Update

Author: JoeriHermans

.github/workflows/helm.yaml

@@ -48,7 +48,7 @@ jobs:
 
       - name: 🔑 Authenticate to OCI registry
         run: |
-          echo '${{ secrets.OCI_REGISTRY_HARBOR_SECRET }}' | helm registry login -u '${{ secrets.OCI_REGISTRY_HARBOR_LOGIN }}' --password-stdin harbor.peinser.com/charge
+          echo '${{ secrets.OCI_REGISTRY_HARBOR_SECRET }}' | helm registry login -u '${{ secrets.OCI_REGISTRY_HARBOR_LOGIN }}' --password-stdin harbor.peinser.com
         env:
           HELM_EXPERIMENTAL_OCI: 1
 
@@ -72,7 +72,7 @@ jobs:
 
           echo "🚢 Pushing Helm charts to OCI..."
           ls _packaged | grep .tgz | while read package || [[ -n $package ]]; do
-            helm push _packaged/$package oci://harbor.peinser.com/charge/charts
+            helm push _packaged/$package oci://harbor.peinser.com/library/charts
             echo "⬆️ Pushed $package" >> $GITHUB_STEP_SUMMARY
           done
 

k8s/helm/charts/peppol-directory-cache/templates/deployment.yaml

@@ -0,0 +1,73 @@
+{{- $deployment := include "service.name" (dict "release" $.Release "name" "peppol-directory-cache") }}
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: {{ $deployment }}
+  name: {{ $deployment }}
+spec:
+  replicas: {{ include "deploy.replicas" .Values.replicas }}
+  selector:
+    matchLabels:
+      app: {{ $deployment }}
+  template:
+    metadata:
+      labels:
+        app: {{ $deployment }}
+        {{- if .Values.defaults.loki.enabled }}
+        loki: {{ .Values.defaults.loki.tenant }}
+        {{- end }}
+    spec:
+      automountServiceAccountToken: false
+      securityContext:
+        runAsUser: {{ .Values.defaults.securityContext.runAsUser }}
+        runAsGroup: {{ .Values.defaults.securityContext.runAsGroup }}
+        fsGroup: {{ .Values.defaults.securityContext.fsGroup }}
+
+      {{- include "service.constraints" $ | nindent 6 }}
+
+      dnsPolicy: {{ .Values.defaults.dnsPolicy }}
+      restartPolicy: {{ .Values.defaults.restartPolicy }}
+      {{ include "service.pullSecrets" $ | nindent 6 -}}
+
+      # volumes:
+      # - name: cache
+      #   configMap:
+      #     name: {{ printf "%s-cache" .Release.Name }}
+      #     items:
+      #     - key: cache.json
+      #       path: cache.json
+      # - name: oidc
+      #   configMap:
+      #     name: {{ printf "%s-oidc" .Release.Name }}
+      #     items:
+      #     - key: oidc.json
+      #       path: oidc.json
+
+      containers:
+
+      - image: {{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ include "image" $ }}
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        name: {{ $deployment }}
+        securityContext:
+          allowPrivilegeEscalation: {{ .Values.defaults.securityContext.allowPrivilegeEscalation }}
+          privileged: {{ .Values.defaults.securityContext.privileged }}
+          runAsNonRoot: {{ .Values.defaults.securityContext.runAsNonRoot }}
+
+        ports:
+        - containerPort: 8000
+          protocol: TCP
+
+        # volumeMounts:
+        # - name: cache
+        #   readOnly: true
+        #   mountPath: /mnt/config/cache.json
+        #   subPath: cache.json
+        # - name: oidc
+        #   readOnly: true
+        #   mountPath: /mnt/config/oidc.json
+        #   subPath: oidc.json
+
+        {{- include "probes" $ | nindent 8 }}
+\

k8s/helm/charts/peppol-directory-cache/templates/ingress.yaml

@@ -0,0 +1,29 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    {{- include "ingress.defaultAnnotations" $ | indent 4 }}
+  name: {{ .Release.Name }}-peppol-directory-cache
+spec:
+  ingressClassName: {{ .Values.defaults.ingress.ingressClassName | quote }}
+  tls:
+  - hosts:
+    {{- range $v := .Values.defaults.ingress.hosts }}
+    {{- if $v.tls }}
+    - {{ $v.dns | quote }}
+    {{- end }}
+    {{- end }}
+    secretName: {{ .Release.Name }}-ingress-tls
+  rules:
+  {{- range $v := .Values.defaults.ingress.hosts }}
+  - host: {{ $v.dns | quote }}
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ $.Release.Name }}-service-peppol-directory-cache
+            port:
+              number: 80
+  {{- end }}

k8s/helm/charts/peppol-directory-cache/values.yaml

@@ -153,3 +153,6 @@ image:
   ## Enable development (debug) mode.
   ##
   debug: false
+## Number of replicas.
+##
+replicas: 1