Developer Hub + Microcks Provider (1.1.x)

helm.yaml

global:
 auth:
   backend:
     enabled: true
 clusterRouterBase: ---->[CHANGE ME]<-------
 dynamic:
   plugins:
    - package: "@microcks/[email protected]"
      integrity: sha512-/Pre7TmeJkVgPrdfTiG0wcYpZ1KM14/AE8kSwUfVGtae4k4/lqaUfMnexnp75ujXHItm+iuSWvCRNhOvEw3PuA==
      pluginConfig:
        catalog:
          providers:
            microcksApiEntity:
              dev:
                baseUrl: ---->[CHANGE ME]<-------
                serviceAccount: microcks-serviceaccount
                serviceAccountCredentials: ab54d329-e435-41ae-a900-ec6b3fe15c54
                systemLabel: domain
                ownerLabel: team
                addOpenAPIServerUrl: true
                schedule: # optional; same options as in TaskScheduleDefinition
                  frequency: { minutes: 2 }
                  timeout: { minutes: 1 }       
   includes:
     - dynamic-plugins.default.yaml
route:
 enabled: true
 host: '{{ .Values.global.host }}'
 path: /
 tls:
   enabled: true
   insecureEdgeTerminationPolicy: Redirect
   termination: edge
 wildcardPolicy: None
upstream:
 backstage:
   appConfig:
     app:
       baseUrl: 'https://{{- include "janus-idp.hostname" . }}'
     backend:
       auth:
         keys:
           - secret: '${BACKEND_SECRET}'
       baseUrl: 'https://{{- include "janus-idp.hostname" . }}'
       cors:
         origin: 'https://{{- include "janus-idp.hostname" . }}'
       database:
         connection:
           password: '${POSTGRESQL_ADMIN_PASSWORD}'
           user: postgres
   args:
     - '--config'
     - dynamic-plugins-root/app-config.dynamic-plugins.yaml
   containerPorts:
     backend: 7007
   extraEnvVars:
     - name: BACKEND_SECRET
       valueFrom:
         secretKeyRef:
           key: backend-secret
           name: '{{ include "janus-idp.backend-secret-name" $ }}'
     - name: POSTGRESQL_ADMIN_PASSWORD
       valueFrom:
         secretKeyRef:
           key: postgres-password
           name: '{{- include "janus-idp.postgresql.secretName" . }}'
   extraVolumeMounts:
     - mountPath: /opt/app-root/src/dynamic-plugins-root
       name: dynamic-plugins-root
   extraVolumes:
     - ephemeral:
         volumeClaimTemplate:
           spec:
             accessModes:
               - ReadWriteOnce
             resources:
               requests:
                 storage: 2Gi
       name: dynamic-plugins-root
     - configMap:
         defaultMode: 420
         name: dynamic-plugins
         optional: true
       name: dynamic-plugins
     - name: dynamic-plugins-npmrc
       secret:
         defaultMode: 420
         optional: true
         secretName: dynamic-plugins-npmrc
   image:
     pullPolicy: Always
     pullSecrets:
       - rhdh-pull-secret
     registry: registry.redhat.io
     repository: rhdh/rhdh-hub-rhel9
     tag: 1.1-107
   initContainers:
     - command:
         - ./install-dynamic-plugins.sh
         - /dynamic-plugins-root
       env:
         - name: NPM_CONFIG_USERCONFIG
           value: /opt/app-root/src/.npmrc.dynamic-plugins
       image: '{{ include "backstage.image" . }}'
       imagePullPolicy: Always
       name: install-dynamic-plugins
       volumeMounts:
         - mountPath: /dynamic-plugins-root
           name: dynamic-plugins-root
         - mountPath: /opt/app-root/src/dynamic-plugins.yaml
           name: dynamic-plugins
           readOnly: true
           subPath: dynamic-plugins.yaml
         - mountPath: /opt/app-root/src/.npmrc.dynamic-plugins
           name: dynamic-plugins-npmrc
           readOnly: true
           subPath: .npmrc
       workingDir: /opt/app-root/src
   installDir: /opt/app-root/src
   livenessProbe:
     httpGet:
       path: /healthcheck
       port: 7007
       scheme: HTTP
     failureThreshold: 3
     initialDelaySeconds: 60
     periodSeconds: 10
     successThreshold: 1
     timeoutSeconds: 2
   podAnnotations:
     checksum/dynamic-plugins: >-
       {{- include "common.tplvalues.render" ( dict "value"
       .Values.global.dynamic "context" $) | sha256sum }}
   readinessProbe:
     httpGet:
       path: /healthcheck
       port: 7007
       scheme: HTTP
     failureThreshold: 3
     initialDelaySeconds: 30
     periodSeconds: 10
     successThreshold: 2
     timeoutSeconds: 2
   replicas: 1
   revisionHistoryLimit: 10
 clusterDomain: cluster.local
 diagnosticMode:
   args:
     - infinity
   command:
     - sleep
   enabled: false
 ingress:
   enabled: false
   host: '{{ .Values.global.host }}'
   tls:
     enabled: false
 metrics:
   serviceMonitor:
     enabled: false
     path: /metrics
 nameOverride: developer-hub
 networkPolicy:
   egressRules:
     denyConnectionsToExternal: false
   enabled: false
 postgresql:
   auth:
     secretKeys:
       adminPasswordKey: postgres-password
       userPasswordKey: password
   enabled: true
   image:
     registry: registry.redhat.io
     repository: rhel9/postgresql-15
     tag: latest
   postgresqlDataDir: /var/lib/pgsql/data/userdata
   primary:
     containerSecurityContext:
       enabled: false
     extraEnvVars:
       - name: POSTGRESQL_ADMIN_PASSWORD
         valueFrom:
           secretKeyRef:
             key: postgres-password
             name: '{{- include "postgresql.v1.secretName" . }}'
     persistence:
       enabled: true
       mountPath: /var/lib/pgsql/data
       size: 1Gi
     podSecurityContext:
       enabled: false
 service:
   externalTrafficPolicy: Cluster
   ports:
     backend: 7007
     name: http-backend
     targetPort: backend
   sessionAffinity: None
   type: ClusterIP
 serviceAccount:
   automountServiceAccountToken: true
   create: false