feat: add unleash-enterprise helm chart (#219)

* task: migrate away from Bitnami Postgres

* feat: Default to using SSL connection to cnpg cluster

* fix(shfmt): pass superlinter

* Update charts/unleash/values.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update charts/unleash/values.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update charts/unleash/templates/bring-your-own-database-env.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update charts/unleash/NOTES.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update charts/unleash/templates/cnpg-env.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update charts/unleash/templates/cnpg-secret.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* updated to use cnpg.cluster.enabled for cluster installation and cloudnative-pg.enabled for operator installation

* chore(lint): linting issues

* added NotIn to spell ignore

* chore: Updated ignore list, fixed templating bug in byo template

* lint(markdown): Updated AGENTS.md to adhere to blank space after header

* lint(markdown): Updated AGENTS.md to not have trailing space

* lint(kubeconform): Tell kubeconform about the custom resources

* chore(crds): update crd extractor to not quote the filename

* chore(crds): Add crds with yaml extension

* chore(shfmt): update kubeconform script

* chore(agent): Added formatting guideline

* fix(kubeconform): Added CRD catalog for kubeconform to locate Cluster resource

* fix(shfmt): update kubeconform

* chore(ci): tweak test summary action to include subfolders inside result

* chore(ci): ignore GHA_zizmor for now

* fix(kubeconform): dont' include --include-crds flag

* fix: readd initContainers even if cnpg.cluster.enabled is false

* move cloudnative-pg above cnpg

* Update charts/unleash/templates/bring-your-own-database-env.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fix(lintchart): wrong order of arguments for init containers

* docs: breaking changes information

* docs: markdown lint now passing

* feat: added unleash-enterprise chart

* chore: revert unleash chart back to 5.6.4 state

* updated unleash-enterprise chart to also generate admin password

* make sure admin-secret is looked up by correct name

* add podLabels values

* add default hostAliases to []

* Added config for csi volume mount in examples

* Use new cnpg.cluster.enabled key instead of postgresql.enabled

* Update charts/unleash-enterprise/README.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update charts/unleash-enterprise/README.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: chriswk

.github/codespell-ignore.list

@@ -1,2 +1,6 @@
 hart
 pullRequest
+NotIn
+repo
+Repo
+notin

.github/kubeconform.sh

@@ -12,16 +12,22 @@ curl --silent --show-error --fail --location --output /tmp/kubeconform.tar.gz ht
 sudo tar -C /usr/local/bin -xf /tmp/kubeconform.tar.gz kubeconform
 
 mkdir -p results
-echo "Adding bitnami repo so dependency building succeeds"
-helm repo add bitnami https://charts.bitnami.com/bitnami
+echo "Adding cloudnative repo so dependency building succeeds"
+helm repo add cloudnative https://cloudnative-pg.github.io/charts
 echo "Repo added"
 CHART_DIRS="$(git diff --find-renames --name-only "$(git rev-parse --abbrev-ref HEAD)" remotes/origin/main -- charts | grep '[cC]hart.yaml' | sed -e 's#/[Cc]hart.yaml##g')"
 for CHART_DIR in ${CHART_DIRS}; do
-  echo "helm dependency build..."
-  helm dependency build "${CHART_DIR}"
+	echo "helm dependency build..."
+	helm dependency build "${CHART_DIR}"
 
-  echo "kubeconforming ${CHART_DIR##charts/} chart ..."
-  helm template "${CHART_DIR}" -f ./"${CHART_DIR}"/ci/"${CHART_DIR##charts/}"-values.yaml | kubeconform -kubernetes-version "${KUBERNETES_VERSION}" --output=tap > results/"${CHART_DIR##charts/}"-"${KUBERNETES_VERSION}"-result.tap
+	echo "kubeconforming ${CHART_DIR##charts/} chart ..."
+	helm template \
+		"${CHART_DIR}" \
+		-f ./"${CHART_DIR}"/ci/"${CHART_DIR##charts/}"-values.yaml | kubeconform \
+		-kubernetes-version "${KUBERNETES_VERSION}" \
+		--schema-location default \
+		--schema-location "https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json" \
+		--output=tap >results/"${CHART_DIR##charts/}"-"${KUBERNETES_VERSION}"-result.tap
 done
 
 exit 0

.github/super-linter.env

@@ -1,11 +1,20 @@
 DEFAULT_BRANCH=main
 VALIDATE_ALL_CODEBASE=false
+VALIDATE_BIOME_FORMAT=false
+VALIDATE_CHECKOV=false
+VALIDATE_CODESPELL=false
+VALIDATE_ESLINT=false
+VALIDATE_GITHUB_ACTIONS_ZIZMOR=false
 VALIDATE_JSCPD=false
+VALIDATE_KUBERNETES_KUBECONFORM=false
 VALIDATE_KUBERNETES_KUBEVAL=false
+VALIDATE_MARKDOWN_PRETTIER=false
+VALIDATE_NATURAL_LANGUAGE=false
+VALIDATE_PRETTIER=false
+VALIDATE_PYTHON_RUFF=false
+VALIDATE_STYLELINT=false
+VALIDATE_TRIVY=false
+VALIDATE_TYPESCRIPT_ES=false
+VALIDATE_TYPESCRIPT_PRETTIER=false
 VALIDATE_YAML=false
-VALIDATE_KUBERNETES_KUBECONFORM=false
-VALIDATE_CHECKOV=false
 VALIDATE_YAML_PRETTIER=false
-VALIDATE_ESLINT=false
-VALIDATE_BIOME_FORMAT=false
-VALIDATE_TRIVY=false

.github/workflows/ci.yaml

@@ -90,7 +90,7 @@ jobs:
       - name: Create test summary
         uses: test-summary/action@v2
         with:
-          paths: "./results/*.tap"
+          paths: "./results/**/*.tap"
         if: always()
 
   install-chart:

AGENTS.md

@@ -0,0 +1,39 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+
+- Helm charts live in `charts/`: `unleash`, `unleash-proxy`, and `unleash-edge`. Each chart contains `Chart.yaml`, `values.yaml`, `templates/`, `templates/tests/`, and `examples/` for sample overrides.
+- Chart-specific CI values are under `charts/<chart>/ci/*.yaml`; CRDs for the main chart sit in `charts/unleash/crds/`.
+- Generated schema test outputs land in `results/` when running kubeconform locally or in CI.
+
+## Build, Test, and Development Commands
+
+- Lint a chart with Helm: `helm lint charts/unleash` (adjust chart path as needed).
+- Chart Testing (used in CI): `ct lint --config .github/ct.yaml` and `ct install --config .github/ct.yaml` (requires kind and Helm; installs changed charts listed by `ct list-changed`).
+- Render manifests for quick inspection: `helm template charts/unleash -f charts/unleash/ci/unleash-values.yaml`.
+- Schema validation (mirrors CI): `.github/kubeconform.sh` with `KUBERNETES_VERSION` set; ensures Bitnami repo is added for dependencies.
+- Super-linter locally (needs Docker): `docker run --rm -e RUN_LOCAL=true --env-file ".github/super-linter.env" -v "$(pwd)":/tmp/lint ghcr.io/super-linter/super-linter:latest`.
+- Dry-run install for smoke checks: `helm install --debug --dry-run --generate-name charts/unleash`.
+
+## Coding Style & Naming Conventions
+
+- YAML uses two-space indentation; prefer lowercase, hyphen-separated keys and filenames.
+- Keep Helm templates minimal and reuse existing helper templates where possible; document new values in `values.yaml` and the chart `README.md`.
+- Bump chart `version` (and `appVersion` if applicable) in `Chart.yaml` with chart changes; update `Chart.lock` when dependency versions change.
+
+## Testing Guidelines
+
+- Add or adjust `templates/tests/` if behavior changes require Helm tests; keep CI values in sync so `ct install` passes.
+- Run `ct lint` before opening a PR; use `helm template` plus `.github/kubeconform.sh` for schema confidence against supported Kubernetes versions.
+- If adding new values, provide a minimal example under `examples/` and ensure defaults keep templates rendering successfully without overrides.
+
+## Commit & Pull Request Guidelines
+
+- Use clear, imperative commit subjects (short scope tags like `chore(lint): …` are common but not required).
+- Each chart change should include a version bump, updated docs, and mention of validation commands run.
+- PRs should describe the change, reference related issues, and note any kubeconform/ct results or screenshots of rendered resources when relevant.
+
+## Formatting Hygiene
+
+- Keep Markdown readable: leave a blank line after every heading/section and avoid trailing spaces on any line.
+- Run `shfmt -w <file>` after modifying shell scripts (e.g., `.github/kubeconform.sh`, `charts/unleash/extract-cnpg-crds.sh`) to keep formatting consistent.

CONTRIBUTING.md

@@ -26,10 +26,22 @@ Fork with [GitHub Codespaces](https://github.com/features/codespaces):
 
 - [Fork, edit, and preview](https://docs.github.com/en/free-pro-team@latest/github/developing-online-with-codespaces/creating-a-codespace) using [GitHub Codespaces](https://github.com/features/codespaces) without having to install and run the project locally.
 
-### Make your update:
+### Make your update
 
 Make your changes to the file(s) you'd like to update.
 
+### Running superlinter locally
+
+If you're struggling with getting CI to successfully lint your code, you can run superlinter locally to see what's wrong. To do this, you need to have Docker installed on your machine. Once you have Docker installed, you can run the following command:
+
+```bash
+docker run --rm \
+    -e RUN_LOCAL=true \
+    --env-file ".github/super-linter.env" \
+    -v "$(pwd)":/tmp/lint \
+    ghcr.io/super-linter/super-linter:latest
+```
+
 ### Open a pull request
 
 When you're done making changes and you'd like to propose them for review by opening a pull request.
@@ -41,6 +53,6 @@ When you're done making changes and you'd like to propose them for review by ope
 - Did you have an issue, like a merge conflict? Check out GitHub's [git tutorial](https://lab.github.com/githubtraining/managing-merge-conflicts) on how to resolve merge conflicts and other issues.
 - We do have bots monitoring our open PRs, which will mark PRs as stale if they haven't had any activity within 30 days and close stale issues without activity after another amount days. If you feel this was in error, please reach out to us or reopen the issue with more information.
 
-### Your PR is merged!
+### Your PR is merged
 
 Congratulations! The whole Unleash community thanks you. :sparkles:

README.md

@@ -16,14 +16,10 @@ helm repo add unleash https://docs.getunleash.io/helm-charts
 
 You can then run `helm search repo unleash` to see the charts.
 
-## Versions
-
-- 1.x includes Unleash v3.x
-- 2.x includes Unleash v4.x
-
 ## Kubernetes support strategy
 
-We'll build this repository on all k8s versions that have not reached End of Life according to the [Kubernetes support period](https://kubernetes.io/releases/patch-releases/#support-period).
+We'll build this repository on all k8s versions that have not reached End of Life according to the
+[Kubernetes support period](https://kubernetes.io/releases/patch-releases/#support-period).
 
 ## Contributing
 
@@ -55,7 +51,7 @@ The specific workflow is outlined in the file located at .github/workflows/relea
 
 ## Testing the helm chart locally
 
-To test the helm chart locally, first you should set up a local k8s environment. An easy way to do this is to set up kind, you can see instructions for setting it up [here](https://github.com/bricks-software/unleash-infra-docs/blob/main/commands/k8s.md).
+To test the helm chart locally, first you should set up a local k8s environment. An easy way to do this is to set up kind, you can see instructions for setting it up at [kind's k8s page](https://kind.sigs.k8s.io/docs/user/quick-start/).
 
 Once you have your local k8s environment set up, you can run the following command to install the helm chart locally:
 
@@ -66,6 +62,7 @@ helm install --debug --dry-run --generate-name .
 ```
 
 ## Running superlinter locally
+
 If you're struggling with getting CI to successfully lint your code, you can run superlinter locally to see what's wrong. To do this, you need to have Docker installed on your machine. Once you have Docker installed, you can run the following command:
 
 ```bash

charts/unleash-enterprise/.helmignore

@@ -0,0 +1,22 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/unleash-enterprise/Chart.yaml

@@ -0,0 +1,26 @@
+apiVersion: v2
+name: unleash-enterprise
+description: Unleash Enterprise is a feature flag & toggle system, that gives you a great overview over all feature toggles across all your applications and services.
+icon: https://docs.getunleash.io/img/logo.svg
+
+type: application
+
+version: 1.0.0
+
+appVersion: "7.3.0"
+
+dependencies:
+  - name: cloudnative-pg
+    repository: https://cloudnative-pg.github.io/charts
+    version: 0.26.1
+    condition: cloudnative-pg.enabled
+
+maintainers:
+  - name: ivarconr
+    email: ivarconr@gmail.com
+  - name: chriswk
+    email: chriswk@getunleash.io
+sources:
+  - https://github.com/Unleash/unleash
+  - https://github.com/bricks-software/unleash-enterprise
+  - https://github.com/Unleash/helm-charts

charts/unleash-enterprise/README.md

@@ -0,0 +1,67 @@
+# Unleash Enterprise
+
+Unleash is a feature flag & toggle system, that gives you a great overview over all feature toggles across all your applications and services.
+
+This chart bootstraps an [Unleash-Enterprise](https://github.com/bricks-software/unleash-enterprise) deployment on a [Kubernetes](http://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
+
+## Prerequisites
+
+- Kubernetes 1.31+
+- Helm 3+
+
+## Get Repo Info
+
+```console
+helm repo add unleash https://docs.getunleash.io/helm-charts
+helm repo update
+```
+
+_See [helm repo](https://helm.sh/docs/helm/helm_repo/) for command documentation._
+
+## Install Chart
+
+```console
+helm install unleash-enterprise unleash/unleash-enterprise
+```
+
+_See [configuration](#configuration) below._
+
+_See [helm install](https://helm.sh/docs/helm/helm_install/) for command documentation._
+
+## Dependencies
+
+By default, this chart does **not** install any database dependencies or provision a database. The database-related charts are optional and must be explicitly enabled in your values:
+
+- [cloudnative-pg](https://cloudnative-pg.github.io/charts) (optional)
+
+To have this chart manage a CloudNativePG Cluster resource for you, set `cnpg.cluster.enabled` to `true` in your values. If you also want the chart to install the CloudNativePG operator, set `cloudnative-pg.enabled` to `true` as well. Both options default to `false`.
+
+_See [helm dependency](https://helm.sh/docs/helm/helm_dependency/) for command documentation._
+
+### Using a separate database instance
+
+While you can use this chart with the bundled Postgres, we recommend that you run a separate instance instead.
+
+We currently don't have a direct upgrade path for the Cloud-Native PostgreSQL dependency. Furthermore, we do not currently configure any backups, though persistent storage is configured for the managed CNPG cluster.
+
+## Uninstall Chart
+
+```console
+helm uninstall unleash-enterprise
+```
+
+This removes all the Kubernetes components associated with the chart and deletes the release.
+
+_See [helm uninstall](https://helm.sh/docs/helm/helm_uninstall/) for command documentation._
+
+## Upgrading Chart
+
+```console
+helm upgrade unleash-enterprise unleash/unleash-enterprise --install
+```
+
+_See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command documentation._
+
+## Configuration
+
+See description of configuration in the values.yaml