kgess-mirror/element-ess-helm
1
0
Fork 0
mirror of https://github.com/element-hq/ess-helm.git synced 2026-01-16 23:13:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

ci values: dont define initSecrets / postgres, they will be rendered

Browse source 
automatically if necessary
This commit is contained in:
Gaël Goinvic 2025-02-14 11:00:45 +01:00
parent d383e4f8b7
commit 092e12e563
No known key found for this signature in database
GPG key ID: 1432A13D0F88CEAF
16 changed files with 10 additions and 49 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
charts/matrix-stack/ci/element-web-checkov-values.yaml
View file

@ -12,12 +12,8 @@ elementWeb:
checkov.io/skip3: CKV2_K8S_6=No network policy yet
ingress:
host: element.ess.localhost
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
synapse:
enabled: false
wellKnownDelegation:

4
charts/matrix-stack/ci/element-web-minimal-values.yaml
View file

@ -8,12 +8,8 @@
elementWeb:
ingress:
host: element.ess.localhost
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
synapse:
enabled: false
wellKnownDelegation:

2
charts/matrix-stack/ci/matrix-authentication-service-postgres-secrets-externally-values.yaml
View file

@ -7,8 +7,6 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
encryptionSecret:
secret: "{{ $.Release.Name }}-mas-external"

2
charts/matrix-stack/ci/matrix-authentication-service-postgres-secrets-in-helm-values.yaml
View file

@ -7,8 +7,6 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
encryptionSecret:
secret: "{{ $.Release.Name }}-mas-external"

4
charts/matrix-stack/ci/matrix-authentication-service-secrets-externally-values.yaml
View file

@ -7,8 +7,6 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
encryptionSecret:
secret: "{{ $.Release.Name }}-mas-external"
@ -41,8 +39,6 @@ matrixAuthenticationService:
synapseSharedSecret:
secret: "{{ $.Release.Name }}-mas-external"
secretKey: synapseShared
postgres:
enabled: false
synapse:
enabled: false
wellKnownDelegation:

4
charts/matrix-stack/ci/matrix-authentication-service-secrets-in-helm-values.yaml
View file

@ -7,8 +7,6 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
encryptionSecret:
value: CHANGEME-ahohhohgiavee5Koh8ahwo
@ -47,8 +45,6 @@ matrixAuthenticationService:
value: CHANGEME-eiv6wae8shooPhie4ief8ru2egahbah0
synapseSharedSecret:
value: CHANGEME-iaw8eeSef4zeefie8ii3akien9tiaYah
postgres:
enabled: false
synapse:
enabled: false
wellKnownDelegation:

4
charts/matrix-stack/ci/pytest-element-web-values.yaml
View file

@ -24,12 +24,8 @@ elementWeb:
host: element.{{ $.Values.serverName }}
tlsSecret: "{{ $.Release.Name }}-element-web-tls"
replicas: 1
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
serverName: ess.localhost
synapse:
enabled: false

4
charts/matrix-stack/ci/pytest-well-known-values.yaml
View file

@ -9,12 +9,8 @@ elementWeb:
enabled: false
global:
baseDomain: ess.localhost
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
# To check that templating works against the ingress
serverName: "{{ $.Values.global.baseDomain }}"
synapse:

2
charts/matrix-stack/ci/synapse-postgres-secrets-externally-values.yaml
View file

@ -7,8 +7,6 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:

2
charts/matrix-stack/ci/synapse-postgres-secrets-in-helm-values.yaml
View file

@ -7,8 +7,6 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:

4
charts/matrix-stack/ci/synapse-secrets-externally-values.yaml
View file

@ -7,12 +7,8 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
serverName: ess.localhost
synapse:
ingress:

4
charts/matrix-stack/ci/synapse-secrets-in-helm-values.yaml
View file

@ -7,12 +7,8 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
serverName: ess.localhost
synapse:
ingress:

4
charts/matrix-stack/ci/well-known-checkov-values.yaml
View file

@ -12,12 +12,8 @@ haproxy:
checkov.io/skip1: CKV_K8S_11=We deliberately don't set CPU limits. Pod is BestEffort not Guaranteed
checkov.io/skip2: CKV_K8S_43=No digests
checkov.io/skip3: CKV2_K8S_6=No network policy yet
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
serverName: ess.localhost
synapse:
enabled: false

4
charts/matrix-stack/ci/well-known-minimal-values.yaml
View file

@ -7,12 +7,8 @@
elementWeb:
enabled: false
initSecrets:
enabled: false
matrixAuthenticationService:
enabled: false
postgres:
enabled: false
serverName: ess.localhost
synapse:
enabled: false

1
newsfragments/188.internal.md Normal file
View file

@ -0,0 +1 @@
CI values: Do not define `initSecrets` `postgres` in tests, their behaviour depends on other components presence.

10
tests/manifests/test_basic.py
View file

@ -16,7 +16,15 @@ async def test_nothing_enabled_renders_nothing(templates):
@pytest.mark.parametrize("values_file", ["nothing-enabled-values.yaml"])
@pytest.mark.asyncio_cooperative
async def test_initSecrets_on_its_own_renders_nothing(values, make_templates):
values["initSecrets"]["enabled"] = True
values.setdefault("initSecrets", {})["enabled"] = True
templates = await make_templates(values)
assert len(templates) == 0, f"{templates} were generated but none were expected"
@pytest.mark.parametrize("values_file", ["nothing-enabled-values.yaml"])
@pytest.mark.asyncio_cooperative
async def test_postgres_on_its_own_renders_nothing(values, make_templates):
values.setdefault("postgres", {})["enabled"] = True
templates = await make_templates(values)
assert len(templates) == 0, f"{templates} were generated but none were expected"