632ad1d507
All checks were successful
__APP_NAME__ — build & deploy / ¿Credenciales de build listas? (push) Successful in 1s
__APP_NAME__ — build & deploy / Calidad + build + push (push) Has been skipped
__APP_NAME__ — build & deploy / ¿Cluster del tenant listo? (push) Has been skipped
__APP_NAME__ — build & deploy / Helm upgrade --install (push) Has been skipped
Sincronizado desde repo IDP templates/ (CHART-SYNC-IDP-GITEA-DRIFT). Reemplaza el Ingress (rke2-ingress-nginx, EOL marzo 2026) por HTTPRoute (Gateway API) adjunto al Gateway tenant-gateway que crea stack-deployer (§3c). NetworkPolicy egress kube-system -> traefik-system. FQDN DOT (ADR-082) preservado. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
35 lines
1.8 KiB
YAML
35 lines
1.8 KiB
YAML
apiVersion: v2
|
|
name: __APP_NAME__
|
|
# Helm chart del Golden Path web-backend/python.
|
|
# 0.4.0 (2026-06-13): ADR-060 Fase 1 — migración del shape `Ingress`
|
|
# (networking.k8s.io/v1, ingressClassName=nginx) a `HTTPRoute`
|
|
# (gateway.networking.k8s.io/v1) adjunto al Gateway `tenant-gateway` (ns apps,
|
|
# creado por stack-deployer §3c). El cluster tenant pasa de rke2-ingress-nginx
|
|
# (EOL marzo 2026) a Traefik Proxy + Gateway API. TLS / force-ssl-redirect /
|
|
# body-size salen del recurso de ruta (los maneja el Gateway listener / Traefik
|
|
# global). values: bloque `ingress` → `httpRoute`; networkPolicy
|
|
# ingressControllerNamespace kube-system → traefik-system. GATEWAY-API-MIGRATION.
|
|
# 0.3.0 (2026-05-25): ADR-066 — AddonClaim sale del chart y vive en
|
|
# manifests/addonclaim.yaml. El workflow del tenant lo aplica con
|
|
# kubectl apply ANTES de helm upgrade --install. Razon: en chart 0.2.x el
|
|
# AddonClaim era hook pre-install,pre-upgrade weight -10 → el default Helm
|
|
# `before-hook-creation` borraba el claim en cada upgrade → el finalizer
|
|
# cleanup-logical rotaba credenciales y atoraba el release en
|
|
# pending-upgrade. Desacoplar el lifecycle del CRD del lifecycle del
|
|
# release Helm resuelve el bug de raiz.
|
|
# 0.2.0 (2026-05-19): cambio Ingress controller Traefik (IngressRoute CRD)
|
|
# → rke2-ingress-nginx (networking.k8s.io/v1 Ingress). Razón:
|
|
# TENANT-INGRESS-CONTROLLER-MISMATCH (APERTURA COVE Sesión 3). El cluster
|
|
# tenant nace con rke2-ingress-nginx y no se quiere instalar Traefik
|
|
# adicional. tlsSecretName por default = apps-wildcard-tls (Gap 3).
|
|
description: Helm chart del Golden Path web-backend/python
|
|
type: application
|
|
version: 0.4.0
|
|
appVersion: "0.1.0"
|
|
keywords:
|
|
- fastapi
|
|
- web-backend
|
|
- coralware-cove
|
|
maintainers:
|
|
- name: __OWNER__
|