Migrate auth-flow app from raw manifest definitions to HelmRelease and add to d8-ugmk-prod kustomization. Remove deprecated deployment and service resources and update related configurations.

apps/auth-flow/base/deployment.yaml

@@ -1,33 +0,0 @@
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: frontend
-  namespace: auth-flow
-  labels:
-    app: frontend
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: frontend
-  template:
-    metadata:
-      labels:
-        app: frontend
-        version: stable
-    spec:
-      containers:
-        - name: frontend
-          image: cr.yandex/crp3ccidau046kdj8g9q/auth-flow-frontend:contour_fe9ea2a3
-          imagePullPolicy: IfNotPresent
-          ports:
-            - name: http
-              containerPort: 80
-              protocol: TCP
-          resources:
-            requests:
-              cpu: 25m
-              memory: 100Mi
-      imagePullSecrets:
-        - name: regcred

apps/auth-flow/base/helmrelease.yaml

@@ -0,0 +1,94 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: frontend
+  namespace: auth-flow
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      frontend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/auth-flow-frontend:contour_fe9ea2a3
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: frontend
+
+          replicaCount:
+            _default: 1
+
+          port:
+            _default: 80
+
+          resources:
+            requests:
+              cpu:
+                _default: 25m
+              memory:
+                _default: 100Mi
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: frontend-svc
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 80
+
+          targetPort:
+            _default: 80
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""

apps/auth-flow/base/kustomization.yaml

@@ -4,5 +4,4 @@ kind: Kustomization
 namespace: auth-flow
 resources:
   - namespace.yaml
-  - deployment.yaml
+  - helmrelease.yaml
-  - service.yaml

apps/auth-flow/base/service.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: frontend-svc
-  namespace: auth-flow
-spec:
-  type: ClusterIP
-  selector:
-    app: frontend
-  ports:
-    - name: http
-      port: 80
-      targetPort: 80
-      protocol: TCP

apps/auth-flow/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: namespace.yaml
+    target:
+      kind: Namespace
+      name: auth-flow

apps/auth-flow/d8-ugmk-prod/namespace.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: auth-flow
+  labels:
+    istio-injection: disabled
+    security.deckhouse.io/pod-policy: privileged

apps/auth-flow/yc-k8s-test/kustomization.yaml

@@ -6,5 +6,5 @@ resources:
 patches: []
 #  - path: replicas.yaml
 #    target:
-#      kind: Deployment
+#      kind: HelmRelease
 #      name: frontend

apps/auth-flow/yc-k8s-test/replicas.yaml

@@ -1,8 +1,13 @@
 ---
-apiVersion: apps/v1
+apiVersion: helm.toolkit.fluxcd.io/v2
-kind: Deployment
+kind: HelmRelease
 metadata:
-  name: auth-frontend
+  name: frontend
   namespace: auth-flow
 spec:
-  replicas: 1
+  values:
+    services:
+      frontend:
+        deployment:
+          replicaCount:
+            _default: 1

clusters/d8-ugmk-prod/kustomization.yaml

@@ -21,4 +21,5 @@ resources:
   - ../../apps/control-interface/d8-ugmk-prod
   - ../../apps/cross-section/d8-ugmk-prod
   - ../../apps/reviews/d8-ugmk-prod
-  - ../../apps/remarks/d8-ugmk-prod
+  - ../../apps/remarks/d8-ugmk-prod
+  - ../../apps/auth-flow/d8-ugmk-prod