archsight 0.2.2 → 0.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 80cb12962c9a8df468f3d644135ad4a19f4253f931655b971f3c8f537a8f339c
-  data.tar.gz: e901fd680848d138dd069322adb0ffc60704cc081e19a2855ae080d1cfbbc9bf
+  metadata.gz: 8e034f34ed93ea73f50f64d3711b71b7ee9a76d82394b6f5994b9a09f1cc4283
+  data.tar.gz: bccbff115bd3dfd32e20a636774d718e56ce055d9e49d8b7f2b5beb52231cb47
 SHA512:
-  metadata.gz: 2cb304a5d1699e21bfe51e50882ece47a8ec245b8c86e0088b19d167a4662a719152d4e547d61ce0ee1aa6aa9b4fe19e9cb89ee16a1e566f3b18057b2872ef75
-  data.tar.gz: d4fa392608acd1ed9c2d09efe0c1b5313b7fb10e48b17a8283b505c3f212241223e07f9effac546c4ac2bccd431bd561c9c202bf9ab5e43ecdac7785935d54b0
+  metadata.gz: 2653347eb3682c1ce0b92ce09e6fe7cf9897a3b801d037c590545e2f7834a936316f64cdd79acdf7e96437f9c9221b10854b030f929c5727517a6031b2b9108a
+  data.tar.gz: fabb6af091e2df63674c4933054270280cea3a7b192675c0cf0dea83d695d042e3e53436373541135253533e806150437febc162a2a2e3f8e3320f409fc6d316

data/chart/archsight/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: archsight
 description: A Helm chart for ArchSight
 type: application
-version: 0.1.1
-appVersion: "0.1.4"
+version: 0.2.0
+appVersion: "0.2.3"

data/chart/archsight/templates/deployment.yaml

@@ -44,6 +44,17 @@ spec:
               value: {{ .Values.app.resourcesDir | quote }}
             - name: APP_ENV
               value: {{ .Values.app.env | quote }}
+            {{- if .Values.restart.enabled }}
+            - name: ARCHSIGHT_RESTART_ENABLED
+              value: "true"
+            {{- if or .Values.restart.token .Values.restart.existingSecret }}
+            - name: ARCHSIGHT_RESTART_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.restart.existingSecret | default (printf "%s-restart-token" (include "archsight.fullname" .)) }}
+                  key: {{ .Values.restart.secretKey | default "restart-token" }}
+            {{- end }}
+            {{- end }}
           {{- if .Values.args }}
           args:
             {{- toYaml .Values.args | nindent 12 }}

data/chart/archsight/templates/restart-secret.yaml

@@ -0,0 +1,11 @@
+{{- if and .Values.restart.enabled .Values.restart.token (not .Values.restart.existingSecret) }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "archsight.fullname" . }}-restart-token
+  labels:
+    {{- include "archsight.labels" . | nindent 4 }}
+type: Opaque
+data:
+  {{ default "restart-token" .Values.restart.secretKey }}: {{ .Values.restart.token | b64enc | quote }}
+{{- end }}

data/chart/archsight/values.yaml

@@ -79,6 +79,20 @@ app:
   resourcesDir: /resources
   env: production
 
+# Restart endpoint configuration
+# Enables POST /maintenance/restart to trigger a rolling restart (useful with imagePullPolicy: Always)
+restart:
+  enabled: false
+  # Plain-text token value. A Kubernetes Secret will be created automatically.
+  # If set, the app requires this value in the X-Restart-Token header.
+  # If neither token nor existingSecret is set, the restart endpoint is enabled without token protection.
+  token: ""
+  # Use an existing Secret instead of creating one. The Secret must contain the token.
+  # If set, the app requires the referenced Secret value in the X-Restart-Token header.
+  existingSecret: ""
+  # Key inside the Secret that holds the token (default: "restart-token")
+  secretKey: "restart-token"
+
 # Strategy for populating the /resources directory
 # Options are "emptyDir", "configMap", "persistence" (PVC), or usage of "extraVolumes"
 content:

data/docs/kubernetes.md

@@ -157,16 +157,19 @@ For simple deployments where you want to trigger a pod restart (and image re-pul
 image:
   pullPolicy: Always  # Pull a fresh image on every pod restart
 
-args:
-  - web
-  - "--port"
-  - "4567"
-  - "-H"
-  - "0.0.0.0"
-  - "--production"
-  - "--enable-restart"          # Opt-in: exposes POST /maintenance/restart
-  - "--restart-token"
-  - "your-secret-token"         # Recommended: require a shared secret
+restart:
+  enabled: true
+  token: "your-secret-token"   # Stored as a Kubernetes Secret automatically
+```
+
+The chart creates a `Secret` containing the token and injects it as `ARCHSIGHT_RESTART_TOKEN`
+into the container. To use a pre-existing Secret instead:
+
+```yaml
+restart:
+  enabled: true
+  existingSecret: "my-restart-secret"
+  secretKey: "restart-token"       # key inside the Secret (default)
 ```
 
 **Trigger a restart:**

data/lib/archsight/cli.rb

@@ -32,8 +32,11 @@ module Archsight
       Archsight::Web::Application.configure_environment!(env, logging: options[:enable_logging])
       Archsight::Web::Application.set :reload_enabled, !options[:disable_reload]
       Archsight::Web::Application.set :inline_edit_enabled, options[:inline_edit]
-      Archsight::Web::Application.set :restart_enabled, options[:enable_restart]
-      Archsight::Web::Application.set :restart_token, options[:restart_token]
+
+      restart_enabled = options[:enable_restart] || ENV["ARCHSIGHT_RESTART_ENABLED"] == "true"
+      restart_token = options[:restart_token] || ENV.fetch("ARCHSIGHT_RESTART_TOKEN", nil)
+      Archsight::Web::Application.set :restart_enabled, restart_enabled
+      Archsight::Web::Application.set :restart_token, restart_token
       Archsight::Web::Application.setup_mcp!
       Archsight::Web::Application.run!(port: options[:port], bind: options[:host])
     rescue Archsight::ResourceError => e

data/lib/archsight/version.rb

@@ -4,5 +4,5 @@
 # Do not edit manually.
 
 module Archsight
-  VERSION = "0.2.2"
+  VERSION = "0.2.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: archsight
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.2.3
 platform: ruby
 authors:
 - Vincent Landgraf
@@ -215,6 +215,7 @@ files:
 - chart/archsight/templates/ingress.yaml
 - chart/archsight/templates/resources-configmap.yaml
 - chart/archsight/templates/resources-pvc.yaml
+- chart/archsight/templates/restart-secret.yaml
 - chart/archsight/templates/service.yaml
 - chart/archsight/templates/serviceaccount.yaml
 - chart/archsight/values.yaml