a lot if small changes

Author: Vadym Mudryi

.gitignore

@@ -0,0 +1 @@
+dump.temporal.env

charts/dependencies/templates/elasticsearch.yaml

@@ -70,6 +70,9 @@ spec:
               value: /data/backups/elasticsearch
             - name: xpack.security.enabled
               value: 'false'
+          {{- if or .Values.elasticsearch.secrets .Values.elasticsearch.env .Values.env }}
+          {{- include "render-env-vars" (dict "service_name" "elasticsearch" "Values" .Values) }}
+          {{- end }}
           image: docker.elastic.co/elasticsearch/elasticsearch:8.16.4
           name: elasticsearch
           resources:

charts/dependencies/templates/hearth.yaml

@@ -44,6 +44,9 @@ spec:
               value: mongodb://mongodb.opencrvs-deps-dev.svc.cluster.local/hearth-dev
             - name: server__fhirVersion
               value: stu3
+          {{- if or .Values.hearth.secrets .Values.hearth.env .Values.env }}
+          {{- include "render-env-vars" (dict "service_name" "hearth" "Values" .Values) }}
+          {{- end }}
           image: opencrvs/hearth:1.1.0
           name: hearth
           ports:

charts/dependencies/templates/influxdb.yaml

@@ -79,6 +79,10 @@ spec:
       containers:
         - image: influxdb:1.8.10
           name: influxdb
+          {{- if or .Values.influxdb.secrets .Values.influxdb.env .Values.env }}
+          env:
+          {{- include "render-env-vars" (dict "service_name" "influxdb" "Values" .Values) }}
+          {{- end }}
           ports:
             - containerPort: 8086
               protocol: TCP

charts/dependencies/templates/minio.yaml

@@ -11,6 +11,21 @@ spec:
     requests:
       storage: 1Gi
 ---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: minio-route
+spec:
+  entryPoints:
+    - websecure
+  routes:
+  - match: 'Host(`minio.{{ .Values.hostname }}`) || Host(`{{ .Values.hostname }}`)'
+    kind: Rule
+    services:
+    - name: minio
+      namespace: {{ .Release.Namespace }}
+      port: 3536
+---
 apiVersion: v1
 kind: Service
 metadata:
@@ -56,6 +71,10 @@ spec:
             - /data
           image: quay.io/minio/minio:RELEASE.2023-09-16T01-01-47Z.fips
           name: minio
+          {{- if or .Values.minio.secrets .Values.minio.env .Values.env }}
+          env:
+          {{- include "render-env-vars" (dict "service_name" "minio" "Values" .Values) }}
+          {{- end }}
           ports:
             - containerPort: 3535
               protocol: TCP

charts/dependencies/templates/mongo.yaml

@@ -45,6 +45,10 @@ spec:
     spec:
       containers:
         - image: mongo:4.4
+          {{- if or .Values.mongodb.secrets .Values.mongodb.env .Values.env }}
+          env:
+          {{- include "render-env-vars" (dict "service_name" "mongodb" "Values" .Values) }}
+          {{- end }}
           name: mongodb
           ports:
             - containerPort: 27017

charts/dependencies/templates/redis.yaml

@@ -31,6 +31,10 @@ spec:
       containers:
         - image: redis:5
           name: redis
+          {{- if or .Values.redis.secrets .Values.redis.env .Values.env }}
+          env:
+          {{- include "render-env-vars" (dict "service_name" "redis" "Values" .Values) }}
+          {{- end }}
           ports:
             - containerPort: 6379
               protocol: TCP

charts/dependencies/values-dev.yaml

@@ -1 +1,15 @@
-mongo_version: 4.4
+
+mongodb:
+  version: 4.4
+
+minio: {}
+
+influxdb: {}
+
+hearth: {}
+
+redis: {}
+
+elasticsearch: {}
+
+hostname: farajaland.dev

charts/dependencies/values.yaml

@@ -59,19 +59,20 @@ Automatically issue SSL secret for traefix, check possibility to issue valid SSL
 
 # Fixes
 
-1. Fix events variables
+...
 
 # Check
 
 - https://kubernetes.io/docs/concepts/storage/volumes/#image
 
-# Secrets
+# Add Pod Disruption Budget
 
-There is a need to store secrets for Mongo, Elastic search, etc.
+If we would like to give people a way to deploy without downtime this option is mandatory
 
-Easiest option is to store values as kubernetes secrets
-```
-kubectl create secret generic opencrvs-shared-secrets --from-env-file=.env.qa
-```
+# Liveness and readiness probes
 
-And then pass as shared secret name
+Some services like login and client require extra attention at this point since nginx proxy does cache IP address of downstream service.
+
+Some services just need proper configuration
+
+# Add minio-mc container