Using unique names for TLS secrets

0.27.0 coming after RCs
The next release version will be 0.28.0
2021-08-13 09:10:47 +02:00 · 2021-08-13 08:46:49 +02:00 · 2021-08-05 11:27:26 +00:00 · 2021-08-05 11:27:25 +00:00 · 2021-08-05 13:26:49 +02:00 · 2021-08-05 10:26:05 +00:00
65 changed files with 1010 additions and 211 deletions
@@ -26,7 +26,7 @@ jobs:
    - name: Extract chart version
      id: chart_version
      run: |
-        CHART_VERSION=$(cat charts/onechart/Chart.yaml | grep version:)
+        CHART_VERSION=$(cat charts/onechart/Chart.yaml | grep ^version:)
        CHART_VERSION=${CHART_VERSION#version: }
        echo $CHART_VERSION
        echo ::set-output name=chart_version::$CHART_VERSION
@@ -28,8 +28,12 @@ kubeval:
 	find manifests/ -name '*.yaml' | xargs kubeval --ignore-missing-schemas -v 1.18.0

 test:
+	helm dependency update charts/onechart
 	helm unittest charts/onechart
+
+	helm dependency update charts/cron-job
 	helm unittest charts/cron-job
+
 	helm unittest charts/namespaces

 package:
@@ -45,8 +49,13 @@ package:
 	helm repo index docs --url https://chart.onechart.dev

 debug:
+	helm dependency update charts/onechart
 	helm template charts/onechart/ -f values.yaml --debug

+debug-cron-job:
+	helm dependency update charts/cron-job
+	helm template charts/cron-job/ -f values-cron-job.yaml --debug
+
 debug-ui:
 	#gimlet chart configure -s charts/onechart/values.schema.json -u charts/onechart/helm-ui.json onechart/onechart
 	/home/laszlo/projects/gimlet-cli/build/gimlet chart configure -s charts/onechart/values.schema.json -u charts/onechart/helm-ui.json onechart/onechart
@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
@@ -0,0 +1,18 @@
+apiVersion: v2
+name: common
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: library
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
@@ -0,0 +1,15 @@
+{{- define "common.configmap.tpl" -}}
+{{- if .Values.vars }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ template "common.robustName" .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "helm-chart.labels" . | nindent 4 }}
+data:
+{{- range $key, $val := .Values.vars }}
+  {{ $key }}: {{ $val | quote }}
+{{- end }}
+{{- end }}
+{{- end -}}
@@ -0,0 +1,21 @@
+{{- define "common.envFromRef.tpl" -}}
+{{- if or (or (or (.Values.vars) (.Values.secretEnabled)) .Values.sealedSecrets) .Values.secretName }}
+envFrom: &envFrom
+{{- if .Values.vars }}
+  - configMapRef:
+      name: {{ template "common.robustName" .Release.Name }}
+{{- end }}
+{{- if .Values.secretEnabled }}
+  - secretRef:
+      name: {{ include "common.robustName" $.Release.Name }}
+{{- end }}
+{{- if .Values.secretName }}
+  - secretRef:
+      name: {{ .Values.secretName }}
+{{- end }}
+{{- if .Values.sealedSecrets }}
+  - secretRef:
+      name: {{ template "common.robustName" .Release.Name }}
+{{- end }}
+{{- end }}
+{{- end }}
@@ -1,3 +1,4 @@
+{{- define "common.fileSecret.tpl" -}}
 {{- range .Values.fileSecrets }}
 ---
 kind: Secret
@@ -11,3 +12,4 @@ data:
  {{ $key }}: {{ $val | b64enc }}
 {{- end }}
 {{- end }}
+{{- end -}}
@@ -0,0 +1,10 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/*
+Create robustName that can be used as Kubernetes resource name, and as subdomain as well
+\w – Latin letters, digits, underscore '_' .
+\W – all but \w .
+*/}}
+{{- define "common.robustName" -}}
+{{ regexReplaceAll "[^0-9A-Za-z_\\.]+" . "-" | replace "_" "-" | lower | trunc 63 | trimSuffix "-" | trimPrefix "-" }}
+{{- end }}
@@ -0,0 +1,18 @@
+{{- define "common.pvc.tpl" -}}
+{{- range .Values.volumes }}
+{{- $robustName := include "common.robustName" $.Release.Name }}
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ printf "%s-%s" $robustName .name }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  accessModes:
+    - {{ .accessMode | default "ReadWriteOnce" }}
+  storageClassName: {{ .storageClass | default "local-path" }}
+  resources:
+    requests:
+      storage: {{ .size | default "1Gi" }}
+{{- end }}
+{{- end -}}
@@ -1,5 +1,6 @@
+{{- define "common.sealedFileSecret.tpl" -}}
 {{- range .Values.sealedFileSecrets }}
-{{- $robustName := include "robustName" $.Release.Name }}
+{{- $robustName := include "common.robustName" $.Release.Name }}
 ---
 apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
@@ -22,3 +23,4 @@ spec:
      name: {{ printf "%s-%s" $.Release.Name .name }}
      namespace: {{ $.Release.Namespace }}
 {{- end }}
+{{- end -}}
@@ -1,8 +1,9 @@
-{{- if .Values.sealedSecrets }}
+{{- define "common.sealedSecret.tpl" -}}
+  {{- if .Values.sealedSecrets }}
 apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
-  name: {{ template "robustName" .Release.Name }}
+  name: {{ template "common.robustName" .Release.Name }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "helm-chart.labels" . | nindent 4 }}
@@ -15,6 +16,7 @@ spec:
  {{- end }}
  template:
    metadata:
-      name: {{ template "robustName" .Release.Name }}
+      name: {{ template "common.robustName" .Release.Name }}
      namespace: {{ .Release.Namespace }}
-{{- end }}
+{{- end }}
+{{- end -}}
@@ -0,0 +1,19 @@
+{{- define "common.volumeMountsRef.tpl" -}}
+{{- if or (or (.Values.volumes) (.Values.sealedFileSecrets)) .Values.fileSecrets }}
+volumeMounts: &volumeMounts
+{{- range .Values.volumes }}
+  - name: {{ .name }}
+    mountPath: {{ .path }}
+{{- end }}
+{{- range .Values.sealedFileSecrets }}
+  - name: {{ .name }}
+    mountPath: {{ .path }}
+    readOnly: true
+{{- end }}
+{{- range .Values.fileSecrets }}
+  - name: {{ .name }}
+    mountPath: {{ .path }}
+    readOnly: true
+{{- end }}
+{{- end }}
+{{- end }}
@@ -0,0 +1,20 @@
+{{- define "common.volumesRef.tpl" -}}
+{{- if or (or (.Values.volumes) (.Values.sealedFileSecrets)) .Values.fileSecrets }}
+volumes:
+  {{- range .Values.volumes }}
+  - name: {{ .name }}
+    persistentVolumeClaim:
+      claimName: {{ printf "%s-%s" $.Release.Name .name }}
+  {{- end }}
+  {{- range .Values.sealedFileSecrets }}
+  - name: {{ .name }}
+    secret:
+      secretName: {{ printf "%s-%s" $.Release.Name .name }}
+  {{- end }}
+  {{- range .Values.fileSecrets }}
+  - name: {{ .name }}
+    secret:
+      secretName: {{ printf "%s-%s" $.Release.Name .name }}
+  {{- end }}
+{{- end }}
+{{- end -}}
@@ -0,0 +1,6 @@
+dependencies:
+- name: common
+  repository: file://../common
+  version: 0.1.0
+digest: sha256:636a65e9846bdff17cc4e65b0849061f783759a37aa51fb85ff6fd8ba5e68467
+generated: "2021-08-05T10:18:17.533366128+02:00"
@@ -15,4 +15,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.2
+version: 0.2.2
+
+dependencies:
+  - name: common
+    version: 0.1.0
+    repository: file://../common
@@ -0,0 +1,71 @@
+[
+  {
+    "schemaIDs": [
+      "#/properties/image",
+      "#/properties/shell",
+      "#/properties/command"
+    ],
+    "uiSchema": {
+      "#/properties/replicas": {
+        "ui:widget": "range"
+      }
+    },
+    "metaData": {
+      "name": "Basics",
+      "icon": "M17 8l4 4m0 0l-4 4m4-4H3"
+    }
+  },
+  {
+    "schemaIDs": [
+      "#/properties/resources"
+    ],
+    "uiSchema": {
+    },
+    "metaData": {
+      "name": "Resources",
+      "icon": "M9 7h6m0 10v-3m-3 3h.01M9 17h.01M9 14h.01M12 14h.01M15 11h.01M12 11h.01M9 11h.01M7 21h10a2 2 0 002-2V5a2 2 0 00-2-2H7a2 2 0 00-2 2v14a2 2 0 002 2z"
+    }
+  },
+  {
+    "schemaIDs": [
+      "#/properties/vars"
+    ],
+    "uiSchema": {
+      "#/properties/vars": {
+        "additionalProperties": {
+          "type": "string"
+        }
+      }
+    },
+    "metaData": {
+      "name": "Environment Variables",
+      "icon": "M12 8c-1.657 0-3 .895-3 2s1.343 2 3 2 3 .895 3 2-1.343 2-3 2m0-8c1.11 0 2.08.402 2.599 1M12 8V7m0 1v8m0 0v1m0-1c-1.11 0-2.08-.402-2.599-1M21 12a9 9 0 11-18 0 9 9 0 0118 0z"
+    }
+  },
+  {
+    "schemaIDs": [
+      "#/properties/sealedSecrets"
+    ],
+    "uiSchema": {
+      "#/properties/sealedSecrets": {
+        "additionalProperties": {
+          "type": "string"
+        }
+      }
+    },
+    "metaData": {
+      "name": "Sealed Secrets",
+      "icon": "M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z"
+    }
+  },
+  {
+    "schemaIDs": [
+      "#/properties/volumes"
+    ],
+    "uiSchema": {},
+    "metaData": {
+      "name": "Volumes",
+      "icon": "M4 7v10c0 2.21 3.582 4 8 4s8-1.79 8-4V7M4 7c0 2.21 3.582 4 8 4s8-1.79 8-4M4 7c0-2.21 3.582-4 8-4s8 1.79 8 4m0 5c0 2.21-3.582 4-8 4s-8-1.79-8-4"
+    }
+  }
+]
@@ -1,13 +1 @@
-{{- if .Values.vars }}
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: {{ .Release.Name }}
-  namespace: {{ .Release.Namespace }}
-  labels:
-    {{- include "helm-chart.labels" . | nindent 4 }}
-data:
-{{- range $key, $val := .Values.vars }}
-  {{ $key }}: {{ $val | quote }}
-{{- end }}
-{{- end }}
+{{- include "common.configmap.tpl" . -}}
@@ -7,10 +7,9 @@ metadata:
    {{- include "helm-chart.labels" . | nindent 4 }}
 spec:
  schedule: {{ .Values.schedule | quote }}
-  successfulJobsHistoryLimit: 1
-  failedJobsHistoryLimit: 1
-  concurrencyPolicy: Forbid
-  startingDeadlineSeconds: 120
+  {{- with .Values.constraints }}
+    {{- toYaml . | nindent 2 }}
+  {{- end }}
  jobTemplate:
    spec:
      template:
@@ -30,29 +29,12 @@ spec:
                - {{ .Values.shell }}
                - -c
                - {{ .Values.command | quote }}
-              envFrom:
-                {{- if .Values.vars }}
-                - configMapRef:
-                    name: {{ .Release.Name }}
-                {{- end }}
-                {{- if .Values.secret.enabled }}
-                - secretRef:
-                    name: {{ .Release.Name }}
-                {{- end }}
-              volumeMounts:
-                {{- range .Values.volumes }}
-                - name: {{ .name }}
-                  mountPath: {{ .path }}
-                {{- end }}
+              {{- include "common.envFromRef.tpl" . | nindent 14 }}
+              {{- include "common.volumeMountsRef.tpl" . | nindent 14 }}
              resources:
                {{- toYaml .Values.resources | nindent 16 }}
-          volumes:
-            {{- range .Values.volumes }}
-            - name: {{ .name }}
-              persistentVolumeClaim:
-                claimName: {{ printf "%s-%s" $.Release.Name .name }}
-            {{- end }}
-            {{ with .Values.nodeSelector }}
+          {{- include "common.volumesRef.tpl" . | nindent 10 }}
+          {{ with .Values.nodeSelector }}
          nodeSelector:
            {{ toYaml . | nindent 8 }}
          {{- end }}
@@ -0,0 +1 @@
+{{- include "common.fileSecret.tpl" . -}}
@@ -1,15 +1 @@
-{{- range .Values.volumes }}
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: {{ printf "%s-%s" $.Release.Name .name }}
-  namespace: {{ $.Release.Namespace }}
-spec:
-  accessModes:
-    - {{ .accessMode | default "ReadWriteOnce" }}
-  storageClassName: {{ .storageClass | default "local-path" }}
-  resources:
-    requests:
-      storage: {{ .size | default "1Gi" }}
-{{- end }}
+{{- include "common.pvc.tpl" . -}}
@@ -0,0 +1 @@
+{{- include "common.sealedFileSecret.tpl" . -}}
@@ -0,0 +1 @@
+{{- include "common.sealedSecret.tpl" . -}}
@@ -13,7 +13,7 @@ tests:
          path: spec.jobTemplate.spec.template.spec.containers[0].envFrom
          content:
            configMapRef:
-              name: RELEASE-NAME
+              name: release-name
  - it: Should not reference configmap if vars are not set
    asserts:
      - isNull:
@@ -0,0 +1,17 @@
+suite: test cron job
+templates:
+  - cronJob.yaml
+tests:
+  - it: Should have default constraints
+    asserts:
+      - equal:
+          path: spec.successfulJobsHistoryLimit
+          value: 1
+  - it: Should constraints be configurable
+    set:
+      constraints:
+        successfulJobsHistoryLimit: 2
+    asserts:
+      - equal:
+          path: spec.successfulJobsHistoryLimit
+          value: 2
@@ -0,0 +1,28 @@
+suite: test deployment
+templates:
+  - cronJob.yaml
+tests:
+  - it: Should mount volume
+    set: &values
+      sealedFileSecrets:
+        - name: google-account-key
+          path: /google-account-key
+          filesToMount:
+            - name: key.json
+              sourcePath: my-google-acoount-key.json
+    asserts:
+      - equal:
+          path: spec.jobTemplate.spec.template.spec.containers[0].volumeMounts
+          value:
+            - name: google-account-key
+              mountPath: /google-account-key
+              readOnly: true
+  - it: Should reference volume
+    set: *values
+    asserts:
+      - equal:
+          path: spec.jobTemplate.spec.template.spec.volumes
+          value:
+            - name: google-account-key
+              secret:
+                secretName: RELEASE-NAME-google-account-key
@@ -5,16 +5,16 @@ templates:
 tests:
  - it: Should reference secret if secret is enabled
    set:
-      secret.enabled: true
+      secretEnabled: true
    asserts:
      - contains:
          path: spec.jobTemplate.spec.template.spec.containers[0].envFrom
          content:
            secretRef:
-              name: RELEASE-NAME
+              name: release-name
  - it: Should not reference secret if secret is disabled
    set:
-      secret.enabled: false
+      secretEnabled: false
    asserts:
      - isNull:
          path: spec.jobTemplate.spec.template.spec.containers[0].envFrom
@@ -0,0 +1,316 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema",
+  "$id": "http://example.com/example.json",
+  "type": "object",
+  "title": "The root schema",
+  "description": "The root schema comprises the entire JSON document.",
+  "default": {},
+  "required": [],
+  "properties": {
+    "image": {
+      "$id": "#/properties/image",
+      "type": "object",
+      "title": "Image",
+      "description": "The image to deploy",
+      "default": {},
+      "examples": [
+        {
+          "repository": "nginx",
+          "tag": "latest"
+        }
+      ],
+      "required": [
+        "repository",
+        "tag"
+      ],
+      "properties": {
+        "repository": {
+          "$id": "#/properties/image/properties/repository",
+          "type": "string",
+          "title": "Repository",
+          "description": "",
+          "default": "nginx",
+          "examples": [
+            "nginx"
+          ]
+        },
+        "tag": {
+          "$id": "#/properties/image/properties/tag",
+          "type": "string",
+          "title": "Tag",
+          "description": "",
+          "default": "1.19.3",
+          "examples": [
+            "latest"
+          ]
+        }
+      }
+    },
+    "podAnnotations": {
+      "$id": "#/properties/podAnnotations",
+      "type": "object",
+      "title": "The podAnnotations schema",
+      "description": "An explanation about the purpose of this instance.",
+      "default": {},
+      "examples": [
+        {}
+      ],
+      "required": [],
+      "additionalProperties": true
+    },
+    "resources": {
+      "$id": "#/properties/resources",
+      "type": "object",
+      "title": "",
+      "description": "",
+      "default": {},
+      "examples": [
+        {
+          "requests": {
+            "cpu": "200m",
+            "memory": "200mi"
+          },
+          "limits": {
+            "cpu": "200m",
+            "memory": "200mi"
+          }
+        }
+      ],
+      "required": [],
+      "properties": {
+        "requests": {
+          "$id": "#/properties/resources/properties/requests",
+          "type": "object",
+          "title": "Requests",
+          "description": "The typical resources your app uses",
+          "default": {},
+          "examples": [
+            {
+              "cpu": "200m",
+              "memory": "200mi"
+            }
+          ],
+          "required": [
+            "cpu",
+            "memory"
+          ],
+          "properties": {
+            "cpu": {
+              "$id": "#/properties/resources/properties/requests/properties/cpu",
+              "type": "string",
+              "title": "CPU",
+              "description": "",
+              "default": "200m",
+              "examples": [
+                "200m"
+              ]
+            },
+            "memory": {
+              "$id": "#/properties/resources/properties/requests/properties/memory",
+              "type": "string",
+              "title": "Memory",
+              "description": "",
+              "default": "200Mi",
+              "examples": [
+                "200mi"
+              ]
+            }
+          }
+        },
+        "limits": {
+          "$id": "#/properties/resources/properties/limits",
+          "type": "object",
+          "title": "Limits",
+          "description": "The maximum resources your app may use",
+          "default": {},
+          "examples": [
+            {
+              "cpu": "200m",
+              "memory": "200mi"
+            }
+          ],
+          "required": [
+            "cpu",
+            "memory"
+          ],
+          "properties": {
+            "cpu": {
+              "$id": "#/properties/resources/properties/limits/properties/cpu",
+              "type": "string",
+              "title": "CPU",
+              "description": "The hard ceiling for the app's CPU usage. The app will be throttled to this limit. 1000m or 1000 CPU shares = 1 CPU core",
+              "default": "200m",
+              "examples": [
+                "200m"
+              ]
+            },
+            "memory": {
+              "$id": "#/properties/resources/properties/limits/properties/memory",
+              "type": "string",
+              "title": "Memory",
+              "description": "The hard ceiling for the app's memory usage. The app will be RESTARTED if it reaches this limit",
+              "default": "200Mi",
+              "examples": [
+                "200mi"
+              ]
+            }
+          }
+        }
+      }
+    },
+    "nodeSelector": {
+      "$id": "#/properties/nodeSelector",
+      "type": "object",
+      "title": "The nodeSelector schema",
+      "description": "An explanation about the purpose of this instance.",
+      "default": {},
+      "examples": [
+        {}
+      ],
+      "required": [],
+      "additionalProperties": true
+    },
+    "tolerations": {
+      "$id": "#/properties/tolerations",
+      "type": "array",
+      "title": "The tolerations schema",
+      "description": "An explanation about the purpose of this instance.",
+      "default": [],
+      "examples": [
+        []
+      ],
+      "additionalItems": true,
+      "items": {
+        "$id": "#/properties/tolerations/items"
+      }
+    },
+    "affinity": {
+      "$id": "#/properties/affinity",
+      "type": "object",
+      "title": "The affinity schema",
+      "description": "An explanation about the purpose of this instance.",
+      "default": {},
+      "examples": [
+        {}
+      ],
+      "required": [],
+      "additionalProperties": true
+    },
+    "secret": {
+      "$id": "#/properties/secret",
+      "type": "object",
+      "title": "The secret schema",
+      "description": "An explanation about the purpose of this instance.",
+      "default": {},
+      "examples": [
+        {
+          "enabled": false
+        }
+      ],
+      "required": [
+        "enabled"
+      ],
+      "properties": {
+        "enabled": {
+          "$id": "#/properties/secret/properties/enabled",
+          "type": "boolean",
+          "title": "The enabled schema",
+          "description": "An explanation about the purpose of this instance.",
+          "default": false,
+          "examples": [
+            false
+          ]
+        }
+      },
+      "additionalProperties": true
+    },
+    "shell": {
+      "$id": "#/properties/shell",
+      "type": "string",
+      "title": "Shell",
+      "description": "The shell to use",
+      "default": "/bin/sh"
+    },
+    "command": {
+      "$id": "#/properties/command",
+      "type": "string",
+      "title": "Command",
+      "description": "The command to run in the cronjob",
+      "default": "echo \"I'm alive\""
+    },
+    "vars": {
+      "$id": "#/properties/vars",
+      "type": "object",
+      "title": "Environment variables",
+      "description": "",
+      "default": {},
+      "examples": [
+        {
+          "VAR_1": "value 1",
+          "VAR_2": "value 2"
+        }
+      ],
+      "required": [],
+      "properties": {},
+      "additionalProperties": true
+    },
+    "sealedSecrets": {
+      "$id": "#/properties/sealedSecrets",
+      "type": "object",
+      "title": "Sealed Secrets",
+      "description": "",
+      "default": {},
+      "examples": [
+        {
+          "VAR_1": "value 1",
+          "VAR_2": "value 2"
+        }
+      ],
+      "required": [],
+      "properties": {},
+      "additionalProperties": true
+    },
+    "volumes": {
+      "$id": "#/properties/volumes",
+      "type": "array",
+      "title": "Volumes",
+      "default": [],
+      "additionalItems": true,
+      "items": {
+        "$id": "#/properties/volumes/items",
+        "type": "object",
+        "properties": {
+          "name": {
+            "$id": "#/properties/volumes/items/anyOf/0/properties/name",
+            "type": "string",
+            "title": "Name",
+            "description": "The name of the volume. Used only to recognize the volumes purpose in the config later on",
+            "default": "data"
+          },
+          "path": {
+            "$id": "#/properties/volumes/items/anyOf/0/properties/path",
+            "type": "string",
+            "title": "Path",
+            "description": "The mount path inside the container",
+            "default": "/data"
+          },
+          "size": {
+            "$id": "#/properties/volumes/items/anyOf/0/properties/size",
+            "type": "string",
+            "title": "Size",
+            "description": "",
+            "default": "10Gi"
+          },
+          "storageClass": {
+            "$id": "#/properties/volumes/items/anyOf/0/properties/storageClass",
+            "type": "string",
+            "title": "Storage Class",
+            "description": "The slug indicating the disk type in your cloud provider. `standard` on Google Cloud, `default` on Azure; `do-block-storage` on Digital Ocean",
+            "default": ""
+          }
+        }
+      }
+    }
+  },
+  "additionalProperties": true
+}
@@ -27,3 +27,9 @@ affinity: {}

 secret:
  enabled: false
+
+constraints:
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 1
+  concurrencyPolicy: Forbid
+  startingDeadlineSeconds: 120
@@ -0,0 +1,6 @@
+dependencies:
+- name: common
+  repository: file://../common
+  version: 0.1.0
+digest: sha256:636a65e9846bdff17cc4e65b0849061f783759a37aa51fb85ff6fd8ba5e68467
+generated: "2021-08-05T10:39:10.053810673+02:00"
@@ -15,4 +15,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.23.0
+version: 0.27.0
+
+dependencies:
+  - name: common
+    version: 0.1.0
+    repository: file://../common
@@ -1,13 +1 @@
-{{- if .Values.vars }}
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: {{ template "robustName" .Release.Name }}
-  namespace: {{ .Release.Namespace }}
-  labels:
-    {{- include "helm-chart.labels" . | nindent 4 }}
-data:
-{{- range $key, $val := .Values.vars }}
-  {{ $key }}: {{ $val | quote }}
-{{- end }}
-{{- end }}
+{{- include "common.configmap.tpl" . -}}
@@ -5,16 +5,25 @@ metadata:
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "helm-chart.labels" . | nindent 4 }}
+  {{- if .Values.gitSha }}
+  annotations:
+    gimlet.io/git-sha: {{ .Values.gitSha }}
+  {{- end }}
 spec:
  replicas: {{ .Values.replicas }}
  selector:
    matchLabels:
      {{- include "helm-chart.selectorLabels" . | nindent 6 }}
  {{- $singleReplica := eq (.Values.replicas | int64) 1 }}
-  {{- if and .Values.volumes $singleReplica }}
+  {{- $strategyNotDefined := not .Values.strategy }}
+  {{- if and (and .Values.volumes $singleReplica) $strategyNotDefined}}
  strategy:
    type: Recreate
  {{- end }}
+  {{- if .Values.strategy }}
+  strategy:
+    type: {{ .Values.strategy }}
+  {{- end }}
  template:
    metadata:
      annotations:
@@ -22,6 +31,12 @@ spec:
        {{- with .Values.podAnnotations }}
          {{- toYaml . | nindent 8 }}
        {{- end }}
+        {{- if .Values.gitSha }}
+        gimlet.io/git-sha: {{ .Values.gitSha }}
+        {{- end }}
+        {{- if .Values.gitRepository }}
+        gimlet.io/git-repository: {{ .Values.gitRepository }}
+        {{- end }}
      labels:
        {{- include "helm-chart.selectorLabels" . | nindent 8 }}
    spec:
@@ -46,21 +61,7 @@ spec:
            - -c
            - {{ .Values.command | quote }}
          {{- end }}
-          {{- if or (or (.Values.vars) (.Values.secretEnabled)) .Values.sealedSecrets }}
-          envFrom: &envFrom
-            {{- if .Values.vars }}
-            - configMapRef:
-                name: {{ template "robustName" .Release.Name }}
-            {{- end }}
-            {{- if .Values.secretEnabled }}
-            - secretRef:
-                name: {{ .Values.secretName | default (include "robustName" $.Release.Name) }}
-            {{- end }}
-            {{- if .Values.sealedSecrets }}
-            - secretRef:
-                name: {{ template "robustName" .Release.Name }}
-            {{- end }}
-          {{- end }}
+          {{- include "common.envFromRef.tpl" . | nindent 10 }}
          ports:
            {{- if not .Values.ports }}
            - name: http
@@ -83,23 +84,7 @@ spec:
            {{- toYaml . | nindent 12 }}
            {{- end }}
          {{- end }}
-          {{- if or (or (.Values.volumes) (.Values.sealedFileSecrets)) .Values.fileSecrets }}
-          volumeMounts: &volumeMounts
-            {{- range .Values.volumes }}
-            - name: {{ .name }}
-              mountPath: {{ .path }}
-            {{- end }}
-            {{- range .Values.sealedFileSecrets }}
-            - name: {{ .name }}
-              mountPath: {{ .path }}
-              readOnly: true
-            {{- end }}
-            {{- range .Values.fileSecrets }}
-            - name: {{ .name }}
-              mountPath: {{ .path }}
-              readOnly: true
-            {{- end }}
-          {{- end }}
+          {{- include "common.volumeMountsRef.tpl" . | nindent 10 }}
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
        {{- if .Values.sidecar }}
@@ -119,24 +104,7 @@ spec:
          volumeMounts: *volumeMounts
          {{- end }}
        {{- end }}
-      {{- if or (or (.Values.volumes) (.Values.sealedFileSecrets)) .Values.fileSecrets }}
-      volumes:
-        {{- range .Values.volumes }}
-        - name: {{ .name }}
-          persistentVolumeClaim:
-            claimName: {{ printf "%s-%s" $.Release.Name .name }}
-        {{- end }}
-        {{- range .Values.sealedFileSecrets }}
-        - name: {{ .name }}
-          secret:
-            secretName: {{ printf "%s-%s" $.Release.Name .name }}
-        {{- end }}
-        {{- range .Values.fileSecrets }}
-        - name: {{ .name }}
-          secret:
-            secretName: {{ printf "%s-%s" $.Release.Name .name }}
-        {{- end }}
-      {{- end }}
+      {{- include "common.volumesRef.tpl" . | nindent 6 }}
      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}
@@ -0,0 +1 @@
+{{- include "common.fileSecret.tpl" . -}}
@@ -1,28 +1,36 @@
 {{/* OneChart ingress snippet */}}
 {{- define "onechart.ingress" }}
 {{- $robustName := include "robustName" .root.Release.Name -}}
+{{- $resourceName := $robustName -}}
+{{- if .longName }}
+{{- $resourceName = printf "%s-%s" $robustName (include "robustName" .ingress.host) -}}
+{{- end }}
 ---
 apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
-  {{- if .longName }}
-  name: {{ $robustName }}-{{ template "robustName" .ingress.host }}
-  {{- else }}
-  name: {{ $robustName }}
-  {{- end }}
+  name: {{ $resourceName }}
  namespace: {{ .root.Release.Namespace }}
  labels:
    {{- include "helm-chart.labels" .root | nindent 4 }}
-  {{- with .ingress.annotations }}
+  {{- if or (or .root.Values.gitSha .ingress.annotations) .root.Values.gitRepository }}
  annotations:
-    {{- toYaml . | nindent 4 }}
+    {{- if .ingress.annotations }}
+      {{- toYaml .ingress.annotations | nindent 4 }}
+    {{- end }}
+    {{- if .root.Values.gitSha }}
+    gimlet.io/git-sha: {{ .root.Values.gitSha }}
+    {{- end }}
+    {{- if .root.Values.gitRepository }}
+    gimlet.io/git-repository: {{ .root.Values.gitRepository }}
+    {{- end }}
  {{- end }}
 spec:
  {{- if default false .ingress.tlsEnabled }}
  tls:
    - hosts:
        - {{ template "robustName" .ingress.host | quote }}
-      secretName: {{ printf "tls-%s" $robustName }}
+      secretName: {{ printf "tls-%s" $resourceName }}
  {{- end }}
  rules:
    - host: {{ template "robustName" .ingress.host | quote }}
@@ -30,7 +38,7 @@ spec:
        paths:
          - backend:
              serviceName: {{ $robustName }}
-              servicePort: {{ .root.Values.containerPort }}
+              servicePort: {{ if .root.Values.svcPort }}{{ .root.Values.svcPort }}{{ else }}{{ .root.Values.containerPort }}{{ end }}
 {{- end }}

 {{- with .Values.ingress }}
@@ -1,16 +1 @@
-{{- range .Values.volumes }}
-{{- $robustName := include "robustName" $.Release.Name }}
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: {{ printf "%s-%s" $robustName .name }}
-  namespace: {{ $.Release.Namespace }}
-spec:
-  accessModes:
-    - {{ .accessMode | default "ReadWriteOnce" }}
-  storageClassName: {{ .storageClass | default "local-path" }}
-  resources:
-    requests:
-      storage: {{ .size | default "1Gi" }}
-{{- end }}
+{{- include "common.pvc.tpl" . -}}
@@ -0,0 +1 @@
+{{- include "common.sealedFileSecret.tpl" . -}}
@@ -0,0 +1 @@
+{{- include "common.sealedSecret.tpl" . -}}
@@ -5,6 +5,15 @@ metadata:
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "helm-chart.labels" . | nindent 4 }}
+  {{- if or .Values.gitRepository .Values.gitSha }}
+  annotations:
+    {{- if .Values.gitRepository }}
+    gimlet.io/git-repository: {{ .Values.gitRepository }}
+    {{- end }}
+    {{- if .Values.gitSha }}
+    gimlet.io/git-sha: {{ .Values.gitSha }}
+    {{- end }}
+  {{- end }}
 spec:
  type: {{ if .Values.nodePortEnabled }}NodePort{{ else if .Values.loadbalancerEnabled }}LoadBalancer{{ else }}ClusterIP{{ end }}
  {{- if .Values.stickySessions }}
@@ -1,6 +1,6 @@
 suite: test deployment
 templates:
-  - sealed-file-secret.yaml
+  - sealedFileSecret.yaml
 tests:
  - it: Should generate a sealed secret with the file
    set: &values
@@ -12,15 +12,8 @@ tests:
          content:
            secretRef:
              name: release-name
-  - it: Should not reference secret if secret is disabled
+  - it: Should reference secret by name
    set:
-      secretEnabled: false
-    asserts:
-      - isNull:
-          path: spec.template.spec.containers[0].envFrom
-  - it: Should not reference secret if secret is disabled
-    set:
-      secretEnabled: true
      secretName: my-custom-secret
    asserts:
      - contains:
@@ -42,3 +42,22 @@ tests:
      - equal:
          path: spec.strategy.type
          value: Recreate
+  - it: Should strategy take precedence
+    set:
+      volumes:
+        - name: data
+          path: /var/lib/1clickinfra/data
+          size: 10Gi
+          storageClass: default
+      strategy: RollingUpdate
+    asserts:
+      - equal:
+          path: spec.strategy.type
+          value: RollingUpdate
+  - it: Should strategy be set
+    set:
+      strategy: Dummy
+    asserts:
+      - equal:
+          path: spec.strategy.type
+          value: Dummy
@@ -83,3 +83,21 @@ tests:
    asserts:
      - hasDocuments:
          count: 3
+  - it: Should have unique TLS secret names
+    set:
+      ingresses:
+        - host: chart-example.local
+          tlsEnabled: true
+          annotations:
+            kubernetes.io/ingress.class: nginx
+        - host: another.local
+          tlsEnabled: true
+          annotations:
+            kubernetes.io/ingress.class: nginx
+    asserts:
+      - equal:
+          path: spec.tls
+          value:
+            - hosts:
+                - chart-example.local
+              secretName: tls-release-name-chart-example.local
@@ -0,0 +1,23 @@
+suite: test deployment
+templates:
+  - ingress.yaml
+tests:
+  - it: Should use container port
+    set:
+      ingress:
+        host: chart-example.local
+      containerPort: 1234
+    asserts:
+      - equal:
+          path: spec.rules[0].http.paths[0].backend.servicePort
+          value: 1234
+  - it: Should use service port
+    set:
+      ingress:
+        host: chart-example.local
+      svcPort: 1234
+      containerPort: 5678
+      asserts:
+        - equal:
+            path: spec.rules[0].http.paths[0].backend.servicePort
+            value: 1234
@@ -0,0 +1,18 @@
+suite: test service
+templates:
+  - ingress.yaml
+tests:
+  - it: Should set Gimlet taxonomy on Ingress
+    set:
+      gitRepository: github.com/laszlocph/demo-app
+      gitSha: xyz
+      ingress:
+        host: chart-example.local
+        tlsEnabled: true
+    asserts:
+      - equal:
+          path: metadata.annotations
+          value:
+            gimlet.io/git-repository: github.com/laszlocph/demo-app
+            gimlet.io/git-sha: xyz
+
@@ -1,6 +1,6 @@
 suite: test deployment
 templates:
-  - sealed-secret.yaml
+  - sealedSecret.yaml
 tests:
  - it: Should put sealed secrets in SealedSecret
    set:
@@ -0,0 +1,14 @@
+suite: test service
+templates:
+  - service.yaml
+tests:
+  - it: Should set Gimlet taxonomy
+    set:
+      gitRepository: github.com/laszlocph/demo-app
+      gitSha: xyz
+    asserts:
+      - equal:
+          path: metadata.annotations
+          value:
+            gimlet.io/git-repository: github.com/laszlocph/demo-app
+            gimlet.io/git-sha: xyz
@@ -2,17 +2,59 @@ apiVersion: v1
 entries:
  cron-job:
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.680543234Z"
+    created: "2021-08-05T11:27:25.178124209Z"
+    dependencies:
+    - name: common
+      repository: file://../common
+      version: 0.1.0
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
-    digest: e4d7dbe4dec2858ef22e3266a3125169b70e6d759de9ed4587175fc7599157ef
+    digest: 2212e5e2ed7823252f45bd7bb958f225978584018b4177dca2385ef559cfad18
+    name: cron-job
+    type: application
+    urls:
+    - https://chart.onechart.dev/cron-job-0.2.2.tgz
+    version: 0.2.2
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.1773224Z"
+    dependencies:
+    - name: common
+      repository: file://../common
+      version: 0.1.0
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: fed42cf26db57373f49a6931779813c193322ed98d6f57822176267c74f37c5c
+    name: cron-job
+    type: application
+    urls:
+    - https://chart.onechart.dev/cron-job-0.2.1.tgz
+    version: 0.2.1
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.176662794Z"
+    dependencies:
+    - name: common
+      repository: file://../common
+      version: 0.1.0
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: 1a7f50437f522d8941c59d8461668befb9142d53bc3f98aa682585af9dfb0f86
+    name: cron-job
+    type: application
+    urls:
+    - https://chart.onechart.dev/cron-job-0.2.0.tgz
+    version: 0.2.0
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.175748884Z"
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: 02a23d8b4177290a518ee5de6a5e1f557f7409f94b2e04f23fedea193464188f
    name: cron-job
    type: application
    urls:
    - https://chart.onechart.dev/cron-job-0.1.2.tgz
    version: 0.1.2
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.68021773Z"
+    created: "2021-08-05T11:27:25.17535248Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: afab9ba533a4686827b54b0dad64f5bbf76f7fbc075e35fb1034689db9ab9dda
@@ -22,7 +64,7 @@ entries:
    - https://chart.onechart.dev/cron-job-0.1.1.tgz
    version: 0.1.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.679885625Z"
+    created: "2021-08-05T11:27:25.174939276Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 01f9fa40c1c4085d7688474ab00c9e9d21bd1d0793db6b75f2edda0e18456282
@@ -33,16 +75,16 @@ entries:
    version: 0.1.0
  namespaces:
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.681246544Z"
+    created: "2021-08-05T11:27:25.178891717Z"
    description: Chart to create namespaces and their defaults
-    digest: 0d1f55661094c61828c533b900730211a2a8df32496b007f9894f414e8c79047
+    digest: 20e8bb7a953cc9ec53e6575f88a45199a4af60c1dc41bddf973a5a27a266306d
    name: namespaces
    type: application
    urls:
    - https://chart.onechart.dev/namespaces-0.2.0.tgz
    version: 0.2.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.680831638Z"
+    created: "2021-08-05T11:27:25.178416812Z"
    description: Chart to create namespaces and their defaults
    digest: 88b06d78a9d1bda6f2ee15b1fad7f25399ac25c2320fb9a8dfa1a4fd14afdf6e
    name: namespaces
@@ -52,7 +94,109 @@ entries:
    version: 0.1.0
  onechart:
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.695115431Z"
+    created: "2021-08-05T11:27:25.203273768Z"
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: 91d5a0b5a62b27fd1b87fbcb3aa031eae890c553543fc9c20a0fa575e4512e49
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.27.0.tgz
+    version: 0.27.0
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.202382859Z"
+    dependencies:
+    - name: common
+      repository: file://../common
+      version: 0.1.0
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: 69d8a1abcf21235c9de681d5827fb5e8abbebf2ccec221f3a96aee2cfd31ed7d
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.27.0-rc3.tgz
+    version: 0.27.0-rc3
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.200850443Z"
+    dependencies:
+    - name: common
+      repository: file://../common
+      version: 0.1.0
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: a9d0b0a9c37debf5c996c20d54b31dad8322312e3e62dcf844ce45b251c0f031
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.27.0-rc2.tgz
+    version: 0.27.0-rc2
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.19957933Z"
+    dependencies:
+    - name: common
+      repository: file://../common
+      version: 0.1.0
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: b7a6167526d0a37b52cfa256a258ba65aa0c87846371dde04a254b3a252af0ad
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.27.0-rc1.tgz
+    version: 0.27.0-rc1
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.198353317Z"
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: 3563a30dba0b6a9c7a1a3df358ca5c41e952882fd2f1bbe33c8103536870d651
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.26.0.tgz
+    version: 0.26.0
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.197583109Z"
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: efcbabde8193f1c3ecb34e4ede8f5efead1f77d8096180f4e8640ff94df07461
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.25.0.tgz
+    version: 0.25.0
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.196925002Z"
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: 59f1389268efb3d970f84cae968e3ecbde57015df1201411f9f46becb4b09844
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.24.1.tgz
+    version: 0.24.1
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.196120094Z"
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: 74b6fdf49a9fa5327fc0639f1d97f0cf553f89030c01379f3c91a5adb6f8a0f1
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.24.0.tgz
+    version: 0.24.0
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.195474088Z"
+    description: One chart to rule them all. A generic Helm chart for your application
+      deployments. Because no-one can remember the Kubernetes yaml syntax.
+    digest: f8e444c2d5c5a4e73b76a971effda5246d3200427be45c2fb546bc990f197ecc
+    name: onechart
+    type: application
+    urls:
+    - https://chart.onechart.dev/onechart-0.23.0.tgz
+    version: 0.23.0
+  - apiVersion: v2
+    created: "2021-08-05T11:27:25.194798081Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: dfad2865c3eb54f0366300ef63b8ba1863ca69aa27e5ca5d3512c0d799d004d3
@@ -62,7 +206,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.22.0.tgz
    version: 0.22.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.694509822Z"
+    created: "2021-08-05T11:27:25.194168174Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 1b837cdefcb7025c40bffdd620a0f116df5ccb9023ac6a8c538bd8e77b3eb80a
@@ -72,7 +216,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.21.0.tgz
    version: 0.21.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.693902814Z"
+    created: "2021-08-05T11:27:25.193511767Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: a4f5741b46b89cd4328fbd96f96d85d53bae64b526730de5097ec33639c9c54f
@@ -82,7 +226,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.20.0.tgz
    version: 0.20.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.693048103Z"
+    created: "2021-08-05T11:27:25.192596458Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 59dd16db4f8519d3922da349aabcc2daec8385fc8a98d0f3163a84b98cc12f61
@@ -92,7 +236,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.19.0.tgz
    version: 0.19.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.692443795Z"
+    created: "2021-08-05T11:27:25.192027052Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 74c4c6a448e66929dfcafc5a641b5bdbaa8af6832c6065b02ce756dfeb3fc438
@@ -102,7 +246,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.18.0.tgz
    version: 0.18.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.691831486Z"
+    created: "2021-08-05T11:27:25.191378145Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: e1ba0bb54c3a3e13b661bb608839c7013d12e24d0437581ebfdbf5ce4a283d4d
@@ -112,7 +256,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.17.0.tgz
    version: 0.17.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.691213878Z"
+    created: "2021-08-05T11:27:25.190629738Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 596350a4977b305e4d5aae16dd8dcca62a17ea5cec9f444aacd82a12d6b3dcfe
@@ -122,7 +266,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.16.0.tgz
    version: 0.16.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.69058597Z"
+    created: "2021-08-05T11:27:25.18986613Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: d1a5a9e9bff274f32f6849bc58b201c7886240b94dd6b70b5cf3411d9ad03393
@@ -132,7 +276,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.15.3.tgz
    version: 0.15.3
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.689941261Z"
+    created: "2021-08-05T11:27:25.188645317Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 626410479f67bbbfa7e7fc94f6dfd8aae50a2bdf9fc72ec395c835dacbd5dbe7
@@ -142,7 +286,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.15.2.tgz
    version: 0.15.2
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.689360153Z"
+    created: "2021-08-05T11:27:25.187329804Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: e6d237aff4abedee6deb5ba57e8183c7598b255d40afdd04c03f73014f706aa3
@@ -152,7 +296,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.15.1.tgz
    version: 0.15.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.688626043Z"
+    created: "2021-08-05T11:27:25.185737887Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: d45fc4cc214bc94e4c2c10d6432562d7e65ee5e55226f677aafdfe101d7f6e7f
@@ -162,7 +306,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.15.0.tgz
    version: 0.15.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.687824432Z"
+    created: "2021-08-05T11:27:25.18505208Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 7e61a72a3400e09c44539094558a2084621239015132d20551c4593be3b5bede
@@ -172,7 +316,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.14.0.tgz
    version: 0.14.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.687101823Z"
+    created: "2021-08-05T11:27:25.184432074Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 743a9b552233770713f0c22edbe8cf4f55c890a59106e1f33055c1cb31be5a27
@@ -182,7 +326,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.13.2.tgz
    version: 0.13.2
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.686088609Z"
+    created: "2021-08-05T11:27:25.183819467Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 02bf9537e13cea0da9dc3bfbcdd45d51576354cb18b7c1c7cec76f829e20105f
@@ -192,7 +336,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.13.1.tgz
    version: 0.13.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.685555102Z"
+    created: "2021-08-05T11:27:25.183222861Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 5183ed825c4f255ca5a4f0ffeb8c92bbad3c43b42fc1b798f1f1fc6de2a30bef
@@ -202,7 +346,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.13.0.tgz
    version: 0.13.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.685021695Z"
+    created: "2021-08-05T11:27:25.182643955Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: e131a502d12a6b074453f1da8d0d1ca7145e80a025f31252b24cc3d62375a4c1
@@ -212,7 +356,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.12.2.tgz
    version: 0.12.2
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.684531688Z"
+    created: "2021-08-05T11:27:25.18212595Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 8e1a25d18a546c4ec5e970991301a08e38495a964a8f6e0a2ee97f92c41c9691
@@ -222,7 +366,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.12.1.tgz
    version: 0.12.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.684047381Z"
+    created: "2021-08-05T11:27:25.181549144Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: f38a6f2fbf5c847b00a9140ecd004e0bf667d859aa83d8dac4a2d0eecd1a361f
@@ -232,7 +376,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.12.0.tgz
    version: 0.12.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.683553275Z"
+    created: "2021-08-05T11:27:25.180952538Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 75c16f84b5e99aad5aa7203f5c1ce2a9589d85b89afec4e161a2e0344a522c17
@@ -242,7 +386,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.11.0.tgz
    version: 0.11.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.682549461Z"
+    created: "2021-08-05T11:27:25.180395732Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 40f1166e858d35cb237debd1390187884641b0e8c29a80aaa195b66b0ee73516
@@ -252,7 +396,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.10.0.tgz
    version: 0.10.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.701366515Z"
+    created: "2021-08-05T11:27:25.208939326Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: cb42b08b463b401f6718bba7c171ee55c173021c5101ea1b3068ef3899a6e164
@@ -262,7 +406,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.9.0.tgz
    version: 0.9.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.700907009Z"
+    created: "2021-08-05T11:27:25.208402421Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: ce046d209a9e8fa07766712492cc896451473fafca129dbc9c675107d0e39c52
@@ -272,7 +416,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.8.2.tgz
    version: 0.8.2
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.7002535Z"
+    created: "2021-08-05T11:27:25.207874215Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 422d7e6ea1bed530d4cd5e23417b229772a6fe2e835828ca282a3e6c9b646b2b
@@ -282,7 +426,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.8.1.tgz
    version: 0.8.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.699720393Z"
+    created: "2021-08-05T11:27:25.207415011Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 8001bd02fc90ad66da7941c136ee8d0e665ea90b6e1ac27d82b048f2b12b3964
@@ -292,7 +436,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.8.0.tgz
    version: 0.8.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.699200386Z"
+    created: "2021-08-05T11:27:25.206976306Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: d1454b430eb7131d0d450f7c0a8a6698278893c61e03d48649a8112dfcf42b72
@@ -302,7 +446,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.7.1.tgz
    version: 0.7.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.698716179Z"
+    created: "2021-08-05T11:27:25.206568102Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 4bf90835f287917671ec40b5b395da9332cf18e70f248d250f8d5a72360dcb4e
@@ -312,7 +456,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.7.0.tgz
    version: 0.7.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.697973969Z"
+    created: "2021-08-05T11:27:25.206158298Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 0cade489fc74a040f5e7f71d01c6fa00d3f68b4752a4d8234ccf2c1504b4c0a1
@@ -322,7 +466,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.6.1.tgz
    version: 0.6.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.697142658Z"
+    created: "2021-08-05T11:27:25.205746593Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: d607820a7e104eaaa88c153c1f2f7f409ef4c612ad747caeb3a671cf3fce03d4
@@ -332,7 +476,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.6.0.tgz
    version: 0.6.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.696830554Z"
+    created: "2021-08-05T11:27:25.205325489Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: ddf7cf87402095d62855898744b805115fdf86c4b295e0a4def0c50408fd9138
@@ -342,7 +486,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.5.1.tgz
    version: 0.5.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.69653505Z"
+    created: "2021-08-05T11:27:25.204996486Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: adf3c2cf3a27e58ec75620599e0e1c2031a7410a061a590317beeff6d8a9ad69
@@ -352,7 +496,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.5.0.tgz
    version: 0.5.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.696234846Z"
+    created: "2021-08-05T11:27:25.204671882Z"
    description: One chart to rule them all. A generic Helm chart for your application
      deployments. Because no-one can remember the Kubernetes yaml syntax.
    digest: 8dab33263c4e632aeb4656c666871440b589497b70e76a1d6c3a5e3db1a30bba
@@ -362,7 +506,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.4.0.tgz
    version: 0.4.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.695938142Z"
+    created: "2021-08-05T11:27:25.204346579Z"
    description: A generic Helm chart for your application deployments
    digest: fbaf6139e0ef8ad9a87cc1e41a97c7d25fdcf7ea17fa6364952f1a851a87480a
    name: onechart
@@ -371,7 +515,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.3.2.tgz
    version: 0.3.2
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.695676438Z"
+    created: "2021-08-05T11:27:25.204058176Z"
    description: A generic Helm chart for your application deployments
    digest: bd6f5b1865ab9b05fc6925c163ab8045235bd2723dba31f09d5083d24322d1f8
    name: onechart
@@ -380,7 +524,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.3.1.tgz
    version: 0.3.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.695394434Z"
+    created: "2021-08-05T11:27:25.203715572Z"
    description: A generic Helm chart for your application deployments
    digest: c79cef21eceab948144a289298cdf1e20e77a0782a883d7d65f9e709ccbbc271
    name: onechart
@@ -389,7 +533,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.3.0.tgz
    version: 0.3.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.693316006Z"
+    created: "2021-08-05T11:27:25.192855561Z"
    description: A generic Helm chart for your application deployments
    digest: dd814ac5d08d5e6163a1b769df6803f5cb0f09d906045086dfcc5be522bb1ec3
    name: onechart
@@ -398,7 +542,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.2.0.tgz
    version: 0.2.0
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.682078855Z"
+    created: "2021-08-05T11:27:25.179858627Z"
    description: A generic Helm chart for your application deployments
    digest: e46062df8053840cbfbba26c0a66a843a79f15a0b43a145ed019327513bd5098
    name: onechart
@@ -407,7 +551,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.1.2.tgz
    version: 0.1.2
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.681793351Z"
+    created: "2021-08-05T11:27:25.179536023Z"
    description: A generic Helm chart for your application deployments
    digest: a7bbc8b7dcc008e89156cd1830282b7d39c0592e82ccdcefb77a25a42eca2a3d
    name: onechart
@@ -416,7 +560,7 @@ entries:
    - https://chart.onechart.dev/onechart-0.1.1.tgz
    version: 0.1.1
  - apiVersion: v2
-    created: "2021-06-22T12:52:32.681517747Z"
+    created: "2021-08-05T11:27:25.17922662Z"
    description: A generic Helm chart for your application deployments
    digest: 1ed8c0645abdae6c950526e9c5410dc056847a11700dc7def5f1c55eb7de0cd4
    name: onechart
@@ -424,4 +568,4 @@ entries:
    urls:
    - https://chart.onechart.dev/onechart-0.1.0.tgz
    version: 0.1.0
-generated: "2021-06-22T12:52:32.679436319Z"
+generated: "2021-08-05T11:27:25.174314569Z"
@@ -0,0 +1,17 @@
+image:
+  repository: debian
+  tag: stable-slim
+
+schedule: "*/1 * * * *"
+command: |
+  echo "I'm alive"
+shell: "/bin/sh"
+
+vars:
+  MY_VAR: "value"
+
+volumes:
+  - name: data
+    path: /data
+    size: 10Gi
+    storageClass: default
@@ -4,8 +4,22 @@ ingress:
    kubernetes.io/ingress.class: nginx
 ingresses:
  - host: chart-example.local
+    tlsEnabled: true
    annotations:
      kubernetes.io/ingress.class: nginx
  - host: another.local
+    tlsEnabled: true
    annotations:
-      kubernetes.io/ingress.class: nginx
+      kubernetes.io/ingress.class: nginx
+
+gitRepository: github.com/laszlocph/demo-app
+gitSha: xyz
+
+vars:
+  MY_VAR: "value"
+
+volumes:
+  - name: data
+    path: /data
+    size: 10Gi
+    storageClass: default
Author	SHA1	Message	Date
Laszlo Fogas	269ab7e376	Using unique names for TLS secrets	2021-08-13 09:10:47 +02:00
Laszlo Fogas	324617b0de	0.27.0 coming after RCs	2021-08-13 08:46:49 +02:00
Github Action	6a897ff5a3	The next release version will be 0.28.0	2021-08-05 11:27:26 +00:00
Github Action	10205747f2	Publishing 0.27.0-rc3 to the Helm repository	2021-08-05 11:27:25 +00:00
Laszlo Fogas	c56e2aa5b4	Fixing robustName helper	2021-08-05 13:26:49 +02:00
Github Action	167ce8cff5	The next release version will be 0.28.0	2021-08-05 10:26:05 +00:00
Github Action	539caf68a0	Publishing 0.27.0-rc2 to the Helm repository	2021-08-05 10:26:04 +00:00
Laszlo Fogas	eec4f30c67	Added json schema and ui meta data to cronjob	2021-08-05 12:25:23 +02:00
Github Action	9609cc2c3a	The next release version will be 0.28.0	2021-08-05 10:07:25 +00:00
Github Action	59a5bfde2f	Publishing 0.27.0-rc1 to the Helm repository	2021-08-05 10:07:25 +00:00
Laszlo Fogas	98390f73c8	Merge pull request #27 from gimlet-io/schedule-support Using common chart	2021-08-05 12:05:59 +02:00
Github Action	8417a0363d	Publishing 0.27.0-rc1 to the Helm repository	2021-08-05 09:58:13 +00:00
Laszlo Fogas	5910080e17	Fixing release script to not fail on dependency charts	2021-08-05 11:57:18 +02:00
Laszlo Fogas	922111d2de	Preparing for rc release	2021-08-05 11:52:28 +02:00
Laszlo Fogas	4352af0abc	Moved var and secret support to common	2021-08-05 11:50:18 +02:00
Laszlo Fogas	164bfec8b3	Moved volume support to common	2021-08-05 11:50:18 +02:00
Laszlo Fogas	d91040c0a0	Job constraints configurable	2021-08-05 11:50:18 +02:00
Laszlo Fogas	4942164b9a	Testing of common chart	2021-08-05 11:50:17 +02:00
Github Action	1082767c59	The next release version will be 0.27.0	2021-08-02 06:50:06 +00:00
Github Action	74c16555dd	Publishing 0.26.0 to the Helm repository	2021-08-02 06:50:02 +00:00
Laszlo Fogas	ae6c219132	Supporting secretName without secretEnabled	2021-08-02 08:46:29 +02:00
Laszlo Fogas	ade37a82c7	Merge pull request #25 from msbsh/fix/ingress-svc-port fix: Makes use of svcPort within ingress, when defined;	2021-07-29 15:24:31 +02:00
Martin James	b249805bf3	fix: Makes use of svcPort within ingress, when defined;	2021-07-27 18:22:05 +02:00
Github Action	efd5d819f3	The next release version will be 0.26.0	2021-07-27 08:10:15 +00:00
Github Action	b2700d990d	Publishing 0.25.0 to the Helm repository	2021-07-27 08:10:13 +00:00
Laszlo Fogas	d0d0b28c9a	Deployment strategy is configurable; still having the single replica volume rule	2021-07-27 10:02:54 +02:00
Github Action	0a162de948	The next release version will be 0.25.0	2021-07-26 09:34:33 +00:00
Github Action	442c98f5d1	Publishing 0.24.1 to the Helm repository	2021-07-26 09:34:30 +00:00
Laszlo Fogas	73fd1235c2	Fixing duplicated annotation; added tests; prepped for bugfix release	2021-07-26 11:30:57 +02:00
Github Action	c68e979ba0	The next release version will be 0.25.0	2021-07-19 14:27:45 +00:00
Github Action	96e8f0db60	Publishing 0.24.0 to the Helm repository	2021-07-19 14:27:42 +00:00
Laszlo Fogas	46cd92059c	Merge pull request #24 from gimlet-io/gimlet-taxonomy Set Gimlet service taxonomy if git data is set	2021-07-19 16:26:02 +02:00
Laszlo Fogas	0000ad9f4b	Set Gimlet service taxonomy if git data is set	2021-07-19 16:23:20 +02:00
Github Action	7642eb3dc7	The next release version will be 0.24.0	2021-07-19 13:08:48 +00:00
Github Action	3326cd3c38	Publishing 0.23.0 to the Helm repository	2021-07-19 13:08:46 +00:00
				`@@ -0,0 +1 @@`
				`{{- include "common.sealedFileSecret.tpl" . -}}`
				`@@ -0,0 +1 @@`
				`{{- include "common.sealedSecret.tpl" . -}}`