all: replace minio with sourcegraph/blobstore (#218)

* all: replace minio with sourcegraph/blobstore
* all: use insiders tags for blobstore changes
* regenerate docs
* all: update docker images

Produced via:

```
sg ops update-images -t 187572_2022-12-06_cbecc5321c7d -kind helm ./charts/sourcegraph
sg ops update-images -t 187572_2022-12-06_cbecc5321c7d -kind helm ./charts/sourcegraph-migrator
```

Signed-off-by: Stephen Gutekanst <[email protected]>

Author: Stephen Gutekanst

charts/sourcegraph-migrator/README.md

@@ -80,7 +80,7 @@ In addition to the documented values, the `migrator` service also supports the f
 | migrator.args | list | `["up","-db=all"]` | Override default `migrator` container args Available commands can be found at https://docs.sourcegraph.com/admin/how-to/manual_database_migrations |
 | migrator.containerSecurityContext | object | `{"allowPrivilegeEscalation":false,"readOnlyRootFilesystem":true,"runAsGroup":101,"runAsUser":100}` | Security context for the `migrator` container, learn more from the [Kubernetes documentation](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container) |
 | migrator.env | object | `{}` | Environment variables for the `migrator` container |
-| migrator.image.defaultTag | string | `"4.2.0@sha256:d816e125395e99d8a25564f5a799f0e9bedf7c6230065619849e169d0865a35e"` | Docker image tag for the `migrator` image |
+| migrator.image.defaultTag | string | `"187572_2022-12-06_cbecc5321c7d@sha256:93fc175df594738a98a62f2057271824cdb674b0e63bedac9dc7cb0f04db76bb"` | Docker image tag for the `migrator` image |
 | migrator.image.name | string | `"migrator"` | Docker image name for the `migrator` image |
 | migrator.resources | object | `{"limits":{"cpu":"500m","memory":"100M"},"requests":{"cpu":"100m","memory":"50M"}}` | Resource requests & limits for the `migrator` container, learn more from the [Kubernetes documentation](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/) |
 | pgsql.auth.existingSecret | string | `""` | Name of existing secret to use for pgsql credentials This should match the setting in the sourcegraph chart values |

charts/sourcegraph-migrator/values.yaml

@@ -102,7 +102,7 @@ pgsql:
 migrator:
   image:
     # -- Docker image tag for the `migrator` image
-    defaultTag: 4.2.0@sha256:d816e125395e99d8a25564f5a799f0e9bedf7c6230065619849e169d0865a35e
+    defaultTag: 187572_2022-12-06_cbecc5321c7d@sha256:93fc175df594738a98a62f2057271824cdb674b0e63bedac9dc7cb0f04db76bb
     # -- Docker image name for the `migrator` image
     name: "migrator"
   # -- Environment variables for the `migrator` container

charts/sourcegraph/README.md

@@ -40,7 +40,7 @@ indexedSearch:
         cpu: "4"
         memory: 8G
 
-minio:
+blobstore:
   resources:
     limits:
       cpu: "1"

charts/sourcegraph/examples/basic/override.yaml

@@ -102,7 +102,7 @@ indexedSearchIndexer:
       cpu: "4"
       memory: 4G
 
-minio:
+blobstore:
   resources:
     limits:
       cpu: "1"

charts/sourcegraph/examples/common-modifications/override.yaml

@@ -3,7 +3,7 @@
 # - https://docs.sourcegraph.com/admin/install/kubernetes/helm#using-external-object-storage
 
 # Disable deployment of the built-in object storage
-minio:
+blobstore:
   enabled: false
 
 # we use YAML anchors and alias to keep override file clean

charts/sourcegraph/examples/external-object-storage/override.yaml

@@ -231,7 +231,6 @@ app.kubernetes.io/name: jaeger
 {{- $checksum := list .Values.codeInsightsDB.auth -}}
 {{- $checksum = append $checksum .Values.codeIntelDB.auth -}}
 {{- $checksum = append $checksum .Values.pgsql.auth -}}
-{{- $checksum = append $checksum .Values.minio.auth -}}
 checksum/auth: {{ toJson $checksum | sha256sum }}
 {{- end -}}
 

charts/sourcegraph/templates/_helpers.tpl

@@ -0,0 +1,110 @@
+{{- if .Values.blobstore.enabled -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    description: blobstore for storing LSIF uploads.
+  labels:
+    {{- include "sourcegraph.labels" . | nindent 4 }}
+    {{- if .Values.blobstore.labels }}
+      {{- toYaml .Values.blobstore.labels | nindent 4 }}
+    {{- end }}
+    deploy: sourcegraph
+    app.kubernetes.io/component: blobstore
+  name: {{ .Values.blobstore.name }}
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: {{ .Values.sourcegraph.revisionHistoryLimit }}
+  selector:
+    matchLabels:
+      {{- include "sourcegraph.selectorLabels" . | nindent 6 }}
+      app: blobstore
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/default-container: blobstore
+      {{- if .Values.sourcegraph.podAnnotations }}
+      {{- toYaml .Values.sourcegraph.podAnnotations | nindent 8 }}
+      {{- end }}
+      {{- if .Values.blobstore.podAnnotations }}
+      {{- toYaml .Values.blobstore.podAnnotations | nindent 8 }}
+      {{- end }}
+      labels:
+      {{- include "sourcegraph.selectorLabels" . | nindent 8 }}
+      {{- if .Values.sourcegraph.podLabels }}
+      {{- toYaml .Values.sourcegraph.podLabels | nindent 8 }}
+      {{- end }}
+      {{- if .Values.blobstore.podLabels }}
+      {{- toYaml .Values.blobstore.podLabels | nindent 8 }}
+      {{- end }}
+        deploy: sourcegraph
+        app: blobstore
+    spec:
+      containers:
+      - name: blobstore
+        env:
+        {{- range $name, $item := .Values.blobstore.env}}
+        - name: {{ $name }}
+          {{- $item | toYaml | nindent 10 }}
+        {{- end }}
+        image: {{ include "sourcegraph.image" (list . "blobstore") }}
+        imagePullPolicy: {{ .Values.sourcegraph.image.pullPolicy }}
+        args: {{- default (list "") .Values.blobstore.args | toYaml | nindent 8 }}
+        terminationMessagePolicy: FallbackToLogsOnError
+        ports:
+        - containerPort: 9000
+          name: blobstore
+        livenessProbe:
+          httpGet:
+            path: /
+            port: blobstore
+            scheme: HTTP
+          initialDelaySeconds: 60
+          timeoutSeconds: 5
+        readinessProbe:
+          httpGet:
+            path: /
+            port: blobstore
+            scheme: HTTP
+          periodSeconds: 5
+          timeoutSeconds: 5
+        {{- if not .Values.sourcegraph.localDevMode }}
+        resources:
+          {{- toYaml .Values.blobstore.resources | nindent 10 }}
+        {{- end }}
+        securityContext:
+          {{- toYaml .Values.blobstore.containerSecurityContext | nindent 10 }}
+        volumeMounts:
+        - name: blobstore-data
+          mountPath: /data
+        - name: blobstore
+          mountPath: /blobstore
+        {{- if .Values.blobstore.extraVolumeMounts }}
+        {{- toYaml .Values.blobstore.extraVolumeMounts | nindent 8 }}
+        {{- end }}
+      {{- if .Values.blobstore.extraContainers }}
+        {{- toYaml .Values.blobstore.extraContainers | nindent 6 }}
+      {{- end }}
+      securityContext:
+        {{- toYaml .Values.blobstore.podSecurityContext | nindent 8 }}
+      {{- include "sourcegraph.nodeSelector" (list . "blobstore" ) | trim | nindent 6 }}
+      {{- include "sourcegraph.affinity" (list . "blobstore" ) | trim | nindent 6 }}
+      {{- include "sourcegraph.tolerations" (list . "blobstore" ) | trim | nindent 6 }}
+      {{- with .Values.sourcegraph.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- include "sourcegraph.renderServiceAccountName" (list . "blobstore") | trim | nindent 6 }}
+      volumes:
+      - name: blobstore-data
+        persistentVolumeClaim:
+          claimName: blobstore
+      - name: blobstore
+        emptyDir: {}
+      {{- if .Values.blobstore.extraVolumes }}
+      {{- toYaml .Values.blobstore.extraVolumes | nindent 6 }}
+      {{- end }}
+{{- end }}

charts/sourcegraph/templates/blobstore/blobstore.Deployment.yaml

@@ -0,0 +1,19 @@
+{{- if .Values.blobstore.enabled -}}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    deploy: sourcegraph
+    app.kubernetes.io/component: blobstore
+  name: blobstore
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: {{ .Values.blobstore.storageSize }}
+  storageClassName: {{ .Values.storageClass.name }}
+  {{- if .Values.blobstore.volumeName }}
+  volumeName: {{ .Values.blobstore.volumeName }}
+  {{- end }}
+{{- end }}

charts/sourcegraph/templates/blobstore/blobstore.PersistentVolumeClaim.yaml

@@ -0,0 +1,26 @@
+{{- if .Values.blobstore.enabled -}}
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    {{- if .Values.blobstore.serviceAnnotations }}
+    {{- toYaml .Values.blobstore.serviceAnnotations | nindent 4 }}
+    {{- end }}
+  labels:
+    app: blobstore
+    deploy: sourcegraph
+    app.kubernetes.io/component: blobstore
+    {{- if .Values.blobstore.serviceLabels }}
+      {{- toYaml .Values.blobstore.serviceLabels | nindent 4 }}
+    {{- end }}
+  name: blobstore
+spec:
+  ports:
+  - name: blobstore
+    port: 9000
+    targetPort: blobstore
+  selector:
+    {{- include "sourcegraph.selectorLabels" . | nindent 4 }}
+    app: blobstore
+  type: {{ .Values.blobstore.serviceType | default "ClusterIP" }}
+{{- end }}