chore: Update Helm values for pre-staging deployment

- Update image repositories to omnipdf-prestaging namespace
- Add environment variable configurations for all services
- Disable pod disruption budgets for pre-staging flexibility
- Update images.txt to reflect minimal translate-only release
- Add OpenShift-compatible security contexts for nginx
- Configure service endpoints and MinIO/Redis connections

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: NotYuSheng

helm/docling-translation-service/values.yaml

@@ -22,11 +22,11 @@ autoscaling:
 # Pre-staging secrets
 secrets:
   create: false
-  name: docling-translation-service-secrets
+  name: ""
 
 # Pre-staging specific configurations - using local CRC registry
 image:
-  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf/docling_translation_service
+  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf-prestaging/docling_translation_service
   tag: "dev-v0.0.3-5d69f89"
   pullPolicy: Always  # Use local registry image
 
@@ -38,6 +38,26 @@ env:
     value: "prestaging"
   - name: ENABLE_METRICS
     value: "true"
+  - name: REDIS_URL
+    value: "redis://redis:6379/0?decode_responses=True&protocol=3"
+  - name: MINIO_ENDPOINT
+    value: "http://minio:9000"
+  - name: MINIO_BUCKET
+    value: "omnifiles"
+  - name: MINIO_ACCESS_KEY
+    value: "minioadmin"
+  - name: MINIO_SECRET_KEY
+    value: "minioadmin"
+  - name: LLM_API_TOKEN
+    value: "token-abc123"
+  - name: LLM_BASE_URL
+    value: "http://100.108.2.57/vllm_sealion"
+  - name: LLM_MODEL
+    value: "Gemma2-9B-Sealion-V3-Instruct"
+  - name: LLM_CONCURRENCY
+    value: "5"
+  - name: TZ
+    value: "Asia/Singapore"
 
 # Network policy disabled for pre-staging flexibility
 networkPolicy:
@@ -68,7 +88,7 @@ networkPolicy:
 
 # Pod disruption budget for pre-staging (2 replicas, allow 1 down)
 podDisruptionBudget:
-  enabled: true
+  enabled: false
   minAvailable: 1
 
 # Moderate deployment strategy for pre-staging (balanced speed/safety)

helm/frontend/values.yaml

@@ -6,7 +6,7 @@ replicaCount: 1
 
 # Use local CRC registry image
 image:
-  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf/frontend
+  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf-prestaging/frontend
   tag: "dev-v0.0.3-5d69f89"
   pullPolicy: Always
 
@@ -117,6 +117,7 @@ tolerations:
 service:
   type: ClusterIP
   port: 8501
+  targetPort: 8501
 
 serviceAccount:
   create: false

helm/images.txt

@@ -1,20 +1,15 @@
-# OmniPDF Container Images
+# OmniPDF Translate - Minimal Release Container Images
 # Add your external image URLs here, one per line
 # Comments (lines starting with #) and empty lines are ignored
 
-# Core Application Services
+# Core Translation Services (Minimal Release)
 ghcr.io/notyusheng/frontend:dev-v0.0.3-5d69f89
-ghcr.io/notyusheng/embedder_service:dev-v0.0.3-5d69f89
 ghcr.io/notyusheng/pdf_processor_service:dev-v0.0.3-5d69f89
 ghcr.io/notyusheng/pdf_extraction_service:dev-v0.0.3-5d69f89
 ghcr.io/notyusheng/pdf_renderer_service:dev-v0.0.3-5d69f89
 ghcr.io/notyusheng/docling_translation_service:dev-v0.0.3-5d69f89
-ghcr.io/notyusheng/image_captioner_service:dev-v0.0.3-5d69f89
-ghcr.io/notyusheng/metadata_service:dev-v0.0.3-5d69f89
-ghcr.io/notyusheng/cleaner:dev-v0.0.3-5d69f89
 ghcr.io/notyusheng/nginx:dev-v0.0.3-5d69f89
 
-# Standard Services from Docker Hub
-docker.io/library/redis:8.2.1-alpine
-docker.io/minio/minio:RELEASE.2025-07-23T15-54-02Z
-docker.io/chromadb/chroma:1.0.20
+# Infrastructure Services (Already in CRC or public registries)
+# docker.io/library/redis:8.2.1-alpine - Using public image directly
+# docker.io/minio/minio:RELEASE.2025-07-23T15-54-02Z - Using public image directly

helm/minio/values.yaml

@@ -117,6 +117,7 @@ podAnnotations:
 service:
   type: ClusterIP
   port: 9000
+  consolePort: 9001
 
 serviceAccount:
   create: false

helm/nginx/values.yaml

@@ -19,11 +19,11 @@ autoscaling:
 # Pre-staging secrets
 secrets:
   create: false
-  name: nginx-secrets
+  name: ""
 
 # Pre-staging specific configurations - using local CRC registry
 image:
-  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf/nginx
+  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf-prestaging/nginx
   tag: "dev-v0.0.3-5d69f89"
   pullPolicy: Always  # Use local registry image
 
@@ -36,6 +36,15 @@ env:
   - name: ENABLE_METRICS
     value: "true"
 
+# OpenShift-compatible security context
+podSecurityContext: {}
+securityContext:
+  runAsNonRoot: true
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
+
 # Network policy enabled for external traffic entry point
 networkPolicy:
   enabled: true
@@ -56,7 +65,7 @@ networkPolicy:
 
 # Pod disruption budget for pre-staging (2 replicas, allow 1 down)
 podDisruptionBudget:
-  enabled: true
+  enabled: false
   minAvailable: 1
 
 # Moderate deployment strategy for pre-staging (balanced speed/safety)

helm/pdf-extraction-service/values.yaml

@@ -22,11 +22,11 @@ autoscaling:
 # Pre-staging secrets
 secrets:
   create: false
-  name: pdf-extraction-service-secrets
+  name: ""
 
 # Pre-staging specific configurations - using local CRC registry
 image:
-  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf/pdf_extraction_service
+  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf-prestaging/pdf_extraction_service
   tag: "dev-v0.0.3-5d69f89"
   pullPolicy: Always  # Use local registry image
 
@@ -38,6 +38,20 @@ env:
     value: "prestaging"
   - name: ENABLE_METRICS
     value: "true"
+  - name: REDIS_URL
+    value: "redis://redis:6379/0?decode_responses=True&protocol=3"
+  - name: MINIO_ENDPOINT
+    value: "http://minio:9000"
+  - name: MINIO_BUCKET
+    value: "omnifiles"
+  - name: MINIO_ACCESS_KEY
+    value: "minioadmin"
+  - name: MINIO_SECRET_KEY
+    value: "minioadmin"
+  - name: USE_GPU
+    value: "false"
+  - name: TZ
+    value: "Asia/Singapore"
 
 # Network policy disabled for pre-staging flexibility
 networkPolicy:
@@ -73,7 +87,7 @@ networkPolicy:
 
 # Pod disruption budget for pre-staging (2 replicas, allow 1 down)
 podDisruptionBudget:
-  enabled: true
+  enabled: false
   minAvailable: 1
 
 # Moderate deployment strategy for pre-staging (balanced speed/safety)

helm/pdf-processor-service/values.yaml

@@ -22,11 +22,11 @@ autoscaling:
 # Pre-staging secrets
 secrets:
   create: false
-  name: pdf-processor-service-prestaging-secrets
+  name: ""
 
 # Pre-staging specific configurations - using local CRC registry
 image:
-  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf/pdf_processor_service
+  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf-prestaging/pdf_processor_service
   tag: "dev-v0.0.3-5d69f89"
   pullPolicy: Always  # Use local registry image
 
@@ -38,6 +38,26 @@ env:
     value: "prestaging"
   - name: ENABLE_METRICS
     value: "true"
+  - name: REDIS_URL
+    value: "redis://redis:6379/0?decode_responses=True&protocol=3"
+  - name: MINIO_ENDPOINT
+    value: "http://minio:9000"
+  - name: MINIO_BUCKET
+    value: "omnifiles"
+  - name: MINIO_ACCESS_KEY
+    value: "minioadmin"
+  - name: MINIO_SECRET_KEY
+    value: "minioadmin"
+  - name: EXTRACTION_URL
+    value: "http://pdf-extraction-service:8000/pdf_extraction/documents/extract"
+  - name: TRANSLATION_URL
+    value: "http://docling-translation-service:8000/docling_translation"
+  - name: RENDERER_URL
+    value: "http://pdf-renderer-service:8000/pdf_renderer"
+  - name: EXTERNAL_ENDPOINT
+    value: "http://nginx:8080/pdf_processor"
+  - name: TZ
+    value: "Asia/Singapore"
 
 # Network policy disabled for pre-staging flexibility
 networkPolicy:
@@ -97,7 +117,7 @@ networkPolicy:
 
 # Pod disruption budget for pre-staging (2 replicas, allow 1 down)
 podDisruptionBudget:
-  enabled: true
+  enabled: false
   minAvailable: 1
 
 # Moderate deployment strategy for pre-staging (balanced speed/safety)

helm/pdf-renderer-service/values.yaml

@@ -19,11 +19,11 @@ autoscaling:
 # Pre-staging secrets
 secrets:
   create: false
-  name: pdf-renderer-service-secrets
+  name: ""
 
 # Pre-staging specific configurations - using local CRC registry
 image:
-  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf/pdf_renderer_service
+  repository: default-route-openshift-image-registry.apps-crc.testing/omnipdf-prestaging/pdf_renderer_service
   tag: "dev-v0.0.3-5d69f89"
   pullPolicy: Always  # Use local registry image
 
@@ -65,7 +65,7 @@ networkPolicy:
 
 # Pod disruption budget for pre-staging (2 replicas, allow 1 down)
 podDisruptionBudget:
-  enabled: true
+  enabled: false
   minAvailable: 1
 
 # Moderate deployment strategy for pre-staging (balanced speed/safety)