feat: add mongodb subchart (#132)

Author: mikhail-klimko

charts/mongodb/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/mongodb/Chart.yaml

@@ -0,0 +1,18 @@
+apiVersion: v2
+name: mongodb
+description: MongoDB database Helm chart
+version: 0.1.0
+appVersion: "7.0"
+type: application
+keywords:
+  - mongodb
+  - database
+  - nosql
+home: https://codefresh.io/
+maintainers:
+  - name: codefresh
+    url: https://codefresh-io.github.io/
+dependencies:
+  - name: cf-common
+    repository: oci://quay.io/codefresh/charts
+    version: "0.31.0"

charts/mongodb/templates/configmap.yaml

@@ -0,0 +1,2 @@
+{{ $templateName := printf "cf-common-%s.configmaps" (index .Subcharts "cf-common").Chart.Version }}
+{{- include $templateName . -}}

charts/mongodb/templates/controller.yaml

@@ -0,0 +1,2 @@
+{{ $templateName := printf "cf-common-%s.controller" (index .Subcharts "cf-common").Chart.Version }}
+{{- include $templateName . -}}

charts/mongodb/templates/hooks/job.yaml

@@ -0,0 +1,34 @@
+{{- if .Values.config.net.tls }}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: mongodb-tls-init
+  annotations:
+    helm.sh/hook: post-install,post-upgrade
+    helm.sh/hook-weight: "-5"
+    helm.sh/hook-delete-policy: before-hook-creation
+spec:
+  template:
+    metadata:
+      name: mongodb-tls-init
+    spec:
+      restartPolicy: Never
+      containers:
+      - name: mongodb-tls-init
+        image: {{ printf "%s/%s:%s" .Values.container.image.registry .Values.container.image.repository .Values.container.image.tag }}
+        imagePullPolicy: {{ .Values.container.image.pullPolicy }}
+        env:
+        - name: MONGO_INITDB_ROOT_USERNAME
+          value: {{ .Values.auth.rootUser }}
+        - name: MONGO_INITDB_ROOT_PASSWORD
+          value: {{ .Values.auth.rootPassword }}
+        - name: MONGO_HOSTNAME
+          value: {{ .Values.fullnameOverride }}
+        command:
+        - /bin/bash
+        - -c
+        - |
+          MONGO_URI="mongodb://$MONGO_INITDB_ROOT_USERNAME:$MONGO_INITDB_ROOT_PASSWORD@$MONGO_HOSTNAME:27017/?authSource=admin"
+
+          mongosh "$MONGO_URI" --eval 'db.getSiblingDB("\$external").runCommand( { createUser: "O=CfClients,CN=cfuser", roles: [ { role: "readWrite", db: "test" }, { role: "userAdminAnyDatabase", db: "admin" }, { role: "readWrite", db: "codefresh" }, { role: "readWrite", db: "pipeline-manager" }, { role: "readWrite", db: "runtime-environment-manager" }, { role: "readWrite", db: "context-manager" }, { role: "readWrite", db: "cluster-providers" }, { role: "readWrite", db: "charts-manager" }, { role: "readWrite", db: "k8s-monitor" }, { role: "readWrite", db: "read-models" }, { role: "readWrite", db: "audit" }, { role: "readWrite", db: "platform-analytics-postgres" } ], writeConcern: { w: "majority" , wtimeout: 5000 } } )'
+{{- end }}

charts/mongodb/templates/secret.yaml

@@ -0,0 +1,2 @@
+{{ $templateName := printf "cf-common-%s.secrets" (index .Subcharts "cf-common").Chart.Version }}
+{{- include $templateName . -}}

charts/mongodb/templates/service.yaml

@@ -0,0 +1,2 @@
+{{ $templateName := printf "cf-common-%s.service" (index .Subcharts "cf-common").Chart.Version }}
+{{- include $templateName . -}}

charts/mongodb/values.yaml

@@ -0,0 +1,120 @@
+fullnameOverride: mongodb
+
+auth:
+  rootUser: root
+  rootPassword: password
+  database: ""
+
+config:
+  storage:
+    dbPath: /data/db
+  net:
+    port: 27017
+    bindIp: 0.0.0.0
+
+global: {}
+
+controller:
+  enabled: true
+  type: statefulset
+  replicas: 1
+  podManagementPolicy: OrderedReady
+
+container:
+  image:
+    registry: docker.io
+    repository: mongo
+    tag: "7.0"
+    pullPolicy: IfNotPresent
+
+  args:
+    - "--config"
+    - "/etc/mongod.conf"
+
+  probes:
+    liveness:
+      enabled: true
+      type: exec
+      exec:
+        command:
+          - mongosh
+          - --eval
+          - "db.adminCommand('ping')"
+      spec:
+        initialDelaySeconds: 30
+        periodSeconds: 20
+        timeoutSeconds: 10
+        successThreshold: 1
+        failureThreshold: 6
+    readiness:
+      enabled: true
+      type: exec
+      exec:
+        command:
+          - mongosh
+          - --eval
+          - "db.adminCommand('ping')"
+      spec:
+        initialDelaySeconds: 5
+        periodSeconds: 10
+        timeoutSeconds: 5
+        successThreshold: 1
+        failureThreshold: 6
+
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+    limits:
+      cpu: 500m
+      memory: 512Mi
+
+  volumeMounts:
+    config:
+      path:
+        - mountPath: /etc/mongod.conf
+          subPath: mongod.conf
+
+volumeClaimTemplates:
+  data:
+    mountPath: /data/db
+    accessMode: ReadWriteOnce
+    size: 10Gi
+    storageClass:
+
+secrets:
+  secret:
+    enabled: true
+    stringData: |
+      MONGO_INITDB_ROOT_USERNAME: "{{ .Values.auth.rootUser }}"
+      MONGO_INITDB_ROOT_PASSWORD: "{{ required ".Values.auth.rootPassword is required" .Values.auth.rootPassword }}"
+      {{- if .Values.auth.database }}
+      MONGO_INITDB_DATABASE: "{{ .Values.auth.database }}"
+      {{- end }}
+
+configMaps:
+  config:
+    enabled: true
+    data:
+      mongod.conf: |
+        {{- toYaml .Values.config | nindent 2 }}
+
+volumes:
+  config:
+    enabled: true
+    type: configMap
+
+service:
+  main:
+    enabled: true
+    primary: true
+    type: ClusterIP
+    ports:
+      mongodb:
+        port: 27017
+        protocol: TCP
+
+podSecurityContext: {}
+nodeSelector: {}
+tolerations: []
+affinity: {}