Skip to content

Helm: refactor DB setup, external secrets, images#61

Merged
grugna merged 4 commits into
pcdc_devfrom
GEAR-540
May 15, 2026
Merged

Helm: refactor DB setup, external secrets, images#61
grugna merged 4 commits into
pcdc_devfrom
GEAR-540

Conversation

@paulmurdoch19
Copy link
Copy Markdown
Collaborator

Introduce a context-aware refactor of common Helm templates to support chartNameOverride and use a passed-in root context for lookups. Move DB initialization manifests into gearbox-middleware (add templates/db-init.yaml) and wire common.db-secret, common.db_setup_job, common.db_setup_sa, push-secret and bootstrap templates to accept a chart override. Update external-secrets templates to include base64Authz and service env secrets and adjust secret naming/resolution to use the new context/override. Switch gearbox and portal images to local test repositories/pullPolicy and expose a global.gearboxMatchingImage used by gearbox and gearbox-middleware (also add an initContainer to run DB migrations). Add postgres configuration to gearbox-middleware values.yaml and enable gearbox/gearbox-middleware by default in the default values. Remove jwt-keys templates and related volume mounts/secret references. Also tidy Chart.yaml dependencies for gearbox-middleware.

Introduce a context-aware refactor of common Helm templates to support chartNameOverride and use a passed-in root context for lookups. Move DB initialization manifests into gearbox-middleware (add templates/db-init.yaml) and wire common.db-secret, common.db_setup_job, common.db_setup_sa, push-secret and bootstrap templates to accept a chart override. Update external-secrets templates to include base64Authz and service env secrets and adjust secret naming/resolution to use the new context/override. Switch gearbox and portal images to local test repositories/pullPolicy and expose a global.gearboxMatchingImage used by gearbox and gearbox-middleware (also add an initContainer to run DB migrations). Add postgres configuration to gearbox-middleware values.yaml and enable gearbox/gearbox-middleware by default in the default values. Remove jwt-keys templates and related volume mounts/secret references. Also tidy Chart.yaml dependencies for gearbox-middleware.
Comment thread gearbox-default-values.yaml Outdated
Comment thread helm/gearbox/templates/db-init.yaml
Comment thread helm/gearbox/templates/deployment.yaml Outdated
Base automatically changed from pcdc-test to pcdc_dev May 12, 2026 18:17
@grugna
Copy link
Copy Markdown

grugna commented May 12, 2026

@paulmurdoch19 after I merged the other PR there is a small conflict, could you resolve it please?

paulmurdoch19 and others added 3 commits May 12, 2026 16:21
Switch default image references to quay.io builds and set appropriate tags/pullPolicies in gearbox-default-values.yaml (backend, frontend, middleware). Remove the ENABLE_PHI option from the gearbox chart (values.yaml, templates/deployment.yaml, and README) and simplify the gearboxG3auto/gearboxMiddlewareG3auto default secret maps in the Helm READMEs. Minor cleanup of commented legacy image entries.
Add S3_PROD_BUCKET_NAME environment variable to the gearbox deployment and include PROD_PROMOTION_ROLE_ARN in the gearbox credentials secret. Wire these to the gearboxG3auto Helm values (s3ProdBucketName, prodPromotionRoleArn) and perform a small values.yaml formatting cleanup. This enables configuring the production S3 bucket name and promotion role ARN via Helm values.
@grugna grugna merged commit 858131a into pcdc_dev May 15, 2026
1 check failed
@grugna grugna deleted the GEAR-540 branch May 15, 2026 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants