Skip to content

Add Helm chart for coraza-caddy#55

Draft
Copilot wants to merge 4 commits intomainfrom
copilot/add-helm-chart-for-coraza-caddy
Draft

Add Helm chart for coraza-caddy#55
Copilot wants to merge 4 commits intomainfrom
copilot/add-helm-chart-for-coraza-caddy

Conversation

Copy link
Copy Markdown

Copilot AI commented Apr 24, 2026 •
edited
Loading

  • Create charts/coraza-caddy/Chart.yaml
  • Create charts/coraza-caddy/values.yaml
  • Create charts/coraza-caddy/.helmignore
  • Create charts/coraza-caddy/README.md.gotmpl
  • Update charts/coraza-caddy/README.md
  • Create charts/coraza-caddy/templates/_helpers.tpl
  • Create charts/coraza-caddy/templates/configmap.yaml
  • Create charts/coraza-caddy/templates/deployment.yaml
  • Create charts/coraza-caddy/templates/service.yaml
  • Create charts/coraza-caddy/templates/serviceaccount.yaml
  • Create charts/coraza-caddy/templates/hpa.yaml
  • Create charts/coraza-caddy/templates/pdb.yaml
  • Create charts/coraza-caddy/templates/servicemonitor.yaml
  • Create tests/coraza-caddy_test.go
  • Run tests to validate the chart (all 9 tests pass)
  • Add charts/coraza-caddy/ci/ci-values.yaml to fix ct install failure
  • Switch default image to ghcr.io/coreruleset/coraza-crs:caddy-alpine (publicly available image with Coraza+CRS pre-built); update CI values to use the same image with a minimal coraza-caddy Caddyfile

Copilot AI linked an issue Apr 24, 2026 that may be closed by this pull request
Add helm chart for coraza-caddy #54
Open
@fzipi
Add helm chart for coraza-caddy
5122699 
Agent-Logs-Url: https://github.com/corazawaf/charts/sessions/36182748-59b7-4b55-aaa6-fda604e3324d

Co-authored-by: fzipi <3012076+fzipi@users.noreply.github.com>
Copilot AI changed the title [WIP] Add helm chart for coraza-caddy Add Helm chart for coraza-caddy Apr 24, 2026
Copilot AI requested a review from fzipi April 24, 2026 18:30
@fzipi
Copy link
Copy Markdown
Member

fzipi commented May 1, 2026

@copilot fix the lint check. Looks like it is failing to pull the image from ghcr.io?

Copy link
Copy Markdown
Author

Copilot AI commented May 1, 2026

@copilot fix the lint check. Looks like it is failing to pull the image from ghcr.io?

The ct install step was failing because ghcr.io/corazawaf/coraza-caddy:2.5.0 doesn't exist as a container image (coraza-caddy only publishes binaries, not Docker images).

Fixed in commit 1e6f9c7 by adding charts/coraza-caddy/ci/ci-values.yaml which overrides the image to docker.io/caddy:2 with a simple Caddyfile (no coraza directives) for CI install testing. This is the standard chart-testing approach for verifying chart structure when the actual application image isn't available.

Copilot finished work on behalf of fzipi May 1, 2026 03:10
@fzipi
Copy link
Copy Markdown
Member

fzipi commented May 1, 2026

@copilot maybe using https://github.com/coreruleset/coraza-crs-docker/pkgs/container/coraza-crs instead with the caddy alpine version.

Copy link
Copy Markdown
Author

Copilot AI commented May 1, 2026

@copilot maybe using https://github.com/coreruleset/coraza-crs-docker/pkgs/container/coraza-crs instead with the caddy alpine version.

Done in commit dc96d74. The default image is now ghcr.io/coreruleset/coraza-crs:caddy-alpine (the publicly available Caddy Alpine image with Coraza WAF + CRS pre-built). The CI values no longer override the image and instead use a minimal Caddyfile with SecRuleEngine DetectionOnly + respond "OK" so the pod starts cleanly and the health checks pass.

Copilot finished work on behalf of fzipi May 1, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@fzipi fzipi Awaiting requested review from fzipi

At least 1 approving review is required to merge this pull request.

Assignees

@fzipi fzipi

Copilot code review Copilot

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Add helm chart for coraza-caddy

2 participants

@fzipi