0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-10 06:24:09 +09:00

Files

T

History

Andrei Kvapil e7b62ca3c8 [platform] Replace Helm lookup with valuesFrom mechanism (#1787 )

## What this PR does

Replaces Helm lookup functions with FluxCD valuesFrom mechanism for
passing configuration to HelmReleases. This provides cleaner config
propagation and eliminates the need for force reconcile controllers.

### Changes:

**Platform/Tenant charts:**
- Add Secret `cozystack-values` creation in platform chart (for
tenant-root and system namespaces)
- Add Secret `cozystack-values` creation in tenant chart (for child
namespaces)

**cozystack-api:**
- Add `valuesFrom` references to HelmRelease when creating applications
- Filter keys starting with `_` when returning Application specs
- Validate that user values don't contain `_` prefixed keys

**cozystack-controller:**
- Add validation that HelmRelease contains correct valuesFrom
configuration
- Remove `CozystackConfigReconciler` (no longer needed)
- Remove `TenantHelmReconciler` (no longer needed)

**Helm charts (40+ files):**
- Add helper templates in cozy-lib for `_cluster`/`_namespace` access
- Replace ConfigMap lookups with `.Values._cluster.*`
- Replace Namespace annotation lookups with `.Values._namespace.*`

### Architecture:

```
Secret cozystack-values (in each namespace)
├── _cluster: YAML with data from ConfigMaps (cozystack, cozystack-branding, cozystack-scheduling)
└── _namespace: YAML with namespace service references (etcd, host, ingress, monitoring, seaweedfs)

HelmRelease
└── spec.valuesFrom:
    ├── Secret/cozystack-values → _namespace → .Values._namespace
    └── Secret/cozystack-values → _cluster → .Values._cluster
```

### Release note

```release-note
[platform] Replace Helm lookup functions with FluxCD valuesFrom mechanism for configuration propagation
```

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Helm releases and namespaces now source centralized cluster/namespace
configuration via a new secret (cozystack-values), and many templates
read values from chart-provided _cluster/_namespace entries.

* **Bug Fixes**
* API now rejects application specs containing reserved keys prefixed
with "_" to prevent invalid configurations.

* **Refactor**
* Two background reconciler controllers were removed from startup,
simplifying controller initialization.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-01-09 14:54:01 +01:00

charts

Capture all resources by WorkloadMonitors

2025-06-03 15:40:27 +03:00

logos

Update dashboard icons (#274 )

2024-08-12 14:47:11 +02:00

templates

[platform] Replace Helm lookup with valuesFrom mechanism (#1787 )

2026-01-09 14:54:01 +01:00

.helmignore

Ship all logos with Cozystack

2024-07-16 17:31:52 +02:00

Chart.yaml

Remove versions_map logic

2025-09-24 12:32:37 +02:00

Makefile

[cozystack-api] Implement TenantNamespace, TenantModules, TenantSecret and TenantSecretsTable resources

2025-09-24 18:27:54 +02:00

README.md

[dx] JSDoc compatible syntax for values.yaml

2025-10-29 08:57:26 +05:00

values.schema.json

[dx] JSDoc compatible syntax for values.yaml

2025-10-29 08:57:26 +05:00

values.yaml

[dx] JSDoc compatible syntax for values.yaml

2025-10-29 08:57:26 +05:00

README.md

Managed VPN Service

A Virtual Private Network (VPN) is a critical tool for ensuring secure and private communication over the internet. Managed VPN Service simplifies the deployment and management of VPN server, enabling you to establish secure connections with ease.

VPN client applications: https://shadowsocks5.github.io/en/download/clients.html

Deployment Details

The VPN Service is powered by the Outline Server, an advanced and user-friendly VPN solution. Internally known as "Shadowbox", which simplifies the process of setting up and sharing Shadowsocks servers. It operates by launching Shadowsocks instances on demand. Furthermore, Shadowbox is compatible with standard Shadowsocks clients, providing flexibility and ease of use for your VPN requirements.

Parameters

Common parameters

Name	Description	Type	Value
`replicas`	Number of VPN server replicas.	`int`	`2`
`resources`	Explicit CPU and memory configuration for each VPN server replica. When omitted, the preset defined in `resourcesPreset` is applied.	`object`	`{}`
`resources.cpu`	CPU available to each replica.	`quantity`	`""`
`resources.memory`	Memory (RAM) available to each replica.	`quantity`	`""`
`resourcesPreset`	Default sizing preset used when `resources` is omitted.	`string`	`nano`
`external`	Enable external access from outside the cluster.	`bool`	`false`

Application-specific parameters

Name	Description	Type	Value
`host`	Host used to substitute into generated URLs.	`string`	`""`
`users`	Users configuration map.	`map[string]object`	`{}`
`users[name].password`	Password for the user (autogenerated if not provided).	`string`	`""`
`externalIPs`	List of externalIPs for service. Optional. If not specified, will use LoadBalancer service by default.	`[]string`	`[]`

Parameter examples and reference

resources and resourcesPreset

resources sets explicit CPU and memory configurations for each replica. When left empty, the preset defined in resourcesPreset is applied.

resources:
  cpu: 4000m
  memory: 4Gi

resourcesPreset sets named CPU and memory configurations for each replica. This setting is ignored if the corresponding resources value is set.

Preset name	CPU	memory
`nano`	`250m`	`128Mi`
`micro`	`500m`	`256Mi`
`small`	`1`	`512Mi`
`medium`	`1`	`1Gi`
`large`	`2`	`2Gi`
`xlarge`	`4`	`4Gi`
`2xlarge`	`8`	`8Gi`

users

users:                              
  user1:                            
    password: hackme                
  user2: {} # autogenerated password

externalIPs

externalIPs:       
  - "11.22.33.44"
  - "11.22.33.45"
  - "11.22.33.46"