From 796e162c80e3e0cade3c958f9bd75a8c69ae2c06 Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Sun, 2 Apr 2023 11:58:49 +0200
Subject: [PATCH] add(m9sweeper)

---
 projects/m9sweeper/project.yml           |  7 ++
 projects/m9sweeper/values/m9sweeper.yaml | 90 ++++++++++++++++++++++++
 2 files changed, 97 insertions(+)
 create mode 100644 projects/m9sweeper/project.yml
 create mode 100644 projects/m9sweeper/values/m9sweeper.yaml

diff --git a/projects/m9sweeper/project.yml b/projects/m9sweeper/project.yml
new file mode 100644
index 00000000..de05b126
--- /dev/null
+++ b/projects/m9sweeper/project.yml
@@ -0,0 +1,7 @@
+config: {}
+  
+apps:
+- name: m9sweeper
+  repoURL: https://helm.m9sweeper.io/chartrepo/m9sweeper
+  chart: m9sweeper
+  targetRevision: 1.3.0
diff --git a/projects/m9sweeper/values/m9sweeper.yaml b/projects/m9sweeper/values/m9sweeper.yaml
new file mode 100644
index 00000000..3cc458c2
--- /dev/null
+++ b/projects/m9sweeper/values/m9sweeper.yaml
@@ -0,0 +1,90 @@
+global:
+  # A postgres DB is required, you can either have this chart deploy a minimal postgres DB for you, or bring your own
+  postgres:
+    # set to false to use an external postgres DB
+    enabled: true
+    # Uncomment and set to your own values if you bring your own external postgres
+    # host: m9sweeper-postgresql
+    # username: postgres
+    # password: postgres
+    # database: postgres
+    # port: "5432"
+
+  # RabbitMQ is required, you can either have this chart deploy a minimal rabbit instance, or bring your own
+  rabbitmq:
+    # set to false to use external rabbitmq
+    enabled: true
+    # Uncomment and set to your own values if you bring your own external rabbitmq
+    # host: m9sweeper-rabbitmq
+    # port: "5672"
+    # username: guest
+    # password: guest
+    # queueName: trawler_queue
+
+  # Provide a secret string that will be used to sign JWT tokens, it is highly recommended that you set this to your own secret
+  jwtSecret: "this-is-not-secret"
+  # This URL will be used in email templates to reference a http link to Dash
+  baseUrl: "http://m9sweeper-dash:3000"
+  # Provide a secret string that will be set as the trawler service account's API key.
+  # It will also be passed to trawler so that it can auth with Dash. You will not need it
+  # after the initial installation as it will be loaded into the DB.
+  apiKey: "test123456"
+
+###############
+# Dash Config #
+###############
+dash:
+  image:
+    registry: m9sweeper
+    repository: dash
+    #tag: 0.0.0
+
+  kubesec:
+    registry: m9sweeper
+    repository: kubesec
+    #tag: 0.0.0
+
+  # values that will be used to initialize the Dash database during installation
+  init:
+    clusterGroupName: default-cluster-group
+    clusterName: default-cluster
+    superAdminEmail: "nold@gnu.one"
+    superAdminPassword: "password"
+    licenseKey: ""
+    instanceKey: ""
+    docker:
+      registries:
+        - name: Dockerhub
+          hostname: docker.io
+          aliases:
+            - index.docker.io
+          login_required: false
+        - name: gcr.io
+          hostname: registry.k8s.io
+          login_required: false
+  # Kubernetes native ingress and Istio are supported, only enable one or neither of them.
+  # If you enable neither you will need to port-forward to dash
+  ingress:
+    hosts:
+      # Add lists of hosts
+      - minesweeper.dc
+    path: /
+
+    # Deploys a Kubernetes Ingress resource, defaults to nginx ingress controller.
+    # If networking.k8s.io/v1 is available in your cluster m9sweeper will use that,
+    # otherwise fall back to networking.k8s.io/v1
+    k8sIngress:
+      enabled: true
+      annotations:
+        # kubernetes.io/ingress.class: gce
+        kubernetes.io/ingress.class: ingress-internal
+        cert-manager.io/cluster-issuer: "vault-issuer"
+        nginx.ingress.kubernetes.io/proxy-body-size: 50m
+        # nginx.ingress.kubernetes.io/ssl-redirect: "false"
+        # kubernetes.io/ingress.allow-http: false
+        # kubernetes.io/tls-acme: true
+      tls:
+        # Secrets must be manually created in the namespace.
+        - secretName: dash-certificate
+          hosts:
+            - minesweeper.dc