Add PR testing action

* add chart icon based on supabase Github avatar
* fix kong deployment malformed if dashboard is disabled
* fix chart YAML lint errors

.github/workflows/lint-test.yaml

+name: Lint and Test Charts
+
+on: pull_request
+
+jobs:
+  lint-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Set up Helm
+        uses: azure/setup-helm@v3
+        with:
+          version: v3.12.1
+
+      - uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+          check-latest: true
+
+      - name: Set up chart-testing
+        uses: helm/chart-testing-action@v2.6.0
+
+      - name: Run chart-testing (list-changed)
+        id: list-changed
+        run: |
+          changed=$(ct list-changed --target-branch ${{ github.event.repository.default_branch }})
+          if [[ -n "$changed" ]]; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Run chart-testing (lint)
+        if: steps.list-changed.outputs.changed == 'true'
+        run: ct lint --validate-maintainers=false --target-branch ${{ github.event.repository.default_branch }}
+
+      - name: Create kind cluster
+        if: steps.list-changed.outputs.changed == 'true'
+        uses: helm/kind-action@v1.8.0
+
+      - name: Run chart-testing (install)
+        if: steps.list-changed.outputs.changed == 'true'
+        run: ct install --target-branch ${{ github.event.repository.default_branch }}

charts/supabase/Chart.yaml

@@ -23,3 +23,6 @@ version: 0.1.0
 # It is recommended to use it with quotes.
 # Not used because too difficult to follow correctly
 # appVersion: "1.16.0"
+
+# A URL to an SVG or PNG image to be used as an icon
+icon: https://avatars.githubusercontent.com/u/54469796?s=280&v=4

charts/supabase/ci/example-values.yaml

+../values.example.yaml
\ No newline at end of file

charts/supabase/templates/kong/deployment.yaml

@@ -51,6 +51,7 @@ spec:
                 secretKeyRef:
                   name: {{ include "supabase.secret.jwt" . }}
                   key: serviceKey
+            {{- if .Values.secret.dashboard }}
             - name: DASHBOARD_USERNAME
               valueFrom:
                 secretKeyRef:
@@ -61,6 +62,7 @@ spec:
                 secretKeyRef:
                   name: {{ include "supabase.secret.dashboard" . }}
                   key: password
+            {{- end }}
           {{- with .Values.kong.livenessProbe }}
           livenessProbe:
             {{- toYaml . | nindent 12 }}

charts/supabase/values.example.yaml

@@ -50,15 +50,7 @@ auth:
   image:
     repo: v2.99.0
   environment:
-    GOTRUE_API_HOST: "0.0.0.0"
-    GOTRUE_API_PORT: "9999"
     GOTRUE_SITE_URL: http://example.com
-    GOTRUE_URI_ALLOW_LIST: "*"
-    GOTRUE_DISABLE_SIGNUP: "false"
-    GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
-    GOTRUE_JWT_ADMIN_ROLES: service_role
-    GOTRUE_JWT_AUD: authenticated
-    GOTRUE_JWT_EXP: "3600"
     GOTRUE_EXTERNAL_EMAIL_ENABLED: "true"
     GOTRUE_MAILER_AUTOCONFIRM: "true"
     GOTRUE_SMTP_ADMIN_EMAIL: "your-mail@example.com"
@@ -92,13 +84,7 @@ storage:
       port: 5000
     initialDelaySeconds: 3
   persistence:
-    enabled: true
-    accessModes:
-      - ReadWriteOnce
-    size: 4Gi
-    storageClassName: standard
-    annotations:
-      helm.sh/resource-policy: "keep"
+    enabled: false
 
 imgproxy:
   image:

charts/supabase/values.yaml

@@ -44,7 +44,8 @@ secret:
 # You can spin up any other Postgres database container if required.
 # If so, make sure to adjust DB_HOST accordingly to point to the right database service.
 db:
-  enabled: false # Disable the database provisioning
+  # Enable database provisioning
+  enabled: true
   image:
     repository: supabase/postgres
     pullPolicy: IfNotPresent
@@ -144,7 +145,8 @@ db:
 
 # Studio Application
 studio:
-  enabled: true # Disable the studio
+  # Enable studio provisioning
+  enabled: true
   image:
     repository: supabase/studio
     pullPolicy: IfNotPresent
@@ -216,7 +218,8 @@ studio:
 
 # Auth Service
 auth:
-  enabled: true # Disable the auth service
+  # Enable auth provisioning
+  enabled: true
   image:
     repository: supabase/gotrue
     pullPolicy: IfNotPresent
@@ -312,7 +315,8 @@ auth:
 
 # Rest Service
 rest:
-  enabled: true # Disable the rest service
+  # Enable postgrest provisioning
+  enabled: true
   image:
     repository: postgrest/postgrest
     pullPolicy: IfNotPresent
@@ -388,7 +392,8 @@ rest:
 
 # Realtime Service
 realtime:
-  enabled: true # Disable the realtime service
+  # Enable realtime provisioning
+  enabled: true
   image:
     repository: supabase/realtime
     pullPolicy: IfNotPresent
@@ -425,7 +430,7 @@ realtime:
     DB_USER: supabase_admin
     DB_PORT: 5432
     DB_SSL: disable  # disable, allow, prefer, require, verify-ca, verify-full
-    DB_AFTER_CONNECT_QUERY: 'SET search_path TO _realtime'
+    DB_AFTER_CONNECT_QUERY: "SET search_path TO _realtime"
     DB_ENC_KEY: supabaserealtime
     PORT: "4000"
     FLY_ALLOC_ID: fly123
@@ -468,7 +473,8 @@ realtime:
 
 # Meta Service
 meta:
-  enabled: true # Disable the meta service
+  # Enable meta provisioning
+  enabled: true
   image:
     repository: supabase/postgres-meta
     pullPolicy: IfNotPresent
@@ -542,7 +548,8 @@ meta:
 
 # Storage Service
 storage:
-  enabled: true # Disable the storage service
+  # Enable storage provisioning
+  enabled: true
   image:
     repository: supabase/storage-api
     pullPolicy: IfNotPresent
@@ -582,7 +589,7 @@ storage:
     DB_DRIVER: postgres
     DB_SSL: disable  # disable, allow, prefer, require, verify-ca, verify-full
     PGOPTIONS: -c search_path=storage,public
-    FILE_SIZE_LIMIT: '52428800'
+    FILE_SIZE_LIMIT: "52428800"
     STORAGE_BACKEND: file
     FILE_STORAGE_BACKEND_PATH: /var/lib/storage
     TENANT_ID: stub
@@ -630,7 +637,8 @@ storage:
 
 # imgproxy
 imgproxy:
-  enabled: true # Disable the imgproxy service
+  # Enable imgproxy provisioning
+  enabled: true
   image:
     repository: darthsim/imgproxy
     pullPolicy: IfNotPresent
@@ -709,7 +717,8 @@ imgproxy:
 
 # Kong
 kong:
-  enabled: true # Disable the kong service
+  # Enable kong provisioning
+  enabled: true
   image:
     repository: kong
     pullPolicy: IfNotPresent
@@ -803,7 +812,8 @@ kong:
 
 # Analytics
 analytics:
-  enabled: true # Disable the analytics service
+  # Enable analytics provisioning
+  enabled: true
   image:
     repository: supabase/logflare
     pullPolicy: IfNotPresent
@@ -889,7 +899,8 @@ analytics:
 
 # Vector
 vector:
-  enabled: true # Disable the vector service
+  # Enable vector provisioning
+  enabled: true
   image:
     repository: timberio/vector
     pullPolicy: IfNotPresent
@@ -955,7 +966,8 @@ vector:
 
 # Functions
 functions:
-  enabled: true # Disable the analytics service
+  # Enable functions provisioning
+  enabled: true
   image:
     repository: supabase/edge-runtime
     pullPolicy: IfNotPresent