feat: chart Helm parent lions-app v1.0.0 — templates hardened (secretKeyRef, readOnlyRootFS, NetworkPolicy, ExternalSecret, PDB, SM, HPA)

This commit is contained in:
dahoud
2026-04-22 14:22:00 +00:00
commit ab865631fe
16 changed files with 1074 additions and 0 deletions

36
templates/NOTES.txt Normal file
View File

@@ -0,0 +1,36 @@
Application {{ include "lions-app.name" . }} déployée sur Lions ({{ .Release.Namespace }}).
1. Vérifier le rollout :
kubectl rollout status deployment/{{ include "lions-app.name" . }} -n {{ .Release.Namespace }}
2. Vérifier les pods :
kubectl get pods -n {{ .Release.Namespace }} -l app={{ include "lions-app.name" . }}
3. Health check :
{{- if .Values.ingress.enabled }}
curl -sk https://{{ .Values.ingress.host }}{{ .Values.probes.readiness.httpGet.path | default "/q/health/ready" }}
{{- else }}
kubectl port-forward -n {{ .Release.Namespace }} svc/{{ include "lions-app.name" . }} 8080:{{ .Values.service.port }}
curl -s http://localhost:8080{{ .Values.probes.readiness.httpGet.path | default "/q/health/ready" }}
{{- end }}
4. Logs :
kubectl logs -n {{ .Release.Namespace }} -l app={{ include "lions-app.name" . }} --tail=100 -f
{{- if .Values.externalSecret.enabled }}
5. Vérifier que les secrets Vault sont synchronisés :
kubectl get externalsecret -n {{ .Release.Namespace }} {{ include "lions-app.name" . }}
kubectl get secret -n {{ .Release.Namespace }} {{ include "lions-app.secretName" . }}
{{- end }}
{{- if .Values.hpa.enabled }}
6. Vérifier l'HPA :
kubectl get hpa -n {{ .Release.Namespace }} {{ include "lions-app.name" . }}
{{- end }}
Image déployée : {{ include "lions-app.image" . }}
{{- if .Values.ingress.enabled }}
URL d'accès : https://{{ .Values.ingress.host }}{{ .Values.ingress.path }}
{{- end }}