mirror of
https://github.com/dograh-hq/dograh.git
synced 2026-07-04 10:52:17 +02:00
88f4477edb
* feat: add Helm chart for Kubernetes deployment Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Replace bundled Bitnami subcharts with in-chart manifests on official images The Bitnami catalog removed all versioned image tags from docker.io/bitnami in Aug 2025 (old images frozen in bitnamilegacy, maintained catalog now behind a Broadcom subscription), so the bundled postgresql/redis/minio subcharts no longer pull. Replace them with plain in-chart manifests built on official upstream images, keeping the internal/all-in-one path fully self-contained and free of third-party chart packaging that can disappear: - internal-postgres.yaml: pgvector/pgvector:pg17 — upstream Postgres plus the `vector` extension the migrations require. POSTGRES_USER=dograh is the initdb superuser, so CREATE EXTENSION vector succeeds. - internal-redis.yaml: redis:7.4-alpine, password-protected, AOF persistence. - internal-minio.yaml: minio/minio, root creds shared with the app via a single secret (can't drift); the app auto-creates its bucket. Service/secret names are unchanged (<rel>-postgresql, <rel>-redisinternal-master, <rel>-minio) so the app wiring is untouched. Dep passwords are generated once and persisted across upgrades via lookup. Drop the Chart.yaml dependencies, Chart.lock, and the `helm dependency` step; the internal manifests gate on the mode toggles (database.mode=internal, etc.). Also fixes surfaced by smoke-testing on a live EKS cluster: - Dockerfile: ship the per-service run_*.sh entrypoints the chart invokes. - migrate-job: run as a post-install/pre-upgrade hook (the bundled Postgres does not exist during pre-install) with a wait-for-postgres init container. - backend env: declare POSTGRES_PASSWORD/REDIS_PASSWORD before the DATABASE_URL/ REDIS_URL that interpolate them (Kubernetes only expands back-references). - worker liveness probes: pgrep isn't in the slim runtime image; check /proc/1/cmdline instead (each worker execs its process as PID 1). - UI: set HOSTNAME=0.0.0.0 so Next.js standalone doesn't bind to the k8s-injected pod name (which maps to the pod IP only, breaking port-forward/loopback). Verified end-to-end on EKS 1.36: all pods Ready, migrations applied (pgvector extension + 27 tables), UI login page and web API served via port-forward. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| lib | ||
| AGENTS.md | ||
| CLAUDE.md | ||
| dump_docs_openapi.py | ||
| format.sh | ||
| generate_sdk.sh | ||
| lint.sh | ||
| makemigrate.ps1 | ||
| makemigrate.sh | ||
| migrate.ps1 | ||
| migrate.sh | ||
| pre_commit.sh | ||
| prepare-slack-message.sh | ||
| release_sdks.sh | ||
| rolling_update.sh | ||
| run_ari_manager.sh | ||
| run_arq_worker.sh | ||
| run_campaign_orchestrator.sh | ||
| run_dograh_init.sh | ||
| run_migrate.sh | ||
| run_web.sh | ||
| setup-worktree.sh | ||
| setup_custom_domain.sh | ||
| setup_fork.ps1 | ||
| setup_fork.sh | ||
| setup_local.devcontainer.md | ||
| setup_local.ps1 | ||
| setup_local.sh | ||
| setup_pipecat.sh | ||
| setup_remote.sh | ||
| setup_requirements.ps1 | ||
| setup_requirements.sh | ||
| start_docker.ps1 | ||
| start_docker.sh | ||
| start_services.sh | ||
| start_services_dev.ps1 | ||
| start_services_dev.sh | ||
| start_services_docker.sh | ||
| stop_services.ps1 | ||
| stop_services.sh | ||
| update_remote.sh | ||
| worktree-assign-port.sh | ||