main
{{- define "gitdata.name" -}}
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{- define "gitdata.fullname" -}}
{{- if .Values.fullnameOverride -}}
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
{{- else -}}
{{- $name := default .Chart.Name .Values.nameOverride -}}
{{- if contains $name .Release.Name -}}
{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
{{- else -}}
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{- end -}}
{{- end -}}
{{- define "gitdata.chart" -}}
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
{{- end -}}
{{- define "gitdata.labels" -}}
helm.sh/chart: {{ include "gitdata.chart" . }}
app.kubernetes.io/name: {{ include "gitdata.name" . }}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
{{- end -}}
{{- define "gitdata.selectorLabels" -}}
app.kubernetes.io/name: {{ include "gitdata.name" . }}
app.kubernetes.io/instance: {{ .Release.Name }}
{{- end -}}
{{- define "gitdata.serviceAccountName" -}}
{{- if .Values.serviceAccount.create -}}
{{- default (include "gitdata.fullname" .) .Values.serviceAccount.name -}}
{{- else -}}
{{- default "default" .Values.serviceAccount.name -}}
{{- end -}}
{{- end -}}
{{- define "gitdata.image" -}}
{{- $tag := default .Chart.AppVersion .Values.image.tag -}}
{{- printf "%s:%s" .Values.image.repository $tag -}}
{{- end -}}
{{- define "gitdata.secretName" -}}
{{- if .Values.secret.existingSecret -}}
{{- .Values.secret.existingSecret -}}
{{- else -}}
{{- printf "%s-env" (include "gitdata.fullname" .) -}}
{{- end -}}
{{- end -}}
{{/* 组件通用 env：端口/路径/URL 由 values 结构字段生成，用户 config.env 可覆盖 */}}
{{- define "gitdata.env" -}}
- name: APP_APIHOST__PORT
value: {{ .Values.apihost.port | quote }}
- name: APP_INTERNAL__RPC__LISTEN_ADDRESS
value: {{ printf "0.0.0.0:%v" .Values.apihost.rpcPort | quote }}
- name: APP_INTERNAL__EVENT_CLIENT__ENDPOINT
value: {{ printf "http://%s-event:%v" (include "gitdata.fullname" .) .Values.event.rpcPort | quote }}
{{- if .Values.event.enabled }}
- name: APP_EVENT__SOCKET__LISTEN_ADDRESS
value: {{ printf "0.0.0.0:%v" .Values.event.socketPort | quote }}
- name: APP_EVENT__RPC__LISTEN_ADDRESS
value: {{ printf "0.0.0.0:%v" .Values.event.rpcPort | quote }}
- name: APP_EVENT__PLATFORM__RPC_ENDPOINT
value: {{ printf "http://%s-apihost:%v" (include "gitdata.fullname" .) .Values.apihost.rpcPort | quote }}
- name: APP_EVENT__PLATFORM__RESOURCE_API_ENDPOINT
value: {{ printf "http://%s-apihost:%v/api/v1" (include "gitdata.fullname" .) .Values.apihost.port | quote }}
{{- end }}
{{- if .Values.identityKey.secretName }}
- name: APP_EVENT__RPC__IDENTITY_PRIVATE_KEY__FILE
value: {{ printf "%s/identity-private.pem" .Values.identityKey.mountPath | quote }}
- name: APP_INTERNAL__EVENT_CLIENT__PUBLIC_KEY__FILE
value: {{ printf "%s/identity-public.pem" .Values.identityKey.mountPath | quote }}
{{- end }}
- name: APP_GIT__KENSHELL_ENDPOINT
value: {{ .Values.kenshell.endpoint | quote }}
- name: APP_GIT__KENSHELL_RPC_KEY
value: {{ .Values.kenshell.rpcKey | quote }}
- name: APP_GIT__KENSHELL_TIMEOUT_SECS
value: {{ .Values.kenshell.timeoutSecs | quote }}
- name: APP_GIT__SSH_CLONE_HOST
value: {{ .Values.kenshell.sshCloneHost | quote }}
- name: APP_GIT__SSH_CLONE_PORT
value: {{ .Values.kenshell.sshClonePort | quote }}
{{- $base := printf "https://%s" .Values.ingress.host }}
- name: APP_WEB__WEB_BASE_URL
value: {{ default $base .Values.config.env.APP_WEB__WEB_BASE_URL | quote }}
- name: APP_GIT__BASE_URL
value: {{ default $base .Values.config.env.APP_GIT__BASE_URL | quote }}
{{- $cloneBase := default $base .Values.kenshell.httpCloneBaseUrl }}
- name: APP_GIT__HTTP_CLONE_BASE_URL
value: {{ default $cloneBase .Values.config.env.APP_GIT__HTTP_CLONE_BASE_URL | quote }}
{{- if .Values.metrics.otlpEndpoint }}
- name: OTEL_EXPORTER_OTLP_ENDPOINT
value: {{ .Values.metrics.otlpEndpoint | quote }}
# 服务名取各自的 component label（downward API），一处覆盖全部 workload；
# 不设的话所有进程在观测端会塌成一个 unknown_service:<bin>。
- name: OTEL_SERVICE_NAME
valueFrom:
fieldRef:
fieldPath: "metadata.labels['app.kubernetes.io/component']"
{{- end }}
{{- range $k, $v := .Values.config.env }}
{{- if and (not (hasPrefix "APP_WEB__WEB_BASE_URL" $k)) (not (hasPrefix "APP_GIT__BASE_URL" $k)) (not (hasPrefix "APP_GIT__HTTP_CLONE_BASE_URL" $k)) }}
{{/* config.env 走容器 env:，secret.env 走 envFrom:；同名时 env: 优先级更高，
会静默覆盖 Secret 里的真实值（例如把连接串换成 chart 默认的 redis://redis-master）。
因此这里跳过任何已在 secret.env 中声明的键，让 Secret 成为唯一来源。 */}}
{{- if not (hasKey $.Values.secret.env $k) }}
- name: {{ $k }}
value: {{ $v | quote }}
{{- end }}
{{- end }}
{{- end }}
{{- end -}}
{{- define "gitdata.envFrom" -}}
envFrom:
- configMapRef:
name: {{ printf "%s-env" (include "gitdata.fullname" .) }}
- secretRef:
name: {{ include "gitdata.secretName" . }}
optional: true
{{- end -}}
{{/* 抗节点故障软反亲和 */}}
{{- define "gitdata.podAntiAffinity" -}}
{{- $ctx := .ctx -}}
podAntiAffinity:
{{ if eq .mode "hard" }}requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels: {{- include "gitdata.selectorLabels" $ctx | nindent 10 }}
app.kubernetes.io/component: {{ .component }}
topologyKey: kubernetes.io/hostname
{{ else if eq .mode "soft" }}preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100
podAffinityTerm:
labelSelector:
matchLabels: {{- include "gitdata.selectorLabels" $ctx | nindent 12 }}
app.kubernetes.io/component: {{ .component }}
topologyKey: kubernetes.io/hostname
{{ end }}
{{- end -}}
{{- define "gitdata.imagePullSecrets" -}}
{{- with .Values.imagePullSecrets }}
imagePullSecrets:
{{- toYaml . | nindent 2 }}
{{- end }}
{{- end -}}