Add database migration pre-upgrade hook and update Helm values

- Added migration-job.yaml template for pre-upgrade MongoDB migrations
- Migration runs as Helm hook before each deployment upgrade
- Updated values-dev.yaml with MinIO secret configuration
- Updated values-test.yaml with all secret configurations and adjusted resources
- Minor whitespace fix in deploy-to-test.yaml

The migration job uses the same MongoDB credentials and runs db-migrate
up before the main deployment rolls out, ensuring database schema is
always up to date.

Author: danieltruong

.github/workflows/deploy-to-test.yaml

@@ -128,3 +128,4 @@ jobs:
           
           echo "Deployment successful!"
           oc get pods -n ${{ env.OPENSHIFT_NAMESPACE_TEST }} -l app.kubernetes.io/name=${{ env.APP_NAME }}
+

helm/eagle-api/templates/migration-job.yaml

@@ -0,0 +1,77 @@
+{{- if .Values.migrations.enabled }}
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ include "eagle-api.fullname" . }}-migration-{{ .Release.Revision }}
+  labels:
+    {{- include "eagle-api.labels" . | nindent 4 }}
+    app.kubernetes.io/component: migration
+  annotations:
+    # Helm hook configuration - runs before upgrade
+    "helm.sh/hook": pre-upgrade
+    "helm.sh/hook-weight": "-5"
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+  ttlSecondsAfterFinished: 300
+  backoffLimit: 3
+  template:
+    metadata:
+      labels:
+        {{- include "eagle-api.selectorLabels" . | nindent 8 }}
+        app.kubernetes.io/component: migration
+    spec:
+      restartPolicy: Never
+      containers:
+        - name: migration
+          image: "{{ .Values.migrations.image.repository }}:{{ .Values.migrations.image.tag | default .Values.image.tag }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          command:
+            - /bin/sh
+            - -c
+            - |
+              echo "Starting database migration..."
+              
+              # Create migration config
+              cat > database_migration.json << EOF
+              {
+                "defaultEnv": "local",
+                "local": {
+                  "driver": "mongodb",
+                  "database": "${MONGODB_DATABASE}",
+                  "user": "${MONGODB_USERNAME}",
+                  "password": "${MONGODB_PASSWORD}",
+                  "host": "${MONGODB_SERVICE_HOST}",
+                  "authSource": "${MONGODB_AUTHSOURCE}",
+                  "port": "27017"
+                }
+              }
+              EOF
+              
+              echo "Migration config created"
+              
+              # Run migrations
+              node ./node_modules/db-migrate/bin/db-migrate up --config database_migration.json --env local
+              
+              echo "Migration completed successfully"
+          env:
+            # MongoDB Configuration from Secret
+            - name: MONGODB_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.secrets.mongodb.name }}
+                  key: {{ .Values.secrets.mongodb.usernameKey }}
+            - name: MONGODB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.secrets.mongodb.name }}
+                  key: {{ .Values.secrets.mongodb.passwordKey }}
+            # MongoDB Configuration from ConfigMap
+            - name: MONGODB_SERVICE_HOST
+              value: {{ .Values.env.MONGODB_SERVICE_HOST | quote }}
+            - name: MONGODB_DATABASE
+              value: {{ .Values.env.MONGODB_DATABASE | quote }}
+            - name: MONGODB_AUTHSOURCE
+              value: {{ .Values.env.MONGODB_AUTHSOURCE | quote }}
+          resources:
+            {{- toYaml .Values.migrations.resources | nindent 12 }}
+{{- end }}

helm/eagle-api/values-dev.yaml

@@ -33,6 +33,12 @@ secrets:
     name: eagle-api-mongodb
     usernameKey: MONGODB_USERNAME
     passwordKey: MONGODB_PASSWORD
+  minio:
+    name: nr-object-store-credential
+    hostKey: endpoint_url
+    accessKeyKey: user_account
+    secretKeyKey: password
+    bucketKey: bucket_name
   ches:
     name: getok-secret
     clientIdKey: CLIENTID

helm/eagle-api/values-test.yaml

@@ -10,11 +10,11 @@ route:
 
 resources:
   limits:
-    cpu: 1000m
-    memory: 4Gi
+    cpu: 500m
+    memory: 2Gi
   requests:
-    cpu: 1000m
-    memory: 1Gi
+    cpu: 250m
+    memory: 512Mi
 
 env:
   API_HOSTNAME: eagle-test.apps.silver.devops.gov.bc.ca
@@ -28,6 +28,22 @@ keycloak:
   realm: eagle
   clientId: eagle-api-console
 
+secrets:
+  mongodb:
+    name: eagle-api-mongodb
+    usernameKey: MONGODB_USER
+    passwordKey: MONGODB_PASSWORD
+  minio:
+    name: nr-object-store-credential
+    hostKey: endpoint_url
+    accessKeyKey: user_account
+    secretKeyKey: password
+    bucketKey: bucket_name
+  ches:
+    name: getok-secret
+    clientIdKey: CLIENTID
+    clientSecretKey: CLIENT_SECRET
+
 persistence:
   size: 10Gi