checkpoint groundhog2k charts

Author: alexmv

kubernetes/chart/zulip/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: memcached
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 7.4.16
+  version: 7.9.7
 - name: rabbitmq
-  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 14.7.0
+  repository: https://groundhog2k.github.io/helm-charts/
+  version: 2.2.0
 - name: redis
-  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 20.1.4
-- name: postgresql
-  repository: oci://registry-1.docker.io/bitnamicharts
-  version: 15.5.32
-digest: sha256:511a69dac54b26810b3b269751c8115d5b8ed7a9ecfe5cc4a656e7feb5dbd1ff
-generated: "2024-09-23T17:27:41.004706+02:00"
+  repository: https://groundhog2k.github.io/helm-charts/
+  version: 2.1.7
+- name: postgres
+  repository: https://groundhog2k.github.io/helm-charts/
+  version: 1.5.11
+digest: sha256:c7d4845a79011fbbf12fee4e5e51c3c0762446f229c08e499f792a52bc185b16
+generated: "2025-11-06T00:13:51.539064-05:00"

kubernetes/chart/zulip/Chart.yaml

@@ -23,23 +23,25 @@ dependencies:
     repository: oci://registry-1.docker.io/bitnamicharts
     tags:
       - memcached
-    version: 7.4.16
+    ## Note: values.yaml overwrites memcached image to docker.io memcached, not bitnami's
+    version: 7.9.7
   - name: rabbitmq
-    repository: oci://registry-1.docker.io/bitnamicharts
+    repository: https://groundhog2k.github.io/helm-charts/
     tags:
       - rabbitmq
-    version: 14.7.0
+    version: 2.2.0
   - name: redis
-    repository: oci://registry-1.docker.io/bitnamicharts
+    repository: https://groundhog2k.github.io/helm-charts/
     tags:
       - redis
-    version: 20.1.4
-  - name: postgresql
-    repository: oci://registry-1.docker.io/bitnamicharts
+    version: 2.1.7
+  - name: postgres
+    repository: https://groundhog2k.github.io/helm-charts/
+    alias: postgresql
     tags:
       - postgresql
-    ## Note: values.yaml overwrites posgresql image to zulip/zulip-postgresql:14
-    version: 15.5.32
+    ## Note: values.yaml overwrites postgresql image to zulip/zulip-postgresql:14
+    version: 1.5.11
 
 sources:
   - https://github.com/zulip/zulip

kubernetes/chart/zulip/README.md.gotmpl

@@ -91,15 +91,20 @@ SECRETS_email_password:
 
 ### Dependencies
 
-The chart uses Memcached, RabbitMQ and Redis helm charts defined in
-the Bitnami Helm repository. Most of these are configured following their
-default settings, but you can check
-https://github.com/bitnami/charts/tree/master/bitnami/ for more configuration
-options of the subcharts.
-
-For PostgreSQL the chart also uses the Bitnami chart to install it on the
-Kubernetes cluster. However, in this case we use Zulip's
-[zulip-postgresql](https://hub.docker.com/r/zulip/zulip-postgresql) docker
-image, because it contains the Postgresql plugins that are needed to run Zulip.
+The chart uses PostgreSQL, RabbitMQ and Redis helm charts defined in
+the groundhog2k Helm repository. Most of these are configured
+following their default settings, but you can check
+https://github.com/groundhog2k/helm-charts/tree/master/charts/ for
+more configuration options of these subcharts.  The PostgreSQL
+subchart uses the
+[zulip-postgresql](https://hub.docker.com/r/zulip/zulip-postgresql)
+docker image, because it contains the Postgresql plugins that are
+needed to run Zulip.
+
+For Memcached, the chart uses the Bitnami subcharts, but configured
+with the stock docker.io memcached image.  See [Bitnami's
+documentation](https://artifacthub.io/packages/helm/bitnami/memcached)
+for this subchart.
+
 
 {{ template "chart.requirementsSection" . }}

kubernetes/chart/zulip/templates/_helpers.tpl

@@ -67,25 +67,25 @@ include all env variables for Zulip pods
 {{- define "zulip.env" -}}
 
 - name: DB_HOST
-  value: "{{ template "postgresql.v1.primary.fullname" .Subcharts.postgresql }}"
+  value: "{{ template "postgres.fullname" .Subcharts.postgresql }}"
 - name: DB_HOST_PORT
-  value: "{{ template "postgresql.v1.service.port" .Subcharts.postgresql }}"
+  value: "{{ .Values.postgresql.service.port }}"
 - name: DB_USER
-  value: "postgres"
+  value: "zulip"
 - name: SETTING_MEMCACHED_LOCATION
   value: "{{ template "common.names.fullname" .Subcharts.memcached }}:11211"
 - name: SETTING_RABBITMQ_HOST
-  value: "{{ template "common.names.fullname" .Subcharts.rabbitmq }}"
+  value: "{{ template "rabbitmq.fullname" .Subcharts.rabbitmq }}"
 - name: SETTING_REDIS_HOST
-  value: "{{ template "common.names.fullname" .Subcharts.redis }}-headless"
+  value: "{{ template "redis.fullname" .Subcharts.redis }}-headless"
 - name: SECRETS_rabbitmq_password
-  value: "{{ .Values.rabbitmq.auth.password }}"
+  value: "{{ .Values.rabbitmq.authentication.password.value }}"
 - name: SECRETS_postgres_password
-  value: "{{ .Values.postgresql.auth.password }}"
+  value: "{{ .Values.postgresql.userDatabase.password.value }}"
 - name: SECRETS_memcached_password
   value: "{{ .Values.memcached.memcachedPassword }}"
 - name: SECRETS_redis_password
-  value: "{{ .Values.redis.auth.password }}"
+  value: "{{ .Values.redis.password }}"
 - name: SECRETS_secret_key
   value: "{{ .Values.zulip.password }}"
 {{- range $key, $value := .Values.zulip.environment }}

kubernetes/chart/zulip/values-local.yaml.example

@@ -43,18 +43,23 @@ memcached:
   # memcachedPassword: set-secure-password
 
 rabbitmq:
-  auth:
-    # password: set-secure-password
-    # erlangCookie: set-secure-password
+  authentication:
+    password:
+      # value: set-secure-password
+    erlangCookie:
+      # value: set-secure-password
 
 redis:
-  auth:
-    # password: set-secure-password
+  # XXX Is this actually used?
+  # password: set-secure-password
 
 postgresql:
-  auth:
-    # # postgres admin user password
-    # postgresqlPassword: set-secure-password
-    # # postgres zulip user password
-    # password: set-secure-password
+  settings:
+    superuserPassword:
+      ## postgres user password
+      # value: set-secure-password
+  userDatabase:
+    password:
+      ## postgres zulip user password
+      # value: set-secure-password
 

kubernetes/chart/zulip/values.yaml

@@ -22,10 +22,10 @@ image:
 ## Global Docker registry secret names as an array.
 imagePullSecrets: []
 
-## Partially override common.names.fullname template (will maintain the release name).
+## Partially override zulip.fullname template (will maintain the release name).
 nameOverride: ""
 
-## Fully override common.names.fullname template.
+## Fully override zulip.fullname template.
 fullnameOverride: ""
 
 serviceAccount:
@@ -198,37 +198,47 @@ sidecars: []
 
 ## PostgreSQL settings, see [Requirements](#Requirements).
 postgresql:
-  primary:
-    containerSecurityContext:
-      # 70 is the standard uid/gid of the "postgres" user in Alpine, which is
-      # used as the base for zulip/zulip-postgresql
-      # https://github.com/docker-library/postgres/blob/23987751b63ce745bd27b1119ab29dc4a1ffd728/Dockerfile-alpine.template#L7
-      runAsUser: 70
-      runAsGroup: 70
-      readOnlyRootFilesystem: false
   ## We need to override the Postgresql image to get all the plugins Zulip needs
   image:
-    repository: zulip/zulip-postgresql
+    registry: zulip
+    repository: zulip-postgresql
     tag: 14
-  auth:
-    username: zulip
-    database: zulip
+  securityContext:
+    # 70 is the standard uid/gid of the "postgres" user in Alpine, which is
+    # used as the base for zulip/zulip-postgresql
+    # https://github.com/docker-library/postgres/blob/23987751b63ce745bd27b1119ab29dc4a1ffd728/Dockerfile-alpine.template#L7
+    runAsUser: 70
+    runAsGroup: 70
+    readOnlyRootFilesystem: false
+  userDatabase:
+    name:
+      value: zulip
+    user:
+      value: zulip
+  customScripts:
+    02-zulip-schema.sh: |
+      psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" -v "dbuser=$POSTGRES_USER" <<-EOSQL
+        CREATE SCHEMA zulip AUTHORIZATION :"dbuser";
+      EOSQL
 
 ## Rabbitmq settings, see [Requirements](#Requirements).
 rabbitmq:
-  auth:
-    username: zulip
-  ## Set this to true if you need the rabbitmq to be persistent
-  persistence:
-    enabled: false
+  # Persistence is disabled by setting neither
+  # `storage.persistentVolumeClaimName` nor `storage.requestedSize`.
+  authentication:
+    user:
+      value: zulip
 
 ## Memcached settings, see [Requirements](#Requirements).
 memcached:
   memcachedUsername: "zulip@localhost"
+  image:
+    registry: docker.io
+    repository: memcached
+    tag: alpine
 
 ## Redis settings, see [Requirements](#Requirements).
 redis:
-  architecture: standalone
-  master:
-    persistence:
-      enabled: false
+  # Persistence is disabled by setting neither
+  # `storage.persistentVolumeClaimName` nor `storage.requestedSize`.
+  {}