mirror of
https://gh-proxy.org/https://github.com/klinsmaya/multica.git
synced 2026-11-08 01:16:45 +08:00
92 lines
3.3 KiB
Bash
92 lines
3.3 KiB
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
CHART_DIR="$ROOT_DIR/deploy/helm/multica"
|
|
|
|
require_rendered_value() {
|
|
local rendered=$1
|
|
local expected=$2
|
|
|
|
if ! grep -Fq "$expected" <<<"$rendered"; then
|
|
echo "Missing expected Helm-rendered config value:"
|
|
echo " $expected"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
reject_rendered_value() {
|
|
local rendered=$1
|
|
local forbidden=$2
|
|
|
|
if grep -Fq "$forbidden" <<<"$rendered"; then
|
|
echo "Forbidden Helm-rendered config value:"
|
|
echo " $forbidden"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
helm lint "$CHART_DIR"
|
|
|
|
default_config="$(
|
|
helm template multica "$CHART_DIR" \
|
|
--show-only templates/configmap.yaml
|
|
)"
|
|
require_rendered_value "$default_config" 'MULTICA_VCS_INTEGRATION_ENABLED: "true"'
|
|
require_rendered_value "$default_config" 'MULTICA_CLOUD_URL: ""'
|
|
require_rendered_value "$default_config" 'MULTICA_DATABASE_STARTUP_TIMEOUT: "3m"'
|
|
require_rendered_value "$default_config" 'MULTICA_DATABASE_CONNECT_TIMEOUT: "5s"'
|
|
|
|
require_rendered_value "$default_config" 'MAINTENANCE_PORT: ""'
|
|
maintenance_config="$(helm template multica "$CHART_DIR" --show-only templates/configmap.yaml --set-string backend.config.maintenancePort=6061)"
|
|
require_rendered_value "$maintenance_config" 'MAINTENANCE_PORT: "6061"'
|
|
maintenance_backend="$(helm template multica "$CHART_DIR" --show-only templates/backend.yaml --set-string backend.config.maintenancePort=6061)"
|
|
reject_rendered_value "$maintenance_backend" 'containerPort: 6061'
|
|
reject_rendered_value "$maintenance_backend" 'port: 6061'
|
|
|
|
default_backend="$(
|
|
helm template multica "$CHART_DIR" \
|
|
--show-only templates/backend.yaml
|
|
)"
|
|
require_rendered_value "$default_backend" 'failureThreshold: 60'
|
|
liveness_block="$(sed -n '/livenessProbe:/,/resources:/p' <<<"$default_backend")"
|
|
require_rendered_value "$liveness_block" 'path: /health'
|
|
reject_rendered_value "$liveness_block" 'path: /healthz'
|
|
reject_rendered_value "$default_backend" 'SSL_CERT_DIR'
|
|
reject_rendered_value "$default_backend" 'extra-ca-certs'
|
|
|
|
# `helm upgrade --reuse-values` from a chart that predates extraCACerts renders
|
|
# without the key at all; that must still render, with no extra trust.
|
|
legacy_backend="$(
|
|
helm template multica "$CHART_DIR" \
|
|
--show-only templates/backend.yaml \
|
|
--set backend.extraCACerts=null
|
|
)"
|
|
reject_rendered_value "$legacy_backend" 'SSL_CERT_DIR'
|
|
|
|
extra_ca_backend="$(
|
|
helm template multica "$CHART_DIR" \
|
|
--show-only templates/backend.yaml \
|
|
--set backend.extraCACerts.configMap=internal-ca
|
|
)"
|
|
require_rendered_value "$extra_ca_backend" 'value: /etc/ssl/certs:/etc/multica/ca-certs'
|
|
require_rendered_value "$extra_ca_backend" 'mountPath: /etc/multica/ca-certs'
|
|
require_rendered_value "$extra_ca_backend" 'name: internal-ca'
|
|
require_rendered_value "$extra_ca_backend" 'mountPath: /app/data/uploads'
|
|
|
|
disabled_config="$(
|
|
helm template multica "$CHART_DIR" \
|
|
--show-only templates/configmap.yaml \
|
|
--set backend.config.vcsIntegrationEnabled=false
|
|
)"
|
|
require_rendered_value "$disabled_config" 'MULTICA_VCS_INTEGRATION_ENABLED: "false"'
|
|
|
|
capacity_config="$(
|
|
helm template multica "$CHART_DIR" \
|
|
--show-only templates/configmap.yaml \
|
|
--set-string backend.config.cloud.url=https://multica-cloud.internal
|
|
)"
|
|
require_rendered_value "$capacity_config" 'MULTICA_CLOUD_URL: "https://multica-cloud.internal"'
|
|
|
|
echo "helm config rendering ok"
|