deployment/helmchart/templates/frontend-service.yaml

@@ -40,3 +40,4 @@ spec:
     {{- include "common.tplvalues.render" (dict "value" .Values.dashboard.service.extraPorts "context" $) | nindent 4 }}
     {{- end }}
   selector: {{- include "common.labels.matchLabels" . | nindent 4 }}
+    component: dashboard-frontend

deployment/helmchart/templates/job-initialize-user.yaml

@@ -27,31 +27,26 @@ spec:
         image: {{ template "backend.image" . }}
         imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
         envFrom:
-          - configMapRef:
-              name: {{ include "common.names.fullname" . }}
-          {{- if .Values.backend.extraEnvVarsCM }}
-          - configMapRef:
-              name: {{ .Values.backend.extraEnvVarsCM }}
-          {{- end }}
-          {{- if .Values.backend.extraEnvVarsSecret }}
-          - secretRef:
-              name: {{ .Values.backend.extraEnvVarsSecret }}
-          {{- end }}
+        - configMapRef:
+            name: {{ include "common.names.fullname" . }}
+        {{- if .Values.backend.extraEnvVarsCM }}
+        - configMapRef:
+            name: {{ .Values.backend.extraEnvVarsCM }}
+        {{- end }}
+        {{- if .Values.backend.extraEnvVarsSecret }}
+        - secretRef:
+            name: {{ .Values.backend.extraEnvVarsSecret }}
+        {{- end }}
         env:
-          - name: SETUP_EMAIL
-            value: {{ .Values.backend.initialUser.email }}
-          - name: SETUP_PASSWORD
-            value: {{ .Values.backend.initialUser.password }}
-          - name: KRATOS_PUBLIC_URL
-            value: http://kratos-public:80
+        - name: SETUP_EMAIL
+          value: {{ .Values.backend.initialUser.email }}
+        - name: SETUP_PASSWORD
+          value: {{ .Values.backend.initialUser.password }}
+        - name: KRATOS_PUBLIC_URL
+          value: http://kratos-public:80
         command: ["/bin/bash", "-c"]
         args:
-          - flask cli user create $SETUP_EMAIL;
-            flask cli user setpassword $SETUP_EMAIL $SETUP_PASSWORD;
-            flask cli app create dashboard Dashboard;
-            flask cli user setrole $SETUP_EMAIL dashboard admin;
-            flask cli user setrole $SETUP_EMAIL nextcloud admin;
-            flask cli user setrole $SETUP_EMAIL wordpress admin;
-            flask cli user setrole $SETUP_EMAIL wekan admin;
-            flask cli user setrole $SETUP_EMAIL zulip admin;
-            flask cli user setrole $SETUP_EMAIL hedgedoc admin;
+        - flask cli user create $SETUP_EMAIL;
+          flask cli user setpassword $SETUP_EMAIL $SETUP_PASSWORD;
+          flask cli app create dashboard Dashboard;
+          flask cli user setrole $SETUP_EMAIL dashboard admin;

deployment/helmchart/templates/rbac/clusterrole.yaml

@@ -22,6 +22,7 @@ rules:
       - get
       - patch
       - create
+      - watch
   - apiGroups:
       - helm.toolkit.fluxcd.io
     resources:
@@ -46,6 +47,7 @@ rules:
       - configmaps
     verbs:
       - list
+      - watch
       - get
       - patch
       - delete

deployment/helmchart/values.yaml

@@ -68,7 +68,7 @@ dashboard:
   image:
     registry: open.greenhost.net:4567
     repository: stackspin/dashboard/dashboard
-    tag: 0.8.1
+    tag: 0.13.3
     digest: ""
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.
@@ -236,7 +236,7 @@ backend:
   image:
     registry: open.greenhost.net:4567
     repository: stackspin/dashboard/dashboard-backend
-    tag: 0.8.1
+    tag: 0.13.3
     digest: ""
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.
@@ -660,8 +660,9 @@ ingress:
   ##
   path: /
   ## @param ingress.pathType Ingress path type
+  ## Should usually be ImplementationSpecific to allow regex matching.
   ##
-  pathType: Prefix
+  pathType: ImplementationSpecific
   ## @param ingress.annotations Ingress annotations done as key:value pairs
   ## For a full list of possible ingress annotations, please see
   ## ref: https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/nginx-configuration/annotations.md
@@ -719,11 +720,16 @@ serviceAccount:
   ##
   annotations: {}
 
+# If true, mount a pvc `dashboard-overlay` into the frontend pod. The
+# contents will be served from the root frontend URL, overlaying any existing
+# or non-existing files from the docker image.
+overlay: false
+
 tests:
   image:
     registry: open.greenhost.net:4567
     repository: stackspin/dashboard/cypress-test
-    tag: 0.8.1
+    tag: 0.13.3
     pullPolicy: IfNotPresent
   credentials:
     user: ""

deployment/nginx.conf

@@ -6,10 +6,19 @@ http {
         listen [::]:80 default_server;
         listen 80;
 
-        root /usr/share/nginx/html;
         include /etc/nginx/mime.types;
 
+        # First try to serve from the overlay, for custom styling, icons etc.
+        # The directory `/overlay` is expected to be mounted at runtime.
         location / {
+            root /overlay;
+            try_files $uri @docker;
+        }
+
+        # Default to serving from the directory with files copied into the
+        # docker image when building.
+        location @docker {
+            root /usr/share/nginx/html;
             try_files $uri /index.html;
         }
     }