dbb9e2a1e1
- Add web Deployment/Service with nginx SPA on port 80 - Remove env generation from chart, use external ConfigMap (configMap.create=false) - Add SSH host key Secret injection for gitpod (/etc/ssh) - Fix ServiceMonitor to scrape /metrics uniformly for all services - Fix container names to be service-specific (gitdata/gitpod/gitsync/email/web) - Parameterize PVC claimName and data mountPath - Fix Ingress routing: / -> web, /api /socket.io -> gitdata - Add web to HPA/PDB support lists
466 lines
16 KiB
YAML
466 lines
16 KiB
YAML
{{/*
|
|
Deployments — One per enabled service.
|
|
All pods share the configured data PVC.
|
|
*/}}
|
|
|
|
{{/* ============================================================
|
|
gitdata — Main API server
|
|
============================================================ */}}
|
|
{{- if .Values.gitdata.enabled }}
|
|
{{- $svc := .Values.gitdata }}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "app.serviceFullname" (dict "root" . "name" "gitdata") }}
|
|
namespace: {{ include "app.namespace" . }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "gitdata") | nindent 4 }}
|
|
spec:
|
|
replicas: {{ $svc.replicaCount }}
|
|
selector:
|
|
matchLabels:
|
|
{{- include "app.serviceSelectorLabels" (dict "root" . "name" "gitdata") | nindent 6 }}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
{{- with $svc.podAnnotations }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "gitdata") | nindent 8 }}
|
|
spec:
|
|
{{- include "app.imagePullSecrets" . | nindent 6 }}
|
|
serviceAccountName: {{ include "app.serviceAccountName" . }}
|
|
securityContext:
|
|
{{- toYaml $svc.podSecurityContext | nindent 8 }}
|
|
containers:
|
|
- name: gitdata
|
|
image: {{ include "app.image" (dict "root" . "svc" $svc.image) }}
|
|
imagePullPolicy: {{ .Values.global.image.pullPolicy }}
|
|
ports:
|
|
- name: http
|
|
containerPort: 8080
|
|
protocol: TCP
|
|
envFrom:
|
|
- configMapRef:
|
|
name: {{ .Values.configMap.name | default (include "app.fullname" .) }}
|
|
resources:
|
|
{{- toYaml $svc.resources | nindent 12 }}
|
|
securityContext:
|
|
{{- toYaml $svc.securityContext | nindent 12 }}
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: {{ .Values.persistence.data.mountPath }}
|
|
{{- with $svc.volumeMounts }}
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
startupProbe:
|
|
httpGet:
|
|
path: {{ $svc.startupProbe.httpGet.path }}
|
|
port: {{ $svc.startupProbe.httpGet.port }}
|
|
initialDelaySeconds: {{ $svc.startupProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ $svc.startupProbe.periodSeconds }}
|
|
failureThreshold: {{ $svc.startupProbe.failureThreshold }}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: {{ $svc.livenessProbe.httpGet.path }}
|
|
port: {{ $svc.livenessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.livenessProbe.periodSeconds }}
|
|
readinessProbe:
|
|
httpGet:
|
|
path: {{ $svc.readinessProbe.httpGet.path }}
|
|
port: {{ $svc.readinessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.readinessProbe.periodSeconds }}
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: {{ .Values.persistence.data.claimName }}
|
|
{{- with $svc.volumes }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.tolerations }}
|
|
tolerations:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.affinity }}
|
|
affinity:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/* ============================================================
|
|
gitpod — Git protocol server (HTTP + SSH + gRPC)
|
|
============================================================ */}}
|
|
{{- if .Values.gitpod.enabled }}
|
|
{{- $svc := .Values.gitpod }}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "app.serviceFullname" (dict "root" . "name" "gitpod") }}
|
|
namespace: {{ include "app.namespace" . }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "gitpod") | nindent 4 }}
|
|
spec:
|
|
replicas: {{ $svc.replicaCount }}
|
|
selector:
|
|
matchLabels:
|
|
{{- include "app.serviceSelectorLabels" (dict "root" . "name" "gitpod") | nindent 6 }}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
{{- with $svc.podAnnotations }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "gitpod") | nindent 8 }}
|
|
spec:
|
|
{{- include "app.imagePullSecrets" . | nindent 6 }}
|
|
serviceAccountName: {{ include "app.serviceAccountName" . }}
|
|
securityContext:
|
|
{{- toYaml $svc.podSecurityContext | nindent 8 }}
|
|
containers:
|
|
- name: gitpod
|
|
image: {{ include "app.image" (dict "root" . "svc" $svc.image) }}
|
|
imagePullPolicy: {{ .Values.global.image.pullPolicy }}
|
|
ports:
|
|
- name: http
|
|
containerPort: 8080
|
|
protocol: TCP
|
|
- name: ssh
|
|
containerPort: 2222
|
|
protocol: TCP
|
|
- name: grpc
|
|
containerPort: 50051
|
|
protocol: TCP
|
|
envFrom:
|
|
- configMapRef:
|
|
name: {{ .Values.configMap.name | default (include "app.fullname" .) }}
|
|
resources:
|
|
{{- toYaml $svc.resources | nindent 12 }}
|
|
securityContext:
|
|
{{- toYaml $svc.securityContext | nindent 12 }}
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: {{ .Values.persistence.data.mountPath }}
|
|
{{- with $svc.volumeMounts }}
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
{{- if $svc.sshHostKeySecret }}
|
|
- name: ssh-host-key
|
|
mountPath: /etc/ssh
|
|
readOnly: true
|
|
{{- end }}
|
|
startupProbe:
|
|
httpGet:
|
|
path: {{ $svc.startupProbe.httpGet.path }}
|
|
port: {{ $svc.startupProbe.httpGet.port }}
|
|
initialDelaySeconds: {{ $svc.startupProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ $svc.startupProbe.periodSeconds }}
|
|
failureThreshold: {{ $svc.startupProbe.failureThreshold }}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: {{ $svc.livenessProbe.httpGet.path }}
|
|
port: {{ $svc.livenessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.livenessProbe.periodSeconds }}
|
|
readinessProbe:
|
|
httpGet:
|
|
path: {{ $svc.readinessProbe.httpGet.path }}
|
|
port: {{ $svc.readinessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.readinessProbe.periodSeconds }}
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: {{ .Values.persistence.data.claimName }}
|
|
{{- if $svc.sshHostKeySecret }}
|
|
- name: ssh-host-key
|
|
secret:
|
|
secretName: {{ $svc.sshHostKeySecret }}
|
|
defaultMode: 0600
|
|
{{- end }}
|
|
{{- with $svc.volumes }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.tolerations }}
|
|
tolerations:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.affinity }}
|
|
affinity:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/* ============================================================
|
|
gitsync — Git sync worker
|
|
============================================================ */}}
|
|
{{- if .Values.gitsync.enabled }}
|
|
{{- $svc := .Values.gitsync }}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "app.serviceFullname" (dict "root" . "name" "gitsync") }}
|
|
namespace: {{ include "app.namespace" . }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "gitsync") | nindent 4 }}
|
|
spec:
|
|
replicas: {{ $svc.replicaCount }}
|
|
selector:
|
|
matchLabels:
|
|
{{- include "app.serviceSelectorLabels" (dict "root" . "name" "gitsync") | nindent 6 }}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
{{- with $svc.podAnnotations }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "gitsync") | nindent 8 }}
|
|
spec:
|
|
{{- include "app.imagePullSecrets" . | nindent 6 }}
|
|
serviceAccountName: {{ include "app.serviceAccountName" . }}
|
|
securityContext:
|
|
{{- toYaml $svc.podSecurityContext | nindent 8 }}
|
|
containers:
|
|
- name: gitsync
|
|
image: {{ include "app.image" (dict "root" . "svc" $svc.image) }}
|
|
imagePullPolicy: {{ .Values.global.image.pullPolicy }}
|
|
ports:
|
|
- name: health
|
|
containerPort: 8081
|
|
protocol: TCP
|
|
envFrom:
|
|
- configMapRef:
|
|
name: {{ .Values.configMap.name | default (include "app.fullname" .) }}
|
|
resources:
|
|
{{- toYaml $svc.resources | nindent 12 }}
|
|
securityContext:
|
|
{{- toYaml $svc.securityContext | nindent 12 }}
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: {{ .Values.persistence.data.mountPath }}
|
|
{{- with $svc.volumeMounts }}
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
startupProbe:
|
|
httpGet:
|
|
path: {{ $svc.startupProbe.httpGet.path }}
|
|
port: {{ $svc.startupProbe.httpGet.port }}
|
|
initialDelaySeconds: {{ $svc.startupProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ $svc.startupProbe.periodSeconds }}
|
|
failureThreshold: {{ $svc.startupProbe.failureThreshold }}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: {{ $svc.livenessProbe.httpGet.path }}
|
|
port: {{ $svc.livenessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.livenessProbe.periodSeconds }}
|
|
readinessProbe:
|
|
httpGet:
|
|
path: {{ $svc.readinessProbe.httpGet.path }}
|
|
port: {{ $svc.readinessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.readinessProbe.periodSeconds }}
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: {{ .Values.persistence.data.claimName }}
|
|
{{- with $svc.volumes }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.tolerations }}
|
|
tolerations:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.affinity }}
|
|
affinity:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/* ============================================================
|
|
email — Email worker service
|
|
============================================================ */}}
|
|
{{- if .Values.email.enabled }}
|
|
{{- $svc := .Values.email }}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "app.serviceFullname" (dict "root" . "name" "email") }}
|
|
namespace: {{ include "app.namespace" . }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "email") | nindent 4 }}
|
|
spec:
|
|
replicas: {{ $svc.replicaCount }}
|
|
selector:
|
|
matchLabels:
|
|
{{- include "app.serviceSelectorLabels" (dict "root" . "name" "email") | nindent 6 }}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
{{- with $svc.podAnnotations }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "email") | nindent 8 }}
|
|
spec:
|
|
{{- include "app.imagePullSecrets" . | nindent 6 }}
|
|
serviceAccountName: {{ include "app.serviceAccountName" . }}
|
|
securityContext:
|
|
{{- toYaml $svc.podSecurityContext | nindent 8 }}
|
|
containers:
|
|
- name: email
|
|
image: {{ include "app.image" (dict "root" . "svc" $svc.image) }}
|
|
imagePullPolicy: {{ .Values.global.image.pullPolicy }}
|
|
ports:
|
|
- name: health
|
|
containerPort: 8083
|
|
protocol: TCP
|
|
envFrom:
|
|
- configMapRef:
|
|
name: {{ .Values.configMap.name | default (include "app.fullname" .) }}
|
|
resources:
|
|
{{- toYaml $svc.resources | nindent 12 }}
|
|
securityContext:
|
|
{{- toYaml $svc.securityContext | nindent 12 }}
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: {{ .Values.persistence.data.mountPath }}
|
|
{{- with $svc.volumeMounts }}
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
startupProbe:
|
|
httpGet:
|
|
path: {{ $svc.startupProbe.httpGet.path }}
|
|
port: {{ $svc.startupProbe.httpGet.port }}
|
|
initialDelaySeconds: {{ $svc.startupProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ $svc.startupProbe.periodSeconds }}
|
|
failureThreshold: {{ $svc.startupProbe.failureThreshold }}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: {{ $svc.livenessProbe.httpGet.path }}
|
|
port: {{ $svc.livenessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.livenessProbe.periodSeconds }}
|
|
readinessProbe:
|
|
httpGet:
|
|
path: {{ $svc.readinessProbe.httpGet.path }}
|
|
port: {{ $svc.readinessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.readinessProbe.periodSeconds }}
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: {{ .Values.persistence.data.claimName }}
|
|
{{- with $svc.volumes }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.tolerations }}
|
|
tolerations:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.affinity }}
|
|
affinity:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{/* ============================================================
|
|
web — Frontend SPA
|
|
============================================================ */}}
|
|
{{- if .Values.web.enabled }}
|
|
{{- $svc := .Values.web }}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: {{ include "app.serviceFullname" (dict "root" . "name" "web") }}
|
|
namespace: {{ include "app.namespace" . }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "web") | nindent 4 }}
|
|
spec:
|
|
replicas: {{ $svc.replicaCount }}
|
|
selector:
|
|
matchLabels:
|
|
{{- include "app.serviceSelectorLabels" (dict "root" . "name" "web") | nindent 6 }}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
{{- with $svc.podAnnotations }}
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
labels:
|
|
{{- include "app.serviceLabels" (dict "root" . "name" "web") | nindent 8 }}
|
|
spec:
|
|
{{- include "app.imagePullSecrets" . | nindent 6 }}
|
|
serviceAccountName: {{ include "app.serviceAccountName" . }}
|
|
securityContext:
|
|
{{- toYaml $svc.podSecurityContext | nindent 8 }}
|
|
containers:
|
|
- name: web
|
|
image: {{ include "app.image" (dict "root" . "svc" $svc.image) }}
|
|
imagePullPolicy: {{ .Values.global.image.pullPolicy }}
|
|
ports:
|
|
- name: http
|
|
containerPort: 80
|
|
protocol: TCP
|
|
envFrom:
|
|
- configMapRef:
|
|
name: {{ .Values.configMap.name | default (include "app.fullname" .) }}
|
|
resources:
|
|
{{- toYaml $svc.resources | nindent 12 }}
|
|
securityContext:
|
|
{{- toYaml $svc.securityContext | nindent 12 }}
|
|
{{- with $svc.volumeMounts }}
|
|
volumeMounts:
|
|
{{- toYaml . | nindent 12 }}
|
|
{{- end }}
|
|
startupProbe:
|
|
httpGet:
|
|
path: {{ $svc.startupProbe.httpGet.path }}
|
|
port: {{ $svc.startupProbe.httpGet.port }}
|
|
initialDelaySeconds: {{ $svc.startupProbe.initialDelaySeconds }}
|
|
periodSeconds: {{ $svc.startupProbe.periodSeconds }}
|
|
failureThreshold: {{ $svc.startupProbe.failureThreshold }}
|
|
livenessProbe:
|
|
httpGet:
|
|
path: {{ $svc.livenessProbe.httpGet.path }}
|
|
port: {{ $svc.livenessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.livenessProbe.periodSeconds }}
|
|
readinessProbe:
|
|
httpGet:
|
|
path: {{ $svc.readinessProbe.httpGet.path }}
|
|
port: {{ $svc.readinessProbe.httpGet.port }}
|
|
periodSeconds: {{ $svc.readinessProbe.periodSeconds }}
|
|
{{- with $svc.volumes }}
|
|
volumes:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.tolerations }}
|
|
tolerations:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with $svc.affinity }}
|
|
affinity:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|