@libredb/studio 0.9.7

package/charts/libredb-studio/templates/hpa.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.autoscaling.enabled }}
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: {{ include "libredb-studio.fullname" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: {{ include "libredb-studio.fullname" . }}
+  minReplicas: {{ .Values.autoscaling.minReplicas }}
+  maxReplicas: {{ .Values.autoscaling.maxReplicas }}
+  metrics:
+    {{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: cpu
+        target:
+          type: Utilization
+          averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
+    {{- end }}
+    {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: memory
+        target:
+          type: Utilization
+          averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    {{- end }}
+{{- end }}

package/charts/libredb-studio/templates/ingress.yaml

@@ -0,0 +1,41 @@
+{{- if .Values.ingress.enabled -}}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "libredb-studio.fullname" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+  {{- with .Values.ingress.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  {{- if .Values.ingress.className }}
+  ingressClassName: {{ .Values.ingress.className }}
+  {{- end }}
+  {{- if .Values.ingress.tls }}
+  tls:
+    {{- range .Values.ingress.tls }}
+    - hosts:
+        {{- range .hosts }}
+        - {{ . | quote }}
+        {{- end }}
+      secretName: {{ .secretName }}
+    {{- end }}
+  {{- end }}
+  rules:
+    {{- range .Values.ingress.hosts }}
+    - host: {{ .host | quote }}
+      http:
+        paths:
+          {{- range .paths }}
+          - path: {{ .path }}
+            pathType: {{ .pathType }}
+            backend:
+              service:
+                name: {{ include "libredb-studio.fullname" $ }}
+                port:
+                  number: {{ $.Values.service.port }}
+          {{- end }}
+    {{- end }}
+{{- end }}

package/charts/libredb-studio/templates/networkpolicy.yaml

@@ -0,0 +1,50 @@
+{{- if .Values.networkPolicy.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ include "libredb-studio.fullname" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+spec:
+  podSelector:
+    matchLabels:
+      {{- include "libredb-studio.selectorLabels" . | nindent 6 }}
+  policyTypes:
+    - Ingress
+    - Egress
+  ingress:
+    - ports:
+        - port: {{ .Values.service.targetPort }}
+          protocol: TCP
+    {{- with .Values.networkPolicy.additionalIngress }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+  egress:
+    # Allow DNS resolution
+    - ports:
+        - port: 53
+          protocol: UDP
+        - port: 53
+          protocol: TCP
+    # Allow HTTPS outbound (for database connections, AI APIs, OIDC)
+    - ports:
+        - port: 443
+          protocol: TCP
+    # Allow common database ports
+    - ports:
+        - port: 5432
+          protocol: TCP
+        - port: 3306
+          protocol: TCP
+        - port: 1521
+          protocol: TCP
+        - port: 1433
+          protocol: TCP
+        - port: 27017
+          protocol: TCP
+        - port: 6379
+          protocol: TCP
+    {{- with .Values.networkPolicy.additionalEgress }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+{{- end }}

package/charts/libredb-studio/templates/pdb.yaml

@@ -0,0 +1,18 @@
+{{- if .Values.podDisruptionBudget.enabled }}
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: {{ include "libredb-studio.fullname" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+spec:
+  {{- if .Values.podDisruptionBudget.minAvailable }}
+  minAvailable: {{ .Values.podDisruptionBudget.minAvailable }}
+  {{- end }}
+  {{- if .Values.podDisruptionBudget.maxUnavailable }}
+  maxUnavailable: {{ .Values.podDisruptionBudget.maxUnavailable }}
+  {{- end }}
+  selector:
+    matchLabels:
+      {{- include "libredb-studio.selectorLabels" . | nindent 6 }}
+{{- end }}

package/charts/libredb-studio/templates/pvc.yaml

@@ -0,0 +1,23 @@
+{{- if and (include "libredb-studio.persistenceEnabled" .) (not .Values.persistence.existingClaim) }}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ include "libredb-studio.pvcName" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+  {{- with .Values.persistence.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  accessModes:
+    {{- range .Values.persistence.accessModes }}
+    - {{ . }}
+    {{- end }}
+  {{- if .Values.persistence.storageClassName }}
+  storageClassName: {{ .Values.persistence.storageClassName | quote }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ .Values.persistence.size }}
+{{- end }}

package/charts/libredb-studio/templates/secret.yaml

@@ -0,0 +1,30 @@
+{{- if not .Values.secrets.existingSecret }}
+{{- $_ := required "secrets.jwtSecret is required (min 32 chars)" .Values.secrets.jwtSecret }}
+{{- $_ := required "secrets.adminPassword is required" .Values.secrets.adminPassword }}
+{{- $_ := required "secrets.userPassword is required" .Values.secrets.userPassword }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "libredb-studio.fullname" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+type: Opaque
+data:
+  {{ .Values.secrets.existingSecretKeys.jwtSecret }}: {{ .Values.secrets.jwtSecret | b64enc | quote }}
+  {{ .Values.secrets.existingSecretKeys.adminEmail }}: {{ .Values.secrets.adminEmail | b64enc | quote }}
+  {{ .Values.secrets.existingSecretKeys.adminPassword }}: {{ .Values.secrets.adminPassword | b64enc | quote }}
+  {{ .Values.secrets.existingSecretKeys.userEmail }}: {{ .Values.secrets.userEmail | b64enc | quote }}
+  {{ .Values.secrets.existingSecretKeys.userPassword }}: {{ .Values.secrets.userPassword | b64enc | quote }}
+  {{- if .Values.secrets.llmApiKey }}
+  {{ .Values.secrets.existingSecretKeys.llmApiKey }}: {{ .Values.secrets.llmApiKey | b64enc | quote }}
+  {{- end }}
+  {{- if .Values.secrets.oidcClientId }}
+  {{ .Values.secrets.existingSecretKeys.oidcClientId }}: {{ .Values.secrets.oidcClientId | b64enc | quote }}
+  {{- end }}
+  {{- if .Values.secrets.oidcClientSecret }}
+  {{ .Values.secrets.existingSecretKeys.oidcClientSecret }}: {{ .Values.secrets.oidcClientSecret | b64enc | quote }}
+  {{- end }}
+  {{- if .Values.secrets.storagePostgresUrl }}
+  {{ .Values.secrets.existingSecretKeys.storagePostgresUrl }}: {{ .Values.secrets.storagePostgresUrl | b64enc | quote }}
+  {{- end }}
+{{- end }}

package/charts/libredb-studio/templates/seed-configmap.yaml

@@ -0,0 +1,11 @@
+{{- if and .Values.seedConnections.enabled (not .Values.seedConnections.existingConfigMap) .Values.seedConnections.config }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "libredb-studio.fullname" . }}-seed-connections
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+data:
+  {{ .Values.seedConnections.configMapKey | default "seed-connections.yaml" }}: |
+    {{- .Values.seedConnections.config | toYaml | nindent 4 }}
+{{- end }}

package/charts/libredb-studio/templates/service.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "libredb-studio.fullname" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+  {{- with .Values.service.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - port: {{ .Values.service.port }}
+      targetPort: {{ .Values.service.targetPort }}
+      protocol: TCP
+      name: http
+      {{- if and (eq .Values.service.type "NodePort") .Values.service.nodePort }}
+      nodePort: {{ .Values.service.nodePort }}
+      {{- end }}
+  selector:
+    {{- include "libredb-studio.selectorLabels" . | nindent 4 }}

package/charts/libredb-studio/templates/serviceaccount.yaml

@@ -0,0 +1,13 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "libredb-studio.serviceAccountName" . }}
+  labels:
+    {{- include "libredb-studio.labels" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
+{{- end }}

package/charts/libredb-studio/values.schema.json

@@ -0,0 +1,246 @@
+{
+  "$schema": "https://json-schema.org/draft-07/schema#",
+  "type": "object",
+  "properties": {
+    "replicaCount": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Number of replicas"
+    },
+    "image": {
+      "type": "object",
+      "properties": {
+        "repository": {
+          "type": "string",
+          "description": "Container image repository"
+        },
+        "pullPolicy": {
+          "type": "string",
+          "enum": ["Always", "IfNotPresent", "Never"],
+          "description": "Image pull policy"
+        },
+        "tag": {
+          "type": "string",
+          "description": "Image tag override"
+        }
+      }
+    },
+    "authProvider": {
+      "type": "string",
+      "enum": ["local", "oidc"],
+      "description": "Authentication provider"
+    },
+    "secrets": {
+      "type": "object",
+      "properties": {
+        "existingSecret": {
+          "type": "string",
+          "description": "Name of existing secret"
+        },
+        "jwtSecret": {
+          "type": "string",
+          "description": "JWT signing secret (min 32 chars)"
+        },
+        "adminEmail": {
+          "type": "string",
+          "format": "email",
+          "description": "Admin account email"
+        },
+        "adminPassword": {
+          "type": "string",
+          "description": "Admin account password"
+        },
+        "userEmail": {
+          "type": "string",
+          "format": "email",
+          "description": "User account email"
+        },
+        "userPassword": {
+          "type": "string",
+          "description": "User account password"
+        },
+        "llmApiKey": {
+          "type": "string",
+          "description": "LLM API key"
+        },
+        "oidcClientId": {
+          "type": "string",
+          "description": "OIDC client ID"
+        },
+        "oidcClientSecret": {
+          "type": "string",
+          "description": "OIDC client secret"
+        },
+        "storagePostgresUrl": {
+          "type": "string",
+          "description": "PostgreSQL connection URL for storage"
+        }
+      }
+    },
+    "config": {
+      "type": "object",
+      "properties": {
+        "logLevel": {
+          "type": "string",
+          "enum": ["debug", "info", "warn", "error"],
+          "description": "Log level"
+        },
+        "storageProvider": {
+          "type": "string",
+          "enum": ["local", "sqlite", "postgres"],
+          "description": "Storage provider"
+        },
+        "storageSqlitePath": {
+          "type": "string",
+          "description": "SQLite database file path"
+        },
+        "llmProvider": {
+          "type": "string",
+          "enum": ["", "gemini", "openai", "ollama", "custom"],
+          "description": "LLM provider"
+        },
+        "llmModel": {
+          "type": "string",
+          "description": "LLM model name"
+        },
+        "llmApiUrl": {
+          "type": "string",
+          "description": "LLM API URL"
+        },
+        "oidcIssuer": {
+          "type": "string",
+          "description": "OIDC issuer URL"
+        },
+        "oidcScope": {
+          "type": "string",
+          "description": "OIDC scopes"
+        },
+        "oidcRoleClaim": {
+          "type": "string",
+          "description": "OIDC role claim path"
+        },
+        "oidcAdminRoles": {
+          "type": "string",
+          "description": "OIDC admin role values"
+        }
+      }
+    },
+    "persistence": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable persistent storage"
+        },
+        "size": {
+          "type": "string",
+          "pattern": "^[0-9]+(Gi|Mi|Ti)$",
+          "description": "Storage size"
+        },
+        "existingClaim": {
+          "type": "string",
+          "description": "Existing PVC name"
+        },
+        "storageClassName": {
+          "type": "string",
+          "description": "Storage class name"
+        }
+      }
+    },
+    "service": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": ["ClusterIP", "NodePort", "LoadBalancer"],
+          "description": "Service type"
+        },
+        "port": {
+          "type": "integer",
+          "description": "Service port"
+        },
+        "targetPort": {
+          "type": "integer",
+          "description": "Container target port"
+        }
+      }
+    },
+    "ingress": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable Ingress"
+        },
+        "className": {
+          "type": "string",
+          "description": "Ingress class name"
+        }
+      }
+    },
+    "autoscaling": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable HPA"
+        },
+        "minReplicas": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Minimum replicas"
+        },
+        "maxReplicas": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Maximum replicas"
+        },
+        "targetCPUUtilizationPercentage": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 100,
+          "description": "Target CPU utilization"
+        },
+        "targetMemoryUtilizationPercentage": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 100,
+          "description": "Target memory utilization"
+        }
+      }
+    },
+    "podDisruptionBudget": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Enable PDB"
+        },
+        "minAvailable": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Minimum available pods"
+        }
+      }
+    },
+    "postgresql": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Deploy PostgreSQL subchart"
+        }
+      }
+    },
+    "seedConnections": {
+      "type": "object",
+      "properties": {
+        "enabled": { "type": "boolean", "default": false },
+        "config": { "type": "object" },
+        "existingConfigMap": { "type": "string", "default": "" },
+        "configMapKey": { "type": "string", "default": "seed-connections.yaml" },
+        "cacheTTL": { "type": "integer", "default": 60000, "minimum": 5000 }
+      }
+    }
+  }
+}