too much for one commit

Charts/entkube/templates/secrets-deployment.yaml

@@ -0,0 +1,51 @@
+{{- if .Values.secrets.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "entkube.fullname" . }}-secrets
+  labels:
+    {{- include "entkube.labels" . | nindent 4 }}
+    app.kubernetes.io/component: secrets
+spec:
+  replicas: {{ .Values.secrets.replicaCount }}
+  selector:
+    matchLabels:
+      {{- include "entkube.selectorLabels" . | nindent 6 }}
+      app.kubernetes.io/component: secrets
+  template:
+    metadata:
+      labels:
+        {{- include "entkube.selectorLabels" . | nindent 8 }}
+        app.kubernetes.io/component: secrets
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      serviceAccountName: {{ include "entkube.serviceAccountName" . }}
+      containers:
+        - name: secrets
+          image: {{ include "entkube.image" (dict "root" . "component" .Values.secrets) }}
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          ports:
+            - name: http
+              containerPort: {{ .Values.secrets.port }}
+              protocol: TCP
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 30
+          readinessProbe:
+            httpGet:
+              path: /health/ready
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          resources:
+            {{- toYaml .Values.secrets.resources | nindent 12 }}
+          env:
+            - name: ASPNETCORE_URLS
+              value: "http://+:{{ .Values.secrets.port }}"
+{{- end }}

Charts/entkube/templates/secrets-service.yaml

@@ -0,0 +1,19 @@
+{{- if .Values.secrets.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "entkube.fullname" . }}-secrets
+  labels:
+    {{- include "entkube.labels" . | nindent 4 }}
+    app.kubernetes.io/component: secrets
+spec:
+  type: ClusterIP
+  ports:
+    - port: {{ .Values.secrets.port }}
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    {{- include "entkube.selectorLabels" . | nindent 4 }}
+    app.kubernetes.io/component: secrets
+{{- end }}

Charts/entkube/values-dev.yaml

@@ -0,0 +1,91 @@
+# Default values override for local development (k3d/kind/minikube)
+
+replicaCount: 1
+
+image:
+  registry: localhost:5050
+  pullPolicy: Always
+  tag: "dev"
+
+web:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: entkube/web
+  port: 5000
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 512Mi
+
+clusters:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: entkube/clusters
+  port: 5010
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 256Mi
+
+provisioning:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: entkube/provisioning
+  port: 5020
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 256Mi
+
+identity:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: entkube/identity
+  port: 5030
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 256Mi
+
+secrets:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: entkube/secrets
+  port: 5040
+  resources:
+    requests:
+      cpu: 50m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 256Mi
+
+ingress:
+  enabled: true
+  provider: traefik
+  host: entkube.localhost
+  tls:
+    enabled: false
+    secretName: ""
+
+serviceAccount:
+  create: true
+  name: ""
+  annotations: {}

Charts/entkube/values.yaml

@@ -68,6 +68,20 @@ identity:
       cpu: 500m
       memory: 256Mi
 
+secrets:
+  enabled: true
+  replicaCount: 1
+  image:
+    repository: entkube/secrets
+  port: 5040
+  resources:
+    requests:
+      cpu: 100m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 256Mi
+
 # Ingress configuration — select your strategy
 ingress:
   enabled: true