refactor(dashboard): migrate to new cozystack-ui console

Remove old openapi-ui implementation and adopt new React-based console: **Removed:** - images/openapi-ui/ - old PRO-Robotech based UI - images/openapi-ui-k8s-bff/ - unused backend-for-frontend - templates/nginx.yaml - separate nginx proxy (replaced by built-in nginx) - templates/configmap.yaml - old UI configuration **Changes:** - Rename web → console throughout all manifests - Rename incloud-web-* → cozy-dashboard-* for all resources - Remove all environment variables (new UI requires no configuration) - Update gatekeeper upstream to point directly to console service - Simplify Makefile (only token-proxy image build remains) - Update values.yaml: openapiUI → console **Architecture changes:** Before: gatekeeper → nginx → web (openapi-ui) After: gatekeeper → console (React SPA with built-in nginx) The new console includes nginx that proxies /api and /apis to K8s API, eliminating the need for a separate nginx deployment. Authentication flow remains unchanged - gatekeeper adds Authorization header which is passed through to K8s API. Breaking change: Resource names changed from incloud-web-* to cozy-dashboard-*. Existing deployments will need migration. Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
2026-11-09 14:02:56 +09:00 · 2026-04-28 23:38:58 +03:00
1 parent c7c4f724af
commit 8b037d3045
@@ -4,19 +4,7 @@ export NAMESPACE=cozy-$(NAME)
 include ../../../hack/common-envs.mk
 include ../../../hack/package.mk

-update: update-crd update-dockerfiles
-image: image-token-proxy update-tenant-text
-
-
-update-dockerfiles:
-	@echo Update dockerfiles manually
-
-update-crd:
-	rm -rf crds
-	mkdir -p crds
-	wget -O- https://github.com/PRO-Robotech/helmfile-manifests/archive/refs/heads/main.tar.gz | tar -C crds -xzvf- helmfile-manifests-main/charts/incloud-main/incloud-web-1.0.0/incloud-web/templates --strip-components=6
-	rm -f crds/_helpers.tpl
-	sed -i '/{{/d' crds/*.yml crds/*.yaml
+image: image-token-proxy

 image-token-proxy:
 	docker buildx build images/token-proxy \
@@ -33,6 +21,3 @@ image-token-proxy:
 	IMAGE="$(REGISTRY)/token-proxy:$(call settag,$(TAG))@$$(yq e '."containerimage.digest"' images/token-proxy.json -r)" \
 		yq -i '.tokenProxy.image = strenv(IMAGE)' values.yaml
 	rm -f images/token-proxy.json
-
-update-tenant-text:
-	sed -i 's|\($$tenantText := "\)[^"]\+|\1$(TAG)|' templates/configmap.yaml
@@ -1,22 +0,0 @@
-# imported from https://github.com/PRO-Robotech/openapi-ui-k8s-bff
-ARG NODE_VERSION=20.18.1
-FROM node:${NODE_VERSION}-alpine AS builder
-WORKDIR /src
-
-# release/1.4.0
-ARG COMMIT_REF=92e4b618eb9ad17b19827b5a2b7ceab33e8cf534
-RUN wget -O- https://github.com/PRO-Robotech/openapi-ui-k8s-bff/archive/${COMMIT_REF}.tar.gz | tar xzf - --strip-components=1
-
-ENV PATH=/src/node_modules/.bin:$PATH
-RUN npm install
-RUN npm run build
-
-FROM node:${NODE_VERSION}-alpine
-WORKDIR /app
-COPY --from=builder /src/package*.json /app/
-COPY --from=builder /src/node_modules /app/node_modules
-COPY --from=builder /src/src/swagger/swagger-output.json /app/dist/swagger/swagger-output.json
-COPY --from=builder /src/dist /app/dist
-EXPOSE 8080
-USER 1001
-CMD [ "node", "/app/dist/index.js"]
@@ -1,69 +0,0 @@
-ARG NODE_VERSION=20.18.1
-
-# openapi-k8s-toolkit
-# imported from https://github.com/PRO-Robotech/openapi-k8s-toolkit
-FROM node:${NODE_VERSION}-alpine AS openapi-k8s-toolkit-builder
-RUN apk add git
-WORKDIR /src
-# release/1.4.0
-ARG COMMIT=d6b9e4ad0d1eb9d3730f7f0c664792c8dda3214d
-RUN wget -O- https://github.com/PRO-Robotech/openapi-k8s-toolkit/archive/${COMMIT}.tar.gz | tar -xzvf- --strip-components=1
-
-COPY openapi-k8s-toolkit/patches /patches
-RUN git apply /patches/*.diff
-
-RUN npm install
-RUN npm install --build-from-source @swc/core
-RUN npm run build
-
-
-# openapi-ui
-# imported from https://github.com/PRO-Robotech/openapi-ui
-FROM node:${NODE_VERSION}-alpine AS builder
-#RUN apk add git
-WORKDIR /src
-
-# release/1.4.0
-ARG COMMIT_REF=6addca6939264ef2e39801baa88c1460cc1aa53e
-RUN wget -O- https://github.com/PRO-Robotech/openapi-ui/archive/${COMMIT_REF}.tar.gz | tar xzf - --strip-components=1
-
-#COPY openapi-ui/patches /patches
-#RUN git apply /patches/*.diff
-
-ENV PATH=/src/node_modules/.bin:$PATH
-
-RUN npm install
-
-# add patched openapi-k8s-toolkit
-RUN rm -rf node_modules/@prorobotech/openapi-k8s-toolkit/dist
-COPY --from=openapi-k8s-toolkit-builder /src/dist node_modules/@prorobotech/openapi-k8s-toolkit/dist
-
-RUN npm run build
-
-FROM node:${NODE_VERSION}-alpine AS builder2
-WORKDIR /src
-ENV PATH=/src/node_modules/.bin:$PATH
-
-COPY --from=builder /src/server/package.json ./
-COPY --from=builder /src/server/package-lock.json ./
-RUN npm install
-COPY --from=builder /src/server server
-COPY --from=builder /src/tsconfig.server.json ./
-COPY --from=builder /src/build /src/build
-RUN npm run server:build
-
-FROM node:${NODE_VERSION}-alpine
-WORKDIR /app
-COPY --from=builder2 /src/node_modules /app/node_modules
-COPY --from=builder2 /src/build /app/build
-EXPOSE 8080
-RUN sed -i -e 's|OpenAPI UI|Cozystack|g' build/index.html
-# Fix Factory component: return null while loading instead of showing "Factory Not Found" 404
-RUN APP_JS=$(find build -name "App-react.js" -type f | head -1) && \
-    if [ -n "$APP_JS" ]; then \
-      sed -i 's|const { data: factoryData } = useK8sSmartResource({|const { data: factoryData, isLoading: factoryIsLoading } = useK8sSmartResource({|' "$APP_JS" && \
-      sed -i '/Factory Not Found/s/return /return factoryIsLoading ? null : /' "$APP_JS" && \
-      echo "Factory loading patch applied to $APP_JS"; \
-    fi
-USER 1001
-CMD ["node", "/app/build/index.js"]
@@ -1,17 +0,0 @@
-diff --git a/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts b/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts
--- a/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts
-+++ b/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts
-@@ -185,6 +185,11 @@
-                 return `['${escaped}']`
-               })
-             }
-            const jpQueryResult = jp.query(el, `$${resolvedJsonPath}`)
-            fieldValue = Array.isArray(jpQueryResult) && jpQueryResult.length === 1 ? jpQueryResult[0] : jpQueryResult
-+            if (/_flatMap[^\]]+_Key/.test(resolvedJsonPath)) {
-+              // Placeholder was not resolved (row not yet expanded or key missing) — skip query
-+              fieldValue = null
-+            } else {
-+              const jpQueryResult = jp.query(el, `$${resolvedJsonPath}`)
-+              fieldValue = Array.isArray(jpQueryResult) && jpQueryResult.length === 1 ? jpQueryResult[0] : jpQueryResult
-+            }
-           }
@@ -1,37 +0,0 @@
-diff --git a/src/localTypes/formExtensions.ts b/src/localTypes/formExtensions.ts
--- a/src/localTypes/formExtensions.ts
-+++ b/src/localTypes/formExtensions.ts
-@@ -59,2 +59,4 @@
-   relatedValuePath?: string
-+  allowEmpty?: boolean
-+  persistType?: 'str' | 'number' | 'arr' | 'obj'
- }
-diff --git a/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx b/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx
--- a/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx
-+++ b/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx
-@@ -149,3 +149,10 @@
-   }, [relatedPath, form, arrName, fixedName, relatedFieldValue, onValuesChangeCallBack, isTouchedPeristed])
-
-+  // When allowEmpty is set, auto-persist the field so the BFF preserves empty values
-+  useEffect(() => {
-+    if (customProps.allowEmpty) {
-+      persistedControls.onPersistMark(persistName || name, customProps.persistType ?? 'str')
-+    }
-+  }, [customProps.allowEmpty, customProps.persistType, persistedControls, persistName, name])
-+
-   const uri = prepareTemplate({
-@@ -267,5 +274,14 @@
-           validateTrigger="onBlur"
-           hasFeedback={designNewLayout ? { icons: feedbackIcons } : true}
-           style={{ flex: 1 }}
-+          normalize={(value: unknown) => {
-+            if (customProps.allowEmpty && (value === undefined || value === null)) {
-+              if (customProps.persistType === 'number') return 0
-+              if (customProps.persistType === 'arr') return []
-+              if (customProps.persistType === 'obj') return {}
-+              return ''
-+            }
-+            return value
-+          }}
-         >
-           <Select
@@ -1,29 +0,0 @@
-diff --git a/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx b/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx
--- a/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx
-+++ b/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx
-@@ -145,6 +145,12 @@
-               <Styled.DisabledInput
-                 $hidden={effectiveHidden}
-                 onClick={e => handleInputClick(e, effectiveHidden, value)}
-+                onCopy={e => {
-+                  if (!effectiveHidden) {
-+                    e.preventDefault()
-+                    e.clipboardData?.setData('text/plain', value)
-+                  }
-+                }}
-                 value={shownValue}
-                 readOnly
-               />
-@@ -161,6 +167,12 @@
-             <Styled.DisabledInput
-               $hidden={effectiveHidden}
-               onClick={e => handleInputClick(e, effectiveHidden, value)}
-+              onCopy={e => {
-+                if (!effectiveHidden) {
-+                  e.preventDefault()
-+                  e.clipboardData?.setData('text/plain', value)
-+                }
-+              }}
-               value={shownValue}
-               readOnly
-             />
@@ -1,50 +0,0 @@
-diff --git a/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx b/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx
-index 8bcef4d..2551e92 100644
--- a/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx
-+++ b/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx
-@@ -22,6 +22,15 @@ import { TableFactory } from '../../molecules'
- import { ShortenedTextWithTooltip, FilterDropdown, TrimmedTags, TextAlignContainer, TinyButton } from './atoms'
- import { TInternalDataForControls } from './types'
- 
-+const getPluralForm = (singular: string): string => {
-+  // If already ends with 's', add 'es'
-+  if (singular.endsWith('s')) {
-+    return `${singular}es`
-+  }
-+  // Otherwise just add 's'
-+  return `${singular}s`
-+}
-+
- export const getCellRender = ({
-   value,
-   record,
-@@ -255,7 +264,7 @@ export const getEnrichedColumnsWithControls = ({
-       key: 'controls',
-       className: 'controls',
-       width: 60,
-      render: (value: TInternalDataForControls) => {
-+      render: (value: TInternalDataForControls, record: unknown) => {
-         return (
-           // <TextAlignContainer $align="right" className="hideable">
-           <TextAlignContainer $align="center">
-@@ -279,10 +288,19 @@ export const getEnrichedColumnsWithControls = ({
-                   domEvent.stopPropagation()
-                   domEvent.preventDefault()
-                   if (key === 'edit') {
-+                    // Special case: redirect tenantmodules from core.cozystack.io to apps.cozystack.io with plural form
-+                    let apiGroupAndVersion = value.apiGroupAndVersion
-+                    let plural = value.plural
-+                    if (apiGroupAndVersion?.startsWith('core.cozystack.io/') && plural === 'tenantmodules') {
-+                      const appsApiVersion = apiGroupAndVersion.replace('core.cozystack.io/', 'apps.cozystack.io/')
-+                      const pluralName = getPluralForm(value.name)
-+                      apiGroupAndVersion = appsApiVersion
-+                      plural = pluralName
-+                    }
-                     navigate(
-                       `${baseprefix}/${value.cluster}${value.namespace ? `/${value.namespace}` : ''}${
-                         value.syntheticProject ? `/${value.syntheticProject}` : ''
-                      }/${value.pathPrefix}/${value.apiGroupAndVersion}/${value.plural}/${value.name}?backlink=${
-+                      }/${value.pathPrefix}/${apiGroupAndVersion}/${plural}/${value.name}?backlink=${
-                         value.backlink
-                       }`,
-                     )
@@ -1,24 +0,0 @@
-{{- $brandingConfig := .Values._cluster.branding | default dict }}
-
-{{- $tenantText := "v1.3.0" }}
-{{- $footerText := "Cozystack" }}
-{{- $titleText := "Cozystack Dashboard" }}
-{{- $logoText := "" }}
-{{- $logoSvg := "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 truncated
-{{- $iconSvg := "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" }}
-
---
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: incloud-web-dashboard-config
-  labels:
-    app.kubernetes.io/instance: incloud-web
-    app.kubernetes.io/name: web
-data:
-  CUSTOM_TENANT_TEXT: {{ $brandingConfig.tenantText | default $tenantText | quote }}
-  FOOTER_TEXT: {{ $brandingConfig.footerText | default $footerText | quote }}
-  TITLE_TEXT:  {{ $brandingConfig.titleText  | default $titleText  | quote }}
-  LOGO_TEXT:   {{ $brandingConfig.logoText   | default $logoText   | quote }}
-  CUSTOM_LOGO_SVG:    {{ $brandingConfig.logoSvg    | default $logoSvg    | quote }}
-  ICON_SVG:    {{ $brandingConfig.iconSvg    | default $iconSvg    | quote }}
@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: incloud-web-nginx
+  name: cozy-dashboard-console
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: incloud-web-nginx
+  name: cozy-dashboard-console
 spec:
  ports:
-    - name: nginx-http
+    - name: http
      port: 8080
      protocol: TCP
      targetPort: 8080
  selector:
-    app.kubernetes.io/instance: incloud-web
-    app.kubernetes.io/name: nginx
+    app.kubernetes.io/instance: cozy-dashboard
+    app.kubernetes.io/name: console
  type: ClusterIP
@@ -1,13 +1,13 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: incloud-web-nginx
+  name: cozy-dashboard-console
 spec:
  replicas: 1
  selector:
    matchLabels:
-      app.kubernetes.io/instance: incloud-web
-      app.kubernetes.io/name: nginx
+      app.kubernetes.io/instance: cozy-dashboard
+      app.kubernetes.io/name: console
  strategy:
    rollingUpdate:
      maxSurge: 25%
@@ -15,11 +15,9 @@ spec:
    type: RollingUpdate
  template:
    metadata:
-      annotations:
-        checksum/config: {{ include (print $.Template.BasePath "/nginx-config.yaml") . | sha256sum }}
      labels:
-        app.kubernetes.io/instance: incloud-web
-        app.kubernetes.io/name: nginx
+        app.kubernetes.io/instance: cozy-dashboard
+        app.kubernetes.io/name: console
    spec:
      affinity:
        podAntiAffinity:
@@ -30,15 +28,15 @@ spec:
                    - key: app.kubernetes.io/name
                      operator: In
                      values:
-                        - appSpec
+                        - console
                    - key: app.kubernetes.io/instance
                      operator: In
                      values:
-                        - incloud-web
+                        - cozy-dashboard
                topologyKey: kubernetes.io/hostname
              weight: 100
      containers:
-        - image: nginxinc/nginx-unprivileged:1.29-alpine
+        - image: {{ .Values.console.image | quote }}
          imagePullPolicy: IfNotPresent
          livenessProbe:
            failureThreshold: 3
@@ -50,7 +48,14 @@ spec:
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 2
-          name: nginx
+          startupProbe:
+            httpGet:
+              path: /healthcheck
+              port: 8080
+              scheme: HTTP
+            failureThreshold: 30
+            periodSeconds: 2
+          name: console
          ports:
            - containerPort: 8080
              name: http
@@ -78,23 +83,13 @@ spec:
              type: RuntimeDefault
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
-          volumeMounts:
-            - mountPath: /etc/nginx/conf.d/default.conf
-              name: configurationnginxfile
-              subPath: nginx-config
      dnsPolicy: ClusterFirst
      enableServiceLinks: false
      hostIPC: false
      hostNetwork: false
      hostPID: false
-      preemptionPolicy: null
      priorityClassName: system-cluster-critical
      restartPolicy: Always
-      runtimeClassName: null
      schedulerName: default-scheduler
-      serviceAccountName: incloud-web-nginx
+      serviceAccountName: cozy-dashboard-console
      terminationGracePeriodSeconds: 30
-      volumes:
-        - configMap:
-            name: incloud-web-nginx-config
-          name: configurationnginxfile
@@ -52,7 +52,7 @@ spec:
          imagePullPolicy: IfNotPresent
          args:
            - --provider=oidc
-            - --upstream=http://incloud-web-nginx.{{ .Release.Namespace }}.svc:8080
+            - --upstream=http://cozy-dashboard-console.{{ .Release.Namespace }}.svc:8080
            - --http-address=0.0.0.0:8000
            - --redirect-url=https://dashboard.{{ $host }}/oauth2/callback
            - --oidc-issuer-url=https://keycloak.{{ $host }}/realms/cozy
@@ -97,7 +97,7 @@ spec:
          image: {{ .Values.tokenProxy.image }}
          imagePullPolicy: IfNotPresent
          args:
-            - --upstream=http://incloud-web-nginx.{{ .Release.Namespace }}.svc:8080
+            - --upstream=http://cozy-dashboard-console.{{ .Release.Namespace }}.svc:8080
            - --http-address=0.0.0.0:8000
            - --cookie-refresh=1h
            - --cookie-name=kc-access
@@ -1,97 +0,0 @@
-{{- $host := index .Values._cluster "root-host" }}
-
-apiVersion: v1
-data:
-  nginx-config: |-
-    map $http_upgrade $connection_upgrade {
-        default upgrade;
-        '' close;
-    }
-
-    server {
-      listen       8080 default_server;
-      listen       [::]:8080 default_server;
-      server_name  _;
-
-      location ~ ^(/clusterlist|/api/clusters)$ {
-        add_header Content-Type application/json;
-        set $cluster_list '[{"api":"{{ $host }}","baseDomain":"{{ $host }}","description":"dashboard.{{ $host }}","externalDomain":"dashboard.{{ $host }}","name":"default","tenant":"dev"}]';
-        return 200 $cluster_list;
-      }
-
-      location /api/clusters/default {
-          proxy_http_version 1.1;
-          proxy_set_header Upgrade $http_upgrade;
-          proxy_set_header Connection $connection_upgrade;
-          proxy_set_header X-Forwarded-Proto $scheme;
-          proxy_set_header Host $host;
-          proxy_read_timeout 86400s;
-          proxy_send_timeout 86400s;
-
-          rewrite /api/clusters/default/(.*) /$1  break;
-          proxy_pass http://incloud-web-nginx.{{ .Release.Namespace }}.svc:8080;
-      }
-
-      location /k8s/clusters/default/ {
-          proxy_http_version 1.1;
-          proxy_set_header Upgrade $http_upgrade;
-          proxy_set_header Connection $connection_upgrade;
-          proxy_set_header X-Forwarded-Proto $scheme;
-          proxy_set_header Host $host;
-          proxy_read_timeout 86400s;
-          proxy_send_timeout 86400s;
-
-          rewrite /k8s/clusters/default/(.*) /$1  break;
-          proxy_pass https://kubernetes.default.svc:443;
-      }
-
-      location /k8s {
-          proxy_http_version 1.1;
-          proxy_set_header Upgrade $http_upgrade;
-          proxy_set_header Connection $connection_upgrade;
-          proxy_set_header X-Forwarded-Proto $scheme;
-          proxy_set_header Host $host;
-          proxy_read_timeout 86400s;
-          proxy_send_timeout 86400s;
-
-          rewrite /k8s/(.*) /$1  break;
-          proxy_pass https://kubernetes.default.svc:443;
-      }
-
-      location /openapi-bff {
-          proxy_pass http://incloud-web-web.{{ .Release.Namespace }}.svc:64231;
-      }
-
-
-      location /openapi-bff-ws/ {
-          proxy_http_version 1.1;
-          proxy_set_header Upgrade $http_upgrade;
-          proxy_set_header Connection $connection_upgrade;
-          proxy_set_header X-Forwarded-Proto $scheme;
-          proxy_set_header Host $host;
-          proxy_read_timeout 86400s;
-          proxy_send_timeout 86400s;
-
-          proxy_pass http://incloud-web-web.{{ .Release.Namespace }}.svc:64231;
-      }
-
-      location = /docs {
-          return 301 https://cozystack.io/docs/;
-      }
-
-      location = / {
-          return 301 https://dashboard.{{ $host }}/openapi-ui;
-      }
-
-      location / {
-          proxy_pass http://incloud-web-web.{{ .Release.Namespace }}.svc:8080;
-      }
-
-      location /healthcheck {
-          access_log off;
-          return 200 "Healthy\n";
-      }
-    }
-kind: ConfigMap
-metadata:
-  name: incloud-web-nginx-config
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: incloud-web-web
@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: incloud-web-web
-spec:
-  ports:
-    - name: bff-http
-      port: 64231
-      protocol: TCP
-      targetPort: 64231
-    - name: web-http
-      port: 8080
-      protocol: TCP
-      targetPort: 8080
-  selector:
-    app.kubernetes.io/instance: incloud-web
-    app.kubernetes.io/name: web
-  type: ClusterIP
@@ -1,196 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: incloud-web-web
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: incloud-web
-      app.kubernetes.io/name: web
-  strategy:
-    rollingUpdate:
-      maxSurge: 25%
-      maxUnavailable: 25%
-    type: RollingUpdate
-  template:
-    metadata:
-      annotations:
-        checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
-      labels:
-        app.kubernetes.io/instance: incloud-web
-        app.kubernetes.io/name: web
-    spec:
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - podAffinityTerm:
-                labelSelector:
-                  matchExpressions:
-                    - key: app.kubernetes.io/name
-                      operator: In
-                      values:
-                        - appSpec
-                    - key: app.kubernetes.io/instance
-                      operator: In
-                      values:
-                        - incloud-web
-                topologyKey: kubernetes.io/hostname
-              weight: 100
-      containers:
-        - env:
-            - name: BASEPREFIX
-              value: /openapi-ui
-            - name: HIDE_INSIDE
-              value: "true"
-            - name: CUSTOMIZATION_API_GROUP
-              value: dashboard.cozystack.io
-            - name: CUSTOMIZATION_API_VERSION
-              value: v1alpha1
-            - name: CUSTOMIZATION_CFOMAPPING_RESOURCE_NAME
-              value: cfomapping
-            - name: CUSTOMIZATION_CFOMAPPING_RESOURCE_PLURAL
-              value: cfomappings
-            - name: CUSTOMIZATION_CFO_FALLBACK_ID
-              value: ""
-            - name: CUSTOMIZATION_NAVIGATION_RESOURCE_NAME
-              value: navigation
-            - name: CUSTOMIZATION_NAVIGATION_RESOURCE_PLURAL
-              value: navigations
-            - name: CUSTOMIZATION_SIDEBAR_FALLBACK_ID
-              value: ""
-            - name: CUSTOMIZATION_BREADCRUMBS_FALLBACK_ID
-              value: stock-project-api-table
-            - name: INSTANCES_API_GROUP
-              value: dashboard.cozystack.io
-            - name: INSTANCES_API_VERSION
-              value: v1alpha1
-            - name: INSTANCES_PLURAL
-              value: instances
-            - name: MARKETPLACE_KIND
-              value: MarketplacePanel
-            - name: MARKETPLACE_PLURAL
-              value: marketplacepanels
-            - name: NAVIGATE_FROM_CLUSTERLIST
-              value: /openapi-ui/~recordValue~/api-table/core.cozystack.io/v1alpha1/tenantnamespaces
-            - name: PROJECTS_API_GROUP
-              value: core.cozystack.io
-            - name: PROJECTS_API_VERSION
-              value: v1alpha1
-            - name: PROJECTS_PLURAL
-              value: tenantnamespaces
-            - name: CUSTOM_NAMESPACE_API_RESOURCE_API_GROUP
-              value: core.cozystack.io
-            - name: CUSTOM_NAMESPACE_API_RESOURCE_API_VERSION
-              value: v1alpha1
-            - name: CUSTOM_NAMESPACE_API_RESOURCE_PLURAL
-              value: tenantnamespaces
-            - name: BASE_FACTORY_NAMESPACED_API_KEY
-              value: base-factory-namespaced-api
-            - name: BASE_FACTORY_CLUSTERSCOPED_API_KEY
-              value: base-factory-clusterscoped-api
-            - name: BASE_FACTORY_NAMESPACED_BUILTIN_KEY
-              value: base-factory-namespaced-builtin
-            - name: BASE_FACTORY_CLUSTERSCOPED_BUILTIN_KEY
-              value: base-factory-clusterscoped-builtin
-            - name: BASE_NAMESPACE_FACTORY_KEY
-              value: base-factory-clusterscoped-builtin
-            - name: USE_NAMESPACE_NAV
-              value: "true"
-            - name: USE_NEW_NAVIGATION
-              value: "true"
-            - name: HIDE_NAVIGATION
-              value: "true"
-            - name: LOGIN_URL
-              value: "/oauth2/userinfo"
-            - name: LOGOUT_URL
-              value: "/oauth2/sign_out"
-            - name: LOGIN_USERNAME_FIELD
-              value: "preferredUsername"
-            - name: FOOTER_TEXT
-              valueFrom:
-                configMapKeyRef:
-                  name: incloud-web-dashboard-config
-                  key: FOOTER_TEXT
-            - name: TITLE_TEXT
-              valueFrom:
-                configMapKeyRef:
-                  name: incloud-web-dashboard-config
-                  key: TITLE_TEXT
-            - name: CUSTOM_TENANT_TEXT
-              valueFrom:
-                configMapKeyRef:
-                  name: incloud-web-dashboard-config
-                  key: CUSTOM_TENANT_TEXT
-            - name: LOGO_TEXT
-              valueFrom:
-                configMapKeyRef:
-                  name: incloud-web-dashboard-config
-                  key: LOGO_TEXT
-            - name: CUSTOM_LOGO_SVG
-              valueFrom:
-                configMapKeyRef:
-                  name: incloud-web-dashboard-config
-                  key: CUSTOM_LOGO_SVG
-            - name: ICON_SVG
-              valueFrom:
-                configMapKeyRef:
-                  name: incloud-web-dashboard-config
-                  key: ICON_SVG
-          image: {{ .Values.openapiUI.image | quote }}
-          imagePullPolicy: IfNotPresent
-          livenessProbe:
-            failureThreshold: 3
-            httpGet:
-              path: /healthcheck
-              port: 8080
-              scheme: HTTP
-            initialDelaySeconds: 3
-            periodSeconds: 10
-            successThreshold: 1
-            timeoutSeconds: 2
-          startupProbe:
-            httpGet:
-              path: /healthcheck
-              port: 8080
-              scheme: HTTP
-            failureThreshold: 30
-            periodSeconds: 2
-          name: web
-          ports:
-            - containerPort: 8080
-              name: http
-              protocol: TCP
-          resources:
-            limits:
-              cpu: 200m
-              memory: 256Mi
-            requests:
-              cpu: 100m
-              ephemeral-storage: 50Mi
-              memory: 128Mi
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              add: []
-              drop:
-                - ALL
-            privileged: false
-            readOnlyRootFilesystem: false
-            runAsGroup: 0
-            runAsNonRoot: true
-            runAsUser: 101
-            seccompProfile:
-              type: RuntimeDefault
-          terminationMessagePath: /dev/termination-log
-          terminationMessagePolicy: File
-      dnsPolicy: ClusterFirst
-      enableServiceLinks: false
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      priorityClassName: system-cluster-critical
-      restartPolicy: Always
-      schedulerName: default-scheduler
-      serviceAccountName: incloud-web-web
-      terminationGracePeriodSeconds: 30
@@ -1,4 +1,4 @@
-openapiUI:
+console:
  image: 999669/cozystack-ui:latest@sha256:a93a92a8f7b8d7c4842876215f737d782ad373ff8f4ceb89d7b536945184341e
 tokenProxy:
  image: ghcr.io/cozystack/cozystack/token-proxy:v1.3.0@sha256:2e280991e07853ea48f97b0a42946afffa10d03d6a83d41099ed83e6ffc94fdc