Skip to content
This repository has been archived by the owner on Sep 18, 2024. It is now read-only.

Commit

Permalink
trino x-onyxia
Browse files Browse the repository at this point in the history
  • Loading branch information
@fcomte
fcomte committed Jul 15, 2022
1 parent 78fa939 commit 3cd6ccf
Show file tree
Hide file tree
Showing 2 changed files with 144 additions and 109 deletions.
2 changes: 1 addition & 1 deletion charts/trino/Chart.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ type: application
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)

version: 3.1.0
version: 3.2.0


# This is the version number of the application being deployed. This version number should be
Expand Down
251 changes: 143 additions & 108 deletions charts/trino/values.schema.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -219,6 +219,9 @@
"default": "admin",
"x-form": {
"value": "{{project.id}}"
},
"x-onyxia": {
"overwriteDefaultWith": "{{project.id}}"
}
},
"password": {
Expand All @@ -227,118 +230,146 @@
"default": "changeme",
"x-form": {
"value": "{{project.password}}"
}
},
"allowlist": {
"type": "object",
"description": "IP protection",
"properties": {
"enabled": {
"type": "boolean",
"title": "Enable IP protection",
"description": "Only the configured set of IPs will be able to reach the service",
"default": true,
"x-form": {
"value": "{{region.defaultIpProtection}}"
}
},
"ip": {
"type": "string",
"description": "the white list of IP is whitespace",
"title": "Whitelist of IP",
"x-form": {
"value": "{{user.ip}}"
},
"hidden": {
"value": false,
"path": "security/allowlist/enabled"
}
}
}
},
"networkPolicy": {
"type": "object",
"description": "Define access policy to the service",
"properties": {
"enabled": {
"type": "boolean",
"title": "Enable network policy",
"description": "Only pod from the same namespace will be allowed",
"default": true,
"x-form": {
"value": "{{region.defaultNetworkPolicy}}"
}
}
}
}
}
},
"s3": {
"description": "Configuration of temporary identity",
"type": "object",
"properties": {
"enabled": {
"type": "boolean",
"description": "Add S3 temporary identity inside your environment",
"default": true
},
"accessKeyId": {
"description": "AWS Access Key",
"type": "string",
"x-form": {
"value": "{{s3.AWS_ACCESS_KEY_ID}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
},
"endpoint": {
"description": "AWS S3 Endpoint",
"type": "string",
"x-form": {
"value": "{{s3.AWS_S3_ENDPOINT}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
},
"defaultRegion": {
"description": "AWS S3 default region",
"type": "string",
"x-form": {
"value": "{{s3.AWS_DEFAULT_REGION}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
"x-onyxia": {
"overwriteDefaultWith": "{{project.password}}"
}
},
"secretAccessKey": {
"description": "AWS S3 secret access key",
"type": "string",
"x-form": {
"value": "{{s3.AWS_SECRET_ACCESS_KEY}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
},
"sessionToken": {
"description": "AWS S3 session Token",
"type": "string",
"x-form": {
"value": "{{s3.AWS_SESSION_TOKEN}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
}
"allowlist": {
"type": "object",
"description": "IP protection",
"properties": {
"enabled": {
"type": "boolean",
"title": "Enable IP protection",
"description": "Only the configured set of IPs will be able to reach the service",
"default": true,
"x-form": {
"value": "{{region.defaultIpProtection}}"
},
"x-onyxia": {
"overwriteDefaultWith": "region.defaultIpProtection"
}
},
"ip": {
"type": "string",
"description": "the allow list of IP is whitespace",
"title": "Allowed IP",
"default": "0.0.0.0/0",
"x-form": {
"value": "{{user.ip}}"
},
"x-onyxia": {
"overwriteDefaultWith": "{{user.ip}}"
},
"hidden": {
"value": false,
"path": "security/allowlist/enabled"
}
}
}
},
"networkPolicy": {
"type": "object",
"description": "Define access policy to the service",
"properties": {
"enabled": {
"type": "boolean",
"title": "Enable network policy",
"description": "Only pod from the same namespace will be allowed",
"default": true,
"x-form": {
"value": "{{region.defaultNetworkPolicy}}"
},
"x-onyxia": {
"overwriteDefaultWith": "region.defaultNetworkPolicy"
}
}
}
}
}
},
"s3": {
"description": "Configuration of temporary identity",
"type": "object",
"properties": {
"enabled": {
"type": "boolean",
"description": "Add S3 temporary identity inside your environment",
"default": true
},
"accessKeyId": {
"description": "AWS Access Key",
"type": "string",
"x-form": {
"value": "{{s3.AWS_ACCESS_KEY_ID}}"
},
"x-onyxia": {
"overwriteDefaultWith": "{{s3.AWS_ACCESS_KEY_ID}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
},
"endpoint": {
"description": "AWS S3 Endpoint",
"type": "string",
"x-form": {
"value": "{{s3.AWS_S3_ENDPOINT}}"
},
"x-onyxia": {
"overwriteDefaultWith": "{{s3.AWS_S3_ENDPOINT}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
},
"defaultRegion": {
"description": "AWS S3 default region",
"type": "string",
"x-form": {
"value": "{{s3.AWS_DEFAULT_REGION}}"
},
"x-onyxia": {
"overwriteDefaultWith": "{{s3.AWS_DEFAULT_REGION}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
},
"secretAccessKey": {
"description": "AWS S3 secret access key",
"type": "string",
"x-form": {
"value": "{{s3.AWS_SECRET_ACCESS_KEY}}"
},
"x-onyxia": {
"overwriteDefaultWith": "{{s3.AWS_SECRET_ACCESS_KEY}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
},
"sessionToken": {
"description": "AWS S3 session Token",
"type": "string",
"x-form": {
"value": "{{s3.AWS_SESSION_TOKEN}}"
},
"x-onyxia": {
"overwriteDefaultWith": "{{s3.AWS_SESSION_TOKEN}}"
},
"hidden": {
"value": false,
"path": "s3/enabled"
}
}
}
},
"ingress": {
"type": "object",
"form": true,
Expand All @@ -350,7 +381,11 @@
"title": "Hostname",
"x-form": {
"value": "{{project.id}}-{{k8s.randomSubdomain}}.{{k8s.domain}}"
}
},
"x-onyxia": {
"hidden": true,
"overwriteDefaultWith": "{{project.id}}-{{k8s.randomSubdomain}}.{{k8s.domain}}"
}
}
}
}
Expand Down

0 comments on commit 3cd6ccf

Please sign in to comment.