first commit

2026-01-21 17:37:42 +11:00
commit bd1ed71ac4
142 changed files with 18994 additions and 0 deletions
--- a/templates/pep-server/deployment.yaml
+++ b/templates/pep-server/deployment.yaml
@@ -0,0 +1,141 @@
+{{- if .Values.pepServer.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ template "pep-server.appName" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "pep-server.labels" . | nindent 4 }}
+spec:
+  {{- if not .Values.pepServer.autoscaling.enabled }}
+  replicas: {{ .Values.pepServer.replicaCount }}
+  {{- end }}
+  strategy:
+    type: {{ .Values.pepServer.strategy.type }}
+    rollingUpdate:
+      maxSurge: {{ .Values.pepServer.strategy.rollingUpdate.maxSurge }}
+      maxUnavailable: {{ .Values.pepServer.strategy.rollingUpdate.maxUnavailable }}
+  selector:
+    matchLabels:
+      {{- include "pep-server.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      {{- with .Values.pepServer.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      labels:
+        {{- include "pep-server.selectorLabels" . | nindent 8 }}
+    spec:
+      terminationGracePeriodSeconds: {{ .Values.pepServer.terminationGracePeriodSeconds }}
+      {{- with .Values.global.image.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- if .Values.pepServer.serviceAccount.enabled }}
+      serviceAccountName: {{ include "pep-server.serviceAccountName" . }}
+      {{- end }}
+      {{- if .Values.pepServer.podSecurityContextEnabled }}
+      securityContext: {{- toYaml .Values.pepServer.podSecurityContext | nindent 8 }}
+      {{- end }}
+      dnsConfig:
+        options:
+          - name: use-vc
+      initContainers:
+        - name: {{ .Chart.Name }}-init
+          securityContext:
+            {{- toYaml .Values.pepServer.securityContext | nindent 12 }}
+          image: "{{ default .Values.global.image.repository .Values.global.alpinetools.image.repository }}/{{ .Values.global.alpinetools.image.name }}:{{ .Values.global.alpinetools.image.tag }}"
+          imagePullPolicy: {{ .Values.global.image.pullPolicy }}
+          env:
+            - name: POD_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: metadata.name
+          envFrom:
+            - configMapRef:
+                name: configmap-common
+          volumeMounts:
+            - name: {{ .Values.global.volumeStorageName }}
+              mountPath: /efs
+          command:
+            - "/bin/sh"
+            - "-c"
+            - |
+              {{- if .Values.valkey.internal.enabled }}
+              {{ include "dataplane.commonInit" (dict "context" . "buildTag" .Values.pepServer.image.buildTag "internal" true "replicas" .Values.valkey.internal.clusterSize) | nindent 14 }}
+              {{- else if .Values.valkey.external.enabled }}
+              {{ include "dataplane.commonInit" (dict "context" . "buildTag" .Values.pepServer.image.buildTag) | nindent 14 }}
+              {{- end }}
+
+              {{- if .Values.fluentBit.enabled }}
+              {{ include "dataplane.createLogDirectory" (dict "serviceName" "pep-server" "efsRoot" "${efs_root}" "podName" "${POD_NAME}" "additionalPathParam" "") | nindent 14 }}
+              {{- end }}
+          {{- with .Values.global.initContainers.resources }}
+          resources:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+      containers:
+        - name: {{ template "pep-server.appName" . }}
+          securityContext:
+            {{- toYaml .Values.pepServer.securityContext | nindent 12 }}
+          image: "{{ default .Values.global.image.repository .Values.pepServer.image.repository }}/{{ .Values.pepServer.image.name }}:{{ .Values.pepServer.image.buildTag | default .Chart.AppVersion }}"
+          imagePullPolicy: {{ .Values.global.image.pullPolicy }}
+          envFrom:
+            - configMapRef:
+                name: configmap-common
+            - secretRef:
+                name: {{ .Values.common.clusterDetails.name }}
+            - configMapRef:
+                name: {{ template "pep-server.appName" . }}
+            {{- if .Values.valkey.enabled }}
+            - secretRef:
+                name: {{ .Values.common.datagridCredentials.name }}
+            {{- end }}
+          env:
+            - name: POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+            - name: local_ip
+              valueFrom:
+                fieldRef:
+                  fieldPath: status.podIP
+            {{- with .Values.pepServer.env }}
+              {{- toYaml . | nindent 12 }}
+            {{- end }}
+          ports:
+            - containerPort: 9090
+              name: xds
+            - containerPort: 8080
+              name: internal
+          volumeMounts:
+            - name: {{ .Values.global.volumeStorageName }}
+              mountPath: /efs
+            - name: tmpdir
+              mountPath: /tmp
+          resources:
+            {{- toYaml .Values.pepServer.resources | nindent 12 }}
+          livenessProbe: {{- toYaml .Values.pepServer.livenessProbe | nindent 12 }}
+          startupProbe: {{- toYaml .Values.pepServer.startupProbe | nindent 12 }}
+          readinessProbe: {{- toYaml .Values.pepServer.readinessProbe | nindent 12 }}
+      volumes:
+      - name: tmpdir
+        emptyDir: {}
+      - name: {{ .Values.global.volumeStorageName }}
+        persistentVolumeClaim:
+          claimName: {{ .Release.Namespace }}-{{ .Values.global.claimName }}
+      {{- with .Values.pepServer.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.pepServer.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.pepServer.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+{{- end }}