Skip to content

chore: Support helm deploy on KinD in makefile#232

Open
lachen-nv wants to merge 3 commits intoNVIDIA:mainfrom
lachen-nv:chore/helm-makefile
Open

chore: Support helm deploy on KinD in makefile#232
lachen-nv wants to merge 3 commits intoNVIDIA:mainfrom
lachen-nv:chore/helm-makefile

Conversation

@lachen-nv
Copy link
Contributor

Description

Add helm deploy command into the Makefile

Type of Change

  • Feature - New feature or functionality (feat:)
  • Fix - Bug fixes (fix:)
  • Chore - Modification or removal of existing functionality (chore:)
  • Refactor - Refactoring of existing functionality (refactor:)
  • Docs - Changes in documentation or OpenAPI schema (docs:)
  • CI - Changes in Github workflows. Requires additional scrutiny (ci:)
  • Version - Issuing a new release version (version:)

Services Affected

  • API - API models or endpoints updated
  • Workflow - Workflow service updated
  • DB - DB DAOs or migrations updated
  • Site Manager - Site Manager updated
  • Cert Manager - Cert Manager updated
  • Site Agent - Site Agent updated
  • RLA - RLA service updated
  • Powershelf Manager - Powershelf Manager updated

Related Issues (Optional)

Breaking Changes

  • This PR contains breaking changes

Testing

  • Unit tests added/updated
  • Integration tests added/updated
  • Manual testing performed
  • No testing required (docs, internal refactor, etc.)

Additional Notes


Test Report: Helm Deployment via make kind-reset

Environment

  • Remote host: Ubuntu 24.04 LTS, x86_64
  • Kind: v0.29.0 / kubectl: v1.35.2 / Docker: 28.3.3 / Go: 1.25.4

Test: make kind-reset (Helm path)

Ran make kind-reset end-to-end on a fresh remote machine. All steps completed successfully:

  • Kind cluster creation
  • Docker image builds
  • cert-manager, PKI, PostgreSQL, Temporal, Keycloak
  • helm upgrade --install carbide-rest (umbrella chart)
  • helm upgrade --install carbide-rest-site-agent
  • setup-local.sh site-agent bootstrap

Final pod status (carbide-rest namespace)

carbide-rest-api 1/1 Running 0
carbide-rest-cert-manager 1/1 Running 0
carbide-rest-cloud-worker 1/1 Running 0
carbide-rest-db-migration 0/1 Completed 0
carbide-rest-mock-core 1/1 Running 0
carbide-rest-site-agent-0 1/1 Running 0
carbide-rest-site-manager 1/1 Running 0
carbide-rest-site-worker 1/1 Running 0
keycloak 1/1 Running 0

Bug found & fixed during testing

Site-agent was CrashLooping after bootstrap.
Root cause: the temporal-client-site-agent-certs secret was not pre-created by the Helm chart, so the bootstrap code's secretIf.Get() returned NotFound and failed. The Kustomize path already
had a placeholder secret (temporal-client-site-agent-certs.yaml) but it was missing from the Helm chart.

Fix: added helm/charts/carbide-rest-site-agent/templates/temporal-certs-secret.yaml as an empty placeholder secret, matching the Kustomize behavior. Also added create verb to the site-agent RBAC Role for completeness.

@github-actions
Copy link

🔐 TruffleHog Secret Scan

No secrets or credentials found!

Your code has been scanned for 700+ types of secrets and credentials. All clear! 🎉

🔗 View scan details

🕐 Last updated: 2026-03-11 12:04:46 UTC | Commit: 6bb4192

@github-actions
Copy link

🛡️ Vulnerability Scan

🚨 Found 64 vulnerability(ies)
📊 vs main: 64 (no change)

Severity Breakdown:

  • 🔴 Critical/High: 64
  • 🟡 Medium: 0
  • 🔵 Low/Info: 0

🔗 View full details in Security tab

🕐 Last updated: 2026-03-11 12:04:56 UTC | Commit: 6bb4192

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants