Story 16.1 — Helm chart skeleton + federation Deployment - #2
Merged
Conversation
Migrate the federation Helm chart skeleton into the dedicated customer-facing softclient4es-helm repo at softclient4es-federation/ (no helm/ prefix). Chart.yaml home/icon point to softclient4es.dev, sources to softclient4es-helm; README de-references the private repo (image published to public DockerHub). Root README points to the chart. Closes #1 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add per-ES-version sidecar Deployment/Service templates, the federation servers ConfigMap, and the helm test smoke Job, plus the two-sidecars golden + values fixture. Same path/repo rewrites as 16.1 (softclient4es.dev home/icon, softclient4es-helm sources, private-repo references removed). Closes #3 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add Secret key-name contract + per-key overrides + envFrom, Secret-backed federation→sidecar creds (CONFIG_FORCE_*), TLS-at-Ingress termination + Ingress template, secret-backend docs and example manifests (SealedSecrets/ESO), and secret-auth + ingress-tls goldens. Same path/repo rewrites as prior stories. Closes #5 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add single-cluster / three-region / heterogeneous-ready example overlays (each with README + ASCII diagram + install command + SHOW CATALOGS expectation) and their per-example goldens. three-region and heterogeneous-ready renders are byte-identical by design; the duckdb-attach source marker (3 vs 0) is the only discriminator. Same path/repo rewrites as prior stories. Closes #7 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add the chart-repo CI workflow (.github/workflows/federation-helm.yml) plus the deploy-es.sh / install-sealed-secrets.sh scripts, and the helm test smoke Job. CI redesigned for the chart-only repo: the sbt build-images job is replaced by an image-availability probe that docker-pulls the PUBLIC DockerHub federation + sidecar images and kind-loads them; live-install jobs are gated on image publication and skip-with-warning until published (OQ-1). JFROG creds + setup-java/setup-sbt removed. All static-validation gates (lint, template+kubeconform, golden diff, zero kind:Secret, duckdb-attach discriminator) run unconditionally. Trigger paths updated to softclient4es-federation/**. Smoke = ADBC GetCatalogs (1/3/3 per example). README CI section + Chart.yaml metadata rewritten to match (softclient4es.dev, softclient4es-helm sources, public DockerHub images, private-repo references removed). Closes #9 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add the canonical operator guide (softclient4es-federation/docs/operator-guide.md) that ships with the chart: prerequisites, single-cluster + multi-cluster paths, configuration reference, secret-backend chooser, licensing quota, migration, upgrades/rollback, troubleshooting + SRE incident-triage walkthrough. Authoritative copy — mirror language and private-repo references removed; working-directory convention uses softclient4es-federation/. Same Chart.yaml/README/CI rewrites as prior stories (softclient4es.dev metadata, public DockerHub images, chart-only CI). Closes #12 Refs #11 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
fupelaqu
marked this pull request as ready for review
June 23, 2026 11:46
Story 16.6 — Operator guide
Story 16.5 — helm test smoke + comprehensive CI/CD
Story 16.4 — Topology examples
Story 16.3 — Kubernetes Secrets, TLS, ESO compatibility
Story 16.2 — Per-ES-version sidecar packaging
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Establishes the
softclient4es-helmchart repo with thesoftclient4es-federation/chart skeleton (Chart.yaml, values.yaml, federation Deployment/Service/ServiceAccount, helpers, .helmignore, default golden, chart README) and a root README pointing to the chart.Migrated from the private
softclient4es-arrowrepo into this dedicated customer-facing chart repo. Chart path issoftclient4es-federation/(nohelm/prefix); Chart.yamlhome/iconusesoftclient4es.dev,sourcespoint to this repo; private-repo references removed.Static gates: helm lint OK, helm template + kubeconform OK (3 resources valid), default golden matches unchanged.
First link in the Epic-16 stacked chart chain (base:
main). Live kind installs (later stories) pull the public DockerHub federation/sidecar images and are gated until those images are published (OQ-1).Closes #1
🤖 Generated with Claude Code