Fixes after deployment to GKE

Author: Vadym Mudryi

charts/dependencies/templates/elasticsearch.yaml

@@ -31,6 +31,7 @@ metadata:
     app: elasticsearch
   name: elasticsearch
 spec:
+  clusterIP: None
   ports:
     - name: '9200'
       port: 9200
@@ -58,6 +59,17 @@ spec:
       labels:
         app: elasticsearch
     spec:
+      initContainers:
+        - name: volume-permission-fix
+          image: busybox
+          command:
+            - chown
+            - -R
+            - "1000:0"  # Change ownership to elasticsearch user and group
+            - /usr/share/elasticsearch/data
+          volumeMounts:
+            - name: elasticsearch
+              mountPath: /usr/share/elasticsearch/data
       containers:
         - env:
             - name: ES_JAVA_OPTS

charts/dependencies/templates/hearth.yaml

@@ -8,6 +8,7 @@ metadata:
     app: hearth
   name: hearth
 spec:
+  clusterIP: None
   ports:
     - name: '3447'
       port: 3447

charts/dependencies/templates/influxdb.yaml

@@ -52,6 +52,7 @@ metadata:
     app: influxdb
   name: influxdb
 spec:
+  clusterIP: None
   ports:
     - name: '8086'
       port: 8086

charts/dependencies/templates/minio.yaml

@@ -18,6 +18,10 @@ metadata:
 spec:
   entryPoints:
     - websecure
+  {{- if .Values.cert_manager.enabled }}
+  tls:
+    secretName: {{ .Values.hostname | replace "." "-" }}-tls
+  {{- end }}
   routes:
   - match: 'Host(`minio.{{ .Values.hostname }}`) || Host(`{{ .Values.hostname }}`)'
     kind: Rule
@@ -69,7 +73,8 @@ spec:
             - --console-address
             - :3536
             - /data
-          image: quay.io/minio/minio:RELEASE.2023-09-16T01-01-47Z.fips
+          # image: quay.io/minio/minio:RELEASE.2023-09-16T01-01-47Z.fips
+          image: minio/minio:RELEASE.2025-03-12T18-04-18Z
           name: minio
           {{- if or .Values.minio.secrets .Values.minio.env .Values.env }}
           env:

charts/dependencies/templates/mongo.yaml

@@ -18,6 +18,7 @@ metadata:
     app: mongodb
   name: mongodb
 spec:
+  clusterIP: None
   ports:
     - port: 27017
       targetPort: 27017
@@ -57,7 +58,11 @@ spec:
             - mountPath: /data/db
               name: mongodb-data
       restartPolicy: Always
+      # volumes:
+      #   - name: mongodb-data
+      #     hostPath:
+      #       path: /data/db
       volumes:
         - name: mongodb-data
-          hostPath:
-            path: /data/mongo
+          persistentVolumeClaim:
+            claimName: mongodb

charts/dependencies/templates/redis.yaml

@@ -5,6 +5,7 @@ metadata:
     app: redis
   name: redis
 spec:
+  clusterIP: None
   ports:
     - port: 6379
       targetPort: 6379

charts/dependencies/templates/wildcard-ssl.yaml

@@ -0,0 +1,14 @@
+{{- if .Values.cert_manager.enabled }}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: "{{ .Values.hostname }}-ssl"
+spec:
+  secretName: {{ .Values.hostname | replace "." "-" }}-tls
+  issuerRef:
+    name: {{ .Values.cert_manager.cluster_issuer | quote }}
+    kind: ClusterIssuer
+  dnsNames:
+  - "*.{{ .Values.hostname }}"
+{{- end }}

charts/dependencies/values.yaml

@@ -12,4 +12,9 @@ redis: {}
 
 elasticsearch: {}
 
-hostname: farajaland.dev
+hostname: farajaland.dev
+
+cert_manager:
+  enabled: false
+  # Check doc at: https://cert-manager.io/docs/configuration/issuers/
+  cluster_issuer: "<put issuer here>"

charts/opencrvs-services/templates/client-deployment.yaml

@@ -19,6 +19,10 @@ metadata:
 spec:
   entryPoints:
     - websecure
+  {{- if .Values.cert_manager.enabled }}
+  tls:
+    secretName: {{ .Values.hostname | replace "." "-" }}-tls
+  {{- end }}
   routes:
   - match: 'Host(`register.{{ .Values.hostname }}`) || Host(`{{ .Values.hostname }}`)'
     kind: Rule
@@ -68,8 +72,8 @@ spec:
               # pod should be restarted once countryconfig is up
               path: /manifest.json
               port: 80
-          initialDelaySeconds: 10
-          periodSeconds: 30
+            initialDelaySeconds: 10
+            periodSeconds: 30
 
           name: client
           ports:

charts/opencrvs-services/templates/config-deployment.yaml

@@ -19,6 +19,10 @@ metadata:
 spec:
   entryPoints:
     - websecure
+  {{- if .Values.cert_manager.enabled }}
+  tls:
+    secretName: {{ .Values.hostname | replace "." "-" }}-tls
+  {{- end }}
   routes:
   - match: 'Host(`config.{{ .Values.hostname }}`)'
     kind: Rule