feat: deploy config lions-user-manager-server-impl-quarkus pour cluster k1

2026-04-22 15:07:02 +00:00
commit d30a673a4c
3 changed files with 152 additions and 0 deletions
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -0,0 +1,18 @@
+apiVersion: v2
+name: lions-user-manager-server-impl-quarkus
+description: Deploy config pour lions-user-manager-server-impl-quarkus sur cluster k1
+type: application
+version: 1.0.0
+appVersion: "20260227-054728"
+kubeVersion: ">=1.28.0-0"
+maintainers:
+  - name: Lions Infrastructure Team
+    email: infrastructure@lions.dev
+home: https://git.lions.dev/lionsdev/lions-user-manager-server-impl-quarkus-k1
+sources:
+  - https://git.lions.dev/lionsdev/lions-user-manager-server-impl-quarkus
+  - https://git.lions.dev/lionsdev/lions-user-manager-server-impl-quarkus-k1
+dependencies:
+  - name: lions-app
+    version: "1.0.1"
+    repository: "https://git.lions.dev/api/packages/lionsdev/helm"
--- a/README.md
+++ b/README.md
@@ -0,0 +1,21 @@
+# lions-user-manager-server-impl-quarkus-k1
+
+Deploy config pour **lions-user-manager-server-impl-quarkus** sur cluster k1.
+
+- Host : https://api.lions.dev/lions-user-manager
+- Chart parent : lions-app 1.0.1
+- Image : registry.lions.dev/lionsdev/lions-user-manager-server-impl-quarkus:20260227-054728
+
+## Deploy
+
+```bash
+helm repo add lions https://git.lions.dev/api/packages/lionsdev/helm   --username lionsdev --password 'lions@2025'
+helm dependency update .
+helm upgrade --install lions-user-manager-server-impl-quarkus . --namespace applications --wait
+```
+
+## Pipeline lionsctl (attendu)
+
+```bash
+lionsctl pipeline -u https://git.lions.dev/lionsdev/lions-user-manager-server-impl-quarkus   -b main -j 21 -e production -c k1 -p prod -m admin@lions.dev
+```
--- a/values.yaml
+++ b/values.yaml
@@ -0,0 +1,113 @@
+# Deploy values pour lions-user-manager-server-impl-quarkus sur cluster k1 (prod)
+# Override du chart lions-app 1.0.1
+
+lions-app:
+
+  image:
+    registry: registry.lions.dev
+    repository: lionsdev
+    name: lions-user-manager-server-impl-quarkus
+    tag: "20260227-054728"   # AUTO-UPDATED by lionsctl pipeline
+    pullPolicy: IfNotPresent
+    pullSecrets:
+      - lionsregistry-secret
+
+  replicaCount: 1
+
+  resources:
+    requests:
+      cpu: 200m
+      memory: 512Mi
+    limits:
+      cpu: "1"
+      memory: 1Gi
+
+  # Env non-sensibles
+  configMap:
+    enabled: true
+    envFrom: true
+    data:
+      QUARKUS_PROFILE: prod
+      APP_ENV: production
+      JAVA_OPTS: "-Xms256m -Xmx512m"
+      QUARKUS_HTTP_PORT: "8080"
+      APP_BASE_URL: https://api.lions.dev
+
+  # Secrets depuis K8s Secrets existants (migration Vault à venir)
+  extraEnvFrom:
+    - secretRef:
+        name: lions-shared-db-secret
+    - secretRef:
+        name: lions-user-manager-keycloak-secret
+
+  externalSecret:
+    enabled: false   # TODO: migrate to Vault ExternalSecret
+
+  ingress:
+    enabled: true
+    className: nginx
+    clusterIssuer: letsencrypt-prod
+    host: api.lions.dev
+    pathPrefix:
+      enabled: true
+      strip: /lions-user-manager
+    tls:
+      enabled: true
+    rateLimit:
+      enabled: true
+      rpm: 3000
+      connections: 200
+    annotations:
+      nginx.ingress.kubernetes.io/proxy-body-size: "50m"
+      nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
+      nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
+      nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
+
+  networkPolicy:
+    enabled: false   # TODO: re-enable après validation egress rules
+
+  probes:
+    liveness:
+      enabled: true
+      httpGet:
+        path: /health/live
+        port: 8080
+      initialDelaySeconds: 60
+      periodSeconds: 30
+      timeoutSeconds: 5
+      failureThreshold: 3
+    readiness:
+      enabled: true
+      httpGet:
+        path: /health/ready
+        port: 8080
+      initialDelaySeconds: 30
+      periodSeconds: 10
+      timeoutSeconds: 5
+      failureThreshold: 3
+
+  volumes:
+    tmp:
+      enabled: true
+      sizeLimit: 200Mi
+    logs:
+      enabled: true
+      sizeLimit: 500Mi
+      mountPath: /app/logs
+    extra:
+      - name: app-storage
+        emptyDir:
+          sizeLimit: 2Gi
+
+  volumeMounts:
+    - name: app-storage
+      mountPath: /app/storage
+
+  tolerations:
+    - key: node-role.kubernetes.io/control-plane
+      operator: Exists
+      effect: NoSchedule
+
+  podAnnotations:
+    lionsctl.lions.dev/cluster: k1
+    lionsctl.lions.dev/environment: production