Merge pull request #413 from ckavili/ipa

🐭 pinning image version 🐭

LGTM ! thanks @ckavili

charts/ipa/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: ipa
 description: A Helm chart to install FreeIPA
-version: 1.3.1
+version: 1.3.2
 appVersion: 1.16.0
 home: https://github.com/redhat-cop/helm-charts
 icon: https://www.freeipa.org/images/freeipa/freeipa-logo-small.png

charts/ipa/templates/deployment.yaml

@@ -0,0 +1,90 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name:  {{ include "ipa.fullname" . }}
+  labels:
+    {{- include "ipa.labels" . | nindent 4 }}
+    app: {{ include "ipa.fullname" . }}
+spec:
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: {{ include "ipa.fullname" . }}
+  template:
+    metadata:
+      labels:
+        app: {{ include "ipa.fullname" . }}
+    spec:
+      serviceAccountName: {{ include "ipa.fullname" . }}-user
+      volumes:
+      - name: {{ include "ipa.fullname" . }}-data
+        persistentVolumeClaim:
+          claimName: {{ include "ipa.fullname" . }}
+      - name: {{ include "ipa.fullname" . }}-run
+        emptyDir: {}
+      - name: {{ include "ipa.fullname" . }}-tmp
+        emptyDir: {}
+      - name: {{ include "ipa.fullname" . }}-journal
+        emptyDir: {}
+      containers:
+        - name: {{ include "ipa.fullname" . }}
+          image: {{ .Values.image }}
+          ports:
+          - containerPort: 53
+            protocol: TCP
+          - containerPort: 53
+            protocol: UDP
+          - containerPort: 80
+            protocol: TCP
+          - containerPort: 88
+            protocol: TCP
+          - containerPort: 88
+            protocol: UDP
+          - containerPort: 123
+            protocol: UDP
+          - containerPort: 389
+            protocol: TCP
+          - containerPort: 443
+            protocol: TCP
+          - containerPort: 464
+            protocol: TCP
+          - containerPort: 464
+            protocol: UDP
+          - containerPort: 636
+            protocol: TCP
+          env:
+          - name: IPA_SERVER_HOSTNAME
+            value: {{ include "ipa.fullname" . }}-{{ include "ipa.namespace" . }}.{{ .Values.app_domain }}
+          - name: IPA_SERVER_IP
+            value: ""
+          - name: IPA_SERVER_INSTALL_OPTS
+            value: -U --setup-dns --no-forwarders --no-ntp -r redhatlabs.dev
+          - name: PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: {{ include "ipa.fullname" . }}-password
+                key: admin.password
+          args:
+           - {{ .Values.container_args }}
+          resources: {}
+          volumeMounts:
+          - name: {{ include "ipa.fullname" . }}-data
+            mountPath: "/data"
+          - name: {{ include "ipa.fullname" . }}-run
+            mountPath: "/run"
+          - name: {{ include "ipa.fullname" . }}-tmp
+            mountPath: "/tmp"
+          - name: {{ include "ipa.fullname" . }}-journal
+            mountPath: "/var/log/journal"
+          readinessProbe:
+            exec:
+              command:
+              - "/usr/bin/systemctl"
+              - status
+              - ipa
+            timeoutSeconds: 10
+            periodSeconds: 10
+            successThreshold: 1
+            failureThreshold: 3
+            initialDelaySeconds: 60

charts/ipa/templates/service.yaml

@@ -53,4 +53,4 @@ spec:
     targetPort: 636
   clusterIP: ""
   selector:
-    deploymentconfig: {{ include "ipa.fullname" . }}
+    app: {{ include "ipa.fullname" . }}

charts/ipa/values.yaml

@@ -5,7 +5,7 @@ admin_password: Passw0rd123
 realm: "-r redhatlabs.dev"
 
 # sensible defaults
-image: freeipa-server:latest
+image: quay.io/freeipa/freeipa-server@sha256:b7e79f8430a1d8ab7293c1f249162ca92eb5d5d2ce6a1f73c6a85e95a09c2da3
 install_opts: "-U --setup-dns --no-forwarders --no-ntp"
 container_args: "ipa-server-install"
 volume: 5Gi