From 9fc7e58414da0d001d23690cf2d243964df71a4d Mon Sep 17 00:00:00 2001 From: Manuel Raynaud Date: Thu, 9 Jan 2025 16:53:34 +0100 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7(core)=20update=20tilt=20and=20helm?= =?UTF-8?q?=20files=20to=20make=20it=20works?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Opensearch was missing in the dev dependencies when deploying in a local k8s using Tilt. Also the secrets and values have been updated accordingly to make it works. --- bin/Tiltfile | 34 +++--- src/helm/env.d/dev/secrets.enc.yaml | 8 +- src/helm/env.d/dev/values.find.yaml.gotmpl | 40 +++++-- .../env.d/preprod/values.find.yaml.gotmpl | 26 ++-- .../env.d/production/values.find.yaml.gotmpl | 26 ++-- .../env.d/staging/values.find.yaml.gotmpl | 26 ++-- .../templates/backend_secret.yaml} | 4 +- src/helm/find/templates/ingress_media.yaml | 84 ------------- src/helm/helmfile.yaml | 111 ++++++++++-------- 9 files changed, 148 insertions(+), 211 deletions(-) rename src/helm/{extra/templates/secrets.yaml => find/templates/backend_secret.yaml} (72%) delete mode 100644 src/helm/find/templates/ingress_media.yaml diff --git a/bin/Tiltfile b/bin/Tiltfile index 773f481..a844b93 100644 --- a/bin/Tiltfile +++ b/bin/Tiltfile @@ -11,8 +11,8 @@ docker_build( live_update=[ sync('../src/backend', '/app'), run( - 'pip install -r /app/requirements.txt', - trigger=['./api/requirements.txt'] + 'pip install .', + trigger=['../src/backend/pyproject.toml'] ) ] ) @@ -20,28 +20,28 @@ docker_build( k8s_yaml(local('cd ../src/helm && helmfile -n find -e dev template .')) -migration = ''' -set -eu -# get k8s pod name from tilt resource name -POD_NAME="$(tilt get kubernetesdiscovery find-backend -ojsonpath='{.status.pods[0].name}')" -kubectl -n find exec "$POD_NAME" -- python manage.py makemigrations -''' -cmd_button('Make migration', - argv=['sh', '-c', migration], - resource='find-backend', - icon_name='developer_board', - text='Run makemigration', -) - -pod_migrate = ''' +migrate_db = ''' set -eu # get k8s pod name from tilt resource name POD_NAME="$(tilt get kubernetesdiscovery find-backend -ojsonpath='{.status.pods[0].name}')" kubectl -n find exec "$POD_NAME" -- python manage.py migrate --no-input ''' cmd_button('Migrate db', - argv=['sh', '-c', pod_migrate], + argv=['sh', '-c', migrate_db], resource='find-backend', icon_name='developer_board', text='Run database migration', ) + +create_demo = ''' +set -eu +# get k8s pod name from tilt resource name +POD_NAME="$(tilt get kubernetesdiscovery find-backend -ojsonpath='{.status.pods[0].name}')" +kubectl -n find exec "$POD_NAME" -- python manage.py create_demo --force +''' +cmd_button('Create demo fixtures', + argv=['sh', '-c', create_demo], + resource='find-backend', + icon_name='developer_board', + text='Run demo fixtures', +) diff --git a/src/helm/env.d/dev/secrets.enc.yaml b/src/helm/env.d/dev/secrets.enc.yaml index 6e03269..35bd282 100644 --- a/src/helm/env.d/dev/secrets.enc.yaml +++ b/src/helm/env.d/dev/secrets.enc.yaml @@ -1,6 +1,8 @@ djangoSuperUserEmail: ENC[AES256_GCM,data:7b1xfYmr1g0RlBmsHBRA39ZPV/6+1DrtHQ==,iv:/GW7oLxPTZYmRWVPvyAQMoZl1owHM4Fo0XAOtyEh2rA=,tag:DaqoW+dglyAOXMm5+mrDfA==,type:str] djangoSuperUserPass: ENC[AES256_GCM,data:RQgX,iv:q3CdfmwGfHSTjLXTimDk/1MyoFLviRuwmZa2E7GUzhY=,tag:HCtdtqgSxdJIHFhI8xpegQ==,type:str] djangoSecretKey: ENC[AES256_GCM,data:mtJCf6mKfj/fJkg4wmfIvvU1vkUEF77BI8TUFikp/M3nPveDXhKmy3Cw3cXFpOYiFZ0=,iv:qwPRKsPS1Jhylj5asbmknXm1xOX3nfp9iccuorUrcj0=,tag:ENVfAt4i3PttoqD8+Kc4wQ==,type:str] +opensearch: + password: ENC[AES256_GCM,data:y4iWSEwW5u1W3vPx,iv:1A9qIUELbqSIdKL+CXn1CshR3g1jMJVgw+VsJHZU9Q8=,tag:6S6RKSC5mnUZP3epcpd5jQ==,type:str] oidc: clientId: ENC[AES256_GCM,data:wndPCbysbWDybdHglcG+wkMWk1rrD40hKqFxct9T3TLEGOk/,iv:RH1OdBX1GYIT90sSq0AGz49fFi6dL0m49Pegs6Ko9tQ=,tag:/tKytQwoZkBX1Tf96gAjIA==,type:str] clientSecret: ENC[AES256_GCM,data:MUJ0wsg+LC2QZ1jZ0Twd3FS3dQevmJq9/97qVI3ARHuJIVlQz0Qah4vE7/iR+sn7ME2o1s1AzV4c1Yx/F3nHBg==,iv:LvinICSzF/8EvrHZD4Jp6lt7g3yxSOEgVHPrc3SShjo=,tag:yvkyyBXmhEkmGL7jZevUCA==,type:str] @@ -64,8 +66,8 @@ sops: b0tsOEExQ1gyTEx3VVR3c1MrRkw3QkUK7pLI3R0p+07URlC3nTsXEnxkbX3KuIxv JjsDoCnG+p45moQYzSh6tokfIxJKQDt4EJCuQCgHU5twb17aWt9Q7A== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-07-02T10:03:17Z" - mac: ENC[AES256_GCM,data:qx236E1cFtBmbYyUf6B95/Fwu2hoi9ZAhUcYiY/tsG9h1+kwXntfkvbH3ekyI7A5ZrpJXMeQZ7gLc+ohci4m5Ju+/G39MjMt+ww0Y6gBMqe59YlHfeFD2mYsnn9j1pqtbrIJ6+8fLDmhaXtGtXP3qRmFTc9LwL6Rm+5gn8cjcnA=,iv:TC7zBnQ0hRz0JSytrYVnyJiI1eMWRTBqctLajZYUhvU=,tag:wCBeo2xD5UpdRqGjkZxbXA==,type:str] + lastmodified: "2025-01-08T14:01:47Z" + mac: ENC[AES256_GCM,data:hVzGwnVOD1snyhLF6ov6bzbce0F9kXIaLAYRlKFzIzkFXlMpud/yOlITqIX1LWp5Opbl5VUc7GGp4PkLUm5bi+uRClLr93/qtyZa0Lp71SDyKnvhOKfNaJsmWWxKHHiFsKPT92xxxjf/m4/KK1hpiOy4SjSVtJoIDVTZrSN+RPQ=,iv:U2HqHsf0KO6KibZylg7SoQ0ART72OKwkLWiW11fukrs=,tag:gm4jXekjLJpbvjpypGk6KA==,type:str] pgp: [] unencrypted_suffix: _unencrypted - version: 3.8.1 + version: 3.9.3 diff --git a/src/helm/env.d/dev/values.find.yaml.gotmpl b/src/helm/env.d/dev/values.find.yaml.gotmpl index 03d6948..8398bf2 100644 --- a/src/helm/env.d/dev/values.find.yaml.gotmpl +++ b/src/helm/env.d/dev/values.find.yaml.gotmpl @@ -9,9 +9,19 @@ backend: DJANGO_CSRF_TRUSTED_ORIGINS: https://find.127.0.0.1.nip.io,http://find.127.0.0.1.nip.io DJANGO_CONFIGURATION: Production DJANGO_ALLOWED_HOSTS: "*" - DJANGO_SECRET_KEY: {{ .Values.djangoSecretKey }} + DJANGO_SECRET_KEY: + secretKeyRef: + name: find-backend + key: DJANGO_SECRET_KEY DJANGO_SETTINGS_MODULE: find.settings - DJANGO_SUPERUSER_PASSWORD: admin + DJANGO_SUPERUSER_EMAIL: + secretKeyRef: + name: find-backend + key: DJANGO_SUPERUSER_EMAIL + DJANGO_SUPERUSER_PASSWORD: + secretKeyRef: + name: find-backend + key: DJANGO_SUPERUSER_PASSWORD DJANGO_EMAIL_HOST: "mailcatcher" DJANGO_EMAIL_PORT: 1025 DJANGO_EMAIL_USE_SSL: False @@ -20,8 +30,14 @@ backend: OIDC_OP_TOKEN_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/token OIDC_OP_USER_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/userinfo OIDC_OP_LOGOUT_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/session/end - OIDC_RP_CLIENT_ID: {{ .Values.oidc.clientId }} - OIDC_RP_CLIENT_SECRET: {{ .Values.oidc.clientSecret }} + OIDC_RP_CLIENT_ID: + secretKeyRef: + name: find-backend + key: OIDC_RP_CLIENT_ID + OIDC_RP_CLIENT_SECRET: + secretKeyRef: + name: find-backend + key: OIDC_RP_CLIENT_SECRET OIDC_RP_SIGN_ALGO: RS256 OIDC_RP_SCOPES: "openid email" OIDC_REDIRECT_ALLOWED_HOSTS: https://find.127.0.0.1.nip.io @@ -39,14 +55,20 @@ backend: POSTGRES_PASSWORD: pass REDIS_URL: redis://default:pass@redis-master:6379/1 STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage + OPENSEARCH_HOST: opensearch + OPENSEARCH_USE_SSL: False + OPENSEARCH_PORT: 9200 + OPENSEARCH_PASSWORD: + secretKeyRef: + name: find-backend + key: OPENSEARCH_PASSWORD migrate: command: - - "/bin/sh" + - "/bin/bash" - "-c" - | - python manage.py migrate --no-input && - python manage.py create_demo --force + python manage.py migrate --no-input restartPolicy: Never command: @@ -58,10 +80,10 @@ backend: createsuperuser: command: - - "/bin/sh" + - "/bin/bash" - "-c" - | - shell -c "from core.models import User; not User.objects.filter(username='admin').exists() and User.objects.create_superuser('admin', 'admin@example.com', 'admin')" + python manage.py shell -c "from core.models import User; not User.objects.filter(username='admin').exists() and User.objects.create_superuser('admin', 'admin@example.com', 'admin')" restartPolicy: Never ingress: diff --git a/src/helm/env.d/preprod/values.find.yaml.gotmpl b/src/helm/env.d/preprod/values.find.yaml.gotmpl index 92564fd..d64d89b 100644 --- a/src/helm/env.d/preprod/values.find.yaml.gotmpl +++ b/src/helm/env.d/preprod/values.find.yaml.gotmpl @@ -13,16 +13,16 @@ backend: DJANGO_ALLOWED_HOSTS: "*" DJANGO_SUPERUSER_EMAIL: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SUPERUSER_EMAIL DJANGO_SECRET_KEY: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SECRET_KEY DJANGO_SETTINGS_MODULE: find.settings DJANGO_SUPERUSER_PASSWORD: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SUPERUSER_PASSWORD DJANGO_EMAIL_HOST: "snap-mail.numerique.gouv.fr" DJANGO_EMAIL_PORT: 465 @@ -35,11 +35,11 @@ backend: OIDC_OP_LOGOUT_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/session/end OIDC_RP_CLIENT_ID: secretKeyRef: - name: backend + name: find-backend key: OIDC_RP_CLIENT_ID OIDC_RP_CLIENT_SECRET: secretKeyRef: - name: backend + name: find-backend key: OIDC_RP_CLIENT_SECRET OIDC_RP_SIGN_ALGO: RS256 OIDC_RP_SCOPES: "openid email" @@ -68,18 +68,6 @@ backend: secretKeyRef: name: postgresql.postgres.libre.sh key: port - POSTGRES_USER: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: username - POSTGRES_DB: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: database - POSTGRES_PASSWORD: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: password REDIS_URL: secretKeyRef: name: redis.redis.libre.sh @@ -102,6 +90,10 @@ backend: key: bucket AWS_S3_REGION_NAME: local STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage + OPENSEARCH_PASSWORD: + secretKeyRef: + name: find-backend + key: OPENSEARCH_PASSWORD createsuperuser: command: diff --git a/src/helm/env.d/production/values.find.yaml.gotmpl b/src/helm/env.d/production/values.find.yaml.gotmpl index 7611ffb..419a5dc 100644 --- a/src/helm/env.d/production/values.find.yaml.gotmpl +++ b/src/helm/env.d/production/values.find.yaml.gotmpl @@ -13,16 +13,16 @@ backend: DJANGO_ALLOWED_HOSTS: "*" DJANGO_SECRET_KEY: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SECRET_KEY DJANGO_SETTINGS_MODULE: find.settings DJANGO_SUPERUSER_EMAIL: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SUPERUSER_EMAIL DJANGO_SUPERUSER_PASSWORD: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SUPERUSER_PASSWORD DJANGO_EMAIL_HOST: "snap-mail.numerique.gouv.fr" DJANGO_EMAIL_PORT: 465 @@ -35,11 +35,11 @@ backend: OIDC_OP_LOGOUT_ENDPOINT: https://auth.agentconnect.gouv.fr/api/v2/session/end OIDC_RP_CLIENT_ID: secretKeyRef: - name: backend + name: find-backend key: OIDC_RP_CLIENT_ID OIDC_RP_CLIENT_SECRET: secretKeyRef: - name: backend + name: find-backend key: OIDC_RP_CLIENT_SECRET OIDC_RP_SIGN_ALGO: RS256 OIDC_RP_SCOPES: "openid email" @@ -68,18 +68,6 @@ backend: secretKeyRef: name: postgresql.postgres.libre.sh key: port - POSTGRES_USER: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: username - POSTGRES_DB: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: database - POSTGRES_PASSWORD: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: password REDIS_URL: secretKeyRef: name: redis.redis.libre.sh @@ -102,6 +90,10 @@ backend: key: bucket AWS_S3_REGION_NAME: local STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage + OPENSEARCH_PASSWORD: + secretKeyRef: + name: find-backend + key: OPENSEARCH_PASSWORD createsuperuser: command: diff --git a/src/helm/env.d/staging/values.find.yaml.gotmpl b/src/helm/env.d/staging/values.find.yaml.gotmpl index bed6561..7b56248 100644 --- a/src/helm/env.d/staging/values.find.yaml.gotmpl +++ b/src/helm/env.d/staging/values.find.yaml.gotmpl @@ -13,16 +13,16 @@ backend: DJANGO_ALLOWED_HOSTS: "*" DJANGO_SECRET_KEY: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SECRET_KEY DJANGO_SETTINGS_MODULE: find.settings DJANGO_SUPERUSER_EMAIL: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SUPERUSER_EMAIL DJANGO_SUPERUSER_PASSWORD: secretKeyRef: - name: backend + name: find-backend key: DJANGO_SUPERUSER_PASSWORD DJANGO_EMAIL_HOST: "snap-mail.numerique.gouv.fr" DJANGO_EMAIL_PORT: 465 @@ -35,11 +35,11 @@ backend: OIDC_OP_LOGOUT_ENDPOINT: https://fca.integ01.dev-agentconnect.fr/api/v2/session/end OIDC_RP_CLIENT_ID: secretKeyRef: - name: backend + name: find-backend key: OIDC_RP_CLIENT_ID OIDC_RP_CLIENT_SECRET: secretKeyRef: - name: backend + name: find-backend key: OIDC_RP_CLIENT_SECRET OIDC_RP_SIGN_ALGO: RS256 OIDC_RP_SCOPES: "openid email" @@ -68,18 +68,6 @@ backend: secretKeyRef: name: postgresql.postgres.libre.sh key: port - POSTGRES_USER: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: username - POSTGRES_DB: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: database - POSTGRES_PASSWORD: - secretKeyRef: - name: postgresql.postgres.libre.sh - key: password REDIS_URL: secretKeyRef: name: redis.redis.libre.sh @@ -102,6 +90,10 @@ backend: key: bucket AWS_S3_REGION_NAME: local STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage + OPENSEARCH_PASSWORD: + secretKeyRef: + name: find-backend + key: OPENSEARCH_PASSWORD createsuperuser: command: diff --git a/src/helm/extra/templates/secrets.yaml b/src/helm/find/templates/backend_secret.yaml similarity index 72% rename from src/helm/extra/templates/secrets.yaml rename to src/helm/find/templates/backend_secret.yaml index e0e7849..2cef223 100644 --- a/src/helm/extra/templates/secrets.yaml +++ b/src/helm/find/templates/backend_secret.yaml @@ -1,10 +1,12 @@ apiVersion: v1 kind: Secret metadata: - name: backend + name: find-backend + namespace: {{ .Release.Namespace | quote }} stringData: DJANGO_SUPERUSER_EMAIL: {{ .Values.djangoSuperUserEmail }} DJANGO_SUPERUSER_PASSWORD: {{ .Values.djangoSuperUserPass }} DJANGO_SECRET_KEY: {{ .Values.djangoSecretKey }} OIDC_RP_CLIENT_ID: {{ .Values.oidc.clientId }} OIDC_RP_CLIENT_SECRET: {{ .Values.oidc.clientSecret }} + OPENSEARCH_PASSWORD: {{ .Values.opensearch.password }} diff --git a/src/helm/find/templates/ingress_media.yaml b/src/helm/find/templates/ingress_media.yaml deleted file mode 100644 index 618e216..0000000 --- a/src/helm/find/templates/ingress_media.yaml +++ /dev/null @@ -1,84 +0,0 @@ -{{- if .Values.ingressMedia.enabled -}} -{{- $fullName := include "find.fullname" . -}} -{{- if and .Values.ingressMedia.className (not (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion)) }} - {{- if not (hasKey .Values.ingressMedia.annotations "kubernetes.io/ingress.class") }} - {{- $_ := set .Values.ingressMedia.annotations "kubernetes.io/ingress.class" .Values.ingressMedia.className}} - {{- end }} -{{- end }} -{{- if semverCompare ">=1.19-0" .Capabilities.KubeVersion.GitVersion -}} -apiVersion: networking.k8s.io/v1 -{{- else if semverCompare ">=1.14-0" .Capabilities.KubeVersion.GitVersion -}} -apiVersion: networking.k8s.io/v1beta1 -{{- else -}} -apiVersion: extensions/v1beta1 -{{- end }} -kind: Ingress -metadata: - name: {{ $fullName }}-media - namespace: {{ .Release.Namespace | quote }} - labels: - {{- include "find.labels" . | nindent 4 }} - {{- with .Values.ingressMedia.annotations }} - annotations: - {{- toYaml . | nindent 4 }} - {{- end }} -spec: - {{- if and .Values.ingressMedia.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }} - ingressClassName: {{ .Values.ingressMedia.className }} - {{- end }} - {{- if .Values.ingressMedia.tls.enabled }} - tls: - {{- if .Values.ingressMedia.host }} - - secretName: {{ $fullName }}-tls - hosts: - - {{ .Values.ingressMedia.host | quote }} - {{- end }} - {{- range .Values.ingressMedia.tls.additional }} - - hosts: - {{- range .hosts }} - - {{ . | quote }} - {{- end }} - secretName: {{ .secretName }} - {{- end }} - {{- end }} - rules: - {{- if .Values.ingressMedia.host }} - - host: {{ .Values.ingressMedia.host | quote }} - http: - paths: - - path: {{ .Values.ingressMedia.path | quote }} - {{- if semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion }} - pathType: Prefix - {{- end }} - backend: - {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} - service: - name: {{ include "find.backend.fullname" . }} - port: - number: {{ .Values.backend.service.port }} - {{- else }} - serviceName: {{ include "find.backend.fullname" . }} - servicePort: {{ .Values.backend.service.port }} - {{- end }} - {{- end }} - {{- range .Values.ingressMedia.hosts }} - - host: {{ . | quote }} - http: - paths: - - path: {{ $.Values.ingressMedia.path | quote }} - {{- if semverCompare ">=1.18-0" $.Capabilities.KubeVersion.GitVersion }} - pathType: Prefix - {{- end }} - backend: - {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }} - service: - name: {{ include "find.backend.fullname" $ }} - port: - number: {{ $.Values.backend.service.port }} - {{- else }} - serviceName: {{ include "find.backend.fullname" $ }} - servicePort: {{ $.Values.backend.service.port }} - {{- end }} - {{- end }} -{{- end }} - diff --git a/src/helm/helmfile.yaml b/src/helm/helmfile.yaml index 0e0d57e..437efe8 100644 --- a/src/helm/helmfile.yaml +++ b/src/helm/helmfile.yaml @@ -1,49 +1,4 @@ -repositories: -- name: bitnami - url: registry-1.docker.io/bitnamicharts - oci: true - -releases: - - name: postgres - installed: {{ eq .Environment.Name "dev" | toYaml }} - namespace: {{ .Namespace }} - chart: bitnami/postgresql - version: 13.1.5 - values: - - auth: - username: dinum - password: pass - database: find - - tls: - enabled: true - autoGenerated: true - - - name: redis - installed: {{ eq .Environment.Name "dev" | toYaml }} - namespace: {{ .Namespace }} - chart: bitnami/redis - version: 18.19.2 - values: - - auth: - password: pass - architecture: standalone - - - name: extra - installed: {{ ne .Environment.Name "dev" | toYaml }} - namespace: {{ .Namespace }} - chart: ./extra - secrets: - - env.d/{{ .Environment.Name }}/secrets.enc.yaml - - - name: find - version: {{ .Values.version }} - namespace: {{ .Namespace }} - chart: ./find - values: - - env.d/{{ .Environment.Name }}/values.find.yaml.gotmpl - secrets: - - env.d/{{ .Environment.Name }}/secrets.enc.yaml - +--- environments: dev: values: @@ -65,3 +20,67 @@ environments: - version: 0.0.1 secrets: - env.d/{{ .Environment.Name }}/secrets.enc.yaml +--- +repositories: + - name: bitnami + url: registry-1.docker.io/bitnamicharts + oci: true + +releases: + - name: postgres + installed: {{ eq .Environment.Name "dev" | toYaml }} + namespace: {{ .Namespace }} + chart: bitnami/postgresql + version: 13.1.5 + values: + - image: + tag: 15.10.0 + - auth: + username: dinum + password: pass + database: find + - tls: + enabled: true + autoGenerated: true + + - name: redis + installed: {{ eq .Environment.Name "dev" | toYaml }} + namespace: {{ .Namespace }} + chart: bitnami/redis + version: 18.19.2 + values: + - auth: + password: pass + architecture: standalone + + - name: opensearch + installed: {{ eq .Environment.Name "dev" | toYaml }} + namespace: {{ .Namespace }} + chart: bitnami/opensearch + version: 1.5.1 + values: + - security: + adminPassword: {{ .Values.opensearch.password }} + - dashboards: + enabled: true + ingress: + enabled: true + hostname: opensearch-dashboard.127.0.0.1.nip.io + tls: true + selfSigned: true + + - name: extra + installed: {{ ne .Environment.Name "dev" | toYaml }} + namespace: {{ .Namespace }} + chart: ./extra + secrets: + - env.d/{{ .Environment.Name }}/secrets.enc.yaml + + - name: find + version: {{ .Values.version }} + namespace: {{ .Namespace }} + chart: ./find + values: + - env.d/{{ .Environment.Name }}/values.find.yaml.gotmpl + secrets: + - env.d/{{ .Environment.Name }}/secrets.enc.yaml