Major update

Author: bastianeicher

charts/generic-service/README.md

@@ -3,10 +3,14 @@
 This Helm chart simplifies deploying a typical "80% case" service on Kubernetes. It takes care of creating common [Resources](#resources) such as `Deployment`, `Service` and `Ingress`. It also provides optional support for:
 
 - [nginx Ingress Controller](https://kubernetes.github.io/ingress-nginx/), [Contour](https://projectcontour.io/) or [Istio](https://istio.io/) for routing
+- HAProxy
+- Contour
 - [Prometheus Operator](https://github.com/prometheus-operator/prometheus-operator) for monitoring
 - [Loki Rule Operator](https://github.com/opsgy/loki-rule-operator) or Loki sidecar for logging-based alerting
 - [OpenTelemetry Operator](https://github.com/open-telemetry/opentelemetry-operator) or [Jaeger Operator](https://www.jaegertracing.io/docs/latest/operator/) for tracing
 - [Flagger](https://flagger.app/) and [Argo Rollouts](https://argoproj.github.io/argo-rollouts/) for canary and blue-green deployments
+- Cillium Network Policies
+- Sealed Secrets
 
 The [Generic Service Grafana Dashboard](https://grafana.com/grafana/dashboards/14759) is a useful companion to this chart.
 

charts/generic-service/ci/additional-mounts-values.yaml

@@ -8,3 +8,7 @@ additionalMounts:
   /tmp:
     name: temp
     emptyDir: {}
+  /etc/nginx/nginx.conf:
+    name: temp
+    emptyDir: {}
+    subPath: nginx.conf

charts/generic-service/ci/argo-blue-green-values.yaml

@@ -0,0 +1,44 @@
+# Argo Rollout controller BlueGreen test
+
+image:
+  repository: jwilder/whoami
+  tag: latest
+
+ingress:
+  enabled: true
+  port: 8000
+
+rollout:
+  controller: ArgoRollout
+  strategy: BlueGreen
+  blueGreen:
+    autoPromotion: true
+    prePromotionAnalysis:
+      templates:
+        - templateName: pod-ready
+          clusterScope: true
+        - templateName: success-rate
+    postPromotionAnalysis:
+      templates:
+        - templateName: success-rate
+        - templateName: pod-ready
+          clusterScope: true
+      args:
+        - name: service-name
+          value: canary-demo
+  analysisTemplates:
+    success-rate:
+      args:
+        - name: service-name
+      metrics:
+        - name: success-rate
+          interval: 5m
+          count: 10
+          successCondition: "result[0] >= 0.95"
+          query: |
+            sum(irate(
+              istio_requests_total{reporter="source",destination_service=~"{{args.service-name}}",response_code!~"5.*"}[5m]
+            )) /
+            sum(irate(
+              istio_requests_total{reporter="source",destination_service=~"{{args.service-name}}"}[5m]
+            ))

charts/generic-service/ci/argo-canary-values.yaml

@@ -0,0 +1,54 @@
+# Argo Rollout controller Canary test
+
+image:
+  repository: jwilder/whoami
+  tag: latest
+
+ingress:
+  enabled: true
+  port: 8000
+
+replicas: 2
+
+rollout:
+  controller: ArgoRollout
+  strategy: Canary
+  canary:
+    analysis:
+      templates:
+        - templateName: success-rate
+        - templateName: success-rate
+          clusterScope: true
+      args:
+        - name: service-name
+          value: canary-demo
+    steps:
+      - setWeight: 20
+      - analysis:
+          templates:
+          - templateName: success-rate
+          - templateName: success-rate
+            clusterScope: true
+          args:
+          - name: service-name
+            value: canary-demo
+      - pause:
+          duration: 1h
+      - setWeight: 40
+  analysisTemplates:
+    success-rate:
+      args:
+        - name: service-name
+          value: canary-demo
+      metrics:
+        - name: success-rate
+          interval: 5m
+          count: 10
+          successCondition: "result[0] >= 0.95"
+          query: |
+            sum(irate(
+              istio_requests_total{reporter="source",destination_service=~"{{args.service-name}}",response_code!~"5.*"}[5m]
+            )) /
+            sum(irate(
+              istio_requests_total{reporter="source",destination_service=~"{{args.service-name}}"}[5m]
+            ))

charts/generic-service/ci/argo-values.yaml

@@ -0,0 +1,18 @@
+# Autoscaling custom metrics test
+
+image:
+  repository: jwilder/whoami
+  tag: latest
+
+autoscaling:
+  enabled: true
+  metrics:
+    - type: External
+      external:
+        metric:
+          name: some_metric
+          selector:
+            key: value
+        target:
+          type: AverageValue
+          averageValue: 30

charts/generic-service/ci/autoscaling-custom-metrics.yaml

@@ -0,0 +1,36 @@
+# Extra ingress test
+
+image:
+  repository: jwilder/whoami
+  tag: latest
+
+ingress:
+  enabled: true
+  port: 8000
+  domains: ['example.com']
+  class: nginx
+  cors:
+    enabled: true
+    allowOrigin:
+      - foo
+      - bar
+    exposeHeaders:
+      - Content-Type
+  extra:
+    additional-annotation:
+      domains: ['custom-annotation.example.com']
+      annotations:
+        key: value
+    cors-disabled:
+      cors:
+        enabled: false
+      domains: ['cors-disabled.example.com']
+    haproxy:
+      class: haproxy
+      domains: ['haproxy.example.com']
+    haproxy-no-allow-origin:
+      class: haproxy
+      cors:
+        enabled: true
+        allowOrigin: []
+      domains: ['haproxy-no-allow-origin.example.com']

charts/generic-service/ci/ingress-cors-extra-values.yaml

@@ -9,6 +9,8 @@ ingress:
   port: 8000
   domains: ['example.com']
   class: nginx
+  cors:
+    enabled: true
   annotations:
     nginx.ingress.kubernetes.io/configuration-snippet: dummy-config;
   extra:
@@ -29,3 +31,7 @@ ingress:
       annotations:
         nginx.ingress.kubernetes.io/configuration-snippet: other-dummy-config;
       timeoutSeconds: 5
+    cors-disabled:
+      cors:
+        enabled: true
+      domains: ['cors-disabled.example.com']

charts/generic-service/ci/ingress-extra-values.yaml

@@ -0,0 +1,19 @@
+# HAProxy ingress test
+
+image:
+  repository: jwilder/whoami
+  tag: latest
+
+ingress:
+  enabled: true
+  port: 8000
+  class: haproxy-public
+  domains: ['somedomain.example.com']
+  protocol: h2c
+  timeoutSeconds: 2
+  cors:
+    enabled: true
+  extra:
+    timeout:
+      domains: ['timeout.example.com']
+      timeoutSeconds: 10

charts/generic-service/ci/ingress-haproxy-values.yaml

@@ -0,0 +1,15 @@
+# Extra ingress test
+
+image:
+  repository: jwilder/whoami
+  tag: latest
+
+ingress:
+  enabled: true
+  port: 8000
+  domains: ['somedomain.example.com']
+  pathType: Exact
+  extra:
+    some-extra:
+      domains: ['some-extra.example.com']
+      pathType: ImplementationSpecific