273 lines
11 KiB
Smarty
273 lines
11 KiB
Smarty
|
{{/*
|
||
|
|
Copyright Broadcom, Inc. All Rights Reserved.
|
||
|
|
SPDX-License-Identifier: APACHE-2.0
|
||
|
|
*/}}
|
||
|
|
|
||
|
|
{{/* vim: set filetype=mustache: */}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Return the proper RabbitMQ image name
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.image" -}}
|
||
|
|
{{ include "common.images.image" (dict "imageRoot" .Values.image "global" .Values.global) }}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Return the proper image name (for the init container volume-permissions image)
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.volumePermissions.image" -}}
|
||
|
|
{{ include "common.images.image" (dict "imageRoot" .Values.volumePermissions.image "global" .Values.global) }}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Return the proper Docker Image Registry Secret Names
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.imagePullSecrets" -}}
|
||
|
|
{{ include "common.images.renderPullSecrets" (dict "images" (list .Values.image .Values.volumePermissions.image) "context" $) }}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Create the name of the service account to use
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.serviceAccountName" -}}
|
||
|
|
{{- if .Values.serviceAccount.create -}}
|
||
|
|
{{ default (include "common.names.fullname" .) .Values.serviceAccount.name }}
|
||
|
|
{{- else -}}
|
||
|
|
{{ default "default" .Values.serviceAccount.name }}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Get RabbitMQ password secret name.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.secretPasswordName" -}}
|
||
|
|
{{- if .Values.auth.existingPasswordSecret -}}
|
||
|
|
{{- printf "%s" (tpl .Values.auth.existingPasswordSecret $) -}}
|
||
|
|
{{- else -}}
|
||
|
|
{{- printf "%s" (include "common.names.fullname" .) -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Get the password key to be retrieved from RabbitMQ secret.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.secretPasswordKey" -}}
|
||
|
|
{{- if and .Values.auth.existingPasswordSecret .Values.auth.existingSecretPasswordKey -}}
|
||
|
|
{{- printf "%s" (tpl .Values.auth.existingSecretPasswordKey $) -}}
|
||
|
|
{{- else -}}
|
||
|
|
{{- printf "rabbitmq-password" -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Get the erlang secret.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.secretErlangName" -}}
|
||
|
|
{{- if .Values.auth.existingErlangSecret -}}
|
||
|
|
{{- printf "%s" (tpl .Values.auth.existingErlangSecret $) -}}
|
||
|
|
{{- else -}}
|
||
|
|
{{- printf "%s" (include "common.names.fullname" .) -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Get the erlang cookie key to be retrieved from RabbitMQ secret.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.secretErlangKey" -}}
|
||
|
|
{{- if and .Values.auth.existingErlangSecret .Values.auth.existingSecretErlangKey -}}
|
||
|
|
{{- printf "%s" (tpl .Values.auth.existingSecretErlangKey $) -}}
|
||
|
|
{{- else -}}
|
||
|
|
{{- printf "rabbitmq-erlang-cookie" -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Get the TLS secret.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.tlsSecretName" -}}
|
||
|
|
{{- if .Values.auth.tls.existingSecret -}}
|
||
|
|
{{- printf "%s" (tpl .Values.auth.tls.existingSecret $) -}}
|
||
|
|
{{- else -}}
|
||
|
|
{{- printf "%s-certs" (include "common.names.fullname" .) -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Return true if a TLS credentials secret object should be created
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.createTlsSecret" -}}
|
||
|
|
{{- if and .Values.auth.tls.enabled (not .Values.auth.tls.existingSecret) }}
|
||
|
|
{{- true -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Return the proper RabbitMQ plugin list
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.plugins" -}}
|
||
|
|
{{- $plugins := .Values.plugins -}}
|
||
|
|
{{- if .Values.extraPlugins -}}
|
||
|
|
{{- $plugins = printf "%s %s" $plugins .Values.extraPlugins -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- if .Values.metrics.enabled -}}
|
||
|
|
{{- $plugins = printf "%s %s" $plugins .Values.metrics.plugins -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- printf "%s" $plugins | replace " " ", " -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Return the number of bytes given a value
|
||
|
|
following a base 2 or base 10 number system.
|
||
|
|
Input can be: b | B | k | K | m | M | g | G | Ki | Mi | Gi
|
||
|
|
Or number without suffix (then the number gets interpreted as bytes)
|
||
|
|
Usage:
|
||
|
|
{{ include "rabbitmq.toBytes" .Values.path.to.the.Value }}
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.toBytes" -}}
|
||
|
|
{{- $si := . -}}
|
||
|
|
{{- if not (typeIs "string" . ) -}}
|
||
|
|
{{- $si = int64 $si | toString -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- $bytes := 0 -}}
|
||
|
|
{{- if or (hasSuffix "B" $si) (hasSuffix "b" $si) -}}
|
||
|
|
{{- $bytes = $si | trimSuffix "B" | trimSuffix "b" | float64 | floor -}}
|
||
|
|
{{- else if or (hasSuffix "K" $si) (hasSuffix "k" $si) -}}
|
||
|
|
{{- $raw := $si | trimSuffix "K" | trimSuffix "k" | float64 -}}
|
||
|
|
{{- $bytes = mulf $raw (mul 1000) | floor -}}
|
||
|
|
{{- else if or (hasSuffix "M" $si) (hasSuffix "m" $si) -}}
|
||
|
|
{{- $raw := $si | trimSuffix "M" | trimSuffix "m" | float64 -}}
|
||
|
|
{{- $bytes = mulf $raw (mul 1000 1000) | floor -}}
|
||
|
|
{{- else if or (hasSuffix "G" $si) (hasSuffix "g" $si) -}}
|
||
|
|
{{- $raw := $si | trimSuffix "G" | trimSuffix "g" | float64 -}}
|
||
|
|
{{- $bytes = mulf $raw (mul 1000 1000 1000) | floor -}}
|
||
|
|
{{- else if hasSuffix "Ki" $si -}}
|
||
|
|
{{- $raw := $si | trimSuffix "Ki" | float64 -}}
|
||
|
|
{{- $bytes = mulf $raw (mul 1024) | floor -}}
|
||
|
|
{{- else if hasSuffix "Mi" $si -}}
|
||
|
|
{{- $raw := $si | trimSuffix "Mi" | float64 -}}
|
||
|
|
{{- $bytes = mulf $raw (mul 1024 1024) | floor -}}
|
||
|
|
{{- else if hasSuffix "Gi" $si -}}
|
||
|
|
{{- $raw := $si | trimSuffix "Gi" | float64 -}}
|
||
|
|
{{- $bytes = mulf $raw (mul 1024 1024 1024) | floor -}}
|
||
|
|
{{- else if (mustRegexMatch "^[0-9]+$" $si) -}}
|
||
|
|
{{- $bytes = $si -}}
|
||
|
|
{{- else -}}
|
||
|
|
{{- printf "\n%s is invalid SI quantity\nSuffixes can be: b | B | k | K | m | M | g | G | Ki | Mi | Gi or without any Suffixes" $si | fail -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- $bytes | int64 -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Compile all warnings into a single message, and call fail.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.validateValues" -}}
|
||
|
|
{{- $messages := list -}}
|
||
|
|
{{- $messages := append $messages (include "rabbitmq.validateValues.ldap" .) -}}
|
||
|
|
{{- $messages := append $messages (include "rabbitmq.validateValues.memoryHighWatermark" .) -}}
|
||
|
|
{{- $messages := append $messages (include "rabbitmq.validateValues.ingress.tls" .) -}}
|
||
|
|
{{- $messages := append $messages (include "rabbitmq.validateValues.auth.tls" .) -}}
|
||
|
|
{{- $messages := without $messages "" -}}
|
||
|
|
{{- $message := join "\n" $messages -}}
|
||
|
|
|
||
|
|
{{- if $message -}}
|
||
|
|
{{- printf "\nVALUES VALIDATION:\n%s" $message | fail -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Validate values of rabbitmq - LDAP support
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.validateValues.ldap" -}}
|
||
|
|
{{- if .Values.ldap.enabled }}
|
||
|
|
{{- $serversListLength := len .Values.ldap.servers }}
|
||
|
|
{{- $userDnPattern := coalesce .Values.ldap.user_dn_pattern .Values.ldap.userDnPattern }}
|
||
|
|
{{- if or (and (not (gt $serversListLength 0)) (empty .Values.ldap.uri)) (and (not $userDnPattern) (not .Values.ldap.basedn)) }}
|
||
|
|
rabbitmq: LDAP
|
||
|
|
Invalid LDAP configuration. When enabling LDAP support, the parameters "ldap.servers" or "ldap.uri" are mandatory
|
||
|
|
to configure the connection and "ldap.userDnPattern" or "ldap.basedn" are necessary to lookup the users. Please provide them:
|
||
|
|
$ helm install {{ .Release.Name }} oci://registry-1.docker.io/bitnamicharts/rabbitmq \
|
||
|
|
--set ldap.enabled=true \
|
||
|
|
--set ldap.servers[0]=my-ldap-server" \
|
||
|
|
--set ldap.port="389" \
|
||
|
|
--set ldap.userDnPattern="cn=${username},dc=example,dc=org"
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Validate values of rabbitmq - Memory high watermark
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.validateValues.memoryHighWatermark" -}}
|
||
|
|
{{- if and (not (eq .Values.memoryHighWatermark.type "absolute")) (not (eq .Values.memoryHighWatermark.type "relative")) }}
|
||
|
|
rabbitmq: memoryHighWatermark.type
|
||
|
|
Invalid Memory high watermark type. Valid values are "absolute" and
|
||
|
|
"relative". Please set a valid mode (--set memoryHighWatermark.type="xxxx")
|
||
|
|
{{- else if and .Values.memoryHighWatermark.enabled (eq .Values.memoryHighWatermark.type "relative") (not (dig "limits" "memory" "" .Values.resources)) }}
|
||
|
|
rabbitmq: memoryHighWatermark
|
||
|
|
You enabled configuring memory high watermark using a relative limit. However,
|
||
|
|
no memory limits were defined at POD level. Define your POD limits as shown below:
|
||
|
|
|
||
|
|
$ helm install {{ .Release.Name }} oci://registry-1.docker.io/bitnamicharts/rabbitmq \
|
||
|
|
--set memoryHighWatermark.enabled=true \
|
||
|
|
--set memoryHighWatermark.type="relative" \
|
||
|
|
--set memoryHighWatermark.value="0.4" \
|
||
|
|
--set resources.limits.memory="2Gi"
|
||
|
|
|
||
|
|
Altenatively, user an absolute value for the memory memory high watermark :
|
||
|
|
|
||
|
|
$ helm install {{ .Release.Name }} oci://registry-1.docker.io/bitnamicharts/rabbitmq \
|
||
|
|
--set memoryHighWatermark.enabled=true \
|
||
|
|
--set memoryHighWatermark.type="absolute" \
|
||
|
|
--set memoryHighWatermark.value="512MB"
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Validate values of rabbitmq - TLS configuration for Ingress
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.validateValues.ingress.tls" -}}
|
||
|
|
{{- if and .Values.ingress.enabled .Values.ingress.tls (not (include "common.ingress.certManagerRequest" ( dict "annotations" .Values.ingress.annotations ))) (not .Values.ingress.selfSigned) (not .Values.ingress.existingSecret) (empty .Values.ingress.extraTls) }}
|
||
|
|
rabbitmq: ingress.tls
|
||
|
|
You enabled the TLS configuration for the default ingress hostname but
|
||
|
|
you did not enable any of the available mechanisms to create the TLS secret
|
||
|
|
to be used by the Ingress Controller.
|
||
|
|
Please use any of these alternatives:
|
||
|
|
- Use the `ingress.extraTls` and `ingress.secrets` parameters to provide your custom TLS certificates.
|
||
|
|
- Use the `ingress.existingSecret` to provide your custom TLS certificates.
|
||
|
|
- Rely on cert-manager to create it by setting the corresponding annotations
|
||
|
|
- Rely on Helm to create self-signed certificates by setting `ingress.selfSigned=true`
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Validate values of RabbitMQ - Auth TLS enabled
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.validateValues.auth.tls" -}}
|
||
|
|
{{- if and .Values.auth.tls.enabled (not .Values.auth.tls.autoGenerated) (not .Values.auth.tls.existingSecret) (not .Values.auth.tls.caCertificate) (not .Values.auth.tls.serverCertificate) (not .Values.auth.tls.serverKey) }}
|
||
|
|
rabbitmq: auth.tls
|
||
|
|
You enabled TLS for RabbitMQ but you did not enable any of the available mechanisms to create the TLS secret.
|
||
|
|
Please use any of these alternatives:
|
||
|
|
- Provide an existing secret containing the TLS certificates using `auth.tls.existingSecret`
|
||
|
|
- Provide the plain text certificates using `auth.tls.caCertificate`, `auth.tls.serverCertificate` and `auth.tls.serverKey`.
|
||
|
|
- Enable auto-generated certificates using `auth.tls.autoGenerated`.
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Get the initialization scripts volume name.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.initScripts" -}}
|
||
|
|
{{- printf "%s-init-scripts" (include "common.names.fullname" .) -}}
|
||
|
|
{{- end -}}
|
||
|
|
|
||
|
|
{{/*
|
||
|
|
Get the extraConfigurationExistingSecret secret.
|
||
|
|
*/}}
|
||
|
|
{{- define "rabbitmq.extraConfiguration" -}}
|
||
|
|
{{- if not (empty .Values.extraConfigurationExistingSecret) -}}
|
||
|
|
{{- include "common.secrets.lookup" (dict "secret" .Values.extraConfigurationExistingSecret "key" "extraConfiguration" "context" $) | b64dec -}}
|
||
|
|
{{- else -}}
|
||
|
|
{{- tpl .Values.extraConfiguration . -}}
|
||
|
|
{{- end -}}
|
||
|
|
{{- end -}}
|