Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature/helm chart #16

Merged
merged 34 commits into from
Nov 22, 2024
Merged

Feature/helm chart #16

merged 34 commits into from
Nov 22, 2024

Conversation

Lusengeri
Copy link
Contributor

@Lusengeri Lusengeri commented Nov 21, 2024 •
edited
Loading

Addresses

Changes

  • Introduced an 'Azure-Ready' Helm chart that leverages the AKS Azure Secrets Provider to create a Kubernetes secret synchronized with Azure Key Vault.
  • Implemented the use of Kubernetes service accounts as application identities to securely access Azure Key Vault secrets, ensuring seamless and role-based authentication.
  • Added a configuration option to enable standard secrets provisioning when the Azure Key Vault Secrets Provider is not available.

This PR doesn't introduce any:

  • temporary files, auto-generated files or secret keys
  • n+1 queries
  • flake8 issues
  • print
  • typos
  • unwanted comments

This PR contains valid:

  • tests
  • permission checks (tests here too)
  • translations

@Lusengeri
add basic helm chart for api
0d95b9e
@Lusengeri
add workflow to test container image builds
32240b3
@Lusengeri
update api deployment
86010e7
@Lusengeri
add deployments for celery, include common configmap
94e5377
@Lusengeri
fix templates for SecretsProviderClass
4650747
@Lusengeri
add secret retrival/mounting config on api deployment
0d087de
@Lusengeri
fix template references in SecretsProviderClass
fbad176
@Lusengeri
fix template reference in ServiceAccount resource
c76a9c5
@Lusengeri
add test values file
8a244f4
@Lusengeri
add stakater-reloader annotation on api deployment
8ee14f6
@Lusengeri
add service and ingress for api
9b987c9
@Lusengeri
update ingressClassName
8e93131
@Lusengeri
add resource limits config on api
ac7edd7
@Lusengeri
update api resource requests
a87658e
@Lusengeri
add resource configs for celery
5117694
@Lusengeri
add reloader config on celery deployments
6c84457
@Lusengeri
update default values in values files
c5d9d7a
@Lusengeri
add chart publishing workflow
94dd4b8
@Lusengeri
update image build tag
c86707a
@Lusengeri
update chart-publish workflow
2f4fcc1
@Lusengeri
update chart-publish workflow
d5f3af6
@Lusengeri
change chart naming on chart-publish workflow
7995f7f
@Lusengeri
update image versioning on chart-publish workflow
b6c9f51
@Lusengeri
reorganize api manifests, update configmap
f77811e
@Lusengeri
update secret keys in values-test.yaml
45ece5b
@Lusengeri
fix typo in values files
b897f14
@Lusengeri
add secret keys on values-test.yml
12303a5
@Lusengeri
rename secrets config object
ad19592
@Lusengeri
reorganize chart files
318c2de
@Lusengeri
remove redundant jobs file
ac99c68
Lusengeri and others added 3 commits November 13, 2024 06:27
@Lusengeri
move secrets_provider_class config
ffb17a2
@Lusengeri
add imagePullSecrets spec on cronjobs, change worker resource requests
54250a4
@thenav56 @Lusengeri
Feature/helm chart merge (#15)
923aca0 
* Merge helm charts

* Publish helm chart for testing

* Add missed azure configurations

* Use standalone postgres

- Fix typo

* Remove feature/helm-chart-merge from helm-publish workflow

* Fix secret ref name

- Enable workflow_dispatch for helm publish

* add imagePullSecrets parameter on values files

* fix indentation error on SecreProviderClass resource

* add 'reloader.stakater' annotation on api deployment resource

---------

Co-authored-by: Moses Anzagi <[email protected]>
@Lusengeri Lusengeri requested a review from thenav56 November 21, 2024 11:30
@thenav56 thenav56 merged commit 95c09e3 into develop Nov 22, 2024
3 checks passed
@thenav56 thenav56 deleted the feature/helm-chart branch November 22, 2024 05:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@thenav56 thenav56 Awaiting requested review from thenav56

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Lusengeri @thenav56