@catladder/cli 0.0.0-next-1cd29c1f → 0.0.0-next-52feb889

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: mongodb
+  repository: https://charts.bitnami.com/bitnami
+  version: 12.1.27
+- name: mailhog
+  repository: https://codecentric.github.io/helm-charts
+  version: 5.0.1
+digest: sha256:8963e4182d88c519cf73b6c1e18f9993827b7bf7b54432f56b7b8c5d758bcf8e
+generated: "2022-07-25T19:15:40.334548+02:00"

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/Chart.yaml

@@ -0,0 +1,14 @@
+apiVersion: v2
+description: a chart to rule them all
+name: the-panter-chart
+version: 1.0.0 # should not matter
+
+dependencies:
+  - name: mongodb
+    version: 12.1.27
+    condition: mongodb.enabled
+    repository: https://charts.bitnami.com/bitnami
+  - name: mailhog
+    version: 5.0.1
+    condition: mailhog.enabled
+    repository: https://codecentric.github.io/helm-charts

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/README.md

@@ -0,0 +1,24 @@
+# The panter chart
+
+**Main chart used in https://git.panter.ch/catladder/gitlab-ci/ **
+
+Developing helm charts can be complex and they tend to be very verbose.
+Our goal is therefore to provide a common chart that provides all functionalities that you might need
+and make it configurable by values.yml files in your project.
+
+This way we avoid having complexity in the projects and make it easier to share innovations and improvements.
+
+## Features
+
+- scalable stateless webapplications, supports any technology
+- ready-to-use but configurable ingress with optional redirects
+- 1 optional worker pod (uses same image as webapp) for continuous background jobs
+- configurable cronjobs
+- configurable helm-hooks (post-install, post-uninstall, etc.)
+- optional in-namespace mongodb. _kindof deprecated, We recommend to use google cloud dbs if possible._
+- optional cloud-sql proxy that is available in webapp, worker, cronjobs and helm-hooks
+- a lot of useful predefined env-vars in all pods.
+- support for namespace secrets and custom env-vars (using catladder-shell and gitlab-ci)
+- optional prisam1 (_deprecated, prisma2 does not need a separate instance anymore_)
+
+See https://git.panter.ch/catladder/catladder/ for usage information

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/myvalues.yaml

@@ -0,0 +1,15 @@
+application:
+  command: main foo.js
+
+env:
+  public:
+    FOO: bar
+  fromComponents:
+    api:
+      API_URL: ROOT_URL
+
+cloudsql:
+  enabled: true
+
+mailhog:
+  enabled: true

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/_helpers.tpl

@@ -0,0 +1,202 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{- define "appImage" -}}
+  {{ .Values.image.repository }}/{{ .Values.image.name }}:{{ .Values.image.tag }}
+{{- end -}}
+
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "fullname" -}}
+{{- default .Release.Name .Values.global.appName | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+
+{{/*
+create a prefix for variable names, this is useful in service discovery in review apps
+*/}}
+{{- define "serviceVarPrefix" -}}
+{{ include "fullname" . | snakecase | upper }}
+{{- end -}}
+
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+
+{{/*
+get the right host
+*/}}
+{{- define "host" -}}
+   {{- default .Values.application.hostCanonical .Values.application.host -}}
+{{- end -}}
+
+{{- define "MAILHOG_SMTP_URL" -}}
+{{- $namespace := .Release.Namespace -}}
+{{- printf "smtp://%s.%s.svc.cluster.local:1025" .Values.mailhog.fullnameOverride $namespace -}}
+{{- end -}}
+
+{{- define "DB_NAME" -}}
+{{ .Values.cloudsql.fullDbName }}
+{{- end -}}
+
+{{- define "POSTGRESQL_URL" -}}
+postgresql://{{ .Values.cloudsql.dbUser }}:$(POSTGRESQL_PASSWORD)@localhost/{{ .Values.cloudsql.fullDbName }}?schema=public
+{{- end -}}
+
+{{- define "POSTGRESQL_HOST" -}}
+localhost
+{{- end -}}
+
+{{- define "DB_USERNAME" -}}
+{{ .Values.cloudsql.dbUser }}
+{{- end -}}
+
+
+{{- define "DB_PASSWORD" -}}
+$(POSTGRESQL_PASSWORD)
+{{- end -}}
+
+
+{{- define "cloudSqlContainer" -}}
+name: cloudsql-proxy
+image: eu.gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.18.0-alpine
+# see https://github.com/kubernetes/kubernetes/issues/25908#issuecomment-308569672
+# and https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/753-sidecar-containers
+command: ["/bin/sh", "-c"]
+args:
+  - |
+    /cloud-sql-proxy --auto-ip --credentials-file /secrets/cloudsql/credentials.json "{{ .Values.cloudsql.instanceConnectionName }}" &
+    CHILD_PID=$!
+    (while true; do if [[ -f "/tmp/pod/main-terminated" ]]; then kill $CHILD_PID; fi; sleep 1; done) &
+    wait $CHILD_PID
+    if [[ -f "/tmp/pod/main-terminated" ]]; then exit 0; fi
+securityContext:
+  runAsUser: 2  # non-root user
+  allowPrivilegeEscalation: false
+resources: # each container needs requests, or the auto load balancer does not work
+  requests:
+    cpu: 50m
+    memory: 150Mi
+volumeMounts:
+  - name: cloudsql-proxy-credentials
+    mountPath: /secrets/cloudsql
+    readOnly: true
+    
+  - mountPath: /tmp/pod
+    name: tmp-pod
+    readOnly: true
+{{- end -}}
+
+{{- define "cloudSqlCredentialsVolume" -}}
+name: cloudsql-proxy-credentials
+secret:
+  secretName: {{ template "fullname" $ }}-cloudsql-proxy-credentials
+{{- end -}}
+{{/*
+Generate prisma-URL
+*/}}
+{{- define "PRISMA_ENDPOINT" -}}
+  {{- $appName := default .Release.Name .Values.global.appName -}}
+  {{- $namespace := .Release.Namespace -}}
+  {{- printf "http://%s-prisma.%s:4466/default/default" $appName $namespace -}}
+{{- end -}}
+
+
+
+
+{{/*
+convert value to json-string if its an object
+*/}}
+{{- define "envValue" -}}
+  {{- if (kindIs "map" .) -}}
+    {{ toJson . | quote}}
+  {{- else -}}
+    {{ quote . }}
+  {{- end -}}
+{{- end -}}
+
+
+{{- define "env" -}}
+{{ $context := . }}
+
+
+
+envFrom:
+  - configMapRef:
+      name: {{ template "fullname" $ }}-app-env
+env: 
+  {{- range $key, $val := .Values.env.secret }}
+  - name: {{ $key }}
+    valueFrom:
+      secretKeyRef:
+        name: {{ template "fullname" $ }}-app-secrets
+        key: {{ $key }}
+  {{- end }}
+
+  {{- range $key, $val := .Values.secretsFromOtherComponent }}
+  
+  - name: {{ $key }}
+    valueFrom:
+      secretKeyRef:
+        name: {{ $.Values.global.appPrefix}}{{ $val }}-app-secrets
+        key: {{ $key }}
+        optional: true
+  {{- end }}
+
+  {{- range $key, $val := .Values.mapServiceUrlToEnv }}
+  {{- $otherServiceFullName := (printf "%s%s" $.Values.global.appPrefix $val) }}
+  {{- $variablePrefix := $otherServiceFullName | snakecase | upper }}
+  - name: {{ $key }}
+    value: "http://$({{ $variablePrefix }}_SERVICE_HOST):$({{ $variablePrefix }}_SERVICE_PORT)"
+  {{- end }}
+
+  # can't have these in app.env.configmap as some values contain  $(OTHER_ENV_VAR)
+  {{ if .Values.cloudsql.enabled }}
+  - name: POSTGRESQL_URL
+    value: "{{- template "POSTGRESQL_URL" . -}}"
+  - name: DATABASE_URL
+    value: "{{- template "POSTGRESQL_URL" . -}}"
+  
+  - name: POSTGRESQL_HOST
+    value: "{{- template "POSTGRESQL_HOST" . -}}"
+  - name: DB_HOST # alias
+    value: "{{- template "POSTGRESQL_HOST" . -}}"
+  - name: DB_NAME 
+    value: "{{- template "DB_NAME" . -}}"
+  - name: DB_USERNAME #alias
+    value: "{{- template "DB_USERNAME" . -}}"
+  - name: DB_PASSWORD #alias
+    value: "{{- template "DB_PASSWORD" . -}}"
+  - name: POSTGRESQL_DBNAME # alias
+    value: "{{- template "DB_NAME" . -}}"
+  {{- end -}}
+ 
+{{- end -}}
+
+
+
+{{- define "visualReviewSnippet" -}}
+  <script
+    data-project-id='{{.Values.gitlab.projectId}}'
+    data-merge-request-id='{{.Values.gitlab.mergeRequestId}}'
+    data-mr-url='https://git.panter.ch'
+    data-project-path='{{.Values.gitlab.projectPath}}'
+    id='review-app-toolbar-script'
+    src='https://git.panter.ch/assets/webpack/visual_review_toolbar.js'>
+  </script>
+{{- end -}}

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.cloudsql-proxy-credentials.yml

@@ -0,0 +1,10 @@
+{{- if .Values.cloudsql.enabled -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ template "fullname" . }}-cloudsql-proxy-credentials
+  labels:
+    app: {{ .Release.Name }}
+data:
+  credentials.json: {{ .Values.cloudsql.proxyCredentials | b64enc}}
+{{- end }}

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.cronjobs.yml

@@ -0,0 +1,69 @@
+
+{{ $jobs := .Values.cronjobs }}
+{{ if $jobs }}
+{{ $context := . }}
+{{ range $key, $job := $jobs -}}
+
+{{- $name := (kindIs "map" $jobs) | ternary $key $job.name -}}
+
+apiVersion: batch/v1
+kind: CronJob
+
+metadata:
+  name: {{ include "fullname" $context | trunc 24}}-{{ $name | trunc 35 | lower }}
+  namespace: {{ $context.Release.Namespace }}
+  labels:
+    app: {{ $context.Release.Name }}
+    app.kubernetes.io/managed-by: {{$context.Release.Service | quote }}
+    app.kubernetes.io/instance: {{$context.Release.Name | quote }}
+    helm.sh/chart: "{{$context.Chart.Name}}-{{$context.Chart.Version}}"
+
+spec:
+  schedule: {{ $job.schedule | quote}}
+  {{if $job.timeZone -}}
+  timeZone: {{ $job.timeZone | quote }}
+  {{end}}
+  # concerning concurreny we also set it to allow as default like in kubernetes i
+  # see https://kubernetes.io/docs/tasks/job/automated-tasks-with-cron-jobs/#concurrency-policy
+  concurrencyPolicy: "{{- default "Allow" $job.concurrencyPolicy -}}"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          {{- if $context.Values.image.pullSecret }}
+          imagePullSecrets:
+            - name: {{ $context.Values.image.pullSecret }}
+          {{- end }}
+          restartPolicy: Never
+          containers:
+          - name: {{ $name }}-cronjob
+            {{include "env" $context | nindent 12}}
+            {{if $job.image -}}
+            image: "{{ $job.image }}"
+            {{else}}
+            image: "{{ template "appImage" $context}}"
+            {{end}}
+            imagePullPolicy: {{ $context.Values.image.pullPolicy }}
+            # see https://github.com/kubernetes/kubernetes/issues/25908#issuecomment-308569672
+            command:  ["/bin/sh", "-c"]
+            args:
+              - |
+                trap "touch /tmp/pod/main-terminated" EXIT
+                {{$job.command}}
+            volumeMounts:
+            - mountPath: /tmp/pod
+              name: tmp-pod
+            resources:
+{{ toYaml $context.Values.jobDefaults.resources | indent 14 }}
+          {{if $context.Values.cloudsql.enabled}}
+          - {{- include "cloudSqlContainer" $context | nindent 12 }}
+          {{- end }}
+          volumes:
+            - name: tmp-pod
+              emptyDir: {}
+          {{if $context.Values.cloudsql.enabled}}
+            - {{- include "cloudSqlCredentialsVolume" $context | nindent 14 }}
+          {{- end }}
+---
+{{- end }}
+{{- end }}

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.deployment.autoscaler.yml

@@ -0,0 +1,19 @@
+
+{{- if .Values.application.enabled -}}
+{{- if .Values.application.autoscale -}}
+{{ $context := . }}
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: {{ template "fullname" $context }}-app-autoscaler
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: {{ template "fullname" $context }}-app
+{{ toYaml .Values.application.autoscale | indent 2 }}   
+
+{{- end }}
+{{- end }}
+

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.deployment.yml

@@ -0,0 +1,103 @@
+
+{{- if .Values.application.enabled -}}
+{{ $context := . }}
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ template "fullname" $context }}-app
+  annotations:
+    "cluster-autoscaler.kubernetes.io/safe-to-evict": "true"
+    {{ if .Values.gitlab.app }}app.gitlab.com/app: {{ .Values.gitlab.app | quote }}{{ end }}
+    {{ if .Values.gitlab.env }}app.gitlab.com/env: {{ .Values.gitlab.env | quote }}{{ end }}
+  labels:
+    app: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  replicas: {{ .Values.application.replicas }}
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: {{ template "fullname" $context }}-app
+      release: {{ .Release.Name }}
+  strategy: 
+{{ toYaml .Values.application.updateStrategy | indent 4 }}
+  template:
+    metadata:
+      annotations:
+        {{ if .Values.gitlab.app }}app.gitlab.com/app: {{ .Values.gitlab.app | quote }}{{ end }}
+        {{ if .Values.gitlab.env }}app.gitlab.com/env: {{ .Values.gitlab.env | quote }}{{ end }}
+      labels:
+        app: {{ template "fullname" $context }}-app
+        release: {{ .Release.Name }}
+    spec:
+      {{- if .Values.image.pullSecret }}
+      imagePullSecrets:
+        - name: {{ .Values.image.pullSecret }}
+      {{- end }}
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      terminationGracePeriodSeconds: 30
+      tolerations: 
+        {{- if  and  .Values.global.ENV_SHORT (eq .Values.global.ENV_SHORT "review")}}
+          - key: "stage"
+            operator: "Equal"
+            value: "review"
+            effect: "NoSchedule"
+        {{- end }}
+    
+      containers:
+      - name: {{ template "fullname" $context }}-app
+        image: "{{ template "appImage" .}}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        {{ if .Values.application.command }}
+        
+        command:  ["/bin/sh", "-c"]
+        args: 
+          - |
+            {{(kindIs "slice" .Values.application.command) | ternary (join " " .Values.application.command) .Values.application.command}}
+     
+        {{- end }}
+        {{include "env" $context | nindent 8}}
+        startupProbe:
+{{ toYaml .Values.application.startupProbe | indent 10 }}       
+        livenessProbe:
+{{ toYaml .Values.application.livenessProbe | indent 10 }}
+        readinessProbe:
+{{ toYaml .Values.application.readinessProbe | indent 10 }}
+        ports:
+        - containerPort: 8080
+          protocol: TCP
+        resources:
+{{ toYaml .Values.application.resources | indent 10 }}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts: 
+       
+        {{- range $key, $volume := .Values.application.volumes }}
+          - mountPath: {{$volume.mountPath}}
+            name: {{ template "fullname" $context }}-{{$volume.name}}
+        {{- end }}
+
+     
+      {{if .Values.cloudsql.enabled}}
+      - {{- include "cloudSqlContainer" $context | nindent 8 }}
+      {{- end }} 
+      volumes:
+     
+      {{if .Values.cloudsql.enabled}}
+        - name: tmp-pod # required for a hack
+          emptyDir: {}
+      {{- end }}
+      {{- range $key, $volume := .Values.application.volumes }}
+        - name: {{ template "fullname" $context }}-{{$volume.name}}
+          persistentVolumeClaim:
+            claimName: {{ template "fullname" $context }}-{{$volume.name}}
+      {{- end }}
+      {{if .Values.cloudsql.enabled}}
+        - {{- include "cloudSqlCredentialsVolume" $context | nindent 10 }}
+      {{- end }} 
+{{- end }}
+

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.env.configmap.yml

@@ -0,0 +1,27 @@
+
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ template "fullname" . }}-app-env
+  labels:
+    app: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+data:
+  PORT: "8080"
+  TZ: Europe/Zurich
+  ENV_SHORT: {{ .Values.global.ENV_SHORT }}
+  SERVICE_VAR_PREFIX: "{{- template "serviceVarPrefix" . -}}"
+
+  {{ if .Values.mailhog.enabled }}
+  MAILHOG_SMTP_URL: "{{- template "MAILHOG_SMTP_URL" . -}}"
+  MAIL_URL: "{{- template "MAILHOG_SMTP_URL" . -}}"
+  {{- end -}}
+
+  {{- range $key, $val := .Values.env.public }}
+  {{ $key }}: {{ template "envValue" $val }}
+  {{- end -}}
+  
+ 
+
+  
+

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.env.secrets.yml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ template "fullname" . }}-app-secrets
+  labels:
+    app: {{ .Release.Name }}
+data:
+  {{- range $key, $val := .Values.env.secret }}
+    {{ $key }}: {{ $val | b64enc }}
+  {{- end}}

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.ingress.redirects.yaml

@@ -0,0 +1,91 @@
+{{- if .Values.application -}}
+{{ $app := .Values.application }}
+{{ $serviceName := include "fullname" . }}
+{{ $servicePort := .Values.service.externalPort }}
+
+{{ $hastCustomHost := ne $app.hostCanonical (default $app.hostCanonical $app.host) }}
+# if it has a custom host, add a redirect from canonical to custom host
+{{if $hastCustomHost -}}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ template "fullname" . }}-{{ $app.hostCanonical }}-redirect
+  labels:
+    app: {{ template "name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+  annotations:
+  {{- range $key, $value := .Values.ingress.annotations }}
+    {{ $key }}: {{ $value | quote }}
+  {{- end }}
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      return 301 $scheme://{{ template "host" . }}$request_uri;
+spec:
+  rules:
+    - host: {{ $app.hostCanonical}}
+      http: 
+        paths:
+          - path: /
+            pathType: ImplementationSpecific          
+            backend:
+              service:
+                name: {{ template "fullname" . }}-app
+                port:
+                  number: {{ $servicePort }}
+  tls:
+    - secretName: {{ $app.hostCanonical | trunc 59 | trimSuffix "." }}-tls
+      hosts: 
+        - {{ $app.hostCanonical }}
+---
+{{- end }}
+
+{{ if $app.redirects }}
+{{ $context := . }}
+{{ range $index, $redirect := $app.redirects -}}
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  {{- if $redirect.path }}
+  name: {{ template "fullname" $context }}-{{ $redirect.host }}-{{ $index }}-redirect
+  {{- else }}
+  name: {{ template "fullname" $context }}-{{ $redirect.host }}-redirect
+  {{- end }}
+  labels:
+    app: {{ template "name" $context }}
+    chart: {{$context.Chart.Name }}-{{$context.Chart.Version | replace "+" "_" }}
+    release: {{$context.Release.Name }}
+    heritage: {{$context.Release.Service }}
+  annotations:
+  {{- range $key, $value := $context.Values.ingress.annotations }}
+    {{ $key }}: {{ $value | quote }}
+  {{- end }}
+  {{- if $redirect.rule}}
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      {{ $redirect.rule }}
+  {{ else }}
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      return 301 $scheme://{{ template "host" $context }}$request_uri;
+  {{- end }}
+      
+spec:
+  rules:
+    - host: {{ $redirect.host}}
+      http: 
+        paths:
+          - path: {{ $redirect.path | default "/" }}
+            pathType: ImplementationSpecific          
+            backend:
+              service:
+                name: {{ template "fullname" $context }}-app
+                port:
+                  number: {{ $servicePort }}
+  tls:
+    - secretName: {{ $redirect.host | trunc 59 | trimSuffix "." }}-tls
+      hosts: 
+        - {{ $redirect.host }}
+---
+{{- end }}
+{{- end }}
+{{- end }}

package/dist/bundles/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.ingress.yaml

@@ -0,0 +1,48 @@
+{{- if .Values.ingress.enabled -}}
+{{- if .Values.application.enabled -}}
+{{- $servicePort := .Values.service.externalPort -}}
+{{- $app := .Values.application -}}
+{{ $hosts := without (prepend (default (list nil) $app.hostAliases) (include "host" .)) nil }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ template "fullname" . }}-app
+  labels:
+    app: {{ template "name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /$1  
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "x-build-id: {{ .Values.global.BUILD_ID }}";
+    {{- if and .Values.gitlab.visualReviewEnabled (and  .Values.global.ENV_SHORT (eq .Values.global.ENV_SHORT "review"))}}
+      proxy_set_header Accept-Encoding ""; 
+      sub_filter_once on;
+      sub_filter "</head>" "{{- include "visualReviewSnippet" . | nindent 8 -}}</head>";
+    {{- end }}
+  {{- range $key, $value := .Values.ingress.annotations }}
+    {{ $key }}: {{ $value | quote }}
+  {{- end }}
+spec:
+  rules:
+  {{- range $hosts }}
+    - host: {{ . }}
+      http:
+        paths:
+          - path: /?(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: {{ template "fullname" $ }}-app
+                port:
+                  number: {{ $servicePort }}
+  {{- end }}
+  tls:
+    - secretName: {{ include "host" . | trunc 59 | trimSuffix "." }}-tls
+      hosts:
+      {{- range $hosts }}
+        - {{ . }}
+      {{- end }}
+{{- end -}}
+{{- end -}}