added packages & requirement files

.gitea/workflows/buildcharts.yaml

@@ -1,58 +0,0 @@
-name: Package and publish helm chart
-
-on:
-  push:
-
-jobs:
-  package-helm:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-        name: Check out code
-
-      - name: Set up Helm
-        uses: azure/setup-helm@v4.2.0
-        with:
-          version: v3.14.4
-
-      - name: Set up yq
-        uses: mikefarah/yq@master
-
-      - name: Check for changed charts
-        id: changed-files
-        uses: tj-actions/changed-files@v44
-        with:
-          dir_names: true
-          dir_names_max_depth: '2'
-          files: 'charts/**'
-
-      - name: Run helm lint on all changed charts
-        shell: bash
-        env:
-          ALL_CHANGED_CHARTS: ${{ steps.changed-files.outputs.all_changed_files }}
-        run: |
-          REPO_PATH=$(git rev-parse --show-toplevel)
-          for chart in ${ALL_CHANGED_CHARTS}; do
-            cd ${REPO_PATH}/${chart}
-            helm dependency build
-            helm lint .
-          done
-
-      - name: build helm package
-        shell: bash
-        if: gitea.ref == 'refs/heads/main'
-        env:
-          PACKAGE_TOKEN: ${{ secrets.PACKAGE_TOKEN }}
-          CHART_NAME: ${{ steps.chart_name.outputs.result }}
-          CHART_VERSION: ${{ steps.chart_version.outputs.result }}
-          ALL_CHANGED_CHARTS: ${{ steps.changed-files.outputs.all_changed_files }}
-        run: |
-          REPO_PATH=$(git rev-parse --show-toplevel)
-          for chart in ${ALL_CHANGED_CHARTS}; do
-            cd ${REPO_PATH}/${chart}
-            CHART_NAME=$(yq .name Chart.yaml)
-            CHART_VERSION=$(yq .version Chart.yaml)
-            echo "Packaging ${CHART_NAME}-${CHART_VERSION}"
-            helm package .
-            curl -H "Authorization: token $PACKAGE_TOKEN" -X POST --upload-file ${CHART_NAME}-${CHART_VERSION}.tgz https://git.rre.nu/api/packages/jonas/helm/api/charts
-          done

.gitignore

@@ -1,40 +0,0 @@
-# General files for the project
-pkg/*
-*.pyc
-bin/*
-.project
-/.bin
-/_test/secrets/*.json
-*.tgz
-Chart.lock
-
-# OSX leaves these everywhere on SMB shares
-._*
-
-# OSX trash
-.DS_Store
-
-# Files generated by JetBrains IDEs, e.g. IntelliJ IDEA
-.idea/
-*.iml
-
-# Vscode files
-.vscode
-
-# Emacs save files
-*~
-\#*\#
-.\#*
-
-# Vim-related files
-[._]*.s[a-w][a-z]
-[._]s[a-w][a-z]
-*.un~
-Session.vim
-.netrwhist
-
-# Chart dependencies
-**/charts/*.tgz
-
-.history
-

.pre-commit-config.yaml

@@ -8,5 +8,4 @@ repos:
   - id: end-of-file-fixer
     exclude: README.md$
   - id: check-yaml
-    exclude: all.yaml
   - id: check-added-large-files

Makefile

@@ -0,0 +1,3 @@
+pre-commit:
+	pip install pre-commit
+	pre-commit install

README.md

@@ -1 +0,0 @@
-# My helm-charts

charts/home-assistant/Chart.yaml

@@ -1,19 +0,0 @@
----
-apiVersion: v2
-name: home-assistant
-description: Open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts.
-type: application
-version: 1.0.0
-appVersion: 2024.11.1
-kubeVersion: ">=1.27.0"
-home: https://www.home-assistant.io/
-sources:
-  - https://git.rre.nu/jonas/helm-charts
-  - https://github.com/home-assistant/core
-maintainers:
-  - name: Jonas Forsberg
-    email: barregargamel@gmail.com
-dependencies:
-  - name: lib
-    repository: https://git.rre.nu/api/packages/jonas/helm
-    version: 1.0.4

charts/home-assistant/README.md

@@ -1,44 +0,0 @@
-
-Home-assistant
-===========
-
-Open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts.
-
-
-## Configuration
-
-The following table lists the configurable parameters of the Home-assistant chart and their default values.
-
-| Parameter                | Description             | Default        |
-| ------------------------ | ----------------------- | -------------- |
-| `image.repository` |  | `"ghcr.io/home-assistant/home-assistant"` |
-| `image.tag` |  | `null` |
-| `controller.enabled` | should the main workload be included or not | `true` |
-| `controller.type` | valid options are deployment, statefulset, job | `"statefulset"` |
-| `service.http.enabled` |  | `true` |
-| `service.http.ports.http.port` |  | `80` |
-| `service.http.ports.http.targetPort` |  | `8123` |
-| `ingress.enabled` |  | `false` |
-| `ingress.service` | what service should the ingress target | `"http"` |
-| `ingress.servicePort` |  | `80` |
-| `ingress.className` |  | `"nginx"` |
-| `ingress.hosts` |  | `[{"host": "example.local", "paths": [{"path": "/", "pathType": "Prefix"}]}]` |
-| `ingress.annotations` |  | `{}` |
-| `ingress.tls` |  | `[]` |
-| `volumeClaimTemplates` |  | `[{"name": "config", "mountPath": "/config", "accessMode": "ReadWriteOnce", "storageClassName": "longhorn", "size": "1Gi"}]` |
-| `livenessProbe.httpGet.path` |  | `"/"` |
-| `livenessProbe.httpGet.port` |  | `8123` |
-| `livenessProbe.initialDelaySeconds` |  | `5` |
-| `livenessProbe.periodSeconds` |  | `3` |
-| `volumes` |  | `[{"name": "configs", "configMap": {"name": "hass-configs", "items": [{"key": "configuration.yaml", "path": "configuration.yaml"}, {"key": "automations.yaml", "path": "automations.yaml"}, {"key": "scenes.yaml", "path": "scenes.yaml"}, {"key": "scripts.yaml", "path": "scripts.yaml"}]}}, {"name": "secrets", "secret": {"secretName": "hass-secrets", "items": [{"key": "secrets.yaml", "path": "secrets.yaml"}]}}]` |
-| `volumeMounts` |  | `[{"name": "configs", "mountPath": "/config/configuration.yaml", "subPath": "configuration.yaml", "readOnly": true}, {"name": "configs", "mountPath": "/config/automations.yaml", "subPath": "automations.yaml", "readOnly": true}, {"name": "configs", "mountPath": "/config/scenes.yaml", "subPath": "scenes.yaml", "readOnly": true}, {"name": "configs", "mountPath": "/config/scripts.yaml", "subPath": "scripts.yaml", "readOnly": true}, {"name": "secrets", "mountPath": "/config/secrets.yaml", "subPath": "secrets.yaml", "readOnly": true}]` |
-| `hass_configs.configuration.yaml` |  | `"# Loads default set of integrations. Do not remove.\ndefault_config:\n\n# Load frontend themes from the themes folder\nfrontend:\n  themes: !include_dir_merge_named themes\n\nautomation: !include automations.yaml\nscript: !include scripts.yaml\nscene: !include scenes.yaml\n"` |
-| `hass_configs.automations.yaml` |  | `"[]\n"` |
-| `hass_configs.scenes.yaml` |  | `"# scenes\n"` |
-| `hass_configs.scripts.yaml` |  | `"# scripts\n"` |
-| `hass_secrets.secrets.yaml` |  | `"# Use this file to store secrets like usernames and passwords.\n# Learn more at https://www.home-assistant.io/docs/configuration/secrets/\nsome_password: welcome\n"` |
-
-
-
-
-

charts/home-assistant/templates/configuration.yaml

@@ -1,7 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: hass-configs
-  namespace: {{ .Values.namespace | default "default" }}
-  labels: {{ include "lib.labels" . | nindent 4 }}
-data: {{ .Values.hass_configs | toYaml | nindent 2 }}

charts/home-assistant/templates/secrets.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: hass-secrets
-  namespace: {{ .Values.namespace | default "default" }}
-  labels: {{ include "lib.labels" . | nindent 4 }}
-type: Opauge
-data: 
-  {{- range $n, $v := .Values.hass_secrets -}}
-    {{ $n | nindent 2 }}: {{ $v | b64enc }}
-  {{- end }}

charts/home-assistant/values.yaml

@@ -1,113 +0,0 @@
-image:
-  repository: ghcr.io/home-assistant/home-assistant
-  tag:
-
-controller: # main workload
-  enabled: true # should the main workload be included or not
-  type: statefulset # valid options are deployment, statefulset, job
-
-service:
-  http:
-    enabled: true
-    ports:
-      http:
-        port: 80
-        targetPort: 8123
-
-ingress:
-  enabled: false
-  service: http # what service should the ingress target
-  servicePort: 80
-  className: "nginx"
-  hosts:
-    - host: example.local
-      paths:
-        - path: /
-          pathType: Prefix
-  annotations:
-    {}
-  tls: []
-  #  - secretName: chart-example-tls
-  #    hosts:
-  #      - chart-example.local
-
-volumeClaimTemplates:
-  - name: config
-    mountPath: /config
-    accessMode: "ReadWriteOnce"
-    storageClassName: "longhorn"
-    size: 1Gi
-
-livenessProbe:
-  httpGet:
-    path: /
-    port: 8123
-  initialDelaySeconds: 5
-  periodSeconds: 3
-
-volumes:
-  - name: configs
-    configMap:
-      name: hass-configs
-      items:
-        - key: configuration.yaml
-          path: configuration.yaml
-        - key: automations.yaml
-          path: automations.yaml
-        - key: scenes.yaml
-          path: scenes.yaml
-        - key: scripts.yaml
-          path: scripts.yaml
-  - name: secrets
-    secret:
-      secretName: hass-secrets
-      items:
-        - key: secrets.yaml
-          path: secrets.yaml
-
-volumeMounts:
-  - name: configs
-    mountPath: /config/configuration.yaml
-    subPath: configuration.yaml
-    readOnly: true
-  - name: configs
-    mountPath: /config/automations.yaml
-    subPath: automations.yaml
-    readOnly: true
-  - name: configs
-    mountPath: /config/scenes.yaml
-    subPath: scenes.yaml
-    readOnly: true
-  - name: configs
-    mountPath: /config/scripts.yaml
-    subPath: scripts.yaml
-    readOnly: true
-  - name: secrets
-    mountPath: /config/secrets.yaml
-    subPath: secrets.yaml
-    readOnly: true
-
-hass_configs:
-  configuration.yaml: |
-    # Loads default set of integrations. Do not remove.
-    default_config:
-
-    # Load frontend themes from the themes folder
-    frontend:
-      themes: !include_dir_merge_named themes
-
-    automation: !include automations.yaml
-    script: !include scripts.yaml
-    scene: !include scenes.yaml
-  automations.yaml: |
-    []
-  scenes.yaml: |
-    # scenes
-  scripts.yaml: |
-    # scripts
-
-hass_secrets:
-  secrets.yaml: |
-    # Use this file to store secrets like usernames and passwords.
-    # Learn more at https://www.home-assistant.io/docs/configuration/secrets/
-    some_password: welcome

charts/semaphoreui/.gitignore

@@ -1,3 +1,2 @@
 Chart.lock
 charts/
-*.tgz

charts/semaphoreui/Chart.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: v2
+name: semaphoreui
+description: Powerful API for Ansible
+type: application
+version: 1.0.0
+appVersion: v2.10.31
+kubeVersion: ">=1.27.0"
+home: https://semaphoreui.com/
+sources:
+  - https://git.rre.nu/jonas/helm-charts
+maintainers:
+  - name: Jonas Forsberg
+    email: barregargamel@gmail.com
+dependencies:
+  - name: lib
+    repository: "file://../../../lib/"
+    version: 1.0.1

charts/semaphoreui/README.md

@@ -0,0 +1,33 @@
+
+Semaphoreui
+===========
+
+Powerful API for Ansible
+
+
+## Configuration
+
+The following table lists the configurable parameters of the Semaphoreui chart and their default values.
+
+| Parameter                | Description             | Default        |
+| ------------------------ | ----------------------- | -------------- |
+| `image.repository` |  | `"semaphoreui/semaphore"` |
+| `config` |  | `{}` |
+| `service.http.enabled` |  | `true` |
+| `service.http.ports.http.port` |  | `80` |
+| `service.http.ports.http.targetPort` |  | `3000` |
+| `ingress.enabled` |  | `false` |
+| `ingress.service` | what service should the ingress target | `"http"` |
+| `ingress.servicePort` |  | `80` |
+| `ingress.className` |  | `"nginx"` |
+| `ingress.hosts` |  | `[{"host": "example.local", "paths": [{"path": "/", "pathType": "Prefix"}]}]` |
+| `ingress.annotations` |  | `{}` |
+| `controller.command` | Need to override server-wrapper due to stupid DB ping in container | `["/bin/sh"]` |
+| `controller.args` |  | `["/var/local/bin/entrypoint.sh"]` |
+| `volumes` |  | `[{"name": "config", "secret": {"secretName": "semaphoreui-config", "optional": false}}, {"name": "entrypoint", "configMap": {"name": "semaphoreui-entrypoint", "items": [{"key": "entrypoint.sh", "path": "entrypoint.sh"}]}}]` |
+| `volumeMounts` |  | `[{"name": "config", "mountPath": "/var/semaphoreui-secret", "readOnly": true}, {"name": "entrypoint", "mountPath": "/var/local/bin/entrypoint.sh", "subPath": "entrypoint.sh"}]` |
+
+
+
+
+

charts/semaphoreui/templates/config.tpl

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: semaphoreui-config
+  namespace: {{ .Values.namespace | default "default" }}
+  labels:
+    {{- include "lib.labels" . | nindent 4}}
+type: Opauge
+data:
+  config.json: {{ toJson .Values.config | b64enc }}
+  {{- with .Values.packages }}
+  packages.txt: {{ . | b64enc }}
+  {{- end }}
+  {{- with .Values.requirements }}
+  requirements.txt: {{ . | b64enc }}
+  {{- end }}

charts/semaphoreui/templates/entrypoint.sh

@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: semaphoreui-entrypoint
+  namespace: {{ .Values.namespace | default "default" }}
+  labels:
+    {{- include "lib.labels" . | nindent 4}}
+data:
+  entrypoint.sh: |
+    #!/bin/sh
+    echo "creating /etc/semaphore/config.json"
+    cp /var/semaphoreui-secret/config.json /etc/semaphore/config.json
+    if test -f /var/semaphoreui-secret/packages.txt; then
+      echo "Installing additional system dependencies"
+      apk add --no-cache --upgrade \
+      $(cat /var/semaphoreui-secret/packages.txt | xargs)
+    else
+      echo "No additional system dependencies to install"
+    fi
+    if test -f /var/semaphoreui-secret/requirements.txt; then
+      echo "Installing additional python dependencies"
+      pip3 install --upgrade \
+        -r /var/semaphoreui-secret//requirements.txt
+    else
+      echo "No additional python dependencies to install"
+    fi
+    echo "Starting semapore server"
+    exec /usr/local/bin/semaphore server  --config /etc/semaphore/config.json

charts/semaphoreui/values.yaml

@@ -0,0 +1,103 @@
+image:
+  repository: semaphoreui/semaphore
+
+config: {}
+#  bolt:
+#    host: # Path to the BoltDB database file
+#  mysql:
+#    host: # MySQL database host
+#    name: # MySQL database (schema) name
+#    user: # MySQL user name
+#    pass: # MySQL user's password
+#  postgres:
+#    host: # Postgres database host
+#    name: # Postgres database (schema) name
+#    user: # Postgres user name
+#    pass: # Postgres user's password
+#  dialect: bolt # Can be mysql, postgres or bolt
+#  port: 3000 # TCP port on which the web interface will be available. Default: 3000
+#  interface: # Useful if your server has multiple network interfaces
+#  tmp_path: /tmp/semaphore # Path to directory where cloned repositories and generated files are stored. Default: /tmp/semaphore
+#  access_key_encryption: # Secret key used for encrypting access keys in database. Read more in [Database encryption reference](https://docs.semaphoreui.com/administration-guide/security#database-encryption).
+#  web_host: # Can be useful if you want to use Semaphore by the subpath, for example: http://yourdomain.com/semaphore. Do not add a trailing /.
+#  email_sender:
+#  email_host:
+#  email_port:
+#  email_secure:
+#  email_username:
+#  email_password:
+#  email_alert:
+#  telegram_alert:
+#  slack_alert:  # Set to True to enable pushing alerts to slack. It should be used in combination with slack_url
+#  slack_url: # The slack webhook url. Semaphore will used it to POST Slack formatted json alerts to the provided url
+#  rocketchat_alert: # Set to True to enable pushing alerts to Rocket.Chat. It should be used in combination with rocketchat_url. Available since v2.9.56.
+#  rocketchat_url: # The rocketchat webhook url. Semaphore will used it to POST Rocket.Chat formatted json alerts to the provided url. Available since v2.9.56.
+#  ldap_enable:
+#  ldap_needtls:
+#  ldap_binddn:
+#  ldap_bindpassword:
+#  ldap_server:
+#  ldap_searchdn:
+#  concurrency_mode: # Can be unset/empty or project or node. When set to project, tasks will run in parallel if and only if they do not share the same project id, with no regard to the nodes/hosts that are affected. When set to node, a task will run in parallel if and only if the hosts affected by tasks already running does not intersect with the hosts that would be affected by the task in question. If concurrency_mode is not specified or left empty, no task will start before the previous one has finished.
+#max_parallel_tasks:
+#oidc_providers: # OpenID provider settings. You can provide multiple OpenID providers. More about OpenID configuration read in [OpenID](https://docs.semaphoreui.com/administration-guide/openid/).
+#password_login_disable: false # Disable login with using password. Only LDAP and OpenID.
+#non_admin_can_create_project: false # Allow non-admin users to create new projects.
+
+service:
+  http:
+    enabled: true
+    ports:
+      http:
+        port: 80
+        targetPort: 3000
+
+ingress:
+  enabled: false
+  service: http # what service should the ingress target
+  servicePort: 80
+  className: "nginx"
+  hosts:
+    - host: example.local
+      paths:
+        - path: /
+          pathType: Prefix
+  annotations:
+    {}
+
+packages: # extra packages that needs to be installed
+requirements: # Requirements files serve as a list of items to be installed by pip, when using [pip install](https://pip.pypa.io/en/stable/cli/pip_install/#pip-install)
+
+livenessProbe:
+  httpGet:
+    path: /
+    port: http
+readinessProbe:
+  httpGet:
+    path: /
+    port: http
+
+controller:
+  command: ["/bin/sh"] # Need to override server-wrapper due to stupid DB ping in container
+  args:
+    - /var/local/bin/entrypoint.sh
+
+volumes:
+  - name: config
+    secret:
+      secretName: semaphoreui-config
+      optional: false
+  - name: entrypoint
+    configMap:
+      name: semaphoreui-entrypoint
+      items:
+        - key: entrypoint.sh
+          path: entrypoint.sh
+
+volumeMounts:
+  - name: config
+    mountPath: /var/semaphoreui-secret
+    readOnly: true
+  - name: entrypoint
+    mountPath: /var/local/bin/entrypoint.sh
+    subPath: entrypoint.sh