feat(outline): added initial chart

outline/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

outline/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: Outline
+description: A Helm chart to deploy Outline on Kubernetes
+
+type: application
+
+version: 1.0.0+upv1.6.1
+appVersion: "v1.6.1"
+
+maintainers:
+  - name: jklein

outline/templates/outline-db.secret.yaml

@@ -0,0 +1,6 @@
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: {{ .Release.Name }}-{{ .Chart.Name }}-db-secret
+spec:
+  itemPath: {{ required "A Secret-Reference for the config must be provided" .Values.secrets.dbSecretRef }}

outline/templates/outline-redis.secret.yaml

@@ -0,0 +1,6 @@
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: {{ .Release.Name }}-{{ .Chart.Name }}-redis-secret
+spec:
+  itemPath: {{ required "A Secret-Reference for the config must be provided" .Values.secrets.redisSecretRef }}

outline/templates/outline.pvc.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ .Release.Name }}-{{ .Chart.Name }}-pvc
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: {{ .Values.outline.storage.size }}
+  {{- if .Values.outline.storage.storageClass }}
+  storageClassName: {{ .Values.outline.storage.storageClass }}
+  {{- end }}

outline/templates/outline.secret.yaml

@@ -0,0 +1,6 @@
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: {{ .Release.Name }}-{{ .Chart.Name }}-secret
+spec:
+  itemPath: {{ required "A Secret-Reference for the config must be provided" .Values.secrets.configSecretRef }}

outline/templates/outline.sfs.yaml

@@ -0,0 +1,80 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
+  labels:
+    app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
+spec:
+  serviceName: {{ .Release.Name }}-{{ .Chart.Name }}-service
+  replicas: 1
+  selector:
+    matchLabels:
+      app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
+  template:
+    metadata:
+      name: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
+      labels:
+        app: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
+    spec:
+      automountServiceAccountToken: false
+      securityContext:
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+      containers:
+        - name: {{ .Release.Name }}-{{ .Chart.Name }}-sfs
+          image: "outlinewiki/outline:{{ .Chart.AppVersion }}"
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: PORT
+              value: "80"
+            - name: URL
+              value: "https://{{ .Values.ingress.domain }}"
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Release.Name }}-{{ .Chart.Name }}-secret
+                  key: outline-secret-key
+            - name: UTILS_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Release.Name }}-{{ .Chart.Name }}-secret
+                  key: outline-utils-secret
+            - name: DATABASE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Release.Name }}-{{ .Chart.Name }}-db-secret
+                  key: connection-url
+            - name: PGSSLMODE
+              value: disable
+            - name: REDIS_URL
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Release.Name }}-{{ .Chart.Name }}-redis-secret
+                  key: connection-url
+            - name: FILE_STORAGE
+              value: "local"
+            - name: FILE_STORAGE_LOCAL_ROOT_DIR
+              value: "/outline-data/data"
+          ports:
+            - containerPort: 80
+              protocol: TCP
+              name: http
+          # TODO: Add liveness and readiness probes
+          resources:
+            requests:
+              memory: "{{ .Values.outline.resources.requests.memory }}"
+              cpu: "{{ .Values.outline.resources.requests.cpu }}"
+              ephemeral-storage: "{{ .Values.outline.resources.requests.ephemeralStorage }}"
+            limits:
+              memory: "{{ .Values.outline.resources.limits.memory }}"
+              cpu: "{{ .Values.outline.resources.limits.cpu }}"
+              ephemeral-storage: "{{ .Values.outline.resources.limits.ephemeralStorage }}"
+          volumeMounts:
+            - mountPath: "/outline-data/data"
+              name: outline-data
+              subPath: data
+      restartPolicy: Always
+      volumes:
+        - name: outline-data
+          persistentVolumeClaim:
+            claimName: {{ .Release.Name }}-{{ .Chart.Name }}-pvc

outline/values.yaml

@@ -0,0 +1,22 @@
+secrets:
+  configSecretRef: null
+  redisSecretRef: null
+  dbSecretRef: null
+outline:
+  storage:
+    size: 10Gi
+    storageClass: null
+  resources:
+    requests:
+      cpu: 0.1
+      memory: 512Mi
+      ephemeralStorage: 10Mi
+    limits:
+      cpu: 1
+      memory: 768Mi
+      ephemeralStorage: 100Mi
+
+ingress:
+  enabled: true
+  clusterIssuer: letsencrypt
+  domain: null