@catladder/cli 0.0.0-next-1cd29c1f → 0.0.0-next-52feb889

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.deployment.yml

@@ -0,0 +1,103 @@
+
+{{- if .Values.application.enabled -}}
+{{ $context := . }}
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ template "fullname" $context }}-app
+  annotations:
+    "cluster-autoscaler.kubernetes.io/safe-to-evict": "true"
+    {{ if .Values.gitlab.app }}app.gitlab.com/app: {{ .Values.gitlab.app | quote }}{{ end }}
+    {{ if .Values.gitlab.env }}app.gitlab.com/env: {{ .Values.gitlab.env | quote }}{{ end }}
+  labels:
+    app: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  replicas: {{ .Values.application.replicas }}
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: {{ template "fullname" $context }}-app
+      release: {{ .Release.Name }}
+  strategy: 
+{{ toYaml .Values.application.updateStrategy | indent 4 }}
+  template:
+    metadata:
+      annotations:
+        {{ if .Values.gitlab.app }}app.gitlab.com/app: {{ .Values.gitlab.app | quote }}{{ end }}
+        {{ if .Values.gitlab.env }}app.gitlab.com/env: {{ .Values.gitlab.env | quote }}{{ end }}
+      labels:
+        app: {{ template "fullname" $context }}-app
+        release: {{ .Release.Name }}
+    spec:
+      {{- if .Values.image.pullSecret }}
+      imagePullSecrets:
+        - name: {{ .Values.image.pullSecret }}
+      {{- end }}
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      terminationGracePeriodSeconds: 30
+      tolerations: 
+        {{- if  and  .Values.global.ENV_SHORT (eq .Values.global.ENV_SHORT "review")}}
+          - key: "stage"
+            operator: "Equal"
+            value: "review"
+            effect: "NoSchedule"
+        {{- end }}
+    
+      containers:
+      - name: {{ template "fullname" $context }}-app
+        image: "{{ template "appImage" .}}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        {{ if .Values.application.command }}
+        
+        command:  ["/bin/sh", "-c"]
+        args: 
+          - |
+            {{(kindIs "slice" .Values.application.command) | ternary (join " " .Values.application.command) .Values.application.command}}
+     
+        {{- end }}
+        {{include "env" $context | nindent 8}}
+        startupProbe:
+{{ toYaml .Values.application.startupProbe | indent 10 }}       
+        livenessProbe:
+{{ toYaml .Values.application.livenessProbe | indent 10 }}
+        readinessProbe:
+{{ toYaml .Values.application.readinessProbe | indent 10 }}
+        ports:
+        - containerPort: 8080
+          protocol: TCP
+        resources:
+{{ toYaml .Values.application.resources | indent 10 }}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts: 
+       
+        {{- range $key, $volume := .Values.application.volumes }}
+          - mountPath: {{$volume.mountPath}}
+            name: {{ template "fullname" $context }}-{{$volume.name}}
+        {{- end }}
+
+     
+      {{if .Values.cloudsql.enabled}}
+      - {{- include "cloudSqlContainer" $context | nindent 8 }}
+      {{- end }} 
+      volumes:
+     
+      {{if .Values.cloudsql.enabled}}
+        - name: tmp-pod # required for a hack
+          emptyDir: {}
+      {{- end }}
+      {{- range $key, $volume := .Values.application.volumes }}
+        - name: {{ template "fullname" $context }}-{{$volume.name}}
+          persistentVolumeClaim:
+            claimName: {{ template "fullname" $context }}-{{$volume.name}}
+      {{- end }}
+      {{if .Values.cloudsql.enabled}}
+        - {{- include "cloudSqlCredentialsVolume" $context | nindent 10 }}
+      {{- end }} 
+{{- end }}
+

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.env.configmap.yml

@@ -0,0 +1,27 @@
+
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ template "fullname" . }}-app-env
+  labels:
+    app: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+data:
+  PORT: "8080"
+  TZ: Europe/Zurich
+  ENV_SHORT: {{ .Values.global.ENV_SHORT }}
+  SERVICE_VAR_PREFIX: "{{- template "serviceVarPrefix" . -}}"
+
+  {{ if .Values.mailhog.enabled }}
+  MAILHOG_SMTP_URL: "{{- template "MAILHOG_SMTP_URL" . -}}"
+  MAIL_URL: "{{- template "MAILHOG_SMTP_URL" . -}}"
+  {{- end -}}
+
+  {{- range $key, $val := .Values.env.public }}
+  {{ $key }}: {{ template "envValue" $val }}
+  {{- end -}}
+  
+ 
+
+  
+

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.env.secrets.yml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ template "fullname" . }}-app-secrets
+  labels:
+    app: {{ .Release.Name }}
+data:
+  {{- range $key, $val := .Values.env.secret }}
+    {{ $key }}: {{ $val | b64enc }}
+  {{- end}}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.ingress.redirects.yaml

@@ -0,0 +1,91 @@
+{{- if .Values.application -}}
+{{ $app := .Values.application }}
+{{ $serviceName := include "fullname" . }}
+{{ $servicePort := .Values.service.externalPort }}
+
+{{ $hastCustomHost := ne $app.hostCanonical (default $app.hostCanonical $app.host) }}
+# if it has a custom host, add a redirect from canonical to custom host
+{{if $hastCustomHost -}}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ template "fullname" . }}-{{ $app.hostCanonical }}-redirect
+  labels:
+    app: {{ template "name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+  annotations:
+  {{- range $key, $value := .Values.ingress.annotations }}
+    {{ $key }}: {{ $value | quote }}
+  {{- end }}
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      return 301 $scheme://{{ template "host" . }}$request_uri;
+spec:
+  rules:
+    - host: {{ $app.hostCanonical}}
+      http: 
+        paths:
+          - path: /
+            pathType: ImplementationSpecific          
+            backend:
+              service:
+                name: {{ template "fullname" . }}-app
+                port:
+                  number: {{ $servicePort }}
+  tls:
+    - secretName: {{ $app.hostCanonical | trunc 59 | trimSuffix "." }}-tls
+      hosts: 
+        - {{ $app.hostCanonical }}
+---
+{{- end }}
+
+{{ if $app.redirects }}
+{{ $context := . }}
+{{ range $index, $redirect := $app.redirects -}}
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  {{- if $redirect.path }}
+  name: {{ template "fullname" $context }}-{{ $redirect.host }}-{{ $index }}-redirect
+  {{- else }}
+  name: {{ template "fullname" $context }}-{{ $redirect.host }}-redirect
+  {{- end }}
+  labels:
+    app: {{ template "name" $context }}
+    chart: {{$context.Chart.Name }}-{{$context.Chart.Version | replace "+" "_" }}
+    release: {{$context.Release.Name }}
+    heritage: {{$context.Release.Service }}
+  annotations:
+  {{- range $key, $value := $context.Values.ingress.annotations }}
+    {{ $key }}: {{ $value | quote }}
+  {{- end }}
+  {{- if $redirect.rule}}
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      {{ $redirect.rule }}
+  {{ else }}
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      return 301 $scheme://{{ template "host" $context }}$request_uri;
+  {{- end }}
+      
+spec:
+  rules:
+    - host: {{ $redirect.host}}
+      http: 
+        paths:
+          - path: {{ $redirect.path | default "/" }}
+            pathType: ImplementationSpecific          
+            backend:
+              service:
+                name: {{ template "fullname" $context }}-app
+                port:
+                  number: {{ $servicePort }}
+  tls:
+    - secretName: {{ $redirect.host | trunc 59 | trimSuffix "." }}-tls
+      hosts: 
+        - {{ $redirect.host }}
+---
+{{- end }}
+{{- end }}
+{{- end }}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.ingress.yaml

@@ -0,0 +1,48 @@
+{{- if .Values.ingress.enabled -}}
+{{- if .Values.application.enabled -}}
+{{- $servicePort := .Values.service.externalPort -}}
+{{- $app := .Values.application -}}
+{{ $hosts := without (prepend (default (list nil) $app.hostAliases) (include "host" .)) nil }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ template "fullname" . }}-app
+  labels:
+    app: {{ template "name" . }}
+    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /$1  
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "x-build-id: {{ .Values.global.BUILD_ID }}";
+    {{- if and .Values.gitlab.visualReviewEnabled (and  .Values.global.ENV_SHORT (eq .Values.global.ENV_SHORT "review"))}}
+      proxy_set_header Accept-Encoding ""; 
+      sub_filter_once on;
+      sub_filter "</head>" "{{- include "visualReviewSnippet" . | nindent 8 -}}</head>";
+    {{- end }}
+  {{- range $key, $value := .Values.ingress.annotations }}
+    {{ $key }}: {{ $value | quote }}
+  {{- end }}
+spec:
+  rules:
+  {{- range $hosts }}
+    - host: {{ . }}
+      http:
+        paths:
+          - path: /?(.*)
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: {{ template "fullname" $ }}-app
+                port:
+                  number: {{ $servicePort }}
+  {{- end }}
+  tls:
+    - secretName: {{ include "host" . | trunc 59 | trimSuffix "." }}-tls
+      hosts:
+      {{- range $hosts }}
+        - {{ . }}
+      {{- end }}
+{{- end -}}
+{{- end -}}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.jobs.yml

@@ -0,0 +1,70 @@
+
+{{ $jobs := .Values.jobs }}
+{{ if $jobs }}
+{{ $context := . }}
+{{ range $key, $job := $jobs -}}
+
+{{- $name := (kindIs "map" $jobs) | ternary $key $job.name -}}
+{{- $defaultIndex := (kindIs "map" $jobs) | ternary 0 $key -}}
+
+apiVersion: batch/v1
+kind: Job
+
+metadata:
+  name: {{ include "fullname" $context | trunc 24 }}-{{ $name | trunc 35 }}
+  namespace: {{ $context.Release.Namespace }}
+  labels:
+    app: {{ $context.Release.Name }}
+    app.kubernetes.io/managed-by: {{$context.Release.Service | quote }}
+    app.kubernetes.io/instance: {{$context.Release.Name | quote }}
+    helm.sh/chart: "{{$context.Chart.Name}}-{{$context.Chart.Version}}"
+  annotations:
+    # This is what defines this resource as a hook. Without this line, the
+    # job is considered part of the release.
+    "helm.sh/hook": "{{- default "post-install,post-upgrade" $job.hook -}}"
+    "helm.sh/hook-weight": "{{- default $defaultIndex $job.hookWeight -}}"
+    "helm.sh/hook-delete-policy": "{{- default "hook-succeeded,before-hook-creation" $job.hookDeletePolicy -}}"
+spec:
+  template:
+    spec:
+      {{- if $context.Values.image.pullSecret }}
+      imagePullSecrets:
+        - name: {{ $context.Values.image.pullSecret }}
+      {{- end }}
+      restartPolicy: Never
+      
+      containers:
+      - name: {{ $name }}-job
+        {{include "env" $context | nindent 8}}
+        {{if $job.image -}}
+        image: "{{ $job.image }}"
+        {{else}}
+        image: "{{ template "appImage" $context}}"
+        {{end}}
+        imagePullPolicy: {{ $context.Values.image.pullPolicy }}
+        # see https://github.com/kubernetes/kubernetes/issues/25908#issuecomment-308569672
+        command:  ["/bin/sh", "-c"]
+        args: 
+          - |
+            trap "touch /tmp/pod/main-terminated" EXIT
+            {{$job.command}}
+        volumeMounts:
+        - mountPath: /tmp/pod
+          name: tmp-pod
+        resources:
+{{ toYaml $context.Values.jobDefaults.resources | indent 10 }}
+
+      {{if $context.Values.cloudsql.enabled}}
+      - {{- include "cloudSqlContainer" $context | nindent 8 }}
+      {{- end }} 
+      volumes:
+        - name: tmp-pod
+          emptyDir: {}
+      {{if $context.Values.cloudsql.enabled}}
+        - {{- include "cloudSqlCredentialsVolume" $context | nindent 10 }}
+      {{- end }} 
+
+    
+---
+{{- end }}
+{{- end }}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.service.yaml

@@ -0,0 +1,31 @@
+{{- if .Values.application.enabled -}}
+{{- $context := . }}
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: {{ template "fullname" . }}-app
+    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+  name: {{ template "fullname" . }}-app
+  namespace: {{ .Release.Namespace }}
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - port: {{ .Values.service.externalPort }}
+      targetPort: {{ .Values.service.internalPort }}
+      protocol: TCP
+      name: {{ template "fullname" . }}-service
+    {{- range $ports := .Values.service.additionalPorts }}
+    - port: {{ required ".Values.service.additionalPorts.port is required" $ports.port }}
+      targetPort: {{ $ports.targetPort | default $ports.port }}
+      protocol: {{ $ports.protocol | default "TCP" }}
+      name: {{ template "fullname" $context }}-{{ required ".Values.service.additionalPorts.nameSuffix is required" $ports.nameSuffix }}-service
+    {{- end }}
+  selector:
+    app: {{ template "fullname" . }}-app
+    release: {{ .Release.Name }}
+  sessionAffinity: None
+  type: NodePort
+{{- end -}}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.volumes.yml

@@ -0,0 +1,20 @@
+
+{{ $context := . }}
+{{- range $key, $volume := .Values.application.volumes }}
+     
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: {{ template "fullname" $context }}-{{$volume.name}}
+  labels:
+    app: {{ $context.Release.Name }}
+  namespace: {{ $context.Release.Namespace }}
+spec:  
+  resources: 
+    requests:
+      storage: {{ default "10Gi" $volume.size }}
+  accessModes:
+    - ReadWriteOnce
+---
+{{- end }}
+

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.worker.deployment.yml

@@ -0,0 +1,104 @@
+{{- if .Values.application.worker.enabled -}}
+
+{{ $context := . }}
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+  name: {{ template "fullname" $context }}-worker
+  labels:
+    app: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  replicas: 1
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: {{ template "fullname" $context }}-worker
+      release: {{ .Release.Name }}
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 1
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: {{ template "fullname" $context }}-worker
+        release: {{ .Release.Name }}
+    spec:
+      {{- if .Values.image.pullSecret }}
+      imagePullSecrets:
+        - name: {{ .Values.image.pullSecret }}
+      {{- end }}
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      terminationGracePeriodSeconds: 30
+      tolerations: 
+        {{- if  and  .Values.global.ENV_SHORT (eq .Values.global.ENV_SHORT "review")}}
+          - key: "stage"
+            operator: "Equal"
+            value: "review"
+            effect: "NoSchedule"
+        {{- end }}
+        {{- if .Values.application.worker.useExclusivePool }}
+          - key: "ch-panter-sla"
+            operator: "Equal"
+            value: "1"
+            effect: "NoSchedule"
+        {{- end }}
+      containers:
+      - name: {{ template "fullname" $context }}-worker
+        image: "{{ template "appImage" .}}"
+        imagePullPolicy: {{ .Values.image.pullPolicy }}
+        command:  ["/bin/sh", "-c"]
+        args: 
+          - |
+            trap "touch /tmp/pod/main-terminated" EXIT
+            {{join " " (default .Values.application.command .Values.application.worker.command)}}
+        
+        {{include "env" $context | nindent 8}}
+          - name: BACKGROUND_JOBS_ENABLED
+            value: "true"
+          - name: IS_WORKER
+            value: "true"
+       
+        {{if .Values.application.worker.livenessProbe}}
+        livenessProbe:
+          httpGet:
+{{ toYaml .Values.application.livenessProbe.httpGet | indent 12 }}
+          initialDelaySeconds: 10
+          timeoutSeconds: 10
+          periodSeconds:  30
+          failureThreshold: 100 # dont kill worker pod too early when cpu intensive stuff is done
+        {{- end }}
+        ports:
+        - containerPort: 8080
+          protocol: TCP
+        resources:
+{{ toYaml .Values.application.worker.resources | indent 10 }}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts: 
+        {{- range $key, $volume := .Values.application.volumes }}
+          - mountPath: {{$volume.mountPath}}
+            name: {{ template "fullname" $context }}-{{$volume.name}}
+        {{- end }}
+      {{if .Values.cloudsql.enabled}}
+      - {{- include "cloudSqlContainer" $context | nindent 8 }}
+      {{- end }} 
+      volumes:
+        - name: tmp-pod
+          emptyDir: {}
+      {{- range $key, $volume := .Values.application.volumes }}
+        - name: {{ template "fullname" $context }}-{{$volume.name}}
+          persistentVolumeClaim:
+            claimName: {{ template "fullname" $context }}-{{$volume.name}}
+      {{- end }}
+      {{if .Values.cloudsql.enabled}}
+        - {{- include "cloudSqlCredentialsVolume" $context | nindent 10 }}
+      {{- end }} 
+{{- end -}}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/app.worker.service.yaml

@@ -0,0 +1,34 @@
+
+{{- if .Values.application.worker.enabled -}}
+{{- if .Values.application.worker.service.enabled -}}
+{{- $context := . }}
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: {{ template "fullname" . }}-worker
+    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
+  name: {{ template "fullname" . }}-worker
+  namespace: {{ .Release.Namespace }}
+spec:
+  type: {{ .Values.application.worker.service.type }}
+  ports:
+    - port: {{ .Values.application.worker.service.externalPort }}
+      targetPort: {{ .Values.application.worker.service.internalPort }}
+      protocol: TCP
+      name: {{ template "fullname" . }}-worker-service
+    {{- range $ports := .Values.application.worker.service.additionalPorts }}
+    - port: {{ required ".Values.application.worker.service.additionalPorts.port is required" $ports.port }}
+      targetPort: {{ $ports.targetPort | default $ports.port }}
+      protocol: {{ $ports.protocol | default "TCP" }}
+      name: {{ template "fullname" $context }}-{{ required ".Values.application.worker.service.additionalPorts.nameSuffix is required" $ports.nameSuffix }}-service
+    {{- end }}
+  selector:
+    app: {{ template "fullname" . }}-worker
+    release: {{ .Release.Name }}
+  sessionAffinity: None
+  type: NodePort
+{{- end -}}
+{{- end -}}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/mailhog.ingress.yaml

@@ -0,0 +1,35 @@
+{{- if .Values.mailhog.enabled -}}
+#{{ $host := (default "mailhog.{{ template 'host' . }}" .Values.mailhog.host ) | quote }}
+{{ $host := default (printf "mailhog.%s" (include "host" .)) .Values.mailhog.host  }}
+
+
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ .Values.mailhog.fullnameOverride  }} # unfortunatly due to history reasons we override the release name
+  labels:
+    app: {{ template "name" . }}
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    kubernetes.io/tls-acme: "true"
+spec:
+  rules:
+  - host: {{ $host }}
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: {{ .Values.mailhog.fullnameOverride  }} # unfortunatly due to history reasons we override the release name
+            port:
+              number: 8025
+  tls:
+  - hosts:
+    - {{ $host }}
+    secretName: {{ $host | trunc 59 | trimSuffix "." }}-tls
+
+{{- end -}}
+
+
+

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/maintenance.deployment.yml

@@ -0,0 +1,45 @@
+{{- if (.Values.maintenance) }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+  name: {{ template "fullname" . }}-maintenance
+  labels:
+    app: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: {{ template "fullname" . }}-maintenance
+      release: {{ .Release.Name }}
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 1
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: {{ template "fullname" . }}-maintenance
+        release: {{ .Release.Name }}
+    spec:
+      {{- if .Values.image.pullSecret }}
+      imagePullSecrets:
+        - name: {{ .Values.image.pullSecret }}
+      {{- end }}
+      containers:
+      - image: {{ .Values.maintenance.image }}
+        imagePullPolicy: Always
+        name: {{ template "fullname" . }}-maintenance
+        resources: {}
+        securityContext:
+          privileged: false
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      terminationGracePeriodSeconds: 30
+{{- end }}

package/dist/runner-images/kubernetes/helm-charts/the-panter-chart/templates/maintenance.service.yml

@@ -0,0 +1,24 @@
+{{- if (.Values.maintenance) }}
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+  name: {{ template "fullname" . }}-maintenance
+  labels:
+    app: {{ .Release.Name }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  ports:
+  - port: 80
+    protocol: TCP
+    targetPort: 80
+    name: {{ template "fullname" . }}-maintenance-service
+  selector:
+    app: {{ template "fullname" . }}-maintenance
+    release: {{ .Release.Name }}
+  sessionAffinity: None
+  type: ClusterIP
+status:
+  loadBalancer: {}
+
+{{- end }}