feat(helm): Kubernetes Helm chart with backup automation#2
Open
dnplkndll wants to merge 7 commits into
Open
Conversation
Signed-off-by: Artem Savchenko <armisav@gmail.com>
Signed-off-by: Artem Savchenko <armisav@gmail.com>
dnplkndll
force-pushed
the
feat/helm-chart
branch
from
30e0627 to
fbf9bde
Compare
Comprehensive Helm chart for deploying Huly to Kubernetes: - All core services (front, account, transactor, collaborator, etc.) - Infrastructure (CockroachDB, Redpanda, Elasticsearch, MinIO) - Optional AI bot with MongoDB - Automated backup CronJobs to S3-compatible storage - Configurable image registry and version pinning - Auto-generated secrets with persistence across upgrades - NGINX ingress with TLS via cert-manager - CI workflow for lint, template validation, and OCI publish Chart lives at helm/ (outside kube/) to avoid conflict with the existing kubectl-based CI that recursively applies kube/*.yaml. Signed-off-by: Daniel Kendall <dkendall@ledoweb.com> Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Don Kendall <kendall@donkendall.com>
Deploy pod-github for bidirectional sync of issues, PRs, and comments between Huly and GitHub. Gated behind githubIntegration.enabled (false by default). Adds: - templates/github/deployment.yaml + service.yaml - GITHUB_URL to configmap and front deployment - GitHub App credentials to shared secret - /_github ingress backend - README documentation for GitHub integration and AI bot Signed-off-by: Daniel Kendall <dkendall@ledoweb.com> Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Don Kendall <kendall@donkendall.com>
dnplkndll
force-pushed
the
feat/helm-chart
branch
from
fbf9bde to
7515b13
Compare
The existing template only allowed overriding the tag via kvs.version. Add support for a full image override via kvs.image (registry/repo:tag), falling back to the composed default. Useful for pinning to a digest or pointing at a different registry without touching hulyRegistry.
From v0.7.423 onward the hulykvs image runs hulylake/0.1.18, which
moved blob storage from CockroachDB to an S3-compatible backend
via the AWS SDK. The SDK refuses to start without an explicit
region, so the pod crash-looped with 'A region must be set when
sending requests to S3'.
When storage.type=s3 the kvs deployment now receives:
- AWS_REGION (from storage.s3.region)
- AWS_ENDPOINT_URL_S3 (storage.s3.endpoint, e.g. Hetzner)
- AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY (from huly-secret;
new S3_ACCESS_KEY/S3_SECRET_KEY entries added to the secret)
- HULY_S3_BUCKET (kvs.s3.bucket, default 'hulylake' — must exist)
Existing storage.type=minio deployments are unaffected.
hulylake v0.7.423 defaults to 8096, but the chart's Service + readiness/liveness probes are pinned to 8094. Setting HULY_BIND_PORT keeps the old port stable through the hulykvs → hulylake migration so callers don't need to be reconfigured.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
aibot.enabled)cockroach sqldump), MongoDB (mongodump), and S3 files (rclone sync)hulyRegistry) to support GAR or other private registriesBackup Architecture
SHOW CREATE ALL TABLES+ per-table CSV data export, gzipped, uploaded to S3 with configurable retentionmongodump --archive --gzipuploaded to S3 (only when aibot enabled)Test plan
helm templaterenders all templates without errors🤖 Generated with Claude Code