Add new chart for managing kube-system charts

Author: manics

.github/workflows/cd.yml

@@ -152,6 +152,7 @@ jobs:
         run: |
           curl -sf https://raw.githubusercontent.com/helm/helm/HEAD/scripts/get-helm-3 | DESIRED_VERSION=${HELM_VERSION} bash
           helm dependency update ./mybinder
+          helm dependency update ./mybinder-kube-system
 
       # Action Repo: https://github.com/sliteteam/github-action-git-crypt-unlock
       - name: "Stage 2: Unlock git-crypt secrets"
@@ -290,6 +291,7 @@ jobs:
         run: |
           curl -sf https://raw.githubusercontent.com/helm/helm/HEAD/scripts/get-helm-3 | DESIRED_VERSION=${HELM_VERSION} bash
           helm dependency update ./mybinder
+          helm dependency update ./mybinder-kube-system
 
       - name: "Stage 2: Unlock git-crypt secrets"
         uses: sliteteam/github-action-git-crypt-unlock@8b1fa3ccc81e322c5c45fbab261eee46513fd3f8

.gitignore

@@ -8,9 +8,9 @@ __pycache__
 config/common/datacenter-*.yaml
 secrets/banned_hosts.txt
 secrets/config/common/bans.yaml
-mybinder/charts
-mybinder/requirements.lock
-mybinder/Chart.lock
+mybinder*/charts
+mybinder*/requirements.lock
+mybinder*/Chart.lock
 
 .ipynb_checkpoints
 

chartpress.yaml

@@ -10,3 +10,4 @@ charts:
         valuesPath: minesweeper.image
       tc-init:
         valuesPath: binderhub.jupyterhub.singleuser.initContainers.0.image
+  - name: mybinder-kube-system

config-kube-system/aws-curvenote.yaml

@@ -0,0 +1,19 @@
+# Install the more modern load-balancer controller:
+# https://docs.aws.amazon.com/eks/latest/userguide/aws-load-balancer-controller.html
+aws-load-balancer-controller:
+  enabled: true
+  clusterName: binderhub
+  # Must match the IRSA service account name
+  name: aws-load-balancer-controller
+  serviceAccount:
+    annotations:
+      eks.amazonaws.com/role-arn: "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/IRSA-aws-load-balancer-controller"
+
+aws-ebs-csi-driver:
+  enabled: true
+  controller:
+    serviceAccount:
+      # Must match the IRSA service account name
+      name: ebs-csi-controller-sa
+      annotations:
+        eks.amazonaws.com/role-arn: "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/IRSA-aws-ebs-csi-driver"

config/aws-curvenote.yaml

@@ -0,0 +1,17 @@
+apiVersion: v2
+description: A meta-chart for the kube-system charts on some mybinder.org hosts
+name: mybinder-kube-system
+version: "0.0.1-set.by.chartpress"
+kubeVersion: ">= 1.26.0-0"
+dependencies:
+  # https://artifacthub.io/packages/helm/aws/aws-load-balancer-controller
+  - name: aws-load-balancer-controller
+    version: 1.5.3
+    repository: https://aws.github.io/eks-charts
+    condition: aws-load-balancer-controller.enabled
+
+  # https://github.com/kubernetes-sigs/aws-ebs-csi-driver/blob/master/docs/install.md
+  - name: aws-ebs-csi-driver
+    version: 2.17.2
+    repository: https://kubernetes-sigs.github.io/aws-ebs-csi-driver
+    condition: aws-ebs-csi-driver.enabled

mybinder-kube-system/Chart.yaml

@@ -0,0 +1,7 @@
+# AWS EKS load-balancer controller
+aws-load-balancer-controller:
+  enabled: false
+
+# AWS EKS storage (EBS) controller
+aws-ebs-csi-driver:
+  enabled: false