-
-
Notifications
You must be signed in to change notification settings - Fork 241
Improving helm chart #868
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
Improving helm chart #868
Conversation
- Replaced .Values.ingress.tls.enabled with .Values.ingress.enableTls - Added enableTls and sslRedirect fields to values.yaml - Updated secretName placeholder in TLS configuration
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. 🗂️ Base branches to auto review (1)
Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
Much more usable Helm Chart! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
Refactors the Helm chart to add conditional deployments, secret-based environment injection, and richer ingress customization.
- Added
enable
flags for RabbitMQ and PostgreSQL templates - Introduced
envFromSecret
support foririsapp
andirisworker
to pull DB creds from Secrets - Enhanced Ingress with
enableTls
,sslRedirect
, andcustomAnnotations
, plus dynamic backend defaults
Reviewed Changes
Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.
Show a summary per file
File | Description |
---|---|
deploy/kubernetes/charts/values.yaml | Added enable toggles, envFromSecret blocks, and updated ingress fields |
deploy/kubernetes/charts/templates/rabbitmq.yaml | Wrapped RabbitMQ resources in a conditional on .Values.rabbitmq.enable |
deploy/kubernetes/charts/templates/postgres.yaml | Wrapped PostgreSQL resources in a conditional on .Values.postgres.enable |
deploy/kubernetes/charts/templates/iris_worker.yaml | Refactored DB env vars loop to use envFromSecret fallback |
deploy/kubernetes/charts/templates/iris_app.yaml | Refactored DB env vars loop and updated service type reference |
deploy/kubernetes/charts/templates/ingress.yaml | Improved ingress flags, annotations handling, and service backend defaults |
Comments suppressed due to low confidence (5)
deploy/kubernetes/charts/values.yaml:202
- The comment references
irisapp.envFromSecret
in theirisworker
section; it should referenceirisworker.envFromSecret
to match the values path.
## @param irisapp.envFromSecret Environment variables from a secret
deploy/kubernetes/charts/templates/rabbitmq.yaml:1
- Template checks
.Values.rabbitmq.enabled
butvalues.yaml
defines the flag asrabbitmq.enable
; update the reference or rename the value key to align.
{{- if .Values.rabbitmq.enabled }}
deploy/kubernetes/charts/templates/postgres.yaml:1
- Template uses
.Values.postgres.enabled
butvalues.yaml
definespostgres.enable
; key names must match.
{{- if .Values.postgres.enabled }}
deploy/kubernetes/charts/templates/ingress.yaml:6
- This still references
ingress.annotations
which has been removed; switch toingress.customAnnotations
or remove the block entirely.
annotations:
deploy/kubernetes/charts/templates/ingress.yaml:42
- Condition checks
.Values.ingress.enableTls.enabled
butenableTls
is a boolean invalues.yaml
; use.Values.ingress.enableTls
or redefineenableTls
as an object.
{{- if and .Values.ingress.enableTls.enabled (gt (len .Values.ingress.tls.hosts) 0) }}
This PR refactors the Helm chart to improve flexibility, security, and configuration clarity.
Changes
Motivation
These changes simplify configuration, improve secret management, and make the chart easier to customize for different environments.
Notes