chore: add Dependency-Track v5 chart wrapper - #220
Open
ybelMekk wants to merge 3 commits into
Open
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Adds a new charts-v5 Helm chart that wraps the official Dependency-Track v5 Helm chart while preserving NAIS-specific runtime needs (Cloud SQL Auth Proxy sidecar, bootstrap Job, and Fasit/Feature mappings).
Changes:
- Introduces a new wrapper chart (
charts-v5) with dependency on the officialdependency-trackchart (aliased asapp). - Adds NAIS-specific templates for runtime ConfigMaps (OIDC/CORS/datasource + frontend env) and a post-install/upgrade bootstrap Job with Secrets.
- Adds NAIS Feature mapping, test values for local rendering, and minimal chart docs/packaging files.
Reviewed changes
Copilot reviewed 8 out of 10 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| charts-v5/values.yaml | Default wrapper values including subchart passthrough (app.*), runtime env config, proxy sidecar config, and bootstrap config. |
| charts-v5/test-values.yaml | Non-secret values used to render templates locally (fills required values). |
| charts-v5/templates/runtime-config.yaml | Renders runtime ConfigMaps consumed via extraEnvFrom for API server and frontend. |
| charts-v5/templates/bootstrap.yaml | Adds a Helm hook Job for bootstrap plus Secrets for credentials/users payload. |
| charts-v5/README.md | Documents wrapper design, migration constraints, and validation steps. |
| charts-v5/Feature.yaml | Exposes wrapper/subchart settings to NAIS Feature/Fasit configuration. |
| charts-v5/Chart.yaml | Declares the wrapper chart and its dependency on official dependency-track chart. |
| charts-v5/Chart.lock | Locks dependency versions/digests for reproducible installs. |
| charts-v5/.helmignore | Excludes local/temporary files from chart packaging. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
charts-v5alongside the existing v4 chart as a wrapper around the official Dependency-Track v5 chartMigration notes
ReadWriteOncestorage requires a single API-server replica; use RWX storage or S3 before scalingValidation
helm dependency update charts-v5helm lint --strict charts-v5 -f charts-v5/test-values.yaml ...helm template dependencytrack-v5 charts-v5 -f charts-v5/test-values.yaml ...