نمودارهای فرمان آماده استقرار ساختمان – انجمن DEV

helm create myapp

{{- define "namespace" -}}
{{- printf "%s-%s-%s" .Values.productName .Values.clientName .Values.envName -}}
{{- end -}}

{{- define "serviceAccountName" -}}
{{- printf "%s-%s-%s-sa" .Values.productName .Values.clientName .Values.envName -}}
{{- end -}}

{{- range $key, $service := .Values.services }}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ $key }}-deploy
  labels:
    app: {{ $key }}
spec:
  replicas: {{ $service.replicas | default 2 }}
  selector:
    matchLabels:
      app: {{ $key }}
  template:
    metadata:
      labels:
        app: {{ $key }}
    spec:
      serviceAccountName: {{ template "serviceAccountName" $ }}
      containers:
      - name: {{ $key }}
        image: {{ $.Values.ecr }}/{{ $key }}:{{ $service.version }}
        ports:
        - containerPort: {{ $service.port }}
        resources:
          requests:
            memory: {{ $service.requestMemory | default $.Values.defaultRequestMemory | default "1024Mi"}}
{{- end }}

{{- range $key, $cm := .Values.configmaps }}
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: {{ $key }}
  annotations:
    ssm-loader:  "true"
    ssm-parameter-name: {{ $cm | default "null" }}
    region: {{ $.Values.region | default "us-west-2" }}
{{- end -}}

{{- range $key, $service := .Values.services }}
---
apiVersion: v1
kind: Service
metadata:
  name: {{ $key }}-service
spec:
  selector:
    app: {{ $key }}
  ports:
  - protocol: TCP
    port: {{ $service.port }}
    targetPort: {{ $service.port }}
{{- end }}

{{ $c := 1 | int }}
{{- range $key, $service := .Values.services }}
{{- $albdomain := printf "%s-%s-%s.%s" $key $.Values.clientName $.Values.envName $.Values.topLevelDomain -}}

{{- if $service.alb }}
---
# ALB Ingress Configuration
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ $key }}-alb-ingress
  annotations:
    kubernetes.io/ingress.class: "alb"
    alb.ingress.kubernetes.io/group.name: {{ template "namespace" $}}-ingress-group
    alb.ingress.kubernetes.io/group.order: '{{ $c }}'
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/target-type: ip
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
    alb.ingress.kubernetes.io/certificate-arn: {{ $.Values.certArn }}
    alb.ingress.kubernetes.io/healthcheck-protocol: HTTP
    alb.ingress.kubernetes.io/healthcheck-port: '{{ $service.port }}'
    alb.ingress.kubernetes.io/healthcheck-path: {{ $service.healthCheck | default "/util/health" }}
    alb.ingress.kubernetes.io/healthcheck-interval-seconds: {{ $service.healthCheckInterval | default "'30'" }}
    alb.ingress.kubernetes.io/healthcheck-timeout-seconds: {{ $service.healthCheckTimeout | default "'5'" }}
    alb.ingress.kubernetes.io/success-codes: {{ $service.healthCheckSuccessCode | default "'200'" }}
    alb.ingress.kubernetes.io/healthy-threshold-count: '2'
    alb.ingress.kubernetes.io/unhealthy-threshold-count: '2'
    alb.ingress.kubernetes.io/load-balancer-attributes: 'routing.http2.enabled=true,idle_timeout.timeout_seconds=600'
    alb.ingress.kubernetes.io/target-group-attributes: 'deregistration_delay.timeout_seconds=30, slow_start.duration_seconds=0'
    alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS-1-2-Ext-2018-06
spec:
  # ALB Ingress specification
  rules:
  - host: {{ default $albdomain $service.domain }}
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: {{ $key }}-service
            port:
              number: {{ $service.port }}
    # ALB spec continues...
{{ $c = add1 $c }}
{{- end }}

{{- if $service.nlb }}
---
# NLB Ingress Configuration
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ $key }}-nlb-ingress
  annotations:
    kubernetes.io/ingress.class: "nginx"
    nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
    nginx.ingress.kubernetes.io/ssl-redirect: "false"
    nginx.ingress.kubernetes.io/rewrite-target: /$2
spec:
  # NLB Ingress specification
  rules:
  - host: {{ $service.nlbdomain }} 
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: {{ $key }}-service
            port:
              number: {{ $service.port }}
    # NLB spec continues...
{{ $c = add1 $c }}
{{- end }}
{{- end }}

{{- range $key, $secret := .Values.secrets }}
---
apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: {{ $key }}
  annotations:
    secret-loader: "true"
    secret-name: {{ $secret | default "null" }}
    region: {{ $.Values.region | default "us-west-2" }}
{{- end }}

{{- if .Values.createServiceAccount }}
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ template "serviceAccountName" . }}
  annotations:
    eks.amazonaws.com/role-arn: {{ .Values.serviceAccountRole }}
{{- end }}

productName: myapp
clientName: generic
envName: dev
ecr: mydockerhub.io
certArn: arn:aws:acm:::certificate/
region: us-west-2
defaultRequestMemory: 512Mi
services:
  app-service:
    replicas: 3
    port: 8080
    healthCheck : /actuator/health
    version: latest
    configList:
      - app-config
    secretList:
      - db-secret
    nlb: true
    nlbdomain: app-service.example.com
  frontend-service:
    replicas: 3
    port: 8080
    healthCheck : /actuator/health
    version: latest
    configList:
      - app-config
    secretList:
      - db-secret
    alb:true
configmaps:
  app-config: myapp-config
secrets:
  db-secret: myapp-db-credentials
createServiceAccount: true
serviceAccountRole: arn:aws:iam::123456789012:role/myapp-role

  helm template myapp/

  helm install myapp ./myapp --values external_values.yaml --dry-run --debug

helm install myapp ./myapp --values values.yaml

helm upgrade myapp ./myapp --values values.yaml