vrr/cozystack
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(dashboard): migrate to new cozystack-ui console

Browse source 
Remove old openapi-ui implementation and adopt new React-based console:

**Removed:**
- images/openapi-ui/ - old PRO-Robotech based UI
- images/openapi-ui-k8s-bff/ - unused backend-for-frontend
- templates/nginx.yaml - separate nginx proxy (replaced by built-in nginx)
- templates/configmap.yaml - old UI configuration

**Changes:**
- Rename web → console throughout all manifests
- Rename incloud-web-* → cozy-dashboard-* for all resources
- Remove all environment variables (new UI requires no configuration)
- Update gatekeeper upstream to point directly to console service
- Simplify Makefile (only token-proxy image build remains)
- Update values.yaml: openapiUI → console

**Architecture changes:**
Before: gatekeeper → nginx → web (openapi-ui)
After: gatekeeper → console (React SPA with built-in nginx)

The new console includes nginx that proxies /api and /apis to K8s API,
eliminating the need for a separate nginx deployment. Authentication
flow remains unchanged - gatekeeper adds Authorization header which
is passed through to K8s API.

Breaking change: Resource names changed from incloud-web-* to
cozy-dashboard-*. Existing deployments will need migration.

Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
This commit is contained in:
IvanHunters 2026-04-28 23:38:58 +03:00
parent c7c4f724af
commit 8b037d3045
17 changed files with 26 additions and 609 deletions
Download patch file Download diff file Expand all files Collapse all files

17
packages/system/dashboard/Makefile
View file

@ -4,19 +4,7 @@ export NAMESPACE=cozy-$(NAME)
include ../../../hack/common-envs.mk
include ../../../hack/package.mk
update: update-crd update-dockerfiles
image: image-token-proxy update-tenant-text
update-dockerfiles:
@echo Update dockerfiles manually
update-crd:
rm -rf crds
mkdir -p crds
wget -O- https://github.com/PRO-Robotech/helmfile-manifests/archive/refs/heads/main.tar.gz | tar -C crds -xzvf- helmfile-manifests-main/charts/incloud-main/incloud-web-1.0.0/incloud-web/templates --strip-components=6
rm -f crds/_helpers.tpl
sed -i '/{{/d' crds/*.yml crds/*.yaml
image: image-token-proxy
image-token-proxy:
docker buildx build images/token-proxy \
@ -33,6 +21,3 @@ image-token-proxy:
IMAGE="$(REGISTRY)/token-proxy:$(call settag,$(TAG))@$$(yq e '."containerimage.digest"' images/token-proxy.json -r)" \
yq -i '.tokenProxy.image = strenv(IMAGE)' values.yaml
rm -f images/token-proxy.json
update-tenant-text:
sed -i 's|\($$tenantText := "\)[^"]\+|\1$(TAG)|' templates/configmap.yaml

22
packages/system/dashboard/images/openapi-ui-k8s-bff/Dockerfile
View file

@ -1,22 +0,0 @@
# imported from https://github.com/PRO-Robotech/openapi-ui-k8s-bff
ARG NODE_VERSION=20.18.1
FROM node:${NODE_VERSION}-alpine AS builder
WORKDIR /src
# release/1.4.0
ARG COMMIT_REF=92e4b618eb9ad17b19827b5a2b7ceab33e8cf534
RUN wget -O- https://github.com/PRO-Robotech/openapi-ui-k8s-bff/archive/${COMMIT_REF}.tar.gz | tar xzf - --strip-components=1
ENV PATH=/src/node_modules/.bin:$PATH
RUN npm install
RUN npm run build
FROM node:${NODE_VERSION}-alpine
WORKDIR /app
COPY --from=builder /src/package*.json /app/
COPY --from=builder /src/node_modules /app/node_modules
COPY --from=builder /src/src/swagger/swagger-output.json /app/dist/swagger/swagger-output.json
COPY --from=builder /src/dist /app/dist
EXPOSE 8080
USER 1001
CMD [ "node", "/app/dist/index.js"]

69
packages/system/dashboard/images/openapi-ui/Dockerfile
View file

@ -1,69 +0,0 @@
ARG NODE_VERSION=20.18.1
# openapi-k8s-toolkit
# imported from https://github.com/PRO-Robotech/openapi-k8s-toolkit
FROM node:${NODE_VERSION}-alpine AS openapi-k8s-toolkit-builder
RUN apk add git
WORKDIR /src
# release/1.4.0
ARG COMMIT=d6b9e4ad0d1eb9d3730f7f0c664792c8dda3214d
RUN wget -O- https://github.com/PRO-Robotech/openapi-k8s-toolkit/archive/${COMMIT}.tar.gz | tar -xzvf- --strip-components=1
COPY openapi-k8s-toolkit/patches /patches
RUN git apply /patches/*.diff
RUN npm install
RUN npm install --build-from-source @swc/core
RUN npm run build
# openapi-ui
# imported from https://github.com/PRO-Robotech/openapi-ui
FROM node:${NODE_VERSION}-alpine AS builder
#RUN apk add git
WORKDIR /src
# release/1.4.0
ARG COMMIT_REF=6addca6939264ef2e39801baa88c1460cc1aa53e
RUN wget -O- https://github.com/PRO-Robotech/openapi-ui/archive/${COMMIT_REF}.tar.gz | tar xzf - --strip-components=1
#COPY openapi-ui/patches /patches
#RUN git apply /patches/*.diff
ENV PATH=/src/node_modules/.bin:$PATH
RUN npm install
# add patched openapi-k8s-toolkit
RUN rm -rf node_modules/@prorobotech/openapi-k8s-toolkit/dist
COPY --from=openapi-k8s-toolkit-builder /src/dist node_modules/@prorobotech/openapi-k8s-toolkit/dist
RUN npm run build
FROM node:${NODE_VERSION}-alpine AS builder2
WORKDIR /src
ENV PATH=/src/node_modules/.bin:$PATH
COPY --from=builder /src/server/package.json ./
COPY --from=builder /src/server/package-lock.json ./
RUN npm install
COPY --from=builder /src/server server
COPY --from=builder /src/tsconfig.server.json ./
COPY --from=builder /src/build /src/build
RUN npm run server:build
FROM node:${NODE_VERSION}-alpine
WORKDIR /app
COPY --from=builder2 /src/node_modules /app/node_modules
COPY --from=builder2 /src/build /app/build
EXPOSE 8080
RUN sed -i -e 's|OpenAPI UI|Cozystack|g' build/index.html
# Fix Factory component: return null while loading instead of showing "Factory Not Found" 404
RUN APP_JS=$(find build -name "App-react.js" -type f | head -1) && \
if [ -n "$APP_JS" ]; then \
sed -i 's|const { data: factoryData } = useK8sSmartResource({|const { data: factoryData, isLoading: factoryIsLoading } = useK8sSmartResource({|' "$APP_JS" && \
sed -i '/Factory Not Found/s/return /return factoryIsLoading ? null : /' "$APP_JS" && \
echo "Factory loading patch applied to $APP_JS"; \
fi
USER 1001
CMD ["node", "/app/build/index.js"]

17
packages/system/dashboard/images/openapi-ui/openapi-k8s-toolkit/patches/flatmap-unresolved-placeholder.diff
View file

@ -1,17 +0,0 @@
diff --git a/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts b/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts
--- a/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts
+++ b/src/components/molecules/EnrichedTable/organisms/EnrichedTableProvider/utils.ts
@@ -185,6 +185,11 @@
return `['${escaped}']`
})
}
- const jpQueryResult = jp.query(el, `$${resolvedJsonPath}`)
- fieldValue = Array.isArray(jpQueryResult) && jpQueryResult.length === 1 ? jpQueryResult[0] : jpQueryResult
+ if (/_flatMap[^\]]+_Key/.test(resolvedJsonPath)) {
+ // Placeholder was not resolved (row not yet expanded or key missing) — skip query
+ fieldValue = null
+ } else {
+ const jpQueryResult = jp.query(el, `$${resolvedJsonPath}`)
+ fieldValue = Array.isArray(jpQueryResult) && jpQueryResult.length === 1 ? jpQueryResult[0] : jpQueryResult
+ }
}

37
packages/system/dashboard/images/openapi-ui/openapi-k8s-toolkit/patches/formlistinput-allow-empty.diff
View file

@ -1,37 +0,0 @@
diff --git a/src/localTypes/formExtensions.ts b/src/localTypes/formExtensions.ts
--- a/src/localTypes/formExtensions.ts
+++ b/src/localTypes/formExtensions.ts
@@ -59,2 +59,4 @@
relatedValuePath?: string
+ allowEmpty?: boolean
+ persistType?: 'str' | 'number' | 'arr' | 'obj'
}
diff --git a/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx b/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx
--- a/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx
+++ b/src/components/molecules/BlackholeForm/molecules/FormListInput/FormListInput.tsx
@@ -149,3 +149,10 @@
}, [relatedPath, form, arrName, fixedName, relatedFieldValue, onValuesChangeCallBack, isTouchedPeristed])
+ // When allowEmpty is set, auto-persist the field so the BFF preserves empty values
+ useEffect(() => {
+ if (customProps.allowEmpty) {
+ persistedControls.onPersistMark(persistName || name, customProps.persistType ?? 'str')
+ }
+ }, [customProps.allowEmpty, customProps.persistType, persistedControls, persistName, name])
+
const uri = prepareTemplate({
@@ -267,5 +274,14 @@
validateTrigger="onBlur"
hasFeedback={designNewLayout ? { icons: feedbackIcons } : true}
style={{ flex: 1 }}
+ normalize={(value: unknown) => {
+ if (customProps.allowEmpty && (value === undefined || value === null)) {
+ if (customProps.persistType === 'number') return 0
+ if (customProps.persistType === 'arr') return []
+ if (customProps.persistType === 'obj') return {}
+ return ''
+ }
+ return value
+ }}
>
<Select

29
packages/system/dashboard/images/openapi-ui/openapi-k8s-toolkit/patches/secret-copy-preserve-newlines.diff
View file

@ -1,29 +0,0 @@
diff --git a/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx b/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx
--- a/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx
+++ b/src/components/organisms/DynamicComponents/molecules/SecretBase64Plain/SecretBase64Plain.tsx
@@ -145,6 +145,12 @@
<Styled.DisabledInput
$hidden={effectiveHidden}
onClick={e => handleInputClick(e, effectiveHidden, value)}
+ onCopy={e => {
+ if (!effectiveHidden) {
+ e.preventDefault()
+ e.clipboardData?.setData('text/plain', value)
+ }
+ }}
value={shownValue}
readOnly
/>
@@ -161,6 +167,12 @@
<Styled.DisabledInput
$hidden={effectiveHidden}
onClick={e => handleInputClick(e, effectiveHidden, value)}
+ onCopy={e => {
+ if (!effectiveHidden) {
+ e.preventDefault()
+ e.clipboardData?.setData('text/plain', value)
+ }
+ }}
value={shownValue}
readOnly
/>

50
packages/system/dashboard/images/openapi-ui/openapi-k8s-toolkit/patches/tenantmodules.diff
View file

@ -1,50 +0,0 @@
diff --git a/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx b/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx
index 8bcef4d..2551e92 100644
--- a/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx
+++ b/src/components/molecules/EnrichedTable/organisms/EnrichedTable/utils.tsx
@@ -22,6 +22,15 @@ import { TableFactory } from '../../molecules'
import { ShortenedTextWithTooltip, FilterDropdown, TrimmedTags, TextAlignContainer, TinyButton } from './atoms'
import { TInternalDataForControls } from './types'
+const getPluralForm = (singular: string): string => {
+ // If already ends with 's', add 'es'
+ if (singular.endsWith('s')) {
+ return `${singular}es`
+ }
+ // Otherwise just add 's'
+ return `${singular}s`
+}
+
export const getCellRender = ({
value,
record,
@@ -255,7 +264,7 @@ export const getEnrichedColumnsWithControls = ({
key: 'controls',
className: 'controls',
width: 60,
- render: (value: TInternalDataForControls) => {
+ render: (value: TInternalDataForControls, record: unknown) => {
return (
// <TextAlignContainer $align="right" className="hideable">
<TextAlignContainer $align="center">
@@ -279,10 +288,19 @@ export const getEnrichedColumnsWithControls = ({
domEvent.stopPropagation()
domEvent.preventDefault()
if (key === 'edit') {
+ // Special case: redirect tenantmodules from core.cozystack.io to apps.cozystack.io with plural form
+ let apiGroupAndVersion = value.apiGroupAndVersion
+ let plural = value.plural
+ if (apiGroupAndVersion?.startsWith('core.cozystack.io/') && plural === 'tenantmodules') {
+ const appsApiVersion = apiGroupAndVersion.replace('core.cozystack.io/', 'apps.cozystack.io/')
+ const pluralName = getPluralForm(value.name)
+ apiGroupAndVersion = appsApiVersion
+ plural = pluralName
+ }
navigate(
`${baseprefix}/${value.cluster}${value.namespace ? `/${value.namespace}` : ''}${
value.syntheticProject ? `/${value.syntheticProject}` : ''
- }/${value.pathPrefix}/${value.apiGroupAndVersion}/${value.plural}/${value.name}?backlink=${
+ }/${value.pathPrefix}/${apiGroupAndVersion}/${plural}/${value.name}?backlink=${
value.backlink
}`,
)

24
packages/system/dashboard/templates/configmap.yaml
View file

File diff suppressed because one or more lines are too long

2
packages/system/dashboard/templates/nginx-sa.yaml → packages/system/dashboard/templates/console-sa.yaml
View file

@ -1,4 +1,4 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: incloud-web-nginx
name: cozy-dashboard-console

8
packages/system/dashboard/templates/nginx-svc.yaml → packages/system/dashboard/templates/console-svc.yaml
View file

@ -1,14 +1,14 @@
apiVersion: v1
kind: Service
metadata:
name: incloud-web-nginx
name: cozy-dashboard-console
spec:
ports:
- name: nginx-http
- name: http
port: 8080
protocol: TCP
targetPort: 8080
selector:
app.kubernetes.io/instance: incloud-web
app.kubernetes.io/name: nginx
app.kubernetes.io/instance: cozy-dashboard
app.kubernetes.io/name: console
type: ClusterIP

39
packages/system/dashboard/templates/nginx.yaml → packages/system/dashboard/templates/console.yaml
View file

@ -1,13 +1,13 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: incloud-web-nginx
name: cozy-dashboard-console
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/instance: incloud-web
app.kubernetes.io/name: nginx
app.kubernetes.io/instance: cozy-dashboard
app.kubernetes.io/name: console
strategy:
rollingUpdate:
maxSurge: 25%
@ -15,11 +15,9 @@ spec:
type: RollingUpdate
template:
metadata:
annotations:
checksum/config: {{ include (print $.Template.BasePath "/nginx-config.yaml") . | sha256sum }}
labels:
app.kubernetes.io/instance: incloud-web
app.kubernetes.io/name: nginx
app.kubernetes.io/instance: cozy-dashboard
app.kubernetes.io/name: console
spec:
affinity:
podAntiAffinity:
@ -30,15 +28,15 @@ spec:
- key: app.kubernetes.io/name
operator: In
values:
- appSpec
- console
- key: app.kubernetes.io/instance
operator: In
values:
- incloud-web
- cozy-dashboard
topologyKey: kubernetes.io/hostname
weight: 100
containers:
- image: nginxinc/nginx-unprivileged:1.29-alpine
- image: {{ .Values.console.image | quote }}
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
@ -50,7 +48,14 @@ spec:
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 2
name: nginx
startupProbe:
httpGet:
path: /healthcheck
port: 8080
scheme: HTTP
failureThreshold: 30
periodSeconds: 2
name: console
ports:
- containerPort: 8080
name: http
@ -78,23 +83,13 @@ spec:
type: RuntimeDefault
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /etc/nginx/conf.d/default.conf
name: configurationnginxfile
subPath: nginx-config
dnsPolicy: ClusterFirst
enableServiceLinks: false
hostIPC: false
hostNetwork: false
hostPID: false
preemptionPolicy: null
priorityClassName: system-cluster-critical
restartPolicy: Always
runtimeClassName: null
schedulerName: default-scheduler
serviceAccountName: incloud-web-nginx
serviceAccountName: cozy-dashboard-console
terminationGracePeriodSeconds: 30
volumes:
- configMap:
name: incloud-web-nginx-config
name: configurationnginxfile

4
packages/system/dashboard/templates/gatekeeper.yaml
View file

@ -52,7 +52,7 @@ spec:
imagePullPolicy: IfNotPresent
args:
- --provider=oidc
- --upstream=http://incloud-web-nginx.{{ .Release.Namespace }}.svc:8080
- --upstream=http://cozy-dashboard-console.{{ .Release.Namespace }}.svc:8080
- --http-address=0.0.0.0:8000
- --redirect-url=https://dashboard.{{ $host }}/oauth2/callback
- --oidc-issuer-url=https://keycloak.{{ $host }}/realms/cozy
@ -97,7 +97,7 @@ spec:
image: {{ .Values.tokenProxy.image }}
imagePullPolicy: IfNotPresent
args:
- --upstream=http://incloud-web-nginx.{{ .Release.Namespace }}.svc:8080
- --upstream=http://cozy-dashboard-console.{{ .Release.Namespace }}.svc:8080
- --http-address=0.0.0.0:8000
- --cookie-refresh=1h
- --cookie-name=kc-access

97
packages/system/dashboard/templates/nginx-config.yaml
View file

@ -1,97 +0,0 @@
{{- $host := index .Values._cluster "root-host" }}
apiVersion: v1
data:
nginx-config: |-
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
server {
listen 8080 default_server;
listen [::]:8080 default_server;
server_name _;
location ~ ^(/clusterlist|/api/clusters)$ {
add_header Content-Type application/json;
set $cluster_list '[{"api":"{{ $host }}","baseDomain":"{{ $host }}","description":"dashboard.{{ $host }}","externalDomain":"dashboard.{{ $host }}","name":"default","tenant":"dev"}]';
return 200 $cluster_list;
}
location /api/clusters/default {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
proxy_read_timeout 86400s;
proxy_send_timeout 86400s;
rewrite /api/clusters/default/(.*) /$1 break;
proxy_pass http://incloud-web-nginx.{{ .Release.Namespace }}.svc:8080;
}
location /k8s/clusters/default/ {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
proxy_read_timeout 86400s;
proxy_send_timeout 86400s;
rewrite /k8s/clusters/default/(.*) /$1 break;
proxy_pass https://kubernetes.default.svc:443;
}
location /k8s {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
proxy_read_timeout 86400s;
proxy_send_timeout 86400s;
rewrite /k8s/(.*) /$1 break;
proxy_pass https://kubernetes.default.svc:443;
}
location /openapi-bff {
proxy_pass http://incloud-web-web.{{ .Release.Namespace }}.svc:64231;
}
location /openapi-bff-ws/ {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
proxy_read_timeout 86400s;
proxy_send_timeout 86400s;
proxy_pass http://incloud-web-web.{{ .Release.Namespace }}.svc:64231;
}
location = /docs {
return 301 https://cozystack.io/docs/;
}
location = / {
return 301 https://dashboard.{{ $host }}/openapi-ui;
}
location / {
proxy_pass http://incloud-web-web.{{ .Release.Namespace }}.svc:8080;
}
location /healthcheck {
access_log off;
return 200 "Healthy\n";
}
}
kind: ConfigMap
metadata:
name: incloud-web-nginx-config

4
packages/system/dashboard/templates/web-sa.yaml
View file

@ -1,4 +0,0 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: incloud-web-web

18
packages/system/dashboard/templates/web-svc.yaml
View file

@ -1,18 +0,0 @@
apiVersion: v1
kind: Service
metadata:
name: incloud-web-web
spec:
ports:
- name: bff-http
port: 64231
protocol: TCP
targetPort: 64231
- name: web-http
port: 8080
protocol: TCP
targetPort: 8080
selector:
app.kubernetes.io/instance: incloud-web
app.kubernetes.io/name: web
type: ClusterIP

196
packages/system/dashboard/templates/web.yaml
View file

@ -1,196 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: incloud-web-web
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/instance: incloud-web
app.kubernetes.io/name: web
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
annotations:
checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
labels:
app.kubernetes.io/instance: incloud-web
app.kubernetes.io/name: web
spec:
affinity:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app.kubernetes.io/name
operator: In
values:
- appSpec
- key: app.kubernetes.io/instance
operator: In
values:
- incloud-web
topologyKey: kubernetes.io/hostname
weight: 100
containers:
- env:
- name: BASEPREFIX
value: /openapi-ui
- name: HIDE_INSIDE
value: "true"
- name: CUSTOMIZATION_API_GROUP
value: dashboard.cozystack.io
- name: CUSTOMIZATION_API_VERSION
value: v1alpha1
- name: CUSTOMIZATION_CFOMAPPING_RESOURCE_NAME
value: cfomapping
- name: CUSTOMIZATION_CFOMAPPING_RESOURCE_PLURAL
value: cfomappings
- name: CUSTOMIZATION_CFO_FALLBACK_ID
value: ""
- name: CUSTOMIZATION_NAVIGATION_RESOURCE_NAME
value: navigation
- name: CUSTOMIZATION_NAVIGATION_RESOURCE_PLURAL
value: navigations
- name: CUSTOMIZATION_SIDEBAR_FALLBACK_ID
value: ""
- name: CUSTOMIZATION_BREADCRUMBS_FALLBACK_ID
value: stock-project-api-table
- name: INSTANCES_API_GROUP
value: dashboard.cozystack.io
- name: INSTANCES_API_VERSION
value: v1alpha1
- name: INSTANCES_PLURAL
value: instances
- name: MARKETPLACE_KIND
value: MarketplacePanel
- name: MARKETPLACE_PLURAL
value: marketplacepanels
- name: NAVIGATE_FROM_CLUSTERLIST
value: /openapi-ui/~recordValue~/api-table/core.cozystack.io/v1alpha1/tenantnamespaces
- name: PROJECTS_API_GROUP
value: core.cozystack.io
- name: PROJECTS_API_VERSION
value: v1alpha1
- name: PROJECTS_PLURAL
value: tenantnamespaces
- name: CUSTOM_NAMESPACE_API_RESOURCE_API_GROUP
value: core.cozystack.io
- name: CUSTOM_NAMESPACE_API_RESOURCE_API_VERSION
value: v1alpha1
- name: CUSTOM_NAMESPACE_API_RESOURCE_PLURAL
value: tenantnamespaces
- name: BASE_FACTORY_NAMESPACED_API_KEY
value: base-factory-namespaced-api
- name: BASE_FACTORY_CLUSTERSCOPED_API_KEY
value: base-factory-clusterscoped-api
- name: BASE_FACTORY_NAMESPACED_BUILTIN_KEY
value: base-factory-namespaced-builtin
- name: BASE_FACTORY_CLUSTERSCOPED_BUILTIN_KEY
value: base-factory-clusterscoped-builtin
- name: BASE_NAMESPACE_FACTORY_KEY
value: base-factory-clusterscoped-builtin
- name: USE_NAMESPACE_NAV
value: "true"
- name: USE_NEW_NAVIGATION
value: "true"
- name: HIDE_NAVIGATION
value: "true"
- name: LOGIN_URL
value: "/oauth2/userinfo"
- name: LOGOUT_URL
value: "/oauth2/sign_out"
- name: LOGIN_USERNAME_FIELD
value: "preferredUsername"
- name: FOOTER_TEXT
valueFrom:
configMapKeyRef:
name: incloud-web-dashboard-config
key: FOOTER_TEXT
- name: TITLE_TEXT
valueFrom:
configMapKeyRef:
name: incloud-web-dashboard-config
key: TITLE_TEXT
- name: CUSTOM_TENANT_TEXT
valueFrom:
configMapKeyRef:
name: incloud-web-dashboard-config
key: CUSTOM_TENANT_TEXT
- name: LOGO_TEXT
valueFrom:
configMapKeyRef:
name: incloud-web-dashboard-config
key: LOGO_TEXT
- name: CUSTOM_LOGO_SVG
valueFrom:
configMapKeyRef:
name: incloud-web-dashboard-config
key: CUSTOM_LOGO_SVG
- name: ICON_SVG
valueFrom:
configMapKeyRef:
name: incloud-web-dashboard-config
key: ICON_SVG
image: {{ .Values.openapiUI.image | quote }}
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthcheck
port: 8080
scheme: HTTP
initialDelaySeconds: 3
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 2
startupProbe:
httpGet:
path: /healthcheck
port: 8080
scheme: HTTP
failureThreshold: 30
periodSeconds: 2
name: web
ports:
- containerPort: 8080
name: http
protocol: TCP
resources:
limits:
cpu: 200m
memory: 256Mi
requests:
cpu: 100m
ephemeral-storage: 50Mi
memory: 128Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
add: []
drop:
- ALL
privileged: false
readOnlyRootFilesystem: false
runAsGroup: 0
runAsNonRoot: true
runAsUser: 101
seccompProfile:
type: RuntimeDefault
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
dnsPolicy: ClusterFirst
enableServiceLinks: false
hostIPC: false
hostNetwork: false
hostPID: false
priorityClassName: system-cluster-critical
restartPolicy: Always
schedulerName: default-scheduler
serviceAccountName: incloud-web-web
terminationGracePeriodSeconds: 30

2
packages/system/dashboard/values.yaml
View file

@ -1,4 +1,4 @@
openapiUI:
console:
image: 999669/cozystack-ui:latest@sha256:a93a92a8f7b8d7c4842876215f737d782ad373ff8f4ceb89d7b536945184341e
tokenProxy:
image: ghcr.io/cozystack/cozystack/token-proxy:v1.3.0@sha256:2e280991e07853ea48f97b0a42946afffa10d03d6a83d41099ed83e6ffc94fdc