42 changed files with 0 additions and 2151 deletions
@ -1,24 +0,0 @@ |
|||||
apiVersion: v2 |
|
||||
name: sigibkp |
|
||||
description: Backup Sistema de Informações Gerenciais do Interlegis (SIGI) |
|
||||
|
|
||||
# A chart can be either an 'application' or a 'library' chart. |
|
||||
#type: application |
|
||||
|
|
||||
# This is the chart version. This version number should be incremented each time you make changes |
|
||||
# to the chart and its templates, including the app version. |
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/) |
|
||||
version: 0.2.0 |
|
||||
|
|
||||
# This is the version number of the application being deployed. This version number should be |
|
||||
# incremented each time you make changes to the application. Versions are not expected to |
|
||||
# follow Semantic Versioning. They should reflect the version the application is using. |
|
||||
#appVersion: 3.0.0 |
|
||||
|
|
||||
#icon: https://git.interlegis.leg.br/SEIT/rancher-charts/raw/master/images/sigi_interlegis.png |
|
||||
# |
|
||||
#dependencies: |
|
||||
#- name: postgresql |
|
||||
# version: 11.6.8 |
|
||||
# repository: https://charts.bitnami.com/bitnami |
|
||||
# condition: postgresql.internal |
|
||||
@ -1,3 +0,0 @@ |
|||||
# Backup Sistema de Informações Gerenciais do Interlegis |
|
||||
|
|
||||
Utilize o formulário abaixo para configurar o Backup do SIGI. |
|
||||
@ -1,171 +0,0 @@ |
|||||
labels: |
|
||||
io.cattle.role: project |
|
||||
categories: |
|
||||
- Gerencial |
|
||||
|
|
||||
questions: |
|
||||
|
|
||||
## Informações Básicas |
|
||||
#- variable: sigi.hostname |
|
||||
# default: sigidsv.interlegis.leg.br |
|
||||
# description: "Endereço para acesso ao SIGI" |
|
||||
# label: "URL do SIGI" |
|
||||
# type: string |
|
||||
# group: Básico |
|
||||
# required: true |
|
||||
# |
|
||||
# |
|
||||
## Ingress |
|
||||
#- variable: ingress.tls.enabled |
|
||||
# default: true |
|
||||
# type: boolean |
|
||||
# description: "Habilitar criptografia do protocolo HTTP (HTTPS)?" |
|
||||
# label: "Habilitar TLS?" |
|
||||
# required: false |
|
||||
# group: Ingress |
|
||||
# show_subquestion_if: true |
|
||||
# subquestions: |
|
||||
# - variable: ingress.tls.provider |
|
||||
# default: letsencrypt |
|
||||
# type: enum |
|
||||
# description: "Qual provedor de certificados utilizar?" |
|
||||
# label: "Provedor de certificados" |
|
||||
# required: false |
|
||||
# group: Ingress |
|
||||
# options: |
|
||||
# - letsencrypt |
|
||||
# - letsencrypt-hml |
|
||||
# - aws |
|
||||
# |
|
||||
#- variable: ingress.class |
|
||||
# default: nginx |
|
||||
# type: enum |
|
||||
# description: "Qual o Ingress Controller?" |
|
||||
# label: "Classe Ingress" |
|
||||
# required: false |
|
||||
# group: Ingress |
|
||||
# options: |
|
||||
# - nginx |
|
||||
# - alb |
|
||||
# |
|
||||
## Correio |
|
||||
#- variable: sigi.emailSendUser |
|
||||
# default: "sigi@interlegis.leg.br" |
|
||||
# description: "Remetente dos e-mails enviados pelo SIGI" |
|
||||
# label: "Remetente" |
|
||||
# type: string |
|
||||
# group: Correio |
|
||||
# required: false |
|
||||
#- variable: sigi.useTls |
|
||||
# default: "False" |
|
||||
# description: "Usar TLS ao conectar no servidor SMTP?" |
|
||||
# label: "Usar TLS" |
|
||||
# type: enum |
|
||||
# group: Correio |
|
||||
# options: |
|
||||
# - "True" |
|
||||
# - "False" |
|
||||
# required: false |
|
||||
#- variable: sigi.emailPort |
|
||||
# default: 25 |
|
||||
# description: "Porta de envio de E-mail (SMTP)" |
|
||||
# type: int |
|
||||
# label: "Porta SMTP" |
|
||||
# required: false |
|
||||
# group: Correio |
|
||||
#- variable: sigi.emailHost |
|
||||
# default: "smtp.interlegis.leg.br" |
|
||||
# description: "Servidor de envio de e-mail (SMTP)" |
|
||||
# label: "Servidor SMTP" |
|
||||
# type: string |
|
||||
# group: Correio |
|
||||
# required: false |
|
||||
|
|
||||
## PostgreSQL |
|
||||
#- variable: postgresql.internal |
|
||||
# default: true |
|
||||
# description: "Fazer o deploy do Postgres?" |
|
||||
# label: "Postgres Interno?" |
|
||||
# type: boolean |
|
||||
# group: PostgreSQL |
|
||||
# required: false |
|
||||
#- variable: postgresql.auth.Password |
|
||||
# default: "sigi" |
|
||||
# description: "Senha do banco de dados Postgres" |
|
||||
# label: "Senha do Postgres" |
|
||||
# type: password |
|
||||
# group: PostgreSQL |
|
||||
# required: true |
|
||||
|
|
||||
## Avançado |
|
||||
#- variable: sigi.debug |
|
||||
# default: "False" |
|
||||
# description: "Habilitar mensagens de Debug?" |
|
||||
# label: "Debug?" |
|
||||
# type: enum |
|
||||
# options: |
|
||||
# - "True" |
|
||||
# - "False" |
|
||||
# group: Avançado |
|
||||
# required: true |
|
||||
# |
|
||||
#- variable: image.tag |
|
||||
# default: 3.0.0 |
|
||||
# description: "Versão da imagem docker do SIGI a ser utilizada" |
|
||||
# label: "versão do SIGI" |
|
||||
# type: string |
|
||||
# group: Avançado |
|
||||
# required: true |
|
||||
|
|
||||
#- variable: image.pullPolicy |
|
||||
# default: IfNotPresent |
|
||||
# description: "Politica de carga da imagem docker do SIGI." |
|
||||
# label: "Carregar a imagem apenas quando não estiver presente?" |
|
||||
# type: enum |
|
||||
# options: |
|
||||
# - IfNotPresent |
|
||||
# - Always |
|
||||
# group: Avançado |
|
||||
# required: true |
|
||||
|
|
||||
#- variable: sigi.timeZone |
|
||||
# default: "America/Sao_Paulo" |
|
||||
# description: "Fuso Horário do SIGI" |
|
||||
# label: "Fuso" |
|
||||
# type: enum |
|
||||
# options: |
|
||||
# - "America/Sao_Paulo" |
|
||||
# - "America/Fortaleza" |
|
||||
# - "America/Belem" |
|
||||
# - "America/Araguaina" |
|
||||
# - "America/Bahia" |
|
||||
# - "America/Boa_Vista" |
|
||||
# - "America/Campo_Grande" |
|
||||
# - "America/Cuiaba" |
|
||||
# - "America/Maceio" |
|
||||
# - "America/Manaus" |
|
||||
# - "America/Porto_Velho" |
|
||||
# - "America/Recife" |
|
||||
# - "America/Rio_Branco" |
|
||||
# - "America/Sao_Paulo" |
|
||||
# group: Avançado |
|
||||
# required: true |
|
||||
|
|
||||
# Backup |
|
||||
- variable: velero.backup.enabled |
|
||||
default: true |
|
||||
label: "Habilitar backup com Velero?" |
|
||||
description: "Criar ou não os objetos para backup com o Velero." |
|
||||
type: boolean |
|
||||
group: Backup |
|
||||
required: true |
|
||||
|
|
||||
- variable: velero.backup.instance |
|
||||
default: sigi |
|
||||
label: "Nome da instância?" |
|
||||
description: "Nome da instância para backup com o Velero." |
|
||||
type: string |
|
||||
group: Backup |
|
||||
required: true |
|
||||
|
|
||||
|
|
||||
@ -1,58 +0,0 @@ |
|||||
{{/* |
|
||||
Expand the name of the chart. |
|
||||
*/}} |
|
||||
{{- define "sigibkp.name" -}} |
|
||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create a default fully qualified app name. |
|
||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). |
|
||||
If release name contains chart name it will be used as a full name. |
|
||||
*/}} |
|
||||
{{- define "sigibkp.fullname" -}} |
|
||||
{{- if .Values.fullnameOverride }} |
|
||||
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} |
|
||||
{{- else }} |
|
||||
{{- $name := default .Chart.Name .Values.nameOverride }} |
|
||||
{{- if contains $name .Release.Name }} |
|
||||
{{- .Release.Name | trunc 63 | trimSuffix "-" }} |
|
||||
{{- else }} |
|
||||
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create chart name and version as used by the chart label. |
|
||||
*/}} |
|
||||
{{- define "sigibkp.chart" -}} |
|
||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Common labels |
|
||||
*/}} |
|
||||
{{- define "sigibkp.labels" -}} |
|
||||
helm.sh/chart: {{ include "sigibkp.chart" . }} |
|
||||
{{ include "sigibkp.selectorLabels" . }} |
|
||||
{{- if .Chart.AppVersion }} |
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} |
|
||||
{{- end }} |
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Selector labels |
|
||||
*/}} |
|
||||
{{- define "sigibkp.selectorLabels" -}} |
|
||||
app.kubernetes.io/name: {{ include "sigibkp.name" . }} |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create a default fully qualified app name for postgresql. |
|
||||
*/}} |
|
||||
{{- define "postgresql.fullname" -}} |
|
||||
{{- printf "%s-%s" .Release.Name "postgresql" | trunc 63 | trimSuffix "-" -}} |
|
||||
{{- end -}} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ .Values.velero.backup.instance }}-monthly |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on first day of every month |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} 1 * * |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every weekday backup is good for the next year (365 days) |
|
||||
ttl: 8760h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Values.velero.backup.instance }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ .Values.velero.backup.instance }}-weekdays |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on weekdays |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} * * 1-5 |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every weekday backup is good for the next week (7 days) |
|
||||
ttl: 168h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Values.velero.backup.instance }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ .Values.velero.backup.instance }}-weekly |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on sunday |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} * * 0 |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every sunday backup is good for 30 days (aprox. 1 month) |
|
||||
ttl: 744h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Values.velero.backup.instance }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,19 +0,0 @@ |
|||||
# Default values for sigibkp. |
|
||||
# This is a YAML-formatted file. |
|
||||
# Declare variables to be passed into your templates. |
|
||||
|
|
||||
velero: |
|
||||
namespace: velero |
|
||||
backup: |
|
||||
enabled: true |
|
||||
instance: sigi |
|
||||
snapshotVolumes: false |
|
||||
defaultVolumesToRestic: true |
|
||||
# cert-manager objects are usually blocked during backup |
|
||||
excludedResources: |
|
||||
- certificates.cert-manager.io |
|
||||
- orders.acme.cert-manager.io |
|
||||
- certificaterequests.cert-manager.io |
|
||||
- challenges.acme.cert-manager.io |
|
||||
|
|
||||
|
|
||||
@ -1,6 +0,0 @@ |
|||||
dependencies: |
|
||||
- name: postgresql |
|
||||
repository: https://charts.bitnami.com/bitnami |
|
||||
version: 11.6.8 |
|
||||
digest: sha256:ee4247460b887d3cc558f76c85980fe6848624c688b855100d9863bef6830ed0 |
|
||||
generated: "2022-06-24T12:28:18.011798975-03:00" |
|
||||
@ -1,24 +0,0 @@ |
|||||
apiVersion: v2 |
|
||||
name: sigi |
|
||||
description: Sistema de Informações Gerenciais do Interlegis (SIGI) |
|
||||
|
|
||||
# A chart can be either an 'application' or a 'library' chart. |
|
||||
type: application |
|
||||
|
|
||||
# This is the chart version. This version number should be incremented each time you make changes |
|
||||
# to the chart and its templates, including the app version. |
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/) |
|
||||
version: 0.2.1 |
|
||||
|
|
||||
# This is the version number of the application being deployed. This version number should be |
|
||||
# incremented each time you make changes to the application. Versions are not expected to |
|
||||
# follow Semantic Versioning. They should reflect the version the application is using. |
|
||||
appVersion: 3.0.0 |
|
||||
|
|
||||
icon: https://git.interlegis.leg.br/SEIT/rancher-charts/raw/master/images/sigi_interlegis.png |
|
||||
|
|
||||
dependencies: |
|
||||
- name: postgresql |
|
||||
version: 11.6.8 |
|
||||
repository: https://charts.bitnami.com/bitnami |
|
||||
condition: postgresql.internal |
|
||||
@ -1,3 +0,0 @@ |
|||||
# Sistema de Informações Gerenciais do Interlegis |
|
||||
|
|
||||
Utilize o formulário abaixo para configurar o SIGI. |
|
||||
Binary file not shown.
@ -1,162 +0,0 @@ |
|||||
labels: |
|
||||
io.cattle.role: project |
|
||||
categories: |
|
||||
- Gerencial |
|
||||
|
|
||||
questions: |
|
||||
|
|
||||
# Informações Básicas |
|
||||
- variable: sigi.hostname |
|
||||
default: sigidsv.interlegis.leg.br |
|
||||
description: "Endereço para acesso ao SIGI" |
|
||||
label: "URL do SIGI" |
|
||||
type: string |
|
||||
group: Básico |
|
||||
required: true |
|
||||
|
|
||||
|
|
||||
# Ingress |
|
||||
- variable: ingress.tls.enabled |
|
||||
default: true |
|
||||
type: boolean |
|
||||
description: "Habilitar criptografia do protocolo HTTP (HTTPS)?" |
|
||||
label: "Habilitar TLS?" |
|
||||
required: false |
|
||||
group: Ingress |
|
||||
show_subquestion_if: true |
|
||||
subquestions: |
|
||||
- variable: ingress.tls.provider |
|
||||
default: letsencrypt |
|
||||
type: enum |
|
||||
description: "Qual provedor de certificados utilizar?" |
|
||||
label: "Provedor de certificados" |
|
||||
required: false |
|
||||
group: Ingress |
|
||||
options: |
|
||||
- letsencrypt |
|
||||
- letsencrypt-hml |
|
||||
- aws |
|
||||
|
|
||||
- variable: ingress.class |
|
||||
default: nginx |
|
||||
type: enum |
|
||||
description: "Qual o Ingress Controller?" |
|
||||
label: "Classe Ingress" |
|
||||
required: false |
|
||||
group: Ingress |
|
||||
options: |
|
||||
- nginx |
|
||||
- alb |
|
||||
|
|
||||
## Correio |
|
||||
#- variable: sigi.emailSendUser |
|
||||
# default: "sigi@interlegis.leg.br" |
|
||||
# description: "Remetente dos e-mails enviados pelo SIGI" |
|
||||
# label: "Remetente" |
|
||||
# type: string |
|
||||
# group: Correio |
|
||||
# required: false |
|
||||
#- variable: sigi.useTls |
|
||||
# default: "False" |
|
||||
# description: "Usar TLS ao conectar no servidor SMTP?" |
|
||||
# label: "Usar TLS" |
|
||||
# type: enum |
|
||||
# group: Correio |
|
||||
# options: |
|
||||
# - "True" |
|
||||
# - "False" |
|
||||
# required: false |
|
||||
#- variable: sigi.emailPort |
|
||||
# default: 25 |
|
||||
# description: "Porta de envio de E-mail (SMTP)" |
|
||||
# type: int |
|
||||
# label: "Porta SMTP" |
|
||||
# required: false |
|
||||
# group: Correio |
|
||||
#- variable: sigi.emailHost |
|
||||
# default: "smtp.interlegis.leg.br" |
|
||||
# description: "Servidor de envio de e-mail (SMTP)" |
|
||||
# label: "Servidor SMTP" |
|
||||
# type: string |
|
||||
# group: Correio |
|
||||
# required: false |
|
||||
|
|
||||
## PostgreSQL |
|
||||
#- variable: postgresql.internal |
|
||||
# default: true |
|
||||
# description: "Fazer o deploy do Postgres?" |
|
||||
# label: "Postgres Interno?" |
|
||||
# type: boolean |
|
||||
# group: PostgreSQL |
|
||||
# required: false |
|
||||
#- variable: postgresql.auth.Password |
|
||||
# default: "sigi" |
|
||||
# description: "Senha do banco de dados Postgres" |
|
||||
# label: "Senha do Postgres" |
|
||||
# type: password |
|
||||
# group: PostgreSQL |
|
||||
# required: true |
|
||||
|
|
||||
# Avançado |
|
||||
- variable: sigi.debug |
|
||||
default: "False" |
|
||||
description: "Habilitar mensagens de Debug?" |
|
||||
label: "Debug?" |
|
||||
type: enum |
|
||||
options: |
|
||||
- "True" |
|
||||
- "False" |
|
||||
group: Avançado |
|
||||
required: true |
|
||||
|
|
||||
- variable: image.tag |
|
||||
default: 3.0.0 |
|
||||
description: "Versão da imagem docker do SIGI a ser utilizada" |
|
||||
label: "versão do SIGI" |
|
||||
type: string |
|
||||
group: Avançado |
|
||||
required: true |
|
||||
|
|
||||
- variable: image.pullPolicy |
|
||||
default: IfNotPresent |
|
||||
description: "Politica de carga da imagem docker do SIGI." |
|
||||
label: "Carregar a imagem apenas quando não estiver presente?" |
|
||||
type: enum |
|
||||
options: |
|
||||
- IfNotPresent |
|
||||
- Always |
|
||||
group: Avançado |
|
||||
required: true |
|
||||
|
|
||||
#- variable: sigi.timeZone |
|
||||
# default: "America/Sao_Paulo" |
|
||||
# description: "Fuso Horário do SIGI" |
|
||||
# label: "Fuso" |
|
||||
# type: enum |
|
||||
# options: |
|
||||
# - "America/Sao_Paulo" |
|
||||
# - "America/Fortaleza" |
|
||||
# - "America/Belem" |
|
||||
# - "America/Araguaina" |
|
||||
# - "America/Bahia" |
|
||||
# - "America/Boa_Vista" |
|
||||
# - "America/Campo_Grande" |
|
||||
# - "America/Cuiaba" |
|
||||
# - "America/Maceio" |
|
||||
# - "America/Manaus" |
|
||||
# - "America/Porto_Velho" |
|
||||
# - "America/Recife" |
|
||||
# - "America/Rio_Branco" |
|
||||
# - "America/Sao_Paulo" |
|
||||
# group: Avançado |
|
||||
# required: true |
|
||||
|
|
||||
## Backup |
|
||||
#- variable: velero.backup.enabled |
|
||||
# default: false |
|
||||
# label: "Habilitar backup com Velero?" |
|
||||
# description: "Criar ou não os objetos para backup com o Velero." |
|
||||
# type: boolean |
|
||||
# group: Backup |
|
||||
# required: false |
|
||||
|
|
||||
@ -1,5 +0,0 @@ |
|||||
1. Seu SIGI pode ser acessado através da URL: |
|
||||
{{- if .Values.ingress.enabled }} |
|
||||
http{{ if .Values.ingress.tls.enabled }}s{{ end }}://{{ .Values.sigi.hostname }} |
|
||||
{{- end }} |
|
||||
|
|
||||
@ -1,58 +0,0 @@ |
|||||
{{/* |
|
||||
Expand the name of the chart. |
|
||||
*/}} |
|
||||
{{- define "sigi.name" -}} |
|
||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create a default fully qualified app name. |
|
||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). |
|
||||
If release name contains chart name it will be used as a full name. |
|
||||
*/}} |
|
||||
{{- define "sigi.fullname" -}} |
|
||||
{{- if .Values.fullnameOverride }} |
|
||||
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} |
|
||||
{{- else }} |
|
||||
{{- $name := default .Chart.Name .Values.nameOverride }} |
|
||||
{{- if contains $name .Release.Name }} |
|
||||
{{- .Release.Name | trunc 63 | trimSuffix "-" }} |
|
||||
{{- else }} |
|
||||
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create chart name and version as used by the chart label. |
|
||||
*/}} |
|
||||
{{- define "sigi.chart" -}} |
|
||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Common labels |
|
||||
*/}} |
|
||||
{{- define "sigi.labels" -}} |
|
||||
helm.sh/chart: {{ include "sigi.chart" . }} |
|
||||
{{ include "sigi.selectorLabels" . }} |
|
||||
{{- if .Chart.AppVersion }} |
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} |
|
||||
{{- end }} |
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Selector labels |
|
||||
*/}} |
|
||||
{{- define "sigi.selectorLabels" -}} |
|
||||
app.kubernetes.io/name: {{ include "sigi.name" . }} |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create a default fully qualified app name for postgresql. |
|
||||
*/}} |
|
||||
{{- define "postgresql.fullname" -}} |
|
||||
{{- printf "%s-%s" .Release.Name "postgresql" | trunc 63 | trimSuffix "-" -}} |
|
||||
{{- end -}} |
|
||||
@ -1,220 +0,0 @@ |
|||||
apiVersion: apps/v1 |
|
||||
kind: Deployment |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
{{- if not .Values.autoscaling.enabled }} |
|
||||
replicas: {{ .Values.replicaCount }} |
|
||||
{{- end }} |
|
||||
selector: |
|
||||
matchLabels: |
|
||||
{{- include "sigi.selectorLabels" . | nindent 6 }} |
|
||||
template: |
|
||||
metadata: |
|
||||
{{- with .Values.podAnnotations }} |
|
||||
annotations: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
labels: |
|
||||
{{- include "sigi.selectorLabels" . | nindent 8 }} |
|
||||
spec: |
|
||||
{{- with .Values.imagePullSecrets }} |
|
||||
imagePullSecrets: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
securityContext: |
|
||||
{{- toYaml .Values.podSecurityContext | nindent 8 }} |
|
||||
containers: |
|
||||
- name: {{ .Chart.Name }} |
|
||||
securityContext: |
|
||||
{{- toYaml .Values.securityContext | nindent 12 }} |
|
||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" |
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }} |
|
||||
ports: |
|
||||
- name: http |
|
||||
containerPort: 80 |
|
||||
protocol: TCP |
|
||||
env: |
|
||||
- name: DEBUG |
|
||||
value: "{{ .Values.sigi.debug }}" |
|
||||
- name: TZ |
|
||||
value: "{{ .Values.sigi.timeZone }}" |
|
||||
- name: LANG |
|
||||
value: "{{ .Values.sigi.language }}" |
|
||||
- name: DATABASE_URL |
|
||||
value: {{ printf "postgresql://%s:%s@%s:5432/%s" .Values.postgresql.auth.username .Values.postgresql.auth.password (include "postgresql.fullname" .) .Values.postgresql.auth.database| quote }} |
|
||||
- name: ADMINS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: ADMINS |
|
||||
- name: EMAIL_PORT |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: EMAIL_PORT |
|
||||
- name: EMAIL_HOST |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: EMAIL_HOST |
|
||||
- name: DEFAULT_FROM_EMAIL |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: DEFAULT_FROM_EMAIL |
|
||||
- name: AUTH_LDAP_SERVER_URI |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_SERVER_URI |
|
||||
- name: AUTH_LDAP_BIND_DN |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_BIND_DN |
|
||||
- name: AUTH_LDAP_USER |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_USER |
|
||||
- name: AUTH_LDAP_USER_SEARCH_STRING |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_USER_SEARCH_STRING |
|
||||
- name: AUTH_LDAP_GROUP |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP |
|
||||
- name: AUTH_LDAP_GROUP_SEARCH_STRING |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP_SEARCH_STRING |
|
||||
- name: AUTH_LDAP_GROUP_TYPE_STRING |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP_TYPE_STRING |
|
||||
- name: AUTH_LDAP_USER_ATTR_MAP |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_USER_ATTR_MAP |
|
||||
- name: AUTH_LDAP_PROFILE_ATTR_MAP |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_PROFILE_ATTR_MAP |
|
||||
- name: AUTH_LDAP_FIND_GROUP_PERMS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_FIND_GROUP_PERMS |
|
||||
- name: AUTH_LDAP_MIRROR_GROUPS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_MIRROR_GROUPS |
|
||||
- name: AUTH_LDAP_CACHE_GROUPS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_CACHE_GROUPS |
|
||||
- name: AUTH_LDAP_GROUP_CACHE_TIMEOUT |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP_CACHE_TIMEOUT |
|
||||
- name: AUTH_PROFILE_MODULE |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_PROFILE_MODULE |
|
||||
- name: AUTH_LDAP_BIND_PASSWORD |
|
||||
valueFrom: |
|
||||
# Secret Key |
|
||||
secretKeyRef: |
|
||||
name: sigi-auth-ldap-key |
|
||||
key: AUTH_LDAP_BIND_PASSWORD |
|
||||
volumeMounts: |
|
||||
# - mountPath: /var/interlegis/sigi/data |
|
||||
# name: data |
|
||||
- mountPath: /srv/interlegis/sigi/media |
|
||||
name: {{ include "sigi.fullname" . }}-media |
|
||||
livenessProbe: |
|
||||
httpGet: |
|
||||
path: / |
|
||||
port: http |
|
||||
initialDelaySeconds: 60 |
|
||||
failureThreshold: 3 |
|
||||
periodSeconds: 60 |
|
||||
successThreshold: 1 |
|
||||
timeoutSeconds: 5 |
|
||||
readinessProbe: |
|
||||
httpGet: |
|
||||
path: / |
|
||||
port: http |
|
||||
initialDelaySeconds: 60 |
|
||||
failureThreshold: 3 |
|
||||
periodSeconds: 30 |
|
||||
successThreshold: 1 |
|
||||
timeoutSeconds: 5 |
|
||||
resources: |
|
||||
{{- toYaml .Values.resources | nindent 12 }} |
|
||||
volumes: |
|
||||
# - name: data |
|
||||
# secret: |
|
||||
# defaultMode: 440 |
|
||||
# secretName: {{ include "sigi.fullname" . }}-secretkey |
|
||||
- name: {{ include "sigi.fullname" . }}-media |
|
||||
{{- if .Values.persistence.enabled }} |
|
||||
persistentVolumeClaim: |
|
||||
claimName: {{ include "sigi.fullname" . }}-media |
|
||||
{{- else }} |
|
||||
emptyDir: {} |
|
||||
{{- end }} |
|
||||
{{- with .Values.nodeSelector }} |
|
||||
nodeSelector: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
affinity: |
|
||||
podAffinity: |
|
||||
preferredDuringSchedulingIgnoredDuringExecution: |
|
||||
- weight: 100 |
|
||||
podAffinityTerm: |
|
||||
labelSelector: |
|
||||
matchExpressions: |
|
||||
- key: app.kubernetes.io/name |
|
||||
operator: In |
|
||||
values: |
|
||||
- {{ include "sigi.name" . }} |
|
||||
- key: app.kubernetes.io/instance |
|
||||
operator: In |
|
||||
values: |
|
||||
- {{ .Release.Name }} |
|
||||
topologyKey: kubernetes.io/hostname |
|
||||
- weight: 50 |
|
||||
podAffinityTerm: |
|
||||
labelSelector: |
|
||||
matchExpressions: |
|
||||
- key: app.kubernetes.io/name |
|
||||
operator: In |
|
||||
values: |
|
||||
- postgresql |
|
||||
- key: app.kubernetes.io/instance |
|
||||
operator: In |
|
||||
values: |
|
||||
- {{ .Release.Name }} |
|
||||
topologyKey: kubernetes.io/hostname |
|
||||
{{- with .Values.affinity }} |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
{{- with .Values.tolerations }} |
|
||||
tolerations: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
@ -1,28 +0,0 @@ |
|||||
{{- if .Values.autoscaling.enabled }} |
|
||||
apiVersion: autoscaling/v2beta1 |
|
||||
kind: HorizontalPodAutoscaler |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
scaleTargetRef: |
|
||||
apiVersion: apps/v1 |
|
||||
kind: Deployment |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
minReplicas: {{ .Values.autoscaling.minReplicas }} |
|
||||
maxReplicas: {{ .Values.autoscaling.maxReplicas }} |
|
||||
metrics: |
|
||||
{{- if .Values.autoscaling.targetCPUUtilizationPercentage }} |
|
||||
- type: Resource |
|
||||
resource: |
|
||||
name: cpu |
|
||||
targetAverageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }} |
|
||||
{{- end }} |
|
||||
{{- if .Values.autoscaling.targetMemoryUtilizationPercentage }} |
|
||||
- type: Resource |
|
||||
resource: |
|
||||
name: memory |
|
||||
targetAverageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
@ -1,60 +0,0 @@ |
|||||
{{- if .Values.ingress.enabled -}} |
|
||||
{{- $fullName := include "sigi.fullname" . -}} |
|
||||
{{- $hostName := .Values.sigi.hostname -}} |
|
||||
{{- if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} |
|
||||
apiVersion: networking.k8s.io/v1beta1 |
|
||||
{{- else -}} |
|
||||
apiVersion: extensions/v1beta1 |
|
||||
{{- end }} |
|
||||
kind: Ingress |
|
||||
metadata: |
|
||||
name: {{ $fullName }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
annotations: |
|
||||
{{- if .Values.ingress.tls.enabled }} |
|
||||
# USE TLS |
|
||||
{{- if contains "letsencrypt" .Values.ingress.tls.provider }} |
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod" |
|
||||
{{- end }} |
|
||||
{{- if contains "letsencrypt-hml" .Values.ingress.tls.provider }} |
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-hml-dns" |
|
||||
{{- end }} |
|
||||
{{- if contains "alb" .Values.ingress.class }} |
|
||||
alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]' |
|
||||
{{- end }} |
|
||||
{{- else }} |
|
||||
# DO NOT USE TLS |
|
||||
{{- if contains "alb" .Values.ingress.class }} |
|
||||
alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}]' |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
{{- if contains "alb" .Values.ingress.class }} |
|
||||
alb.ingress.kubernetes.io/group.name: sigi |
|
||||
alb.ingress.kubernetes.io/scheme: internet-facing |
|
||||
alb.ingress.kubernetes.io/target-type: ip |
|
||||
kubernetes.io/ingress.class: alb |
|
||||
{{- end }} |
|
||||
{{- with .Values.ingress.annotations }} |
|
||||
{{- toYaml . | nindent 4 }} |
|
||||
{{- end }} |
|
||||
spec: |
|
||||
{{- if .Values.ingress.tls.enabled }} |
|
||||
tls: |
|
||||
- hosts: |
|
||||
- "{{ $hostName }}" |
|
||||
secretName: {{ $hostName | replace "." "-" }}-tls |
|
||||
{{- end }} |
|
||||
rules: |
|
||||
- host: "{{ $hostName }}" |
|
||||
http: |
|
||||
paths: |
|
||||
{{- if contains "nginx" .Values.ingress.class }} |
|
||||
- path: / |
|
||||
{{- else }} |
|
||||
- path: /* |
|
||||
{{- end }} |
|
||||
backend: |
|
||||
serviceName: {{ $fullName }} |
|
||||
servicePort: http |
|
||||
{{- end }} |
|
||||
@ -1,21 +0,0 @@ |
|||||
{{- if .Values.persistence.enabled }} |
|
||||
apiVersion: v1 |
|
||||
kind: PersistentVolumeClaim |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-media |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
accessModes: |
|
||||
- {{ .Values.persistence.accessMode }} |
|
||||
resources: |
|
||||
requests: |
|
||||
storage: {{ .Values.persistence.size }} |
|
||||
{{- if .Values.persistence.storageClass }} |
|
||||
{{- if (eq "-" .Values.persistence.storageClass) }} |
|
||||
storageClassName: "" |
|
||||
{{- else }} |
|
||||
storageClassName: "{{ .Values.persistence.storageClass }}" |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
@ -1,13 +0,0 @@ |
|||||
apiVersion: v1 |
|
||||
kind: Secret |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-secretkey |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
type: Opaque |
|
||||
data: |
|
||||
{{- if .Release.IsUpgrade }} |
|
||||
secret.key: {{ index (lookup "v1" "Secret" .Release.Namespace (printf "%s-secretkey" (include "sigi.fullname" .))).data "secret.key" }} |
|
||||
{{ else }} # install operation |
|
||||
secret.key: {{ randAscii 50 | b64enc }} |
|
||||
{{ end }} |
|
||||
@ -1,15 +0,0 @@ |
|||||
apiVersion: v1 |
|
||||
kind: Service |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
type: {{ .Values.service.type }} |
|
||||
ports: |
|
||||
- port: {{ .Values.service.port }} |
|
||||
targetPort: http |
|
||||
protocol: TCP |
|
||||
name: http |
|
||||
selector: |
|
||||
{{- include "sigi.selectorLabels" . | nindent 4 }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-monthly |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on first day of every month |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} 1 * * |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every weekday backup is good for the next year (365 days) |
|
||||
ttl: 8760h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-weekdays |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on weekdays |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} * * 1-5 |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every weekday backup is good for the next week (7 days) |
|
||||
ttl: 168h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-weekly |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on sunday |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} * * 0 |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every sunday backup is good for 30 days (aprox. 1 month) |
|
||||
ttl: 744h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,147 +0,0 @@ |
|||||
# Default values for sigi. |
|
||||
# This is a YAML-formatted file. |
|
||||
# Declare variables to be passed into your templates. |
|
||||
|
|
||||
replicaCount: 1 |
|
||||
|
|
||||
image: |
|
||||
# registry: porto.interlegis.leg.br |
|
||||
repository: porto.interlegis.leg.br/ilb/sigi |
|
||||
pullPolicy: IfNotPresent |
|
||||
# Overrides the image tag whose default is the chart appVersion. |
|
||||
tag: "" |
|
||||
|
|
||||
imagePullSecrets: [] |
|
||||
nameOverride: "" |
|
||||
fullnameOverride: "" |
|
||||
|
|
||||
serviceAccount: |
|
||||
# Specifies whether a service account should be created |
|
||||
create: true |
|
||||
# Annotations to add to the service account |
|
||||
annotations: {} |
|
||||
# The name of the service account to use. |
|
||||
# If not set and create is true, a name is generated using the fullname template |
|
||||
name: "" |
|
||||
|
|
||||
podAnnotations: {} |
|
||||
|
|
||||
podSecurityContext: {} |
|
||||
# fsGroup: 2000 |
|
||||
|
|
||||
securityContext: {} |
|
||||
# capabilities: |
|
||||
# drop: |
|
||||
# - ALL |
|
||||
# readOnlyRootFilesystem: true |
|
||||
# runAsNonRoot: true |
|
||||
# runAsUser: 1000 |
|
||||
|
|
||||
service: |
|
||||
type: ClusterIP |
|
||||
port: 80 |
|
||||
|
|
||||
persistence: |
|
||||
enabled: true |
|
||||
#storageClass: "" |
|
||||
accessMode: ReadWriteOnce |
|
||||
size: 12Gi |
|
||||
|
|
||||
sigi: |
|
||||
debug: 'False' |
|
||||
hostname: 'sigidsv.interlegis.leg.br' |
|
||||
timeZone: 'America/Sao_Paulo' |
|
||||
language: 'pt_BR.UTF-8' |
|
||||
emailPort: 25 |
|
||||
emailHost: 'smtp.interlegis.leg.br' |
|
||||
defaultFromEmail: 'sigi@interlegis.leg.br' |
|
||||
auth: |
|
||||
ldap: |
|
||||
serverURI: 'ldap://ad.senado.gov.br' |
|
||||
bindDN: 'CN=Sistema de Informações Gerenciais do Interlegis Service Account,OU=_UsuariosServicos,OU=2-AdministracaoSistemas,DC=senado,DC=gov,DC=br' |
|
||||
bindPwd: 'RgtJdtvas7s4BSpjnVnR' |
|
||||
user: 'U=UsuariosPessoas,DC=senado,DC=gov,DC=br' |
|
||||
userSearchString: '(sAMAccountName=%(user)s)' |
|
||||
group: 'OU=GruposAutomaticosOU,DC=senado,DC=gov,DC=br' |
|
||||
groupSearchString: '(objectClass=Group)' |
|
||||
groupTypeString: 'cn' |
|
||||
findGroupPerms: True |
|
||||
mirrorGroups: True |
|
||||
cacheGroups: True |
|
||||
groupCacheTimeout: 3600 |
|
||||
profileModule: 'servidores.Servidor' |
|
||||
|
|
||||
ingress: |
|
||||
enabled: true |
|
||||
class: nginx |
|
||||
# nginx - for default nginx ingress controller |
|
||||
# alb - for AWS ALB Load Balancer controller |
|
||||
tls: |
|
||||
enabled: true |
|
||||
provider: letsencrypt |
|
||||
# extra annotations only |
|
||||
annotations: {} |
|
||||
|
|
||||
#velero: |
|
||||
# namespace: velero |
|
||||
# backup: |
|
||||
# enabled: false |
|
||||
# snapshotVolumes: false |
|
||||
# defaultVolumesToRestic: true |
|
||||
# # cert-manager objects are usually blocked during backup |
|
||||
# excludedResources: |
|
||||
# - certificates.cert-manager.io |
|
||||
# - orders.acme.cert-manager.io |
|
||||
# - certificaterequests.cert-manager.io |
|
||||
# - challenges.acme.cert-manager.io |
|
||||
|
|
||||
postgresql: |
|
||||
internal: true |
|
||||
image: |
|
||||
# repository: porto.interlegis.leg.br/bitnami/postgresql |
|
||||
# registry: porto.interlegis.leg.br |
|
||||
registry: docker.io |
|
||||
repository: bitnami/postgresql |
|
||||
tag: 14.4.0-debian-11-r0 |
|
||||
pullPolicy: IfNotPresent |
|
||||
service: |
|
||||
type: ClusterIP |
|
||||
port: 5432 |
|
||||
persistence: |
|
||||
enabled: true |
|
||||
size: 1Gi |
|
||||
auth: |
|
||||
postgresPassword: sigi |
|
||||
password: sigi |
|
||||
username: sigi |
|
||||
database: sigi |
|
||||
env: |
|
||||
- name: LANG |
|
||||
value: pt_BR.UTF-8 |
|
||||
- name: LANGUAGE |
|
||||
value: pt_BR.UTF-8 |
|
||||
resources: |
|
||||
requests: |
|
||||
cpu: 50m |
|
||||
memory: 64Mi |
|
||||
|
|
||||
resources: |
|
||||
limits: |
|
||||
cpu: 1000m |
|
||||
memory: 1Gi |
|
||||
requests: |
|
||||
cpu: 150m |
|
||||
memory: 500Mi |
|
||||
|
|
||||
autoscaling: |
|
||||
enabled: false |
|
||||
minReplicas: 1 |
|
||||
maxReplicas: 100 |
|
||||
targetCPUUtilizationPercentage: 80 |
|
||||
# targetMemoryUtilizationPercentage: 80 |
|
||||
|
|
||||
nodeSelector: {} |
|
||||
|
|
||||
tolerations: [] |
|
||||
|
|
||||
affinity: {} |
|
||||
@ -1,6 +0,0 @@ |
|||||
dependencies: |
|
||||
- name: postgresql |
|
||||
repository: https://charts.bitnami.com/bitnami |
|
||||
version: 11.6.8 |
|
||||
digest: sha256:ee4247460b887d3cc558f76c85980fe6848624c688b855100d9863bef6830ed0 |
|
||||
generated: "2022-06-24T12:28:18.011798975-03:00" |
|
||||
@ -1,24 +0,0 @@ |
|||||
apiVersion: v2 |
|
||||
name: sigi |
|
||||
description: Sistema de Informações Gerenciais do Interlegis (SIGI) |
|
||||
|
|
||||
# A chart can be either an 'application' or a 'library' chart. |
|
||||
type: application |
|
||||
|
|
||||
# This is the chart version. This version number should be incremented each time you make changes |
|
||||
# to the chart and its templates, including the app version. |
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/) |
|
||||
version: 0.2.2 |
|
||||
|
|
||||
# This is the version number of the application being deployed. This version number should be |
|
||||
# incremented each time you make changes to the application. Versions are not expected to |
|
||||
# follow Semantic Versioning. They should reflect the version the application is using. |
|
||||
appVersion: 3.0.0 |
|
||||
|
|
||||
icon: https://git.interlegis.leg.br/SEIT/rancher-charts/raw/master/images/sigi_interlegis.png |
|
||||
|
|
||||
dependencies: |
|
||||
- name: postgresql |
|
||||
version: 11.6.8 |
|
||||
repository: https://charts.bitnami.com/bitnami |
|
||||
condition: postgresql.internal |
|
||||
@ -1,3 +0,0 @@ |
|||||
# Sistema de Informações Gerenciais do Interlegis |
|
||||
|
|
||||
Utilize o formulário abaixo para configurar o SIGI. |
|
||||
Binary file not shown.
@ -1,162 +0,0 @@ |
|||||
labels: |
|
||||
io.cattle.role: project |
|
||||
categories: |
|
||||
- Gerencial |
|
||||
|
|
||||
questions: |
|
||||
|
|
||||
# Informações Básicas |
|
||||
- variable: sigi.hostname |
|
||||
default: sigidsv.interlegis.leg.br |
|
||||
description: "Endereço para acesso ao SIGI" |
|
||||
label: "URL do SIGI" |
|
||||
type: string |
|
||||
group: Básico |
|
||||
required: true |
|
||||
|
|
||||
|
|
||||
# Ingress |
|
||||
- variable: ingress.tls.enabled |
|
||||
default: true |
|
||||
type: boolean |
|
||||
description: "Habilitar criptografia do protocolo HTTP (HTTPS)?" |
|
||||
label: "Habilitar TLS?" |
|
||||
required: false |
|
||||
group: Ingress |
|
||||
show_subquestion_if: true |
|
||||
subquestions: |
|
||||
- variable: ingress.tls.provider |
|
||||
default: letsencrypt |
|
||||
type: enum |
|
||||
description: "Qual provedor de certificados utilizar?" |
|
||||
label: "Provedor de certificados" |
|
||||
required: false |
|
||||
group: Ingress |
|
||||
options: |
|
||||
- letsencrypt |
|
||||
- letsencrypt-hml |
|
||||
- aws |
|
||||
|
|
||||
- variable: ingress.class |
|
||||
default: nginx |
|
||||
type: enum |
|
||||
description: "Qual o Ingress Controller?" |
|
||||
label: "Classe Ingress" |
|
||||
required: false |
|
||||
group: Ingress |
|
||||
options: |
|
||||
- nginx |
|
||||
- alb |
|
||||
|
|
||||
## Correio |
|
||||
#- variable: sigi.emailSendUser |
|
||||
# default: "sigi@interlegis.leg.br" |
|
||||
# description: "Remetente dos e-mails enviados pelo SIGI" |
|
||||
# label: "Remetente" |
|
||||
# type: string |
|
||||
# group: Correio |
|
||||
# required: false |
|
||||
#- variable: sigi.useTls |
|
||||
# default: "False" |
|
||||
# description: "Usar TLS ao conectar no servidor SMTP?" |
|
||||
# label: "Usar TLS" |
|
||||
# type: enum |
|
||||
# group: Correio |
|
||||
# options: |
|
||||
# - "True" |
|
||||
# - "False" |
|
||||
# required: false |
|
||||
#- variable: sigi.emailPort |
|
||||
# default: 25 |
|
||||
# description: "Porta de envio de E-mail (SMTP)" |
|
||||
# type: int |
|
||||
# label: "Porta SMTP" |
|
||||
# required: false |
|
||||
# group: Correio |
|
||||
#- variable: sigi.emailHost |
|
||||
# default: "smtp.interlegis.leg.br" |
|
||||
# description: "Servidor de envio de e-mail (SMTP)" |
|
||||
# label: "Servidor SMTP" |
|
||||
# type: string |
|
||||
# group: Correio |
|
||||
# required: false |
|
||||
|
|
||||
## PostgreSQL |
|
||||
#- variable: postgresql.internal |
|
||||
# default: true |
|
||||
# description: "Fazer o deploy do Postgres?" |
|
||||
# label: "Postgres Interno?" |
|
||||
# type: boolean |
|
||||
# group: PostgreSQL |
|
||||
# required: false |
|
||||
#- variable: postgresql.auth.Password |
|
||||
# default: "sigi" |
|
||||
# description: "Senha do banco de dados Postgres" |
|
||||
# label: "Senha do Postgres" |
|
||||
# type: password |
|
||||
# group: PostgreSQL |
|
||||
# required: true |
|
||||
|
|
||||
# Avançado |
|
||||
- variable: sigi.debug |
|
||||
default: "False" |
|
||||
description: "Habilitar mensagens de Debug?" |
|
||||
label: "Debug?" |
|
||||
type: enum |
|
||||
options: |
|
||||
- "True" |
|
||||
- "False" |
|
||||
group: Avançado |
|
||||
required: true |
|
||||
|
|
||||
- variable: image.tag |
|
||||
default: 3.0.0 |
|
||||
description: "Versão da imagem docker do SIGI a ser utilizada" |
|
||||
label: "versão do SIGI" |
|
||||
type: string |
|
||||
group: Avançado |
|
||||
required: true |
|
||||
|
|
||||
- variable: image.pullPolicy |
|
||||
default: IfNotPresent |
|
||||
description: "Politica de carga da imagem docker do SIGI." |
|
||||
label: "Carregar a imagem apenas quando não estiver presente?" |
|
||||
type: enum |
|
||||
options: |
|
||||
- IfNotPresent |
|
||||
- Always |
|
||||
group: Avançado |
|
||||
required: true |
|
||||
|
|
||||
#- variable: sigi.timeZone |
|
||||
# default: "America/Sao_Paulo" |
|
||||
# description: "Fuso Horário do SIGI" |
|
||||
# label: "Fuso" |
|
||||
# type: enum |
|
||||
# options: |
|
||||
# - "America/Sao_Paulo" |
|
||||
# - "America/Fortaleza" |
|
||||
# - "America/Belem" |
|
||||
# - "America/Araguaina" |
|
||||
# - "America/Bahia" |
|
||||
# - "America/Boa_Vista" |
|
||||
# - "America/Campo_Grande" |
|
||||
# - "America/Cuiaba" |
|
||||
# - "America/Maceio" |
|
||||
# - "America/Manaus" |
|
||||
# - "America/Porto_Velho" |
|
||||
# - "America/Recife" |
|
||||
# - "America/Rio_Branco" |
|
||||
# - "America/Sao_Paulo" |
|
||||
# group: Avançado |
|
||||
# required: true |
|
||||
|
|
||||
# Backup |
|
||||
- variable: velero.backup.enabled |
|
||||
default: false |
|
||||
label: "Habilitar backup com Velero?" |
|
||||
description: "Criar ou não os objetos para backup com o Velero." |
|
||||
type: boolean |
|
||||
group: Backup |
|
||||
required: false |
|
||||
|
|
||||
@ -1,5 +0,0 @@ |
|||||
1. Seu SIGI pode ser acessado através da URL: |
|
||||
{{- if .Values.ingress.enabled }} |
|
||||
http{{ if .Values.ingress.tls.enabled }}s{{ end }}://{{ .Values.sigi.hostname }} |
|
||||
{{- end }} |
|
||||
|
|
||||
@ -1,58 +0,0 @@ |
|||||
{{/* |
|
||||
Expand the name of the chart. |
|
||||
*/}} |
|
||||
{{- define "sigi.name" -}} |
|
||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create a default fully qualified app name. |
|
||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). |
|
||||
If release name contains chart name it will be used as a full name. |
|
||||
*/}} |
|
||||
{{- define "sigi.fullname" -}} |
|
||||
{{- if .Values.fullnameOverride }} |
|
||||
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} |
|
||||
{{- else }} |
|
||||
{{- $name := default .Chart.Name .Values.nameOverride }} |
|
||||
{{- if contains $name .Release.Name }} |
|
||||
{{- .Release.Name | trunc 63 | trimSuffix "-" }} |
|
||||
{{- else }} |
|
||||
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create chart name and version as used by the chart label. |
|
||||
*/}} |
|
||||
{{- define "sigi.chart" -}} |
|
||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Common labels |
|
||||
*/}} |
|
||||
{{- define "sigi.labels" -}} |
|
||||
helm.sh/chart: {{ include "sigi.chart" . }} |
|
||||
{{ include "sigi.selectorLabels" . }} |
|
||||
{{- if .Chart.AppVersion }} |
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} |
|
||||
{{- end }} |
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Selector labels |
|
||||
*/}} |
|
||||
{{- define "sigi.selectorLabels" -}} |
|
||||
app.kubernetes.io/name: {{ include "sigi.name" . }} |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
{{- end }} |
|
||||
|
|
||||
{{/* |
|
||||
Create a default fully qualified app name for postgresql. |
|
||||
*/}} |
|
||||
{{- define "postgresql.fullname" -}} |
|
||||
{{- printf "%s-%s" .Release.Name "postgresql" | trunc 63 | trimSuffix "-" -}} |
|
||||
{{- end -}} |
|
||||
@ -1,220 +0,0 @@ |
|||||
apiVersion: apps/v1 |
|
||||
kind: Deployment |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
{{- if not .Values.autoscaling.enabled }} |
|
||||
replicas: {{ .Values.replicaCount }} |
|
||||
{{- end }} |
|
||||
selector: |
|
||||
matchLabels: |
|
||||
{{- include "sigi.selectorLabels" . | nindent 6 }} |
|
||||
template: |
|
||||
metadata: |
|
||||
{{- with .Values.podAnnotations }} |
|
||||
annotations: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
labels: |
|
||||
{{- include "sigi.selectorLabels" . | nindent 8 }} |
|
||||
spec: |
|
||||
{{- with .Values.imagePullSecrets }} |
|
||||
imagePullSecrets: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
securityContext: |
|
||||
{{- toYaml .Values.podSecurityContext | nindent 8 }} |
|
||||
containers: |
|
||||
- name: {{ .Chart.Name }} |
|
||||
securityContext: |
|
||||
{{- toYaml .Values.securityContext | nindent 12 }} |
|
||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" |
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }} |
|
||||
ports: |
|
||||
- name: http |
|
||||
containerPort: 80 |
|
||||
protocol: TCP |
|
||||
env: |
|
||||
- name: DEBUG |
|
||||
value: "{{ .Values.sigi.debug }}" |
|
||||
- name: TZ |
|
||||
value: "{{ .Values.sigi.timeZone }}" |
|
||||
- name: LANG |
|
||||
value: "{{ .Values.sigi.language }}" |
|
||||
- name: DATABASE_URL |
|
||||
value: {{ printf "postgresql://%s:%s@%s:5432/%s" .Values.postgresql.auth.username .Values.postgresql.auth.password (include "postgresql.fullname" .) .Values.postgresql.auth.database| quote }} |
|
||||
- name: ADMINS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: ADMINS |
|
||||
- name: EMAIL_PORT |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: EMAIL_PORT |
|
||||
- name: EMAIL_HOST |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: EMAIL_HOST |
|
||||
- name: DEFAULT_FROM_EMAIL |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-email |
|
||||
key: DEFAULT_FROM_EMAIL |
|
||||
- name: AUTH_LDAP_SERVER_URI |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_SERVER_URI |
|
||||
- name: AUTH_LDAP_BIND_DN |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_BIND_DN |
|
||||
- name: AUTH_LDAP_USER |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_USER |
|
||||
- name: AUTH_LDAP_USER_SEARCH_STRING |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_USER_SEARCH_STRING |
|
||||
- name: AUTH_LDAP_GROUP |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP |
|
||||
- name: AUTH_LDAP_GROUP_SEARCH_STRING |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP_SEARCH_STRING |
|
||||
- name: AUTH_LDAP_GROUP_TYPE_STRING |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP_TYPE_STRING |
|
||||
- name: AUTH_LDAP_USER_ATTR_MAP |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_USER_ATTR_MAP |
|
||||
- name: AUTH_LDAP_PROFILE_ATTR_MAP |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_PROFILE_ATTR_MAP |
|
||||
- name: AUTH_LDAP_FIND_GROUP_PERMS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_FIND_GROUP_PERMS |
|
||||
- name: AUTH_LDAP_MIRROR_GROUPS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_MIRROR_GROUPS |
|
||||
- name: AUTH_LDAP_CACHE_GROUPS |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_CACHE_GROUPS |
|
||||
- name: AUTH_LDAP_GROUP_CACHE_TIMEOUT |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_LDAP_GROUP_CACHE_TIMEOUT |
|
||||
- name: AUTH_PROFILE_MODULE |
|
||||
valueFrom: |
|
||||
configMapKeyRef: |
|
||||
name: sigi-auth-ldap |
|
||||
key: AUTH_PROFILE_MODULE |
|
||||
- name: AUTH_LDAP_BIND_PASSWORD |
|
||||
valueFrom: |
|
||||
# Secret Key |
|
||||
secretKeyRef: |
|
||||
name: sigi-auth-ldap-key |
|
||||
key: AUTH_LDAP_BIND_PASSWORD |
|
||||
volumeMounts: |
|
||||
# - mountPath: /var/interlegis/sigi/data |
|
||||
# name: data |
|
||||
- mountPath: /srv/interlegis/sigi/media |
|
||||
name: {{ include "sigi.fullname" . }}-media |
|
||||
livenessProbe: |
|
||||
httpGet: |
|
||||
path: / |
|
||||
port: http |
|
||||
initialDelaySeconds: 60 |
|
||||
failureThreshold: 3 |
|
||||
periodSeconds: 60 |
|
||||
successThreshold: 1 |
|
||||
timeoutSeconds: 5 |
|
||||
readinessProbe: |
|
||||
httpGet: |
|
||||
path: / |
|
||||
port: http |
|
||||
initialDelaySeconds: 60 |
|
||||
failureThreshold: 3 |
|
||||
periodSeconds: 30 |
|
||||
successThreshold: 1 |
|
||||
timeoutSeconds: 5 |
|
||||
resources: |
|
||||
{{- toYaml .Values.resources | nindent 12 }} |
|
||||
volumes: |
|
||||
# - name: data |
|
||||
# secret: |
|
||||
# defaultMode: 440 |
|
||||
# secretName: {{ include "sigi.fullname" . }}-secretkey |
|
||||
- name: {{ include "sigi.fullname" . }}-media |
|
||||
{{- if .Values.persistence.enabled }} |
|
||||
persistentVolumeClaim: |
|
||||
claimName: {{ include "sigi.fullname" . }}-media |
|
||||
{{- else }} |
|
||||
emptyDir: {} |
|
||||
{{- end }} |
|
||||
{{- with .Values.nodeSelector }} |
|
||||
nodeSelector: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
affinity: |
|
||||
podAffinity: |
|
||||
preferredDuringSchedulingIgnoredDuringExecution: |
|
||||
- weight: 100 |
|
||||
podAffinityTerm: |
|
||||
labelSelector: |
|
||||
matchExpressions: |
|
||||
- key: app.kubernetes.io/name |
|
||||
operator: In |
|
||||
values: |
|
||||
- {{ include "sigi.name" . }} |
|
||||
- key: app.kubernetes.io/instance |
|
||||
operator: In |
|
||||
values: |
|
||||
- {{ .Release.Name }} |
|
||||
topologyKey: kubernetes.io/hostname |
|
||||
- weight: 50 |
|
||||
podAffinityTerm: |
|
||||
labelSelector: |
|
||||
matchExpressions: |
|
||||
- key: app.kubernetes.io/name |
|
||||
operator: In |
|
||||
values: |
|
||||
- postgresql |
|
||||
- key: app.kubernetes.io/instance |
|
||||
operator: In |
|
||||
values: |
|
||||
- {{ .Release.Name }} |
|
||||
topologyKey: kubernetes.io/hostname |
|
||||
{{- with .Values.affinity }} |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
{{- with .Values.tolerations }} |
|
||||
tolerations: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
@ -1,28 +0,0 @@ |
|||||
{{- if .Values.autoscaling.enabled }} |
|
||||
apiVersion: autoscaling/v2beta1 |
|
||||
kind: HorizontalPodAutoscaler |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
scaleTargetRef: |
|
||||
apiVersion: apps/v1 |
|
||||
kind: Deployment |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
minReplicas: {{ .Values.autoscaling.minReplicas }} |
|
||||
maxReplicas: {{ .Values.autoscaling.maxReplicas }} |
|
||||
metrics: |
|
||||
{{- if .Values.autoscaling.targetCPUUtilizationPercentage }} |
|
||||
- type: Resource |
|
||||
resource: |
|
||||
name: cpu |
|
||||
targetAverageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }} |
|
||||
{{- end }} |
|
||||
{{- if .Values.autoscaling.targetMemoryUtilizationPercentage }} |
|
||||
- type: Resource |
|
||||
resource: |
|
||||
name: memory |
|
||||
targetAverageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
@ -1,60 +0,0 @@ |
|||||
{{- if .Values.ingress.enabled -}} |
|
||||
{{- $fullName := include "sigi.fullname" . -}} |
|
||||
{{- $hostName := .Values.sigi.hostname -}} |
|
||||
{{- if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} |
|
||||
apiVersion: networking.k8s.io/v1beta1 |
|
||||
{{- else -}} |
|
||||
apiVersion: extensions/v1beta1 |
|
||||
{{- end }} |
|
||||
kind: Ingress |
|
||||
metadata: |
|
||||
name: {{ $fullName }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
annotations: |
|
||||
{{- if .Values.ingress.tls.enabled }} |
|
||||
# USE TLS |
|
||||
{{- if contains "letsencrypt" .Values.ingress.tls.provider }} |
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod" |
|
||||
{{- end }} |
|
||||
{{- if contains "letsencrypt-hml" .Values.ingress.tls.provider }} |
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-hml-dns" |
|
||||
{{- end }} |
|
||||
{{- if contains "alb" .Values.ingress.class }} |
|
||||
alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]' |
|
||||
{{- end }} |
|
||||
{{- else }} |
|
||||
# DO NOT USE TLS |
|
||||
{{- if contains "alb" .Values.ingress.class }} |
|
||||
alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}]' |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
{{- if contains "alb" .Values.ingress.class }} |
|
||||
alb.ingress.kubernetes.io/group.name: sigi |
|
||||
alb.ingress.kubernetes.io/scheme: internet-facing |
|
||||
alb.ingress.kubernetes.io/target-type: ip |
|
||||
kubernetes.io/ingress.class: alb |
|
||||
{{- end }} |
|
||||
{{- with .Values.ingress.annotations }} |
|
||||
{{- toYaml . | nindent 4 }} |
|
||||
{{- end }} |
|
||||
spec: |
|
||||
{{- if .Values.ingress.tls.enabled }} |
|
||||
tls: |
|
||||
- hosts: |
|
||||
- "{{ $hostName }}" |
|
||||
secretName: {{ $hostName | replace "." "-" }}-tls |
|
||||
{{- end }} |
|
||||
rules: |
|
||||
- host: "{{ $hostName }}" |
|
||||
http: |
|
||||
paths: |
|
||||
{{- if contains "nginx" .Values.ingress.class }} |
|
||||
- path: / |
|
||||
{{- else }} |
|
||||
- path: /* |
|
||||
{{- end }} |
|
||||
backend: |
|
||||
serviceName: {{ $fullName }} |
|
||||
servicePort: http |
|
||||
{{- end }} |
|
||||
@ -1,21 +0,0 @@ |
|||||
{{- if .Values.persistence.enabled }} |
|
||||
apiVersion: v1 |
|
||||
kind: PersistentVolumeClaim |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-media |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
accessModes: |
|
||||
- {{ .Values.persistence.accessMode }} |
|
||||
resources: |
|
||||
requests: |
|
||||
storage: {{ .Values.persistence.size }} |
|
||||
{{- if .Values.persistence.storageClass }} |
|
||||
{{- if (eq "-" .Values.persistence.storageClass) }} |
|
||||
storageClassName: "" |
|
||||
{{- else }} |
|
||||
storageClassName: "{{ .Values.persistence.storageClass }}" |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
{{- end }} |
|
||||
@ -1,13 +0,0 @@ |
|||||
apiVersion: v1 |
|
||||
kind: Secret |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-secretkey |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
type: Opaque |
|
||||
data: |
|
||||
{{- if .Release.IsUpgrade }} |
|
||||
secret.key: {{ index (lookup "v1" "Secret" .Release.Namespace (printf "%s-secretkey" (include "sigi.fullname" .))).data "secret.key" }} |
|
||||
{{ else }} # install operation |
|
||||
secret.key: {{ randAscii 50 | b64enc }} |
|
||||
{{ end }} |
|
||||
@ -1,15 +0,0 @@ |
|||||
apiVersion: v1 |
|
||||
kind: Service |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }} |
|
||||
labels: |
|
||||
{{- include "sigi.labels" . | nindent 4 }} |
|
||||
spec: |
|
||||
type: {{ .Values.service.type }} |
|
||||
ports: |
|
||||
- port: {{ .Values.service.port }} |
|
||||
targetPort: http |
|
||||
protocol: TCP |
|
||||
name: http |
|
||||
selector: |
|
||||
{{- include "sigi.selectorLabels" . | nindent 4 }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-monthly |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on first day of every month |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} 1 * * |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every weekday backup is good for the next year (365 days) |
|
||||
ttl: 8760h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-weekdays |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on weekdays |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} * * 1-5 |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every weekday backup is good for the next week (7 days) |
|
||||
ttl: 168h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,39 +0,0 @@ |
|||||
{{- if .Values.velero.backup.enabled }} |
|
||||
apiVersion: velero.io/v1 |
|
||||
kind: Schedule |
|
||||
metadata: |
|
||||
name: {{ include "sigi.fullname" . }}-weekly |
|
||||
namespace: {{ .Values.velero.namespace }} |
|
||||
spec: |
|
||||
# generate a random backup time between 1 and 5 AM on sunday |
|
||||
schedule: {{ mod (randNumeric 2) 60 }} {{ mod (randNumeric 1) 6 }} * * 0 |
|
||||
template: |
|
||||
includedNamespaces: |
|
||||
- {{ .Release.Namespace }} |
|
||||
{{- with .Values.velero.backup.excludedResources }} |
|
||||
excludedResources: |
|
||||
{{- toYaml . | nindent 8 }} |
|
||||
{{- end }} |
|
||||
snapshotVolumes: {{ .Values.velero.backup.snapshotVolumes }} |
|
||||
# every sunday backup is good for 30 days (aprox. 1 month) |
|
||||
ttl: 744h0m0s |
|
||||
defaultVolumesToRestic: {{ .Values.velero.backup.defaultVolumesToRestic }} |
|
||||
hooks: |
|
||||
resources: |
|
||||
- name: pgdump |
|
||||
includedResources: |
|
||||
- pods |
|
||||
labelSelector: |
|
||||
matchLabels: |
|
||||
app.kubernetes.io/instance: {{ .Release.Name }} |
|
||||
app.kubernetes.io/name: postgresql |
|
||||
pre: |
|
||||
- exec: |
|
||||
command: |
|
||||
- "/bin/bash" |
|
||||
- "-c" |
|
||||
- "PGPASSWORD=$POSTGRES_PASSWORD /opt/bitnami/postgresql/bin/pg_dump -U postgres -d sigi > /bitnami/postgresql/sigi.dump" |
|
||||
timeout: 360s |
|
||||
onError: Continue |
|
||||
useOwnerReferencesInBackup: false |
|
||||
{{- end }} |
|
||||
@ -1,148 +0,0 @@ |
|||||
# Default values for sigi. |
|
||||
# This is a YAML-formatted file. |
|
||||
# Declare variables to be passed into your templates. |
|
||||
|
|
||||
replicaCount: 1 |
|
||||
|
|
||||
image: |
|
||||
# registry: porto.interlegis.leg.br |
|
||||
repository: porto.interlegis.leg.br/ilb/sigi |
|
||||
pullPolicy: IfNotPresent |
|
||||
# Overrides the image tag whose default is the chart appVersion. |
|
||||
tag: "" |
|
||||
|
|
||||
imagePullSecrets: [] |
|
||||
nameOverride: "" |
|
||||
fullnameOverride: "" |
|
||||
|
|
||||
serviceAccount: |
|
||||
# Specifies whether a service account should be created |
|
||||
create: true |
|
||||
# Annotations to add to the service account |
|
||||
annotations: {} |
|
||||
# The name of the service account to use. |
|
||||
# If not set and create is true, a name is generated using the fullname template |
|
||||
name: "" |
|
||||
|
|
||||
podAnnotations: {} |
|
||||
|
|
||||
podSecurityContext: {} |
|
||||
# fsGroup: 2000 |
|
||||
|
|
||||
securityContext: {} |
|
||||
# capabilities: |
|
||||
# drop: |
|
||||
# - ALL |
|
||||
# readOnlyRootFilesystem: true |
|
||||
# runAsNonRoot: true |
|
||||
# runAsUser: 1000 |
|
||||
|
|
||||
service: |
|
||||
type: ClusterIP |
|
||||
port: 80 |
|
||||
|
|
||||
persistence: |
|
||||
enabled: true |
|
||||
#storageClass: "" |
|
||||
accessMode: ReadWriteOnce |
|
||||
size: 12Gi |
|
||||
|
|
||||
sigi: |
|
||||
debug: 'False' |
|
||||
hostname: 'sigidsv.interlegis.leg.br' |
|
||||
timeZone: 'America/Sao_Paulo' |
|
||||
language: 'pt_BR.UTF-8' |
|
||||
emailPort: 25 |
|
||||
emailHost: 'smtp.interlegis.leg.br' |
|
||||
defaultFromEmail: 'sigi@interlegis.leg.br' |
|
||||
auth: |
|
||||
ldap: |
|
||||
serverURI: 'ldap://ad.senado.gov.br' |
|
||||
bindDN: 'CN=Sistema de Informações Gerenciais do Interlegis Service Account,OU=_UsuariosServicos,OU=2-AdministracaoSistemas,DC=senado,DC=gov,DC=br' |
|
||||
bindPwd: 'RgtJdtvas7s4BSpjnVnR' |
|
||||
user: 'U=UsuariosPessoas,DC=senado,DC=gov,DC=br' |
|
||||
userSearchString: '(sAMAccountName=%(user)s)' |
|
||||
group: 'OU=GruposAutomaticosOU,DC=senado,DC=gov,DC=br' |
|
||||
groupSearchString: '(objectClass=Group)' |
|
||||
groupTypeString: 'cn' |
|
||||
findGroupPerms: True |
|
||||
mirrorGroups: True |
|
||||
cacheGroups: True |
|
||||
groupCacheTimeout: 3600 |
|
||||
profileModule: 'servidores.Servidor' |
|
||||
|
|
||||
ingress: |
|
||||
enabled: true |
|
||||
class: nginx |
|
||||
# nginx - for default nginx ingress controller |
|
||||
# alb - for AWS ALB Load Balancer controller |
|
||||
tls: |
|
||||
enabled: true |
|
||||
provider: letsencrypt |
|
||||
# extra annotations only |
|
||||
annotations: {} |
|
||||
|
|
||||
velero: |
|
||||
namespace: velero |
|
||||
backup: |
|
||||
enabled: false |
|
||||
snapshotVolumes: false |
|
||||
defaultVolumesToRestic: true |
|
||||
# cert-manager objects are usually blocked during backup |
|
||||
excludedResources: |
|
||||
- certificates.cert-manager.io |
|
||||
- orders.acme.cert-manager.io |
|
||||
- certificaterequests.cert-manager.io |
|
||||
- challenges.acme.cert-manager.io |
|
||||
|
|
||||
postgresql: |
|
||||
internal: true |
|
||||
image: |
|
||||
# repository: porto.interlegis.leg.br/bitnami/postgresql |
|
||||
# registry: porto.interlegis.leg.br |
|
||||
registry: docker.io |
|
||||
repository: bitnami/postgresql |
|
||||
tag: 14.4.0-debian-11-r0 |
|
||||
pullPolicy: IfNotPresent |
|
||||
primary: |
|
||||
service: |
|
||||
type: ClusterIP |
|
||||
port: 5432 |
|
||||
persistence: |
|
||||
enabled: true |
|
||||
size: 1Gi |
|
||||
resources: |
|
||||
requests: |
|
||||
cpu: 250m |
|
||||
memory: 256Mi |
|
||||
auth: |
|
||||
postgresPassword: sigi |
|
||||
password: sigi |
|
||||
username: sigi |
|
||||
database: sigi |
|
||||
env: |
|
||||
- name: LANG |
|
||||
value: pt_BR.UTF-8 |
|
||||
- name: LANGUAGE |
|
||||
value: pt_BR.UTF-8 |
|
||||
|
|
||||
resources: |
|
||||
limits: |
|
||||
cpu: 1000m |
|
||||
memory: 1Gi |
|
||||
requests: |
|
||||
cpu: 150m |
|
||||
memory: 500Mi |
|
||||
|
|
||||
autoscaling: |
|
||||
enabled: false |
|
||||
minReplicas: 1 |
|
||||
maxReplicas: 100 |
|
||||
targetCPUUtilizationPercentage: 80 |
|
||||
# targetMemoryUtilizationPercentage: 80 |
|
||||
|
|
||||
nodeSelector: {} |
|
||||
|
|
||||
tolerations: [] |
|
||||
|
|
||||
affinity: {} |
|
||||
Loading…
Reference in new issue