Add maintained vectorcraft Helm chart

chart/vectorcraft/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: vectorcraft
+description: Community Kubernetes deployment for Storytold vectorcraft
+type: application
+version: 0.1.0
+appVersion: v0.12.0

chart/vectorcraft/templates/resources.yaml

@@ -0,0 +1,147 @@
+{{- $name := .Chart.Name -}}
+{{- $repository := default (printf "registry.brunner.ninja/feedc0de/%s" $name) .Values.image.repository -}}
+{{- $tag := default .Chart.Version .Values.image.tag -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ $name }}
+  labels:
+    app.kubernetes.io/name: {{ $name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: artcraft
+    app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+spec:
+  replicas: {{ .Values.replicaCount }}
+  revisionHistoryLimit: 3
+  strategy:
+    type: RollingUpdate
+    rollingUpdate: {maxSurge: 1, maxUnavailable: 0}
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: {{ $name }}
+      app.kubernetes.io/part-of: artcraft
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: {{ $name }}
+        app.kubernetes.io/instance: {{ .Release.Name }}
+        app.kubernetes.io/part-of: artcraft
+    spec:
+      automountServiceAccountToken: false
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 101
+        runAsGroup: 101
+        seccompProfile: {type: RuntimeDefault}
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets: {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+      - name: {{ $name }}
+        image: {{ printf "%s:%s" $repository $tag | quote }}
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        ports: [{name: http, containerPort: 8080}]
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          capabilities: {drop: [ALL]}
+        resources: {{- toYaml .Values.resources | nindent 10 }}
+        startupProbe:
+          httpGet: {path: /index.html, port: http}
+          periodSeconds: 2
+          timeoutSeconds: 2
+          failureThreshold: 30
+        readinessProbe:
+          httpGet: {path: /index.html, port: http}
+          periodSeconds: 5
+          timeoutSeconds: 2
+          failureThreshold: 3
+        livenessProbe:
+          httpGet: {path: /index.html, port: http}
+          periodSeconds: 15
+          timeoutSeconds: 2
+          failureThreshold: 3
+        volumeMounts:
+        - {name: tmp, mountPath: /tmp}
+      - name: nginx-exporter
+        image: {{ .Values.metrics.exporter.image }}
+        args: [--nginx.scrape-uri=http://127.0.0.1:8081/nginx_status]
+        ports: [{name: metrics, containerPort: 9113}]
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          capabilities: {drop: [ALL]}
+        resources: {{- toYaml .Values.metrics.exporter.resources | nindent 10 }}
+        readinessProbe:
+          httpGet: {path: /metrics, port: metrics}
+          periodSeconds: 10
+        livenessProbe:
+          httpGet: {path: /metrics, port: metrics}
+          periodSeconds: 20
+      volumes:
+      - name: tmp
+        emptyDir: {sizeLimit: 1Gi}
+      {{- with .Values.nodeSelector }}
+      nodeSelector: {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.topologySpreadConstraints }}
+      topologySpreadConstraints: {{- toYaml . | nindent 8 }}
+      {{- end }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ $name }}
+  labels:
+    app.kubernetes.io/name: {{ $name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: artcraft
+spec:
+  selector:
+    app.kubernetes.io/name: {{ $name }}
+    app.kubernetes.io/part-of: artcraft
+  ports:
+  - {name: http, port: 80, targetPort: http}
+  - {name: metrics, port: 9113, targetPort: metrics}
+{{- if .Values.ingress.enabled }}
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ $name }}
+  labels:
+    app.kubernetes.io/name: {{ $name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: artcraft
+  {{- with .Values.ingress.annotations }}
+  annotations: {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  ingressClassName: {{ .Values.ingress.className }}
+  tls: [{hosts: [{{ .Values.ingress.host | quote }}]}]
+  rules:
+  - host: {{ .Values.ingress.host }}
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service: {name: "{{ $name }}", port: {name: http}}
+{{- end }}
+{{- if .Values.metrics.serviceMonitor.enabled }}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: {{ $name }}
+  labels:
+    app.kubernetes.io/name: {{ $name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: artcraft
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: {{ $name }}
+      app.kubernetes.io/part-of: artcraft
+  endpoints: [{port: metrics, path: /metrics, interval: 30s, scrapeTimeout: 10s}]
+{{- end }}

chart/vectorcraft/values.yaml

@@ -0,0 +1,24 @@
+replicaCount: 1
+image:
+  repository: ""
+  tag: ""
+  pullPolicy: IfNotPresent
+imagePullSecrets: []
+ingress:
+  enabled: false
+  className: ""
+  host: vectorcraft.example.com
+  annotations: {}
+metrics:
+  serviceMonitor:
+    enabled: false
+  exporter:
+    image: docker.io/nginx/nginx-prometheus-exporter:1.5.3
+    resources:
+      requests: {cpu: 5m, memory: 16Mi}
+      limits: {cpu: 100m, memory: 64Mi}
+nodeSelector: {}
+topologySpreadConstraints: []
+resources:
+  requests: {cpu: 10m, memory: 32Mi}
+  limits: {cpu: 500m, memory: 128Mi}