Helm

README.md

@@ -8,20 +8,10 @@
   <a href="https://github.com/calendso/calendso-docker/issues">Community Support</a>
 </div>
 
-# Docker
-
-This image can be found on DockerHub at [https://hub.docker.com/repository/docker/calendso/calendso](https://hub.docker.com/repository/docker/calendso/calendso)
+# calendso-docker
 
 The Docker configuration for Calendso is an effort powered by people within the community. Calendso does not provide official support for Docker, but we will accept fixes and documentation. Use at your own risk.
 
-## Important Notes
-
-This Docker Image is managed by the Calendso Community. Support for this image can be found via the repository, located at [https://github.com/calendso/docker](https://github.com/calendso/docker)
-
-Currently, this image is intended for local development/evaluation use only, as there are specific requirements for providing environmental variables at build-time in order to specify a non-localhost BASE_URL. (this is due to the nature of the static site compilation, which embeds the variable values). The ability to update these variables at runtime is in-progress and will be available in the future.
-
-For Production, for the time being, please checkout the repository and build/push your own image privately.
-
 ## Requirements
 
 Make sure you have `docker` & `docker-compose` installed on the server / system.
@@ -82,6 +72,13 @@ If you cloned the repository without using `--recursive`, then you can initializ
 
 For more advanced usage, please refer to the git documentation: [https://git-scm.com/book/en/v2/Git-Tools-Submodules](https://git-scm.com/book/en/v2/Git-Tools-Submodules)
 
+## Helm and K8S
+
+Please read the [helm chart readme](chart\calendso-chart\README.md) for more informations
+
+
 ## Troubleshooting
 
 * SSL edge termination: If running behind a load balancer which handles SSL certificates, you will need to add the environmental variable `NODE_TLS_REJECT_UNAUTHORIZED=0` to prevent requests from being rejected. Only do this if you know what you are doing and trust the services/load-balancers directing traffic to your service.
+
+

chart/calendso-chart/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

chart/calendso-chart/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: postgresql
+  repository: https://charts.bitnami.com/bitnami
+  version: 10.9.5
+digest: sha256:a555b5ad8fb0f50610f8f2c1dc89debb1d542f23b920b096fcd4ee56597cb011
+generated: "2021-11-15T16:31:07.4187218+01:00"

chart/calendso-chart/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: calendso
+description: A Helm chart for Calendso
+type: application
+version: 0.1.0
+appVersion: "latest"

chart/calendso-chart/README.md

@@ -0,0 +1,132 @@
+## Install calendso on kubernetes
+
+1. Create a locally calendso image with tag
+
+    ```bash
+    cd calendso-docker
+    docker build -t calendso:2.1 .
+    ```
+
+2.  Create a tag TARGET_IMAGE that refers to SOURCE_IMAGE
+
+    ```bash
+    docker tag calendso:2.1 PathRepository/calendso:2.1
+    ```
+
+3. Pull calendso image from the repository
+
+    ```bash
+    docker push PathRepository/calendso:2.1
+    ```
+    => Note: May you need to login before this step !
+
+4. Configuration
+
+    The following table lists the configurable parameters of calendso-chart and their default values.
+
+| Parameter | Description | Default |
+| --------- | ----------- | ------- |
+| `JWT_SECRET` | Reference to the secret to be used when pulling images | `[]` |
+| `image.repository` | Image repository | `quay.io/jetstack/cert-manager-controller` |
+| `image.tag` | Image tag | `v0.6.2` |
+| `image.pullPolicy` | Image pull policy | `IfNotPresent` |
+| `replicaCount`  | Number of cert-manager replicas  | `1` |
+| `DATABASE_URL` | Reference to the url of the database | `[]` |
+| `BASE_URL` | Reference to the url of calendso application after its installation | `[]` |
+| `GOOGLE_API_CREDENTIALS` | Reference to Google API credentials. You can get this from https://console.cloud.google.com/apis/dashboard | `[]` |
+| `MS_GRAPH_CLIENT_ID` | Reference to the application (client) ID from https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredApps | `[]` |
+| `MS_GRAPH_CLIENT_SECRET` | Reference to the application (SecretClient) ID from https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredApps  | `[]` |
+| `ZOOM_CLIENT_ID` | Used for ZOOM integration, you can get this from https://marketplace.zoom.us/ | `[]` |
+| `ZOOM_CLIENT_SECRET` | Used for ZOOM integration, you can get this from https://marketplace.zoom.us/ | `[]` |
+| `NEXT_PUBLIC_TELEMETRY_KEY` | used to allow calendso to collect anonymous usage | `[]` |
+| `DAILY_API_KEY` | Used for the Daily integration | `[]` |
+| `EMAIL_FROM` | Configures the global From: header whilst sending emails. | `[]` |
+| `CRON_API_KEY` | Reference to ApiKey for cronjobs | `[]` |
+| `clusterResourceNamespace` | Override the namespace used to store DNS provider credentials etc. for ClusterIssuer resources | Same namespace as cert-manager pod
+| `leaderElection.Namespace` | Override the namespace used to store the ConfigMap for leader election | Same namespace as cert-manager pod
+| `extraArgs` | Optional flags for cert-manager | `[]` |
+| `extraEnv` | Optional environment variables for cert-manager | `[]` |
+| `rbac.create` | If `true`, create and use RBAC resources | `true` |
+| `serviceAccount.create` | If `true`, create a new service account | `true` |
+| `serviceAccount.name` | Service account to be used. If not set and `serviceAccount.create` is `true`, a name is generated using the fullname template |  |
+| `resources` | CPU/memory resource requests/limits | |
+| `securityContext.enabled` | Enable security context | `false` |
+| `securityContext.fsGroup` | Group ID for the container | `1001` |
+| `securityContext.runAsUser` | User ID for the container | `1001` |
+| `nodeSelector` | Node labels for pod assignment | `{}` |
+| `affinity` | Node affinity for pod assignment | `{}` |
+| `tolerations` | Node tolerations for pod assignment | `[]` |
+| `ingressShim.defaultIssuerName` | Optional default issuer to use for ingress resources |  |
+| `ingressShim.defaultIssuerKind` | Optional default issuer kind to use for ingress resources |  |
+| `ingressShim.defaultACMEChallengeType` | Optional default challenge type to use for ingresses using ACME issuers |  |
+| `ingressShim.defaultACMEDNS01ChallengeProvider` | Optional default DNS01 challenge provider to use for ingresses using ACME issuers with DNS01 |  |
+| `podAnnotations` | Annotations to add to the cert-manager pod | `{}` |
+| `podDnsPolicy` | Optional cert-manager pod [DNS policy](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pods-dns-policy) |  |
+| `podDnsConfig` | Optional cert-manager pod [DNS configurations](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pods-dns-config) |  |
+| `podLabels` | Labels to add to the cert-manager pod | `{}` |
+| `priorityClassName`| Priority class name for cert-manager and webhook pods | `""` |
+| `http_proxy` | Value of the `HTTP_PROXY` environment variable in the cert-manager pod | |
+| `https_proxy` | Value of the `HTTPS_PROXY` environment variable in the cert-manager pod | |
+| `no_proxy` | Value of the `NO_PROXY` environment variable in the cert-manager pod | |
+| `webhook.enabled` | Toggles whether the validating webhook component should be installed | `true` |
+| `webhook.replicaCount` | Number of cert-manager webhook replicas | `1` |
+| `webhook.podAnnotations` | Annotations to add to the webhook pods | `{}` |
+| `webhook.extraArgs` | Optional flags for cert-manager webhook component | `[]` |
+| `webhook.resources` | CPU/memory resource requests/limits for the webhook pods | |
+| `webhook.image.repository` | Webhook image repository | `quay.io/jetstack/cert-manager-webhook` |
+| `webhook.image.tag` | Webhook image tag | `v0.6.2` |
+| `webhook.image.pullPolicy` | Webhook image pull policy | `IfNotPresent` |
+| `webhook.caSyncImage.repository` | CA sync image repository | `quay.io/munnerz/apiextensions-ca-helper` |
+| `webhook.caSyncImage.tag` | CA sync image tag | `v0.1.0` |
+| `webhook.caSyncImage.pullPolicy` | CA sync image pull policy | `IfNotPresent` |
+
+ All these Values built-in object provides access to the values passed into calendso-chart through the Values.yaml file.
+Specify each parameter using the --set key=value[,key=value] argument to helm install or modify them in values.yaml as below.
+
+    * Put the repository of calendso image in values.yaml
+    ```
+    image:
+        repository: #your calendso docker image repo
+        pullPolicy: IfNotPresent
+        tag: ""
+    ```
+
+    for example here we used calendso:2.1 so the image will be like this
+
+    =>  image:
+         repository: PathRepository/calendso
+         pullPolicy: IfNotPresent
+         tag: "2.1"
+
+    * Upgrading calendso helm chart
+
+    To install the chart from the Helm repository with the release name yourReleaseName
+    ```bash
+        helm upgrade --install -n yourNamespace yourReleaseName path/Calendso-Chart
+    ```
+5. Access prisma studio
+
+    * Show pod's name
+    ```bash
+        kubectl get pods -n yourNamespace
+    ```
+    In two separate console:
+
+    * Start prisma studio
+    ```bash
+        kubectl exec -n yourNamespace podsName -- npx prisma studio
+    ```
+
+    * Forward port:5555
+    ```bash
+    kubectl port-forward -n yourNamespace podsName 5555:5555
+    ```
+6. You can now access prisma studio from your computer
+
+    * Open a browser to http://127.0.0.1:5555 to look at or modify the database content.
+
+    * Click on the User model to add a new user record.
+
+    * Fill out the fields (remembering to encrypt your password with https://bcrypt-generator.com/) and click Save 1 Record to create your first user.
+
+    * Open a browser to a link in the variable Base_Url indicated in .env.example and login with your just created, first user.

chart/calendso-chart/calendso-cert.yaml

@@ -0,0 +1,40 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: calendso-cert
+spec:
+  # Secret names are always required.
+  secretName: calendso-cert
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
+  subject:
+    organizations:
+    - 
+  # The use of the common name field has been deprecated since 2000 and is
+  # discouraged from being used.
+  commonName: cal.yourhost.com
+  isCA: false
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS1
+    size: 2048
+  usages:
+    - server auth
+    - client auth
+  # At least one of a DNS Name, URI, or IP address is required.
+  dnsNames:
+  - cal.yourhost.com
+  # - www.example.com
+  # uris:
+  # - spiffe://cluster.local/ns/sandbox/sa/example
+  # ipAddresses:
+  # - 15.236.213.243
+  # Issuer references are always required.
+  issuerRef:
+    name: letsencrypt
+    # We can reference ClusterIssuers by changing the kind here.
+    # The default value is Issuer (i.e. a locally namespaced Issuer)
+    kind: ClusterIssuer
+    # This is optional since cert-manager will default to this value however
+    # if you are using an external issuer, change this to that issuer group.
+    group: cert-manager.io

chart/calendso-chart/templates/NOTES.txt

@@ -0,0 +1,22 @@
+1. Get the application URL by running these commands:
+{{- if .Values.ingress.enabled }}
+{{- range $host := .Values.ingress.hosts }}
+  {{- range .paths }}
+  http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }}
+  {{- end }}
+{{- end }}
+{{- else if contains "NodePort" .Values.service.type }}
+  export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "calendso-chart.fullname" . }})
+  export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
+  echo http://$NODE_IP:$NODE_PORT
+{{- else if contains "LoadBalancer" .Values.service.type }}
+     NOTE: It may take a few minutes for the LoadBalancer IP to be available.
+           You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "calendso-chart.fullname" . }}'
+  export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "calendso-chart.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
+  echo http://$SERVICE_IP:{{ .Values.service.port }}
+{{- else if contains "ClusterIP" .Values.service.type }}
+  export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "calendso-chart.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
+  export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
+  echo "Visit http://127.0.0.1:8080 to use your application"
+  kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
+{{- end }}

chart/calendso-chart/templates/_helpers.tpl

@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "calendso-chart.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "calendso-chart.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "calendso-chart.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "calendso-chart.labels" -}}
+helm.sh/chart: {{ include "calendso-chart.chart" . }}
+{{ include "calendso-chart.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "calendso-chart.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "calendso-chart.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "calendso-chart.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "calendso-chart.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}