Add coulomb-social Helm chart and deploy targets
Chart mirrors vergabe-teilnahme Django probe/secret pattern. Non-secret values pin KeyCape OIDC and user-engine URL; env Secret holds secrets. Makefile: dry-run, deploy, ingress, status, logs.
This commit is contained in:
parent
dd1bd6cccc
commit
32610e9090
9 changed files with 348 additions and 1 deletions
40
Makefile
40
Makefile
|
|
@ -16,6 +16,14 @@ VERGABE_DB_HOST ?= apps-pg-rw.databases
|
|||
VERGABE_DB_PORT ?= 5432
|
||||
VERGABE_DB_NAME ?= vergabe_db
|
||||
|
||||
COULOMB_SOCIAL_RELEASE ?= coulomb-social
|
||||
COULOMB_SOCIAL_NAMESPACE ?= coulomb-social
|
||||
COULOMB_SOCIAL_CHART ?= charts/coulomb-social
|
||||
COULOMB_SOCIAL_VALUES ?= helm/coulomb-social-values.yaml
|
||||
COULOMB_SOCIAL_IMAGE_REPOSITORY ?= forgejo.coulomb.social/coulomb/coulomb-social
|
||||
COULOMB_SOCIAL_INGRESS ?= manifests/coulomb-social-ingress.yaml
|
||||
COULOMB_SOCIAL_ENV_SECRET ?= coulomb-social-env
|
||||
|
||||
INTER_HUB_RELEASE ?= inter-hub
|
||||
INTER_HUB_NAMESPACE ?= inter-hub
|
||||
INTER_HUB_CHART ?= charts/inter-hub
|
||||
|
|
@ -259,6 +267,36 @@ vergabe-db-url-secret: ## Rebuild DATABASE_URL with a URL-encoded cnpg password
|
|||
APP_DB_NAME=$(VERGABE_DB_NAME) \
|
||||
tools/build-database-url-secret.sh
|
||||
|
||||
|
||||
|
||||
check-coulomb-social-image-tag: ## Require an explicit coulomb-social image tag
|
||||
@test -n "$(COULOMB_SOCIAL_IMAGE_TAG)" || ( \
|
||||
echo "Set COULOMB_SOCIAL_IMAGE_TAG=<sha> for coulomb-social deploys." >&2; \
|
||||
echo "Example: COULOMB_SOCIAL_IMAGE_TAG=deadbeef make coulomb-social-deploy" >&2; \
|
||||
exit 1)
|
||||
|
||||
coulomb-social-dry-run: check-coulomb-social-image-tag ## helm template render for coulomb-social
|
||||
helm template $(COULOMB_SOCIAL_RELEASE) $(COULOMB_SOCIAL_CHART) \
|
||||
-f $(COULOMB_SOCIAL_VALUES) \
|
||||
--set image.tag=$(COULOMB_SOCIAL_IMAGE_TAG) \
|
||||
--namespace $(COULOMB_SOCIAL_NAMESPACE)
|
||||
|
||||
coulomb-social-deploy: check-production-kubeconfig check-coulomb-social-image-tag ## Deploy / upgrade coulomb-social
|
||||
kubectl create namespace $(COULOMB_SOCIAL_NAMESPACE) --dry-run=client -o yaml | kubectl apply -f -
|
||||
helm upgrade --install $(COULOMB_SOCIAL_RELEASE) $(COULOMB_SOCIAL_CHART) \
|
||||
-f $(COULOMB_SOCIAL_VALUES) \
|
||||
--set image.tag=$(COULOMB_SOCIAL_IMAGE_TAG) \
|
||||
--namespace $(COULOMB_SOCIAL_NAMESPACE) \
|
||||
--wait --timeout 5m
|
||||
|
||||
coulomb-social-ingress-deploy: ## Apply coulomb-social ingress
|
||||
kubectl apply -f $(COULOMB_SOCIAL_INGRESS)
|
||||
|
||||
coulomb-social-status: check-production-kubeconfig ## Show coulomb-social pod/svc/ingress
|
||||
kubectl -n $(COULOMB_SOCIAL_NAMESPACE) get deploy,svc,ingress,pods
|
||||
|
||||
coulomb-social-logs: ## Tail coulomb-social app logs
|
||||
kubectl -n $(COULOMB_SOCIAL_NAMESPACE) logs -l app.kubernetes.io/name=coulomb-social -f --tail=200
|
||||
##@ Inter-Hub
|
||||
|
||||
inter-hub-render-baseline: ## Render checked-in inter-hub values for chart validation only
|
||||
|
|
@ -539,4 +577,4 @@ help: ## Show this help
|
|||
/^[a-zA-Z0-9_-]+:.*?##/ { printf " \033[36m%-20s\033[0m %s\n", $$1, $$2 } \
|
||||
/^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) }' $(MAKEFILE_LIST)
|
||||
|
||||
.PHONY: check-tools check-sops k8s-server-dry-run apps-pg-status apps-pg-restore-drill check-railiance01-kubeconfig check-inter-hub-image-tag check-inter-hub-image check-vergabe-image-tag check-vergabe-image vergabe-dry-run vergabe-deploy vergabe-ingress-deploy vergabe-status vergabe-migrate vergabe-seed vergabe-superuser vergabe-logs vergabe-db-url-secret eso-deploy forgejo-openbao-eso-token-apply forgejo-openbao-store-deploy forgejo-mailer-es-deploy forgejo-mailer-es-status forgejo-dry-run forgejo-server-dry-run forgejo-deploy forgejo-ingress-deploy forgejo-ssh-nodeport-deploy forgejo-status forgejo-smoke forgejo-npm-smoke forgejo-verify forgejo-operator-bootstrap forgejo-runner-registration-sops-bootstrap forgejo-secrets-check forgejo-logs forgejo-runner-registration-deploy forgejo-runner-deploy forgejo-runner-status forgejo-runner-logs inter-hub-render-baseline inter-hub-dry-run inter-hub-server-dry-run inter-hub-deploy inter-hub-status inter-hub-release-info inter-hub-smoke inter-hub-logs reuse-dry-run reuse-deploy reuse-status reuse-smoke reuse-logs reuse-forgejo-webhook reuse-openbao-eso-token-apply reuse-openbao-store-deploy reuse-runtime-es-deploy reuse-runtime-es-status reuse-webhook-smoke help
|
||||
.PHONY: check-tools check-sops k8s-server-dry-run apps-pg-status apps-pg-restore-drill check-railiance01-kubeconfig check-inter-hub-image-tag check-inter-hub-image check-vergabe-image-tag check-vergabe-image vergabe-dry-run vergabe-deploy vergabe-ingress-deploy vergabe-status vergabe-migrate vergabe-seed vergabe-superuser vergabe-logs vergabe-db-url-secret check-coulomb-social-image-tag coulomb-social-dry-run coulomb-social-deploy coulomb-social-ingress-deploy coulomb-social-status coulomb-social-logs eso-deploy forgejo-openbao-eso-token-apply forgejo-openbao-store-deploy forgejo-mailer-es-deploy forgejo-mailer-es-status forgejo-dry-run forgejo-server-dry-run forgejo-deploy forgejo-ingress-deploy forgejo-ssh-nodeport-deploy forgejo-status forgejo-smoke forgejo-npm-smoke forgejo-verify forgejo-operator-bootstrap forgejo-runner-registration-sops-bootstrap forgejo-secrets-check forgejo-logs forgejo-runner-registration-deploy forgejo-runner-deploy forgejo-runner-status forgejo-runner-logs inter-hub-render-baseline inter-hub-dry-run inter-hub-server-dry-run inter-hub-deploy inter-hub-status inter-hub-release-info inter-hub-smoke inter-hub-logs reuse-dry-run reuse-deploy reuse-status reuse-smoke reuse-logs reuse-forgejo-webhook reuse-openbao-eso-token-apply reuse-openbao-store-deploy reuse-runtime-es-deploy reuse-runtime-es-status reuse-webhook-smoke help
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue