diff --git a/.DS_Store b/.DS_Store new file mode 100644 index 0000000..b110a95 Binary files /dev/null and b/.DS_Store differ diff --git a/.github/workflows/static.yml b/.github/workflows/static.yml new file mode 100644 index 0000000..2d4684c --- /dev/null +++ b/.github/workflows/static.yml @@ -0,0 +1,42 @@ +# Simple workflow for deploying static content to GitHub Pages +name: Deploy static content to Pages + +on: + # Runs on pushes targeting the default branch + push: + branches: ["master"] + + # Allows you to run this workflow manually from the Actions tab + workflow_dispatch: + +# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages +permissions: + contents: read + pages: write + id-token: write + +# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued. +# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete. +concurrency: + group: "pages" + cancel-in-progress: false + +jobs: + # Single deploy job since we're just deploying + deploy: + environment: + name: github-pages + url: ${{ steps.deployment.outputs.page_url }} + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + - name: Setup Pages + uses: actions/configure-pages@v3 + - name: Upload artifact + uses: actions/upload-pages-artifact@v2 + with: + path: 'repository/' + - name: Deploy to GitHub Pages + id: deployment + uses: actions/deploy-pages@v2 diff --git a/README.md b/README.md new file mode 100644 index 0000000..8c070b7 --- /dev/null +++ b/README.md @@ -0,0 +1,28 @@ +# PSPDFKit Helm Charts + +## Using this repository + +``` +helm repo add pspdfkit https://pspdfkit.github.io/helm-charts +helm repo update +``` + +## Installing PDPDFKit tools + +### Processor + +``` +helm upgrade --install --debug --dry-run \ + processor pspdfkit/processor \ + -n pspdfkit-services \ + -f ./processor-values.yaml +``` + +### Server + +``` +helm upgrade --install --debug --dry-run + server pspdfkit/server \ + -n pspdfkit-services \ + -f ./server-values.yaml +``` diff --git a/charts/.DS_Store b/charts/.DS_Store new file mode 100644 index 0000000..9123aea Binary files /dev/null and b/charts/.DS_Store differ diff --git a/charts/processor/.helmignore b/charts/processor/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/charts/processor/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/charts/processor/Chart.yaml b/charts/processor/Chart.yaml new file mode 100644 index 0000000..a56e1df --- /dev/null +++ b/charts/processor/Chart.yaml @@ -0,0 +1,6 @@ +apiVersion: v2 +name: processor +description: PSPDFKit Processor +type: application +version: 0.1.24 +appVersion: "2023.10.0" diff --git a/charts/processor/templates/NOTES.txt b/charts/processor/templates/NOTES.txt new file mode 100644 index 0000000..7e8706a --- /dev/null +++ b/charts/processor/templates/NOTES.txt @@ -0,0 +1,22 @@ +1. Get the application URL by running these commands: +{{- if .Values.ingress.enabled }} +{{- range $host := .Values.ingress.hosts }} + {{- range .paths }} + http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }} + {{- end }} +{{- end }} +{{- else if contains "NodePort" .Values.service.type }} + export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "processor.fullname" . }}) + export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}") + echo http://$NODE_IP:$NODE_PORT +{{- else if contains "LoadBalancer" .Values.service.type }} + NOTE: It may take a few minutes for the LoadBalancer IP to be available. + You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "processor.fullname" . }}' + export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "processor.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}") + echo http://$SERVICE_IP:{{ .Values.service.port }} +{{- else if contains "ClusterIP" .Values.service.type }} + export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "processor.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") + export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}") + echo "Visit http://127.0.0.1:8080 to use your application" + kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT +{{- end }} diff --git a/charts/processor/templates/_helpers.tpl b/charts/processor/templates/_helpers.tpl new file mode 100644 index 0000000..0928d8c --- /dev/null +++ b/charts/processor/templates/_helpers.tpl @@ -0,0 +1,81 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "processor.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "processor.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "processor.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "processor.labels" -}} +helm.sh/chart: {{ include "processor.chart" . }} +{{ include "processor.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "processor.selectorLabels" -}} +app.kubernetes.io/name: {{ include "processor.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "processor.serviceAccountName" -}} +{{- if .Values.serviceAccount.create }} +{{- default (include "processor.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} + +{{/* +License secret name +*/}} +{{- define "processor.license.secret.name" -}} + {{- if not .Values.pspdfkit.license.externalSecret.name -}} + {{- printf "%s-license" (include "processor.fullname" .) -}} + {{- else -}} + {{- .Values.pspdfkit.license.externalSecret.name -}} + {{- end -}} +{{- end -}} + +{{- define "processor.license.secret.key" -}} + {{- if not .Values.pspdfkit.license.externalSecret.name -}} + LICENSE_KEY + {{- else -}} + {{- .Values.pspdfkit.license.externalSecret.key -}} + {{- end -}} +{{- end -}} diff --git a/charts/processor/templates/deployment.yaml b/charts/processor/templates/deployment.yaml new file mode 100644 index 0000000..3edd00c --- /dev/null +++ b/charts/processor/templates/deployment.yaml @@ -0,0 +1,109 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "processor.fullname" . }} + labels: + {{- include "processor.labels" . | nindent 4 }} +spec: + {{- if not .Values.autoscaling.enabled }} + replicas: {{ .Values.replicaCount }} + {{- end }} + {{- if .Values.updateStrategy }} + strategy: + {{ toYaml .Values.updateStrategy | nindent 4 }} + {{- end }} + selector: + matchLabels: + {{- include "processor.selectorLabels" . | nindent 6 }} + template: + metadata: + annotations: + checksum/config: {{ include (print $.Template.BasePath "/processor-config.yaml") . | sha256sum }} + {{- if .Values.pspdfkit.auth.api.createSecret }} + checksum/auth-api: {{ include (print $.Template.BasePath "/processor-auth-secret.yaml") . | sha256sum }} + {{- end }} + {{- if not .Values.pspdfkit.license.externalSecret.name }} + checksum/license: {{ include (print $.Template.BasePath "/processor-license-secret.yaml") . | sha256sum }} + {{- end }} + {{- with .Values.podAnnotations }} + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "processor.selectorLabels" . | nindent 8 }} + spec: + {{- with .Values.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "processor.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.podSecurityContext | nindent 8 }} + {{- if .Values.initContainers }} + initContainers: + {{ toYaml .Values.initContainers | nindent 8 }} + {{- end }} + containers: + - name: {{ .Chart.Name }} + envFrom: + {{- if .Values.pspdfkit.auth.api.createSecret }} + - secretRef: + name: {{ include "processor.fullname" . }}-auth + {{- else }} + {{- with .Values.pspdfkit.auth.api.externalSecretName }} + - secretRef: + name: {{ . }} + {{- end }} + {{- end }} + - configMapRef: + name: {{ include "processor.fullname" . }}-config + env: + - name: LICENSE_KEY + valueFrom: + secretKeyRef: + name: {{ include "processor.license.secret.name" . }} + key: {{ include "processor.license.secret.key" . }} + {{- if .Values.extraEnvs }} + {{- toYaml .Values.extraEnvs | nindent 12 }} + {{- end }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} + image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + ports: + - name: api + containerPort: {{ .Values.service.port }} + protocol: TCP + {{- if .Values.startupProbe }} + startupProbe: {{ toYaml .Values.startupProbe | nindent 12 }} + {{- end }} + {{- if .Values.livenessProbe }} + livenessProbe: {{ toYaml .Values.livenessProbe | nindent 12 }} + {{- end }} + {{- if .Values.readinessProbe }} + readinessProbe: {{ toYaml .Values.readinessProbe | nindent 12 }} + {{- end }} + resources: + {{- toYaml .Values.resources | nindent 12 }} + {{- if .Values.extraVolumeMounts }} + volumeMounts: + {{- toYaml .Values.extraVolumeMounts | nindent 12 }} + {{- end }} + {{- if .Values.sidecars }} + {{ toYaml .Values.sidecars | nindent 8 }} + {{- end }} + {{- if .Values.extraVolumes }} + volumes: + {{ toYaml .Values.extraVolumes | nindent 8 }} + {{- end }} + {{- with .Values.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} diff --git a/charts/processor/templates/hpa.yaml b/charts/processor/templates/hpa.yaml new file mode 100644 index 0000000..1cdaf66 --- /dev/null +++ b/charts/processor/templates/hpa.yaml @@ -0,0 +1,28 @@ +{{- if .Values.autoscaling.enabled }} +apiVersion: autoscaling/v2beta1 +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "processor.fullname" . }} + labels: + {{- include "processor.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "processor.fullname" . }} + minReplicas: {{ .Values.autoscaling.minReplicas }} + maxReplicas: {{ .Values.autoscaling.maxReplicas }} + metrics: + {{- if .Values.autoscaling.targetCPUUtilizationPercentage }} + - type: Resource + resource: + name: cpu + targetAverageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }} + {{- end }} + {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }} + - type: Resource + resource: + name: memory + targetAverageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }} + {{- end }} +{{- end }} diff --git a/charts/processor/templates/ingress.yaml b/charts/processor/templates/ingress.yaml new file mode 100644 index 0000000..3c9c08d --- /dev/null +++ b/charts/processor/templates/ingress.yaml @@ -0,0 +1,61 @@ +{{- if .Values.ingress.enabled -}} +{{- $fullName := include "processor.fullname" . -}} +{{- $svcPort := .Values.service.port -}} +{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} + {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }} + {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}} + {{- end }} +{{- end }} +{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1 +{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1beta1 +{{- else -}} +apiVersion: extensions/v1beta1 +{{- end }} +kind: Ingress +metadata: + name: {{ $fullName }} + labels: + {{- include "processor.labels" . | nindent 4 }} + {{- with .Values.ingress.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }} + ingressClassName: {{ .Values.ingress.className }} + {{- end }} + {{- if .Values.ingress.tls }} + tls: + {{- range .Values.ingress.tls }} + - hosts: + {{- range .hosts }} + - {{ . | quote }} + {{- end }} + secretName: {{ .secretName }} + {{- end }} + {{- end }} + rules: + {{- range .Values.ingress.hosts }} + - host: {{ .host | quote }} + http: + paths: + {{- range .paths }} + - path: {{ .path }} + {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }} + pathType: {{ .pathType }} + {{- end }} + backend: + {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} + service: + name: {{ $fullName }} + port: + number: {{ $svcPort }} + {{- else }} + serviceName: {{ $fullName }} + servicePort: {{ $svcPort }} + {{- end }} + {{- end }} + {{- end }} +{{- end }} diff --git a/charts/processor/templates/processor-auth-secret.yaml b/charts/processor/templates/processor-auth-secret.yaml new file mode 100644 index 0000000..3ab38b4 --- /dev/null +++ b/charts/processor/templates/processor-auth-secret.yaml @@ -0,0 +1,14 @@ +{{- if .Values.pspdfkit.auth.api.createSecret }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "processor.fullname" . }}-auth + labels: + {{- include "processor.labels" . | nindent 4 }} +data: + API_AUTH_TOKEN: {{ default (randAlphaNum 64) .Values.pspdfkit.auth.api.apiToken | b64enc | quote }} +{{- if .Values.pspdfkit.auth.api.jwt.enabled }} + JWT_PUBLIC_KEY: {{ default "none" .Values.pspdfkit.auth.api.jwt.publicKey | b64enc | quote }} + JWT_ALGORITHM: {{ default "none" .Values.pspdfkit.auth.api.jwt.algorithm | b64enc | quote }} +{{- end }} +{{- end }} diff --git a/charts/processor/templates/processor-config.yaml b/charts/processor/templates/processor-config.yaml new file mode 100644 index 0000000..292fef4 --- /dev/null +++ b/charts/processor/templates/processor-config.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "processor.fullname" . }}-config + labels: + {{- include "processor.labels" . | nindent 4 }} +data: + PORT: {{ .Values.service.port }} + LOG_LEVEL: {{ default "info" .Values.pspdfkit.log.level | quote }} + PDF_GENERATION_TIMEOUT: "120000" + PROCESSOR_REQUEST_TIMEOUT: "120000" + REMOTE_URL_FETCH_TIMEOUT: "20000" + PSPDFKIT_WORKER_POOL_SIZE: "2" +# Can be used for hash updating + VERSION: {{ include "processor.chart" . | quote }} diff --git a/charts/processor/templates/processor-license-secret.yaml b/charts/processor/templates/processor-license-secret.yaml new file mode 100644 index 0000000..0efba85 --- /dev/null +++ b/charts/processor/templates/processor-license-secret.yaml @@ -0,0 +1,10 @@ +{{- if not .Values.pspdfkit.license.externalSecret.name }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "processor.fullname" . }}-license + labels: + {{- include "processor.labels" . | nindent 4 }} +data: + LICENSE_KEY: {{ default "none" .Values.pspdfkit.license.licenseKey | b64enc | quote }} +{{- end }} diff --git a/charts/processor/templates/service.yaml b/charts/processor/templates/service.yaml new file mode 100644 index 0000000..55fdfeb --- /dev/null +++ b/charts/processor/templates/service.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "processor.fullname" . }} + labels: + {{- include "processor.labels" . | nindent 4 }} +spec: + type: {{ .Values.service.type }} + ports: + - port: {{ .Values.service.port }} + targetPort: api + protocol: TCP + name: api + selector: + {{- include "processor.selectorLabels" . | nindent 4 }} diff --git a/charts/processor/templates/serviceaccount.yaml b/charts/processor/templates/serviceaccount.yaml new file mode 100644 index 0000000..075a8f4 --- /dev/null +++ b/charts/processor/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +{{- if .Values.serviceAccount.create -}} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "processor.serviceAccountName" . }} + labels: + {{- include "processor.labels" . | nindent 4 }} + {{- with .Values.serviceAccount.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +{{- end }} diff --git a/charts/processor/templates/tests/test-connection.yaml b/charts/processor/templates/tests/test-connection.yaml new file mode 100644 index 0000000..1163128 --- /dev/null +++ b/charts/processor/templates/tests/test-connection.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Pod +metadata: + name: "{{ include "processor.fullname" . }}-test-connection" + labels: + {{- include "processor.labels" . | nindent 4 }} + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: busybox + command: ['wget'] + args: ['{{ include "processor.fullname" . }}:{{ .Values.service.port }}'] + restartPolicy: Never diff --git a/charts/processor/values.yaml b/charts/processor/values.yaml new file mode 100644 index 0000000..1c51e9b --- /dev/null +++ b/charts/processor/values.yaml @@ -0,0 +1,133 @@ +# +# https://pspdfkit.com/guides/processor/getting-started/configuration/ +# +pspdfkit: + license: + licenseKey: none + externalSecret: + # name: secretName + key: PROCESSOR_LICENSE_KEY + auth: + api: + createSecret: false + # externalSecretName: secret-name + # API_AUTH_TOKEN can be used isntead of JWT + # apiToken: secret + jwt: + enabled: false + publicKey: kwa + # Supported algorithms: RS256, RS512, ES256, ES512. See RFC 7518 for details about specific algorithms. + algorithm: RS256 + log: + level: info + +image: + repository: pspdfkit/processor + pullPolicy: IfNotPresent + # use `AppVersion` by default + # tag: "2023.2.0" + +imagePullSecrets: [] +nameOverride: "" +fullnameOverride: "" + +serviceAccount: + create: true + annotations: {} + name: "" + +podAnnotations: {} + +podSecurityContext: {} + # fsGroup: 2000 + +securityContext: {} + # capabilities: + # drop: + # - ALL + # readOnlyRootFilesystem: true + # runAsNonRoot: true + # runAsUser: 1000 + +service: + type: ClusterIP + port: 80 + +ingress: + enabled: false + className: "" + annotations: {} + # kubernetes.io/ingress.class: nginx + # kubernetes.io/tls-acme: "true" + hosts: [] + # - host: chart-example.local + # paths: + # - path: / + # pathType: ImplementationSpecific + tls: [] + # - secretName: chart-example-tls + # hosts: + # - chart-example.local + +startupProbe: + httpGet: + path: /healthcheck + port: api + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 5 + timeoutSeconds: 1 + successThreshold: 1 + failureThreshold: 5 + +livenessProbe: + httpGet: + path: /healthcheck + port: api + scheme: HTTP + initialDelaySeconds: 0 + periodSeconds: 30 + timeoutSeconds: 1 + successThreshold: 1 + failureThreshold: 3 + +readinessProbe: + httpGet: + path: /healthcheck + port: api + scheme: HTTP + initialDelaySeconds: 0 + periodSeconds: 5 + timeoutSeconds: 1 + successThreshold: 1 + failureThreshold: 3 + +resources: {} + +replicaCount: 1 + +updateStrategy: + type: RollingUpdate + rollingUpdate: {} + +extraEnvs: [] + +extraVolumeMounts: [] +extraVolumes: [] + +sidecars: [] + +initContainers: [] + +autoscaling: + enabled: false + minReplicas: 1 + maxReplicas: 100 + targetCPUUtilizationPercentage: 80 + # targetMemoryUtilizationPercentage: 80 + +nodeSelector: {} + +tolerations: [] + +affinity: {} diff --git a/charts/server/.helmignore b/charts/server/.helmignore new file mode 100644 index 0000000..0e8a0eb --- /dev/null +++ b/charts/server/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/charts/server/Chart.lock b/charts/server/Chart.lock new file mode 100644 index 0000000..1b02943 --- /dev/null +++ b/charts/server/Chart.lock @@ -0,0 +1,9 @@ +dependencies: +- name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 +- name: minio + repository: https://charts.min.io/ + version: 5.0.13 +digest: sha256:ac1a5739aa5c390c7b9841ec5144f102b14051617bbae2e07e1c327303fd80d3 +generated: "2023-10-05T22:04:13.674845+02:00" diff --git a/charts/server/Chart.yaml b/charts/server/Chart.yaml new file mode 100644 index 0000000..5c0112e --- /dev/null +++ b/charts/server/Chart.yaml @@ -0,0 +1,16 @@ +apiVersion: v2 +name: server +description: PSPDFKit Server +type: application +version: 0.3.14 +appVersion: "2023.4.6" + +dependencies: + - name: postgresql + version: 12.9.0 + repository: https://charts.bitnami.com/bitnami + condition: postgresql.enabled + - name: minio + version: 5.0.13 + repository: https://charts.min.io/ + condition: minio.enabled diff --git a/charts/server/charts/minio-5.0.13.tgz b/charts/server/charts/minio-5.0.13.tgz new file mode 100644 index 0000000..41ae117 Binary files /dev/null and b/charts/server/charts/minio-5.0.13.tgz differ diff --git a/charts/server/charts/postgresql-12.9.0.tgz b/charts/server/charts/postgresql-12.9.0.tgz new file mode 100644 index 0000000..d28b6f4 Binary files /dev/null and b/charts/server/charts/postgresql-12.9.0.tgz differ diff --git a/charts/server/templates/NOTES.txt b/charts/server/templates/NOTES.txt new file mode 100644 index 0000000..2ce4f84 --- /dev/null +++ b/charts/server/templates/NOTES.txt @@ -0,0 +1,22 @@ +1. Get the application URL by running these commands: +{{- if .Values.ingress.enabled }} +{{- range $host := .Values.ingress.hosts }} + {{- range .paths }} + http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }} + {{- end }} +{{- end }} +{{- else if contains "NodePort" .Values.service.type }} + export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "server.fullname" . }}) + export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}") + echo http://$NODE_IP:$NODE_PORT +{{- else if contains "LoadBalancer" .Values.service.type }} + NOTE: It may take a few minutes for the LoadBalancer IP to be available. + You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "server.fullname" . }}' + export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "server.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}") + echo http://$SERVICE_IP:{{ .Values.service.port }} +{{- else if contains "ClusterIP" .Values.service.type }} + export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "server.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}") + export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}") + echo "Visit http://127.0.0.1:8080 to use your application" + kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT +{{- end }} diff --git a/charts/server/templates/_helpers.tpl b/charts/server/templates/_helpers.tpl new file mode 100644 index 0000000..c217dfd --- /dev/null +++ b/charts/server/templates/_helpers.tpl @@ -0,0 +1,152 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "server.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "server.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "server.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "server.labels" -}} +helm.sh/chart: {{ include "server.chart" . }} +{{ include "server.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "server.selectorLabels" -}} +app.kubernetes.io/name: {{ include "server.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "server.serviceAccountName" -}} +{{- if .Values.serviceAccount.create }} +{{- default (include "server.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} + +{{/* +License secret name +*/}} +{{- define "server.license.secret.name" -}} + {{- if not .Values.pspdfkit.license.externalSecret.name -}} + {{- printf "%s-license" (include "server.fullname" .) -}} + {{- else -}} + {{- .Values.pspdfkit.license.externalSecret.name -}} + {{- end -}} +{{- end -}} + +{{- define "server.license.secret.key" -}} + {{- if not .Values.pspdfkit.license.externalSecret.name -}} + ACTIVATION_KEY + {{- else -}} + {{- .Values.pspdfkit.license.externalSecret.key -}} + {{- end -}} +{{- end -}} + +{{/* +API and dashboard secrets +*/}} +{{- define "server.api.secret.name" -}} + {{- if (eq .Values.pspdfkit.auth.api.createSecret true) -}} + {{- printf "%s-api-auth" (include "server.fullname" .) -}} + {{- else -}} + {{- .Values.pspdfkit.auth.api.externalSecretName -}} + {{- end -}} +{{- end -}} + +{{- define "server.dashboard.secret.name" -}} + {{- if (eq .Values.pspdfkit.auth.dashboard.createSecret true) -}} + {{- printf "%s-dashboard-auth" (include "server.fullname" .) -}} + {{- else -}} + {{- .Values.pspdfkit.auth.dashboard.externalSecretName -}} + {{- end -}} +{{- end -}} + +{{/* +Database secrets +*/}} +{{- define "server.storage.postgres.secret.name" -}} + {{- if (eq .Values.pspdfkit.storage.postgres.createSecret true) -}} + {{- printf "%s-db-postgres" (include "server.fullname" .) -}} + {{- else -}} + {{- .Values.pspdfkit.storage.postgres.externalSecretName -}} + {{- end -}} +{{- end -}} + +{{- define "server.storage.postgres.adminSecret.name" -}} + {{- if (eq .Values.pspdfkit.storage.postgres.createSecret true) -}} + {{- printf "%s-db-postgres-admin" (include "server.fullname" .) -}} + {{- else -}} + {{- .Values.pspdfkit.storage.postgres.externalAdminSecretName -}} + {{- end -}} +{{- end -}} + +{{/* +Object storage parameters +*/}} +{{- define "server.s3.enabled" -}} + {{- if .Values.pspdfkit.storage.assetStorageBackend -}} + {{- with .Values.pspdfkit.storage.assetStorageBackend -}} + {{- if eq . "s3" -}} + {{- true -}} + {{- else -}} + {{- false -}} + {{- end -}} + {{- end -}} + {{- else -}} + {{- false -}} + {{- end -}} +{{- end -}} + +{{- define "server.s3.createSecret" -}} + {{- if and (eq (include "server.s3.enabled" .) "true") (not .Values.pspdfkit.storage.s3.auth.externalSecretName) -}} + {{- true -}} + {{- else -}} + {{- false -}} + {{- end -}} +{{- end -}} + +{{- define "server.s3.secretName" -}} + {{- if (eq (include "server.s3.createSecret" .) "true") -}} + {{- printf "%s-s3" (include "server.fullname" .) -}} + {{- else -}} + {{- .Values.pspdfkit.storage.s3.auth.externalSecretName -}} + {{- end -}} +{{- end -}} diff --git a/charts/server/templates/deployment.yaml b/charts/server/templates/deployment.yaml new file mode 100644 index 0000000..fc588a3 --- /dev/null +++ b/charts/server/templates/deployment.yaml @@ -0,0 +1,131 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "server.fullname" . }} + labels: + {{- include "server.labels" . | nindent 4 }} +spec: + {{- if not .Values.autoscaling.enabled }} + replicas: {{ .Values.replicaCount }} + {{- end }} + {{- if .Values.updateStrategy }} + strategy: + {{ toYaml .Values.updateStrategy | nindent 4 }} + {{- end }} + selector: + matchLabels: + {{- include "server.selectorLabels" . | nindent 6 }} + template: + metadata: + annotations: + checksum/config: {{ include (print $.Template.BasePath "/server-config.yaml") . | sha256sum }} + checksum/secret: {{ include (print $.Template.BasePath "/secret.yaml") . | sha256sum }} + {{- if .Values.pspdfkit.auth.api.createSecret }} + checksum/auth-api: {{ include (print $.Template.BasePath "/server-api-auth-secret.yaml") . | sha256sum }} + {{- end }} + {{- if .Values.pspdfkit.auth.dashboard.createSecret }} + checksum/auth-dashboard: {{ include (print $.Template.BasePath "/server-dashboard-auth-secret.yaml") . | sha256sum }} + {{- end }} + {{- if not .Values.pspdfkit.license.externalSecret.name }} + checksum/license-secret: {{ include (print $.Template.BasePath "/server-license-secret.yaml") . | sha256sum }} + {{- end }} + {{- if .Values.pspdfkit.storage.postgres.createSecret }} + checksum/postgres-config: {{ include (print $.Template.BasePath "/server-db-postgres-secret.yaml") . | sha256sum }} + checksum/postgres-admin-config: {{ include (print $.Template.BasePath "/server-db-postgres-admin-secret.yaml") . | sha256sum }} + {{- end }} + {{- if (include "server.s3.createSecret" .) }} + checksum/s3-secret: {{ include (print $.Template.BasePath "/server-s3-secret.yaml") . | sha256sum }} + {{- end }} + {{- with .Values.podAnnotations }} + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "server.selectorLabels" . | nindent 8 }} + spec: + {{- with .Values.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "server.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.podSecurityContext | nindent 8 }} + {{- if .Values.initContainers }} + initContainers: + {{ toYaml .Values.initContainers | nindent 8 }} + {{- end }} + containers: + - name: {{ .Chart.Name }} + envFrom: + - secretRef: + name: {{ include "server.fullname" . }} + - secretRef: + name: {{ include "server.api.secret.name" . }} + - secretRef: + name: {{ include "server.dashboard.secret.name" . }} + - configMapRef: + name: {{ include "server.fullname" . }}-config + - secretRef: + name: {{ include "server.storage.postgres.secret.name" . }} + env: + - name: ACTIVATION_KEY + valueFrom: + secretKeyRef: + name: {{ include "server.license.secret.name" . }} + key: {{ include "server.license.secret.key" . }} + {{- if eq (include "server.s3.enabled" .) "true" }} + - name: ASSET_STORAGE_S3_ACCESS_KEY_ID + valueFrom: + secretKeyRef: + name: {{ include "server.s3.secretName" . }} + key: AWS_ACCESS_KEY_ID + - name: ASSET_STORAGE_S3_SECRET_ACCESS_KEY + valueFrom: + secretKeyRef: + name: {{ include "server.s3.secretName" . }} + key: AWS_SECRET_ACCESS_KEY + {{- end }} + {{- if .Values.extraEnvs }} + {{- toYaml .Values.extraEnvs | nindent 12 }} + {{- end }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} + image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + ports: + - name: api + containerPort: {{ .Values.service.port }} + protocol: TCP + {{- if .Values.startupProbe }} + startupProbe: {{ toYaml .Values.startupProbe | nindent 12 }} + {{- end }} + {{- if .Values.livenessProbe }} + livenessProbe: {{ toYaml .Values.livenessProbe | nindent 12 }} + {{- end }} + {{- if .Values.readinessProbe }} + readinessProbe: {{ toYaml .Values.readinessProbe | nindent 12 }} + {{- end }} + resources: + {{- toYaml .Values.resources | nindent 12 }} + {{- if .Values.extraVolumeMounts }} + volumeMounts: + {{- toYaml .Values.extraVolumeMounts | nindent 12 }} + {{- end }} + {{- if .Values.sidecars }} + {{ toYaml .Values.sidecars | nindent 8 }} + {{- end }} + {{- if .Values.extraVolumes }} + volumes: + {{ toYaml .Values.extraVolumes | nindent 8 }} + {{- end }} + {{- with .Values.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} diff --git a/charts/server/templates/hpa.yaml b/charts/server/templates/hpa.yaml new file mode 100644 index 0000000..5c230f6 --- /dev/null +++ b/charts/server/templates/hpa.yaml @@ -0,0 +1,28 @@ +{{- if .Values.autoscaling.enabled }} +apiVersion: autoscaling/v2beta1 +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "server.fullname" . }} + labels: + {{- include "server.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "server.fullname" . }} + minReplicas: {{ .Values.autoscaling.minReplicas }} + maxReplicas: {{ .Values.autoscaling.maxReplicas }} + metrics: + {{- if .Values.autoscaling.targetCPUUtilizationPercentage }} + - type: Resource + resource: + name: cpu + targetAverageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }} + {{- end }} + {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }} + - type: Resource + resource: + name: memory + targetAverageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }} + {{- end }} +{{- end }} diff --git a/charts/server/templates/ingress.yaml b/charts/server/templates/ingress.yaml new file mode 100644 index 0000000..980a2ae --- /dev/null +++ b/charts/server/templates/ingress.yaml @@ -0,0 +1,61 @@ +{{- if .Values.ingress.enabled -}} +{{- $fullName := include "server.fullname" . -}} +{{- $svcPort := .Values.service.port -}} +{{- if and .Values.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} + {{- if not (hasKey .Values.ingress.annotations "kubernetes.io/ingress.class") }} + {{- $_ := set .Values.ingress.annotations "kubernetes.io/ingress.class" .Values.ingress.className}} + {{- end }} +{{- end }} +{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1 +{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1beta1 +{{- else -}} +apiVersion: extensions/v1beta1 +{{- end }} +kind: Ingress +metadata: + name: {{ $fullName }} + labels: + {{- include "server.labels" . | nindent 4 }} + {{- with .Values.ingress.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }} + ingressClassName: {{ .Values.ingress.className }} + {{- end }} + {{- if .Values.ingress.tls }} + tls: + {{- range .Values.ingress.tls }} + - hosts: + {{- range .hosts }} + - {{ . | quote }} + {{- end }} + secretName: {{ .secretName }} + {{- end }} + {{- end }} + rules: + {{- range .Values.ingress.hosts }} + - host: {{ .host | quote }} + http: + paths: + {{- range .paths }} + - path: {{ .path }} + {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }} + pathType: {{ .pathType }} + {{- end }} + backend: + {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} + service: + name: {{ $fullName }} + port: + number: {{ $svcPort }} + {{- else }} + serviceName: {{ $fullName }} + servicePort: {{ $svcPort }} + {{- end }} + {{- end }} + {{- end }} +{{- end }} diff --git a/charts/server/templates/secret.yaml b/charts/server/templates/secret.yaml new file mode 100644 index 0000000..ee53604 --- /dev/null +++ b/charts/server/templates/secret.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "server.fullname" . }} + labels: + {{- include "server.labels" . | nindent 4 }} +data: + {{- $secretObj := (lookup "v1" "Secret" .Release.Namespace ( include "server.fullname" . ) ) | default dict }} + {{- $secretData := (get $secretObj "data") | default dict }} + {{- $secretKeyBase := (get $secretData "SECRET_KEY_BASE") | default ( default (randAlphaNum 256) .Values.pspdfkit.secretKeyBase | b64enc) }} + SECRET_KEY_BASE: {{ $secretKeyBase | quote }} diff --git a/charts/server/templates/server-api-auth-secret.yaml b/charts/server/templates/server-api-auth-secret.yaml new file mode 100644 index 0000000..7265275 --- /dev/null +++ b/charts/server/templates/server-api-auth-secret.yaml @@ -0,0 +1,14 @@ +{{- if .Values.pspdfkit.auth.api.createSecret }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "server.fullname" . }}-api-auth + labels: + {{- include "server.labels" . | nindent 4 }} +data: + API_AUTH_TOKEN: {{ default (randAlphaNum 64) .Values.pspdfkit.auth.api.apiToken | b64enc | quote }} +{{- if .Values.pspdfkit.auth.api.jwt.enabled }} + JWT_PUBLIC_KEY: {{ default "none" .Values.pspdfkit.auth.api.jwt.publicKey | b64enc | quote }} + JWT_ALGORITHM: {{ default "none" .Values.pspdfkit.auth.api.jwt.algorithm | b64enc | quote }} +{{- end }} +{{- end }} diff --git a/charts/server/templates/server-config.yaml b/charts/server/templates/server-config.yaml new file mode 100644 index 0000000..bea6123 --- /dev/null +++ b/charts/server/templates/server-config.yaml @@ -0,0 +1,51 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "server.fullname" . }}-config + labels: + {{- include "server.labels" . | nindent 4 }} +data: + PORT: {{ .Values.service.port }} + LOG_LEVEL: {{ default "info" .Values.pspdfkit.log.level | quote }} + PDF_GENERATION_TIMEOUT: "120000" + SERVER_REQUEST_TIMEOUT: "120000" + REMOTE_URL_FETCH_TIMEOUT: "20000" + READ_ANNOTATION_BATCH_TIMEOUT: "20000" + PSPDFKIT_WORKER_POOL_SIZE: "2" + USE_REDIS_CACHE: "false" +{{- if .Values.pspdfkit.storage.enableMigrationJobs }} + ENABLE_DATABASE_MIGRATIONS: "false" + EXIT_AFTER_DATABASE_MIGRATIONS: "false" +{{- else }} + ENABLE_DATABASE_MIGRATIONS: "true" + EXIT_AFTER_DATABASE_MIGRATIONS: "false" +{{- end }} +{{- with .Values.pspdfkit.storage }} + ASSET_STORAGE_BACKEND: {{ default "built-in" .assetStorageBackend | quote }} +{{- if eq .assetStorageBackend "s3" }} + ASSET_STORAGE_S3_BUCKET: {{ default "none" .s3.bucket | quote }} + ASSET_STORAGE_S3_REGION: {{ default "none" .s3.region | quote }} +{{- if .s3.host }} + ASSET_STORAGE_S3_HOST: {{ .s3.host | quote }} + ASSET_STORAGE_S3_PORT: {{ default "443" .s3.port | quote }} + ASSET_STORAGE_S3_SCHEME: {{ default "https://" .s3.scheme | quote }} +{{- end }} +{{- end }} + ENABLE_ASSET_STORAGE_FALLBACK: {{ default "false" .enableAssetStorageFallback | quote }} +{{- end }} +{{- with .Values.pspdfkit.signingService }} +{{- if .enabled }} + SIGNING_SERVICE_URL: {{ default "none" .url | quote }} + SIGNING_SERVICE_TIMEOUT: {{ default "10000" .timeoutMs | quote }} + DEFAULT_SIGNER_NAME: {{ default "none" .defaultSignerName | quote }} + DEFAULT_SIGNATURE_REASON: {{ default "none" .defaultSignatureReason | quote }} + DEFAULT_SIGNATURE_LOCATION: {{ default "none" .defaultSignatureLocation | quote }} + DIGITAL_SIGNATURE_HASH_ALGORITHM: {{ default "sha512" .digitalSignatureHashAlgorithm | quote }} + DIGITAL_SIGNATURE_CERTIFICATE_CHECK_TIME: {{ default "current_time" .digitalSignatureCertificateCheckTime | quote }} +{{- end }} +{{- end }} +{{- with .Values.pspdfkit.trustedProxies }} + TRUSTED_PROXIES: {{ . | quote }} +{{- end }} +# Can be used for hash updating + VERSION: {{ include "server.chart" . | quote }} diff --git a/charts/server/templates/server-dashboard-auth-secret.yaml b/charts/server/templates/server-dashboard-auth-secret.yaml new file mode 100644 index 0000000..e30944b --- /dev/null +++ b/charts/server/templates/server-dashboard-auth-secret.yaml @@ -0,0 +1,11 @@ +{{- if .Values.pspdfkit.auth.dashboard.createSecret }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "server.fullname" . }}-dashboard-auth + labels: + {{- include "server.labels" . | nindent 4 }} +data: + DASHBOARD_USERNAME: {{ default "none" .Values.pspdfkit.auth.dashboard.username | b64enc | quote }} + DASHBOARD_PASSWORD: {{ default (randAlphaNum 64) .Values.pspdfkit.auth.dashboard.password | b64enc | quote }} +{{- end }} diff --git a/charts/server/templates/server-db-migration.Job.yaml b/charts/server/templates/server-db-migration.Job.yaml new file mode 100644 index 0000000..9e74bec --- /dev/null +++ b/charts/server/templates/server-db-migration.Job.yaml @@ -0,0 +1,119 @@ +{{- if .Values.pspdfkit.storage.enableMigrationJobs }} +apiVersion: batch/v1 +kind: Job +metadata: + name: {{ include "server.fullname" . }}-db-migration + labels: + app.kubernetes.io/managed-by: {{ .Release.Service | quote }} + app.kubernetes.io/instance: {{ .Release.Name | quote }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" + annotations: + "helm.sh/hook": post-install,post-upgrade + "helm.sh/hook-weight": "-5" + "helm.sh/hook-delete-policy": hook-succeeded +spec: +# ttlSecondsAfterFinished: 3600 + template: + metadata: + name: {{ include "server.fullname" . }}-db-migration + annotations: + {{- with .Values.podAnnotations }} + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "server.selectorLabels" . | nindent 8 }} + app.kubernetes.io/managed-by: {{ .Release.Service | quote }} + app.kubernetes.io/instance: {{ .Release.Name | quote }} + helm.sh/chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" + spec: + restartPolicy: Never + {{- with .Values.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "server.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.podSecurityContext | nindent 8 }} + {{- if .Values.initContainers }} + initContainers: + {{ toYaml .Values.initContainers | nindent 8 }} + {{- end }} + containers: + - name: {{ .Chart.Name }} + envFrom: + - secretRef: + name: {{ include "server.fullname" . }} + - secretRef: + name: {{ include "server.api.secret.name" . }} + - secretRef: + name: {{ include "server.dashboard.secret.name" . }} + - configMapRef: + name: {{ include "server.fullname" . }}-config + - secretRef: + name: {{ include "server.storage.postgres.secret.name" . }} + env: + - name: ACTIVATION_KEY + valueFrom: + secretKeyRef: + name: {{ include "server.license.secret.name" . }} + key: {{ include "server.license.secret.key" . }} + - name: ENABLE_DATABASE_MIGRATIONS + value: 'true' + - name: EXIT_AFTER_DATABASE_MIGRATIONS + value: 'true' + - name: DATABASE_ADMIN_USER + valueFrom: + secretKeyRef: + name: {{ include "server.storage.postgres.adminSecret.name" . }} + key: PG_ADMIN_USER + - name: DATABASE_ADMIN_USER_PASSWORD + valueFrom: + secretKeyRef: + name: {{ include "server.storage.postgres.adminSecret.name" . }} + key: PG_ADMIN_PASSWORD + {{- if eq (include "server.s3.enabled" .) "true" }} + - name: ASSET_STORAGE_S3_ACCESS_KEY_ID + valueFrom: + secretKeyRef: + name: {{ include "server.s3.secretName" . }} + key: AWS_ACCESS_KEY_ID + - name: ASSET_STORAGE_S3_SECRET_ACCESS_KEY + valueFrom: + secretKeyRef: + name: {{ include "server.s3.secretName" . }} + key: AWS_SECRET_ACCESS_KEY + {{- end }} + {{- if .Values.extraEnvs }} + {{- toYaml .Values.extraEnvs | nindent 12 }} + {{- end }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} + image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + resources: + {{- toYaml .Values.resources | nindent 12 }} + {{- if .Values.extraVolumeMounts }} + volumeMounts: + {{- toYaml .Values.extraVolumeMounts | nindent 12 }} + {{- end }} + {{- if .Values.sidecars }} + {{ toYaml .Values.sidecars | nindent 8 }} + {{- end }} + {{- if .Values.extraVolumes }} + volumes: + {{ toYaml .Values.extraVolumes | nindent 8 }} + {{- end }} + {{- with .Values.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} +{{- end }} diff --git a/charts/server/templates/server-db-postgres-admin-secret.yaml b/charts/server/templates/server-db-postgres-admin-secret.yaml new file mode 100644 index 0000000..4a36447 --- /dev/null +++ b/charts/server/templates/server-db-postgres-admin-secret.yaml @@ -0,0 +1,12 @@ +{{- if .Values.pspdfkit.storage.postgres.createSecret }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "server.fullname" . }}-db-postgres-admin + labels: + {{- include "server.labels" . | nindent 4 }} +data: +# Administrative access for migrations + PG_ADMIN_USER: {{ "postgres" | b64enc | quote }} + PG_ADMIN_PASSWORD: {{ default "none" .Values.postgresql.auth.postgresPassword | b64enc | quote }} +{{- end }} diff --git a/charts/server/templates/server-db-postgres-secret.yaml b/charts/server/templates/server-db-postgres-secret.yaml new file mode 100644 index 0000000..f226e74 --- /dev/null +++ b/charts/server/templates/server-db-postgres-secret.yaml @@ -0,0 +1,21 @@ +{{- if .Values.pspdfkit.storage.postgres.createSecret }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "server.fullname" . }}-db-postgres + labels: + {{- include "server.labels" . | nindent 4 }} +data: +# Normal use + PGUSER: {{ default "none" .Values.postgresql.auth.username | b64enc | quote }} + PGPASSWORD: {{ default "none" .Values.postgresql.auth.password | b64enc | quote }} +# Server parameters + PGHOST: {{ printf "%s-%s" ( include "server.fullname" . ) "postgresql" | b64enc | quote }} + PGPORT: {{ default "5432" .Values.postgresql.primary.service.ports.postgresql | toString | b64enc | quote }} +{{- if .Values.postgresql.tls.enabled }} + PGSSL: {{ "true" | b64enc | quote }} +{{- else }} + PGSSL: {{ "false" | b64enc | quote }} +{{- end }} + PGDATABASE: {{ default "none" .Values.postgresql.auth.database | b64enc | quote }} +{{- end }} diff --git a/charts/server/templates/server-license-secret.yaml b/charts/server/templates/server-license-secret.yaml new file mode 100644 index 0000000..054509b --- /dev/null +++ b/charts/server/templates/server-license-secret.yaml @@ -0,0 +1,10 @@ +{{- if not .Values.pspdfkit.license.externalSecret.name }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "server.fullname" . }}-license + labels: + {{- include "server.labels" . | nindent 4 }} +data: + ACTIVATION_KEY: {{ default "none" .Values.pspdfkit.license.activationKey | b64enc | quote }} +{{- end }} diff --git a/charts/server/templates/server-s3-secret.yaml b/charts/server/templates/server-s3-secret.yaml new file mode 100644 index 0000000..26b7c00 --- /dev/null +++ b/charts/server/templates/server-s3-secret.yaml @@ -0,0 +1,11 @@ +{{- if (eq (include "server.s3.createSecret" .) "true") }} +apiVersion: v1 +kind: Secret +metadata: + name: {{ include "server.s3.secretName" . }} + labels: + {{- include "server.labels" . | nindent 4 }} +data: + AWS_ACCESS_KEY_ID: {{ default "none" .Values.pspdfkit.storage.s3.auth.accessKeyId | b64enc | quote }} + AWS_SECRET_ACCESS_KEY: {{ default "none" .Values.pspdfkit.storage.s3.auth.secretAccessKey | b64enc | quote }} +{{- end }} diff --git a/charts/server/templates/service.yaml b/charts/server/templates/service.yaml new file mode 100644 index 0000000..bc3f782 --- /dev/null +++ b/charts/server/templates/service.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "server.fullname" . }} + labels: + {{- include "server.labels" . | nindent 4 }} +spec: + type: {{ .Values.service.type }} + ports: + - port: {{ .Values.service.port }} + targetPort: api + protocol: TCP + name: api + selector: + {{- include "server.selectorLabels" . | nindent 4 }} diff --git a/charts/server/templates/serviceaccount.yaml b/charts/server/templates/serviceaccount.yaml new file mode 100644 index 0000000..8be09a5 --- /dev/null +++ b/charts/server/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +{{- if .Values.serviceAccount.create -}} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "server.serviceAccountName" . }} + labels: + {{- include "server.labels" . | nindent 4 }} + {{- with .Values.serviceAccount.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +{{- end }} diff --git a/charts/server/templates/tests/test-connection.yaml b/charts/server/templates/tests/test-connection.yaml new file mode 100644 index 0000000..c6c878d --- /dev/null +++ b/charts/server/templates/tests/test-connection.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Pod +metadata: + name: "{{ include "server.fullname" . }}-test-connection" + labels: + {{- include "server.labels" . | nindent 4 }} + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: busybox + command: ['wget'] + args: ['{{ include "server.fullname" . }}:{{ .Values.service.port }}'] + restartPolicy: Never diff --git a/charts/server/values.yaml b/charts/server/values.yaml new file mode 100644 index 0000000..3ebfdf4 --- /dev/null +++ b/charts/server/values.yaml @@ -0,0 +1,227 @@ +# +# https://pspdfkit.com/guides/web/server/configuration/overview/ +# +pspdfkit: + license: + activationKey: none + externalSecret: + # name: secretName + key: SERVER_ACTIVATION_KEY + auth: + api: + createSecret: false + # externalSecretName: secret-name + # API_AUTH_TOKEN can be used isntead of JWT + # apiToken: secret + jwt: + enabled: false + publicKey: kwa + # Supported algorithms: RS256, RS512, ES256, ES512. See RFC 7518 for details about specific algorithms. + algorithm: RS256 + dashboard: + createSecret: true + username: admin + # password: admin + # externalSecretName: secret-name + + # A string used as the base key for deriving secret keys for the purposes of authentication. + # Choose a sufficiently long random string for this option. + # To generate a random string, use: openssl rand -hex 256. + # secretKeyBase: + + log: + level: info + + timeout: 1 + + # trustedProxies: default + signingService: + enabled: false + url: https://signing-thing.local/sign + timeoutMs: 5000 + defaultSignerName: "John Doe" + defaultSignatureReason: "approved" + defaultSignatureLocation: "Head Quarters" + digitalSignatureHashAlgorithm: sha512 + digitalSignatureCertificateCheckTime: current_time + + storage: + enableMigrationJobs: true + databaseEngine: postgresql + assetStorageBackend: built-in + enableAssetStorageFallback: false + postgres: + # External secrets with: + # externalSecretName: PGUSER, PGPASSWORD, PGDATABASE, PGHOST, PGPORT, PGSSL + # externalAdminSecretName: PG_ADMIN_USER and PG_ADMIN_PASSWORD + createSecret: false + externalSecretName: "" + externalAdminSecretName: "" + s3: + auth: + accessKeyId: "pspdfkitAccessKey" + secretAccessKey: "pspdfkitSecretKey" + # External secret with traditional `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` + externalSecretName: "" + bucket: "server-assets" + region: "us-east-1" + # host: "os.local" + port: 443 + scheme: "https://" + +image: + repository: pspdfkit/pspdfkit + pullPolicy: IfNotPresent + # use `AppVersion` by default + # tag: "2023.1.1" + +imagePullSecrets: [] +nameOverride: "" +fullnameOverride: "" + +serviceAccount: + create: true + annotations: {} + name: "" + +podAnnotations: {} + +podSecurityContext: {} + # fsGroup: 2000 + +securityContext: {} + # capabilities: + # drop: + # - ALL + # readOnlyRootFilesystem: true + # runAsNonRoot: true + # runAsUser: 1000 + +service: + type: ClusterIP + port: 80 + +ingress: + enabled: false + className: "" + annotations: {} + # kubernetes.io/ingress.class: nginx + # kubernetes.io/tls-acme: "true" + hosts: [] + # - host: chart-example.local + # paths: + # - path: / + # pathType: ImplementationSpecific + tls: [] + # - secretName: chart-example-tls + # hosts: + # - chart-example.local + +startupProbe: + httpGet: + path: /healthcheck + port: api + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 5 + timeoutSeconds: 1 + successThreshold: 1 + failureThreshold: 5 + +livenessProbe: + httpGet: + path: /healthcheck + port: api + scheme: HTTP + initialDelaySeconds: 0 + periodSeconds: 30 + timeoutSeconds: 1 + successThreshold: 1 + failureThreshold: 3 + +readinessProbe: + httpGet: + path: /healthcheck + port: api + scheme: HTTP + initialDelaySeconds: 0 + periodSeconds: 5 + timeoutSeconds: 1 + successThreshold: 1 + failureThreshold: 3 + +resources: {} + +replicaCount: 1 + +updateStrategy: + type: RollingUpdate + rollingUpdate: {} + +extraEnvs: [] + +extraVolumes: [] +extraVolumeMounts: [] + +sidecars: [] + +initContainers: [] + +autoscaling: + enabled: false + minReplicas: 1 + maxReplicas: 100 + targetCPUUtilizationPercentage: 80 + # targetMemoryUtilizationPercentage: 80 + +nodeSelector: {} + +tolerations: [] + +affinity: {} + +postgresql: + enabled: false + architecture: standalone + primary: + persistence: + enabled: false + auth: + enablePostgresUser: true + postgresPassword: pspdfkit + username: pspdfkit + password: pspdfkit + database: pspdfkit + +minio: + enabled: false + mode: standalone + replicas: 1 +# serviceAccount: +# create: true +# name: "{{ $.Release.Name }}-minio-sa" + persistence: + enabled: false + rootUser: admin + rootPassword: adminPassword + policies: + - name: pspdfkitServer + statements: + - resources: + - "arn:aws:s3:::server*/*" + actions: + - "s3:ListBucket" + - "s3:GetObject" + - "s3:PutObject" + - "s3:DeleteObject" +# - "s3:GetObjectAcl" +# - "s3:GetObjectAcl" + users: + - accessKey: pspdfkitAccessKey + secretKey: pspdfkitSecretKey + policy: pspdfkitServer + buckets: + - name: server-assets + purge: false + versioning: false + policy: none diff --git a/repository/index.yaml b/repository/index.yaml new file mode 100644 index 0000000..57508db --- /dev/null +++ b/repository/index.yaml @@ -0,0 +1,360 @@ +apiVersion: v1 +entries: + processor: + - apiVersion: v2 + appVersion: 2023.10.0 + created: "2023-11-05T03:37:44.594671+01:00" + description: PSPDFKit Processor + digest: c1ddbc1b04197de2a6a64e292657d00c61214307abaa60cc5bebf8941fcc9eed + name: processor + type: application + urls: + - https://pspdfkit.github.io/helm-charts/processor-0.1.24.tgz + version: 0.1.24 + - apiVersion: v2 + appVersion: 2023.10.0 + created: "2023-11-05T03:37:44.594365+01:00" + description: PSPDFKit Processor + digest: 144e9754e74022613c884e1e3a2291eb66635a0072455d7df2857545025c78c6 + name: processor + type: application + urls: + - https://pspdfkit.github.io/helm-charts/processor-0.1.23.tgz + version: 0.1.23 + - apiVersion: v2 + appVersion: 2023.10.0 + created: "2023-11-05T03:37:44.593927+01:00" + description: PSPDFKit Processor + digest: 9dba34f03db75d88d6225a1232bc1cedea7566090e34b55ec0eba5ab5b42139e + name: processor + type: application + urls: + - https://pspdfkit.github.io/helm-charts/processor-0.1.22.tgz + version: 0.1.22 + - apiVersion: v2 + appVersion: 2023.10.0 + created: "2023-11-05T03:37:44.593505+01:00" + description: PSPDFKit Processor + digest: 8e19a0f6a37bab2439d58a351d2e0b7c28dcb980372b8f8273c11568389fa041 + name: processor + type: application + urls: + - https://pspdfkit.github.io/helm-charts/processor-0.1.21.tgz + version: 0.1.21 + - apiVersion: v2 + appVersion: 2023.9.1 + created: "2023-11-05T03:37:44.593049+01:00" + description: PSPDFKit Processor + digest: df9c8cd7f7df59349c6b3948adf4efd0879979f232a00ae262cee693e975dff5 + name: processor + type: application + urls: + - https://pspdfkit.github.io/helm-charts/processor-0.1.20.tgz + version: 0.1.20 + - apiVersion: v2 + appVersion: 2023.8.0 + created: "2023-11-05T03:37:44.592369+01:00" + description: PSPDFKit Processor + digest: e691bdac653c6e9566cdcca8fd993f95bc9f3e443eb527aa13e2f061069e2c32 + name: processor + type: application + urls: + - https://pspdfkit.github.io/helm-charts/processor-0.1.19.tgz + version: 0.1.19 + - apiVersion: v2 + appVersion: 2023.6.0 + created: "2023-11-05T03:37:44.59198+01:00" + description: PSPDFKit Processor + digest: 310d7647912578d0accfe743f1546455671cfd6dea7a028d50e8c1d774c4acb6 + name: processor + type: application + urls: + - https://pspdfkit.github.io/helm-charts/processor-0.1.15.tgz + version: 0.1.15 + server: + - apiVersion: v2 + appVersion: 2023.4.6 + created: "2023-11-05T03:37:44.636609+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: cc57f6ac363f20b1adfe73dc7c494005e5cae24ee0a6fa9d4a69f2f3188ab106 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.14.tgz + version: 0.3.14 + - apiVersion: v2 + appVersion: 2023.4.6 + created: "2023-11-05T03:37:44.632439+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: 0d890ee63c67af461177d20a72e116b6809cb3ae7e3363e2f4c913297c09fe71 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.13.tgz + version: 0.3.13 + - apiVersion: v2 + appVersion: 2023.4.6 + created: "2023-11-05T03:37:44.627956+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: a507970c83039eb1d9b79865780ee49d947d06818f327e7952eb9fdb0aa19c79 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.12.tgz + version: 0.3.12 + - apiVersion: v2 + appVersion: 2023.4.6 + created: "2023-11-05T03:37:44.623792+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: ffd4e08dfbce702d87a58e8a4e04fc81f90946d748a3a3065744fd32a216b5d2 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.11.tgz + version: 0.3.11 + - apiVersion: v2 + appVersion: 2023.4.5 + created: "2023-11-05T03:37:44.619804+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: a8bc7b07f29c7659b77236849229c4975a6044a8ecda3c950d1b344a26ab2ffd + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.10.tgz + version: 0.3.10 + - apiVersion: v2 + appVersion: 2023.4.5 + created: "2023-11-05T03:37:44.657217+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: 263a4717713dc2a2b5c73135c91d19f62a6fadac03d38536461ac576a5838db2 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.9.tgz + version: 0.3.9 + - apiVersion: v2 + appVersion: 2023.4.4 + created: "2023-11-05T03:37:44.653054+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: 3fb5dcb3b3799a20fbfcf8495d8ce269f4a8a537d4c7b4899d65aae11d4b085b + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.8.tgz + version: 0.3.8 + - apiVersion: v2 + appVersion: 2023.4.1 + created: "2023-11-05T03:37:44.648638+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: d5ac7bae49a8801b545c4cf97d5381c23818505d3ffcb3f1b65496a4f4b37a19 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.7.tgz + version: 0.3.7 + - apiVersion: v2 + appVersion: 2023.4.0 + created: "2023-11-05T03:37:44.644861+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: cb11deca2182888a4c8acde1098c9b10d74291d189278e395e1048c37c19790b + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.6.tgz + version: 0.3.6 + - apiVersion: v2 + appVersion: 2023.4.0 + created: "2023-11-05T03:37:44.640449+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: b2467656e9073c3b861ff0f7963a33bf30489aa64ae3bddc0d7cec27740b5c76 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.5.tgz + version: 0.3.5 + - apiVersion: v2 + appVersion: 2023.4.0 + created: "2023-11-05T03:37:44.615497+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: 641cad2a54d1e30f1f585988516050aa8918f3f10cd17e63da21b70327991119 + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.1.tgz + version: 0.3.1 + - apiVersion: v2 + appVersion: 2023.4.0 + created: "2023-11-05T03:37:44.61139+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: 1244456d3fd9cbf3889dfb233311508c7b1d28ed0dea75470456b662483b94bf + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.3.0.tgz + version: 0.3.0 + - apiVersion: v2 + appVersion: 2023.4.0 + created: "2023-11-05T03:37:44.607452+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: 5e27f247213bdf33cec7766b556a2cc8a0054cadbb2864834a97c2e1156baefd + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.2.37.tgz + version: 0.2.37 + - apiVersion: v2 + appVersion: 2023.4.0 + created: "2023-11-05T03:37:44.603112+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.9.0 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.13 + description: PSPDFKit Server + digest: ac993690aa2605311caea5db34e2ca787d2e35a690d8288f06638bb7881216db + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.2.36.tgz + version: 0.2.36 + - apiVersion: v2 + appVersion: 2023.4.0 + created: "2023-11-05T03:37:44.598879+01:00" + dependencies: + - condition: postgresql.enabled + name: postgresql + repository: https://charts.bitnami.com/bitnami + version: 12.2.1 + - condition: minio.enabled + name: minio + repository: https://charts.min.io/ + version: 5.0.7 + description: PSPDFKit Server + digest: 8a549359836acdff041af95d05b60eeee4f64055014ea818380a85d556faaacd + name: server + type: application + urls: + - https://pspdfkit.github.io/helm-charts/server-0.2.32.tgz + version: 0.2.32 +generated: "2023-11-05T03:37:44.591498+01:00" diff --git a/repository/processor-0.1.15.tgz b/repository/processor-0.1.15.tgz new file mode 100644 index 0000000..39196bc Binary files /dev/null and b/repository/processor-0.1.15.tgz differ diff --git a/repository/processor-0.1.19.tgz b/repository/processor-0.1.19.tgz new file mode 100644 index 0000000..74168f5 Binary files /dev/null and b/repository/processor-0.1.19.tgz differ diff --git a/repository/processor-0.1.20.tgz b/repository/processor-0.1.20.tgz new file mode 100644 index 0000000..8f7f165 Binary files /dev/null and b/repository/processor-0.1.20.tgz differ diff --git a/repository/processor-0.1.21.tgz b/repository/processor-0.1.21.tgz new file mode 100644 index 0000000..4631c80 Binary files /dev/null and b/repository/processor-0.1.21.tgz differ diff --git a/repository/processor-0.1.22.tgz b/repository/processor-0.1.22.tgz new file mode 100644 index 0000000..a1195f5 Binary files /dev/null and b/repository/processor-0.1.22.tgz differ diff --git a/repository/processor-0.1.23.tgz b/repository/processor-0.1.23.tgz new file mode 100644 index 0000000..f01068a Binary files /dev/null and b/repository/processor-0.1.23.tgz differ diff --git a/repository/processor-0.1.24.tgz b/repository/processor-0.1.24.tgz new file mode 100644 index 0000000..1d4895b Binary files /dev/null and b/repository/processor-0.1.24.tgz differ diff --git a/repository/server-0.2.32.tgz b/repository/server-0.2.32.tgz new file mode 100644 index 0000000..412cb99 Binary files /dev/null and b/repository/server-0.2.32.tgz differ diff --git a/repository/server-0.2.36.tgz b/repository/server-0.2.36.tgz new file mode 100644 index 0000000..1afeba3 Binary files /dev/null and b/repository/server-0.2.36.tgz differ diff --git a/repository/server-0.2.37.tgz b/repository/server-0.2.37.tgz new file mode 100644 index 0000000..9a817c9 Binary files /dev/null and b/repository/server-0.2.37.tgz differ diff --git a/repository/server-0.3.0.tgz b/repository/server-0.3.0.tgz new file mode 100644 index 0000000..1f60d96 Binary files /dev/null and b/repository/server-0.3.0.tgz differ diff --git a/repository/server-0.3.1.tgz b/repository/server-0.3.1.tgz new file mode 100644 index 0000000..69b30da Binary files /dev/null and b/repository/server-0.3.1.tgz differ diff --git a/repository/server-0.3.10.tgz b/repository/server-0.3.10.tgz new file mode 100644 index 0000000..fd5e3be Binary files /dev/null and b/repository/server-0.3.10.tgz differ diff --git a/repository/server-0.3.11.tgz b/repository/server-0.3.11.tgz new file mode 100644 index 0000000..1587486 Binary files /dev/null and b/repository/server-0.3.11.tgz differ diff --git a/repository/server-0.3.12.tgz b/repository/server-0.3.12.tgz new file mode 100644 index 0000000..4677677 Binary files /dev/null and b/repository/server-0.3.12.tgz differ diff --git a/repository/server-0.3.13.tgz b/repository/server-0.3.13.tgz new file mode 100644 index 0000000..cf8848c Binary files /dev/null and b/repository/server-0.3.13.tgz differ diff --git a/repository/server-0.3.14.tgz b/repository/server-0.3.14.tgz new file mode 100644 index 0000000..b1cf546 Binary files /dev/null and b/repository/server-0.3.14.tgz differ diff --git a/repository/server-0.3.5.tgz b/repository/server-0.3.5.tgz new file mode 100644 index 0000000..ede241c Binary files /dev/null and b/repository/server-0.3.5.tgz differ diff --git a/repository/server-0.3.6.tgz b/repository/server-0.3.6.tgz new file mode 100644 index 0000000..c595438 Binary files /dev/null and b/repository/server-0.3.6.tgz differ diff --git a/repository/server-0.3.7.tgz b/repository/server-0.3.7.tgz new file mode 100644 index 0000000..81631e7 Binary files /dev/null and b/repository/server-0.3.7.tgz differ diff --git a/repository/server-0.3.8.tgz b/repository/server-0.3.8.tgz new file mode 100644 index 0000000..9e5e5d5 Binary files /dev/null and b/repository/server-0.3.8.tgz differ diff --git a/repository/server-0.3.9.tgz b/repository/server-0.3.9.tgz new file mode 100644 index 0000000..e46f2c7 Binary files /dev/null and b/repository/server-0.3.9.tgz differ