Skip to content

Commit 64fec2d

Browse files
ilia-medvedevilia-medvedev
authored
Enrichment process templates and values (#14)
* add enrichment manifests
1 parent 21284aa commit 64fec2d

17 files changed

Lines changed: 382 additions & 15 deletions

‎charts/gitops-runtime/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
appVersion: v0.0.1
33
description: A Helm chart for Codefresh gitops runtime
44
name: gitops-runtime
5-
version: 0.2.0-alpha-6
5+
version: 0.2.0-alpha-7
66
home: https://github.com/codefresh-io/gitops-runtime-helm
77
keywords:
88
- codefresh

‎charts/gitops-runtime/README.md‎

Lines changed: 14 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# gitops-runtime
22

3-
![Version: 0.2.0-alpha-6](https://img.shields.io/badge/Version-0.2.0--alpha--6-informational?style=flat-square) ![AppVersion: v0.0.1](https://img.shields.io/badge/AppVersion-v0.0.1-informational?style=flat-square)
3+
![Version: 0.2.0-alpha-7](https://img.shields.io/badge/Version-0.2.0--alpha--7-informational?style=flat-square) ![AppVersion: v0.0.1](https://img.shields.io/badge/AppVersion-v0.0.1-informational?style=flat-square)
44

55
A Helm chart for Codefresh gitops runtime
66

@@ -33,6 +33,19 @@ A Helm chart for Codefresh gitops runtime
3333
| app-proxy.config.env | string | `"production"` | |
3434
| app-proxy.env | object | `{}` | |
3535
| app-proxy.fullnameOverride | string | `"cap-app-proxy"` | |
36+
| app-proxy.image-enrichment | object | `{"config":{"clientHeartbeatIntervalInSeconds":5,"concurrencyCmKey":"imageReportExecutor","concurrencyCmName":"workflow-synchronization-semaphores","podGcStrategy":"OnWorkflowCompletion","ttlActiveInSeconds":900,"ttlAfterCompletionInSeconds":86400},"enabled":true,"serviceAccount":{"annotations":null,"create":true,"name":"codefresh-image-enrichment-sa"}}` | Image enrichment process configuration |
37+
| app-proxy.image-enrichment.config | object | `{"clientHeartbeatIntervalInSeconds":5,"concurrencyCmKey":"imageReportExecutor","concurrencyCmName":"workflow-synchronization-semaphores","podGcStrategy":"OnWorkflowCompletion","ttlActiveInSeconds":900,"ttlAfterCompletionInSeconds":86400}` | Configurations for image enrichment workflow |
38+
| app-proxy.image-enrichment.config.clientHeartbeatIntervalInSeconds | int | `5` | Client heartbeat interval in seconds for image enrichemnt workflow |
39+
| app-proxy.image-enrichment.config.concurrencyCmKey | string | `"imageReportExecutor"` | The name of the key in the configmap to use as synchronization semaphore |
40+
| app-proxy.image-enrichment.config.concurrencyCmName | string | `"workflow-synchronization-semaphores"` | The name of the configmap to use as synchronization semaphore, see https://argoproj.github.io/argo-workflows/synchronization/ |
41+
| app-proxy.image-enrichment.config.podGcStrategy | string | `"OnWorkflowCompletion"` | Pod grabage collection strategy. By default all pods will be deleted when the enrichment workflow completes. |
42+
| app-proxy.image-enrichment.config.ttlActiveInSeconds | int | `900` | Maximum allowed runtime for the enrichment workflow |
43+
| app-proxy.image-enrichment.config.ttlAfterCompletionInSeconds | int | `86400` | Number of seconds to live after completion |
44+
| app-proxy.image-enrichment.enabled | bool | `true` | Enable or disable enrichment process. Please note that for enrichemnt, argo-workflows has to be enabled as well. |
45+
| app-proxy.image-enrichment.serviceAccount | object | `{"annotations":null,"create":true,"name":"codefresh-image-enrichment-sa"}` | Service account that will be used for enrichemnt process |
46+
| app-proxy.image-enrichment.serviceAccount.annotations | string | `nil` | Annotations on the service account |
47+
| app-proxy.image-enrichment.serviceAccount.create | bool | `true` | Whether to create the service account or use an existing one |
48+
| app-proxy.image-enrichment.serviceAccount.name | string | `"codefresh-image-enrichment-sa"` | Name of the service account to create or the name of the existing one to use |
3649
| app-proxy.image.pullPolicy | string | `"IfNotPresent"` | |
3750
| app-proxy.image.repository | string | `"quay.io/codefresh/cap-app-proxy"` | |
3851
| app-proxy.image.tag | string | `"1.2142.0"` | |

‎charts/gitops-runtime/templates/_components/cap-app-proxy/_config.yaml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,16 @@ data:
1010
argoCdUsername: {{ .Values.config.argoCdUsername }}
1111
argoWorkflowsInsecure: {{ .Values.config.argoWorkflowsInsecure | quote }}
1212
env: {{ .Values.config.env }}
13+
argoWorkflowsUrl: {{ default "" .Values.config.argoWorkflowsUrl }}
1314
runtimeName: {{ .Values.global.runtime.name }}
15+
{{- $enrichmentValues := get .Values "image-enrichment" }}
16+
{{- if $enrichmentValues.enabled }}
17+
enrichmentConcurrencyCmName: {{ $enrichmentValues.config.concurrencyCmName }}
18+
enrichmentConcurrencyCmKey: {{ $enrichmentValues.config.concurrencyCmKey }}
19+
enrichmentServiceAccountName: {{ $enrichmentValues.serviceAccount.name }}
20+
enrichmentPodGcStrategy: {{ $enrichmentValues.config.podGcStrategy }}
21+
enrichmentTtlAfterCompletionInSeconds: {{ $enrichmentValues.config.ttlAfterCompletionInSeconds }}
22+
enrichmentTtlActiveInSeconds: {{ $enrichmentValues.config.ttlActiveInSeconds }}
23+
enrichmentClientHeartbeatIntervalInSeconds: {{ $enrichmentValues.config.clientHeartbeatIntervalInSeconds }}
24+
{{- end }}
1425
{{- end }}

‎charts/gitops-runtime/templates/_components/cap-app-proxy/enrichment/_enrichment-rb.yaml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
{{- define "cap-app-proxy.image-enrichment.resources.role-binding" }}
2+
{{- $enrichmentValues := get .Values "image-enrichment" }}
3+
apiVersion: rbac.authorization.k8s.io/v1
4+
kind: RoleBinding
5+
metadata:
6+
name: {{ include "cap-app-proxy.fullname" . }}-enrichment
7+
labels:
8+
{{- include "cap-app-proxy.labels" . | nindent 4 }}
9+
roleRef:
10+
apiGroup: ""
11+
kind: Role
12+
name: {{ include "cap-app-proxy.fullname" . }}-enrichment
13+
subjects:
14+
- kind: ServiceAccount
15+
name: {{ $enrichmentValues.serviceAccount.name }}
16+
{{- end }}

‎charts/gitops-runtime/templates/_components/cap-app-proxy/enrichment/_enrichment-role.yaml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
{{- define "cap-app-proxy.image-enrichment.resources.role" }}
2+
apiVersion: rbac.authorization.k8s.io/v1
3+
kind: Role
4+
metadata:
5+
name: {{ include "cap-app-proxy.fullname" . }}-enrichment
6+
labels:
7+
{{- include "cap-app-proxy.labels" . | nindent 4 }}
8+
rules:
9+
- apiGroups:
10+
- "*"
11+
resources:
12+
- "*"
13+
verbs:
14+
- "*"
15+
{{- end }}

‎charts/gitops-runtime/templates/_components/cap-app-proxy/enrichment/_enrichment-sa.yaml‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
{{- define "cap-app-proxy.image-enrichment.resources.sa" }}
2+
{{- $enrichmentValues := get .Values "image-enrichment" }}
3+
{{- if $enrichmentValues.serviceAccount.create }}
4+
apiVersion: v1
5+
kind: ServiceAccount
6+
metadata:
7+
name: {{ $enrichmentValues.serviceAccount.name }}
8+
labels:
9+
{{- include "cap-app-proxy.labels" . | nindent 4 }}
10+
{{- with $enrichmentValues.serviceAccount.annotations }}
11+
annotations:
12+
{{- toYaml . | nindent 4 }}
13+
{{- end }}
14+
{{- end }}
15+
{{- end }}

‎charts/gitops-runtime/templates/_components/cap-app-proxy/environment-variables/_main-container.yaml‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,48 @@ STRIP_PREFIX:
103103
name: cap-app-proxy-cm
104104
key: stripPrefix
105105
optional: true
106+
IRW_SERVICE_ACCOUNT:
107+
valueFrom:
108+
configMapKeyRef:
109+
name: cap-app-proxy-cm
110+
key: enrichmentServiceAccountName
111+
optional: true
112+
IRW_CONCURRENCY_CM_NAME:
113+
valueFrom:
114+
configMapKeyRef:
115+
name: cap-app-proxy-cm
116+
key: enrichmentConcurrencyCmName
117+
optional: true
118+
IRW_CONCURRENCY_CM_KEY:
119+
valueFrom:
120+
configMapKeyRef:
121+
name: cap-app-proxy-cm
122+
key: enrichmentConcurrencyCmKey
123+
optional: true
124+
IRW_POD_GC_STRATEGY:
125+
valueFrom:
126+
configMapKeyRef:
127+
name: cap-app-proxy-cm
128+
key: enrichmentPodGcStrategy
129+
optional: true
130+
IRW_TTL_AFTER_COMPLETION_IN_SECONDS:
131+
valueFrom:
132+
configMapKeyRef:
133+
name: cap-app-proxy-cm
134+
key: enrichmentTtlAfterCompletionInSeconds
135+
optional: true
136+
IRW_TTL_ACTIVE_IN_SECONDS:
137+
valueFrom:
138+
configMapKeyRef:
139+
name: cap-app-proxy-cm
140+
key: enrichmentTtlActiveInSeconds
141+
optional: true
142+
IRW_HEARTBEAT_INTERVAL_IN_SECONDS:
143+
valueFrom:
144+
configMapKeyRef:
145+
name: cap-app-proxy-cm
146+
key: enrichmentClientHeartbeatIntervalInSeconds
147+
optional: true
106148
NODE_EXTRA_CA_CERTS: /app/config/all/all.cer
107149
{{- end -}}
108150

‎charts/gitops-runtime/templates/_helpers.tpl‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -136,8 +136,12 @@ Determine argo worklofws server name
136136
Determine argo workflows server url. Must be called with chart root context
137137
*/}}
138138
{{- define "codefresh-gitops-runtime.argo-workflows.server.url" -}}
139+
{{- $protocol := "http" }}
140+
{{- if index (get .Values "argo-workflows") "server" "secure" }}
141+
{{- $protocol = "https" }}
142+
{{- end -}}
139143
{{/* For now use template from Argo workflows chart until better approach */}}
140-
{{- printf "https://%s:2746" (include "codefresh-gitops-runtime.argo-workflows.server.name" .) }}
144+
{{- printf "%s://%s:2746" $protocol (include "codefresh-gitops-runtime.argo-workflows.server.name" .) }}
141145
{{- end }}
142146

143147
{{/*

‎charts/gitops-runtime/templates/app-proxy/config.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,8 @@
44
{{ $_ := set $appProxyContext "Values" (get .Values "app-proxy") }}
55
{{ $_ := set $appProxyContext.Values "global" (get .Values "global") }}
66
{{ $_ := set $appProxyContext.Values.config "argoCdUrl" $argoCdUrl }}
7+
{{- if index (get .Values "argo-workflows") "enabled" }}
8+
{{- $argoWorkflowsUrl := include "codefresh-gitops-runtime.argo-workflows.server.url" . }}
9+
{{- $_ := set $appProxyContext.Values.config "argoWorkflowsUrl" $argoWorkflowsUrl }}
10+
{{- end}}
711
{{- include "cap-app-proxy.resources.configmap" $appProxyContext }}

‎charts/gitops-runtime/templates/app-proxy/enrichment/enforce-workflows-enabled.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
{{- if and (index (get .Values "app-proxy") "image-enrichment" "enabled") (not (index (get .Values "argo-workflows") "enabled")) }}
2+
{{- fail "ERROR: app-proxy.image-enrichment is enabled but argo-workflows is disabled. This is not suppurted. Either disable erichment or enable workflows"}}
3+
{{- end }}

0 commit comments

Comments
 (0)