mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-20 06:00:06 +08:00
Mark CampbellandKris Hicks
679b190677
* feat(testing): normalize configurable test images Signed-off-by: Bobbins228 <mcampbel@redhat.com> Signed-off-by: Kris Hicks <khicks@nvidia.com> * feat(helm): add global image overrides Signed-off-by: Bobbins228 <mcampbel@redhat.com> * feat(helm): support image registry overrides Signed-off-by: Bobbins228 <mcampbel@redhat.com> Signed-off-by: Kris Hicks <khicks@nvidia.com> * refactor(helm): simplify image configuration Signed-off-by: Bobbins228 <mcampbel@redhat.com> * fix(e2e): avoid reloading reused kind sandbox image Signed-off-by: Bobbins228 <mcampbel@redhat.com> * fix(helm): default sandbox image to nvcr.io/nvidia/base/ubuntu:24.04 Signed-off-by: Kris Hicks <khicks@nvidia.com> --------- Signed-off-by: Bobbins228 <mcampbel@redhat.com> Signed-off-by: Kris Hicks <khicks@nvidia.com> Co-authored-by: Kris Hicks <khicks@nvidia.com>
60 lines
1.9 KiB
YAML
60 lines
1.9 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# HelmChart CR for auto-deploying OpenShell via k3s Helm controller
|
|
# This manifest is placed in /var/lib/rancher/k3s/server/manifests/ and
|
|
# automatically installed when the k3s cluster starts.
|
|
#
|
|
# The chart tarball is served from the k3s static file server at:
|
|
# https://<k8s-api>/static/charts/openshell-0.1.0.tgz
|
|
#
|
|
# Component images are pulled at runtime from ghcr.io.
|
|
# Authentication is configured via /etc/rancher/k3s/registries.yaml
|
|
# (containerd-level) and a Kubernetes imagePullSecret (pod-level),
|
|
# both generated by the bootstrap process.
|
|
|
|
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChart
|
|
metadata:
|
|
name: openshell
|
|
namespace: kube-system
|
|
spec:
|
|
chart: https://%{KUBERNETES_API}%/static/charts/openshell-0.1.0.tgz
|
|
targetNamespace: openshell
|
|
createNamespace: true
|
|
valuesContent: |-
|
|
chartChecksum: __CHART_CHECKSUM__
|
|
global:
|
|
image:
|
|
registry: ghcr.io/nvidia
|
|
gateway:
|
|
image:
|
|
repository: openshell/gateway
|
|
tag: latest
|
|
pullPolicy: __IMAGE_PULL_POLICY__
|
|
supervisor:
|
|
image:
|
|
repository: openshell/supervisor
|
|
tag: latest
|
|
sandbox:
|
|
image:
|
|
repository: nvcr.io/nvidia/base/ubuntu
|
|
tag: "24.04"
|
|
pullPolicy: __SANDBOX_IMAGE_PULL_POLICY__
|
|
server:
|
|
dbUrl: __DB_URL__
|
|
hostGatewayIP: __HOST_GATEWAY_IP__
|
|
disableTls: __DISABLE_TLS__
|
|
oidc:
|
|
issuer: "__OIDC_ISSUER__"
|
|
audience: "__OIDC_AUDIENCE__"
|
|
jwksTtl: 3600
|
|
rolesClaim: "__OIDC_ROLES_CLAIM__"
|
|
adminRole: "__OIDC_ADMIN_ROLE__"
|
|
userRole: "__OIDC_USER_ROLE__"
|
|
scopesClaim: "__OIDC_SCOPES_CLAIM__"
|
|
tls:
|
|
certSecretName: openshell-server-tls
|
|
clientCaSecretName: openshell-server-client-ca
|
|
clientTlsSecretName: openshell-client-tls
|