From e8379fc76f5f08c02e70db668c0cb29daa7e537b Mon Sep 17 00:00:00 2001 From: pehlicd <65170388+pehlicd@users.noreply.github.com> Date: Fri, 1 Mar 2024 00:03:57 +0100 Subject: [PATCH] chore: add skeleton of the helm repo --- .github/CODEOWNERS | 7 + .github/workflows/lint.yml | 30 +++ .github/workflows/release.yml | 26 +++ .github/workflows/test.yml | 45 ++++ .gitignore | 11 + .pre-commit-config.yaml | 18 ++ LICENSE | 21 ++ README.md | 40 +++- charts/keep/.helmignore | 23 ++ charts/keep/Chart.yaml | 27 +++ charts/keep/README.md | 203 +++++++++++++++++ charts/keep/templates/_helpers.tpl | 62 +++++ charts/keep/templates/backend-hpa.yaml | 32 +++ charts/keep/templates/backend-ingress.yaml | 61 +++++ charts/keep/templates/backend-route.yaml | 19 ++ .../cluster-role-binding-secret-manager.yaml | 13 ++ .../cluster-role-secret-manager.yaml | 9 + charts/keep/templates/delete-secret-job.yaml | 25 ++ charts/keep/templates/frontend-hpa.yaml | 32 +++ charts/keep/templates/frontend-ingress.yaml | 61 +++++ charts/keep/templates/frontend-route.yaml | 19 ++ .../keep/templates/keep-backend-service.yaml | 17 ++ charts/keep/templates/keep-backend.yaml | 87 +++++++ charts/keep/templates/keep-db-pv.yaml | 13 ++ charts/keep/templates/keep-db-pvc.yaml | 11 + charts/keep/templates/keep-db-service.yaml | 17 ++ charts/keep/templates/keep-db.yaml | 68 ++++++ .../keep/templates/keep-frontend-service.yaml | 17 ++ charts/keep/templates/keep-frontend.yaml | 75 ++++++ .../keep-websocket-server-service.yaml | 17 ++ .../keep/templates/keep-websocket-server.yaml | 75 ++++++ charts/keep/templates/serviceaccount.yaml | 12 + charts/keep/values.yaml | 215 ++++++++++++++++++ ct.yml | 9 + 34 files changed, 1416 insertions(+), 1 deletion(-) create mode 100644 .github/CODEOWNERS create mode 100644 .github/workflows/lint.yml create mode 100644 .github/workflows/release.yml create mode 100644 .github/workflows/test.yml create mode 100644 .gitignore create mode 100644 .pre-commit-config.yaml create mode 100644 LICENSE create mode 100644 charts/keep/.helmignore create mode 100644 charts/keep/Chart.yaml create mode 100644 charts/keep/README.md create mode 100644 charts/keep/templates/_helpers.tpl create mode 100644 charts/keep/templates/backend-hpa.yaml create mode 100644 charts/keep/templates/backend-ingress.yaml create mode 100644 charts/keep/templates/backend-route.yaml create mode 100644 charts/keep/templates/cluster-role-binding-secret-manager.yaml create mode 100644 charts/keep/templates/cluster-role-secret-manager.yaml create mode 100644 charts/keep/templates/delete-secret-job.yaml create mode 100644 charts/keep/templates/frontend-hpa.yaml create mode 100644 charts/keep/templates/frontend-ingress.yaml create mode 100644 charts/keep/templates/frontend-route.yaml create mode 100644 charts/keep/templates/keep-backend-service.yaml create mode 100644 charts/keep/templates/keep-backend.yaml create mode 100644 charts/keep/templates/keep-db-pv.yaml create mode 100644 charts/keep/templates/keep-db-pvc.yaml create mode 100644 charts/keep/templates/keep-db-service.yaml create mode 100644 charts/keep/templates/keep-db.yaml create mode 100644 charts/keep/templates/keep-frontend-service.yaml create mode 100644 charts/keep/templates/keep-frontend.yaml create mode 100644 charts/keep/templates/keep-websocket-server-service.yaml create mode 100644 charts/keep/templates/keep-websocket-server.yaml create mode 100644 charts/keep/templates/serviceaccount.yaml create mode 100644 charts/keep/values.yaml create mode 100644 ct.yml diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..4672127 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,7 @@ +# CODEOWNERS info: https://help.github.com/en/articles/about-code-owners +# Owners are automatically requested for review for PRs that changes code +# that they own. + +* @shahargl +* @DmarshalTU +* @talboren diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml new file mode 100644 index 0000000..9ef36e9 --- /dev/null +++ b/.github/workflows/lint.yml @@ -0,0 +1,30 @@ +name: Lint Charts + +on: + pull_request: + branches: + - main + +jobs: + lint-chart: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + with: + fetch-depth: 0 + + - name: Set up Helm + uses: azure/setup-helm@v3 + with: + version: v3.10.3 + + - uses: actions/setup-python@v4 + with: + python-version: 3.9 + + - name: Set up chart-testing + uses: helm/chart-testing-action@v2.4.0 + + - name: Run chart-testing (lint) + run: ct lint --config ct.yaml diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml new file mode 100644 index 0000000..b3eb7c8 --- /dev/null +++ b/.github/workflows/release.yml @@ -0,0 +1,26 @@ +name: Release Charts + +on: + push: + branches: + - main + +jobs: + release: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + with: + fetch-depth: 0 + + - name: Configure Git + run: | + git config user.name "$GITHUB_ACTOR" + git config user.email "$GITHUB_ACTOR@users.noreply.github.com" + + - name: Run chart-releaser + uses: helm/chart-releaser-action@v1.5.0 + env: + CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" + CR_SKIP_EXISTING: true diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml new file mode 100644 index 0000000..415d425 --- /dev/null +++ b/.github/workflows/test.yml @@ -0,0 +1,45 @@ +name: Test Charts + +on: + pull_request: + branches: + - main + +jobs: + test-chart: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + with: + fetch-depth: 0 + + - name: Set up Helm + uses: azure/setup-helm@v3 + with: + version: v3.10.3 + + - uses: actions/setup-python@v4 + with: + python-version: 3.9 + + - name: Set up chart-testing + uses: helm/chart-testing-action@v2.4.0 + + - name: Run chart-testing (list-changed) + id: list-changed + run: | + changed=$(ct list-changed --config ct.yaml) + if [[ -n "$changed" ]]; then + echo "changed=true" >> $GITHUB_OUTPUT + fi + + - name: Create kind cluster + uses: helm/kind-action@v1.4.0 + with: + wait: 600s + if: steps.list-changed.outputs.changed == 'true' + + - name: Run chart-testing (install) + run: ct install --config ct.yaml --namespace default + if: steps.list-changed.outputs.changed == 'true' diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..a0ed987 --- /dev/null +++ b/.gitignore @@ -0,0 +1,11 @@ +# .DS_STORE +.DS_Store +**/.DS_Store + +# .idea +.idea +**/.idea + +# .vscode +.vscode +**/.vscode diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..e9f5353 --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,18 @@ +repos: + - repo: https://github.com/pre-commit/pre-commit-hooks + rev: v4.5.0 + hooks: + - id: check-merge-conflict + - id: end-of-file-fixer + - repo: https://github.com/norwoodj/helm-docs + rev: v1.13.0 + hooks: + - id: helm-docs + args: + - --chart-search-root=charts + - repo: https://github.com/compilerla/conventional-pre-commit + rev: v2.1.1 + hooks: + - id: conventional-pre-commit + stages: [ commit-msg ] + args: [ ] # optional: list of Conventional Commits types to allow e.g. [feat, fix, ci, chore, test] diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..442fd8f --- /dev/null +++ b/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2024 Keep + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/README.md b/README.md index 2ba8c0c..25ad18f 100644 --- a/README.md +++ b/README.md @@ -1 +1,39 @@ -# helm-charts +# Keep Helm Chart +The Keep Helm Chart provides a convenient way to deploy and manage Keep on Kubernetes using Helm, a package manager for Kubernetes applications. + +# Installation +The easiest way to install Keep with Helm is with the following command: + +```bash +# add the Helm repository +helm repo add keephq https://keephq.github.io/helm-charts +# pull the latest version of the chart +helm pull keephq/keep +# install the chart +helm install keep keephq/keep +``` + +# Uninstallation +`helm uninstall keep` + +# Configuration +Keep's Helm Chart supports the following `values.yaml`: +- backend.image: the backend image (default: us-central1-docker.pkg.dev/keephq/keep/keep-api) +- frontend.image: the frontend image (default: us-central1-docker.pkg.dev/keephq/keep/keep-ui) +- frontend.publicApiUrl: the frontend will use this URL as a backend from your browser ("client components"). default: http://localhost:8080. for production environment this should be the backend DNS/external IP. +- frontend.internalApiUrl: the frontend will use this URL as a backend from the container ("server components") default: http://keep-backend:8080 + frontend.env: development + +# Openshift +Keep's Helm Chart also supports installation on Openshift. +Simply set up the keys under frontend(/backend).route: +- route.host: your desired hostname + +# Local Kubernetes +For local kubernetes without external IP (such as NodePort or LoadBalancer), you'll need to run port forwarding: + +## Port forward +```bash +kubectl port-forward svc/keep-frontend 3000:3000 & \ +kubectl port-forward svc/keep-websocket 6001:6001 & +``` diff --git a/charts/keep/.helmignore b/charts/keep/.helmignore new file mode 100644 index 0000000..8cade13 --- /dev/null +++ b/charts/keep/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*~ +# Various IDEs +.vscode +.project +.idea/ +*.tmproj +OWNERS diff --git a/charts/keep/Chart.yaml b/charts/keep/Chart.yaml new file mode 100644 index 0000000..a02ec61 --- /dev/null +++ b/charts/keep/Chart.yaml @@ -0,0 +1,27 @@ +apiVersion: v2 +name: keep +version: 0.0.1 +description: Keep Helm Chart +type: application +icon: https://platform.keephq.dev/_next/image?url=%2Fkeep.png&w=48&q=75 +appVersion: 0.2.1 +deprecated: false +annotations: + app: keep +keywords: + - alerting + - monitoring + - monitoring-tool +home: https://platform.keephq.dev/ +sources: + - https://github.com/keephq/keep +maintainers: + - name: Denis Tu + email: dmarshaltu@gmail.com + url: https://github.com/DmarshalTU + - name: Shahar Glazner + email: shahar@keephq.dev + url: https://github.com/shahargl + - name: Tal Borenstein + email: tal@keephq.dev + url: https://github.com/talboren diff --git a/charts/keep/README.md b/charts/keep/README.md new file mode 100644 index 0000000..1a96c7e --- /dev/null +++ b/charts/keep/README.md @@ -0,0 +1,203 @@ +# keep + +![Version: 0.0.1](https://img.shields.io/badge/Version-0.0.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.2.1](https://img.shields.io/badge/AppVersion-0.2.1-informational?style=flat-square) + +Keep Helm Chart + +**Homepage:** + +## Maintainers + +| Name | Email | Url | +| ---- | ------ | --- | +| Denis Tu | | | +| Shahar Glazner | | | +| Tal Borenstein | | | + +## Source Code + +* + +## Values + +| Key | Type | Default | Description | +|-----|------|---------|-------------| +| backend.affinity | object | `{}` | | +| backend.autoscaling.enabled | bool | `false` | | +| backend.autoscaling.maxReplicas | int | `3` | | +| backend.autoscaling.minReplicas | int | `1` | | +| backend.autoscaling.targetCPUUtilizationPercentage | int | `80` | | +| backend.enabled | bool | `true` | | +| backend.env[0].name | string | `"SECRET_MANAGER_TYPE"` | | +| backend.env[0].value | string | `"k8s"` | | +| backend.env[1].name | string | `"PORT"` | | +| backend.env[1].value | string | `"8080"` | | +| backend.env[2].name | string | `"SECRET_MANAGER_DIRECTORY"` | | +| backend.env[2].value | string | `"/state"` | | +| backend.env[3].name | string | `"DATABASE_CONNECTION_STRING"` | | +| backend.env[3].value | string | `"mysql+pymysql://root@keep-database:3306/keep"` | | +| backend.env[4].name | string | `"PUSHER_APP_ID"` | | +| backend.env[4].value | int | `1` | | +| backend.env[5].name | string | `"PUSHER_APP_KEY"` | | +| backend.env[5].value | string | `"keepappkey"` | | +| backend.env[6].name | string | `"PUSHER_APP_SECRET"` | | +| backend.env[6].value | string | `"keepappsecret"` | | +| backend.env[7].name | string | `"PUSHER_HOST"` | | +| backend.env[7].value | string | `"keep-websocket"` | | +| backend.env[8].name | string | `"PUSHER_PORT"` | | +| backend.env[8].value | int | `6001` | | +| backend.image.pullPolicy | string | `"Always"` | | +| backend.image.repository | string | `"us-central1-docker.pkg.dev/keephq/keep/keep-api"` | | +| backend.image.tag | string | `"latest"` | | +| backend.imagePullSecrets | list | `[]` | | +| backend.ingress.annotations | object | `{}` | | +| backend.ingress.className | string | `""` | | +| backend.ingress.enabled | bool | `true` | | +| backend.ingress.hosts[0].host | string | `"chart-example-backend.local"` | | +| backend.ingress.hosts[0].paths[0].path | string | `"/"` | | +| backend.ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | | +| backend.ingress.tls | list | `[]` | | +| backend.nodeSelector | object | `{}` | | +| backend.openAiApi.enabled | bool | `false` | | +| backend.openAiApi.openAiApiKey | string | `""` | | +| backend.podAnnotations | object | `{}` | | +| backend.podSecurityContext | object | `{}` | | +| backend.replicaCount | int | `1` | | +| backend.resources | object | `{}` | | +| backend.route.enabled | bool | `false` | | +| backend.route.host | string | `"chart-example-backend.local"` | | +| backend.route.path | string | `"/"` | | +| backend.route.tls | list | `[]` | | +| backend.route.wildcardPolicy | string | `"None"` | | +| backend.securityContext | object | `{}` | | +| backend.service.port | int | `8080` | | +| backend.service.type | string | `"ClusterIP"` | | +| backend.tolerations | list | `[]` | | +| database.affinity | object | `{}` | | +| database.autoscaling.enabled | bool | `false` | | +| database.enabled | bool | `true` | | +| database.env[0].name | string | `"MYSQL_ALLOW_EMPTY_PASSWORD"` | | +| database.env[0].value | string | `"yes"` | | +| database.env[1].name | string | `"MYSQL_DATABASE"` | | +| database.env[1].value | string | `"keep"` | | +| database.env[2].name | string | `"MYSQL_PASSWORD"` | | +| database.env[2].value | string | `nil` | | +| database.image.pullPolicy | string | `"IfNotPresent"` | | +| database.image.repository | string | `"mysql"` | | +| database.image.tag | string | `"latest"` | | +| database.imagePullSecrets | list | `[]` | | +| database.nodeSelector | object | `{}` | | +| database.podAnnotations | object | `{}` | | +| database.podSecurityContext | object | `{}` | | +| database.replicaCount | int | `1` | | +| database.resources | object | `{}` | | +| database.securityContext | object | `{}` | | +| database.service.port | int | `3306` | | +| database.service.type | string | `"ClusterIP"` | | +| database.size | string | `"5Gi"` | | +| database.storageClasss | string | `""` | | +| database.tolerations | list | `[]` | | +| frontend.affinity | object | `{}` | | +| frontend.autoscaling.enabled | bool | `false` | | +| frontend.autoscaling.maxReplicas | int | `3` | | +| frontend.autoscaling.minReplicas | int | `1` | | +| frontend.autoscaling.targetCPUUtilizationPercentage | int | `80` | | +| frontend.enabled | bool | `true` | | +| frontend.env[0].name | string | `"NEXTAUTH_SECRET"` | | +| frontend.env[0].value | string | `"secret"` | | +| frontend.env[10].name | string | `"PUSHER_PORT"` | | +| frontend.env[10].value | int | `6001` | | +| frontend.env[11].name | string | `"PUSHER_APP_KEY"` | | +| frontend.env[11].value | string | `"keepappkey"` | | +| frontend.env[1].name | string | `"NEXTAUTH_URL"` | | +| frontend.env[1].value | string | `"http://localhost:3000"` | | +| frontend.env[2].name | string | `"API_URL"` | | +| frontend.env[2].value | string | `"http://keep-backend:8080"` | | +| frontend.env[3].name | string | `"NEXT_PUBLIC_API_URL"` | | +| frontend.env[3].value | string | `""` | | +| frontend.env[4].name | string | `"NEXT_PUBLIC_POSTHOG_KEY"` | | +| frontend.env[4].value | string | `"phc_muk9qE3TfZsX3SZ9XxX52kCGJBclrjhkP9JxAQcm1PZ"` | | +| frontend.env[5].name | string | `"NEXT_PUBLIC_POSTHOG_HOST"` | | +| frontend.env[5].value | string | `"https://app.posthog.com"` | | +| frontend.env[6].name | string | `"ENV"` | | +| frontend.env[6].value | string | `"development"` | | +| frontend.env[7].name | string | `"NODE_ENV"` | | +| frontend.env[7].value | string | `"development"` | | +| frontend.env[8].name | string | `"HOSTNAME"` | | +| frontend.env[8].value | string | `"0.0.0.0"` | | +| frontend.env[9].name | string | `"PUSHER_HOST"` | | +| frontend.env[9].value | string | `"localhost"` | | +| frontend.image.pullPolicy | string | `"Always"` | | +| frontend.image.repository | string | `"us-central1-docker.pkg.dev/keephq/keep/keep-ui"` | | +| frontend.image.tag | string | `"latest"` | | +| frontend.imagePullSecrets | list | `[]` | | +| frontend.ingress.annotations | object | `{}` | | +| frontend.ingress.className | string | `""` | | +| frontend.ingress.enabled | bool | `true` | | +| frontend.ingress.hosts[0].host | string | `"chart-example.local"` | | +| frontend.ingress.hosts[0].paths[0].path | string | `"/"` | | +| frontend.ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | | +| frontend.ingress.tls | list | `[]` | | +| frontend.nodeSelector | object | `{}` | | +| frontend.podAnnotations | object | `{}` | | +| frontend.podSecurityContext | object | `{}` | | +| frontend.replicaCount | int | `1` | | +| frontend.resources | object | `{}` | | +| frontend.route.enabled | bool | `false` | | +| frontend.route.host | string | `"chart-example.local"` | | +| frontend.route.path | string | `"/"` | | +| frontend.route.tls | list | `[]` | | +| frontend.route.wildcardPolicy | string | `"None"` | | +| frontend.securityContext | object | `{}` | | +| frontend.service.port | int | `3000` | | +| frontend.service.type | string | `"ClusterIP"` | | +| frontend.serviceAccount.annotations | object | `{}` | | +| frontend.serviceAccount.create | bool | `true` | | +| frontend.serviceAccount.name | string | `""` | | +| frontend.tolerations | list | `[]` | | +| fullnameOverride | string | `""` | | +| nameOverride | string | `""` | | +| namespace | string | `"default"` | | +| serviceAccount.annotations | object | `{}` | | +| serviceAccount.create | bool | `true` | | +| serviceAccount.name | string | `""` | | +| websocket.affinity | object | `{}` | | +| websocket.autoscaling.enabled | bool | `false` | | +| websocket.autoscaling.maxReplicas | int | `3` | | +| websocket.autoscaling.minReplicas | int | `1` | | +| websocket.autoscaling.targetCPUUtilizationPercentage | int | `80` | | +| websocket.enabled | bool | `true` | | +| websocket.env[0].name | string | `"SOKETI_USER_AUTHENTICATION_TIMEOUT"` | | +| websocket.env[0].value | int | `3000` | | +| websocket.env[1].name | string | `"SOKETI_DEFAULT_APP_ID"` | | +| websocket.env[1].value | int | `1` | | +| websocket.env[2].name | string | `"SOKETI_DEFAULT_APP_KEY"` | | +| websocket.env[2].value | string | `"keepappkey"` | | +| websocket.env[3].name | string | `"SOKETI_DEFAULT_APP_SECRET"` | | +| websocket.env[3].value | string | `"keepappsecret"` | | +| websocket.image.pullPolicy | string | `"Always"` | | +| websocket.image.repository | string | `"quay.io/soketi/soketi:1.4-16-debian"` | | +| websocket.image.tag | string | `"latest"` | | +| websocket.imagePullSecrets | list | `[]` | | +| websocket.ingress.annotations | object | `{}` | | +| websocket.ingress.className | string | `""` | | +| websocket.ingress.enabled | bool | `false` | | +| websocket.ingress.hosts[0].host | string | `"chart-example.local"` | | +| websocket.ingress.hosts[0].paths[0].path | string | `"/"` | | +| websocket.ingress.hosts[0].paths[0].pathType | string | `"ImplementationSpecific"` | | +| websocket.ingress.tls | list | `[]` | | +| websocket.nodeSelector | object | `{}` | | +| websocket.podAnnotations | object | `{}` | | +| websocket.podSecurityContext | object | `{}` | | +| websocket.replicaCount | int | `1` | | +| websocket.resources | object | `{}` | | +| websocket.securityContext | object | `{}` | | +| websocket.service.port | int | `6001` | | +| websocket.service.type | string | `"ClusterIP"` | | +| websocket.serviceAccount.annotations | object | `{}` | | +| websocket.serviceAccount.create | bool | `true` | | +| websocket.serviceAccount.name | string | `""` | | +| websocket.tolerations | list | `[]` | | + +---------------------------------------------- +Autogenerated from chart metadata using [helm-docs v1.13.0](https://github.com/norwoodj/helm-docs/releases/v1.13.0) diff --git a/charts/keep/templates/_helpers.tpl b/charts/keep/templates/_helpers.tpl new file mode 100644 index 0000000..a454d76 --- /dev/null +++ b/charts/keep/templates/_helpers.tpl @@ -0,0 +1,62 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "keep.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "keep.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "keep.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "keep.labels" -}} +helm.sh/chart: {{ include "keep.chart" . }} +{{ include "keep.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "keep.selectorLabels" -}} +app.kubernetes.io/name: {{ include "keep.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "keep.serviceAccountName" -}} +{{- if .Values.serviceAccount.create }} +{{- default (include "keep.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} diff --git a/charts/keep/templates/backend-hpa.yaml b/charts/keep/templates/backend-hpa.yaml new file mode 100644 index 0000000..d73cdb5 --- /dev/null +++ b/charts/keep/templates/backend-hpa.yaml @@ -0,0 +1,32 @@ +{{- if .Values.backend.autoscaling.enabled }} +apiVersion: autoscaling/v2 +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "keep.fullname" . }}-backend + labels: + {{- include "keep.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "keep.fullname" . }} + minReplicas: {{ .Values.backend.autoscaling.minReplicas }} + maxReplicas: {{ .Values.backend.autoscaling.maxReplicas }} + metrics: + {{- if .Values.backend.autoscaling.targetCPUUtilizationPercentage }} + - type: Resource + resource: + name: cpu + target: + type: Utilization + averageUtilization: {{ .Values.backend.autoscaling.targetCPUUtilizationPercentage }} + {{- end }} + {{- if .Values.backend.autoscaling.targetMemoryUtilizationPercentage }} + - type: Resource + resource: + name: memory + target: + type: Utilization + averageUtilization: {{ .Values.backend.autoscaling.targetMemoryUtilizationPercentage }} + {{- end }} +{{- end }} diff --git a/charts/keep/templates/backend-ingress.yaml b/charts/keep/templates/backend-ingress.yaml new file mode 100644 index 0000000..45c17d7 --- /dev/null +++ b/charts/keep/templates/backend-ingress.yaml @@ -0,0 +1,61 @@ +{{- if .Values.backend.ingress.enabled -}} +{{- $fullName := include "keep.fullname" . -}} +{{- $svcPort := .Values.backend.service.port -}} +{{- if and .Values.backend.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} + {{- if not (hasKey .Values.backend.ingress.annotations "kubernetes.io/ingress.class") }} + {{- $_ := set .Values.backend.ingress.annotations "kubernetes.io/ingress.class" .Values.backend.ingress.className}} + {{- end }} +{{- end }} +{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1 +{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1beta1 +{{- else -}} +apiVersion: extensions/v1beta1 +{{- end }} +kind: Ingress +metadata: + name: {{ $fullName }}-backend + labels: + {{- include "keep.labels" . | nindent 4 }} + {{- with .Values.backend.ingress.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + {{- if and .Values.backend.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }} + ingressClassName: {{ .Values.backend.ingress.className }} + {{- end }} + {{- if .Values.backend.ingress.tls }} + tls: + {{- range .Values.backend.ingress.tls }} + - hosts: + {{- range .hosts }} + - {{ . | quote }} + {{- end }} + secretName: {{ .secretName }} + {{- end }} + {{- end }} + rules: + {{- range .Values.backend.ingress.hosts }} + - host: {{ .host | quote }} + http: + paths: + {{- range .paths }} + - path: {{ .path }} + {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }} + pathType: {{ .pathType }} + {{- end }} + backend: + {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} + service: + name: {{ $fullName }}-backend + port: + number: {{ $svcPort }} + {{- else }} + serviceName: {{ $fullName }}-backend + servicePort: {{ $svcPort }} + {{- end }} + {{- end }} + {{- end }} +{{- end }} diff --git a/charts/keep/templates/backend-route.yaml b/charts/keep/templates/backend-route.yaml new file mode 100644 index 0000000..96b4d42 --- /dev/null +++ b/charts/keep/templates/backend-route.yaml @@ -0,0 +1,19 @@ +{{- if .Values.backend.route.enabled -}} +{{- $fullName := include "keep.fullname" . -}} +apiVersion: route.openshift.io/v1 +kind: Route +metadata: + name: {{ $fullName }} + labels: {{- include "keep.labels" . | nindent 4 }} +spec: + host: {{ .Values.backend.route.host }} + to: + kind: Service + name: {{ $fullName }}-backend + weight: 100 + port: + targetPort: {{ .Values.backend.service.port }} + wildcardPolicy: {{ .Values.backend.route.wildcardPolicy }} + tls: + {{ toYaml .Values.backend.route.tls | indent 4 }} +{{- end}} diff --git a/charts/keep/templates/cluster-role-binding-secret-manager.yaml b/charts/keep/templates/cluster-role-binding-secret-manager.yaml new file mode 100644 index 0000000..0ce58e0 --- /dev/null +++ b/charts/keep/templates/cluster-role-binding-secret-manager.yaml @@ -0,0 +1,13 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: secret-manager-rolebinding + namespace: {{ .Values.namespace }} +subjects: + - kind: ServiceAccount + name: {{ include "keep.serviceAccountName" . }} + namespace: {{ .Values.namespace }} +roleRef: + kind: Role + name: secret-manager-role + apiGroup: rbac.authorization.k8s.io diff --git a/charts/keep/templates/cluster-role-secret-manager.yaml b/charts/keep/templates/cluster-role-secret-manager.yaml new file mode 100644 index 0000000..b2ee728 --- /dev/null +++ b/charts/keep/templates/cluster-role-secret-manager.yaml @@ -0,0 +1,9 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: secret-manager-role + namespace: {{ .Values.namespace }} +rules: + - apiGroups: [""] + resources: ["secrets"] + verbs: ["create", "delete", "get", "list"] diff --git a/charts/keep/templates/delete-secret-job.yaml b/charts/keep/templates/delete-secret-job.yaml new file mode 100644 index 0000000..e1fd325 --- /dev/null +++ b/charts/keep/templates/delete-secret-job.yaml @@ -0,0 +1,25 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: delete-keep-secrets + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + serviceAccountName: {{ include "keep.serviceAccountName" . }} + containers: + - name: delete-secrets-container + image: bitnami/kubectl + command: + - /bin/sh + - -c + - > + secrets=$(kubectl get secrets -n {{ .Values.Namespace }} -o name | grep '^secret/keep-'); + if [ -n "$secrets" ]; then + echo "$secrets" | xargs kubectl delete -n {{ .Values.Namespace }}; + else + echo "No matching secrets found to delete."; + fi + restartPolicy: Never diff --git a/charts/keep/templates/frontend-hpa.yaml b/charts/keep/templates/frontend-hpa.yaml new file mode 100644 index 0000000..16bc5aa --- /dev/null +++ b/charts/keep/templates/frontend-hpa.yaml @@ -0,0 +1,32 @@ +{{- if .Values.frontend.autoscaling.enabled }} +apiVersion: autoscaling/v2 +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "keep.fullname" . }}-frontend + labels: + {{- include "keep.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "keep.fullname" . }} + minReplicas: {{ .Values.frontend.autoscaling.minReplicas }} + maxReplicas: {{ .Values.frontend.autoscaling.maxReplicas }} + metrics: + {{- if .Values.frontend.autoscaling.targetCPUUtilizationPercentage }} + - type: Resource + resource: + name: cpu + target: + type: Utilization + averageUtilization: {{ .Values.frontend.autoscaling.targetCPUUtilizationPercentage }} + {{- end }} + {{- if .Values.frontend.autoscaling.targetMemoryUtilizationPercentage }} + - type: Resource + resource: + name: memory + target: + type: Utilization + averageUtilization: {{ .Values.frontend.autoscaling.targetMemoryUtilizationPercentage }} + {{- end }} +{{- end }} diff --git a/charts/keep/templates/frontend-ingress.yaml b/charts/keep/templates/frontend-ingress.yaml new file mode 100644 index 0000000..7054cba --- /dev/null +++ b/charts/keep/templates/frontend-ingress.yaml @@ -0,0 +1,61 @@ +{{- if .Values.frontend.ingress.enabled -}} +{{- $fullName := include "keep.fullname" . -}} +{{- $svcPort := .Values.frontend.service.port -}} +{{- if and .Values.frontend.ingress.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} + {{- if not (hasKey .Values.frontend.ingress.annotations "kubernetes.io/ingress.class") }} + {{- $_ := set .Values.frontend.ingress.annotations "kubernetes.io/ingress.class" .Values.frontend.ingress.className}} + {{- end }} +{{- end }} +{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1 +{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} +apiVersion: networking.k8s.io/v1beta1 +{{- else -}} +apiVersion: extensions/v1beta1 +{{- end }} +kind: Ingress +metadata: + name: {{ $fullName }}-frontend + labels: + {{- include "keep.labels" . | nindent 4 }} + {{- with .Values.frontend.ingress.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + {{- if and .Values.frontend.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }} + ingressClassName: {{ .Values.frontend.ingress.className }} + {{- end }} + {{- if .Values.frontend.ingress.tls }} + tls: + {{- range .Values.frontend.ingress.tls }} + - hosts: + {{- range .hosts }} + - {{ . | quote }} + {{- end }} + secretName: {{ .secretName }} + {{- end }} + {{- end }} + rules: + {{- range .Values.frontend.ingress.hosts }} + - host: {{ .host | quote }} + http: + paths: + {{- range .paths }} + - path: {{ .path }} + {{- if and .pathType (semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion) }} + pathType: {{ .pathType }} + {{- end }} + backend: + {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} + service: + name: {{ $fullName }}-frontend + port: + number: {{ $svcPort }} + {{- else }} + serviceName: {{ $fullName }}-frontend + servicePort: {{ $svcPort }} + {{- end }} + {{- end }} + {{- end }} +{{- end }} diff --git a/charts/keep/templates/frontend-route.yaml b/charts/keep/templates/frontend-route.yaml new file mode 100644 index 0000000..75e6b0e --- /dev/null +++ b/charts/keep/templates/frontend-route.yaml @@ -0,0 +1,19 @@ +{{- if .Values.frontend.route.enabled -}} +{{- $fullName := include "keep.fullname" . -}} +apiVersion: route.openshift.io/v1 +kind: Route +metadata: + name: {{ $fullName }} + labels: {{- include "keep.labels" . | nindent 4 }} +spec: + host: {{ .Values.frontend.route.host }} + to: + kind: Service + name: {{ $fullName }}-frontend + weight: 100 + port: + targetPort: {{ .Values.frontend.service.port }} + wildcardPolicy: {{ .Values.frontend.route.wildcardPolicy }} + tls: + {{ toYaml .Values.frontend.route.tls | indent 4 }} +{{- end}} diff --git a/charts/keep/templates/keep-backend-service.yaml b/charts/keep/templates/keep-backend-service.yaml new file mode 100644 index 0000000..fd20451 --- /dev/null +++ b/charts/keep/templates/keep-backend-service.yaml @@ -0,0 +1,17 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "keep.fullname" . }}-backend + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: backend-service +spec: + type: {{ .Values.backend.service.type }} + ports: + - port: {{ .Values.backend.service.port }} + targetPort: http + protocol: TCP + name: http + selector: + {{- include "keep.selectorLabels" . | nindent 4 }} + keep-component: backend diff --git a/charts/keep/templates/keep-backend.yaml b/charts/keep/templates/keep-backend.yaml new file mode 100644 index 0000000..1c8f636 --- /dev/null +++ b/charts/keep/templates/keep-backend.yaml @@ -0,0 +1,87 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "keep.fullname" . }}-backend + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: backend +spec: + {{- if not .Values.backend.autoscaling.enabled }} + replicas: {{ .Values.backend.replicaCount }} + {{- end }} + selector: + matchLabels: + {{- include "keep.selectorLabels" . | nindent 6 }} + template: + metadata: + {{- with .Values.backend.podAnnotations }} + annotations: + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "keep.selectorLabels" . | nindent 8 }} + keep-component: backend + spec: + {{- with .Values.backend.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "keep.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.backend.podSecurityContext | nindent 8 }} + containers: + - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.backend.securityContext | nindent 12 }} + image: "{{ .Values.backend.image.repository }}:{{ .Values.backend.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.backend.image.pullPolicy }} + ports: + - name: http + containerPort: {{ .Values.backend.service.port }} + protocol: TCP + env: + {{- range .Values.backend.env }} + - name: {{ .name }} + value: {{ .value | quote }} + {{- end }} + {{- if .Values.backend.openAiApi.enabled }} + - name: OPENAI_API_KEY + value: {{ .Values.backend.openAiApi.openAiApiKey | default "" | quote }} + {{- end }} + - name: K8S_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + volumeMounts: + - name: state-volume + mountPath: /state + readOnly: false + # livenessProbe: + # httpGet: + # path: / + # port: http + # readinessProbe: + # httpGet: + # path: / + # port: http + resources: + {{- toYaml .Values.backend.resources | nindent 12 }} + initContainers: + - name: wait-for-database + image: busybox + command: ['sh', '-c', 'until nc -z keep-database 3306; do sleep 1; done;'] + {{- with .Values.backend.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.backend.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.backend.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} + volumes: + - name: state-volume + emptyDir: {} diff --git a/charts/keep/templates/keep-db-pv.yaml b/charts/keep/templates/keep-db-pv.yaml new file mode 100644 index 0000000..49e8536 --- /dev/null +++ b/charts/keep/templates/keep-db-pv.yaml @@ -0,0 +1,13 @@ +apiVersion: v1 +kind: PersistentVolume +metadata: + name: {{ include "keep.fullname" . }}-pv +spec: + capacity: + storage: {{ .Values.database.size }} + accessModes: + - ReadWriteOnce + persistentVolumeReclaimPolicy: Retain + storageClassName: {{ .Values.database.storageClasss }} + hostPath: + path: "/var/lib/mysql" diff --git a/charts/keep/templates/keep-db-pvc.yaml b/charts/keep/templates/keep-db-pvc.yaml new file mode 100644 index 0000000..d941fc2 --- /dev/null +++ b/charts/keep/templates/keep-db-pvc.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: {{ include "keep.fullname" . }}-pvc +spec: + accessModes: + - ReadWriteOnce + storageClassName: {{ .Values.database.storageClasss }} + resources: + requests: + storage: 5Gi diff --git a/charts/keep/templates/keep-db-service.yaml b/charts/keep/templates/keep-db-service.yaml new file mode 100644 index 0000000..7e1d0e5 --- /dev/null +++ b/charts/keep/templates/keep-db-service.yaml @@ -0,0 +1,17 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "keep.fullname" . }}-database + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: database-service +spec: + type: {{ .Values.database.service.type }} + ports: + - port: {{ .Values.database.service.port }} + targetPort: 3306 + protocol: TCP + name: mysql + selector: + {{- include "keep.selectorLabels" . | nindent 4 }} + keep-component: database diff --git a/charts/keep/templates/keep-db.yaml b/charts/keep/templates/keep-db.yaml new file mode 100644 index 0000000..547540d --- /dev/null +++ b/charts/keep/templates/keep-db.yaml @@ -0,0 +1,68 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "keep.fullname" . }}-database + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: database +spec: + {{- if not .Values.database.autoscaling.enabled }} + replicas: {{ .Values.database.replicaCount }} + {{- end }} + selector: + matchLabels: + {{- include "keep.selectorLabels" . | nindent 6 }} + template: + metadata: + {{- with .Values.database.podAnnotations }} + annotations: + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "keep.selectorLabels" . | nindent 8 }} + keep-component: database + spec: + {{- with .Values.database.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "keep.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.database.podSecurityContext | nindent 8 }} + containers: + - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.database.securityContext | nindent 12 }} + image: "{{ .Values.database.image.repository }}:{{ .Values.database.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.database.image.pullPolicy }} + ports: + - name: mysql + containerPort: {{ .Values.database.service.port }} + protocol: TCP + env: + {{- range .Values.database.env }} + - name: {{ .name }} + value: {{ .value | quote }} + {{- end }} + volumeMounts: + - mountPath: /var/lib/mysql + name: {{ include "keep.fullname" . }}-pv + readOnly: false + resources: + {{- toYaml .Values.database.resources | nindent 12 }} + {{- with .Values.database.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.database.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.database.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} + volumes: + - name: {{ include "keep.fullname" . }}-pv + persistentVolumeClaim: + claimName: {{ include "keep.fullname" . }}-pvc diff --git a/charts/keep/templates/keep-frontend-service.yaml b/charts/keep/templates/keep-frontend-service.yaml new file mode 100644 index 0000000..774de3e --- /dev/null +++ b/charts/keep/templates/keep-frontend-service.yaml @@ -0,0 +1,17 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "keep.fullname" . }}-frontend + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: frontend-service +spec: + type: {{ .Values.frontend.service.type }} + ports: + - port: {{ .Values.frontend.service.port }} + targetPort: http + protocol: TCP + name: http + selector: + {{- include "keep.selectorLabels" . | nindent 4 }} + keep-component: frontend diff --git a/charts/keep/templates/keep-frontend.yaml b/charts/keep/templates/keep-frontend.yaml new file mode 100644 index 0000000..bbe04e6 --- /dev/null +++ b/charts/keep/templates/keep-frontend.yaml @@ -0,0 +1,75 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "keep.fullname" . }}-frontend + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: frontend +spec: + {{- if not .Values.frontend.autoscaling.enabled }} + replicas: {{ .Values.frontend.replicaCount }} + {{- end }} + selector: + matchLabels: + {{- include "keep.selectorLabels" . | nindent 6 }} + template: + metadata: + {{- with .Values.frontend.podAnnotations }} + annotations: + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "keep.selectorLabels" . | nindent 8 }} + keep-component: frontend + spec: + {{- with .Values.frontend.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "keep.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.frontend.podSecurityContext | nindent 8 }} + containers: + - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.frontend.securityContext | nindent 12 }} + image: "{{ .Values.frontend.image.repository }}" # :{{ .Values.frontend.image.tag | default .Chart.AppVersion }} + imagePullPolicy: {{ .Values.frontend.image.pullPolicy }} + ports: + - name: http + containerPort: {{ .Values.frontend.service.port }} + protocol: TCP + env: + {{- range .Values.frontend.env }} + - name: {{ .name }} + value: {{ .value | quote }} + {{- end }} + volumeMounts: + - name: state-volume + mountPath: /state + readOnly: false + # livenessProbe: + # httpGet: + # path: / + # port: http + # readinessProbe: + # httpGet: + # path: / + # port: http + resources: + {{- toYaml .Values.frontend.resources | nindent 12 }} + {{- with .Values.frontend.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.frontend.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.frontend.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} + volumes: + - name: state-volume + emptyDir: {} diff --git a/charts/keep/templates/keep-websocket-server-service.yaml b/charts/keep/templates/keep-websocket-server-service.yaml new file mode 100644 index 0000000..4911495 --- /dev/null +++ b/charts/keep/templates/keep-websocket-server-service.yaml @@ -0,0 +1,17 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ include "keep.fullname" . }}-websocket + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: websocket-service +spec: + type: {{ .Values.websocket.service.type }} + ports: + - port: {{ .Values.websocket.service.port }} + targetPort: http + protocol: TCP + name: http + selector: + {{- include "keep.selectorLabels" . | nindent 4 }} + keep-component: websocket diff --git a/charts/keep/templates/keep-websocket-server.yaml b/charts/keep/templates/keep-websocket-server.yaml new file mode 100644 index 0000000..1744ea7 --- /dev/null +++ b/charts/keep/templates/keep-websocket-server.yaml @@ -0,0 +1,75 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "keep.fullname" . }}-websocket + labels: + {{- include "keep.labels" . | nindent 4 }} + keep-component: websocket +spec: + {{- if not .Values.frontend.autoscaling.enabled }} + replicas: {{ .Values.websocket.replicaCount }} + {{- end }} + selector: + matchLabels: + {{- include "keep.selectorLabels" . | nindent 6 }} + template: + metadata: + {{- with .Values.websocket.podAnnotations }} + annotations: + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "keep.selectorLabels" . | nindent 8 }} + keep-component: websocket + spec: + {{- with .Values.websocket.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + serviceAccountName: {{ include "keep.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.websocket.podSecurityContext | nindent 8 }} + containers: + - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.websocket.securityContext | nindent 12 }} + image: "{{ .Values.websocket.image.repository }}" # :{{ .Values.frontend.image.tag | default .Chart.AppVersion }} + imagePullPolicy: {{ .Values.websocket.image.pullPolicy }} + ports: + - name: http + containerPort: {{ .Values.websocket.service.port }} + protocol: TCP + env: + {{- range .Values.websocket.env }} + - name: {{ .name }} + value: {{ .value | quote }} + {{- end }} + volumeMounts: + - name: state-volume + mountPath: /state + readOnly: false + # livenessProbe: + # httpGet: + # path: / + # port: http + # readinessProbe: + # httpGet: + # path: / + # port: http + resources: + {{- toYaml .Values.websocket.resources | nindent 12 }} + {{- with .Values.websocket.nodeSelector }} + nodeSelector: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.websocket.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} + {{- with .Values.websocket.tolerations }} + tolerations: + {{- toYaml . | nindent 8 }} + {{- end }} + volumes: + - name: state-volume + emptyDir: {} diff --git a/charts/keep/templates/serviceaccount.yaml b/charts/keep/templates/serviceaccount.yaml new file mode 100644 index 0000000..2289734 --- /dev/null +++ b/charts/keep/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +{{- if .Values.serviceAccount.create -}} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "keep.serviceAccountName" . }} + labels: + {{- include "keep.labels" . | nindent 4 }} + {{- with .Values.serviceAccount.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +{{- end }} diff --git a/charts/keep/values.yaml b/charts/keep/values.yaml new file mode 100644 index 0000000..d378b62 --- /dev/null +++ b/charts/keep/values.yaml @@ -0,0 +1,215 @@ +namespace: default +serviceAccount: + create: true + annotations: {} + name: "" +nameOverride: "" +fullnameOverride: "" + +backend: + enabled: true + env: + - name: SECRET_MANAGER_TYPE + value: k8s + - name: PORT + value: "8080" + - name: SECRET_MANAGER_DIRECTORY + value: /state + - name: DATABASE_CONNECTION_STRING + value: mysql+pymysql://root@keep-database:3306/keep + - name: PUSHER_APP_ID + value: 1 + - name: PUSHER_APP_KEY + value: keepappkey + - name: PUSHER_APP_SECRET + value: keepappsecret + - name: PUSHER_HOST + value: keep-websocket + - name: PUSHER_PORT + value: 6001 + openAiApi: + enabled: false + openAiApiKey: "" + replicaCount: 1 + image: + repository: us-central1-docker.pkg.dev/keephq/keep/keep-api + pullPolicy: Always + tag: "latest" + imagePullSecrets: [] + podAnnotations: {} + podSecurityContext: {} + securityContext: {} + service: + type: ClusterIP + port: 8080 + ingress: + enabled: true + className: "" + annotations: {} + hosts: + - host: chart-example-backend.local + paths: + - path: / + pathType: ImplementationSpecific + tls: [] + route: + enabled: false + host: chart-example-backend.local + path: / + tls: [] + wildcardPolicy: None + resources: {} + autoscaling: + enabled: false + minReplicas: 1 + maxReplicas: 3 + targetCPUUtilizationPercentage: 80 + nodeSelector: {} + tolerations: [] + affinity: {} + +frontend: + enabled: true + env: + - name: NEXTAUTH_SECRET + value: secret + - name: NEXTAUTH_URL + value: http://localhost:3000 + - name: API_URL + value: http://keep-backend:8080 + - name: NEXT_PUBLIC_API_URL + value: "" + - name: NEXT_PUBLIC_POSTHOG_KEY + value: "phc_muk9qE3TfZsX3SZ9XxX52kCGJBclrjhkP9JxAQcm1PZ" + - name: NEXT_PUBLIC_POSTHOG_HOST + value: https://app.posthog.com + - name: ENV + value: development + - name: NODE_ENV + value: development + - name: HOSTNAME + value: 0.0.0.0 + - name: PUSHER_HOST + value: localhost + - name: PUSHER_PORT + value: 6001 + - name: PUSHER_APP_KEY + value: "keepappkey" + replicaCount: 1 + image: + repository: us-central1-docker.pkg.dev/keephq/keep/keep-ui + pullPolicy: Always + tag: "latest" + imagePullSecrets: [] + serviceAccount: + create: true + annotations: {} + name: "" + podAnnotations: {} + podSecurityContext: {} + securityContext: {} + service: + type: ClusterIP + port: 3000 + ingress: + enabled: true + className: "" + annotations: {} + hosts: + - host: chart-example.local + paths: + - path: / + pathType: ImplementationSpecific + tls: [] + route: + enabled: false + host: chart-example.local + path: / + tls: [] + wildcardPolicy: None + resources: {} + autoscaling: + enabled: false + minReplicas: 1 + maxReplicas: 3 + targetCPUUtilizationPercentage: 80 + nodeSelector: {} + tolerations: [] + affinity: {} + +websocket: + enabled: true + env: + - name: SOKETI_USER_AUTHENTICATION_TIMEOUT + value: 3000 + - name: SOKETI_DEFAULT_APP_ID + value: 1 + - name: SOKETI_DEFAULT_APP_KEY + value: keepappkey + - name: SOKETI_DEFAULT_APP_SECRET + value: keepappsecret + replicaCount: 1 + image: + repository: quay.io/soketi/soketi:1.4-16-debian + pullPolicy: Always + tag: "latest" + imagePullSecrets: [] + serviceAccount: + create: true + annotations: {} + name: "" + podAnnotations: {} + podSecurityContext: {} + securityContext: {} + service: + type: ClusterIP + port: 6001 + ingress: + enabled: false + className: "" + annotations: {} + hosts: + - host: chart-example.local + paths: + - path: / + pathType: ImplementationSpecific + tls: [] + resources: {} + autoscaling: + enabled: false + minReplicas: 1 + maxReplicas: 3 + targetCPUUtilizationPercentage: 80 + nodeSelector: {} + tolerations: [] + affinity: {} + +database: + enabled: true + replicaCount: 1 + size: 5Gi + storageClasss: "" + image: + repository: mysql + pullPolicy: IfNotPresent + tag: "latest" + env: + - name: MYSQL_ALLOW_EMPTY_PASSWORD + value: yes + - name: MYSQL_DATABASE + value: keep + - name: MYSQL_PASSWORD + value: null + imagePullSecrets: [] + podAnnotations: {} + podSecurityContext: {} + securityContext: {} + service: + type: ClusterIP + port: 3306 + resources: {} + autoscaling: + enabled: false + nodeSelector: {} + tolerations: [] + affinity: {} diff --git a/ct.yml b/ct.yml new file mode 100644 index 0000000..0a2dfa5 --- /dev/null +++ b/ct.yml @@ -0,0 +1,9 @@ +remote: origin +target-branch: main +debug: true +check-version-increment: false +helm-extra-args: --timeout 15m +charts: + - charts/keep +chart-repos: + - keep=https://keephq.github.io/helm-charts # TODO: replace with custom domain