Move charts to its application repos

paritytech · May 17, 2024 · 75d624d · 75d624d
1 parent 2f36243
commit 75d624d
Show file tree

Hide file tree

Showing 8 changed files with 173 additions and 0 deletions.
diff --git a/helm/Chart.yaml b/helm/Chart.yaml
@@ -0,0 +1,9 @@
+apiVersion: v2
+name: substrate-faucet
+description: A Helm chart for Kubernetes
+type: application
+version: 0.2.0
+dependencies:
+  - name: substrate-faucet
+    version: "3.0.3"
+    repository: "https://paritytech.github.io/helm-charts/"
diff --git a/helm/templates/secrets.yaml b/helm/templates/secrets.yaml
@@ -0,0 +1,12 @@
+{{- range .Values.secrets }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .name }}
+type: Opaque
+data:
+  {{- range $key, $value := .envVars }}
+  {{ $key }}: {{ $value | b64enc }}
+  {{- end }}
+---
+{{- end }}
diff --git a/helm/values-parity-testnet-paseo.yaml b/helm/values-parity-testnet-paseo.yaml
@@ -0,0 +1,29 @@
+substrate-faucet:
+  faucet:
+    secret:
+      SMF_CONFIG_FAUCET_ACCOUNT_MNEMONIC: ref+vault://kv/argo-cd/substrate-faucet/opstooling-parity-testnet#PASEO_FAUCET_ACCOUNT_MNEMONIC
+      # We use the same recaptcha token for all faucets
+      SMF_CONFIG_RECAPTCHA_SECRET: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-testnet#FAUCET_RECAPTCHA_SECRET
+      SMF_CONFIG_MATRIX_ACCESS_TOKEN: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-testnet#PASEO_MATRIX_ACCESS_TOKEN
+    config:
+      SMF_CONFIG_NETWORK: 'paseo'
+      SMF_CONFIG_RPC_ENDPOINT: "wss://sys.dotters.network/paseo"
+      SMF_CONFIG_MATRIX_SERVER: 'https://matrix.org'
+      SMF_CONFIG_MATRIX_BOT_USER_ID: '@paseo-faucet:matrix.org'
+      SMF_CONFIG_FAUCET_IGNORE_LIST: ''
+    externalAccess: true
+  ingress:
+    enabled: true
+    annotations:
+      kubernetes.io/ingress.class: traefik-external
+      external-dns.alpha.kubernetes.io/target: traefik-external.parity-testnet.parity.io.
+      cert-manager.io/cluster-issuer: letsencrypt-dns01
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
+    host: paseo-faucet.parity-testnet.parity.io
+    tls:
+      - hosts:
+          - paseo-faucet.parity-testnet.parity.io
+        secretName: paseo-faucet.parity-testnet.parity.io
+  serviceMonitor:
+    enabled: true
diff --git a/helm/values-parity-testnet-rococo.yaml b/helm/values-parity-testnet-rococo.yaml
@@ -0,0 +1,27 @@
+substrate-faucet:
+  faucet:
+    secret:
+      SMF_CONFIG_FAUCET_ACCOUNT_MNEMONIC: ref+vault://kv/argo-cd/substrate-faucet/opstooling-parity-testnet#ROCOCO_FAUCET_ACCOUNT_MNEMONIC
+      SMF_CONFIG_RECAPTCHA_SECRET: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-testnet#FAUCET_RECAPTCHA_SECRET
+      SMF_CONFIG_MATRIX_ACCESS_TOKEN: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-testnet#ROCOCO_MATRIX_ACCESS_TOKEN
+    config:
+      SMF_CONFIG_NETWORK: 'rococo'
+      SMF_CONFIG_MATRIX_SERVER: 'https://matrix.org'
+      SMF_CONFIG_MATRIX_BOT_USER_ID: '@rococo-faucet-bot:matrix.org'
+      SMF_CONFIG_FAUCET_IGNORE_LIST: ''
+    externalAccess: true
+  ingress:
+    enabled: true
+    annotations:
+      kubernetes.io/ingress.class: traefik-external
+      external-dns.alpha.kubernetes.io/target: traefik-external.parity-testnet.parity.io.
+      cert-manager.io/cluster-issuer: letsencrypt-dns01
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
+    host: rococo-faucet.parity-testnet.parity.io
+    tls:
+      - hosts:
+          - rococo-faucet.parity-testnet.parity.io
+        secretName: rococo-faucet.parity-testnet.parity.io
+  serviceMonitor:
+    enabled: true
diff --git a/helm/values-parity-testnet-trappist.yaml b/helm/values-parity-testnet-trappist.yaml
@@ -0,0 +1,28 @@
+substrate-faucet:
+  faucet:
+    secret:
+      SMF_CONFIG_FAUCET_ACCOUNT_MNEMONIC: ref+vault://kv/argo-cd/substrate-faucet/opstooling-parity-testnet#TRAPPIST_FAUCET_ACCOUNT_MNEMONIC
+      SMF_CONFIG_RECAPTCHA_SECRET: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-testnet#FAUCET_RECAPTCHA_SECRET
+
+      SMF_CONFIG_MATRIX_ACCESS_TOKEN: ref+vault://kv/argo-cd/substrate-faucet/opstooling-parity-testnet#SMF_CONFIG_MATRIX_ACCESS_TOKEN_TRAPPIST
+    config:
+      SMF_CONFIG_NETWORK: "trappist"
+      SMF_CONFIG_MATRIX_SERVER: 'https://matrix.org'
+      SMF_CONFIG_MATRIX_BOT_USER_ID: '@trappist-faucet-bot:matrix.org'
+      SMF_CONFIG_FAUCET_IGNORE_LIST: ''
+    externalAccess: true
+  ingress:
+    enabled: true
+    annotations:
+      kubernetes.io/ingress.class: traefik-external
+      external-dns.alpha.kubernetes.io/target: traefik-external.parity-testnet.parity.io.
+      cert-manager.io/cluster-issuer: letsencrypt-dns01
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
+    host: trappist-faucet.parity-testnet.parity.io
+    tls:
+      - hosts:
+          - trappist-faucet.parity-testnet.parity.io
+        secretName: trappist-faucet.parity-testnet.parity.io
+  serviceMonitor:
+    enabled: true
diff --git a/helm/values-parity-testnet-westend.yaml b/helm/values-parity-testnet-westend.yaml
@@ -0,0 +1,28 @@
+substrate-faucet:
+  faucet:
+    secret:
+      SMF_CONFIG_FAUCET_ACCOUNT_MNEMONIC: ref+vault://kv/argo-cd/substrate-faucet/opstooling-parity-testnet#WESTEND_FAUCET_ACCOUNT_MNEMONIC
+      # We use the same recaptcha token for all faucets
+      SMF_CONFIG_RECAPTCHA_SECRET: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-testnet#FAUCET_RECAPTCHA_SECRET
+
+      SMF_CONFIG_MATRIX_ACCESS_TOKEN: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-testnet#WESTEND_MATRIX_ACCESS_TOKEN
+    config:
+      SMF_CONFIG_NETWORK: 'westend'
+      SMF_CONFIG_RPC_ENDPOINT: "wss://westend-rpc.polkadot.io/"
+      SMF_CONFIG_MATRIX_SERVER: 'https://matrix.org'
+      SMF_CONFIG_MATRIX_BOT_USER_ID: '@westend-faucet:matrix.org'
+      SMF_CONFIG_FAUCET_IGNORE_LIST: ''
+    externalAccess: true
+  ingress:
+    enabled: true
+    annotations:
+      kubernetes.io/ingress.class: traefik-external
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+      traefik.ingress.kubernetes.io/router.tls: "true"
+      # https://doc.traefik.io/traefik/providers/overview/#provider-namespace
+      # namespace - TLSOption name - provider (CRD)
+      traefik.ingress.kubernetes.io/router.tls.options: "traefik-mtls-options@kubernetescrd"
+    host: westend-faucet.polkadot.io
+  serviceMonitor:
+    enabled: true
+
diff --git a/helm/values-parity-versi.yaml b/helm/values-parity-versi.yaml
@@ -0,0 +1,25 @@
+substrate-faucet:
+  image:
+    repository: paritytech/faucet
+    tag: latest
+  faucet:
+    secret:
+      SMF_CONFIG_FAUCET_ACCOUNT_MNEMONIC: ref+vault://kv/argo-cd/substrate-faucet/opstooling-parity-versi#VERSI_FAUCET_ACCOUNT_MNEMONIC
+      SMF_CONFIG_RECAPTCHA_SECRET: '""'
+      SMF_CONFIG_MATRIX_ACCESS_TOKEN: ref+vault://kv/argo-cd/substrate-faucet/devops-parity-versi#SMF_BOT_MATRIX_ACCESS_TOKEN
+    config:
+      SMF_CONFIG_NETWORK: "versi"
+      SMF_CONFIG_MATRIX_SERVER: 'https://m.parity.io'
+      SMF_CONFIG_MATRIX_BOT_USER_ID: '@versi-faucet:parity.io'
+      SMF_CONFIG_FAUCET_IGNORE_LIST: ''
+      # TODO: remove these SMF_BACKEND_* / SMF_BOT_* vars after releasing corresponding faucet code
+      SMF_BACKEND_RPC_ENDPOINT: "wss://versi-rpc-node-0.parity-versi.parity.io/"
+      SMF_BACKEND_INJECTED_TYPES: '{}'
+      SMF_BACKEND_NETWORK_DECIMALS: 12
+      SMF_BOT_MATRIX_SERVER: 'https://m.parity.io'
+      SMF_BOT_MATRIX_BOT_USER_ID: '@versi-faucet:parity.io'
+      SMF_BOT_DRIP_AMOUNT: 100
+      SMF_BOT_NETWORK_UNIT: VRS
+      SMF_BOT_FAUCET_IGNORE_LIST: ''
+  serviceMonitor:
+    enabled: true
diff --git a/helm/values.yaml b/helm/values.yaml
@@ -0,0 +1,15 @@
+substrate-faucet:
+  extraLabels:
+    team: opstooling
+  resources:
+    requests:
+      memory: 128Mi
+      cpu: 0.1
+    limits:
+      memory: 512Mi
+  postgresql:
+    primary:
+      podLabels:
+        team: opstooling
+      persistence:
+        storageClass: "ssd-csi"