chore(addons): add lakefs

Author: EamonZhang

addons/grafana/10/README.md

@@ -1,12 +1,12 @@
 <!--- app-name: Grafana -->
 
-# Grafana packaged by Bitnami
+# Grafana packaged by Drycc
 
 Grafana is an open source metric analytics and visualization suite for visualizing time series data that supports various types of data sources.
 
 [Overview of Grafana](https://grafana.com/)
 
-Trademarks: This software listing is packaged by Bitnami. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+Trademarks: This software listing is packaged by Drycc. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
 
 ## TL;DR
 
@@ -19,7 +19,7 @@ $ helm install my-release my-repo/grafana
 
 This chart bootstraps a [grafana](https://github.com/drycc/containers/tree/main/drycc/grafana) deployment on a [Kubernetes](https://kubernetes.io) cluster using the [Helm](https://helm.sh) package manager.
 
-Bitnami charts can be used with [Kubeapps](https://kubeapps.dev/) for deployment and management of Helm Charts in clusters.
+Drycc charts can be used with [Kubeapps](https://kubeapps.dev/) for deployment and management of Helm Charts in clusters.
 
 ## Prerequisites
 
@@ -51,9 +51,9 @@ $ helm delete my-release
 
 The command removes all the Kubernetes components associated with the chart and deletes the release. Use the option `--purge` to delete all persistent volumes too.
 
-## Differences between the Bitnami Grafana chart and the Bitnami Grafana Operator chart
+## Differences between the Drycc Grafana chart and the Drycc Grafana Operator chart
 
-In the Bitnami catalog we offer both the drycc/grafana and drycc/grafana-operator charts. Each solution covers different needs and use cases.
+In the Drycc catalog we offer both the drycc/grafana and drycc/grafana-operator charts. Each solution covers different needs and use cases.
 
 The *drycc/grafana* chart deploys a single Grafana installation (with grafana-image-renderer) using a Kubernetes Deployment object (together with Services, PVCs, ConfigMaps, etc.). The figure below shows the deployed objects in the cluster after executing *helm install*:
 
@@ -441,12 +441,12 @@ This solution allows to easily deploy multiple Grafana instances compared to the
 | Name                                                   | Description                                                                                                   | Value                   |
 | ------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------- | ----------------------- |
 | `volumePermissions.enabled`                            | Enable init container that changes the owner/group of the PV mount point to `runAsUser:fsGroup`               | `false`                 |
-| `volumePermissions.image.registry`                     | Bitnami Shell image registry                                                                                  | `docker.io`             |
-| `volumePermissions.image.repository`                   | Bitnami Shell image repository                                                                                | `drycc/drycc-shell` |
-| `volumePermissions.image.tag`                          | Bitnami Shell image tag (immutable tags are recommended)                                                      | `11-debian-11-r38`      |
-| `volumePermissions.image.digest`                       | Bitnami Shell image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""`                    |
-| `volumePermissions.image.pullPolicy`                   | Bitnami Shell image pull policy                                                                               | `IfNotPresent`          |
-| `volumePermissions.image.pullSecrets`                  | Bitnami Shell image pull secrets                                                                              | `[]`                    |
+| `volumePermissions.image.registry`                     | Drycc Shell image registry                                                                                  | `docker.io`             |
+| `volumePermissions.image.repository`                   | Drycc Shell image repository                                                                                | `drycc/drycc-shell` |
+| `volumePermissions.image.tag`                          | Drycc Shell image tag (immutable tags are recommended)                                                      | `11-debian-11-r38`      |
+| `volumePermissions.image.digest`                       | Drycc Shell image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""`                    |
+| `volumePermissions.image.pullPolicy`                   | Drycc Shell image pull policy                                                                               | `IfNotPresent`          |
+| `volumePermissions.image.pullSecrets`                  | Drycc Shell image pull secrets                                                                              | `[]`                    |
 | `volumePermissions.resources.limits`                   | The resources limits for the init container                                                                   | `{}`                    |
 | `volumePermissions.resources.requests`                 | The requested resources for the init container                                                                | `{}`                    |
 | `volumePermissions.containerSecurityContext.runAsUser` | Set init container's Security Context runAsUser                                                               | `0`                     |
@@ -486,7 +486,7 @@ $ helm install my-release -f values.yaml my-repo/grafana
 
 It is strongly recommended to use immutable tags in a production environment. This ensures your deployment does not change automatically if the same tag is updated with a different image.
 
-Bitnami will release a new chart updating its containers if a new version of the main container, significant changes, or critical vulnerabilities exist.
+Drycc will release a new chart updating its containers if a new version of the main container, significant changes, or critical vulnerabilities exist.
 
 ### Using custom configuration
 
@@ -614,14 +614,14 @@ As an alternative, you can use of the preset configurations for pod affinity, po
 
 ## Persistence
 
-The [Bitnami Grafana](https://github.com/drycc/containers/tree/main/drycc/grafana) image stores the Grafana data and configurations at the `/opt/drycc/grafana/data` path of the container.
+The [Drycc Grafana](https://github.com/drycc/containers/tree/main/drycc/grafana) image stores the Grafana data and configurations at the `/opt/drycc/grafana/data` path of the container.
 
 Persistent Volume Claims are used to keep the data across deployments. This is known to work in GCE, AWS, and minikube.
 See the [Parameters](#parameters) section to configure the PVC or to disable persistence.
 
 ## Troubleshooting
 
-Find more information about how to deal with common errors related to Bitnami's Helm charts in [this troubleshooting guide](https://docs.drycc.com/general/how-to/troubleshoot-helm-chart-issues).
+Find more information about how to deal with common errors related to Drycc's Helm charts in [this troubleshooting guide](https://docs.drycc.com/general/how-to/troubleshoot-helm-chart-issues).
 
 ## Upgrading
 
@@ -631,7 +631,7 @@ This major release only bumps the Grafana version to 9.x. No major issues are ex
 
 ### To 7.0.0
 
-This major release renames several values in this chart and adds missing features, in order to be inline with the rest of assets in the Bitnami charts repository.
+This major release renames several values in this chart and adds missing features, in order to be inline with the rest of assets in the Drycc charts repository.
 
 Since the volume access mode when persistence is enabled is `ReadWriteOnce` in order to upgrade the deployment you will need to either use the `Recreate` strategy or delete the old deployment.
 
@@ -651,7 +651,7 @@ This version also introduces `drycc/common`, a [library chart](https://helm.sh/d
 **What changes were introduced in this major version?**
 
 - Previous versions of this Helm Chart use `apiVersion: v1` (installable by both Helm 2 and 3), this Helm Chart was updated to `apiVersion: v2` (installable by Helm 3 only). [Here](https://helm.sh/docs/topics/charts/#the-apiversion-field) you can find more information about the `apiVersion` field.
-- The different fields present in the *Chart.yaml* file has been ordered alphabetically in a homogeneous way for all the Bitnami Helm Charts
+- The different fields present in the *Chart.yaml* file has been ordered alphabetically in a homogeneous way for all the Drycc Helm Charts
 
 **Considerations when upgrading to this version**
 
@@ -677,7 +677,7 @@ This major version signifies this change.
 
 ## License
 
-Copyright &copy; 2022 Bitnami
+Copyright &copy; 2022 Drycc
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.

addons/grafana/10/chart/grafana/Chart.yaml

@@ -18,7 +18,7 @@ keywords:
   - metrics
   - logs
 maintainers:
-  - name: Bitnami
+  - name: Drycc
     url: https://github.com/drycc/charts
 name: grafana
 sources:

addons/grafana/10/chart/grafana/values.yaml

@@ -42,7 +42,7 @@ commonAnnotations: {}
 
 ## @section Grafana parameters
 
-## Bitnami Grafana image version
+## Drycc Grafana image version
 ## ref: https://hub.docker.com/r/drycc/grafana/tags/
 ## @param image.registry Grafana image registry
 ## @param image.repository Grafana image repository
@@ -816,7 +816,7 @@ imageRenderer:
   ## @param imageRenderer.enabled Enable using a remote rendering service to render PNG images
   ##
   enabled: false
-  ## Bitnami Grafana Image Renderer image
+  ## Drycc Grafana Image Renderer image
   ## ref: https://hub.docker.com/r/drycc/grafana-image-renderer/tags/
   ## @param imageRenderer.image.registry Grafana Image Renderer image registry
   ## @param imageRenderer.image.repository Grafana Image Renderer image repository
@@ -1155,14 +1155,14 @@ volumePermissions:
   ## @param volumePermissions.enabled Enable init container that changes the owner/group of the PV mount point to `runAsUser:fsGroup`
   ##
   enabled: false
-  ## Bitnami Shell image
+  ## Drycc Shell image
   ## ref: https://hub.docker.com/r/drycc/drycc-shell/tags/
-  ## @param volumePermissions.image.registry Bitnami Shell image registry
-  ## @param volumePermissions.image.repository Bitnami Shell image repository
-  ## @param volumePermissions.image.tag Bitnami Shell image tag (immutable tags are recommended)
-  ## @param volumePermissions.image.digest Bitnami Shell image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
-  ## @param volumePermissions.image.pullPolicy Bitnami Shell image pull policy
-  ## @param volumePermissions.image.pullSecrets Bitnami Shell image pull secrets
+  ## @param volumePermissions.image.registry Drycc Shell image registry
+  ## @param volumePermissions.image.repository Drycc Shell image repository
+  ## @param volumePermissions.image.tag Drycc Shell image tag (immutable tags are recommended)
+  ## @param volumePermissions.image.digest Drycc Shell image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
+  ## @param volumePermissions.image.pullPolicy Drycc Shell image pull policy
+  ## @param volumePermissions.image.pullSecrets Drycc Shell image pull secrets
   ##
   image:
     registry: docker.io

addons/index.yaml

@@ -74,4 +74,7 @@ entries:
       description: "YugabyteDB is a high-performance distributed SQL database for powering global, internet-scale applications. "
   nessie: 
     - version: "0.103"
-      description: "Transactional Catalog for Data Lakes with Git-like semantics . "
+      description: "Transactional Catalog for Data Lakes with Git-like semantics . "
+  lakefs: 
+    - version: "1.52"
+      description: "LakeFS provides version control over the data lake, and uses Git-like semantics to create and access those versions. If you know git, you’ll be right at home with lakeFS. "

addons/lakefs/1.52/chart/lakefs/Chart.yaml

@@ -0,0 +1,17 @@
+apiVersion: v2
+appVersion: 1.52.0
+description: A Helm chart for running LakeFS on Kubernetes
+home: https://lakefs.io
+icon: https://lakefs.io/wp-content/uploads/2020/07/lake-fs-color-2.svg
+maintainers:
+- email: services@treeverse.io
+  name: treeverse
+name: lakefs
+dependencies:
+  - name: common
+    repository: oci://registry.drycc.cc/charts
+    version: ~1.1.1
+sources:
+- https://github.com/treeverse/lakeFS
+type: application
+version: 1.4.5

addons/lakefs/1.52/chart/lakefs/templates/NOTES.txt

@@ -0,0 +1,20 @@
+Thank you for installing lakeFS!
+
+1. Run the following to get a url to start setting up lakeFS:
+{{- if contains "NodePort" .Values.service.type }}
+  export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "lakefs.fullname" . }})
+  export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
+  echo http://$NODE_IP:$NODE_PORT/setup
+{{- else if contains "LoadBalancer" .Values.service.type }}
+     NOTE: It may take a few minutes for the LoadBalancer IP to be available.
+           You can watch the status of by running 'kubectl get svc -w {{ template "lakefs.fullname" . }}'
+  export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ template "lakefs.fullname" . }} -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
+  echo http://$SERVICE_IP:{{ .Values.service.port }}/setup
+{{- else if contains "ClusterIP"  .Values.service.type }}
+  export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
+  kubectl wait --for=condition=ready pod $POD_NAME
+  echo "Visit http://127.0.0.1:{{ .Values.deployment.port }}/setup to use your application"
+  kubectl port-forward $POD_NAME {{ .Values.deployment.port }}:{{ .Values.deployment.port }} --namespace {{ .Release.Namespace }}
+{{- end }}
+
+2. See the docs on how to create your first repository: https://docs.lakefs.io/quickstart/repository.html

addons/lakefs/1.52/chart/lakefs/templates/_env.tpl

@@ -0,0 +1,111 @@
+{{- define "lakefs.env" -}}
+env:
+  {{- if and .Values.existingSecret .Values.secretKeys.databaseConnectionString }}
+  - name: LAKEFS_DATABASE_POSTGRES_CONNECTION_STRING
+    valueFrom:
+      secretKeyRef:
+        name: {{ .Values.existingSecret }}
+        key: {{ .Values.secretKeys.databaseConnectionString }}
+  {{- else if and .Values.secrets (.Values.secrets).databaseConnectionString }}
+  - name: LAKEFS_DATABASE_POSTGRES_CONNECTION_STRING
+    valueFrom:
+      secretKeyRef:
+        name: {{ include "lakefs.fullname" . }}
+        key: database_connection_string
+  {{- end }}
+  {{- if .Values.existingSecret }}
+  - name: LAKEFS_AUTH_ENCRYPT_SECRET_KEY
+    valueFrom:
+      secretKeyRef:
+        name: {{ .Values.existingSecret }}
+        key: {{ .Values.secretKeys.authEncryptSecretKey }}
+  {{- else if and .Values.secrets (.Values.secrets).authEncryptSecretKey }}
+  - name: LAKEFS_AUTH_ENCRYPT_SECRET_KEY
+    valueFrom:
+      secretKeyRef:
+        name: {{ include "lakefs.fullname" . }}
+        key: auth_encrypt_secret_key
+  {{- else }}
+  - name: LAKEFS_AUTH_ENCRYPT_SECRET_KEY
+    value: 0d48e811f0b11d7f18d8c905
+  {{- end }}
+  {{- if (.Values.fluffy).enabled }}
+  - name: LAKEFS_USAGE_REPORT_ENABLED
+    value: "true"
+  {{- if (.Values.fluffy.sso).enabled }}
+  - name: LAKEFS_AUTH_AUTHENTICATION_API_ENDPOINT
+    value: {{ printf "http://%s/api/v1" (include "fluffy.ssoServiceName" .) | quote }}
+  {{- if and .Values.ingress.enabled (.Values.fluffy.sso.saml).enabled }}
+  - name: LAKEFS_AUTH_COOKIE_AUTH_VERIFICATION_AUTH_SOURCE
+    value: saml
+  - name: LAKEFS_AUTH_UI_CONFIG_LOGIN_URL
+    value: {{ printf "%s/sso/login-saml" .Values.fluffy.sso.saml.lakeFSServiceProviderIngress }}
+  - name: LAKEFS_AUTH_UI_CONFIG_LOGOUT_URL
+    value: {{ printf "%s/sso/logout-saml" .Values.fluffy.sso.saml.lakeFSServiceProviderIngress }}
+  {{- end }}
+  {{- if (.Values.fluffy.sso.oidc).enabled }}
+  - name: LAKEFS_AUTH_UI_CONFIG_LOGIN_URL
+    value: '/oidc/login'
+  - name: LAKEFS_AUTH_UI_CONFIG_LOGOUT_URL
+    value: '/oidc/logout'
+  {{- end }}
+  {{- if (.Values.fluffy.sso.ldap).enabled }}
+  - name: LAKEFS_AUTH_REMOTE_AUTHENTICATOR_ENDPOINT
+    value: {{ default (printf "http://%s/api/v1/ldap/login" (include "fluffy.ssoServiceName" .) | quote) (.Values.fluffy.sso.ldap).endpointOverride }}
+  - name: LAKEFS_AUTH_UI_CONFIG_LOGOUT_URL
+    value: /logout
+  {{- end }}
+  {{- end }}
+  {{- if (.Values.fluffy.rbac).enabled }}
+  - name: LAKEFS_AUTH_API_ENDPOINT
+    value: {{ printf "http://%s/api/v1" (include "fluffy.rbacServiceName" .) | quote }}
+  - name: LAKEFS_AUTH_UI_CONFIG_RBAC
+    value: internal
+  {{- end }}
+  {{- end }}
+  {{- if .Values.s3Fallback.enabled }}
+  - name: LAKEFS_GATEWAYS_S3_FALLBACK_URL
+    value: http://localhost:7001
+  {{- end }}
+  {{- if .Values.committedLocalCacheVolume }}
+  - name: LAKEFS_COMMITTED_LOCAL_CACHE_DIR
+    value: /lakefs/cache
+  {{- end }}
+  {{- if .Values.useDevPostgres }}
+  {{- if and (.Values.fluffy).enabled (.Values.fluffy.rbac).enabled }}
+  - name: LAKEFS_DATABASE_TYPE
+    value: postgres
+  - name: LAKEFS_DATABASE_POSTGRES_CONNECTION_STRING
+    value: 'postgres://lakefs:lakefs@postgres-server:5432/postgres?sslmode=disable'
+  {{- end }}
+  {{- end }}
+  {{- if .Values.extraEnvVars }}
+  {{- toYaml .Values.extraEnvVars | nindent 2 }}
+  {{- end }}
+{{- if .Values.extraEnvVarsSecret }}
+envFrom:
+  - secretRef:
+      name: {{ .Values.extraEnvVarsSecret }}
+{{- end }}
+{{- end }}
+
+{{- define "lakefs.volumes" -}}
+{{- if .Values.extraVolumes }}
+{{ toYaml .Values.extraVolumes }}
+{{- end }}
+{{- if .Values.committedLocalCacheVolume }}
+- name: committed-local-cache
+{{- toYaml .Values.committedLocalCacheVolume | nindent 2 }}
+{{- end }}
+{{- if not .Values.lakefsConfig }}
+- name: {{ .Chart.Name }}-local-data
+{{- end}}
+{{- if .Values.lakefsConfig }}
+- name: config-volume
+  configMap:
+    name: {{ include "lakefs.fullname" . }}
+    items:
+      - key: config.yaml
+        path: config.yaml
+{{- end }}
+{{- end }}