v0.5.0 - Kubernetes Deployment & CI/CD

🚀 Release v0.5.0 - Kubernetes Deployment & CI/CD

This release adds production-ready Kubernetes deployment manifests and a comprehensive CI/CD pipeline.

✨ New Features

Kubernetes Deployment

• 🎯 Helm chart override pattern (follows dagster-deployment conventions)
• 🔐 Sealed secrets support for credential management
• 📦 ConfigMap with environment variables matching Settings class
• 📚 Comprehensive deployment documentation

CI/CD Pipeline

• ✅ Sequential workflow: lint → test → build-image
• 🔍 Ruff linter and formatter checks
• 🔬 Mypy type checking
• 🧪 Pytest with coverage reporting
• 🐳 Docker image build and push to GHCR (on version tags)
• 🏷️ Smart tagging: semver + latest

Docker Image

• 🐍 Python 3.14 multi-stage build
• 🔒 Non-root user (UID 1000)
• 💊 Health checks included
• ⚡ Optimized for production

📦 Container Images

# Pull the image
podman pull ghcr.io/arookieds/dagster-code-location-crypto-data:0.5.0
podman pull ghcr.io/arookieds/dagster-code-location-crypto-data:latest

Available tags:

• 0.5.0 - This release
• 0.5 - Minor version
• 0 - Major version
• latest - Latest stable release

🚀 Quick Start

1. Generate sealed secrets:

cd manifests
cp .env.example .env
# Edit .env with your credentials
sops exec-env .env "nu create_sealed_secrets.nu"

2. Deploy to Kubernetes:

kubectl apply -k manifests/

3. Register with main Dagster instance:
Update workspace configuration:

dagster-webserver:
  workspace:
    servers:
      - host: "crypto-data-crypto-data"
        port: 3030
        name: "crypto-data"

📚 Documentation

• Deployment Guide
• CI/CD Workflow
• Development Guide

🔐 Security

• Non-root container execution
• Sealed secrets for credentials
• No hardcoded secrets
• Security context with dropped capabilities
• Pre-commit hooks for secret detection

📊 Stats

• 11 files changed
• 841 insertions
• 110 tests passing
• 82% code coverage

🙏 Contributors

@arookieds

---

Full Changelog: v0.4.0...v0.5.0