Commit Graph

30 Commits

Author SHA1 Message Date
James Smith
96f5d87ba4 Mark job pods not to use Istio's envoy sidecar (#18415)
* Mark job pods not to use Istio's envoy sidecar

Istio injects sidecars into pods to implement mTLS between pods. Jobs
usually don't know about this, so they don't signal the Envoy process
to stop when the job finishes. Since at least one process is running
in the pod, Kubernetes doesn't consider the job to be completed, so it
lingers.

By adding the `sidecar.istio.io/inject` annotation set to `"false"`,
we let Istio know that it should not inject the sidecar. If Istio is
not installed, then this has no impact.

* Support arbitrary job annotations in the Helm chart

Rather than focus on Istio, this allows arbitrary annotations for job pods.

* Add in-line documentation for pod/job annotations
2022-08-25 04:40:38 +02:00
Alex Nordlund
87c468bb28 Allow S3 to use an existing secret (#18997) 2022-08-25 04:39:11 +02:00
Alex Nordlund
e237efdb4e Fix broken dependencies in helm chart and allow using existing secrets in the chart (#18941)
* Add ability to specify an existing Secret (#18139)

Closes #18139

* Allow using secrets with external postgres

* Upgrade CronJob to batch/v1

* Allow using redis.auth.existingSecret

* Helmignore mastodon-*.tgz for easy local development

* Upgrade helm dependencies

* Upgrade postgresql to 11

* Allow putting SMTP password into a secret

* Add optional login to SMTP secret

This to allow setting LOGIN either in values.yaml or
in the secret.

* Switch to bitnami charts full archive

This prevents older versions from disappearing, see
https://github.com/bitnami/charts/issues/10539 for
full context.

Co-authored-by: Ted Tramonte <ted.tramonte@gmail.com>
2022-08-10 17:12:58 +02:00
James Smith
d48bceaad7 Support STREAMING_API_BASE_URL in Helm Chart (#18408)
This adds a mastodon.streaming.base_url setting in the Helm chart values
file to allow setting the STREAMING_API_BASE_URL in the Mastodon environnment
config map.
2022-05-14 10:03:44 +02:00
Claire
7f6611c992 Bump version to 3.5.2 (#18295)
* Bump version to 3.5.2

* Change some entries to be more clear

* Add some extra notes

* Fix line wrap

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
2022-05-04 00:57:42 +02:00
Alexandra Catalina
c07b6bc2e0 chore(deps): update tootsuite/mastodon docker tag to v3.5.1 (#18023)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-12 03:26:50 +02:00
bobbyd0g
1421edb994 Helm chart SSO support (#17205)
* Add SAML support

* move extAuth below essential components

* Add CAS, PAM, LDAP support

* Add WEB_DOMAIN and S3_ALIAS_HOST support

* SAML defaults aligned

* Bump chart version

* SSO & WEB_DOMAIN support added

* Add OIDC support

* Correct typo

* Notice for OIDC support

Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
2022-02-11 15:01:40 +01:00
Takuya Yoshida
566b80bd41 Add support >= 1.22 (#17490) 2022-02-09 12:30:00 +01:00
Alexandra Catalina
bd5ab973ed Update tootsuite/mastodon Docker tag to v3.4.6 (#17436)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-02-03 21:29:20 +01:00
Alexandra Catalina
cb09b7b067 Update tootsuite/mastodon Docker tag to v3.4.5 (#17417)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-02-01 20:57:50 +01:00
Alexandra Catalina
675292ac74 helm: upgrade elasticsearch to 7.x (#17262) 2022-01-09 03:21:19 +01:00
Alexandra Catalina
e38083a940 Update tootsuite/mastodon Docker tag to v3.4.4 (#17065)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-11-27 03:06:39 +01:00
Alexandra Catalina
3acf9c649a Update Helm release elasticsearch to v15.10.3 (#16651)
this is a backwards-compatible upgrade: https://github.com/bitnami/charts/tree/master/bitnami/elasticsearch#to-1500

Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-10-14 21:01:27 +02:00
Alexandra Catalina
127779c945 helm: set default SMTP_CA_FILE (#16750)
https://github.com/mastodon/mastodon/pull/10857
2021-09-20 02:23:44 +02:00
Alexandra Catalina
e5974036d8 helm: upgrade elasticsearch chart to 14 (#15767) 2021-03-12 05:39:09 +01:00
Alex Dunn
83db03e9ac helm: pin versions, commit lockfile (#15749) 2021-02-19 09:56:40 +01:00
Alex Dunn
78f549d2df helm: add support for S3 storage (#15748) 2021-02-19 09:52:32 +01:00
Alex Dunn
f290cec2fd helm: standardize yaml configuration (#15728)
- move application variables under `mastodon` namespace
- restore standard yaml structure for ingress configuration
- move values.yaml.template to values.yaml
2021-02-15 08:00:54 +01:00
Alex Dunn
e850f8156f helm: add option for external db (#15722) 2021-02-14 20:16:32 +01:00
Eugen Rochko
1778da3b20 Forward-port v3.2.2 changelog (#15370) 2020-12-19 03:13:50 +01:00
Patrice Ferlet
2ba4e1eaa5 Fix postrgres secret name for cronjob (#15072)
The cronjob tries to get key from `mastodon` secret instead of
`mastodon-postgresql` - so the cronjob fails with this error:

Error: couldn't find key postgresql-password in Secret [NS]/mastodon

Another solution is to save the postgres password in mastodon secret,
but that means that the password is placed in two places.

Postgresql use <fullname>-postgresql name as secret name.
2020-11-02 06:16:51 +01:00
Alex Dunn
4719898d77 helm: bump version to 3.2.1 (#15019) 2020-10-22 01:36:07 +02:00
Alex Dunn
90484975e1 helm: add optional cron job to run tootctl remove media (#14396) 2020-10-13 01:19:13 +02:00
Alex Dunn
20aa242751 helm: bump default image tag to v3.2.0 (#14476) 2020-08-02 11:20:31 +02:00
Alex Dunn
32e9a7c4b4 helm: add examples of annotation for NGINX upload limits (#14350) 2020-07-18 19:30:46 +02:00
Alex Dunn
72d4d603af helm: bump chart and default image version to 3.1.5 (#14256) 2020-07-07 20:35:55 +02:00
Alex Dunn
121fbb34d7 helm: fix default storage values for PVCs (#14245) 2020-07-06 23:08:29 +02:00
Alex Dunn
b451111a46 Add Helm chart (#14090)
* add Helm chart

known issues/future work:

- SSO is unsupported

- S3/Minio/GCS is unsupported

- Swift is unsupported

- WEB_DOMAIN is unsupported

- Tor is unsupported

* helm: clarify how LOCAL_DOMAIN is set

* helm: add chart description

* helm: make DB_POOL and Sidekiq concurrency configurable

* helm: only enforce pod affinity when using ReadWriteOnce

* helm: clarify compatibility

* helm: clean up application variables

* helm: add job to create initial admin
2020-06-29 13:58:48 +02:00
Eugen Rochko
8f827ae829 Fix #49 - License changed from GPL-2.0 to AGPL-3.0 2016-09-21 23:04:34 +02:00
Eugen Rochko
75d5d7bc01 Adding GNU Public license, adding home timeline, reblog/favourite counters 2016-03-06 17:52:23 +01:00