update to 2.1.1
This commit is contained in:
Leo Sok
parent
c6fe82af17
commit
c8bdb426ca
@ -1,131 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: backend
|
||||
description: Umbrella chart for all backend k8s applications
|
||||
type: application
|
||||
version: "0.1.0"
|
||||
appVersion: "1.0.0"
|
||||
|
||||
dependencies:
|
||||
- name: admin-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/admin-app-k8s
|
||||
- name: android-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/android-app-k8s
|
||||
- name: auth-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/auth-app-k8s
|
||||
- name: auth-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/auth-event-handler-app-k8s
|
||||
- name: bff-admin-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/bff-admin-app-k8s
|
||||
- name: bff-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/bff-app-k8s
|
||||
- name: bff-vcs-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/bff-vcs-app-k8s
|
||||
- name: big-chat-splitter-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/big-chat-splitter-app-k8s
|
||||
- name: call-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/call-app-k8s
|
||||
- name: call-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/call-event-handler-app-k8s
|
||||
- name: call-realtime-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/call-realtime-app-k8s
|
||||
- name: chat-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/chat-app-k8s
|
||||
- name: chat-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/chat-event-handler-app-k8s
|
||||
- name: deeplink-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/deeplink-app-k8s
|
||||
- name: gem-call-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/gem-call-app-k8s
|
||||
- name: gem-call-events-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/gem-call-events-handler-app-k8s
|
||||
- name: huawei-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/huawei-app-k8s
|
||||
- name: ios-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/ios-app-k8s
|
||||
- name: livekit-webhook-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/livekit-webhook-handler-app-k8s
|
||||
- name: message-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/message-app-k8s
|
||||
- name: message-call-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/message-call-event-handler-app-k8s
|
||||
- name: message-chat-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/message-chat-event-handler-app-k8s
|
||||
- name: message-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/message-event-handler-app-k8s
|
||||
- name: message-link-preview-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/message-link-preview-handler-app-k8s
|
||||
- name: message-user-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/message-user-event-handler-app-k8s
|
||||
- name: notification-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/notification-app-k8s
|
||||
- name: notification-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/notification-event-handler-app-k8s
|
||||
- name: realtime-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/realtime-app-k8s
|
||||
- name: regular-chat-splitter-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/regular-chat-splitter-app-k8s
|
||||
- name: search-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/search-app-k8s
|
||||
- name: search-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/search-event-handler-app-k8s
|
||||
- name: sticker-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/sticker-app-k8s
|
||||
- name: unregister-tokens-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/unregister-tokens-app-k8s
|
||||
- name: upload-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/upload-app-k8s
|
||||
- name: user-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/user-app-k8s
|
||||
- name: voip-splitter-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/voip-splitter-app-k8s
|
||||
- name: web-sender-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/web-sender-app-k8s
|
||||
- name: workspace-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/workspace-app-k8s
|
||||
- name: workspace-event-handler-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/workspace-event-handler-app-k8s
|
||||
- name: devices-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/devices-app-k8s
|
||||
- name: license-app
|
||||
version: "0.1.0"
|
||||
repository: file://charts/license-app-k8s
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: admin-app
|
||||
description: Helm chart for Admin app
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.0.0-SNAPSHOT"
|
||||
@ -1,24 +0,0 @@
|
||||
{{/* Common labels */}}
|
||||
{{- define "admin-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "admin-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name */}}
|
||||
{{- define "admin-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname */}}
|
||||
{{- define "admin-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "admin-app.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "admin-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end }}
|
||||
@ -1,62 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "admin-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "admin-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "admin-app.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "admin-app.selectorLabels" . | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: admin-app
|
||||
ports:
|
||||
- containerPort: 9090
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
env:
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,15 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "admin-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "admin-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
selector:
|
||||
{{- include "admin-app.selectorLabels" . | nindent 4 }}
|
||||
ports:
|
||||
- name: http
|
||||
port: {{ .Values.service.port }}
|
||||
targetPort: {{ .Values.service.targetPort }}
|
||||
protocol: TCP
|
||||
@ -1,10 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 9090
|
||||
targetPort: 9090
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: admin-ui-app
|
||||
description: Helm chart for Admin ui app
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.0.0-SNAPSHOT"
|
||||
@ -1,24 +0,0 @@
|
||||
{{/* Common labels */}}
|
||||
{{- define "admin-ui-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "admin-ui-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name */}}
|
||||
{{- define "admin-ui-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname */}}
|
||||
{{- define "admin-ui-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "admin-ui-app.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "admin-ui-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end }}
|
||||
@ -1,22 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "admin-ui-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "admin-ui-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "admin-ui-app.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "admin-ui-app.selectorLabels" . | nindent 8 }}
|
||||
spec:
|
||||
containers:
|
||||
- name: admin-ui-app
|
||||
ports:
|
||||
- containerPort: 9090
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}admin-panel-cowork:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
@ -1,15 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "admin-ui-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "admin-ui-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
selector:
|
||||
{{- include "admin-ui-app.selectorLabels" . | nindent 4 }}
|
||||
ports:
|
||||
- name: http
|
||||
port: {{ .Values.service.port }}
|
||||
targetPort: {{ .Values.service.targetPort }}
|
||||
protocol: TCP
|
||||
@ -1,11 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: preprod
|
||||
pullPolicy: Always
|
||||
|
||||
service:
|
||||
name: admin-ui-app
|
||||
type: ClusterIP
|
||||
port: 9090
|
||||
targetPort: 80
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: android-app
|
||||
description: Helm chart for Android Sender Application
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.0.0-SNAPSHOT"
|
||||
@ -1,24 +0,0 @@
|
||||
{{/* Common labels */}}
|
||||
{{- define "android-sender-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "android-sender-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name */}}
|
||||
{{- define "android-sender-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname */}}
|
||||
{{- define "android-sender-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "android-sender-app.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "android-sender-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end }}
|
||||
@ -1,64 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "android-sender-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "android-sender-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "android-sender-app.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "android-sender-app.selectorLabels" . | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}android-sender-app:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: android-sender
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}android-sender-app:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
- name: ANDROID_FIREBASE_CONFIG
|
||||
value: {{ .Values.env.android_firebase_config }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,9 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
env:
|
||||
android_firebase_config: "cowork-prod-firebase-adminsdk-l136z-648992e82d.json"
|
||||
secrets:
|
||||
firebaseSecret: android-firebase-config
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,24 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: auth-app
|
||||
description: A Helm chart for Kubernetes
|
||||
|
||||
# A chart can be either an 'application' or a 'library' chart.
|
||||
#
|
||||
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||
# to be deployed.
|
||||
#
|
||||
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||
type: application
|
||||
|
||||
# This is the chart version. This version number should be incremented each time you make changes
|
||||
# to the chart and its templates, including the app version.
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||
version: 0.1.0
|
||||
|
||||
# This is the version number of the application being deployed. This version number should be
|
||||
# incremented each time you make changes to the application. Versions are not expected to
|
||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||
# It is recommended to use it with quotes.
|
||||
appVersion: "1.16.0"
|
||||
@ -1,53 +0,0 @@
|
||||
{{/*
|
||||
Expand the name of the chart.
|
||||
*/}}
|
||||
{{- define "auth-app-k8s.name" -}}
|
||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create a default fully qualified app name.
|
||||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
||||
If release name contains chart name it will be used as a full name.
|
||||
*/}}
|
||||
{{- define "auth-app-k8s.fullname" -}}
|
||||
{{- default .Chart.Name .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create chart name and version as used by the chart label.
|
||||
*/}}
|
||||
{{- define "auth-app-k8s.chart" -}}
|
||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
*/}}
|
||||
{{- define "auth-app-k8s.labels" -}}
|
||||
helm.sh/chart: {{ include "auth-app-k8s.chart" . }}
|
||||
{{ include "auth-app-k8s.selectorLabels" . }}
|
||||
{{- if .Chart.AppVersion }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||
{{- end }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "auth-app-k8s.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "auth-app-k8s.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create the name of the service account to use
|
||||
*/}}
|
||||
{{- define "auth-app-k8s.serviceAccountName" -}}
|
||||
{{- if .Values.serviceAccount.create }}
|
||||
{{- default (include "auth-app-k8s.fullname" .) .Values.serviceAccount.name }}
|
||||
{{- else }}
|
||||
{{- default "default" .Values.serviceAccount.name }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@ -1,88 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "auth-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "auth-app-k8s.labels" . | nindent 4 }}
|
||||
io.kompose.service: auth-app
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "auth-app-k8s.selectorLabels" . | nindent 6 }}
|
||||
io.kompose.service: auth-app
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 8 }}
|
||||
labels:
|
||||
{{- include "auth-app-k8s.selectorLabels" . | nindent 8 }}
|
||||
{{- toYaml .Values.podLabels | nindent 8 }}
|
||||
spec:
|
||||
{{- with .Values.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: {{ include "auth-app-k8s.fullname" . }}-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: auth-app
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: {{ .Values.service.targetPort }}
|
||||
{{- if .Values.service.hostPort }}
|
||||
hostPort: {{ .Values.service.hostPort }}
|
||||
{{- end }}
|
||||
protocol: TCP
|
||||
env:
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
{{- include "global.env.auth" . | nindent 12 }}
|
||||
- name: ADMIN_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.adminPassword.name }}
|
||||
key: {{ .Values.secrets.adminPassword.key }}
|
||||
- name: CLIENT_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.clientSecret.name }}
|
||||
key: {{ .Values.secrets.clientSecret.key }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
resources:
|
||||
{{- toYaml .Values.resources | nindent 12 }}
|
||||
@ -1,15 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "auth-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "auth-app-k8s.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
ports:
|
||||
- port: {{ .Values.service.port }}
|
||||
targetPort: {{ .Values.service.targetPort }}
|
||||
protocol: TCP
|
||||
selector:
|
||||
{{- include "auth-app-k8s.selectorLabels" . | nindent 4 }}
|
||||
io.kompose.service: auth-app
|
||||
@ -1,15 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Pod
|
||||
metadata:
|
||||
name: "{{ include "auth-app-k8s.fullname" . }}-test-connection"
|
||||
labels:
|
||||
{{- include "auth-app-k8s.labels" . | nindent 4 }}
|
||||
annotations:
|
||||
"helm.sh/hook": test
|
||||
spec:
|
||||
containers:
|
||||
- name: wget
|
||||
image: busybox
|
||||
command: ['wget']
|
||||
args: ['{{ include "auth-app-k8s.fullname" . }}:{{ .Values.service.port }}']
|
||||
restartPolicy: Never
|
||||
@ -1,40 +0,0 @@
|
||||
|
||||
fullnameOverride: "auth-app"
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 9090
|
||||
targetPort: 9090
|
||||
hostPort: null
|
||||
|
||||
secrets:
|
||||
adminPassword:
|
||||
name: auth-secrets
|
||||
key: admin-password
|
||||
clientSecret:
|
||||
name: auth-secrets
|
||||
key: client-secret
|
||||
|
||||
resources:
|
||||
limits:
|
||||
memory: 512Mi
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
|
||||
podAnnotations:
|
||||
kompose.cmd: kompose convert -f app/auth-app.yml -o k8s/auth-app-k8s
|
||||
kompose.version: 1.33.0 (HEAD)
|
||||
|
||||
podLabels:
|
||||
io.kompose.network/app-default: "true"
|
||||
io.kompose.service: auth-app
|
||||
|
||||
autoscaling:
|
||||
enabled: false
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: auth-event-handler-app
|
||||
description: Authentication Event Handler
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.0.0-SNAPSHOT"
|
||||
@ -1,19 +0,0 @@
|
||||
{{/* Common Name Definitions */}}
|
||||
{{- define "auth-event-handler-app-k8s.fullname" -}}
|
||||
{{- default .Chart.Name .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Standard labels */}}
|
||||
{{- define "auth-event-handler-app-k8s.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
|
||||
app.kubernetes.io/name: {{ .Chart.Name }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "auth-event-handler-app-k8s.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ .Chart.Name }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end }}
|
||||
@ -1,122 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "auth-event-handler-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "auth-event-handler-app-k8s.labels" . | nindent 4 }}
|
||||
spec:
|
||||
{{- if not .Values.autoscaling.enabled }}
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
{{- end }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "auth-event-handler-app-k8s.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
{{- with .Values.podAnnotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
labels:
|
||||
{{- include "auth-event-handler-app-k8s.labels" . | nindent 8 }}
|
||||
{{- with .Values.podLabels }}
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- if .Values.serviceAccount.create }}
|
||||
serviceAccountName: {{ .Values.serviceAccount.name | default (include "auth-event-handler-app-k8s.serviceAccountName" .) }}
|
||||
{{- end }}
|
||||
{{- with .Values.imagePullSecrets }}
|
||||
imagePullSecrets:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.podSecurityContext | nindent 8 }}
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
{{- with .Values.volumes }}
|
||||
{{ toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
securityContext:
|
||||
{{- toYaml .Values.securityContext | nindent 12 }}
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: {{ .Values.service.port }}
|
||||
protocol: TCP
|
||||
env:
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
{{- include "global.env.auth" . | nindent 12 }}
|
||||
- name: ADMIN_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.adminPassword.name }}
|
||||
key: {{ .Values.secrets.adminPassword.key }}
|
||||
- name: CLIENT_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.clientSecret.name }}
|
||||
key: {{ .Values.secrets.clientSecret.key }}
|
||||
livenessProbe:
|
||||
{{- toYaml .Values.livenessProbe | nindent 12 }}
|
||||
readinessProbe:
|
||||
{{- toYaml .Values.readinessProbe | nindent 12 }}
|
||||
resources:
|
||||
{{- toYaml .Values.resources | nindent 12 }}
|
||||
volumeMounts:
|
||||
{{- with .Values.volumeMounts }}
|
||||
{{- toYaml . | nindent 12 }}
|
||||
{{- end }}
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
{{- with .Values.nodeSelector }}
|
||||
nodeSelector:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.affinity }}
|
||||
affinity:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
{{- with .Values.tolerations }}
|
||||
tolerations:
|
||||
{{- toYaml . | nindent 8 }}
|
||||
{{- end }}
|
||||
@ -1,12 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "auth-event-handler-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "auth-event-handler-app-k8s.labels" . | nindent 4 }}
|
||||
spec:
|
||||
ports:
|
||||
- port: {{ .Values.service.port }}
|
||||
targetPort: {{ .Values.service.targetPort }}
|
||||
selector:
|
||||
{{- include "auth-event-handler-app-k8s.selectorLabels" . | nindent 4 }}
|
||||
@ -1,48 +0,0 @@
|
||||
fullnameOverride: "auth-event-handler-app"
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
replicaCount: 1
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 8094
|
||||
targetPort: 9090
|
||||
|
||||
secrets:
|
||||
kafka:
|
||||
name: kafka-password
|
||||
passwordKey: client-passwords
|
||||
username: admin
|
||||
adminPassword:
|
||||
name: auth-secrets
|
||||
key: admin-password
|
||||
clientSecret:
|
||||
name: auth-secrets
|
||||
key: client-secret
|
||||
|
||||
resources:
|
||||
limits:
|
||||
memory: 512Mi
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
|
||||
podAnnotations:
|
||||
kompose.cmd: kompose convert -f app/auth-event-handler-app.yml -o k8s/auth-event-handler-app-k8s
|
||||
kompose.version: 1.33.0 (HEAD)
|
||||
|
||||
podLabels:
|
||||
io.kompose.network/app-default: "true"
|
||||
io.kompose.service: auth-event-handler-app
|
||||
|
||||
|
||||
podSecurityContext: {}
|
||||
securityContext: {}
|
||||
|
||||
autoscaling:
|
||||
enabled: false
|
||||
|
||||
serviceAccount:
|
||||
create: false
|
||||
name: ""
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: bff-admin-app
|
||||
description: Helm chart for bff-admin-app
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.0.0-SNAPSHOT"
|
||||
@ -1,24 +0,0 @@
|
||||
{{/* Common labels */}}
|
||||
{{- define "bff-admin-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "bff-admin-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name */}}
|
||||
{{- define "bff-admin-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname */}}
|
||||
{{- define "bff-admin-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "bff-admin-app.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "bff-admin-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end }}
|
||||
@ -1,60 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "bff-admin-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "bff-admin-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "bff-admin-app.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "bff-admin-app.selectorLabels" . | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: bff-admin-app
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
env:
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,38 +0,0 @@
|
||||
{{- if .Values.ingress.enabled -}}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ .Values.ingress.name }}
|
||||
namespace: {{ .Release.Namespace | default "default" }}
|
||||
{{- with .Values.ingress.annotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
ingressClassName: {{ .Values.ingress.className }}
|
||||
{{- if .Values.ingress.tls }}
|
||||
tls:
|
||||
{{- range .Values.ingress.tls }}
|
||||
- hosts:
|
||||
{{- range .hosts }}
|
||||
- {{ . | quote }}
|
||||
{{- end }}
|
||||
secretName: {{ .secretName | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
rules:
|
||||
{{- range .Values.ingress.hosts }}
|
||||
- host: {{ .host | quote }}
|
||||
http:
|
||||
paths:
|
||||
{{- range .paths }}
|
||||
- path: {{ .path }}
|
||||
pathType: {{ .pathType }}
|
||||
backend:
|
||||
service:
|
||||
name: {{ $.Values.env.app_name }}
|
||||
port:
|
||||
number: {{ $.Values.service.httpPort }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@ -1,17 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "bff-admin-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "bff-admin-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
selector:
|
||||
{{- include "bff-admin-app.selectorLabels" . | nindent 4 }}
|
||||
ports:
|
||||
{{- range .Values.service.ports }}
|
||||
- name: {{ .name }}
|
||||
port: {{ .port }}
|
||||
targetPort: {{ .targetPort }}
|
||||
protocol: TCP
|
||||
{{- end }}
|
||||
@ -1,37 +0,0 @@
|
||||
replicaCount: 1
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
env:
|
||||
app_name: bff-admin-app
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
httpPort: 8100
|
||||
grpcPort: 8101
|
||||
ports:
|
||||
- name: http
|
||||
port: 8100
|
||||
targetPort: 8080
|
||||
- name: grpc
|
||||
port: 8101
|
||||
targetPort: 9090
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
className: nginx
|
||||
name: bff-admin-ingress
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
|
||||
hosts:
|
||||
- host: adm-p003.cw.ngcloud.ru
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
tls:
|
||||
- hosts:
|
||||
- adm-p003.cw.ngcloud.ru
|
||||
secretName: co-work-secret
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,24 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: bff-app
|
||||
description: A Helm chart for Kubernetes
|
||||
|
||||
# A chart can be either an 'application' or a 'library' chart.
|
||||
#
|
||||
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||
# to be deployed.
|
||||
#
|
||||
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||
type: application
|
||||
|
||||
# This is the chart version. This version number should be incremented each time you make changes
|
||||
# to the chart and its templates, including the app version.
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||
version: 0.1.0
|
||||
|
||||
# This is the version number of the application being deployed. This version number should be
|
||||
# incremented each time you make changes to the application. Versions are not expected to
|
||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||
# It is recommended to use it with quotes.
|
||||
appVersion: "1.16.0"
|
||||
@ -1,19 +0,0 @@
|
||||
{{/* Common Name Definitions */}}
|
||||
{{- define "bff-app-k8s.fullname" -}}
|
||||
{{- default .Chart.Name .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Standard labels */}}
|
||||
{{- define "bff-app-k8s.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
|
||||
app.kubernetes.io/name: {{ .Chart.Name }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "bff-app-k8s.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ .Values.fullnameOverride }}
|
||||
app.kubernetes.io/instance: {{ .Values.fullnameOverride }}
|
||||
{{- end }}
|
||||
@ -1,100 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "bff-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "bff-app-k8s.selectorLabels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "bff-app-k8s.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 8 }}
|
||||
labels:
|
||||
{{- include "bff-app-k8s.selectorLabels" . | nindent 8 }}
|
||||
{{- toYaml .Values.podLabels | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: bff-app
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: {{ .Values.service.targetPort }}
|
||||
{{- if .Values.service.hostPort }}
|
||||
hostPort: {{ .Values.service.hostPort }}
|
||||
{{- end }}
|
||||
protocol: TCP
|
||||
env:
|
||||
- name: GRPC_CLIENT_AUTH_URL
|
||||
value: {{ .Values.env.services.auth | quote }}
|
||||
- name: GRPC_CLIENT_CHAT_URL
|
||||
value: {{ .Values.env.services.chat | quote }}
|
||||
- name: GRPC_CLIENT_CONFIG_URL
|
||||
value: {{ .Values.env.services.user | quote }}
|
||||
- name: GRPC_CLIENT_DEEPLINK_URL
|
||||
value: {{ .Values.env.services.deeplink | quote }}
|
||||
- name: GRPC_CLIENT_GEM_CALL_URL
|
||||
value: {{ .Values.env.services.gemCall | quote }}
|
||||
- name: GRPC_CLIENT_MESSAGE_URL
|
||||
value: {{ .Values.env.services.message | quote }}
|
||||
- name: GRPC_CLIENT_NOTIFICATIONS_URL
|
||||
value: {{ .Values.env.services.notification | quote }}
|
||||
- name: GRPC_CLIENT_REACTION_URL
|
||||
value: {{ .Values.env.services.message | quote }}
|
||||
- name: GRPC_CLIENT_REALTIME_URL
|
||||
value: {{ .Values.env.services.realtime | quote }}
|
||||
- name: GRPC_CLIENT_SEARCH_URL
|
||||
value: {{ .Values.env.services.search | quote }}
|
||||
- name: GRPC_CLIENT_STICKER_URL
|
||||
value: {{ .Values.env.services.sticker | quote }}
|
||||
- name: GRPC_CLIENT_UPLOAD_URL
|
||||
value: {{ .Values.env.services.upload | quote }}
|
||||
- name: GRPC_CLIENT_USER_URL
|
||||
value: {{ .Values.env.services.user | quote }}
|
||||
- name: GRPC_CLIENT_WORKSPACE_URL
|
||||
value: {{ .Values.env.services.workspace | quote }}
|
||||
- name: GRPC_CLIENT_DEVICE_URL
|
||||
value: {{ .Values.env.services.device | quote }}
|
||||
resources:
|
||||
{{- toYaml .Values.resources | nindent 12 }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,28 +0,0 @@
|
||||
{{- if .Values.ingress.enabled -}}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ .Values.ingress.name }}
|
||||
namespace: {{ .Release.Namespace | default "default" }}
|
||||
{{- with .Values.ingress.annotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
ingressClassName: {{ .Values.ingress.className }}
|
||||
tls:
|
||||
- hosts:
|
||||
- {{ .Values.ingress.host | quote }}
|
||||
secretName: {{ .Values.ingress.tlsSecret | quote }}
|
||||
rules:
|
||||
- host: {{ .Values.ingress.host | quote }}
|
||||
http:
|
||||
paths:
|
||||
- path: {{ .Values.ingress.path }}
|
||||
pathType: {{ .Values.ingress.pathType }}
|
||||
backend:
|
||||
service:
|
||||
name: {{ .Values.service.name }}
|
||||
port:
|
||||
number: {{ .Values.service.port }}
|
||||
{{- end }}
|
||||
@ -1,14 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "bff-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "bff-app-k8s.selectorLabels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
ports:
|
||||
- port: {{ .Values.service.port }}
|
||||
targetPort: {{ .Values.service.targetPort }}
|
||||
protocol: TCP
|
||||
selector:
|
||||
{{- include "bff-app-k8s.selectorLabels" . | nindent 4 }}
|
||||
@ -1,58 +0,0 @@
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 8081
|
||||
targetPort: 8080
|
||||
nodePort: 31754
|
||||
name: bff-app # Added service name
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
className: nginx
|
||||
name: bff-app-ingress
|
||||
host: api-p003.cw.ngcloud.ru
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
|
||||
path: /
|
||||
pathType: Prefix
|
||||
tlsSecret: co-work-secret
|
||||
|
||||
env:
|
||||
services:
|
||||
auth: http://auth-app:9090
|
||||
chat: http://chat-app:9090
|
||||
user: http://user-app:9090
|
||||
deeplink: http://deeplink-app:9090
|
||||
gemCall: http://gem-call-app:9090
|
||||
message: http://message-app:9090
|
||||
notification: http://notification-app:9090
|
||||
realtime: http://realtime-app:9090
|
||||
search: http://search-app:9090
|
||||
sticker: http://sticker-app:9090
|
||||
upload: http://upload-app:9090
|
||||
workspace: http://workspace-app:9090
|
||||
device: http://devices-app:9090
|
||||
|
||||
resources:
|
||||
limits:
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 512Mi
|
||||
|
||||
podAnnotations:
|
||||
kompose.cmd: kompose convert -f app/bff-app.yml -o k8s/bff-app-k8s
|
||||
kompose.version: 1.33.0 (HEAD)
|
||||
|
||||
podLabels:
|
||||
io.kompose.network/app-default: "true"
|
||||
io.kompose.service: bff-app
|
||||
|
||||
fullnameOverride: "bff-app"
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: bff-vcs-app
|
||||
description: Helm chart for bff-vcs-app
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.0.0-SNAPSHOT"
|
||||
@ -1,24 +0,0 @@
|
||||
{{/* Common labels */}}
|
||||
{{- define "bff-vcs-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "bff-vcs-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Name */}}
|
||||
{{- define "bff-vcs-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Fullname */}}
|
||||
{{- define "bff-vcs-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "bff-vcs-app.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "bff-vcs-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end }}
|
||||
@ -1,63 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "bff-vcs-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "bff-vcs-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "bff-vcs-app.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
{{- include "bff-vcs-app.selectorLabels" . | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: bff-vcs-app
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
env:
|
||||
- name: GRPC_CLIENT_CALL_URL
|
||||
value: "{{ .Values.env.grpc_client_call_url }}"
|
||||
- name: GRPC_CLIENT_CALL_REALTIME_URL
|
||||
value: "{{ .Values.env.grpc_client_call_realtime_url }}"
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,28 +0,0 @@
|
||||
{{- if .Values.ingress.enabled }}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ include "bff-vcs-app.fullname" . }}-ingress
|
||||
namespace: {{ .Release.Namespace }}
|
||||
annotations:
|
||||
{{- range $key, $value := .Values.ingress.annotations }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
spec:
|
||||
ingressClassName: {{ .Values.ingress.ingressClassName }}
|
||||
tls:
|
||||
- hosts:
|
||||
- {{ .Values.ingress.host }}
|
||||
secretName: {{ .Values.ingress.tlsSecretName }}
|
||||
rules:
|
||||
- host: {{ .Values.ingress.host }}
|
||||
http:
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
backend:
|
||||
service:
|
||||
name: {{ include "bff-vcs-app.fullname" . }}
|
||||
port:
|
||||
number: {{ .Values.service.port }}
|
||||
{{- end }}
|
||||
@ -1,16 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "bff-vcs-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "bff-vcs-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
selector:
|
||||
{{- include "bff-vcs-app.selectorLabels" . | nindent 4 }}
|
||||
ports:
|
||||
- name: http
|
||||
port: {{ .Values.service.port }}
|
||||
targetPort: {{ .Values.service.targetPort }}
|
||||
protocol: TCP
|
||||
|
||||
@ -1,24 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
env:
|
||||
grpc_client_call_url: http://call-realtime-app:9090
|
||||
grpc_client_call_realtime_url: http://call-realtime-app:9090
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 8079
|
||||
targetPort: 8080
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: nginx
|
||||
host: vcs-p003.cw.ngcloud.ru
|
||||
tlsSecretName: co-work-secret
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,24 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: big-chat-splitter-app
|
||||
description: A Helm chart for Kubernetes
|
||||
|
||||
# A chart can be either an 'application' or a 'library' chart.
|
||||
#
|
||||
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||
# to be deployed.
|
||||
#
|
||||
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||
type: application
|
||||
|
||||
# This is the chart version. This version number should be incremented each time you make changes
|
||||
# to the chart and its templates, including the app version.
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||
version: 0.1.0
|
||||
|
||||
# This is the version number of the application being deployed. This version number should be
|
||||
# incremented each time you make changes to the application. Versions are not expected to
|
||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||
# It is recommended to use it with quotes.
|
||||
appVersion: "1.16.0"
|
||||
@ -1,18 +0,0 @@
|
||||
{{/* Common Name Definitions */}}
|
||||
{{- define "big-chat-splitter-app-k8s.fullname" -}}
|
||||
{{- default .Chart.Name .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Standard labels */}}
|
||||
{{- define "big-chat-splitter-app-k8s.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
|
||||
app.kubernetes.io/name: {{ .Chart.Name }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "big-chat-splitter-app-k8s.selectorLabels" -}}
|
||||
io.kompose.service: big-chat-splitter-app
|
||||
{{- end }}
|
||||
@ -1,70 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "big-chat-splitter-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "big-chat-splitter-app-k8s.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "big-chat-splitter-app-k8s.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 8 }}
|
||||
labels:
|
||||
{{- include "big-chat-splitter-app-k8s.selectorLabels" . | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: big-chat-splitter-app
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
- name: CHAT_SERVICE_HOST
|
||||
value: {{ .Values.env.services.chat.host | quote }}
|
||||
- name: CHAT_SERVICE_PORT
|
||||
value: {{ .Values.env.services.chat.port | quote }}
|
||||
- name: USER_SERVICE_HOST
|
||||
value: {{ .Values.env.services.user.host | quote }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,30 +0,0 @@
|
||||
fullnameOverride: "big-chat-splitter-app"
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
replicaCount: 1
|
||||
env:
|
||||
services:
|
||||
chat:
|
||||
host: chat-app
|
||||
port: 9090
|
||||
user:
|
||||
host: user-app
|
||||
port: 9090
|
||||
|
||||
resources:
|
||||
limits:
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
|
||||
podAnnotations:
|
||||
kompose.cmd: kompose convert -f app/big-chat-splitter-app.yml -o k8s/big-chat-splitter-app-k8s
|
||||
kompose.version: 1.33.0 (HEAD)
|
||||
|
||||
podLabels:
|
||||
io.kompose.network/app-default: "true"
|
||||
io.kompose.service: big-chat-splitter-app
|
||||
|
||||
fullnameOverride: "big-chat-splitter-app"
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,24 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: call-app
|
||||
description: A Helm chart for Kubernetes
|
||||
|
||||
# A chart can be either an 'application' or a 'library' chart.
|
||||
#
|
||||
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||
# to be deployed.
|
||||
#
|
||||
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||
type: application
|
||||
|
||||
# This is the chart version. This version number should be incremented each time you make changes
|
||||
# to the chart and its templates, including the app version.
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||
version: 0.1.0
|
||||
|
||||
# This is the version number of the application being deployed. This version number should be
|
||||
# incremented each time you make changes to the application. Versions are not expected to
|
||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||
# It is recommended to use it with quotes.
|
||||
appVersion: "1.16.0"
|
||||
@ -1,18 +0,0 @@
|
||||
{{/* Common Name Definitions */}}
|
||||
{{- define "call-app-k8s.fullname" -}}
|
||||
{{- default .Chart.Name .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Standard labels */}}
|
||||
{{- define "call-app-k8s.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
|
||||
app.kubernetes.io/name: {{ .Chart.Name }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
|
||||
{{/* Selector labels */}}
|
||||
{{- define "call-app-k8s.selectorLabels" -}}
|
||||
io.kompose.service: call-app
|
||||
{{- end }}
|
||||
@ -1,92 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "call-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "call-app-k8s.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "call-app-k8s.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 8 }}
|
||||
labels:
|
||||
{{- include "call-app-k8s.selectorLabels" . | nindent 8 }}
|
||||
{{- toYaml .Values.podLabels | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: call-app
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: 5005
|
||||
protocol: TCP
|
||||
- containerPort: 9090
|
||||
protocol: TCP
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
{{- include "global.env.call" . | nindent 12 }}
|
||||
- name: LIVEKIT_API_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.livekit.name }}
|
||||
key: {{ .Values.secrets.livekit.apiKeyKey }}
|
||||
- name: LIVEKIT_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.livekit.name }}
|
||||
key: {{ .Values.secrets.livekit.secretKey }}
|
||||
- name: RECORDING_ACCESS_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.recording.name }}
|
||||
key: {{ .Values.secrets.recording.accessKeyKey }}
|
||||
- name: RECORDING_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.recording.name }}
|
||||
key: {{ .Values.secrets.recording.secretKeyKey }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,17 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "call-app-k8s.fullname" . }}
|
||||
labels:
|
||||
{{- include "call-app-k8s.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
ports:
|
||||
{{- range .Values.service.ports }}
|
||||
- name: {{ .name }}
|
||||
port: {{ .port }}
|
||||
targetPort: {{ .targetPort }}
|
||||
protocol: TCP
|
||||
{{- end }}
|
||||
selector:
|
||||
{{- include "call-app-k8s.selectorLabels" . | nindent 4 }}
|
||||
@ -1,35 +0,0 @@
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: main
|
||||
port: 5005
|
||||
targetPort: 5005
|
||||
- name: metrics
|
||||
port: 9090
|
||||
targetPort: 9090
|
||||
|
||||
secrets:
|
||||
livekit:
|
||||
name: livekit-secret
|
||||
apiKeyKey: api-key
|
||||
secretKey: secret
|
||||
recording:
|
||||
name: recording-secret
|
||||
accessKeyKey: access-key
|
||||
secretKeyKey: secret-key
|
||||
|
||||
podAnnotations:
|
||||
kompose.cmd: kompose convert -f app/call-app.yml -o k8s/call-app-k8s
|
||||
kompose.version: 1.33.0 (HEAD)
|
||||
|
||||
podLabels:
|
||||
io.kompose.network/app-default: "true"
|
||||
io.kompose.service: call-app
|
||||
|
||||
fullnameOverride: "call-app"
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: call-event-handler-app
|
||||
description: Call Event Handler Application
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.0.0-SNAPSHOT"
|
||||
@ -1,46 +0,0 @@
|
||||
{{/* vim: set filetype=mustache: */}}
|
||||
{{/*
|
||||
Expand the name of the chart.
|
||||
*/}}
|
||||
{{- define "call-event-handler-app.name" -}}
|
||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create a default fully qualified app name.
|
||||
*/}}
|
||||
{{- define "call-event-handler-app.fullname" -}}
|
||||
{{- if .Values.fullnameOverride -}}
|
||||
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- else -}}
|
||||
{{- $name := default .Chart.Name .Values.nameOverride -}}
|
||||
{{- printf "%s" $name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create chart name and version as used by the chart label.
|
||||
*/}}
|
||||
{{- define "call-event-handler-app.chart" -}}
|
||||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
*/}}
|
||||
{{- define "call-event-handler-app.labels" -}}
|
||||
helm.sh/chart: {{ include "call-event-handler-app.chart" . }}
|
||||
{{ include "call-event-handler-app.selectorLabels" . }}
|
||||
{{- if .Chart.AppVersion }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||
{{- end }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "call-event-handler-app.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "call-event-handler-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end -}}
|
||||
@ -1,84 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "call-event-handler-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "call-event-handler-app.labels" . | nindent 4 }}
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "call-event-handler-app.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 8 }}
|
||||
labels:
|
||||
{{- include "call-event-handler-app.selectorLabels" . | nindent 8 }}
|
||||
{{- toYaml .Values.podLabels | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: 5005
|
||||
protocol: TCP
|
||||
- containerPort: 9090
|
||||
protocol: TCP
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
{{- include "global.env.callevent" . | nindent 12 }}
|
||||
- name: LIVEKIT_API_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.livekit.name }}
|
||||
key: {{ .Values.secrets.livekit.apiKeyKey }}
|
||||
- name: LIVEKIT_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.livekit.name }}
|
||||
key: {{ .Values.secrets.livekit.secretKey }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,17 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "call-event-handler-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "call-event-handler-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
ports:
|
||||
{{- range .Values.service.ports }}
|
||||
- name: {{ .name }}
|
||||
port: {{ .port }}
|
||||
targetPort: {{ .targetPort }}
|
||||
protocol: TCP
|
||||
{{- end }}
|
||||
selector:
|
||||
{{- include "call-event-handler-app.selectorLabels" . | nindent 4 }}
|
||||
@ -1,35 +0,0 @@
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
replicaCount: 1
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: main
|
||||
port: 5005
|
||||
targetPort: 5005
|
||||
- name: metrics
|
||||
port: 9090
|
||||
targetPort: 9090
|
||||
|
||||
env:
|
||||
|
||||
secrets:
|
||||
livekit:
|
||||
name: livekit-secret
|
||||
apiKeyKey: api-key
|
||||
secretKey: secret
|
||||
|
||||
podAnnotations:
|
||||
kompose.cmd: kompose convert -f app/call-event-handler-app.yml -o k8s/call-event-handler-app-k8s
|
||||
kompose.version: 1.33.0 (HEAD)
|
||||
|
||||
podLabels:
|
||||
io.kompose.network/app-default: "true"
|
||||
io.kompose.service: call-event-handler-app
|
||||
|
||||
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,24 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: call-realtime-app
|
||||
description: A Helm chart for Kubernetes
|
||||
|
||||
# A chart can be either an 'application' or a 'library' chart.
|
||||
#
|
||||
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||
# to be deployed.
|
||||
#
|
||||
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||
type: application
|
||||
|
||||
# This is the chart version. This version number should be incremented each time you make changes
|
||||
# to the chart and its templates, including the app version.
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||
version: 0.1.0
|
||||
|
||||
# This is the version number of the application being deployed. This version number should be
|
||||
# incremented each time you make changes to the application. Versions are not expected to
|
||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||
# It is recommended to use it with quotes.
|
||||
appVersion: "1.16.0"
|
||||
@ -1,39 +0,0 @@
|
||||
{{/* vim: set filetype=mustache: */}}
|
||||
{{/*
|
||||
Expand the name of the chart.
|
||||
*/}}
|
||||
{{- define "call-realtime-app.name" -}}
|
||||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Create a default fully qualified app name.
|
||||
*/}}
|
||||
{{- define "call-realtime-app.fullname" -}}
|
||||
{{- if .Values.fullnameOverride -}}
|
||||
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
|
||||
{{- else -}}
|
||||
{{- $name := default .Chart.Name .Values.nameOverride -}}
|
||||
{{- printf "%s" $name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
*/}}
|
||||
{{- define "call-realtime-app.labels" -}}
|
||||
helm.sh/chart: {{ include "call-realtime-app.name" . }}
|
||||
{{ include "call-realtime-app.selectorLabels" . }}
|
||||
{{- if .Chart.AppVersion }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
|
||||
{{- end }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Selector labels
|
||||
*/}}
|
||||
{{- define "call-realtime-app.selectorLabels" -}}
|
||||
app.kubernetes.io/name: {{ include "call-realtime-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
{{- end -}}
|
||||
@ -1,94 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "call-realtime-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "call-realtime-app.labels" . | nindent 4 }}
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
{{- include "call-realtime-app.selectorLabels" . | nindent 6 }}
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
{{- toYaml .Values.podAnnotations | nindent 8 }}
|
||||
labels:
|
||||
{{- include "call-realtime-app.selectorLabels" . | nindent 8 }}
|
||||
{{- toYaml .Values.podLabels | nindent 8 }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: 5005
|
||||
protocol: TCP
|
||||
- containerPort: 9090
|
||||
protocol: TCP
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
{{- include "global.env.callevent" . | nindent 12 }}
|
||||
- name: LIVEKIT_API_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.livekit.name }}
|
||||
key: {{ .Values.secrets.livekit.apiKeyKey }}
|
||||
- name: LIVEKIT_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.livekit.name }}
|
||||
key: {{ .Values.secrets.livekit.secretKey }}
|
||||
- name: RECORDING_ACCESS_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.recording.name }}
|
||||
key: {{ .Values.secrets.recording.accessKeyKey }}
|
||||
- name: RECORDING_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.recording.name }}
|
||||
key: {{ .Values.secrets.recording.secretKey }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
@ -1,17 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "call-realtime-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "call-realtime-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
type: {{ .Values.service.type }}
|
||||
ports:
|
||||
{{- range .Values.service.ports }}
|
||||
- name: {{ .name }}
|
||||
port: {{ .port }}
|
||||
targetPort: {{ .targetPort }}
|
||||
protocol: TCP
|
||||
{{- end }}
|
||||
selector:
|
||||
{{- include "call-realtime-app.selectorLabels" . | nindent 4 }}
|
||||
@ -1,45 +0,0 @@
|
||||
# Image Configuration
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
# Replica Configuration
|
||||
replicaCount: 1
|
||||
|
||||
# Service Configuration
|
||||
service:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
- name: main
|
||||
port: 5096
|
||||
targetPort: 5005
|
||||
- name: metrics
|
||||
port: 9090
|
||||
targetPort: 9090
|
||||
|
||||
# Environment Configuration
|
||||
|
||||
|
||||
# Secret References
|
||||
secrets:
|
||||
livekit:
|
||||
name: livekit-secret
|
||||
apiKeyKey: api-key
|
||||
secretKey: secret
|
||||
recording:
|
||||
name: recording-secret
|
||||
accessKeyKey: access-key
|
||||
secretKey: secret-key
|
||||
|
||||
# Kompose Metadata
|
||||
podAnnotations:
|
||||
kompose.cmd: kompose convert -f app/call-realtime-app.yml -o k8s/call-realtime-app-k8s
|
||||
kompose.version: 1.33.0 (HEAD)
|
||||
|
||||
podLabels:
|
||||
io.kompose.network/app-default: "true"
|
||||
io.kompose.service: call-realtime-app
|
||||
|
||||
# Chart Metadata
|
||||
nameOverride: ""
|
||||
fullnameOverride: call-realtime-app
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,24 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: chat-app
|
||||
description: A Helm chart for Kubernetes
|
||||
|
||||
# A chart can be either an 'application' or a 'library' chart.
|
||||
#
|
||||
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||
# to be deployed.
|
||||
#
|
||||
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||
type: application
|
||||
|
||||
# This is the chart version. This version number should be incremented each time you make changes
|
||||
# to the chart and its templates, including the app version.
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||
version: 0.1.0
|
||||
|
||||
# This is the version number of the application being deployed. This version number should be
|
||||
# incremented each time you make changes to the application. Versions are not expected to
|
||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||
# It is recommended to use it with quotes.
|
||||
appVersion: "1.16.0"
|
||||
@ -1,27 +0,0 @@
|
||||
{{/*
|
||||
Return the name of the chart
|
||||
*/}}
|
||||
{{- define "chat-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create a default fully qualified app name.
|
||||
*/}}
|
||||
{{- define "chat-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
*/}}
|
||||
{{- define "chat-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "chat-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
{{- define "chat-app.quote" -}}
|
||||
{{- . | quote }}
|
||||
{{- end }}
|
||||
@ -1,109 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "chat-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "chat-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
app: {{ include "chat-app.name" . }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: {{ include "chat-app.name" . }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: 9090
|
||||
hostPort: 8085
|
||||
- containerPort: 5005
|
||||
hostPort: 5085
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
- name: DEEPLINK_HOST
|
||||
value: {{ .Values.env.DEEPLINK_HOST }}
|
||||
- name: DEEPLINK_PORT
|
||||
value: {{ include "chat-app.quote" .Values.env.DEEPLINK_PORT }}
|
||||
- name: GEM_CALL_HOST
|
||||
value: {{ .Values.env.GEM_CALL_HOST }}
|
||||
- name: GEM_CALL_PORT
|
||||
value: {{ include "chat-app.quote" .Values.env.GEM_CALL_PORT }}
|
||||
- name: MESSAGE_HOST
|
||||
value: {{ .Values.env.MESSAGE_HOST }}
|
||||
- name: MESSAGE_PORT
|
||||
value: {{ .Values.env.MESSAGE_PORT | quote }}
|
||||
- name: SEARCH_HOST
|
||||
value: {{ .Values.env.SEARCH_HOST }}
|
||||
- name: SEARCH_PORT
|
||||
value: {{ include "chat-app.quote" .Values.env.SEARCH_PORT }}
|
||||
- name: USER_HOST
|
||||
value: {{ .Values.env.USER_HOST }}
|
||||
- name: USER_PORT
|
||||
value: {{ include "chat-app.quote" .Values.env.USER_PORT }}
|
||||
- name: LIVEKIT_API_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: livekit-secret
|
||||
key: api-key
|
||||
- name: LIVEKIT_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: livekit-secret
|
||||
key: secret
|
||||
- name: RECORDING_ACCESS_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: recording-secret
|
||||
key: access-key
|
||||
- name: RECORDING_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: recording-secret
|
||||
key: secret-key
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
restartPolicy: Always
|
||||
@ -1,16 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "chat-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "chat-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
selector:
|
||||
app: {{ include "chat-app.name" . }}
|
||||
ports:
|
||||
- name: http
|
||||
port: 9090
|
||||
targetPort: 9090
|
||||
- name: debug
|
||||
port: 5085
|
||||
targetPort: 5005
|
||||
@ -1,17 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
env:
|
||||
DEEPLINK_HOST: deeplink-app
|
||||
DEEPLINK_PORT: "9090"
|
||||
GEM_CALL_HOST: gem-call-app
|
||||
GEM_CALL_PORT: "9090"
|
||||
MESSAGE_HOST: message-app
|
||||
MESSAGE_PORT: "9090"
|
||||
SEARCH_HOST: search-app
|
||||
SEARCH_PORT: "9090"
|
||||
USER_HOST: user-app
|
||||
USER_PORT: "9090"
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: chat-event-handler-app
|
||||
description: A Helm chart for Kubernetes
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.16.0"
|
||||
@ -1,27 +0,0 @@
|
||||
{{/*
|
||||
Return the name of the chart
|
||||
*/}}
|
||||
{{- define "chat-event-handler-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create a default fully qualified app name.
|
||||
*/}}
|
||||
{{- define "chat-event-handler-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
*/}}
|
||||
{{- define "chat-event-handler-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "chat-event-handler-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
{{- define "chat-event-handler-app.quote" -}}
|
||||
{{- . | quote }}
|
||||
{{- end }}
|
||||
@ -1,87 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "chat-event-handler-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "chat-event-handler-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
app: {{ include "chat-event-handler-app.name" . }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: {{ include "chat-event-handler-app.name" . }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: 5005
|
||||
hostPort: 5086
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
- name: DEEPLINK_HOST
|
||||
value: {{ .Values.env.DEEPLINK_HOST }}
|
||||
- name: DEEPLINK_PORT
|
||||
value: {{ include "chat-event-handler-app.quote" .Values.env.DEEPLINK_PORT }}
|
||||
- name: GEM_CALL_HOST
|
||||
value: {{ .Values.env.GEM_CALL_HOST }}
|
||||
- name: GEM_CALL_PORT
|
||||
value: {{ include "chat-event-handler-app.quote" .Values.env.GEM_CALL_PORT }}
|
||||
- name: MESSAGE_HOST
|
||||
value: {{ .Values.env.MESSAGE_HOST }}
|
||||
- name: MESSAGE_PORT
|
||||
value: {{ .Values.env.MESSAGE_PORT | quote }}
|
||||
- name: SEARCH_HOST
|
||||
value: {{ .Values.env.SEARCH_HOST }}
|
||||
- name: SEARCH_PORT
|
||||
value: {{ include "chat-event-handler-app.quote" .Values.env.SEARCH_PORT }}
|
||||
- name: USER_HOST
|
||||
value: {{ .Values.env.USER_HOST }}
|
||||
- name: USER_PORT
|
||||
value: {{ include "chat-event-handler-app.quote" .Values.env.USER_PORT }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
restartPolicy: Always
|
||||
@ -1,13 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "chat-event-handler-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "chat-event-handler-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
selector:
|
||||
app: {{ include "chat-event-handler-app.name" . }}
|
||||
ports:
|
||||
- name: debug
|
||||
port: 5086
|
||||
targetPort: 5005
|
||||
@ -1,17 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
env:
|
||||
MESSAGE_HOST: message-app
|
||||
MESSAGE_PORT: "9090"
|
||||
USER_HOST: user-app
|
||||
USER_PORT: "9090"
|
||||
SEARCH_HOST: search-app
|
||||
SEARCH_PORT: "9090"
|
||||
GEM_CALL_HOST: gem-call-app
|
||||
GEM_CALL_PORT: "9090"
|
||||
DEEPLINK_HOST: deeplink-app
|
||||
DEEPLINK_PORT: "9090"
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: deeplink-app
|
||||
description: A Helm chart for Kubernetes
|
||||
type: application
|
||||
version: 0.1.0
|
||||
appVersion: "1.16.0"
|
||||
@ -1,17 +0,0 @@
|
||||
{{/* Chart name */}}
|
||||
{{- define "deeplink-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{- define "deeplink-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/* Common labels */}}
|
||||
{{- define "deeplink-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "deeplink-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
@ -1,101 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "deeplink-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "deeplink-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
app: {{ include "deeplink-app.name" . }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: {{ include "deeplink-app.name" . }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: {{ include "deeplink-app.name" . }}
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}{{ .Chart.Name }}:{{ .Values.image.tag }}"
|
||||
ports:
|
||||
- containerPort: {{ .Values.container.port }}
|
||||
protocol: TCP
|
||||
env:
|
||||
{{- include "global.env.cassandra" . | nindent 12 }}
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.redis" . | nindent 12 }}
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
- name: BRANCHIO_ACCESS
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.branchio }}
|
||||
key: branchio-access
|
||||
- name: BRANCHIO_APPID
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.branchio }}
|
||||
key: branchio-appid
|
||||
- name: BRANCHIO_DEFAULT_URL
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.branchio }}
|
||||
key: branchio-default-url
|
||||
- name: BRANCHIO_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.branchio }}
|
||||
key: branchio-key
|
||||
- name: BRANCHIO_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.branchio }}
|
||||
key: branchio-secret
|
||||
- name: BRANCHIO_URL
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.branchio }}
|
||||
key: branchio-url
|
||||
- name: DEEPLINK_WEBDOMAIN
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ .Values.secrets.branchio }}
|
||||
key: deeplink-web-domain
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
restartPolicy: Always
|
||||
@ -1,13 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "deeplink-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "deeplink-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
selector:
|
||||
app: {{ include "deeplink-app.name" . }}
|
||||
ports:
|
||||
- name: http
|
||||
port: {{ .Values.service.port }}
|
||||
targetPort: {{ .Values.container.port }}
|
||||
@ -1,14 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
service:
|
||||
port: 9090
|
||||
|
||||
container:
|
||||
port: 9090
|
||||
|
||||
secrets:
|
||||
branchio: deeplink-secret
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@ -1,24 +0,0 @@
|
||||
apiVersion: v2
|
||||
name: devices-app
|
||||
description: A Helm chart for Kubernetes
|
||||
|
||||
# A chart can be either an 'application' or a 'library' chart.
|
||||
#
|
||||
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||
# to be deployed.
|
||||
#
|
||||
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||
type: application
|
||||
|
||||
# This is the chart version. This version number should be incremented each time you make changes
|
||||
# to the chart and its templates, including the app version.
|
||||
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||
version: 0.1.0
|
||||
|
||||
# This is the version number of the application being deployed. This version number should be
|
||||
# incremented each time you make changes to the application. Versions are not expected to
|
||||
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||
# It is recommended to use it with quotes.
|
||||
appVersion: "1.16.0"
|
||||
@ -1,27 +0,0 @@
|
||||
{{/*
|
||||
Return the name of the chart
|
||||
*/}}
|
||||
{{- define "devices-app.name" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Create a default fully qualified app name.
|
||||
*/}}
|
||||
{{- define "devices-app.fullname" -}}
|
||||
{{- .Chart.Name | trunc 63 | trimSuffix "-" -}}
|
||||
{{- end }}
|
||||
|
||||
{{/*
|
||||
Common labels
|
||||
*/}}
|
||||
{{- define "devices-app.labels" -}}
|
||||
helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
|
||||
app.kubernetes.io/name: {{ include "devices-app.name" . }}
|
||||
app.kubernetes.io/instance: {{ .Chart.Name }}
|
||||
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
{{- end }}
|
||||
{{- define "devices-app.quote" -}}
|
||||
{{- . | quote }}
|
||||
{{- end }}
|
||||
@ -1,77 +0,0 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: {{ include "devices-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "devices-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
replicas: {{ .Values.replicaCount }}
|
||||
selector:
|
||||
matchLabels:
|
||||
app: {{ include "devices-app.name" . }}
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: {{ include "devices-app.name" . }}
|
||||
spec:
|
||||
volumes:
|
||||
- name: ca-cert
|
||||
configMap:
|
||||
name: auth-app-ca-cert
|
||||
items:
|
||||
- key: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
path: RootCA_{{ .Values.global.cert_alias }}.crt
|
||||
- name: cacerts-volume
|
||||
emptyDir: {}
|
||||
initContainers:
|
||||
- name: import-ca
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}device-app:{{ .Values.image.tag }}"
|
||||
env:
|
||||
- name: CERT_ALIAS
|
||||
value: {{ .Values.global.cert_alias | quote }}
|
||||
volumeMounts:
|
||||
- name: ca-cert
|
||||
mountPath: /app/resources
|
||||
- name: cacerts-volume
|
||||
mountPath: /tmp/cacerts
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
- |
|
||||
cp /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts /tmp/cacerts/cacerts
|
||||
if keytool -list -keystore /tmp/cacerts/cacerts -storepass changeit -alias gemcert > /dev/null 2>&1; then
|
||||
echo "Certificate with alias gemcert already exists, skipping import"
|
||||
else
|
||||
echo "Importing certificate with alias gemcert"
|
||||
keytool -import -trustcacerts -storepass changeit -noprompt \
|
||||
-alias gemcert \
|
||||
-file /app/resources/RootCA_${CERT_ALIAS}.crt \
|
||||
-keystore /tmp/cacerts/cacerts
|
||||
fi
|
||||
containers:
|
||||
- name: {{ .Chart.Name }}
|
||||
image: "{{ .Values.global.dockerRegistryPrefix }}device-app:{{ .Values.image.tag }}"
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||
ports:
|
||||
- containerPort: 9090
|
||||
name: grpc
|
||||
protocol: TCP
|
||||
env:
|
||||
{{- include "global.env.kafka" . | nindent 12 }}
|
||||
{{- include "global.env.postgres" . | nindent 12 }}
|
||||
{{- include "global.env.general" . | nindent 12 }}
|
||||
- name: USER_HOST
|
||||
value: {{ .Values.env.USER_HOST }}
|
||||
- name: USER_PORT
|
||||
value: {{ include "devices-app.quote" .Values.env.USER_PORT }}
|
||||
- name: AUTH_HOST
|
||||
value: {{ .Values.env.AUTH_HOST }}
|
||||
- name: AUTH_PORT
|
||||
value: {{ include "devices-app.quote" .Values.env.AUTH_PORT }}
|
||||
- name: POSTGRES_URL
|
||||
value: {{ .Values.global.infrastructure.postgres.device_url | quote }}
|
||||
volumeMounts:
|
||||
- name: cacerts-volume
|
||||
mountPath: /usr/lib/jvm/java-21-amazon-corretto/lib/security/cacerts
|
||||
subPath: cacerts
|
||||
restartPolicy: Always
|
||||
@ -1,13 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: {{ include "devices-app.fullname" . }}
|
||||
labels:
|
||||
{{- include "devices-app.labels" . | nindent 4 }}
|
||||
spec:
|
||||
selector:
|
||||
app: {{ include "devices-app.name" . }}
|
||||
ports:
|
||||
- name: http
|
||||
port: 9090
|
||||
targetPort: 9090
|
||||
@ -1,11 +0,0 @@
|
||||
replicaCount: 1
|
||||
|
||||
image:
|
||||
tag: 1.0.0-SNAPSHOT
|
||||
pullPolicy: Always
|
||||
|
||||
env:
|
||||
USER_HOST: user-app
|
||||
USER_PORT: 9090
|
||||
AUTH_HOST: auth-app
|
||||
AUTH_PORT: 9090
|
||||
@ -1,23 +0,0 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user