Copy from personal repo

.gitignore

@@ -1,2 +1,3 @@
 .DS_Store
-.vscode/
+.vscode/
+demos/

docs/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

docs/Chart.yaml

@@ -0,0 +1,24 @@
+apiVersion: v2
+name: cdsp
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "1.0.0"

docs/charts/banking-api/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

docs/charts/banking-api/Chart.yaml

@@ -0,0 +1,24 @@
+apiVersion: v2
+name: banking-api
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 1.0.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "1.0.0"

docs/charts/banking-api/templates/NOTES.txt

@@ -0,0 +1,22 @@
+1. Get the application URL by running these commands:
+{{- if .Values.ingress.enabled }}
+{{- range $host := .Values.ingress.hosts }}
+  {{- range .paths }}
+  http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }}
+  {{- end }}
+{{- end }}
+{{- else if contains "NodePort" .Values.service.type }}
+  export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "banking-api.fullname" . }})
+  export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
+  echo http://$NODE_IP:$NODE_PORT
+{{- else if contains "LoadBalancer" .Values.service.type }}
+     NOTE: It may take a few minutes for the LoadBalancer IP to be available.
+           You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "banking-api.fullname" . }}'
+  export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "banking-api.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
+  echo http://$SERVICE_IP:{{ .Values.service.port }}
+{{- else if contains "ClusterIP" .Values.service.type }}
+  export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "banking-api.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
+  export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
+  echo "Visit http://127.0.0.1:8080 to use your application"
+  kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
+{{- end }}

docs/charts/banking-api/templates/_helpers.tpl

@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "banking-api.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "banking-api.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "banking-api.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "banking-api.labels" -}}
+helm.sh/chart: {{ include "banking-api.chart" . }}
+{{ include "banking-api.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "banking-api.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "banking-api.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "banking-api.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "banking-api.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}

docs/charts/banking-api/templates/deployment.yaml

@@ -0,0 +1,81 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    run: {{.Values.runlabel}}
+  name: dpg-bank-api-server-deployment
+spec:
+  template:
+     metadata:
+        name: {{.Values.deployment.name}}
+        labels:
+          run: {{.Values.runlabel}}
+     spec:
+        containers:
+          - image: {{.Values.deployment.appimage}}
+            imagePullPolicy: IfNotPresent
+            name: {{.Values.deployment.appimagename}}
+          - image: {{.Values.deployment.dpgimage}}
+            imagePullPolicy: IfNotPresent
+            name: {{.Values.deployment.dpgimagename}}
+            env:
+             - name: KMS
+               valueFrom:
+                 configMapKeyRef:
+                   name: {{.Values.configuration.configmapname}}
+                   key: KMS
+             - name: CERT_PATH
+               valueFrom:
+                  secretKeyRef:
+                    name: dpg-secret
+                    key: server.crt
+             - name: KEY_PATH
+               valueFrom:
+                  secretKeyRef:
+                    name: dpg-secret
+                    key: server.key
+             - name: TLS_ENABLED
+               valueFrom:
+                  configMapKeyRef:
+                    name: {{.Values.configuration.configmapname}}
+                    key: TLS_ENABLED
+             - name: REG_TOKEN
+               valueFrom:
+                  configMapKeyRef:
+                    name: {{.Values.configuration.configmapname}}
+                    key: REG_TOKEN
+             - name: DESTINATION_URL
+               valueFrom:
+                  configMapKeyRef:
+                    name: {{.Values.configuration.configmapname}}
+                    key: DESTINATION_URL
+
+  replicas: {{.Values.deployment.replicas}}
+  selector:
+      matchLabels:
+        run: {{.Values.runlabel}}
+
+---
+apiVersion: v1
+data:
+  server.crt: {{.Values.configuration.servercrt}}
+  server.key: {{.Values.configuration.serverkey}}
+kind: Secret
+metadata:
+  name: {{.Values.configuration.secretname}}
+type: Opaque
+---
+
+apiVersion: v1
+items:
+- apiVersion: v1
+  data:
+    TLS_ENABLED: {{.Values.configuration.tlsenabled | quote}}
+    KMS: {{.Values.configuration.kms}}
+    REG_TOKEN:  {{.Values.configuration.reg_token}}
+    DESTINATION_URL:  {{.Values.configuration.appurl}}
+  kind: ConfigMap
+  metadata:
+    name: {{.Values.configuration.configmapname}}
+kind: List
+metadata:

docs/charts/banking-api/templates/hpa.yaml

@@ -0,0 +1,28 @@
+{{- if .Values.autoscaling.enabled }}
+apiVersion: autoscaling/v2beta1
+kind: HorizontalPodAutoscaler
+metadata:
+  name: {{ include "banking-api.fullname" . }}
+  labels:
+    {{- include "banking-api.labels" . | nindent 4 }}
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: {{ include "banking-api.fullname" . }}
+  minReplicas: {{ .Values.autoscaling.minReplicas }}
+  maxReplicas: {{ .Values.autoscaling.maxReplicas }}
+  metrics:
+    {{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: cpu
+        targetAverageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
+    {{- end }}
+    {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: memory
+        targetAverageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    {{- end }}
+{{- end }}

docs/charts/banking-api/templates/service.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{.Values.service.name}}
+spec:
+  selector:
+    run: {{.Values.runlabel}}
+  type: {{.Values.service.type}}
+  ports:
+    - name: {{.Values.service.appname}}
+      port: {{.Values.service.appPort}}
+      targetPort: {{.Values.service.apptargetPort}}
+      nodePort: {{.Values.service.appnodePort}}

docs/charts/banking-api/templates/serviceaccount.yaml

@@ -0,0 +1,12 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "banking-api.serviceAccountName" . }}
+  labels:
+    {{- include "banking-api.labels" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end }}

docs/charts/banking-api/templates/tests/test-connection.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: "{{ include "banking-api.fullname" . }}-test-connection"
+  labels:
+    {{- include "banking-api.labels" . | nindent 4 }}
+  annotations:
+    "helm.sh/hook": test
+spec:
+  containers:
+    - name: wget
+      image: busybox
+      command: ['wget']
+      args: ['{{ include "banking-api.fullname" . }}:{{ .Values.service.port }}']
+  restartPolicy: Never

docs/charts/banking-api/values.yaml

@@ -0,0 +1,43 @@
+runlabel: banking-app-api-server
+
+deployment:
+  name: dpg-banking-app-api
+  appimagename: api-container
+  dpgimagename: dpg-container
+  replicas: 1
+  appimage: localhost:5000/bank_app_api
+  dpgimage: localhost:5000/ciphertrust-data-protection-gateway
+
+service:
+  name: api-svc
+  type: NodePort
+  appname: api-port
+  appnodePort: 32001
+  appPort: 8990
+  apptargetPort: 8990
+
+configuration:
+  secretname: dpg-secret
+  configmapname: dpg-configmap
+  kms: 192.168.2.213
+  appurl: http://localhost:8080
+  tlsenabled: false
+  reg_token: FkjpFN7BWCl1dLgQN0fCb1sfvqYcOLmZD9HkZ1JhdBOZQTTeUft0ZIqUrwzWRsLo
+
+  servercrt: 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
+  serverkey: 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
+
+serviceAccount:
+  create: true
+  annotations: {}
+  name: ""
+
+ingress:
+  enabled: true
+
+autoscaling:
+  enabled: false
+  minReplicas: 1
+  maxReplicas: 1
+  targetCPUUtilizationPercentage: 80
+  targetMemoryUtilizationPercentage: 80