Feat/helm realease to gh

.github/workflows/helm-release.yml

@@ -1,4 +1,4 @@
-name: Publish user-storage Helm chart
+name: Publish user-storage Helm chart (OCI)
 
 on:
   workflow_dispatch:
@@ -12,27 +12,38 @@ on:
 
 jobs:
   release:
-    permissions:
-      contents: write
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
     steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
+      - uses: actions/checkout@v6
+
+      - uses: azure/setup-helm@v4
+
+      - name: Login to GHCR
+        run: |
+          echo "${{ secrets.GITHUB_TOKEN }}" | helm registry login ghcr.io \
+            -u ${{ github.actor }} \
+            --password-stdin
+
+      - name: Add Helm repositories
+        run: |
+          helm repo add bjw-s https://bjw-s-labs.github.io/helm-charts
+          helm repo update
+
+      - name: Build dependencies
+        run: helm dependency build deploy/charts/user-storage
+
+      - name: Lint chart
+        run: helm lint deploy/charts/user-storage
+
+      - name: Package chart
+        run: helm package deploy/charts/user-storage
 
-      - name: Configure Git
-        # This is needed for chart-releaser to push to gh-pages branch
+      - name: Push chart to GHCR
         run: |
-          git config user.name "$GITHUB_ACTOR"
-          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
-
-      - name: Install Helm
-        uses: azure/setup-helm@v4
-
-      - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.6.0
-        with:
-          charts_dir: deploy/charts
-        env:
-          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+          CHART_VERSION=$(grep '^version:' deploy/charts/user-storage/Chart.yaml | awk '{print $2}')
+          OWNER_LOWER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
+          helm push user-storage-$CHART_VERSION.tgz oci://ghcr.io/$OWNER_LOWER/charts

deploy/charts/user-storage/README.md

@@ -104,6 +104,24 @@ cd deploy/charts/user-storage
 helm install user-storage . -f values-dev.yaml
 ```
 
+## Installation from GHCR
+
+### Installation
+
+1. Prerequisites
+
+Ensure you have Helm v3.8.0 or later installed, as OCI support is required.
+
+2. Install the chart from the OCI registry:
+
+```bash
+helm upgrade --install user-storage oci://ghcr.io/adorsys-gis/charts/user-storage --version $CHART_VERSION
+```
+
+### Finding Chart Versions
+
+Available chart versions can be found in the "Packages" section of the GitHub repository. Navigate to the repository on GitHub, click on the "Packages" tab, and locate the `user-storage` package to view available versions.
+
 ## Configuration
 
 The chart values can be customized by editing the `values.yaml` file. For example:

deploy/charts/user-storage/values.yaml

@@ -11,16 +11,12 @@ config:
   database:
     url: "${DATABASE_URL}"
     pool_size: 10
-    secretName: postgres-secret
-    secretKey: url
   runtime:
     mode: shared
   redis:
     url: "${REDIS_URL}"
     worker_lock_ttl_seconds: 30
     worker_lock_renew_seconds: 10
-    secretName: redis-secret
-    secretKey: url
   storage:
     type: minio
     minio:
@@ -38,8 +34,6 @@ config:
     provider: console
   kc:
     enabled: true
-    signatureSecretName: kc-signature-secret
-    signatureSecretKey: signature_secret
     base_path: "/kc"
     max_clock_skew_seconds: 60
     max_body_bytes: 262144
@@ -82,6 +76,8 @@ controllers:
           - serve
           - --config-path
           - /app/config/default.yaml
+          - --mode
+          - server
         env:
           DATABASE_URL:
             valueFrom:
@@ -111,6 +107,8 @@ controllers:
           - worker
           - --config-path
           - /app/config/default.yaml
+          - --mode
+          - worker
         env:
           DATABASE_URL:
             valueFrom:
@@ -142,13 +140,6 @@ controllers:
         ports:
           - name: http
             containerPort: 3001
-        env:
-          DATABASE_URL:
-            valueFrom:
-              secretKeyRef:
-                name: postgres-secret
-                key: url
-          TZ: "UTC"
 
 persistence:
   flows:
@@ -205,7 +196,7 @@ ingress:
     enabled: true
     className: nginx
     hosts:
-      - host: user-storage.local
+      - host: api.verif.fyi
         paths:
           - path: /
             pathType: Prefix