github: Add chart lint and test action.

Author: alexmv

.github/workflows/helm-test.yaml

@@ -0,0 +1,62 @@
+---
+name: Helm lint and test
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  lint-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up Helm
+        uses: azure/[email protected]
+        with:
+          version: v3.17.0
+
+      - uses: actions/[email protected]
+        with:
+          python-version: "3.x"
+          check-latest: true
+
+      - name: Run helm-docs
+        uses: losisin/helm-docs-github-action@v1
+        with:
+          fail-on-diff: true
+
+      - name: Set up chart-testing
+        uses: helm/[email protected]
+        with:
+          version: 3.14.0
+          yamllint_version: 1.37.1
+          yamale_version: 6.0.0
+
+      - name: Set up helm repos
+        run: |
+          helm repo add groundhog2k https://groundhog2k.github.io/helm-charts/
+
+      - name: Run chart-testing (list-changed)
+        id: list-changed
+        run: |
+          changed=$(ct list-changed --chart-dirs kubernetes/chart --target-branch ${{ github.event.repository.default_branch }})
+          if [[ -n "$changed" ]]; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Run chart-testing (lint)
+        if: steps.list-changed.outputs.changed == 'true'
+        run: ct lint --chart-dirs kubernetes/chart --target-branch ${{ github.event.repository.default_branch }} --lint-conf lintconf.yaml --github-groups
+
+      - name: Create kind cluster
+        if: steps.list-changed.outputs.changed == 'true'
+        uses: helm/kind-action@v1
+
+      - name: Run chart-testing (install)
+        if: steps.list-changed.outputs.changed == 'true'
+        run: ct install --chart-dirs kubernetes/chart --target-branch ${{ github.event.repository.default_branch }} --github-groups

kubernetes/chart/zulip/README.md

@@ -85,22 +85,26 @@ Now you're ready to follow [the installation instructions above](#installation).
 | livenessProbe.periodSeconds | int | `10` |  |
 | livenessProbe.successThreshold | int | `1` |  |
 | livenessProbe.timeoutSeconds | int | `5` |  |
+| memcached.image.registry | string | `"docker.io"` |  |
+| memcached.image.repository | string | `"memcached"` |  |
+| memcached.image.tag | string | `"alpine"` |  |
 | memcached.memcachedUsername | string | `"zulip@localhost"` |  |
 | nameOverride | string | `""` |  |
 | nodeSelector | object | `{}` |  |
 | podAnnotations | object | `{}` |  |
 | podLabels | object | `{}` |  |
 | podSecurityContext | object | `{}` |  |
 | postSetup.scripts | object | `{}` |  |
-| postgresql.auth.database | string | `"zulip"` |  |
-| postgresql.auth.username | string | `"zulip"` |  |
-| postgresql.image.repository | string | `"zulip/zulip-postgresql"` |  |
+| postgresql.image.registry | string | `"zulip"` |  |
+| postgresql.image.repository | string | `"zulip-postgresql"` |  |
 | postgresql.image.tag | int | `14` |  |
-| postgresql.primary.containerSecurityContext.runAsUser | int | `0` |  |
-| rabbitmq.auth.username | string | `"zulip"` |  |
-| rabbitmq.persistence.enabled | bool | `false` |  |
-| redis.architecture | string | `"standalone"` |  |
-| redis.master.persistence.enabled | bool | `false` |  |
+| postgresql.securityContext.readOnlyRootFilesystem | bool | `false` |  |
+| postgresql.securityContext.runAsGroup | int | `70` |  |
+| postgresql.securityContext.runAsUser | int | `70` |  |
+| postgresql.userDatabase.name.value | string | `"zulip"` |  |
+| postgresql.userDatabase.user.value | string | `"zulip"` |  |
+| rabbitmq.authentication.user.value | string | `"zulip"` |  |
+| redis | object | `{}` |  |
 | resources | object | `{}` |  |
 | securityContext | object | `{}` |  |
 | service.port | int | `80` |  |
@@ -159,22 +163,26 @@ SECRETS_email_password:
 
 ### Dependencies
 
-The chart uses Memcached, RabbitMQ and Redis helm charts defined in
-the Bitnami Helm repository. Most of these are configured following their
-default settings, but you can check
-https://github.com/bitnami/charts/tree/master/bitnami/ for more configuration
-options of the subcharts.
-
-For PostgreSQL the chart also uses the Bitnami chart to install it on the
-Kubernetes cluster. However, in this case we use Zulip's
-[zulip-postgresql](https://hub.docker.com/r/zulip/zulip-postgresql) docker
-image, because it contains the Postgresql plugins that are needed to run Zulip.
+The chart uses PostgreSQL, RabbitMQ and Redis helm charts defined in
+the groundhog2k Helm repository. Most of these are configured
+following their default settings, but you can check
+https://github.com/groundhog2k/helm-charts/tree/master/charts/ for
+more configuration options of these subcharts.  The PostgreSQL
+subchart uses the
+[zulip-postgresql](https://hub.docker.com/r/zulip/zulip-postgresql)
+docker image, because it contains the Postgresql plugins that are
+needed to run Zulip.
+
+For Memcached, the chart uses the Bitnami subcharts, but configured
+with the stock docker.io memcached image.  See [Bitnami's
+documentation](https://artifacthub.io/packages/helm/bitnami/memcached)
+for this subchart.
 
 ## Requirements
 
 | Repository | Name | Version |
 |------------|------|---------|
-| oci://registry-1.docker.io/bitnamicharts | memcached | 7.4.16 |
-| oci://registry-1.docker.io/bitnamicharts | postgresql | 15.5.32 |
-| oci://registry-1.docker.io/bitnamicharts | rabbitmq | 14.7.0 |
-| oci://registry-1.docker.io/bitnamicharts | redis | 20.1.4 |
+| https://groundhog2k.github.io/helm-charts/ | postgresql(postgres) | 1.5.11 |
+| https://groundhog2k.github.io/helm-charts/ | rabbitmq | 2.2.0 |
+| https://groundhog2k.github.io/helm-charts/ | redis | 2.1.7 |
+| oci://registry-1.docker.io/bitnamicharts | memcached | 7.9.7 |

kubernetes/chart/zulip/ci/simple-values.yaml

@@ -0,0 +1,28 @@
+---
+zulip:
+  password: set-secure-zulip-password
+  environment:
+    SETTING_ZULIP_ADMINISTRATOR: "[email protected]"
+    SETTING_EXTERNAL_HOST: zulip.example.net
+    ZULIP_AUTH_BACKENDS: "EmailAuthBackend"
+
+memcached:
+  memcachedPassword: set-secure-memcached-password
+
+rabbitmq:
+  authentication:
+    password:
+      value: set-secure-rabbitmq-password
+    erlangCookie:
+      value: set-secure-cookie-password
+
+redis:
+  password: set-secure-redis-password
+
+postgresql:
+  settings:
+    superuserPassword:
+      value: set-secure-postgresql-postgres-password
+  userDatabase:
+    password:
+      value: set-secure-postgresql-zulip-password