Release v0.28.0

.github/workflows/claim-namespace.yml

@@ -1,7 +1,9 @@
 name: Claim Namespace
 on:
-  issues:
-    types: [opened, edited, labeled]
+  # alibi value to not show the workflow as broken
+  workflow_dispatch:
+#   issues:
+#     types: [opened, edited, labeled]
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.issue.number }}
   cancel-in-progress: true
@@ -119,4 +121,4 @@ jobs:
           GH_REPO: ${{ github.repository }}
           NUMBER: ${{ github.event.issue.number }}
           LABELS: granted
-          ASSIGNEE: tfroment
+          ASSIGNEE: tfroment

.gitignore

@@ -3,3 +3,4 @@
 /generated-staging/
 /jsonnet-generated-production/
 /jsonnet-generated-staging/
+/charts/openvsx/charts

Dockerfile

@@ -1,4 +1,4 @@
-ARG SERVER_VERSION=v0.27.0
+ARG SERVER_VERSION=v0.28.0
 
 # Builder image to compile the website
 FROM ubuntu AS builder
@@ -33,7 +33,6 @@ ARG SERVER_VERSION
 COPY --from=builder --chown=openvsx:openvsx /workdir/website/static/ BOOT-INF/classes/static/
 COPY --from=builder --chown=openvsx:openvsx /workdir/configuration/application.yml config/
 COPY --from=builder --chown=openvsx:openvsx /workdir/configuration/logback-spring.xml BOOT-INF/classes/
-COPY --from=builder --chown=openvsx:openvsx /workdir/configuration/ehcache.xml BOOT-INF/classes/
 
 # Replace version placeholder with arg value
 RUN sed -i "s/<SERVER_VERSION>/$SERVER_VERSION/g" config/application.yml

charts/openvsx/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: alloy
+  repository: https://grafana.github.io/helm-charts
+  version: 1.1.2
+digest: sha256:66403884b7f293e86e2a61d0d822fd0878a6b4a64e5e88f181b93022bc4f9bcd
+generated: "2025-08-20T12:51:18.346537659+03:00"

charts/openvsx/Chart.yaml

@@ -2,5 +2,9 @@ apiVersion: v2
 name: openvsx
 description: A Helm chart for Kubernetes
 type: application
-version: 0.1.0
+version: 0.2.0
 appVersion: "1.16.0"
+dependencies:
+  - name: alloy
+    version: 1.1.2
+    repository: https://grafana.github.io/helm-charts

charts/openvsx/crds/redis-cluster.yaml

@@ -0,0 +1,61 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: redisclusters.open-vsx.org
+spec:
+  scope: Namespaced
+  group: open-vsx.org
+  names:
+    kind: RedisCluster
+    plural: redisclusters
+    singular: rediscluster
+    shortNames:
+      - rcl
+  versions:
+    - name: v1
+      served: true
+      storage: true
+      schema:
+        openAPIV3Schema:
+          type: object
+          properties:
+            spec:
+              type: object
+              properties:
+                replicas:
+                  type: integer
+                  minimum: 6
+                maxmemory:
+                  type: string
+                image:
+                  type: string
+                imagePullPolicy:
+                  type: string
+                resources:
+                  type: object
+                  properties:
+                    requests:
+                      type: object
+                      properties:
+                        memory:
+                          type: string
+                        cpu:
+                          type: string
+                    limits:
+                      type: object
+                      properties:
+                        memory:
+                          type: string
+                        cpu:
+                          type: string
+                persistence:
+                  type: object
+                  properties:
+                    storageGi:
+                      type: number
+                      format: int32
+                    storageClass:
+                      type: string
+            status:
+              type: object
+              x-kubernetes-preserve-unknown-fields: true

charts/openvsx/templates/deployment.yaml

@@ -77,29 +77,7 @@ spec:
             path: /actuator/health/readiness
             port: http-management
           periodSeconds: 10
-      - name: grafana-agent
-        image: docker.io/grafana/agent:v0.39.1
-        command:
-          - /bin/grafana-agent
-        args:
-          - --config.file=$(CONFIG_FILE_PATH)
-          - --metrics.wal-directory=$(DATA_FILE_PATH)
-          - --config.expand-env=true
-        env:
-        - name: CONFIG_FILE_PATH
-          value: /etc/grafana-agent/agent.yml
-        - name: DATA_FILE_PATH
-          value: /etc/grafana-agent/data
-        - name: ENVNAME
-          value: {{ .Values.environment }}
-        envFrom:
-        - secretRef:
-            name: grafana-cloud-secret-{{ .Values.environment }}
-        volumeMounts:
-        - name: grafana-agent-config-volume
-          mountPath: /etc/grafana-agent
-        - name: grafana-agent-data-volume
-          mountPath: /etc/grafana-agent/data
+          initialDelaySeconds: 30
       initContainers:
       - command:
         - sh
@@ -117,7 +95,7 @@ spec:
           matchLabels:
             app: open-vsx-org
             environment: {{ .Values.environment }}
-        maxSkew: 1
+        maxSkew: 2
         topologyKey: kubernetes.io/hostname
         whenUnsatisfiable: DoNotSchedule
       volumes:
@@ -131,15 +109,6 @@ spec:
           defaultMode: 420
           optional: false
           secretName: elasticsearch-{{ .Values.environment }}-es-http-certs-internal
-      - name: grafana-agent-config-volume
-        configMap:
-          name: grafana-agent-configmap-{{ .Values.environment }}
-          items:
-          - key: agent.yml
-            path: agent.yml
-      - name: grafana-agent-data-volume
-        emptyDir:
-          medium: Memory
       - name: truststore-with-elasticsearch-certs
         emptyDir:
           medium: Memory

charts/openvsx/templates/grafana-alloy.yaml

@@ -0,0 +1,103 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+    app: {{ .Values.name }}
+    environment: {{ .Values.environment }}
+  name: {{ .Values.alloy.alloy.configMap.name }}
+  namespace: {{ .Values.namespace }}
+data:
+  {{ .Values.alloy.alloy.configMap.key }}: |
+    logging {
+      level = "info"
+      format = "logfmt"
+    }
+
+    prometheus.operator.servicemonitors "spring_boot" {
+      namespaces = ["{{ .Values.namespace }}"]
+      selector {
+        match_labels = {
+          app = "{{ .Values.name }}",
+          environment = "{{ .Values.environment }}",
+        }
+      }
+
+      forward_to  = [prometheus.relabel.spring_boot_relabel.receiver]
+    }
+
+    prometheus.relabel "spring_boot_relabel" {
+      rule {
+        source_labels = ["exported_instance"]
+        target_label  = "instance"
+        action        = "replace"
+      }
+
+      rule {
+        regex   = "^(exported_instance|deployment_environment|service_instance_id|service_name)$"
+        action  = "labeldrop"
+      }
+
+      forward_to = [prometheus.remote_write.default.receiver]
+    }
+    {{- $name := .Values.redis.name }}
+    {{- $environment := .Values.environment }}
+    {{- range $index := until (int .Values.redis.replicas) }}
+
+    prometheus.exporter.redis "redis_metrics_{{ $index }}" {
+      redis_addr = "{{ $name }}-{{ $environment }}-{{ $index }}.{{ $name }}-{{ $environment }}-service:6379"
+      redis_user = sys.env("REDIS_METRICS_USERNAME")
+      redis_password = sys.env("REDIS_METRICS_PASSWORD")
+    }
+
+    prometheus.scrape "redis_scrape_{{ $index }}" {
+      targets    = prometheus.exporter.redis.redis_metrics_{{ $index }}.targets
+      scrape_interval = "600s"
+      forward_to = [prometheus.remote_write.default.receiver]
+    }
+
+    {{- end }}
+    prometheus.remote_write "default" {
+      endpoint {
+        name = "hosted-prometheus"
+        url = sys.env("PROMETHEUS_URL")
+
+        basic_auth {
+          username = sys.env("PROMETHEUS_USERNAME")
+          password = sys.env("PROMETHEUS_PASSWORD")
+        }
+      }
+    }
+
+    otelcol.receiver.zipkin "default" {
+      endpoint = "0.0.0.0:9411"
+      output {
+        traces = [otelcol.processor.memory_limiter.default.input]
+      }
+    }
+
+    otelcol.processor.memory_limiter "default" {
+      check_interval = "1s"
+      limit = "400MiB"
+      spike_limit = "80MiB"
+      output {
+        traces = [otelcol.processor.batch.default.input]
+      }
+    }
+
+    otelcol.processor.batch "default" {
+      output {
+        traces = [otelcol.exporter.otlp.tempo.input]
+      }
+    }
+
+    otelcol.auth.basic "tempo_auth" {
+      username = sys.env("TEMPO_USERNAME")
+      password = sys.env("TEMPO_PASSWORD")
+    }
+
+    otelcol.exporter.otlp "tempo" {
+      client {
+        endpoint = sys.env("TEMPO_URL")
+        auth = otelcol.auth.basic.tempo_auth.handler
+      }
+    }

charts/openvsx/templates/redis-cluster-operator/deployment.yaml

@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: {{ .Values.name }}
+    environment: {{ .Values.environment }}
+  name: redis-cluster-operator-{{ .Values.environment }}
+  namespace: {{ .Values.namespace }}
+spec:
+  selector:
+    matchLabels:
+      app: {{ .Values.name }}
+      environment: {{ .Values.environment }}
+      component: redis-cluster-operator
+  template:
+    metadata:
+      labels:
+        app: {{ .Values.name }}
+        environment: {{ .Values.environment }}
+        component: redis-cluster-operator
+    spec:
+      serviceAccountName: {{ .Values.redis.serviceAccountName }}
+      containers:
+      - name: redis-cluster-operator
+        image: "ghcr.io/eclipsefdn/redis-cluster-operator"
+        imagePullPolicy: Always
+        env:
+        - name: NAMESPACE
+          value: {{ .Values.namespace }}
+        - name: REDIS_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: redis-secret-{{ .Values.environment }}
+              key: REDIS_CLI_USERNAME
+        - name: REDISCLI_AUTH
+          valueFrom:
+            secretKeyRef:
+              name: redis-secret-{{ .Values.environment }}
+              key: REDIS_CLI_PASSWORD