2 breaking apps and remove some special characters
-
-
-
-## [clickhouse-0.0.12](https://github.com/truecharts/apps/compare/clickhouse-0.0.11...clickhouse-0.0.12) (2022-07-19)
-
-### Chore
-
-- Update Readme and Description on SCALE
-
-
-
-## [clickhouse-0.0.11](https://github.com/truecharts/apps/compare/clickhouse-0.0.10...clickhouse-0.0.11) (2022-07-14)
-
-### Fix
-
-- regenerate catalog and update template
-
-
-
-## [clickhouse-0.0.10](https://github.com/truecharts/apps/compare/clickhouse-0.0.8...clickhouse-0.0.10) (2022-07-14)
-
-### Fix
-
-- bump to ensure .helmignore is present on all Charts
-
-
-
-## [clickhouse-0.0.8](https://github.com/truecharts/apps/compare/clickhouse-0.0.6...clickhouse-0.0.8) (2022-07-12)
-
-### Chore
-
-- update icons ([#3156](https://github.com/truecharts/apps/issues/3156))
-- bump to cleanup old docs and use correct icon urls
-
-
-
-## [clickhouse-0.0.6](https://github.com/truecharts/apps/compare/clickhouse-0.0.5...clickhouse-0.0.6) (2022-07-12)
-
-### Chore
-
-- bump to regenerate documentation
-- update docker general non-major ([#3150](https://github.com/truecharts/apps/issues/3150))
-
-
-
-<a name="clickhouse-0.0.5"></a>
-### [clickhouse-0.0.5](https://github.com/truecharts/apps/compare/clickhouse-0.0.4...clickhouse-0.0.5) (2022-07-11)
-
-
-
-<a name="clickhouse-0.0.4"></a>
-### [clickhouse-0.0.4](https://github.com/truecharts/apps/compare/clickhouse-0.0.3...clickhouse-0.0.4) (2022-07-11)
-
-#### Chore
-
-* move icons into the apps folder ([#3139](https://github.com/truecharts/apps/issues/3139))
-
-
-
-<a name="clickhouse-0.0.3"></a>
-### [clickhouse-0.0.3](https://github.com/truecharts/apps/compare/clickhouse-0.0.2...clickhouse-0.0.3) (2022-07-11)
-
-
-
-<a name="clickhouse-0.0.2"></a>
-### [clickhouse-0.0.2](https://github.com/truecharts/apps/compare/clickhouse-0.0.1...clickhouse-0.0.2) (2022-07-11)
-
-#### Chore
-
-* Auto-update chart README [skip ci]
-
-#### Fix
-
-* Fix ClickHouse upstream repo ([#3134](https://github.com/truecharts/apps/issues/3134))
-
-
-
-<a name="clickhouse-0.0.1"></a>
-### clickhouse-0.0.1 (2022-07-10)
-
-#### Feat
-
-* Add ClickHouse ([#3060](https://github.com/truecharts/apps/issues/3060))

charts/dependency/promtail/Chart.yaml

@@ -1,33 +0,0 @@
-apiVersion: v2
-appVersion: "2.7.2"
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 11.1.2
-deprecated: false
-description: Promtail is an agent which ships the contents of local logs to a Loki instance
-icon: https://truecharts.org/img/hotlink-ok/chart-icons/promtail.png
-home: https://truecharts.org/charts/dependency/promtail
-keywords:
-  - metrics
-  - logs
-kubeVersion: ">=1.16.0-0"
-maintainers:
-  - email: info@truecharts.org
-    name: TrueCharts
-    url: https://truecharts.org
-name: promtail
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/dependency/promtail
-  - https://hub.docker.com/grafana/promtail
-  - https://github.com/grafana/loki
-  - https://grafana.com/oss/loki/
-  - https://grafana.com/docs/loki/latest/
-type: application
-version: 6.0.13
-annotations:
-  truecharts.org/catagories: |
-    - metrics
-    - logs
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/grade: U

charts/dependency/promtail/questions.yaml

@@ -1,43 +0,0 @@
-# Include{groups}
-portals: {}
-questions:
-# Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The serving the Prometheus WebUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{serviceSelectorLoadBalancer}
-# Include{serviceSelectorExtras}
-                    - variable: main
-                      label: "Main Service Port Configuration"
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
-                            schema:
-                              type: int
-                              default: 3101
-                              required: true
-# Include{serviceExpertRoot}
-            default: false
-# Include{serviceExpert}
-# Include{serviceList}
-# Include{persistenceList}
-# Include{ingressRoot}
-        - variable: main
-          label: "Main Ingress"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{ingressDefault}
-# Include{ingressTLS}
-# Include{ingressTraefik}
-# Include{ingressList}
-# Include{advanced}

charts/dependency/promtail/templates/_servicemonitor.tpl

@@ -1,34 +0,0 @@
-{{- define "tc.promtail.servicemonitor" -}}
-{{- if .Values.serviceMonitor.enabled }}
----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: {{ include "tc.common.names.fullname" . -}}
-  {{- with .Values.serviceMonitor.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-    {{- with .Values.serviceMonitor.labels }}
-    {{- toYaml . | nindent 4 }}
-    {{- end }}
-spec:
-  {{- with .Values.serviceMonitor.namespaceSelector }}
-  namespaceSelector:
-  {{- toYaml . | nindent 4 }}
-  {{- end }}
-  selector:
-    matchLabels:
-      {{- include "tc.common.labels.selectorLabels" . | nindent 6 }}
-  endpoints:
-    - port: http-metrics
-      {{- with .Values.serviceMonitor.interval }}
-      interval: {{ . }}
-      {{- end }}
-      {{- with .Values.serviceMonitor.scrapeTimeout }}
-      scrapeTimeout: {{ . }}
-      {{- end }}
-{{- end }}
-{{- end -}}

charts/dependency/promtail/templates/common.yaml

@@ -1,4 +0,0 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.init" . }}
-{{ include "tc.promtail.servicemonitor" . }}
-{{ include "tc.common.loader.apply" . }}

charts/dependency/promtail/values.yaml

@@ -1,258 +0,0 @@
-image:
-  repository: ghcr.io/truecharts/promtail
-  tag: 2.7.2@sha256:ab05840baa6e12a4104a9579edb983ae3932252d98e16f67571da4b79bba8af2
-
-# controller:
-#   # -- Set the controller type.
-#   # Valid options are deployment, daemonset or statefulset
-#   type: daemonset
-
-args:
-  - "-config.file=/etc/promtail/promtail.yaml"
-
-secret:
-  config:
-    enabled: true
-    data:
-      promtail.yaml: |
-        {{- tpl .Values.config.file . | nindent 4 }}
-
-env:
-  HOSTNAME:
-    fieldRef:
-      fieldPath: spec.nodeName
-
-service:
-  main:
-    ports:
-      main:
-        targetPort: 3101
-        port: 3101
-probes:
-  liveness:
-    path: "/ready"
-
-  readiness:
-    path: "/ready"
-
-  startup:
-    path: "/ready"
-
-# -- The security context for pods
-podSecurityContext:
-  runAsUser: 0
-  runAsGroup: 0
-
-# -- The security context for containers
-securityContext:
-  readOnlyRootFilesystem: true
-  capabilities:
-    drop:
-      - ALL
-  allowPrivilegeEscalation: false
-  runAsNonRoot: false
-
-persistence:
-  pods:
-    enabled: true
-    type: hostPath
-    mountPath: /var/log/pods
-    hostPath: /var/log/pods
-    readOnly: true
-  run:
-    enabled: true
-    type: hostPath
-    mountPath: /run/promtail
-    hostPath: /run/promtail
-  config:
-    enabled: true
-    type: secret
-    objectName: '{{ include "tc.common.names.fullname" . }}-config'
-    mountPath: /etc/promtail
-
-# -- Whether Role Based Access Control objects like roles and rolebindings should be created
-rbac:
-  main:
-    enabled: true
-    rules:
-      - apiGroups:
-          - ""
-        resources:
-          - nodes
-          - nodes/proxy
-          - services
-          - endpoints
-          - pods
-        verbs:
-          - get
-          - watch
-          - list
-
-# -- The service account the pods will use to interact with the Kubernetes API
-serviceAccount:
-  main:
-    enabled: true
-
-# -- Tolerations for pods. By default, pods will be scheduled on master/control-plane nodes.
-tolerations:
-  - key: node-role.kubernetes.io/master
-    operator: Exists
-    effect: NoSchedule
-  - key: node-role.kubernetes.io/control-plane
-    operator: Exists
-    effect: NoSchedule
-
-# ServiceMonitor configuration
-serviceMonitor:
-  # -- If enabled, ServiceMonitor resources for Prometheus Operator are created
-  enabled: false
-  # -- Alternative namespace for ServiceMonitor resources
-  namespace: null
-  # -- Namespace selector for ServiceMonitor resources
-  namespaceSelector: {}
-  # -- ServiceMonitor annotations
-  annotations: {}
-  # -- Additional ServiceMonitor labels
-  labels: {}
-  # -- ServiceMonitor scrape interval
-  interval: null
-  # -- ServiceMonitor scrape timeout in Go duration format (e.g. 15s)
-  scrapeTimeout: null
-
-# -- Section for crafting Promtails config file. The only directly relevant value is `config.file`
-# which is a templated string that references the other values and snippets below this key.
-# @default -- See `values.yaml`
-config:
-  # -- The log level of the Promtail server
-  # Must be reference in `config.file` to configure `server.log_level`
-  # See default config in `values.yaml`
-  logLevel: info
-  # -- The port of the Promtail server
-  # Must be reference in `config.file` to configure `server.http_listen_port`
-  # See default config in `values.yaml`
-  serverPort: 3101
-  # -- The Loki address to post logs to.
-  # Must be reference in `config.file` to configure `client.url`.
-  # See default config in `values.yaml`
-  lokiAddress: ""
-  # -- A section of reusable snippets that can be reference in `config.file`.
-  # Custom snippets may be added in order to reduce redundancy.
-  # This is especially helpful when multiple `kubernetes_sd_configs` are use which usually have large parts in common.
-  # @default -- See `values.yaml`
-  snippets:
-    pipelineStages:
-      - cri: {}
-    common:
-      - action: replace
-        source_labels:
-          - __meta_kubernetes_pod_node_name
-        target_label: node_name
-      - action: replace
-        source_labels:
-          - __meta_kubernetes_namespace
-        target_label: namespace
-      - action: replace
-        replacement: $1
-        separator: /
-        source_labels:
-          - namespace
-          - app
-        target_label: job
-      - action: replace
-        source_labels:
-          - __meta_kubernetes_pod_name
-        target_label: pod
-      - action: replace
-        source_labels:
-          - __meta_kubernetes_pod_container_name
-        target_label: container
-      - action: replace
-        replacement: /var/log/pods/*$1/*.log
-        separator: /
-        source_labels:
-          - __meta_kubernetes_pod_uid
-          - __meta_kubernetes_pod_container_name
-        target_label: __path__
-      - action: replace
-        replacement: /var/log/pods/*$1/*.log
-        regex: true/(.*)
-        separator: /
-        source_labels:
-          - __meta_kubernetes_pod_annotationpresent_kubernetes_io_config_hash
-          - __meta_kubernetes_pod_annotation_kubernetes_io_config_hash
-          - __meta_kubernetes_pod_container_name
-        target_label: __path__
-
-    # If set to true, adds an additional label for the scrape job.
-    # This helps debug the Promtail config.
-    addScrapeJobLabel: false
-
-    # -- You can put here any keys that will be directly added to the config file's 'client' block.
-    # @default -- empty
-    extraClientConfigs: ""
-
-    # -- You can put here any additional scrape configs you want to add to the config file.
-    # @default -- empty
-    extraScrapeConfigs: ""
-
-    # -- You can put here any additional relabel_configs to "kubernetes-pods" job
-    extraRelabelConfigs: []
-
-    scrapeConfigs: |
-      # See also https://github.com/grafana/loki/blob/master/production/ksonnet/promtail/scrape_config.libsonnet for reference
-      - job_name: kubernetes-pods
-        pipeline_stages:
-          {{- toYaml .Values.config.snippets.pipelineStages | nindent 4 }}
-        kubernetes_sd_configs:
-          - role: pod
-        relabel_configs:
-          - source_labels:
-              - __meta_kubernetes_pod_controller_name
-            regex: ([0-9a-z-.]+?)(-[0-9a-f]{8,10})?
-            action: replace
-            target_label: __tmp_controller_name
-          - source_labels:
-              - __meta_kubernetes_pod_label_app_kubernetes_io_name
-              - __meta_kubernetes_pod_label_app
-              - __tmp_controller_name
-              - __meta_kubernetes_pod_name
-            regex: ^;*([^;]+)(;.*)?$
-            action: replace
-            target_label: app
-          - source_labels:
-              - __meta_kubernetes_pod_label_app_kubernetes_io_component
-              - __meta_kubernetes_pod_label_component
-            regex: ^;*([^;]+)(;.*)?$
-            action: replace
-            target_label: component
-          {{- if .Values.config.snippets.addScrapeJobLabel }}
-          - replacement: kubernetes-pods
-            target_label: scrape_job
-          {{- end }}
-          {{- toYaml .Values.config.snippets.common | nindent 4 }}
-          {{- with .Values.config.snippets.extraRelabelConfigs }}
-          {{- toYaml . | nindent 4 }}
-          {{- end }}
-
-  # -- Config file contents for Promtail.
-  # Must be configured as string.
-  # It is templated so it can be assembled from reusable snippets in order to avoid redundancy.
-  # @default -- See `values.yaml`
-  file: |
-    server:
-      log_level: {{ .Values.config.logLevel }}
-      http_listen_port: {{ .Values.config.serverPort }}
-
-    client:
-      url: {{ .Values.config.lokiAddress | default ( printf "http://%v.%v.svc.cluster.local:3100/loki/api/v1/push" .Release.Name .Release.Namespace ) }}
-      {{- tpl .Values.config.snippets.extraClientConfigs . | nindent 2 }}
-
-    positions:
-      filename: /run/promtail/positions.yaml
-
-    scrape_configs:
-      {{- tpl .Values.config.snippets.scrapeConfigs . | nindent 2 }}
-      {{- tpl .Values.config.snippets.extraScrapeConfigs . | nindent 2 }}
-
-manifests:
-  enabled: false

charts/dependency/redis/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "7.0.8"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -20,12 +20,11 @@ maintainers:
 name: redis
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/redis
-  - https://hub.docker.com/bitnami/redis
-  - bitnami/redis redislabs/redisinsight redislabs/rejson
+  - https://hub.docker.com/r/bitnami/redis
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 5.0.29
+version: 6.0.14
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/ci/basic-values.yaml

@@ -0,0 +1 @@
+redisPassword: "testpassword"

charts/dependency/redis/questions.yaml

@@ -1,10 +1,15 @@
 # Include{groups}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
 # Include{containerConfig}
   - variable: redisPassword
     group: "App Configuration"
@@ -53,51 +58,34 @@ questions:
             attrs:
 # Include{persistenceBasic}
 # Include{persistenceList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID this App of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 0
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
+
 # Include{resources}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
+# Include{netshoot}
 # Include{vpn}
 # Include{documentation}

charts/dependency/redis/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/dependency/redis/templates/common.yaml

@@ -1,2 +1,2 @@
 
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/redis/values.yaml

@@ -1,34 +1,55 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: 7.0.8@sha256:b762d1eb8579cdb3543f5da78561d2ce9936667e79db2af2f8d94c95bf095209
+  tag: 7.0.8@sha256:13e0bbf5369ed2f219b96c0e7136b531eb1fdca1db7b7e2c72e13133adf26288
 
-controller:
-  # -- Set the controller type.
-  # Valid options are deployment, daemonset or statefulset
-  type: statefulset
-  # -- Number of desired pods
-  replicas: 1
-  # -- Set the controller upgrade strategy
-  # For Deployments, valid values are Recreate (default) and RollingUpdate.
-  # For StatefulSets, valid values are OnDelete and RollingUpdate (default).
-  # DaemonSets ignore this.
-  strategy: RollingUpdate
-  rollingUpdate:
-    # -- Set deployment RollingUpdate max unavailable
-    unavailable: 1
-    # -- Set deployment RollingUpdate max surge
-    surge:
-    # -- Set statefulset RollingUpdate partition
-    partition:
-  # -- ReplicaSet revision history limit
-  revisionHistoryLimit: 3
+workload:
+  main:
+    replicas: 1
+    type: StatefulSet
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          env:
+            REDIS_REPLICATION_MODE: master
+            ALLOW_EMPTY_PASSWORD: "yes"
+            REDIS_PORT: "{{ .Values.service.main.ports.main.targetPort }}"
+            REDIS_PASSWORD:
+              secretKeyRef:
+                expandObjectName: "{{ if .Values.redisPassword }}true{{ else }}false{{ end }}"
+                name: '{{ if .Values.redisPassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "rediscreds" }}{{ end }}'
+                key: "redis-password"
+          probes:
+            liveness:
+              enabled: true
+              type: exec
+              command:
+                - sh
+                - -c
+                - /health/ping_liveness_local.sh 2
+            readiness:
+              enabled: true
+              type: exec
+              command:
+                - sh
+                - -c
+                - /health/ping_readiness_local.sh 2
+            # -- Startup probe configuration
+            # @default -- See below
+            startup:
+              # -- Enable the startup probe
+              enabled: true
+              type: exec
+              command:
+                - sh
+                - -c
+                - /health/ping_readiness_local.sh 2
 
 securityContext:
-  readOnlyRootFilesystem: false
-
-podSecurityContext:
-  runAsGroup: 0
+  container:
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
 
 configmap:
   health:
@@ -109,16 +130,9 @@ secret:
     data:
       redis-password: '{{ ( .Values.redisPassword | default "nothing" ) }}'
 
-env:
-  REDIS_REPLICATION_MODE: master
-  ALLOW_EMPTY_PASSWORD: "yes"
-  REDIS_PORT: "{{ .Values.service.main.ports.main.targetPort }}"
-  REDIS_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "redis-password"
-
-redisPassword: "testpass"
+# -- Secret or password
+# One of these options is required, unless used as a dependency for another TrueCharts chart.
+redisPassword: ""
 existingSecret: ""
 
 service:
@@ -133,80 +147,30 @@ volumeClaimTemplates:
     enabled: true
     mountPath: "/bitnami/redis"
 
-# -- Probe configuration
-# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
-# @default -- See below
-probes:
-  # -- Liveness probe configuration
-  # @default -- See below
-  liveness:
-    # -- Enable the liveness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own livenessProbe
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - sh
-          - -c
-          - /health/ping_liveness_local.sh 2
-
-  # -- Redainess probe configuration
-  # @default -- See below
-  readiness:
-    # -- Enable the readiness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own readinessProbe
-    custom: true
-    # -- The spec field contains the values for the default readinessProbe.
-    # If you selected `custom: true`, this field holds the definition of the readinessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - sh
-          - -c
-          - /health/ping_readiness_local.sh 2
-  # -- Startup probe configuration
-  # @default -- See below
-  startup:
-    # -- Enable the startup probe
-    enabled: true
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - sh
-          - -c
-          - /health/ping_readiness_local.sh 2
-
 persistence:
-  # -- redis-health configmap mount
-  # @default -- See below
   redis-health:
     enabled: true
-    type: custom
-    # -- Where to mount the volume in the main container.
-    # Defaults to `/<name_of_the_volume>`,
-    # setting to '-' creates the volume but disables the volumeMount.
+    type: configmap
+    objectName: health
     mountPath: "/health"
-    # -- Specify if the volume should be mounted read-only.
-    readOnly: false
-    # -- Define the custom Volume spec here
-    # [[ref]](https://kubernetes.io/docs/concepts/storage/volumes/)
-    volumeSpec:
-      configMap:
-        defaultMode: 0755
-        name: '{{ include "tc.common.names.fullname" . }}-health'
+    defaultMode: "0755"
+    items:
+      - key: ping_readiness_local.sh
+        path: ping_readiness_local.sh
+      - key: ping_liveness_local.sh
+        path: ping_liveness_local.sh
+      - key: ping_readiness_master.sh
+        path: ping_readiness_master.sh
+      - key: ping_liveness_master.sh
+        path: ping_liveness_master.sh
+      - key: ping_liveness_local_and_master.sh
+        path: ping_liveness_local_and_master.sh
+      - key: ping_readiness_local_and_master.sh
+        path: ping_readiness_local_and_master.sh
 
 portal:
-  enabled: false
+  open:
+    enabled: false
 
-manifests:
+manifestManager:
   enabled: false

charts/dependency/solr/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.1.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -20,10 +20,10 @@ maintainers:
 name: solr
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
-  - https://hub.docker.com/bitnami/solr
+  - https://hub.docker.com/r/bitnami/solr
   - https://github.com/apache/solr
 type: application
-version: 2.0.27
+version: 3.0.7
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/ci/basic-values.yaml

@@ -0,0 +1 @@
+solrPassword: "testpassword"

charts/dependency/solr/questions.yaml

@@ -4,10 +4,15 @@ portals:
 # Include{portalLink}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
 # Include{containerConfig}
   - variable: solrCores
     group: "App Configuration"
@@ -76,51 +81,34 @@ questions:
             attrs:
 # Include{persistenceBasic}
 # Include{persistenceList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
+                  type: int
+                  default: 1001
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID this App of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: false
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 1001
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 0
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
+
 # Include{resources}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
+# Include{netshoot}
 # Include{vpn}
 # Include{documentation}

charts/dependency/solr/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/dependency/solr/templates/common.yaml

@@ -1,2 +1,2 @@
 
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/solr/values.yaml

@@ -1,35 +1,101 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: 9.1.1@sha256:bf8b3766541b161cb6f03bcf1a750d82c2b33367dc408782fe8b4cf37e26bd8c
+  tag: 9.1.1@sha256:4ac9d6e8120321349f0a3e5dbaff796192a9623de8fb164adf9f42de952479f1
 
-controller:
-  # -- Set the controller type.
-  # Valid options are deployment, daemonset or statefulset
-  type: statefulset
-  # -- Number of desired pods
-  replicas: 1
-  # -- Set the controller upgrade strategy
-  # For Deployments, valid values are Recreate (default) and RollingUpdate.
-  # For StatefulSets, valid values are OnDelete and RollingUpdate (default).
-  # DaemonSets ignore this.
-  strategy: RollingUpdate
-  rollingUpdate:
-    # -- Set deployment RollingUpdate max unavailable
-    unavailable: 1
-    # -- Set deployment RollingUpdate max surge
-    surge:
-    # -- Set statefulset RollingUpdate partition
-    partition:
-  # -- ReplicaSet revision history limit
-  revisionHistoryLimit: 3
+workload:
+  main:
+    type: StatefulSet
+    replicas: 1
+    strategy: RollingUpdate
+    podSpec:
+      containers:
+        main:
+          env:
+            SOLR_CORES: "{{ .Values.solrCores }}"
+            SOLR_ENABLE_AUTHENTICATION: "{{ .Values.solrEnableAuthentication }}"
+            SOLR_ADMIN_USERNAME: "{{ .Values.solrUsername }}"
+            SOLR_OPTS: "{{ .Values.solrOpts }}"
+            SOLR_ADMIN_PASSWORD:
+              secretKeyRef:
+                expandObjectName: "{{ if .Values.solrPassword }}true{{ else }}false{{ end }}"
+                name: '{{ if .Values.solrPassword }}credentials{{ else if .Values.existingSecret }}{{ .Values.existingSecret }}{{ else }}{{ printf "%s-%s" .Release.Name "solrcreds" }}{{ end }}'
+                key: "solr-password"
+
+          # -- Probe configuration
+          # -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
+          # @default -- See below
+          probes:
+            # -- Liveness probe configuration
+            # @default -- See below
+            liveness:
+              # -- Enable the liveness probe
+              enabled: true
+              # -- Set this to `true` if you wish to specify your own livenessProbe
+              custom: true
+              # -- The spec field contains the values for the default livenessProbe.
+              # If you selected `custom: true`, this field holds the definition of the livenessProbe.
+              # @default -- See below
+              spec:
+                exec:
+                  command:
+                    - /bin/bash
+                    - -ec
+                    - |
+                      if [ "$SOLR_ENABLE_AUTHENTICATION" == "yes" ]; then
+                        until curl --fail --user "${SOLR_ADMIN_USERNAME}":"${SOLR_ADMIN_PASSWORD}" localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
+                      else
+                        until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
+                      fi;
+
+            # -- Redainess probe configuration
+            # @default -- See below
+            readiness:
+              # -- Enable the readiness probe
+              enabled: true
+              # -- Set this to `true` if you wish to specify your own readinessProbe
+              custom: true
+              # -- The spec field contains the values for the default readinessProbe.
+              # If you selected `custom: true`, this field holds the definition of the readinessProbe.
+              # @default -- See below
+              spec:
+                exec:
+                  command:
+                    - /bin/bash
+                    - -ec
+                    - |
+                      if [ "$SOLR_ENABLE_AUTHENTICATION" == "yes" ]; then
+                        until curl --fail --user "${SOLR_ADMIN_USERNAME}":"${SOLR_ADMIN_PASSWORD}" localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
+                      else
+                        until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
+                      fi;
+            # -- Startup probe configuration
+            # @default -- See below
+            startup:
+              # -- Enable the startup probe
+              enabled: true
+              custom: true
+              # -- The spec field contains the values for the default livenessProbe.
+              # If you selected `custom: true`, this field holds the definition of the livenessProbe.
+              # @default -- See below
+              spec:
+                exec:
+                  command:
+                    - /bin/bash
+                    - -ec
+                    - |
+                      if [ "$SOLR_ENABLE_AUTHENTICATION" == "yes" ]; then
+                        until curl --fail --user "${SOLR_ADMIN_USERNAME}":"${SOLR_ADMIN_PASSWORD}" localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
+                      else
+                        until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
+                      fi;
 
-podSecurityContext:
-  runAsUser: 1001
-  runAsGroup: 0
 securityContext:
-  runAsNonRoot: false
-  readOnlyRootFilesystem: false
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 1001
+    runAsGroup: 0
 
 service:
   main:
@@ -43,82 +109,17 @@ volumeClaimTemplates:
     enabled: true
     mountPath: "/bitnami/solr"
 
-# -- Probe configuration
-# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
-# @default -- See below
-probes:
-  # -- Liveness probe configuration
-  # @default -- See below
-  liveness:
-    # -- Enable the liveness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own livenessProbe
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - |
-            if [ "$SOLR_ENABLE_AUTHENTICATION" == "yes" ]; then
-              until curl --fail --user "${SOLR_ADMIN_USERNAME}":"${SOLR_ADMIN_PASSWORD}" localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
-            else
-              until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
-            fi;
-
-  # -- Redainess probe configuration
-  # @default -- See below
-  readiness:
-    # -- Enable the readiness probe
-    enabled: true
-    # -- Set this to `true` if you wish to specify your own readinessProbe
-    custom: true
-    # -- The spec field contains the values for the default readinessProbe.
-    # If you selected `custom: true`, this field holds the definition of the readinessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - |
-            if [ "$SOLR_ENABLE_AUTHENTICATION" == "yes" ]; then
-              until curl --fail --user "${SOLR_ADMIN_USERNAME}":"${SOLR_ADMIN_PASSWORD}" localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
-            else
-              until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
-            fi;
-  # -- Startup probe configuration
-  # @default -- See below
-  startup:
-    # -- Enable the startup probe
-    enabled: true
-    custom: true
-    # -- The spec field contains the values for the default livenessProbe.
-    # If you selected `custom: true`, this field holds the definition of the livenessProbe.
-    # @default -- See below
-    spec:
-      exec:
-        command:
-          - /bin/bash
-          - -ec
-          - |
-            if [ "$SOLR_ENABLE_AUTHENTICATION" == "yes" ]; then
-              until curl --fail --user "${SOLR_ADMIN_USERNAME}":"${SOLR_ADMIN_PASSWORD}" localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
-            else
-              until curl --fail localhost:8983/solr/"${SOLR_CORES}"/admin/ping; do sleep 2; done
-            fi;
-
 # Currently only single core is supported, with multiple cores, probes will fail.
 solrCores: "testcore"
 solrEnableAuthentication: "yes"
 solrUsername: "test"
-solrPassword: "testpass"
 # Used to pass a comma separated list of optional options like '-XX:G1HeapRegionSize=8m'
 solrOpts: ""
+
+# -- Secret or password
+# One of these options is required, unless used as a dependency for another TrueCharts chart.
 existingSecret: ""
+solrPassword: ""
 
 secret:
   credentials:
@@ -126,18 +127,9 @@ secret:
     data:
       solr-password: '{{ ( .Values.solrPassword | default "empty" ) }}'
 
-env:
-  SOLR_CORES: "{{ .Values.solrCores }}"
-  SOLR_ENABLE_AUTHENTICATION: "{{ .Values.solrEnableAuthentication }}"
-  SOLR_ADMIN_USERNAME: "{{ .Values.solrUsername }}"
-  SOLR_OPTS: "{{ .Values.solrOpts }}"
-  SOLR_ADMIN_PASSWORD:
-    secretKeyRef:
-      name: '{{ .Values.existingSecret | default ( printf "%s-credentials" ( include "tc.common.names.fullname" . ) ) }}'
-      key: "solr-password"
-
 portal:
-  enabled: true
+  open:
+    enabled: true
 
-manifests:
+manifestManager:
   enabled: false

charts/dependency/subchart/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "jammy"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
 deprecated: false
 description: This is only used as a subchart.
 home: https://truecharts.org/charts/dependency/subchart
@@ -19,7 +19,7 @@ name: subchart
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/subchart
 type: application
-version: 3.0.11
+version: 4.0.9
 annotations:
   truecharts.org/catagories: |
     - subchart

charts/dependency/subchart/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/dependency/subchart/templates/common.yaml

@@ -1 +1 @@
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/dependency/subchart/values.yaml

@@ -3,13 +3,12 @@ image:
   pullPolicy: IfNotPresent
   tag: jammy-20221101@sha256:4b9475e08c5180d4e7417dc6a18a26dcce7691e4311e5353dbb952645c5ff43f
 
-manifests:
+manifestManager:
   enabled: false
 
-updateCRD: false
-
 portal:
-  enabled: false
+  open:
+    enabled: false
 
 service:
   main:

charts/dev/testapp/Chart.yaml

@@ -0,0 +1,32 @@
+apiVersion: v2
+appVersion: "0.20.2297"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 12.2.0
+deprecated: false
+description: testing app for truecharts
+home: https://truecharts.org/charts/stable/jackett
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/jackett.png
+keywords:
+  - jackett
+  - torrent
+  - usenet
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: testapp
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/stable/jackett
+  - https://ghcr.io/onedr0p/jackett
+  - https://github.com/Jackett/Jackett
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - media
+    - test
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U

charts/dev/testapp/questions.yaml

@@ -0,0 +1,93 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+# Include{containerConfig}
+# Include{serviceRoot}
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 9117
+                              required: true
+# Include{serviceExpertRoot}
+            default: false
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressList}
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID this App of the user running the application"
+                schema:
+                  type: int
+                  default: 568
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+               - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568568
+# Include{resources}
+# Include{advanced}
+# Include{postgresql}
+# Include{postgresqlBasics}
+# Include{addons}
+# Include{vpn}
+# Include{codeserver}
+# Include{netshoot}
+# Include{documentation}

charts/dev/testapp/templates/common.yaml

@@ -0,0 +1 @@
+{{- include "tc.v1.common.loader.all" . -}}

charts/dev/testapp/values.yaml

@@ -0,0 +1,38 @@
+image:
+  repository: tccr.io/truecharts/jackett
+  pullPolicy: IfNotPresent
+  tag: 0.20.2297@sha256:4de1541011cb56935ba5a8e28a58f6cbcf62a903393dc94581eda0b6e2aa117c
+
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        targetPort: 9117
+        port: 9117
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              path: "/UI/Login"
+            readiness:
+              path: "/UI/Login"
+            startup:
+              path: "/UI/Login"
+
+persistence:
+  config:
+    enabled: true
+    mountPath: "/config"
+
+portal:
+  open:
+    enabled: true

charts/enterprise/authelia/Chart.yaml

@@ -3,18 +3,14 @@ appVersion: "4.37.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
-  - condition: postgresql.enabled
-    name: postgresql
-    repository: https://charts.truecharts.org/
-    version: 11.0.22
+    version: 12.2.24
   - condition: redis.enabled
     name: redis
-    repository: https://charts.truecharts.org
-    version: 5.0.29
+    repository: https://deps.truecharts.org
+    version: 6.0.14
 deprecated: false
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
-home: https://truecharts.org/charts/stable/authelia
+home: https://truecharts.org/charts/enterprise/authelia
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/authelia.png
 keywords:
   - authelia
@@ -35,13 +31,12 @@ maintainers:
     url: https://truecharts.org
 name: authelia
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/stable/authelia
-  - https://ghcr.com/ghcr.io/authelia/authelia
-  - ghcr.io/authelia/authelia
+  - https://github.com/truecharts/charts/tree/master/charts/enterprise/authelia
+  - https://ghcr.io/authelia/authelia ghcr.io/authelia/authelia
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 14.0.26
+version: 15.0.8
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/authelia/LICENSE

@@ -0,0 +1,106 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             The TrueCharts Project, it's owner and it's contributors
+Licensed Work:        The TrueCharts "Cert-Manager" Helm Chart
+Additional Use Grant: You may use the licensed work in production, as long
+                      as it is directly sourced from a TrueCharts provided
+                      official repository, catalog or source. You may also make private
+                      modification to the directly sourced licenced work,
+                      when used in production.
+
+                      The following cases are, due to their nature, also
+                      defined as 'production use' and explicitly prohibited:
+                      - Bundling, including or displaying the licensed work
+                      with(in) another work intended for production use,
+                      with the apparent intend of facilitating and/or
+                      promoting production use by third parties in
+                      violation of this license.
+
+Change Date:          2050-01-01
+
+Change License:       3-clause BSD license
+
+For information about alternative licensing arrangements for the Software,
+please contact: legal@truecharts.org
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+“Business Source License” is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

charts/enterprise/authelia/README.md

@@ -5,7 +5,7 @@
 TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
 However only installations using the TrueNAS SCALE Apps system are supported.
 
-For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/dependency/)
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/enterprise/)
 
 **This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
 

charts/enterprise/authelia/questions.yaml

@@ -4,10 +4,13 @@ portals:
 # Include{portalLink}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
 # Include{containerConfig}
   - variable: domain
     group: "App Configuration"
@@ -166,7 +169,7 @@ questions:
             type: string
             default: "5m"
             required: true
-        - variable: inactivity
+        - variable: remember_me_duration
           label: "Remember-Me duration"
           description: "The remember me duration"
           schema:
@@ -763,54 +766,30 @@ questions:
 # Include{ingressTLS}
 # Include{ingressTraefik}
 # Include{ingressList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: "Privileged mode"
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: "ReadOnly Root Filesystem"
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
                 schema:
-                  type: boolean
-                  default: true
-              - variable: allowPrivilegeEscalation
-                label: "Allow Privilege Escalation"
+                  type: int
+                  default: 568
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: "runAsNonRoot"
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: "runAsUser"
-          description: "The UserID of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: "runAsGroup"
-          description: "The groupID this App of the user running the application"
-          schema:
-            type: int
-            default: 568
-        - variable: fsGroup
-          label: "fsGroup"
-          description: "The group that should own ALL storage."
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
 # Include{resources}
 # Include{advanced}
-# Include{addons}
-# Include{codeserver}
-# Include{vpn}
-# Include{documentation}
   - variable: identity_providers
     group: "Advanced"
     label: "Authelia Identity Providers (BETA)"
@@ -1012,3 +991,10 @@ questions:
                                           type: string
                                           default: "form_post"
                                           required: true
+# Include{postgresql}
+# Include{postgresqlBasics}
+# Include{addons}
+# Include{codeserver}
+# Include{vpn}
+# Include{netshoot}
+# Include{documentation}

charts/enterprise/authelia/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/enterprise/authelia/templates/_configmap.tpl

@@ -1,10 +1,6 @@
 {{/* Define the configmap */}}
-{{- define "authelia.configmap" -}}
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: authelia-paths
+{{- define "authelia.configmap.paths" -}}
+enabled: true
 data:
   AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
   AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
@@ -29,12 +25,10 @@ data:
   AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE: "/secrets/OIDC_PRIVATE_KEY"
   {{- end }}
 
----
+{{- end -}}
 
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: authelia-configfile
+{{- define "authelia.configmap.configfile" -}}
+enabled: true
 data:
   configuration.yaml: |
     ---
@@ -46,8 +40,9 @@ data:
       {{- if not (eq "" (default "" .Values.server.path)) }}
       path: {{ .Values.server.path }}
       {{- end }}
-      read_buffer_size: {{ default 4096 .Values.server.read_buffer_size }}
-      write_buffer_size: {{ default 4096 .Values.server.write_buffer_size }}
+      buffers:
+        write: {{ default 4096 .Values.server.write_buffer_size }}
+        read: {{ default 4096 .Values.server.read_buffer_size }}
       enable_pprof: {{ default false .Values.server.enable_pprof }}
       enable_expvars: {{ default false .Values.server.enable_expvars }}
     log:
@@ -68,7 +63,8 @@ data:
     {{- end }}
     {{- with $auth := .Values.authentication_backend }}
     authentication_backend:
-      disable_reset_password: {{ $auth.disable_reset_password }}
+      password_reset:
+        disable: {{ $auth.disable_reset_password }}
     {{- if $auth.file.enabled }}
       file:
         path: {{ $auth.file.path }}
@@ -126,7 +122,7 @@ data:
       remember_me_duration: {{ default "1M" $session.remember_me_duration }}
     {{- end }}
       redis:
-        host: {{ .Values.redis.url.plain }}
+        host: {{ .Values.redis.creds.plain }}
       {{- with $redis := .Values.redisProvider }}
         port: {{ default 6379 $redis.port }}
         {{- if not (eq $redis.username "") }}
@@ -153,13 +149,14 @@ data:
     regulation: {{ toYaml .Values.regulation | nindent 6 }}
     storage:
       postgres:
-        host: {{ printf "%v-%v" .Release.Name "postgresql" }}
+        host: {{ $.Values.cnpg.main.creds.host }}
     {{- with $storage := .Values.storage }}
         port: {{ default 5432 $storage.postgres.port }}
         database: {{ default "authelia" $storage.postgres.database }}
         username: {{ default "authelia" $storage.postgres.username }}
         timeout: {{ default "5s" $storage.postgres.timeout }}
-        sslmode: {{ default "disable" $storage.postgres.sslmode }}
+        ssl:
+          mode: {{ default "disable" $storage.postgres.sslmode }}
     {{- end }}
     {{- with $notifier := .Values.notifier }}
     notifier:

charts/enterprise/authelia/templates/_secrets.tpl

@@ -1,67 +1,56 @@
 {{/* Define the secrets */}}
 {{- define "authelia.secrets" -}}
----
-
-apiVersion: v1
-kind: Secret
-type: Opaque
-metadata:
-  name: authelia-secrets
-{{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace "authelia-secrets" }}
+{{- $basename := include "tc.v1.common.lib.chart.names.fullname" $ -}}
+{{- $fetchname := printf "%s-authelia-secrets" $basename -}}
+{{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace $fetchname }}
 {{- $oidckey := "" }}
 {{- $oidcsecret := "" }}
 {{- $jwtsecret := "" }}
 {{- $sessionsecret := "" }}
 {{- $encryptionkey := "" }}
+enabled: true
 data:
   {{- if $autheliaprevious }}
-  SESSION_ENCRYPTION_KEY: {{ index $autheliaprevious.data "SESSION_ENCRYPTION_KEY"  }}
-  JWT_TOKEN: {{ index $autheliaprevious.data "JWT_TOKEN"  }}
-  {{- if ( hasKey $autheliaprevious.data "ENCRYPTION_KEY" ) }}
-  ENCRYPTION_KEY: {{ index $autheliaprevious.data "ENCRYPTION_KEY"  }}
-  {{- else }}
-  {{- $encryptionkey := randAlphaNum 100 }}
-  ENCRYPTION_KEY: {{ $encryptionkey | b64enc }}
-  {{- end }}
+  SESSION_ENCRYPTION_KEY: {{ index $autheliaprevious.data "SESSION_ENCRYPTION_KEY" | b64dec  }}
+  JWT_TOKEN: {{ index $autheliaprevious.data "JWT_TOKEN" | b64dec }}
+  ENCRYPTION_KEY: {{ index $autheliaprevious.data "ENCRYPTION_KEY" | b64dec }}
   {{- else }}
   {{- $jwtsecret := randAlphaNum 50 }}
   {{- $sessionsecret := randAlphaNum 50 }}
   {{- $encryptionkey := randAlphaNum 100 }}
-  SESSION_ENCRYPTION_KEY: {{ $sessionsecret | b64enc }}
-  JWT_TOKEN: {{ $jwtsecret | b64enc}}
-  ENCRYPTION_KEY: {{ $encryptionkey | b64enc }}
+  SESSION_ENCRYPTION_KEY: {{ $sessionsecret }}
+  JWT_TOKEN: {{ $jwtsecret}}
+  ENCRYPTION_KEY: {{ $encryptionkey }}
   {{- end }}
 
   {{- if .Values.authentication_backend.ldap.enabled }}
-  LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password | b64enc | quote }}
+  LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password }}
   {{- end }}
 
   {{- if and .Values.notifier.smtp.enabled .Values.notifier.smtp.plain_password }}
-  SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password | b64enc | quote }}
+  SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password }}
   {{- end }}
 
   {{- if .Values.duo_api.enabled }}
-  DUO_API_KEY: {{ .Values.duo_api.plain_api_key | b64enc }}
+  DUO_API_KEY: {{ .Values.duo_api.plain_api_key }}
   {{- end }}
 
-  STORAGE_PASSWORD: {{ .Values.postgresql.postgresqlPassword | trimAll "\"" | b64enc }}
+  STORAGE_PASSWORD: {{ $.Values.cnpg.main.creds.password | trimAll "\"" }}
 
-  REDIS_PASSWORD: {{ .Values.redis.redisPassword | trimAll "\"" | b64enc }}
+  REDIS_PASSWORD: {{ .Values.redis.creds.redisPassword | trimAll "\"" }}
   {{- if .Values.redisProvider.high_availability.enabled}}
-  REDIS_SENTINEL_PASSWORD: {{ .Values.redis.sentinelPassword | trimAll "\"" | b64enc }}
+  REDIS_SENTINEL_PASSWORD: {{ .Values.redis.sentinelPassword | trimAll "\"" }}
   {{- end }}
 
   {{- if $autheliaprevious }}
   {{- if and ( hasKey $autheliaprevious.data "OIDC_PRIVATE_KEY" ) ( hasKey $autheliaprevious.data "OIDC_HMAC_SECRET" ) }}
-  OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY"  }}
-  OIDC_HMAC_SECRET: {{ index $autheliaprevious.data "OIDC_HMAC_SECRET" }}
+  OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" | b64dec  }}
+  OIDC_HMAC_SECRET: {{ index $autheliaprevious.data "OIDC_HMAC_SECRET" | b64dec  }}
   {{- else }}
   {{- $oidckey := genPrivateKey "rsa"   }}
   {{- $oidcsecret := randAlphaNum 32 }}
-  OIDC_PRIVATE_KEY: {{ $oidckey | b64enc }}
-  OIDC_HMAC_SECRET: {{ $oidcsecret | b64enc }}
+  OIDC_PRIVATE_KEY: {{ $oidckey }}
+  OIDC_HMAC_SECRET: {{ $oidcsecret }}
   {{- end }}
   {{- end }}
-
-
 {{- end -}}

charts/enterprise/authelia/templates/common.yaml

@@ -0,0 +1,77 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . }}
+
+{{/* Render configmap for authelia */}}
+{{- $configmapPaths := include "authelia.configmap.paths" . | fromYaml -}}
+{{- if $configmapPaths -}}
+  {{- $_ := set .Values.configmap "authelia-paths" $configmapPaths -}}
+{{- end -}}
+
+{{- $configmapFile := include "authelia.configmap.configfile" . | fromYaml -}}
+{{- if $configmapFile -}}
+  {{- $_ := set .Values.configmap "authelia-configfile" $configmapFile -}}
+{{- end -}}
+
+{{/* Render secrets for authelia */}}
+{{- $secret := include "authelia.secrets" . | fromYaml -}}
+{{- if $secret -}}
+  {{- $_ := set .Values.secret "authelia-secrets" $secret -}}
+{{- end -}}
+
+{{/* Append the general configMap volume to the volumes */}}
+{{- define "authelia.configmapVolume" -}}
+enabled: true
+mountPath: /configuration.yaml
+subPath: configuration.yaml
+readOnly: true
+type: "configmap"
+objectName: authelia-configfile
+{{- end -}}
+
+{{/* Append the general secret volumes to the volumes */}}
+{{- define "authelia.secretVolumes" -}}
+enabled: true
+mountPath: "/secrets"
+readOnly: true
+type: "secret"
+objectName: authelia-secrets
+items:
+  - key: "JWT_TOKEN"
+    path: JWT_TOKEN
+  - key: "SESSION_ENCRYPTION_KEY"
+    path: SESSION_ENCRYPTION_KEY
+  - key: "ENCRYPTION_KEY"
+    path: ENCRYPTION_KEY
+  - key: "STORAGE_PASSWORD"
+    path: STORAGE_PASSWORD
+    {{- if .Values.authentication_backend.ldap.enabled }}
+  - key: "LDAP_PASSWORD"
+    path: LDAP_PASSWORD
+    {{- end }}
+    {{- if and .Values.notifier.smtp.enabled .Values.notifier.smtp.plain_password }}
+  - key: "SMTP_PASSWORD"
+    path: SMTP_PASSWORD
+    {{- end }}
+  - key: "REDIS_PASSWORD"
+    path: REDIS_PASSWORD
+    {{- if .Values.redisProvider.high_availability.enabled}}
+  - key: "REDIS_SENTINEL_PASSWORD"
+    path: REDIS_SENTINEL_PASSWORD
+    {{- end }}
+    {{- if .Values.duo_api.enabled }}
+  - key: "DUO_API_KEY"
+    path: DUO_API_KEY
+    {{- end }}
+    {{- if .Values.identity_providers.oidc.enabled }}
+  - key: "OIDC_PRIVATE_KEY"
+    path: OIDC_PRIVATE_KEY
+  - key: "OIDC_HMAC_SECRET"
+    path: OIDC_HMAC_SECRET
+    {{- end }}
+{{- end -}}
+
+{{- $_ := set .Values.persistence "authelia-configfile" (include "authelia.configmapVolume" . | fromYaml) -}}
+{{- $_ := set .Values.persistence "authelia-secrets" (include "authelia.secretVolumes" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "tc.v1.common.loader.apply" . }}

charts/enterprise/authelia/values.yaml

@@ -3,10 +3,28 @@ image:
   pullPolicy: IfNotPresent
   tag: 4.37.5@sha256:76a4617539534cec140fd98a12f721b878524f2df3a3653f3df8ff2b7eaab586
 
-command: ["authelia"]
-args: ["--config=/configuration.yaml"]
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          command: ["authelia"]
+          args: ["--config=/configuration.yaml"]
+          envFrom:
+            - configMapRef:
+                name: authelia-paths
+          probes:
+            liveness:
+              type: http
+              path: /api/health"
 
-enableServiceLinks: false
+            readiness:
+              type: http
+              path: "/api/health"
+
+            startup:
+              type: http
+              path: "/api/health"
 
 service:
   main:
@@ -19,45 +37,17 @@ persistence:
   config:
     enabled: true
     mountPath: "/config"
-# Enabled postgres
-postgresql:
-  enabled: true
-  existingSecret: "dbcreds"
-  postgresqlUsername: authelia
-  postgresqlDatabase: authelia
+
+cnpg:
+  main:
+    enabled: true
+    user: authelia
+    database: authelia
 
 # Enabled redis
 # ... for more options see https://github.com/tccr.io/truecharts/charts/tree/master/tccr.io/truecharts/redis
 redis:
   enabled: true
-  existingSecret: "rediscreds"
-
-resources:
-  limits: {}
-  # limits:
-  #   cpu: "4.00"
-  #   memory: 125Mi
-  requests: {}
-  # requests:
-  #   cpu: "0.25"
-  #   memory: 50Mi
-
-envFrom:
-  - configMapRef:
-      name: authelia-paths
-
-# probes:
-#   liveness:
-#     type: HTTP
-#     path: /api/health"
-
-#   readiness:
-#     type: HTTP
-#     path: "/api/health"
-
-#   startup:
-#     type: HTTP
-#     path: "/api/health"
 
 domain: example.com
 
@@ -625,4 +615,5 @@ identity_providers:
     # userinfo_signing_algorithm: none
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/enterprise/blocky/Chart.yaml

@@ -1,13 +1,13 @@
 apiVersion: v2
-appVersion: "0.19"
+appVersion: "0.20.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 12.2.24
   - condition: redis.enabled
     name: redis
-    repository: https://charts.truecharts.org
-    version: 5.0.29
+    repository: https://deps.truecharts.org
+    version: 6.0.14
 description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
 home: https://truecharts.org/charts/enterprise/blocky
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
@@ -22,12 +22,11 @@ maintainers:
 name: blocky
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/blocky
-  - https://hub.docker.com/spx01/blocky
-  - spx01/blocky
+  - https://hub.docker.com/r/spx01/blocky
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 4.0.19
+version: 5.0.9
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/LICENSE

@@ -0,0 +1,106 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             The TrueCharts Project, it's owner and it's contributors
+Licensed Work:        The TrueCharts "Blocky" Helm Chart
+Additional Use Grant: You may use the licensed work in production, as long
+                      as it is directly sourced from a TrueCharts provided
+                      official repository, catalog or source. You may also make private
+                      modification to the directly sourced licenced work,
+                      when used in production.
+
+                      The following cases are, due to their nature, also
+                      defined as 'production use' and explicitly prohibited:
+                      - Bundling, including or displaying the licensed work
+                      with(in) another work intended for production use,
+                      with the apparent intend of facilitating and/or
+                      promoting production use by third parties in
+                      violation of this license.
+
+Change Date:          2050-01-01
+
+Change License:       3-clause BSD license
+
+For information about alternative licensing arrangements for the Software,
+please contact: legal@truecharts.org
+
+Notice
+
+The Business Source License (this document, or the “License”) is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+“Business Source License” is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License’s text to license
+your works, and to refer to it using the trademark “Business Source License”,
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License’s text and the “Business
+Source License” name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where “compatible” means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text “None”.
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.

charts/enterprise/blocky/ci/postgresql-values.yaml

@@ -0,0 +1,3 @@
+queryLog:
+  # optional one of: mysql, postgresql, csv, csv-client. If empty, log to console
+  type: "postgresql"

charts/enterprise/blocky/questions.yaml

@@ -4,10 +4,15 @@ portals:
 # Include{portalLink}
 questions:
 # Include{global}
-# Include{controller}
-# Include{replicas}
-# Include{replica1}
-# Include{controllerExpertExtraArgs}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+# Include{containerBasic}
+# Include{containerAdvanced}
+
   - variable: webUI
     group: App Configuration
     label: WebUI Configuration
@@ -542,6 +547,48 @@ questions:
                 schema:
                   type: string
                   default: 30m
+  - variable: queryLog
+    group: App Configuration
+    label: Query Logging configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: type
+          label: Type
+          schema:
+            type: string
+            default: ""
+            enum:
+              - value: ""
+                description: Console
+              - value: postgresql
+                description: postgresql
+              - value: csv
+                description: csv
+              - value: csv-client
+                description: csv-client
+        - variable: target
+          label: Target
+          schema:
+            type: string
+            show_if: [["type", "!=", "postgresql"]]
+            default: "/var/log/something"
+        - variable: logRetentionDays
+          label: Log Retention Days
+          schema:
+            type: int
+            default: 0
+        - variable: creationAttempts
+          label: Creation Attempts
+          schema:
+            type: int
+            default: 3
+        - variable: creationCooldown
+          label: Creation Cooldown
+          schema:
+            type: string
+            default: 2s
   - variable: k8sgateway
     group: App Configuration
     label: k8s-Gateway Configuration
@@ -656,7 +703,7 @@ questions:
                             description: This port exposes the container port on the service
                             schema:
                               type: int
-                              default: 10315
+                              default: 4000
                               required: true
         - variable: dnstcp
           label: DNS TCP Service
@@ -724,28 +771,6 @@ questions:
                               type: int
                               default: 853
                               required: true
-        - variable: http
-          label: HTTP and Metrics Service
-          description: "service for things like metrics, pprof, API, DoH etc"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{serviceSelectorClusterIP}
-# Include{serviceSelectorExtras}
-                    - variable: http
-                      label: HTTP and Metrics Port Configuration
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: Port
-                            description: This port exposes the container port on the service
-                            schema:
-                              type: int
-                              default: 4000
-                              required: true
 # Include{serviceExpertRoot}
             default: false
 # Include{serviceExpert}
@@ -762,52 +787,34 @@ questions:
 # Include{ingressTLS}
 # Include{ingressTraefik}
 # Include{ingressList}
-# Include{security}
-# Include{securityContextAdvancedRoot}
-              - variable: privileged
-                label: Privileged mode
+# Include{securityContextRoot}
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
                 schema:
-                  type: boolean
-                  default: false
-              - variable: readOnlyRootFilesystem
-                label: ReadOnly Root Filesystem
+                  type: int
+                  default: 568
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
                 schema:
-                  type: boolean
-                  default: true
-              - variable: allowPrivilegeEscalation
-                label: Allow Privilege Escalation
+                  type: int
+                  default: 568
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
                 schema:
-                  type: boolean
-                  default: false
-              - variable: runAsNonRoot
-                label: runAsNonRoot
-                schema:
-                  type: boolean
-                  default: true
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: runAsUser
-          description: The UserID of the user running the application
-          schema:
-            type: int
-            default: 568
-        - variable: runAsGroup
-          label: runAsGroup
-          description: The groupID this App of the user running the application
-          schema:
-            type: int
-            default: 568
-        - variable: fsGroup
-          label: fsGroup
-          description: The group that should own ALL storage.
-          schema:
-            type: int
-            default: 568
-# Include{podSecurityContextAdvanced}
+                  type: int
+                  default: 568
 # Include{resources}
 # Include{metrics}
+# Include{prometheusRule}
 # Include{advanced}
 # Include{addons}
 # Include{codeserver}
+# Include{netshoot}
 # Include{vpn}
 # Include{documentation}

charts/enterprise/blocky/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/enterprise/blocky/templates/_blockyConfig.tpl

@@ -1,14 +1,7 @@
 {{/* Define the config */}}
 {{- define "blocky.configmap" -}}
-{{- $configName := printf "%s-config" (include "tc.common.names.fullname" .) }}
-{{- $config := merge ( include "blocky.config" . | fromYaml ) ( .Values.blockyConfig ) }}
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: {{ $configName }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
+{{- $config := mustMerge ( include "blocky.config" . | fromYaml ) ( .Values.blockyConfig ) }}
+enabled: true
 data:
   config.yml: |
 {{ $config | toYaml | indent 4 }}
@@ -17,7 +10,7 @@ data:
 {{- define "blocky.config" -}}
 redis:
   address: {{ printf "%v-%v" .Release.Name "redis" }}:6379
-  password: {{ .Values.redis.redisPassword | trimAll "\"" }}
+  password: {{ .Values.redis.creds.redisPassword | trimAll "\"" }}
   database: 0
   required: true
   connectionAttempts: 10
@@ -25,6 +18,23 @@ redis:
 prometheus:
   enable: true
   path: /metrics
+queryLog:
+  # optional one of: postgresql, csv, csv-client. If empty, log to console
+  type: {{ .Values.queryLog.type }}
+  # directory (should be mounted as volume in docker) for csv, db connection string for mysql/postgresql
+  #postgresql target: postgres://user:password@db_host_or_ip:5432/db_name
+  {{- if eq .Values.queryLog.type "postgresql" }}
+  target: {{ .Values.cnpg.main.creds.std }}
+  {{- else }}
+  target: {{ .Values.queryLog.target }}
+  {{- end }}
+  # if > 0, deletes log files which are older than ... days
+  logRetentionDays: {{ .Values.queryLog.logRetentionDays | default 0 }}
+  # optional: Max attempts to create specific query log writer
+  creationAttempts: {{ .Values.queryLog.creationAttempts | default 3 }}
+  # optional: Time between the creation attempts
+  creationCooldown: {{ .Values.queryLog.creationAttempts | default "2s" }}
+
 upstream:
   default:
 {{- .Values.defaultUpstreams | toYaml | nindent 8 }}
@@ -41,14 +51,15 @@ port: {{ .Values.service.dnsudp.ports.dnsudp.targetPort }}
 tlsPort: {{ .Values.service.dot.ports.dot.targetPort }}
 {{- end }}
 
-{{- if .Values.service.http.enabled }}
-httpPort: {{ .Values.service.http.ports.http.targetPort }}
+{{- if .Values.service.main.enabled }}
+httpPort: {{ .Values.service.main.ports.main.targetPort }}
 {{- end }}
 
 {{- if .Values.service.https.enabled }}
 httpsPort: {{ .Values.service.https.ports.https.targetPort }}
 {{- end }}
 
+
 {{- if .Values.certFile }}
 certFile: {{ .Values.certFile }}
 {{- end }}

charts/enterprise/blocky/templates/_k8sgateway.tpl

@@ -1,42 +1,24 @@
 {{- define "k8sgateway.container" -}}
-image: {{ .Values.k8sgatewayImage.repository }}:{{ .Values.k8sgatewayImage.tag }}
-imagePullPolicy: {{ .Values.k8sgatewayImage.pullPolicy }}
+enabled: true
+imageSelector: k8sgatewayImage
 securityContext:
   runAsUser: 0
   runAsGroup: 0
   readOnlyRootFilesystem: true
-  runAsNonRoot: false
 args: ["-conf", "/etc/coredns/Corefile"]
-ports:
-  - containerPort: {{ .Values.service.k8sgateway.ports.k8sgateway.targetPort }}
-    name: main
-volumeMounts:
-  - name: config-volume
-    mountPath: /etc/coredns
-readinessProbe:
-  httpGet:
+probes:
+  readiness:
+    enabled: true
     path: /ready
     port: 8181
-  initialDelaySeconds: {{ .Values.probes.readiness.spec.initialDelaySeconds }}
-  timeoutSeconds: {{ .Values.probes.readiness.spec.timeoutSeconds }}
-  periodSeconds: {{ .Values.probes.readiness.spec.periodSeconds }}
-  failureThreshold: {{ .Values.probes.readiness.spec.failureThreshold }}
-livenessProbe:
-  httpGet:
+  liveness:
+    enabled: true
     path: /health
     port: 8080
-  initialDelaySeconds: {{ .Values.probes.liveness.spec.initialDelaySeconds }}
-  timeoutSeconds: {{ .Values.probes.liveness.spec.timeoutSeconds }}
-  periodSeconds: {{ .Values.probes.liveness.spec.periodSeconds }}
-  failureThreshold: {{ .Values.probes.liveness.spec.failureThreshold }}
-startupProbe:
-  httpGet:
+  startup:
+    enabled: true
     path: /ready
     port: 8181
-  initialDelaySeconds: {{ .Values.probes.startup.spec.initialDelaySeconds }}
-  timeoutSeconds: {{ .Values.probes.startup.spec.timeoutSeconds }}
-  periodSeconds: {{ .Values.probes.startup.spec.periodSeconds }}
-  failureThreshold: {{ .Values.probes.startup.spec.failureThreshold }}
 {{- end -}}
 
 {{/*
@@ -53,14 +35,8 @@ Create the matchable regex from domain
 {{/* Define the configmap */}}
 {{- define "k8sgateway.configmap" -}}
 {{- $values := .Values.k8sgateway }}
-{{- $fqdn := ( include "tc.common.names.fqdn" . ) }}
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: {{ include "tc.common.names.fullname" . }}-corefile
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
+{{- $fqdn := ( include "tc.v1.common.lib.chart.names.fqdn" . ) }}
+enabled: true
 data:
   Corefile: |-
     .:{{ .Values.service.k8sgateway.ports.k8sgateway.targetPort }} {
@@ -78,7 +54,8 @@ data:
            fallthrough
         }
         {{- end }}
-        k8s_gateway "{{ required "Delegated domain ('domain') is mandatory " .domain }}" {
+        {{- end }}
+        k8s_gateway {{ range .Values.k8sgateway.domains }}"{{ required "Delegated domain ('domain') is mandatory " .domain }}"{{ end }} {
           apex {{ $values.apex | default $fqdn }}
           ttl {{ $values.ttl }}
           {{- if $values.secondary }}
@@ -89,7 +66,7 @@ data:
           {{- end }}
           fallthrough
         }
-        {{- end }}
+
         prometheus 0.0.0.0:9153
         {{- if .Values.k8sgateway.forward.enabled }}
         forward . {{ .Values.k8sgateway.forward.primary }} {{ .Values.k8sgateway.forward.secondary }} {

charts/enterprise/blocky/templates/_prometheusrules.tpl

@@ -1,21 +0,0 @@
-{{- define "blocky.prometheusrule" -}}
-{{- if and .Values.metrics.enabled .Values.metrics.prometheusRule.enabled }}
----
-apiVersion: monitoring.coreos.com/v1
-kind: PrometheusRule
-metadata:
-  name: {{ include "tc.common.names.fullname" . }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-    {{- with .Values.metrics.prometheusRule.labels }}
-    {{- toYaml . | nindent 4 }}
-    {{- end }}
-spec:
-  groups:
-    - name: {{ include "tc.common.names.fullname" . }}
-      rules:
-        {{- with .Values.metrics.prometheusRule.rules }}
-        {{- toYaml . | nindent 8 }}
-        {{- end }}
-{{- end }}
-{{- end -}}

charts/enterprise/blocky/templates/_servicemonitor.tpl

@@ -1,27 +0,0 @@
-{{- define "blocky.servicemonitor" -}}
-{{- if .Values.metrics.enabled }}
----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: {{ include "tc.common.names.fullname" . }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-    {{- with .Values.metrics.serviceMonitor.labels }}
-    {{- toYaml . | nindent 4 }}
-    {{- end }}
-spec:
-  selector:
-    matchLabels:
-      {{- include "tc.common.labels.selectorLabels" . | nindent 6 }}
-  endpoints:
-    - port: http
-      {{- with .Values.metrics.serviceMonitor.interval }}
-      interval: {{ . }}
-      {{- end }}
-      {{- with .Values.metrics.serviceMonitor.scrapeTimeout }}
-      scrapeTimeout: {{ . }}
-      {{- end }}
-      path: /metrics
-{{- end }}
-{{- end -}}

charts/enterprise/blocky/templates/_webui.tpl

@@ -1,48 +0,0 @@
-{{- define "blocky.frontend" -}}
-image: {{ .Values.WebUIImage.repository }}:{{ .Values.WebUIImage.tag }}
-imagePullPolicy: {{ .Values.WebUIImage.pullPolicy }}
-securityContext:
-  runAsUser: 568
-  runAsGroup: 568
-  readOnlyRootFilesystem: true
-  runAsNonRoot: true
-ports:
-  - containerPort: {{ .Values.service.main.ports.main.targetPort }}
-    name: main
-readinessProbe:
-  httpGet:
-    path: /
-    port: {{ .Values.service.main.ports.main.targetPort }}
-  initialDelaySeconds: {{ .Values.probes.readiness.spec.initialDelaySeconds }}
-  timeoutSeconds: {{ .Values.probes.readiness.spec.timeoutSeconds }}
-  periodSeconds: {{ .Values.probes.readiness.spec.periodSeconds }}
-  failureThreshold: {{ .Values.probes.readiness.spec.failureThreshold }}
-livenessProbe:
-  httpGet:
-    path: /
-    port: {{ .Values.service.main.ports.main.targetPort }}
-  initialDelaySeconds: {{ .Values.probes.liveness.spec.initialDelaySeconds }}
-  timeoutSeconds: {{ .Values.probes.liveness.spec.timeoutSeconds }}
-  periodSeconds: {{ .Values.probes.liveness.spec.periodSeconds }}
-  failureThreshold: {{ .Values.probes.liveness.spec.failureThreshold }}
-startupProbe:
-  httpGet:
-    path: /
-    port: {{ .Values.service.main.ports.main.targetPort }}
-  initialDelaySeconds: {{ .Values.probes.startup.spec.initialDelaySeconds }}
-  timeoutSeconds: {{ .Values.probes.startup.spec.timeoutSeconds }}
-  periodSeconds: {{ .Values.probes.startup.spec.periodSeconds }}
-  failureThreshold: {{ .Values.probes.startup.spec.failureThreshold }}
-env:
-  - name: NODE_ENV
-    value: "production"
-{{- $url := .Values.webUI.apiURL }}
-{{- if .Values.ingress.main.enabled }}
-  {{- with (first .Values.ingress.main.hosts) }}
-  {{- $url = (  printf "https://%s" .host ) }}
-  {{- end }}
-{{- else }}
-{{- end }}
-  - name: API_URL
-    value: "{{ $url }}"
-{{- end -}}