refactor(helm): split app chart, fix labels, allow ingress toggle, conditionally create CH secrets

* Implements the ability to disable the ingress object
* Changes the default "app" label to {{ include "hdx-oss.fullname" . }} instead of "app: app"
* Implements the ability to add custom labels to hyperdx
* Implements the ability to add custom annotations to hyperdx
* Disables the deployment of the clickhouse secret if .Values.clickhouse.enabled is false
* Splits app chart into separate service, ingress, and deployment charts

Author: bcarlock-mycarrier

charts/hdx-oss-v2/templates/app-deployment.yaml

@@ -0,0 +1,54 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "hdx-oss.fullname" . }}-app
+  labels:
+    {{- include "hdx-oss.labels" . | nindent 4 }}
+    app: {{ include "hdx-oss.fullname" . }}
+    {{- if .Values.hyperdx.labels }}
+    {{- with .Values.hyperdx.labels }}
+    {{- toYaml . | nindent 4 }} 
+    {{- end -}}
+    {{- end }}
+spec:
+  replicas: {{ .Values.hyperdx.replicas | default 1 }}
+  selector:
+    matchLabels:
+      {{- include "hdx-oss.selectorLabels" . | nindent 6 }}
+      app: {{ include "hdx-oss.fullname" . }}
+  template:
+    metadata:
+      labels:
+        {{- include "hdx-oss.selectorLabels" . | nindent 8 }}
+        app: {{ include "hdx-oss.fullname" . }}
+      annotations:
+      {{- if .Values.hyperdx.annotations }}
+        {{- with .Values.hyperdx.annotations }}
+        {{- toYaml . | nindent 8 }} 
+        {{- end -}}
+      {{- end }}
+    spec:
+      initContainers:
+        - name: wait-for-mongodb
+          image: busybox
+          command: ['sh', '-c', 'until nc -z {{ include "hdx-oss.fullname" . }}-mongodb {{ .Values.mongodb.port }}; do echo waiting for mongodb; sleep 2; done;']
+      containers:
+        - name: app
+          image: "{{ .Values.hyperdx.image }}"
+          ports:
+            - name: app-port
+              containerPort: {{ .Values.hyperdx.appPort }}
+            - name: api-port
+              containerPort: {{ .Values.hyperdx.apiPort }}
+          envFrom:
+            - configMapRef:
+                name: {{ include "hdx-oss.fullname" . }}-app-config
+          env:
+            - name: HYPERDX_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "hdx-oss.fullname" . }}-app-secrets
+                  key: api-key
+            {{- with .Values.hyperdx.env }}
+            {{- toYaml . | nindent 12 }}
+            {{- end }}

charts/hdx-oss-v2/templates/hyperdx-deployment.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "hdx-oss.fullname" . }}-app
+  labels:
+    {{- include "hdx-oss.labels" . | nindent 4 }}
+spec:
+  type: LoadBalancer
+  ports:
+    - port: {{ .Values.hyperdx.appPort }}
+      targetPort: {{ .Values.hyperdx.appPort }}
+      name: app
+  selector:
+    {{- include "hdx-oss.selectorLabels" . | nindent 4 }}
+    app: {{ include "hdx-oss.fullname" . }} 

charts/hdx-oss-v2/templates/hyperdx-service.yaml

@@ -0,0 +1,38 @@
+{{- if .Values.hyperdx.ingress.enabled -}}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "hdx-oss.fullname" . }}-app-ingress
+  labels:
+    {{- include "hdx-oss.labels" . | nindent 4 }}
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /$1
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    {{- if .Values.hyperdx.ingress.tls.enabled }}
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    {{- end }}
+    nginx.ingress.kubernetes.io/proxy-body-size: {{ .Values.hyperdx.ingress.proxyBodySize | quote }}
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: {{ .Values.hyperdx.ingress.proxyConnectTimeout | quote }}
+    nginx.ingress.kubernetes.io/proxy-send-timeout: {{ .Values.hyperdx.ingress.proxySendTimeout | quote }}
+    nginx.ingress.kubernetes.io/proxy-read-timeout: {{ .Values.hyperdx.ingress.proxyReadTimeout | quote }}
+spec:
+  ingressClassName: nginx
+  {{- if .Values.hyperdx.ingress.tls.enabled }}
+  tls:
+  - hosts:
+    - {{ .Values.hyperdx.ingress.host | default "localhost" }}
+    secretName: {{ .Values.hyperdx.ingress.tlsSecretName | default "hyperdx-tls" }}
+  {{- end }}
+  rules:
+    - host: {{ .Values.hyperdx.ingress.host | default "localhost" }}
+      http:
+        paths:
+          - path: /(.*)
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ include "hdx-oss.fullname" . }}-app
+                port:
+                  number: {{ .Values.hyperdx.appPort }}
+{{- end }}

charts/hdx-oss-v2/templates/ingress.yaml

@@ -7,6 +7,7 @@ metadata:
 type: Opaque
 data:
   api-key: {{ "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" | b64enc }}
+{{- if .Values.clickhouse.enabled }}
 ---
 apiVersion: v1
 kind: Secret
@@ -18,3 +19,4 @@ type: Opaque
 data:
   appUserPassword: {{ .Values.clickhouse.config.users.appUserPassword | toString | b64enc }}
   otelUserPassword: {{ .Values.clickhouse.config.users.otelUserPassword | toString | b64enc }}
+{{- end }}

charts/hdx-oss-v2/templates/secrets.yaml

@@ -10,7 +10,20 @@ hyperdx:
   appUrl: "http://localhost"
   logLevel: "info"
   usageStatsEnabled: true
+  annotations: {}
+    # myAnnotation: "myValue"
+  labels: {}
+    # myLabel: "myValue"
+  env: []
+    # - name: CLICKHOUSE_USER
+    #   value: abc
+    # - name: test
+    #   valueFrom:
+    #     secretKeyRef:
+    #       name: some-secret
+    #       key: some-key
   ingress:
+    enabled: false
     host: "localhost"  # Production domain
     proxyBodySize: "100m"
     proxyConnectTimeout: "60"