feat(chart): Sync chart with Bitnami's version (#948)

javirln · web-flow · commit 3f2f0ead388c · 2024-06-14T10:29:26.000+02:00
Signed-off-by: Javier Rodriguez &lt;javier@chainloop.dev&gt;
diff --git a/deployment/chainloop/Chart.lock b/deployment/chainloop/Chart.lock
@@ -8,5 +8,8 @@ dependencies:
 - name: vault
   repository: https://charts.bitnami.com/bitnami
   version: 1.4.6
-digest: sha256:9b1f7019d584063cd0f0b83d80824ece3327280242d19f0207f017b647279e07
-generated: "2024-06-13T18:47:06.530135114+02:00"
+- name: dex
+  repository: https://charts.dexidp.io
+  version: 0.18.0
+digest: sha256:7f47b9aca49bedc3f378c9ec0bfa18ce53a4f4ba4b1e1e51348a08afe9e3fdeb
+generated: "2024-06-14T08:39:26.654098+02:00"
diff --git a/deployment/chainloop/Chart.yaml b/deployment/chainloop/Chart.yaml
@@ -25,3 +25,7 @@ dependencies:
     name: vault
     repository: https://charts.bitnami.com/bitnami
     version: 1.4.x
+  - name: dex
+    condition: development
+    repository: https://charts.dexidp.io
+    version: 0.18.0
diff --git a/deployment/chainloop/README.md b/deployment/chainloop/README.md
diff --git a/deployment/chainloop/charts/dex-0.18.0.tgz b/deployment/chainloop/charts/dex-0.18.0.tgz
diff --git a/deployment/chainloop/templates/cas/config.configmap.yaml b/deployment/chainloop/templates/cas/config.configmap.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 apiVersion: v1
 kind: ConfigMap
 metadata:
diff --git a/deployment/chainloop/templates/cas/config.secret.yaml b/deployment/chainloop/templates/cas/config.secret.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 apiVersion: v1
 kind: Secret
 metadata:
diff --git a/deployment/chainloop/templates/cas/deployment.yaml b/deployment/chainloop/templates/cas/deployment.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 apiVersion: apps/v1
 kind: Deployment
 metadata:
diff --git a/deployment/chainloop/templates/cas/gcp_secret_manager.secret.yaml b/deployment/chainloop/templates/cas/gcp_secret_manager.secret.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 {{- if eq "gcpSecretManager" .Values.secretsBackend.backend  }}
 apiVersion: v1
 kind: Secret
diff --git a/deployment/chainloop/templates/cas/gke_monitoring.yaml b/deployment/chainloop/templates/cas/gke_monitoring.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 {{- if .Values.GKEMonitoring.enabled -}}
 apiVersion: monitoring.googleapis.com/v1
 kind: PodMonitoring
diff --git a/deployment/chainloop/templates/cas/hpa.yaml b/deployment/chainloop/templates/cas/hpa.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 {{- if .Values.cas.autoscaling.enabled }}
 apiVersion: {{ include "common.capabilities.hpa.apiVersion" ( dict "context" $ ) }}
 kind: HorizontalPodAutoscaler
diff --git a/deployment/chainloop/templates/cas/ingress.yaml b/deployment/chainloop/templates/cas/ingress.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 {{- if .Values.cas.ingress.enabled }}
 {{- $fullName := include "chainloop.cas.fullname" . -}}
 apiVersion: {{ include "common.capabilities.ingress.apiVersion" . }}
diff --git a/deployment/chainloop/templates/cas/ingress_grpc.yaml b/deployment/chainloop/templates/cas/ingress_grpc.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 {{- if .Values.cas.ingressAPI.enabled }}
 {{- $fullName := printf "%s-%s" (include "chainloop.cas.fullname" .) "api" -}}
 apiVersion: {{ include "common.capabilities.ingress.apiVersion" . }}
diff --git a/deployment/chainloop/templates/cas/jwt_public_key.secret.yaml b/deployment/chainloop/templates/cas/jwt_public_key.secret.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 apiVersion: v1
 kind: Secret
 metadata:
diff --git a/deployment/chainloop/templates/cas/service_grpc.yaml b/deployment/chainloop/templates/cas/service_grpc.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 apiVersion: v1
 kind: Service
 metadata:
diff --git a/deployment/chainloop/templates/cas/service_http.yaml b/deployment/chainloop/templates/cas/service_http.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 apiVersion: v1
 kind: Service
 metadata:
diff --git a/deployment/chainloop/templates/cas/serviceaccount.yaml b/deployment/chainloop/templates/cas/serviceaccount.yaml
@@ -1,3 +1,8 @@
+{{- /*
+Copyright Chainloop, Inc. All Rights Reserved.
+SPDX-License-Identifier: APACHE-2.0
+*/}}
+
 {{- if .Values.cas.serviceAccount.create -}}
 apiVersion: v1
 kind: ServiceAccount
diff --git a/deployment/chainloop/values.yaml b/deployment/chainloop/values.yaml
@@ -448,7 +448,7 @@ controlplane:
     targetMemoryUtilizationPercentage: 80
 
   ## @param controlplane.sentry.enabled Enable sentry.io alerting
-  ## @param controlplane.sentry.dsn DSN endpoint https://docs.sentry.io/product/sentry-basics/dsn-explainer/
+  ## @param controlplane.sentry.dsn DSN endpoint
   ## @param controlplane.sentry.environment Environment tag
   sentry:
     enabled: false
@@ -780,7 +780,7 @@ cas:
     targetMemoryUtilizationPercentage: 80
 
   ## @param cas.sentry.enabled Enable sentry.io alerting
-  ## @param cas.sentry.dsn DSN endpoint https://docs.sentry.io/product/sentry-basics/dsn-explainer/
+  ## @param cas.sentry.dsn DSN endpoint
   ## @param cas.sentry.environment Environment tag
   sentry:
     enabled: false
@@ -822,8 +822,6 @@ postgresql:
 ## @param vault.server.extraEnvVars[1].value The address to listen on. Default: [::]:8200
 vault:
   server:
-    ## This configuration is only for development purposes and should not be used in production. Development
-    ## mode is configured by --set development=true, which enables this Vault chart
     args: [
       "server",
       "-dev"
@@ -833,10 +831,47 @@ vault:
         value: "notasecret"
       - name: VAULT_DEV_LISTEN_ADDRESS
         value: "[::]:8200"
-    config: |
-      storage "inmem" {}
+    config: "storage \"inmem\" {}\ndisable_mlock = true\nui = true\nservice_registration \"kubernetes\" {}"
 
-      disable_mlock = true
-      ui = true
-
-      service_registration "kubernetes" {}
+# Dex server running in development mode --set development=true
+# IMPORTANT: This is not meant to run in production
+## @param dex.config.issuer The issuer URL of the Identity provider (IDp)
+## @param dex.config.storage.type Storage type for the dex server
+## @param dex.config.web.http HTTP address for the dex server
+## @param dex.config.staticClients[0].id Client ID for the static client
+## @param dex.config.staticClients[0].redirectURIs Redirect URIs for the static client
+## @param dex.config.staticClients[0].name Name for the static client
+## @param dex.config.staticClients[0].secret Secret for the static client
+## @param dex.config.enablePasswordDB Enable static passwords
+## @param dex.config.staticPasswords[0].email Email for the static password
+## @param dex.config.staticPasswords[0].hash Hash for the static password
+## @param dex.config.staticPasswords[1].email Email for the static password
+## @param dex.config.staticPasswords[1].hash Hash for the static password
+dex:
+  config:
+    issuer: http://chainloop-dex:5556/dex
+
+    storage:
+      type: memory
+
+    web:
+      http: 0.0.0.0:5556
+
+    staticClients:
+      - id: chainloop-dev
+        redirectURIs:
+          - "http://0.0.0.0:8000/auth/callback"
+          - "http://localhost:8000/auth/callback"
+        name: "Chainloop Dev"
+        secret: ZXhhbXBsZS1hcHAtc2VjcmV0
+
+    # required to enable static passwords
+    enablePasswordDB: true
+
+    staticPasswords:
+      - email: "john@chainloop.local"
+        # password: "password"
+        hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
+      - email: "sarah@chainloop.local"
+        # password: "password"
+        hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
