ChartMuseum

.gitlab-ci.yml

@@ -3,6 +3,7 @@ variables:
   INFRA_SRC: ${CI_PROJECT_DIR}/infra
   TEAMSPEAK_SRC: ${CI_PROJECT_DIR}/teamspeak
   DEFIANT_SRC: ${CI_PROJECT_DIR}/defiant
+  CHARTMUSEUM_SRC: ${CI_PROJECT_DIR}/defiant
 
   IMAGE_PREFIX: registry.gitlab.com/momothereal/momoperes.ca
   WEBSITE_IMAGE: ${IMAGE_PREFIX}/website
@@ -129,9 +130,29 @@ defiant:deploy:
 
     # Deploy using helm chart
     - cd ${DEFIANT_SRC}
+    - helm init --client-only && helm repo update
     - helm upgrade --install --force --namespace ${DEPLOY_NAMESPACE} --set image.name=${DEFIANT_IMAGE},image.tag=${CI_COMMIT_REF_SLUG}-${CI_COMMIT_SHORT_SHA} defiant ./chart/defiant
   only:
     refs:
       - master
     changes:
-      - defiant/**/*
+      - defiant/**/*
+
+# CHART MUSEUM #
+
+chartmuseum:deploy:
+  stage: deploy
+  image: lwolf/helm-kubectl-docker:v1.15.4-v2.14.3
+  script:
+    - mkdir -p ${KUBECONFIG_PARENT}
+    - echo ${K8S_CLUSTER_CONFIG} | base64 -d > ${KUBECONFIG}
+
+    # Deploy using helm chart
+    - cd ${CHARTMUSEUM_SRC}
+    - helm init --client-only && helm repo update
+    - helm upgrade --install --force --namespace ${DEPLOY_NAMESPACE} -f values.yaml chartmuseum stable/chartmuseum
+  only:
+    refs:
+      - master
+    changes:
+      - chartmuseum/**/*

chartmuseum/.gitignore

@@ -0,0 +1 @@
+secret.yaml

chartmuseum/secret-template.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: chartmuseum-credentials
+data:
+  username: ${USERNAME}
+  password: ${PASSWORD}

chartmuseum/values.yaml

@@ -0,0 +1,22 @@
+env:
+  existingSecret: chartmuseum-credentials
+  existingSecretMappings:
+    BASIC_AUTH_USER: username
+    BASIC_AUTH_PASS: password
+
+service:
+  servicename: chartmuseum
+
+resources: {}
+  limits:
+    cpu: 100m
+    memory: 128Mi
+  requests:
+    cpu: 80m
+    memory: 64Mi
+
+persistence:
+  enabled: true
+  accessMode: ReadWriteOnce
+  size: 1Gi
+  storageClass: do-block-storage

infra/manifests/ingress.yaml

@@ -9,7 +9,7 @@ spec:
     - hosts:
         - momoperes.ca
         - defiant.momoperes.ca
-        - stream.momoperes.ca
+        - charts.momoperes.ca
       secretName: momoperes.ca-wildcard-tls
   rules:
     - host: momoperes.ca
@@ -30,10 +30,10 @@ spec:
             backend:
               serviceName: defiant
               servicePort: 80
-    - host: stream.momoperes.ca
+    - host: charts.momoperes.ca
       http:
         paths:
           - path: /
             backend:
-              serviceName: media-server-radarr
-              servicePort: 7878
+              serviceName: chartmuseum
+              servicePort: 8080