test(release): Test ghcr release

* Add renovate.json

* feat(deps): Configure Renovate

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: plcnk <romain.pluciennik@gmail.com>

.github/renovate.json5

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>plcnk/.github:default.json5",
+    ":semanticCommitTypeAll(chore)"
+  ],
+  "regexManagers": [
+    {
+      "fileMatch": ["\\.yaml$"],
+      "matchStrings": [
+        "# ?renovate datasource=(?<datasource>.+?) depName=(?<depName>.+)\\n.+: [\"']?(?<currentValue>.+?)[\"']?\\n"
+      ]
+    }
+  ],
+  "packageRules": [
+    {
+      "matchDatasources": ["helm"],
+      "commitMessageTopic": "{{depName}} Helm release"
+    },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackageNames": ["ghcr.io/dgtlmoon/changedetection.io"],
+      "versioning": "loose"
+    },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackageNames": ["ghcr.io/juanfont/headscale"],
+      "allowedVersions": "!/^0.23.0$/"
+    },
+    {
+      "matchDatasources": ["docker"],
+      "matchPackageNames": ["eqalpha/keydb"],
+      "versioning": "regex:^(?<compatability>.+?)_v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)$"
+    }
+  ]
+}

.github/workflows/release.yaml

@@ -0,0 +1,96 @@
+name: Release Charts
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - master
+    paths:
+      - charts/**
+
+permissions:
+  contents: write
+  packages: write
+  pages: write
+  id-token: write
+
+concurrency:
+  group: release
+  cancel-in-progress: false
+
+jobs:
+  release-charts:
+    name: Release Charts
+    runs-on: ubuntu-latest
+    env:
+      AUTHOR_USER: charts-bot
+      AUTHOR_EMAIL: 178334506+plcnk-charts-bot[bot]@users.noreply.github.com
+    steps:
+      - name: Generate Token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Configure Git
+        run: |
+          git config user.name "${{ env.AUTHOR_USER }}"
+          git config user.email "${{ env.AUTHOR_EMAIL }}"
+
+      - name: Add Helm repos
+        run: |
+          helm repo add bitnami https://charts.bitnami.com/bitnami
+          helm repo add bjw-s https://bjw-s.github.io/helm-charts
+
+      - name: Install chart-releaser
+        uses: helm/chart-releaser-action@v1.6.0
+        with:
+          install_only: true
+
+      - name: Package charts
+        id: package_charts
+        run: |
+          changed_charts=""
+          for dir in charts/*; do
+            chart_name="$(basename "$dir")"
+            version="$(yq '.version' "$dir/Chart.yaml")"
+            if ! git rev-parse "$chart_name-${version#v}" &>/dev/null; then
+              echo "Packaging chart $chart_name..."
+              cr package --package-path=.cr-release-packages "$dir"
+              changed_charts+="$chart_name,"
+            fi
+          done
+          echo "changed_charts=${changed_charts%,}" >> $GITHUB_OUTPUT
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        if: steps.package_charts.outputs.changed_charts != ''
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
+
+      - name: Push charts to GHCR
+        if: steps.package_charts.outputs.changed_charts != ''
+        run: |
+          for pkg in .cr-release-packages/*; do
+            if [ -z "${pkg:-}" ]; then
+              break
+            fi
+            echo "Pushing $pkg..."
+            helm push "$pkg" "oci://ghcr.io/$GITHUB_REPOSITORY_OWNER/charts"
+          done
+
+      - name: Publish charts
+        uses: helm/chart-releaser-action@v1.6.0
+        if: steps.package_charts.outputs.changed_charts != ''
+        with:
+          skip_packaging: true
+        env:
+          CR_TOKEN: ${{ steps.app-token.outputs.token }}

.gitignore

@@ -0,0 +1 @@
+test_values/

CNAME

@@ -1 +0,0 @@
-charts.plcnk.net

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Romain Pluciennik
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -3,35 +3,37 @@
 </p>
 
 <p align="center">
-    <a href="https://github.com/plcnk/charts/blob/master/LICENSE"><img src="https://img.shields.io/github/license/plcnk/charts" /></a>
+    <a href="https://github.com/minicloudlabs/helm-charts/blob/main/LICENSE"><img src="https://img.shields.io/github/license/minicloudlabs/helm-charts" /></a>
     <a href="https://artifacthub.io/packages/search?repo=plcnk"><img src="https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/plcnk" /></a>
-    <a href="https://docs.renovatebot.com/"><img src="https://img.shields.io/badge/Renovate-enabled-green?style=flat&logo=renovate" /></a>
-</p>
-
-<p align="center">
     <a href="https://github.com/plcnk/charts/actions/workflows/release.yaml"><img src="https://github.com/plcnk/charts/actions/workflows/release.yaml/badge.svg" /></a>
-    <a href="https://github.com/plcnk/charts/actions/workflows/lint-test.yaml"><img src="https://github.com/plcnk/charts/actions/workflows/lint-test.yaml/badge.svg" /></a>
 </p>
 
-# Charts
+# plcnk's Helm Charts
 
-A collection of [Helm](https://helm.sh) charts for [Kubernetes](https://kubernetes.io/).
-
-All charts are based on the [bjw-s common library chart](https://github.com/bjw-s/helm-charts/tree/main/charts/library/common).
-
-Also available on [Artifact Hub](https://artifacthub.io/packages/search?repo=plcnk).
+Charts for deploying applications on [Kubernetes](https://kubernetes.io/) using [Helm](https://helm.sh/).
 
 The code in this repository is provided as-is with no warranties.
 
-## Chart Overview
+## Usage
+
+[Helm](https://helm.sh) must be installed to use the charts.
+Please refer to Helm's [documentation](https://helm.sh/docs/) to get started.
+
+Once Helm is set up properly, add the repo as follows:
+
+```console
+helm repo add plcnk https://charts.plcnk.net
+helm repo update
+```
+
+You can then run `helm search repo plcnk` to see the charts.
+
+## Available charts
 
 | Chart | Description |
 | ----- | ----------- |
-| [# cloudflare-tunnel <img src='https://raw.githubusercontent.com/plcnk/charts/master/charts/cloudflare-tunnel/icon.svg' alt='cloudflare-tunnel icon' width='18px' align='right' loading='lazy'>](https://github.com/plcnk/charts/tree/master/charts/cloudflare-tunnel/) | Connect your resources to Cloudflare without a publicly routable IP address. |
-| [# it-tools <img src='https://raw.githubusercontent.com/plcnk/charts/master/charts/it-tools/icon.svg' alt='it-tools icon' width='18px' align='right' loading='lazy'>](https://github.com/plcnk/charts/tree/master/charts/it-tools/) | Collection of handy online tools for developers, with great UX. |
-| [# moodist <img src='https://raw.githubusercontent.com/plcnk/charts/master/charts/moodist/icon.svg' alt='moodist icon' width='18px' align='right' loading='lazy'>](https://github.com/plcnk/charts/tree/master/charts/moodist/) | Ambient sounds for focus and calm. |
-| [# wikijs <img src='https://raw.githubusercontent.com/plcnk/charts/master/charts/wikijs/icon.svg' alt='wikijs icon' width='18px' align='right' loading='lazy'>](https://github.com/plcnk/charts/tree/master/charts/wikijs/) | A modern, lightweight and powerful wiki app built on NodeJS. |
+| [IT-Tools <img src='https://raw.githubusercontent.com/plcnk/charts/master/charts/it-tools/icon.svg' alt='it-tools icon' width='18px' align='right' loading='lazy'>](charts/it-tools/) | Collection of handy online tools for developers, with great UX. |
 
 ## License
 
-This project is licensed under the [MIT License](./LICENSE).
+This project is licensed under the [MIT License](https://github.com/plcnk/charts/blob/master/LICENSE).

artifacthub-repo.yml

@@ -1,4 +0,0 @@
-repositoryID: 94620961-e40f-4cff-bbf5-bbe4247bc5e8
-owners:
-  - name: plcnk
-    email: romain.pluciennik@gmail.com

charts/it-tools/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/it-tools/Chart.yaml

@@ -0,0 +1,25 @@
+apiVersion: v2
+name: it-tools
+description: Collection of handy online tools for developers, with great UX.
+home: https://github.com/plcnk/charts/tree/master/charts/it-tools
+icon: https://raw.githubusercontent.com/plcnk/charts/master/charts/it-tools/icon.svg
+type: application
+version: 1.0.3
+# renovate datasource=docker depName=ghcr.io/corentinth/it-tools
+appVersion: "2024.5.13-a0bc346"
+kubeVersion: ">=1.22.0-0"
+keywords:
+  - it-tools
+  - it
+  - tools
+sources:
+  - https://github.com/CorentinTh/it-tools
+annotations:
+  artifacthub.io/changes: |
+    - kind: added
+      description: Test ghcr release
+  artifacthub.io/links: |-
+    - name: App Source
+      url: https://github.com/CorentinTh/it-tools
+    - name: Chart Source
+      url: https://github.com/plcnk/charts/tree/master/charts/it-tools

charts/it-tools/README.md

@@ -0,0 +1,109 @@
+# it-tools
+
+Helm chart for deploying [it-tools](https://it-tools.tech/).
+
+it-tools is a collection of handy online tools for developers, with great UX.
+
+> [!NOTE]
+> This chart is not maintained by the original author of it-tools and any problems with this chart should be submitted [here](https://github.com/plcnk/charts/issues/new).
+
+## Source code
+
+* <https://github.com/CorentinTh/it-tools>
+
+## Get repo
+
+```console
+helm repo add plcnk https://charts.plcnk.net
+helm repo update
+```
+
+## Install chart
+
+```console
+helm install [RELEASE_NAME] plcnk/it-tools
+```
+
+## Uninstall chart
+
+```console
+helm uninstall [RELEASE_NAME]
+```
+
+## Parameters
+
+### Global parameters
+
+| Name               | Description                                    | Value |
+| ------------------ | ---------------------------------------------- | ----- |
+| `replicaCount`     | Number of replicas for the it-tools Deployment | `1`   |
+| `imagePullSecrets` | Docker registry pull secrets                   | `[]`  |
+| `nameOverride`     | Name override                                  | `""`  |
+| `fullnameOverride` | Full name override                             | `""`  |
+| `podAnnotations`   | Additional annotations for the Pod resource    | `{}`  |
+| `podLabels`        | Additional labels for the Pod resource         | `{}`  |
+| `nodeSelector`     | Node labels for pod assignment                 | `{}`  |
+| `tolerations`      | Tolerations for pod assignment                 | `[]`  |
+| `affinity`         | Affinity for pod assignment                    | `{}`  |
+
+### Image parameters
+
+| Name               | Description                                                   | Value                         |
+| ------------------ | ------------------------------------------------------------- | ----------------------------- |
+| `image.repository` | Docker image repository                                       | `ghcr.io/corentinth/it-tools` |
+| `image.pullPolicy` | Docker image pull policy                                      | `IfNotPresent`                |
+| `image.tag`        | Overrides the image tag whose default is the chart appVersion | `""`                          |
+
+### Service account parameters
+
+| Name                         | Description                                                                                                            | Value   |
+| ---------------------------- | ---------------------------------------------------------------------------------------------------------------------- | ------- |
+| `serviceAccount.create`      | Specifies whether a service account should be created                                                                  | `false` |
+| `serviceAccount.automount`   | Automatically mount a ServiceAccount's API credentials?                                                                | `true`  |
+| `serviceAccount.annotations` | Additional annotations for the ServiceAccount resource                                                                 | `{}`    |
+| `serviceAccount.name`        | The name of the service account to use. If not set and create is true, a name is generated using the fullname template | `""`    |
+
+### Security context parameters
+
+| Name                                       | Description                               | Value            |
+| ------------------------------------------ | ----------------------------------------- | ---------------- |
+| `securityContext.capabilities.drop`        | Capabilities to drop                      | `["ALL"]`        |
+| `securityContext.readOnlyRootFilesystem`   | If root filesystem should be read-only    | `true`           |
+| `securityContext.runAsNonRoot`             | If pod should be run as non-root          | `true`           |
+| `securityContext.runAsUser`                | User to run pod as                        | `10099`          |
+| `securityContext.runAsGroup`               | Group to run pod as                       | `10099`          |
+| `securityContext.allowPrivilegeEscalation` | If privilege escalation should be allowed | `false`          |
+| `securityContext.seccompProfile.type`      | seccomp profile type                      | `RuntimeDefault` |
+
+### Service parameters
+
+| Name           | Description            | Value       |
+| -------------- | ---------------------- | ----------- |
+| `service.type` | Service type to create | `ClusterIP` |
+| `service.port` | Service port to use    | `80`        |
+
+### Ingress parameters
+
+| Name                  | Description                                                              | Value   |
+| --------------------- | ------------------------------------------------------------------------ | ------- |
+| `ingress.enabled`     | Enable ingress record generation                                         | `false` |
+| `ingress.className`   | IngressClass that will be be used to implement the Ingress               | `""`    |
+| `ingress.annotations` | Additional annotations for the Ingress resource                          | `{}`    |
+| `ingress.hosts`       | An array with hostname(s) to be covered with the ingress record          | `[]`    |
+| `ingress.tls`         | TLS configuration for hostname(s) to be covered with this ingress record | `[]`    |
+
+### Resources parameters
+
+| Name        | Description          | Value |
+| ----------- | -------------------- | ----- |
+| `resources` | Kubernetes resources | `{}`  |
+
+### Autoscaling parameters
+
+| Name                                            | Description                          | Value   |
+| ----------------------------------------------- | ------------------------------------ | ------- |
+| `autoscaling.enabled`                           | Enable Horizontal POD autoscaling    | `false` |
+| `autoscaling.minReplicas`                       | Minimum number of replicas           | `1`     |
+| `autoscaling.maxReplicas`                       | Maximum number of replicas           | `100`   |
+| `autoscaling.targetCPUUtilizationPercentage`    | Target CPU utilization percentage    | `80`    |
+| `autoscaling.targetMemoryUtilizationPercentage` | Target Memory utilization percentage | `80`    |

charts/it-tools/templates/_helpers.tpl

@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "it-tools.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "it-tools.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "it-tools.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "it-tools.labels" -}}
+helm.sh/chart: {{ include "it-tools.chart" . }}
+{{ include "it-tools.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "it-tools.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "it-tools.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "it-tools.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "it-tools.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}

charts/it-tools/templates/configmap.yaml

@@ -0,0 +1,29 @@
+apiVersion: v1 
+kind: ConfigMap
+metadata:
+  name: nginx-conf
+data: 
+  nginx.conf: |
+    worker_processes  auto;
+
+    error_log  /tmp/nginx/error.log warn;
+    pid        /tmp/nginx/nginx.pid;
+
+    events { 
+      worker_connections  1024; 
+    }
+
+    http {
+        include /etc/nginx/mime.types;
+        
+        server {
+            listen 80;
+            server_name _;
+            root /usr/share/nginx/html;
+            index index.html;
+
+            location / {
+                try_files $uri $uri/ /index.html;
+            }
+        }
+    }

charts/it-tools/templates/deployment.yaml

@@ -0,0 +1,82 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "it-tools.fullname" . }}
+  labels:
+    {{- include "it-tools.labels" . | nindent 4 }}
+spec:
+  {{- if not .Values.autoscaling.enabled }}
+  replicas: {{ .Values.replicaCount }}
+  {{- end }}
+  selector:
+    matchLabels:
+      {{- include "it-tools.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      {{- with .Values.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      labels:
+        {{- include "it-tools.labels" . | nindent 8 }}
+        {{- with .Values.podLabels }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      serviceAccountName: {{ include "it-tools.serviceAccountName" . }}
+      containers:
+        - name: {{ .Chart.Name }}
+          securityContext:
+            {{- toYaml .Values.securityContext | nindent 12 }}
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          ports:
+            - name: http
+              containerPort: {{ .Values.service.port }}
+              protocol: TCP
+          livenessProbe:
+            httpGet:
+              path: /
+              port: http
+            periodSeconds: 30
+            timeoutSeconds: 30
+          readinessProbe:
+            httpGet:
+              path: /
+              port: http
+            periodSeconds: 30
+            timeoutSeconds: 30
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+          volumeMounts:
+            - name: cache
+              mountPath: "/var/cache/nginx"
+            - name: tmp
+              mountPath: "/tmp/nginx"
+            - name: conf 
+              mountPath: /etc/nginx/nginx.conf
+              subPath: nginx.conf
+      volumes:
+        - name: cache
+          emptyDir: {}
+        - name: tmp
+          emptyDir: {}
+        - name: conf
+          configMap: 
+            name: nginx-conf
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}

charts/it-tools/templates/hpa.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.autoscaling.enabled }}
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: {{ include "it-tools.fullname" . }}
+  labels:
+    {{- include "it-tools.labels" . | nindent 4 }}
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: {{ include "it-tools.fullname" . }}
+  minReplicas: {{ .Values.autoscaling.minReplicas }}
+  maxReplicas: {{ .Values.autoscaling.maxReplicas }}
+  metrics:
+    {{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: cpu
+        target:
+          type: Utilization
+          averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
+    {{- end }}
+    {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: memory
+        target:
+          type: Utilization
+          averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    {{- end }}
+{{- end }}

charts/it-tools/templates/ingress.yaml

@@ -0,0 +1,61 @@
+{{- if .Values.ingress.enabled -}}
+{{- $fullName := include "it-tools.fullname" . -}}
+{{- $svcPort := .Values.service.port -}}
+{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }}
+  {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }}
+  {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}}
+  {{- end }}
+{{- end }}
+{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}}
+apiVersion: networking.k8s.io/v1
+{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}}
+apiVersion: networking.k8s.io/v1beta1
+{{- else -}}
+apiVersion: extensions/v1beta1
+{{- end }}
+kind: Ingress
+metadata:
+  name: {{ $fullName }}
+  labels:
+    {{- include "it-tools.labels" . | nindent 4 }}
+  {{- with .Values.ingress.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }}
+  ingressClassName: {{ .Values.ingress.className }}
+  {{- end }}
+  {{- if .Values.ingress.tls }}
+  tls:
+    {{- range .Values.ingress.tls }}
+    - hosts:
+        {{- range .hosts }}
+        - {{ . | quote }}
+        {{- end }}
+      secretName: {{ .secretName }}
+    {{- end }}
+  {{- end }}
+  rules:
+    {{- range .Values.ingress.hosts }}
+    - host: {{ .host | quote }}
+      http:
+        paths:
+          {{- range .paths }}
+          - path: {{ .path }}
+            {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }}
+            pathType: {{ .pathType }}
+            {{- end }}
+            backend:
+              {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }}
+              service:
+                name: {{ $fullName }}
+                port:
+                  number: {{ $svcPort }}
+              {{- else }}
+              serviceName: {{ $fullName }}
+              servicePort: {{ $svcPort }}
+              {{- end }}
+          {{- end }}
+    {{- end }}
+{{- end }}

charts/it-tools/templates/service.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "it-tools.fullname" . }}
+  labels:
+    {{- include "it-tools.labels" . | nindent 4 }}
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - port: {{ .Values.service.port }}
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    {{- include "it-tools.selectorLabels" . | nindent 4 }}

charts/it-tools/templates/serviceaccount.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "it-tools.serviceAccountName" . }}
+  labels:
+    {{- include "it-tools.labels" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
+{{- end }}

charts/it-tools/templates/tests/test-connection.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: "{{ include "it-tools.fullname" . }}-test-connection"
+  labels:
+    {{- include "it-tools.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": test
+spec:
+  containers:
+    - name: wget
+      image: busybox
+      command: ['wget']
+      args: ['{{ include "it-tools.fullname" . }}:{{ .Values.service.port }}']
+  restartPolicy: Never

charts/it-tools/values.yaml

@@ -0,0 +1,128 @@
+# Default values for it-tools.
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+## @section Global parameters
+## @param replicaCount Number of replicas for the it-tools Deployment
+replicaCount: 1
+
+## @param imagePullSecrets Docker registry pull secrets
+## @param nameOverride Name override
+## @param fullnameOverride Full name override
+imagePullSecrets: []
+nameOverride: ""
+fullnameOverride: ""
+
+## @param podAnnotations Additional annotations for the Pod resource
+## @param podLabels Additional labels for the Pod resource
+podAnnotations: {}
+podLabels: {}
+
+## @param nodeSelector Node labels for pod assignment
+## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/
+nodeSelector: {}
+
+## @param tolerations Tolerations for pod assignment
+## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
+tolerations: []
+
+## @param affinity Affinity for pod assignment
+## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
+affinity: {}
+
+## @section Image parameters
+## @param image.repository Docker image repository
+## @param image.pullPolicy Docker image pull policy
+## @param image.tag Overrides the image tag whose default is the chart appVersion
+image:
+  repository: ghcr.io/corentinth/it-tools
+  pullPolicy: IfNotPresent
+  tag: ""
+
+## @section Service account parameters
+## @param serviceAccount.create Specifies whether a service account should be created
+## @param serviceAccount.automount Automatically mount a ServiceAccount's API credentials?
+## @param serviceAccount.annotations Additional annotations for the ServiceAccount resource
+## @param serviceAccount.name The name of the service account to use. If not set and create is true, a name is generated using the fullname template
+serviceAccount:
+  create: false
+  automount: true
+  annotations: {}
+  name: ""
+
+## @section Security context parameters
+## @param securityContext.capabilities.drop Capabilities to drop
+## @param securityContext.readOnlyRootFilesystem If root filesystem should be read-only
+## @param securityContext.runAsNonRoot If pod should be run as non-root
+## @param securityContext.runAsUser User to run pod as
+## @param securityContext.runAsGroup Group to run pod as
+## @param securityContext.allowPrivilegeEscalation If privilege escalation should be allowed
+## @param securityContext.seccompProfile.type seccomp profile type
+securityContext:
+  capabilities:
+    drop:
+    - ALL
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+  runAsUser: 10099
+  runAsGroup: 10099
+  allowPrivilegeEscalation: false
+  seccompProfile:
+    type: RuntimeDefault
+
+## @section Service parameters
+## @param service.type Service type to create
+## @param service.port Service port to use
+service:
+  type: ClusterIP
+  port: 80
+
+## @section Ingress parameters
+## Configure the ingress resource that allows you to access the installation
+## ref: https://kubernetes.io/docs/concepts/services-networking/ingress/
+##
+## @param ingress.enabled Enable ingress record generation
+## @param ingress.className IngressClass that will be be used to implement the Ingress
+## @param ingress.annotations Additional annotations for the Ingress resource
+## @param ingress.hosts An array with hostname(s) to be covered with the ingress record
+## @param ingress.tls TLS configuration for hostname(s) to be covered with this ingress record
+ingress:
+  enabled: false
+  className: ""
+  annotations: {}
+    # kubernetes.io/ingress.class: nginx
+    # kubernetes.io/tls-acme: "true"
+  hosts: []
+    # - host: it-tools.example.local
+    #   paths:
+    #     - path: /
+    #       pathType: Prefix
+  tls: []
+  #  - secretName: it-tools-tls
+  #    hosts:
+  #      - it-tools.example.local
+
+## @section Resources parameters
+## @param resources Kubernetes resources
+resources: {}
+  # limits:
+  #   cpu: 100m
+  #   memory: 128Mi
+  # requests:
+  #   cpu: 100m
+  #   memory: 128Mi
+
+## @section Autoscaling parameters
+## Autoscaling parameters
+## ref: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
+## @param autoscaling.enabled Enable Horizontal POD autoscaling
+## @param autoscaling.minReplicas Minimum number of replicas
+## @param autoscaling.maxReplicas Maximum number of replicas
+## @param autoscaling.targetCPUUtilizationPercentage Target CPU utilization percentage
+## @param autoscaling.targetMemoryUtilizationPercentage Target Memory utilization percentage
+autoscaling:
+  enabled: false
+  minReplicas: 1
+  maxReplicas: 100
+  targetCPUUtilizationPercentage: 80
+  targetMemoryUtilizationPercentage: 80