github: Add chart lint and test action.

Author: alexmv

.github/workflows/helm-test.yaml

@@ -0,0 +1,58 @@
+---
+name: Helm lint and test
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  lint-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Set up Helm
+        uses: azure/setup-helm@v4.2.0
+        with:
+          version: v3.17.0
+
+      - uses: actions/setup-python@v5.3.0
+        with:
+          python-version: "3.x"
+          check-latest: true
+
+      - name: Run helm-docs
+        uses: losisin/helm-docs-github-action@v1
+        with:
+          fail-on-diff: true
+
+      - name: Set up chart-testing
+        uses: helm/chart-testing-action@v2.7.0
+        with:
+          version: 3.14.0
+          yamllint_version: 1.37.1
+          yamale_version: 6.0.0
+
+      - name: Run chart-testing (list-changed)
+        id: list-changed
+        run: |
+          changed=$(ct list-changed --chart-dirs kubernetes/chart --target-branch ${{ github.event.repository.default_branch }})
+          if [[ -n "$changed" ]]; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Run chart-testing (lint)
+        if: steps.list-changed.outputs.changed == 'true'
+        run: ct lint --chart-dirs kubernetes/chart --target-branch ${{ github.event.repository.default_branch }} --lint-conf lintconf.yaml --github-groups
+
+      - name: Create kind cluster
+        if: steps.list-changed.outputs.changed == 'true'
+        uses: helm/kind-action@v1
+
+      - name: Run chart-testing (install)
+        if: steps.list-changed.outputs.changed == 'true'
+        run: ct install --chart-dirs kubernetes/chart --target-branch ${{ github.event.repository.default_branch }} --github-groups

kubernetes/chart/zulip/ci/simple-values.yaml

@@ -0,0 +1,43 @@
+---
+zulip:
+  password: set-secure-password
+  environment:
+    SETTING_ZULIP_ADMINISTRATOR: "admin@example.net"
+    SETTING_EXTERNAL_HOST: zulip.example.net
+    ZULIP_AUTH_BACKENDS: "EmailAuthBackend"
+
+memcached:
+  memcachedPassword: set-secure-password
+  image:
+    registry: docker.io
+    repository: memcached
+    tag: alpine
+
+rabbitmq:
+  auth:
+    password: set-secure-password
+    erlangCookie: set-secure-password
+  image:
+    registry: docker.io
+    repository: rabbitmq
+    tag: 4.1
+
+redis:
+  auth:
+    password: set-secure-password
+  image:
+    registry: docker.io
+    repository: redis
+    tag: alpine
+
+postgresql:
+  auth:
+    # # postgres admin user password
+    postgresqlPassword: set-secure-password
+    # # postgres zulip user password
+    password: set-secure-password
+  primary:
+    containerSecurityContext:
+      runAsUser: 70
+      runAsGroup: 70
+      readOnlyRootFilesystem: false

kubernetes/chart/zulip/templates/_helpers.tpl

@@ -71,7 +71,7 @@ include all env variables for Zulip pods
 - name: DB_HOST_PORT
   value: "{{ template "postgresql.v1.service.port" .Subcharts.postgresql }}"
 - name: DB_USER
-  value: "postgres"
+  value: "zulip"
 - name: SETTING_MEMCACHED_LOCATION
   value: "{{ template "common.names.fullname" .Subcharts.memcached }}:11211"
 - name: SETTING_RABBITMQ_HOST