deploy most apps to prod

environments/production/applications/ingress-definitions/.helmignore

@@ -0,0 +1,24 @@
+# Ansible managed. Don't change this file manually. Template info: ethereum_services_generator/.helmignore.j2
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

environments/production/applications/ingress-definitions/Chart.yaml

@@ -0,0 +1,4 @@
+apiVersion: v2
+name: ingress-definitions
+description: All ingress definitions for Sourcify
+version: 0.0.1

environments/production/applications/ingress-definitions/templates/ingress.docs.yaml

@@ -0,0 +1,38 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sourcify-docs
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  ingressClassName: ingress-nginx-public
+  tls:
+    - hosts:
+        - "docs.{{ .Values.testdomain }}"
+      secretName: ingress-sourcify-docs
+    #- hosts:
+    #    - "docs.{{ .Values.domain }}"
+    #  secretName: ingress-sourcify-og-docs
+  rules:
+    - host: "docs.{{ .Values.testdomain }}"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: sourcify-docs
+                port:
+                  number: 80
+    #- host: "docs.{{ .Values.domain }}"
+    #  http:
+    #    paths:
+    #      - path: /
+    #        pathType: Prefix
+    #        backend:
+    #          service:
+    #            name: sourcify-docs
+    #            port:
+    #              number: 80

environments/production/applications/ingress-definitions/templates/ingress.playground.yaml

@@ -0,0 +1,38 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sourcify-playground
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  ingressClassName: ingress-nginx-public
+  tls:
+    - hosts:
+        - "playground.{{ .Values.testdomain }}"
+      secretName: ingress-sourcify-playground
+    #- hosts:
+    #    - "playground.{{ .Values.domain }}"
+    #  secretName: ingress-sourcify-og-playground
+  rules:
+    - host: "playground.{{ .Values.testdomain }}"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: sourcify-playground
+                port:
+                  number: 80
+    #- host: "playground.{{ .Values.domain }}"
+    #  http:
+    #    paths:
+    #      - path: /
+    #        pathType: Prefix
+    #        backend:
+    #          service:
+    #            name: sourcify-playground
+    #            port:
+    #              number: 80

environments/production/applications/ingress-definitions/templates/ingress.repo.yaml

@@ -0,0 +1,38 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sourcify-repo
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  ingressClassName: ingress-nginx-public
+  tls:
+    - hosts:
+        - "repo.{{ .Values.testdomain }}"
+      secretName: ingress-sourcify-repo
+    #- hosts:
+    #    - "repo.{{ .Values.domain }}"
+    #  secretName: ingress-sourcify-og-repo
+  rules:
+    - host: "repo.{{ .Values.testdomain }}"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: sourcify-repository
+                port:
+                  number: 80
+    #- host: "repo.{{ .Values.domain }}"
+    #  http:
+    #    paths:
+    #      - path: /
+    #        pathType: Prefix
+    #        backend:
+    #          service:
+    #            name: sourcify-repository
+    #            port:
+    #              number: 80

environments/production/applications/ingress-definitions/templates/ingress.root.yaml

@@ -0,0 +1,87 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sourcify-root
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: "30m"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "120"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "120"
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: "120"
+spec:
+  ingressClassName: ingress-nginx-public
+  tls:
+    - hosts:
+        - "{{ .Values.testdomain }}"
+      secretName: ingress-sourcify-root
+    #- hosts:
+    #    - "{{ .Values.domain }}"
+    #  secretName: ingress-sourcify-og-root
+  rules:
+    - host: "{{ .Values.testdomain }}"
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: sourcify-ui
+                port:
+                  number: 80
+    #- host: "{{ .Values.domain }}"
+    #  http:
+    #    paths:
+    #      - path: /
+    #        pathType: Prefix
+    #        backend:
+    #          service:
+    #            name: sourcify-ui
+    #            port:
+    #              number: 80
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: sourcify-root-server
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-production"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/preserve-trailing-slash: "true"
+    nginx.ingress.kubernetes.io/rewrite-target: /$2
+    nginx.ingress.kubernetes.io/proxy-body-size: "30m"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "120"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "120"
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: "120"
+spec:
+  ingressClassName: ingress-nginx-public
+  tls:
+    - hosts:
+        - "{{ .Values.testdomain }}"
+      secretName: ingress-sourcify-root
+    #- hosts:
+    #    - "{{ .Values.domain }}"
+    #  secretName: ingress-sourcify-og-root
+  rules:
+    - host: "{{ .Values.testdomain }}"
+      http:
+        paths:
+          - path: /server(/|$)(.*)
+            pathType: Prefix
+            backend:
+              service:
+                name: sourcify-server
+                port:
+                  number: 80
+    #- host: "{{ .Values.domain }}"
+    #  http:
+    #    paths:
+    #      - path: /server(/|$)(.*)
+    #        pathType: Prefix
+    #        backend:
+    #          service:
+    #            name: sourcify-server
+    #            port:
+    #              number: 80

environments/production/applications/ingress-definitions/values.yaml

@@ -0,0 +1,3 @@
+
+testdomain: "sourcify-production.ethpandaops.io"
+domain: "sourcify.dev"

environments/production/applications/sourcify-docs/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

environments/production/applications/sourcify-docs/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: common
+  repository: https://bjw-s.github.io/helm-charts
+  version: 1.5.1
+digest: sha256:3588c89621170f198d4938664d3ea4c469bd91fd78183c83cfcf63f474d348c4
+generated: "2023-08-10T15:36:00.179305+02:00"

environments/production/applications/sourcify-docs/Chart.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: v2
+description: Sourcify is a Solidity source code and metadata verification tool. This runs the documentation web server.
+name: sourcify-docs
+home: https://github.com/sourcifyeth/docs
+type: application
+version: 0.0.1
+kubeVersion: ">=1.22.0-0"
+maintainers:
+  - name: skylenet
+    email: [email protected]
+dependencies:
+  - name: common
+    repository: https://bjw-s.github.io/helm-charts
+    version: 1.5.1

environments/production/applications/sourcify-docs/templates/common.yaml

@@ -0,0 +1,28 @@
+---
+{{- include "bjw-s.common.loader.init" . }}
+
+{{- define "app-template.nameOverride" -}}
+# Set the nameOverride based on the release name if no override has been set
+{{ if not .Values.global.nameOverride }}
+global:
+  nameOverride: "{{ .Release.Name }}"
+{{ end }}
+{{- end -}}
+{{- $_ := mergeOverwrite .Values (include "app-template.nameOverride" . | fromYaml) -}}
+
+{{- define "app-template.hardcodedValues"}}
+{{- if .Values.secrets.secretenv.enabled }}
+# Populate env from secret
+envFrom:
+  - secretRef:
+      name: {{ include "bjw-s.common.lib.chart.names.fullname" . }}-secretenv
+  {{- with .Values.envFrom }}
+  {{- toYaml . | nindent 2 }}
+  {{- end }}
+{{- end }}
+{{- end -}}
+
+{{- $_ := mergeOverwrite .Values (include "app-template.hardcodedValues" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "bjw-s.common.loader.generate" . }}

environments/production/applications/sourcify-docs/values.yaml

@@ -0,0 +1,63 @@
+image:
+  repository: ghcr.io/sourcifyeth/docs
+  tag: main@sha256:d8f4c2bbfcf72eb0a8488ae1e7d13998136c864f1f148f9cb3d8b3873a488f78
+  pullPolicy: IfNotPresent
+imagePullSecrets:
+  - name: image-pull-secret
+##
+## Application
+##
+controller:
+  type: deployment
+  replicas: 1
+  strategy: RollingUpdate
+service:
+  main:
+    enabled: true
+    primary: true
+    type: ClusterIP
+    ports:
+      http:
+        port: 80
+##
+## Environment configuration
+##
+env: {}
+##
+## Secrets
+##
+secrets:
+  secretenv:
+    enabled: false # If enabled, a Secret will be created and imported via envFrom into the main application.
+    stringData: {}
+##
+## Health probes
+##
+probes:
+  liveness:
+    enabled: true
+    spec:
+      initialDelaySeconds: 0
+      periodSeconds: 10
+      timeoutSeconds: 1
+      failureThreshold: 3
+  readiness:
+    enabled: true
+    spec:
+      initialDelaySeconds: 0
+      periodSeconds: 10
+      timeoutSeconds: 1
+      failureThreshold: 3
+  startup:
+    enabled: true
+    spec:
+      initialDelaySeconds: 0
+      timeoutSeconds: 1
+      periodSeconds: 5
+      failureThreshold: 30
+##
+## Ingress
+##
+ingress:
+  main:
+    enabled: false