feat(deployment): support downloading redirect (#310)

Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>

Author: migmartri

deployment/chainloop/Chart.yaml

@@ -4,7 +4,7 @@ description: Chainloop is an open source software supply chain control plane, a
 
 type: application
 # Bump the patch (not minor, not major) version on each change in the Chart Source code
-version: 1.10.4
+version: 1.10.5
 # Do not update appVersion, this is handled automatically by the release process
 appVersion: v0.15.0
 

deployment/chainloop/templates/_helpers.tpl

@@ -99,24 +99,6 @@ null
 {{- end -}}
 {{- end -}}
 
-{{/*
-Figure out the external URL the controlplane can be reached at
-This endpoint is used for the CLI to know where to go for log in
-NOTE: Load balancer service type is not supported
-*/}}
-{{- define "chainloop.controlplane.external_url" -}}
-{{- $service := .Values.controlplane.service }}
-{{- $ingress := .Values.controlplane.ingress }}
-
-{{- if (and $ingress $ingress.enabled $ingress.hostname) }}
-{{- printf "%s://%s" (ternary "https" "http" $ingress.tls ) $ingress.hostname }}
-{{- else if (and (eq $service.type "NodePort") $service.nodePorts (not (empty $service.nodePorts.http))) }}
-{{- printf "http://localhost:%s" $service.nodePorts.http }}
-{{- else -}}
-null
-{{- end -}}
-{{- end -}}
-
 {{/*
 ##############################################################################
 Controlplane helpers
@@ -268,6 +250,24 @@ Return the Postgresql user
 {{- end -}}
 {{- end -}}
 
+{{/*
+Figure out the external URL the controlplane can be reached at
+This endpoint is used for the CLI to know where to go for log in
+NOTE: Load balancer service type is not supported
+*/}}
+{{- define "chainloop.controlplane.external_url" -}}
+{{- $service := .Values.controlplane.service }}
+{{- $ingress := .Values.controlplane.ingress }}
+
+{{- if (and $ingress $ingress.enabled $ingress.hostname) }}
+{{- printf "%s://%s" (ternary "https" "http" $ingress.tls ) $ingress.hostname }}
+{{- else if (and (eq $service.type "NodePort") $service.nodePorts (not (empty $service.nodePorts.http))) }}
+{{- printf "http://localhost:%s" $service.nodePorts.http }}
+{{- else -}}
+null
+{{- end -}}
+{{- end -}}
+
 {{/*
 ##############################################################################
 CAS Helpers
@@ -316,3 +316,19 @@ Create the name of the service account to use
 {{- default "default" .Values.cas.serviceAccount.name }}
 {{- end }}
 {{- end }}
+
+{{/*
+External URL the CAS can be reached at
+This endpoint is used for the cas to redirect downloads
+NOTE: Load balancer service type is not supported
+*/}}
+{{- define "chainloop.cas.external_url" -}}
+{{- $service := .Values.cas.service }}
+{{- $ingress := .Values.cas.ingress }}
+
+{{- if (and $ingress $ingress.enabled $ingress.hostname) }}
+{{- printf "%s://%s" (ternary "https" "http" $ingress.tls ) $ingress.hostname }}
+{{- else if (and (eq $service.type "NodePort") $service.nodePorts (not (empty $service.nodePorts.http))) }}
+{{- printf "http://localhost:%s" $service.nodePorts.http }}
+{{- end -}}
+{{- end -}}

deployment/chainloop/templates/controlplane/config.configmap.yaml

@@ -17,7 +17,7 @@ data:
     server:
       http:
         addr: 0.0.0.0:8000
-        timeout: 1s
+        timeout: 10s
         external_url: {{ include "chainloop.controlplane.external_url" . }}
       http_metrics:
         addr: 0.0.0.0:5000
@@ -28,4 +28,5 @@ data:
       grpc:
         addr: {{ printf "%s-api:%.0f" (include "chainloop.cas.fullname" .) .Values.cas.serviceAPI.port }}
       insecure: true
+      download_url: {{ include "chainloop.cas.external_url" . }}/download
     plugins_dir: {{ .Values.controlplane.pluginsDir }}