Initial Commit

templates/_common.tpl

@@ -0,0 +1,58 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "reposilite.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "reposilite.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "reposilite.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common annotations
+*/}}
+{{- define "reposilite.annotations" -}}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "reposilite.labels" -}}
+helm.sh/chart: {{ include "reposilite.chart" . }}
+{{ include "reposilite.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "reposilite.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "reposilite.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+

templates/_deployment.tpl

@@ -0,0 +1,75 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* annotations */}}
+
+{{- define "reposilite.deployment.annotations" -}}
+{{ include "reposilite.annotations" . }}
+{{- if .Values.deployment.annotations }}
+{{ toYaml .Values.deployment.annotations }}
+{{- end }}
+{{- end }}
+
+
+{{/* env */}}
+
+{{- define "reposilite.deployment.reposilite.env" -}}
+{{- $env := .Values.deployment.reposilite.env | default list }}
+{{- if .Values.persistentVolumeClaim.enabled }}
+{{- $env = concat $env (list (dict "name" "REPOSILITE_DATA" "value" .Values.persistentVolumeClaim.path )) }}
+{{- end }}
+{{ toYaml (dict "env" $env) }}
+{{- end -}}
+
+REPOSILITE_DATA
+
+{{/* image */}}
+
+{{- define "reposilite.deployment.images.reposilite.fqin" -}}
+{{- $registry := .Values.deployment.reposilite.image.registry -}}
+{{- $repository := .Values.deployment.reposilite.image.repository -}}
+{{- $tag := default .Chart.AppVersion .Values.deployment.reposilite.image.tag -}}
+{{- printf "%s/%s:%s" $registry $repository $tag -}}
+{{- end -}}
+
+{{/* labels */}}
+
+{{- define "reposilite.deployment.labels" -}}
+{{ include "reposilite.labels" . }}
+{{- if .Values.deployment.labels }}
+{{ toYaml .Values.deployment.labels }}
+{{- end }}
+{{- end }}
+
+{{/* serviceAccount */}}
+
+{{- define "reposilite.deployment.serviceAccount" -}}
+{{- if .Values.serviceAccount.existing.enabled -}}
+{{- printf "%s" .Values.serviceAccount.existing.serviceAccountName -}}
+{{- else -}}
+{{- include "reposilite.fullname" . -}}
+{{- end -}}
+{{- end }}
+
+{{/* volumeMounts */}}
+
+{{- define "reposilite.deployment.reposilite.volumeMounts" -}}
+{{- $volumeMounts := .Values.deployment.reposilite.volumeMounts | default list }}
+{{- if .Values.persistentVolumeClaim.enabled }}
+{{- $volumeMounts = concat $volumeMounts (list (dict "name" "data" "mountPath" .Values.persistentVolumeClaim.path )) }}
+{{- end }}
+{{ toYaml (dict "volumeMounts" $volumeMounts) }}
+{{- end -}}
+
+{{/* volumes */}}
+
+{{- define "reposilite.deployment.volumes" -}}
+{{- $volumes := .Values.deployment.volumes | default list }}
+
+{{- if and .Values.persistentVolumeClaim.enabled (not .Values.persistentVolumeClaim.existing.enabled) }}
+{{- $persistentVolumeClaimName := include "reposilite.persistentVolumeClaim.name" $ -}}
+{{- $volumes = concat $volumes (list (dict "name" "data" "persistentVolumeClaim" (dict "claimName" $persistentVolumeClaimName))) }}
+{{- end }}
+
+{{ toYaml (dict "volumes" $volumes) }}
+
+{{- end -}}

templates/_hpa.tpl

@@ -0,0 +1,19 @@
+---
+
+{{/* annotations */}}
+
+{{- define "reposilite.hpa.annotations" -}}
+{{ include "reposilite.annotations" . }}
+{{- if .Values.hpa.annotations }}
+{{ toYaml .Values.hpa.annotations }}
+{{- end }}
+{{- end }}
+
+{{/* labels */}}
+
+{{- define "reposilite.hpa.labels" -}}
+{{ include "reposilite.labels" . }}
+{{- if .Values.hpa.labels }}
+{{ toYaml .Values.hpa.labels }}
+{{- end }}
+{{- end }}

templates/_ingress.tpl

@@ -0,0 +1,19 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* annotations */}}
+
+{{- define "reposilite.ingress.annotations" -}}
+{{ include "reposilite.annotations" . }}
+{{- if .Values.ingress.annotations }}
+{{ toYaml .Values.ingress.annotations }}
+{{- end }}
+{{- end }}
+
+{{/* labels */}}
+
+{{- define "reposilite.ingress.labels" -}}
+{{ include "reposilite.labels" . }}
+{{- if .Values.ingress.labels }}
+{{ toYaml .Values.ingress.labels }}
+{{- end }}
+{{- end }}

templates/_networkPolicy.tpl

@@ -0,0 +1,19 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* annotations */}}
+
+{{- define "reposilite.networkPolicy.annotations" -}}
+{{ include "reposilite.annotations" . }}
+{{- if .Values.networkPolicy.annotations }}
+{{ toYaml .Values.networkPolicy.annotations }}
+{{- end }}
+{{- end }}
+
+{{/* labels */}}
+
+{{- define "reposilite.networkPolicy.labels" -}}
+{{ include "reposilite.labels" . }}
+{{- if .Values.networkPolicy.labels }}
+{{ toYaml .Values.networkPolicy.labels }}
+{{- end }}
+{{- end }}

templates/_persistentVolumeClaim.tpl

@@ -0,0 +1,25 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* annotations */}}
+
+{{- define "reposilite.persistentVolumeClaim.annotations" -}}
+helm.sh/resource-policy: keep
+{{- if .Values.persistentVolumeClaim.new.annotations }}
+{{ toYaml .Values.persistentVolumeClaim.new.annotations }}
+{{- end }}
+{{- end }}
+
+{{/* labels */}}
+
+{{- define "reposilite.persistentVolumeClaim.labels" -}}
+{{ include "reposilite.labels" . }}
+{{- if .Values.persistentVolumeClaim.new.labels }}
+{{ toYaml .Values.persistentVolumeClaim.new.labels }}
+{{- end }}
+{{- end }}
+
+{{/* name */}}
+
+{{- define "reposilite.persistentVolumeClaim.name" -}}
+{{ include "reposilite.fullname" . }}
+{{- end }}

templates/_pod.tpl

@@ -0,0 +1,17 @@
+---
+
+{{/* annotations */}}
+
+{{- define "reposilite.pod.annotations" -}}
+{{ include "reposilite.annotations" . }}
+{{- end }}
+
+{{/* labels */}}
+
+{{- define "reposilite.pod.labels" -}}
+{{ include "reposilite.labels" . }}
+{{- end }}
+
+{{- define "reposilite.pod.selectorLabels" -}}
+{{ include "reposilite.selectorLabels" . }}
+{{- end }}

templates/_serviceAccount.tpl

@@ -0,0 +1,17 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* annotations */}}
+
+{{- define "reposilite.serviceAccount.annotations" -}}
+{{- if .Values.serviceAccount.new.annotations }}
+{{ toYaml .Values.serviceAccount.new.annotations }}
+{{- end }}
+{{- end }}
+
+{{/* labels */}}
+
+{{- define "reposilite.serviceAccount.labels" -}}
+{{- if .Values.serviceAccount.new.labels }}
+{{ toYaml .Values.serviceAccount.new.labels }}
+{{- end }}
+{{- end }}

templates/_services.tpl

@@ -0,0 +1,27 @@
+{{/* vim: set filetype=mustache: */}}
+
+{{/* annotations */}}
+
+{{- define "reposilite.service.annotations" -}}
+{{ include "reposilite.annotations" . }}
+{{- if .Values.service.annotations }}
+{{ toYaml .Values.service.annotations }}
+{{- end }}
+{{- end }}
+
+{{/* labels */}}
+
+{{- define "reposilite.service.labels" -}}
+{{ include "reposilite.labels" . }}
+{{- if .Values.service.labels }}
+{{ toYaml .Values.service.labels }}
+{{- end }}
+{{- end }}
+
+{{/* names */}}
+
+{{- define "reposilite.service.name" -}}
+{{- if .Values.service.enabled -}}
+{{ include "reposilite.fullname" . }}
+{{- end -}}
+{{- end -}}

templates/deployment.yaml

@@ -0,0 +1,140 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  {{- with (include "reposilite.deployment.annotations" . | fromYaml) }}
+  annotations:
+    {{- tpl (toYaml .) $ | nindent 4 }}
+  {{- end }}
+  {{- with (include "reposilite.deployment.labels" . | fromYaml) }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  name: {{ include "reposilite.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  replicas: {{ .Values.deployment.replicas }}
+  selector:
+    matchLabels:
+      {{- include "reposilite.pod.selectorLabels" . | nindent 6 }}
+  {{- with .Values.deployment.strategy }}
+  strategy:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  template:
+    metadata:
+      {{- with (include "reposilite.pod.annotations" . | fromYaml) }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      labels:
+        {{- include "reposilite.pod.labels" . | nindent 8 }}
+    spec:
+      {{- with .Values.deployment.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+      - {{- if gt (len .Values.deployment.reposilite.args) 0 }}
+        args:
+        {{- range .Values.deployment.reposilite.args }}
+        - {{ . | quote }}
+        {{- end }}
+        {{- end }}
+        {{- if gt (len .Values.deployment.reposilite.command) 0 }}
+        command:
+        {{- range .Values.deployment.reposilite.command }}
+        - {{ . | quote }}
+        {{- end }}
+        {{- end }}
+        {{- $env := (include "reposilite.deployment.reposilite.env" . | fromYaml) }}
+        {{- if and (hasKey $env "env") (gt (len $env.env) 0) }}
+        env:
+        {{- toYaml $env.env | nindent 8 }}
+        {{- end }}
+        {{- with .Values.deployment.reposilite.envFrom }}
+        envFrom:
+          {{- toYaml . | nindent 10 }}
+        {{- end }}
+        image: {{ include "reposilite.deployment.images.reposilite.fqin" . | quote }}
+        imagePullPolicy: {{ .Values.deployment.reposilite.image.pullPolicy }}
+        livenessProbe:
+          tcpSocket:
+            port: http
+          failureThreshold: 3
+          initialDelaySeconds: 5
+          periodSeconds: 60
+          successThreshold: 1
+          timeoutSeconds: 3
+        name: reposilite
+        ports:
+        - name: http
+          containerPort: {{ .Values.service.port }}
+          protocol: TCP
+        readinessProbe:
+          tcpSocket:
+            port: http
+          failureThreshold: 3
+          initialDelaySeconds: 5
+          periodSeconds: 15
+          successThreshold: 1
+          timeoutSeconds: 3
+        {{- with .Values.deployment.reposilite.resources }}
+        resources:
+          {{- toYaml . | nindent 10 }}
+        {{- end }}
+        {{- with .Values.deployment.reposilite.securityContext }}
+        securityContext:
+          {{- toYaml . | nindent 10 }}
+        {{- end }}
+        {{- $volumeMounts := (include "reposilite.deployment.reposilite.volumeMounts" . | fromYaml) }}
+        {{- if and (hasKey $volumeMounts "volumeMounts") (gt (len $volumeMounts.volumeMounts) 0) }}
+        volumeMounts:
+        {{- toYaml $volumeMounts.volumeMounts | nindent 8 }}
+        {{- end }}
+      {{- with .Values.deployment.dnsConfig }}
+      dnsConfig:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- if .Values.deployment.dnsPolicy }}
+      dnsPolicy: {{ .Values.deployment.dnsPolicy }}
+      {{- end }}
+      {{- if .Values.deployment.hostname }}
+      hostname: {{ .Values.deployment.hostname }}
+      {{- end }}
+      hostNetwork: {{ .Values.deployment.hostNetwork }}
+      {{- with .Values.deployment.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.deployment.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- if .Values.deployment.priorityClassName }}
+      priorityClassName: {{ .Values.deployment.priorityClassName }}
+      {{- end }}
+      {{- if .Values.deployment.restartPolicy }}
+      restartPolicy: {{ .Values.deployment.restartPolicy }}
+      {{- end }}
+      {{- with .Values.deployment.securityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      serviceAccount: {{ include "reposilite.deployment.serviceAccount" . }}
+      {{- if .Values.deployment.subdomain }}
+      subdomain: {{ .Values.deployment.subdomain }}
+      {{- end }}
+      terminationGracePeriodSeconds: {{ .Values.deployment.terminationGracePeriodSeconds }}
+      {{- with .Values.deployment.tolerations }}
+      tolerations:
+      {{- toYaml . | nindent 6 }}
+      {{- end }}
+      {{- with .Values.deployment.topologySpreadConstraints }}
+      topologySpreadConstraints:
+      {{- toYaml . | nindent 6 }}
+      {{- end }}
+      {{- $volumes := (include "reposilite.deployment.volumes" . | fromYaml) }}
+      {{- if and (hasKey $volumes "volumes") (gt (len $volumes.volumes) 0) }}
+      volumes:
+      {{- toYaml $volumes.volumes | nindent 6 }}
+      {{- end }}

templates/hpa.yaml

@@ -0,0 +1,29 @@
+{{- if .Values.hpa.enabled -}}
+---
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  {{- with (include "reposilite.hpa.annotations" . | fromYaml) }}
+  annotations:
+    {{- tpl (toYaml .) $ | nindent 4 }}
+  {{- end }}
+  {{- with (include "reposilite.hpa.labels" . | fromYaml) }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  name: {{ include "reposilite.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  {{- with .Values.hpa.behavior }}
+  behavior:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  metrics:
+  {{- toYaml .Values.hpa.metrics | nindent 2 }}
+  maxReplicas: {{ .Values.hpa.maxReplicas }}
+  minReplicas: {{ .Values.hpa.minReplicas }}
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: {{ include "reposilite.fullname" . }}
+{{- end -}}

templates/ingress.yaml

@@ -0,0 +1,45 @@
+{{- if .Values.ingress.enabled -}}
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  {{- with (include "reposilite.ingress.annotations" . | fromYaml) }}
+  annotations:
+    {{- tpl (toYaml .) $ | nindent 4 }}
+  {{- end }}
+  {{- with (include "reposilite.ingress.labels" . | fromYaml) }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  name: {{ include "reposilite.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  ingressClassName: {{ .Values.ingress.className }}
+  rules:
+  {{- range .Values.ingress.hosts }}
+  - host: {{ tpl .host $ | quote }}
+    http:
+      paths:
+      {{- range .paths }}
+      - path: {{ .path }}
+        {{- if .pathType }}
+        pathType: {{ .pathType }}
+        {{- end }}
+        backend:
+          service:
+            name: {{ include "reposilite.fullname" $ }}
+            port:
+              number: {{ $.Values.service.port }}
+      {{- end }}
+  {{- end }}
+  {{- if .Values.ingress.tls }}
+  tls:
+  {{- range .Values.ingress.tls }}
+  - hosts:
+    {{- range .hosts }}
+    - {{ tpl . $ | quote }}
+    {{- end }}
+    secretName: {{ .secretName | quote }}
+  {{- end }}
+{{- end }}
+{{- end }}

templates/networkPolicy.yaml

@@ -0,0 +1,32 @@
+{{- if .Values.networkPolicy.enabled }}
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  {{- with (include "reposilite.networkPolicy.annotations" . | fromYaml) }}
+  annotations:
+    {{- tpl (toYaml .) $ | nindent 4 }}
+  {{- end }}
+  {{- with (include "reposilite.networkPolicy.labels" . | fromYaml) }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  name: {{ include "reposilite.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  podSelector:
+    matchLabels:
+      {{- include "reposilite.pod.selectorLabels" $ | nindent 6 }}
+  {{- with .Values.networkPolicy.policyTypes }}
+  policyTypes:
+  {{- toYaml . | nindent 2 }}
+  {{- end }}
+  {{- with .Values.networkPolicy.egress }}
+  egress:
+  {{- toYaml . | nindent 2 }}
+  {{- end }}
+  {{- with .Values.networkPolicy.ingress }}
+  ingress:
+  {{- toYaml . | nindent 2 }}
+  {{- end }}
+{{- end }}

templates/persistentVolumeClaim.yaml

@@ -0,0 +1,24 @@
+{{- if and .Values.persistentVolumeClaim.enabled (not .Values.persistentVolumeClaim.existing.enabled) -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  {{- with (include "reposilite.persistentVolumeClaim.annotations" . | fromYaml) }}
+  annotations:
+    {{- tpl (toYaml .) $ | nindent 4 }}
+  {{- end }}
+  {{- with (include "reposilite.persistentVolumeClaim.labels" . | fromYaml) }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  name: {{ include "reposilite.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  accessModes:
+    - {{ .Values.persistentVolumeClaim.new.accessMode | quote }}
+  resources:
+    requests:
+      storage: {{ .Values.persistentVolumeClaim.new.size | quote }}
+  {{- if .Values.persistentVolumeClaim.new.storageClass }}
+  storageClassName: {{ .Values.persistentVolumeClaim.new.storageClass | quote }}
+  {{- end }}
+{{- end -}}

templates/service.yaml

@@ -0,0 +1,57 @@
+{{- if .Values.service.enabled }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  {{- with (include "reposilite.service.annotations" . | fromYaml) }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  {{- with (include "reposilite.service.labels" . | fromYaml) }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  name: {{ include "reposilite.service.name" . }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  {{- if not (empty .Values.service.externalIPs) }}
+  externalIPs:
+  {{- range .Values.service.externalIPs }}
+  - {{ . }}
+  {{- end }}
+  {{- end }}
+  {{- if and (or (eq .Values.service.type "LoadBalancer") (eq .Values.service.type "NodePort") ) .Values.service.externalTrafficPolicy }}
+  externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }}
+  {{- end }}
+  internalTrafficPolicy: {{ required "No internal traffic policy defined!" .Values.service.internalTrafficPolicy }}
+  {{- if .Values.service.ipFamilies }}
+  ipFamilies:
+  {{- range .Values.service.ipFamilies }}
+  - {{ . }}
+  {{- end }}
+  {{- end }}
+  {{- if and (eq .Values.service.type "LoadBalancer") .Values.service.loadBalancerClass }}
+  loadBalancerClass: {{ .Values.service.loadBalancerClass }}
+  {{- end }}
+  {{- if and (eq .Values.service.type "LoadBalancer") .Values.service.loadBalancerIP }}
+  loadBalancerIP: {{ .Values.service.loadBalancerIP }}
+  {{- end }}
+  {{- if eq .Values.service.type "LoadBalancer" }}
+  loadBalancerSourceRanges:
+  {{- range .Values.service.loadBalancerSourceRanges }}
+  - {{ . }}
+  {{- end }}
+  {{- end }}
+  ports:
+  - name: http
+    protocol: TCP
+    port: {{ required "No service port defined!" .Values.service.port }}
+  selector:
+    {{- include "reposilite.pod.selectorLabels" . | nindent 4 }}
+  sessionAffinity: {{ required "No session affinity defined!" .Values.service.sessionAffinity }}
+  {{- with .Values.service.sessionAffinityConfig }}
+  sessionAffinityConfig:
+    {{- toYaml . | nindent 4}}
+  {{- end }}
+  type: {{ required "No service type defined!" .Values.service.type }}
+{{- end }}

templates/serviceAccount.yaml

@@ -0,0 +1,25 @@
+{{- if not .Values.serviceAccount.existing.enabled }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  {{- with (include "reposilite.serviceAccount.annotations" . | fromYaml) }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  {{- with (include "reposilite.serviceAccount.labels" . | fromYaml) }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  name: {{ include "reposilite.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+automountServiceAccountToken: {{ .Values.serviceAccount.new.automountServiceAccountToken }}
+{{- with .Values.serviceAccount.new.imagePullSecrets }}
+imagePullSecrets:
+  {{- toYaml . | nindent 4 }}
+{{- end }}
+{{- with .Values.serviceAccount.new.secrets }}
+secrets:
+  {{- toYaml . | nindent 4 }}
+{{- end }}
+{{- end }}