Files
helm-charts/cyberchef/templates/cyberchef.deployment.yaml
T
jklein 6779e49355 Add per-workload replicas values and a chart-global scaleDown flag
Every Deployment/StatefulSet now takes its replica count from a replicas
value (default 1, explicit 0 allowed) via a new per-chart <chart>.replicas
helper; the helper uses a kindIs "invalid" nil check so an explicit 0 is
not swallowed by Helm's default function. A chart-global scaleDown flag
(default false) takes precedence: it renders every workload with
replicas: 0 and suspends the paperless-ngx consume CronJob, stopping the
app without uninstalling it (PVCs, Secrets, Services and Ingress remain).

Defaults leave the rendered manifests byte-identical to main, so all
published charts get a minor version bump; the template-chart carries the
reference helper implementation and stays unversioned.

Fixes #25
2026-08-22 08:12:40 +02:00

52 lines
1.9 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
labels:
app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
spec:
replicas: {{ include "cyberchef.replicas" (dict "scaleDown" .Values.scaleDown "replicas" .Values.cyberchef.replicas) }}
selector:
matchLabels:
app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
template:
metadata:
name: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
labels:
app: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
spec:
automountServiceAccountToken: false
securityContext:
{{- toYaml .Values.cyberchef.securityContext.pod | nindent 8 }}
containers:
- name: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
image: "ghcr.io/gchq/cyberchef:{{ .Chart.AppVersion }}"
imagePullPolicy: IfNotPresent
securityContext:
{{- toYaml .Values.cyberchef.securityContext.container | nindent 12 }}
volumeMounts:
# nginx needs writable cache/temp dirs and a writable pid file
# location when the root filesystem is read-only.
- name: nginx-cache
mountPath: /var/cache/nginx
- name: nginx-run
mountPath: /run
ports:
- containerPort: 80
protocol: TCP
name: http
livenessProbe:
{{- toYaml .Values.cyberchef.livenessProbe | nindent 12 }}
readinessProbe:
{{- toYaml .Values.cyberchef.readinessProbe | nindent 12 }}
startupProbe:
{{- toYaml .Values.cyberchef.startupProbe | nindent 12 }}
resources:
{{- include "cyberchef.resources" .Values.cyberchef.resources | nindent 12 }}
volumes:
- name: nginx-cache
emptyDir: {}
- name: nginx-run
emptyDir: {}
restartPolicy: Always