@leverege/build-tools 2.21.14 → 2.22.1

package/src/helmup

@@ -1,6 +1,6 @@
 #!/bin/bash
 #
-# printf "\n***** RUNNING LOCALLY *****\n" && sleep 2
+#printf "\n***** RUNNING LOCALLY *****\n" && sleep 2 && alias build-tools="build-tools.js"
 
 # Load the standard helper functions
 . `build-tools --bashfun`
@@ -103,23 +103,6 @@ WORKLOAD_ID
   warnOnError $? "Failed to annotate service account $NAMESPACE/$SVC_ACCT - things may fail"
 }
 
-function checkTimescalePassword(){
-  kubectl get secret postgresql-password
-  if [[ $? -eq 1 ]]; then
-    printf "\n*** Autogenerating Timescale password ***\n\n"
-    local psql_pw="$(generatePassword)"
-    local psql_rep_pw="$(generatePassword)"
-
-    kubectl create secret generic postgresql-password \
-      --from-literal=postgresql-password=${psql_pw} \
-      --from-literal=postgresql-replication-password=${psql_rep_pw}
-
-    printf "\n\n`color y '*** Save Timescale creds to Keeweb ***'`\n\n"
-    printf "`color g "postgresql-password / ${psql_pw}"`\n"
-    printf "`color g "postgresql-replication-password / ${psql_rep_pw}"`\n\n"
-  fi
-}
-
 function generatePassword(){
   RANDOMPW=`openssl rand -base64 12`
   echo $RANDOMPW
@@ -134,111 +117,61 @@ function createNamespaceIfNeeded(){
   fi
 }
 
-function installPrometheus() {
-  # Add the community helm repositories
-  addHelmRepo prometheus-community https://prometheus-community.github.io/helm-charts
-  [ -z "$PROMETHEUS_HELM_CHART" ] && PROMETHEUS_HELM_CHART="15"
-  helm upgrade --install prometheus prometheus-community/prometheus \
-    --namespace monitoring \
-    --values prometheus/values.yaml \
-    --version $PROMETHEUS_HELM_CHART
-  removeHelmRepo prometheus-community
+function bootstrapLocalSetup() {
+  SERVICE="$1"
+  [ -z "$1" ] && errorExit "bootstrapLocalSetup function requires a service name"
+  TOOLS_SRC="$(build-tools --reporoot)/src"
+  SYSTEM_FILES="$(build-tools --reporoot)/src/system-charts"
+
+  SYSTEM_CHART="$SYSTEM_FILES/$SERVICE-local.yaml"
+  [ ! -f "$SYSTEM_CHART" ] && errorExit "Missing $SERVICE chart => $(color y $SYSTEM_CHART)"
+
+  SYSTEM_HUP="$SYSTEM_FILES/$SERVICE.hup"
+  [ ! -f "$SYSTEM_HUP" ] && errorExit "Missing $SERVICE helmup script => $(color y $SYSTEM_HUP)"
+
+  [ ! -d "$SERVICE" ] && mkdir $SERVICE
+
+  if [ "$2" == "set-values-local" ];
+  then
+    TARGET_CHART="values-local.yaml"
+  else
+    TARGET_CHART="$SERVICE-local.yaml"
+    touch $SERVICE/.nohelm
+  fi
+
+  cp $SYSTEM_CHART $SERVICE/$TARGET_CHART
+  cp $SYSTEM_HUP $SERVICE/helmup.plugin
+  git add $SERVICE
+  overwhelm.js --genvals
+  ifPluggedIn $SERVICE
 }
 
 function installGrafana() {
   ## Install Grafana
   addHelmRepo grafana https://grafana.github.io/helm-charts
+  [ -z "$GRAFANA_HELM_CHART" ] && GRAFANA_HELM_CHART="6"
   helm upgrade --install grafana grafana/grafana \
     --namespace monitoring \
     --values grafana/values-grafana.yaml \
-    --version 6 # latest v8 grafana
+    --version $GRAFANA_HELM_CHART
   removeHelmRepo grafana
 }
 
-function installRedis() {
-  showInstalling "Redis Network Cache"
-  addBitnamiRepo latest
-  [ -z "$REDIS_HELM_CHART" ] && REDIS_HELM_CHART="17" # latest chart 17 is redis v7
-  helm upgrade --install redis bitnami/redis \
-    --version $REDIS_HELM_CHART \
-    -f - <<REDIS_CHART_MODS
-global:
-  storageClass: ssd
-
-auth:
-  enabled: false
-  sentinel: false
-
-master:
-  affinity:
-    nodeAffinity:
-      requiredDuringSchedulingIgnoredDuringExecution:
-        nodeSelectorTerms:
-        - matchExpressions:
-          - key: target-env
-            operator: In
-            values:
-            - database
-
-  tolerations:
-  - key: "database"
-    operator: "Equal"
-    value: "true"
-    effect: "NoSchedule"
-
-  persistence:
-    size: 8Gi # 8Gi is default
-
-replica:
-  affinity:
-    nodeAffinity:
-      requiredDuringSchedulingIgnoredDuringExecution:
-        nodeSelectorTerms:
-        - matchExpressions:
-          - key: target-env
-            operator: In
-            values:
-            - database
-
-  tolerations:
-  - key: "database"
-    operator: "Equal"
-    value: "true"
-    effect: "NoSchedule"
-
-  persistence:
-    size: 8Gi # 8Gi is default
-
-architecture: replication
-
-sentinel:
-  enabled: false
-
-networkPolicy:
-  enabled: true
-  allowExternal: false
-  ingressNSMatchLabels:
-    redis: external
-  ingressNSPodMatchLabels:
-    redis-client: true
-
-metrics:
-  enabled: true
+function checkTimescalePassword() {
+  kubectl get secret postgresql-password
+  if [[ $? -eq 1 ]]; then
+    printf "\n*** Autogenerating Timescale password ***\n\n"
+    local psql_pw="$(generatePassword)"
+    local psql_rep_pw="$(generatePassword)"
 
-REDIS_CHART_MODS
-  if [[ $? -ne 0 ]];
-  then
-    clearlyWarn noclear
-    cat<<OLDER_REDIS
-  The redis upgrade failed which may mean that the versions are different
-  enough that k8s cannot gracefully upgrade from one version to the next.
-  Try removing the existing deployment and redeploying redis:
+    kubectl create secret generic postgresql-password \
+      --from-literal=postgresql-password=${psql_pw} \
+      --from-literal=postgresql-replication-password=${psql_rep_pw}
 
-     $ `color r "helmdn redis && sleep 5 && helmup redis"`
-OLDER_REDIS
+    printf "\n\n`color y '*** Save Timescale creds to Keeper ***'`\n\n"
+    printf "`color g "postgresql-password / ${psql_pw}"`\n"
+    printf "`color g "postgresql-replication-password / ${psql_rep_pw}"`\n\n"
   fi
-  printf "\n\nTo start a specific version => `color g 'REDIS_HELM_CHART="13.0.1" helmup redis'`\n\n"
-  removeHelmRepo bitnami
 }
 
 function installMonitoringCharts(){
@@ -554,9 +487,10 @@ NEED_MANAGED_SECRET
   fi
 
   addHelmRepo jetstack https://charts.jetstack.io
+  [ -z "$CERT_MANAGER_HELM_CHART" ] && CERT_MANAGER_HELM_CHART="v1.10"
   helm upgrade --install cert-manager jetstack/cert-manager \
     --namespace cert-manager --set installCRDs=true \
-    --version v1.9
+    --version $CERT_MANAGER_HELM_CHART
 
   cat<<DELAY
 
@@ -584,8 +518,8 @@ HINTS
   removeHelmRepo jetstack
 }
 
-function installTraefik() {
-  showInstalling "Traefik Load Balancer / Router"
+function installTraefikEnvironment() {
+  showInstalling "Traefik Namespace and Cloudflare Secret"
   createNamespaceIfNeeded traefik
 
   kubectl get secret cloudflare --namespace traefik &>/dev/null
@@ -608,36 +542,6 @@ NEED_TRAEFIK_SECRET
       --namespace traefik \
       --from-literal=dns-token=$TOKEN
   fi
-
-  TRAEFIK_HA_YAML="traefik/traefik-ha-values.yaml"
-  if [ ! -f "$TRAEFIK_HA_YAML" ];
-  then
-    cat<<TRAEFIK_CFG>>"$TRAEFIK_HA_YAML"
-additionalArguments:
-  - "--accesslog=true"
-  - "--accesslog.format=json"
-  - "--log.level=WARN"
-  - "--metrics.prometheus=true"
-  - "--api.dashboard=true"
-
-deployment:
-  replicas: 3
-
-#service:
-#  spec:
-#   loadBalancerIP: xx.xx.xx.xx
-TRAEFIK_CFG
-  fi
-
-  addHelmRepo traefik https://helm.traefik.io/traefik
-
-  [ -z "$TRAEFIK_HELM_CHART" ] && TRAEFIK_HELM_CHART="12"
-  helm upgrade --install traefik traefik/traefik \
-    --namespace traefik \
-    --version  $TRAEFIK_HELM_CHART \
-    --values   $TRAEFIK_HA_YAML
- 
-  removeHelmRepo traefik
 }
 
 function installVelero() {
@@ -656,8 +560,9 @@ function installVelero() {
 
   ## Create a bucket
   BUCKET="$PROJECT_ID-velero"
-  printf "\nCreating storage bucket...\n"
-  gsutil mb gs://$BUCKET/ &> /dev/null
+  GCE_REGION=`overwhelm -k GCE_REGION`
+  printf "\nCreating storage bucket in $GCE_REGION...\n"
+  gsutil mb -l $GCE_REGION gs://$BUCKET/ &> /dev/null
   warnOnError $? "Bucket failed to create or already exists - go check it\n"
 
   ## Create a service account
@@ -745,8 +650,9 @@ function installVelero() {
   ## Install velero chart   => https://github.com/vmware-tanzu/helm-charts/blob/main/charts/velero/values.yaml
   ## Helpful debugging link => https://github.com/vmware-tanzu/helm-charts/issues/351
   addHelmRepo vmware-tanzu https://vmware-tanzu.github.io/helm-charts
+  [ -z "$VELERO_HELM_CHART" ] && VELERO_HELM_CHART="3"
   helm upgrade --install velero vmware-tanzu/velero \
-    --version 2 \
+    --version $VELERO_HELM_CHART \
     --namespace velero \
     --set credentials.useSecret="false" \
     --set configuration.provider="gcp" \
@@ -758,7 +664,7 @@ function installVelero() {
     --set snapshotsEnabled="true" \
     --set configuration.volumeSnapshotLocation.name=default \
     --set "initContainers[0].name"="velero-plugin-for-gcp" \
-    --set "initContainers[0].image"="velero/velero-plugin-for-gcp:v1.0.0" \
+    --set "initContainers[0].image"="velero/velero-plugin-for-gcp:v1.6.0" \
     --set "initContainers[0].volumeMounts[0].mountPath"="/target" \
     --set "initContainers[0].volumeMounts[0].name"="plugins" \
     --set schedules.postgresql.schedule="0 2 * * *" \
@@ -770,13 +676,22 @@ function installVelero() {
     --set schedules.timescale.template.ttl="720h" \
     --set schedules.timescale.template.labelSelector.matchLabels.release="timescale-db" \
     --set schedules.timescale.template.labelSelector.matchLabels.app="postgresql" \
-    --set schedules.timescale.template.snapshotVolumes="true"
+    --set schedules.timescale.template.snapshotVolumes="true" \
+    --set schedules.redis.schedule="*/30 * * * *" \
+    --set schedules.redis.template.ttl="24h" \
+    --set schedules.redis.template.labelSelector.matchLabels.name="redis" \
+    --set schedules.redis.template.snapshotVolumes="true"
 
   velero get backups
   cat<<DONE_VELERO
 
   Velero docs => `color g 'open https://velero.io/docs'`
+
+  Creating initial backups from `color g 'velero-postgres'` and `color g 'velero-timescale'` schedules...
 DONE_VELERO
+  sleep 2
+  velero backup create --from-schedule velero-postgresql
+  velero backup create --from-schedule velero-timescale
   removeHelmRepo vmware-tanzu
   echo -n "npm run ahoy && velero get backups" | pbcopy
 }
@@ -799,6 +714,7 @@ PLUGIN_NOEXEC
   fi
 
   printf "\n***Executing local plugin code => `color y $PLUGIN`\n\n" && sleep 2
+  export HELM_WHAT
   . $PLUGIN # executing with . allows the plugin to use functions like color
   return 0
 }
@@ -868,7 +784,7 @@ function doInstall() {
     [ ! -z "$CHARTVER" ] && CHARTVER="--version $CHARTVER"
 
     # set the dry-run flag on what
-    [ "`basename $0`" == "helmwhat" ] && WHAT="--dry-run --debug"
+    [ "`basename $0`" == "helmwhat" ] && HELM_WHAT="--dry-run --debug"
 
     # If we're referencing a plugin then execute it and continue
     ifPluggedIn $SERVICE && continue
@@ -895,16 +811,7 @@ function doInstall() {
         ;;
 
       "elastic"|"elasticsearch")
-        showInstalling "Elastic Search"
-        LOCAL_ES_VALUES="elasticsearch/es-values.yaml"
-        [ ! -f "$LOCAL_ES_VALUES" ] && exitOnError 1 "Missing the local ES config file => `color y $LOCAL_ES_VALUES`"
-        checkSSDStorageClass
-        addHelmRepo elastic https://helm.elastic.co
-        helm upgrade --install elasticsearch elastic/elasticsearch \
-          --version 7.16 \
-          --values $LOCAL_ES_VALUES \
-          --set volumeClaimTemplate.storageClassName="ssd"
-        removeHelmRepo elastic
+        bootstrapLocalSetup elasticsearch
         ;;
 
       "estafette"|"preemptible-killer")
@@ -912,7 +819,7 @@ function doInstall() {
         ;;
 
       "grafana")
-        installGrafana
+        bootstrapLocalSetup grafana
         ;;
 
       "monitoring")
@@ -925,18 +832,15 @@ function doInstall() {
         ;;
 
       "postgres"|"postgresql")
-        showInstalling "PostgreSQL Database"
-        addBitnamiRepo
-        helm upgrade --install postgres bitnami/postgresql -f postgres/postgres-values.yaml --version 8.9.6
-        removeHelmRepo bitnami
+        bootstrapLocalSetup postgres
         ;;
 
       "prometheus")
-        installPrometheus
+        bootstrapLocalSetup prometheus set-values-local
         ;;
 
       "redis")
-        installRedis
+        bootstrapLocalSetup redis
         ;;
 
       "reloader")
@@ -946,20 +850,19 @@ function doInstall() {
         removeHelmRepo stakater
         ;;
 
-      "timescale-db")
-        showInstalling "Timescale Database (Leverege chart)"
-        checkTimescalePassword
-        helm upgrade --install timescale-db leverege/timescale-db
+      "timescale"|"timescale-db")
+        bootstrapLocalSetup timescale-db
         ;;
 
       transponder-*)
         # transponders use the same chart but different deployment name
-        HELMUP="helm upgrade --install $SERVICE leverege/transponder --values $SERVICE/values.yaml $CHARTVER $WHAT"
+        HELMUP="helm upgrade --install $SERVICE leverege/transponder --values $SERVICE/values.yaml $CHARTVER $HELM_WHAT"
         doHelmup "$HELMUP"
         ;;
 
       "traefik")
-        installTraefik
+        installTraefikEnvironment
+        bootstrapLocalSetup traefik
         ;;
 
       "velero")
@@ -1005,7 +908,7 @@ NO_SERVICE_MAN
           MUSEUM=$(<${OVERRIDE})
           printf "\n$YELO_WARN Local chartmuseum name override from ${SERVICE} to ${MUSEUM}\n"
         fi
-        HELMUP="helm upgrade --install $SERVICE leverege/$MUSEUM -f $SERVICE/values.yaml $CHARTVER $WHAT"
+        HELMUP="helm upgrade --install $SERVICE leverege/$MUSEUM -f $SERVICE/values.yaml $CHARTVER $HELM_WHAT"
         doHelmup $HELMUP
         SAVERR=$?
         if [ $SAVERR -ne 0 ];
@@ -1030,11 +933,180 @@ NOTRUNNING
 }
 
 # ---------- helmup MAIN ----------
-GITTOP=`git rev-parse --show-toplevel` && cd $GITTOP
+GITTOP=`git rev-parse --show-toplevel` # `&& cd $GITTOP
 K8S_UTILS="${GITTOP}/k8s-utils"
 
-overwhelm
+overwhelm # overwhelm.js # use overwhelm.js for local
 [ $? -ne 0 ] && printf "\n\n***Aborting helmup...\n\n" && exit 1
 
 doInstall $@
 cd - &> /dev/null
+
+# *** DEPRECATED *** DEPRECATED *** DEPRECATED *** DEPRECATED *** DEPRECATED *** DEPRECATED ***
+function installPrometheusXXX() {
+  # Add the community helm repositories
+  addHelmRepo prometheus-community https://prometheus-community.github.io/helm-charts
+  [ -z "$PROMETHEUS_HELM_CHART" ] && PROMETHEUS_HELM_CHART="15"
+  helm upgrade --install prometheus prometheus-community/prometheus \
+    --namespace monitoring \
+    --values prometheus/values.yaml \
+    --version $PROMETHEUS_HELM_CHART
+  removeHelmRepo prometheus-community
+}
+
+function installRedisXXX() {
+  showInstalling "Redis Network Cache"
+  addBitnamiRepo latest
+  [ -z "$REDIS_HELM_CHART" ] && REDIS_HELM_CHART="17" # latest chart 17 is redis v7
+  helm upgrade --install redis bitnami/redis \
+    --version $REDIS_HELM_CHART \
+    -f - <<REDIS_CHART_MODS
+global:
+  storageClass: ssd
+
+auth:
+  enabled: false
+  sentinel: false
+
+master:
+  affinity:
+    nodeAffinity:
+      requiredDuringSchedulingIgnoredDuringExecution:
+        nodeSelectorTerms:
+        - matchExpressions:
+          - key: target-env
+            operator: In
+            values:
+            - database
+
+  tolerations:
+  - key: "database"
+    operator: "Equal"
+    value: "true"
+    effect: "NoSchedule"
+
+  persistence:
+    size: 1Gi # 8Gi is default
+
+replica:
+  affinity:
+    nodeAffinity:
+      requiredDuringSchedulingIgnoredDuringExecution:
+        nodeSelectorTerms:
+        - matchExpressions:
+          - key: target-env
+            operator: In
+            values:
+            - database
+
+  tolerations:
+  - key: "database"
+    operator: "Equal"
+    value: "true"
+    effect: "NoSchedule"
+
+  persistence:
+    size: 8Gi # 8Gi is default
+
+architecture: replication
+
+sentinel:
+  enabled: false
+
+networkPolicy:
+  enabled: true
+  allowExternal: false
+  ingressNSMatchLabels:
+    redis: external
+  ingressNSPodMatchLabels:
+    redis-client: true
+
+metrics:
+  enabled: true
+
+REDIS_CHART_MODS
+  if [[ $? -ne 0 ]];
+  then
+    clearlyWarn noclear
+    cat<<OLDER_REDIS
+  The redis upgrade failed which may mean that the versions are different
+  enough that k8s cannot gracefully upgrade from one version to the next.
+  Try removing the existing deployment and redeploying redis:
+
+     $ `color r "helmdn redis && sleep 5 && helmup redis"`
+OLDER_REDIS
+  fi
+  printf "\n\nTo start a specific version => `color g 'REDIS_HELM_CHART="13.0.1" helmup redis'`\n\n"
+  removeHelmRepo bitnami
+}
+
+function installPostgreSQLXXX() {
+  showInstalling "PostgreSQL Database"
+  addBitnamiRepo
+  helm upgrade --install postgres bitnami/postgresql -f postgres/postgres-values.yaml --version 10.16.2
+  removeHelmRepo bitnami
+}
+
+function checkTimescaleLocalValuesXXX() {
+  local TSDIR="$GITTOP/timescale-db"
+  local TSLCL="$TSDIR/tsdb-values.yaml"
+  [ ! -d "$TSDIR" ] && mkdir "$TSDIR" && touch "$TSDIR/.nohelm"
+  [ ! -f "$TSLCL" ] && cat > $TSLCL <<TIMESCALE_LOCAL_CHART
+postgresql:
+  postgresqlExtendedConf:
+    maxWorkerProcesses: 8
+    maxParallelWorkers: 8
+    maxConnections: 500
+    sharedBuffers: 2GB
+    effectiveCacheSize: 6GB
+    maintenanceWorkMem: 1GB
+    workMem: 20MB
+    idle_in_transaction_session_timeout: 30000 # 30ms timeout
+    maxWalSize: 2GB
+    walKeepSegments: 64
+
+  resources:
+    requests:
+      memory: 4Gi
+      cpu: 1000m
+
+  persistence:
+    size: 200Gi
+
+  livenessProbe:
+    enabled: true # false for repairs
+    initialDelaySeconds: 30
+    periodSeconds: 10
+    timeoutSeconds: 5
+    failureThreshold: 6
+    successThreshold: 1
+
+  readinessProbe:
+    enabled: true
+    successThreshold: 1
+    initialDelaySeconds: 5
+    timeoutSeconds: 5
+    periodSeconds: 10
+    failureThreshold: 6
+# These values should be used when attempting to rebuild the slave VPCs
+# following a failure, typically caused by WAL problems. The failure
+# threshold of 240 with a period of 30 seconds should allow the recovery
+# process 2 hours of time for each slave VPC - lengthen as necessary.
+#   initialDelaySeconds: 60
+#   timeoutSeconds: 15
+#   periodSeconds: 30
+#   failureThreshold: 240
+TIMESCALE_LOCAL_CHART
+  echo "$TSLCL"
+}
+
+function installTimescaleDbXXX() {
+  showInstalling "Timescale Database (Leverege chart)"
+  checkTimescalePassword
+  TSDB_VAL="$(checkTimescaleLocalValues)"
+  [ -z "$TIMESCALE_HELM_CHART" ] && TIMESCALE_HELM_CHART="2"
+  helm upgrade --install timescale-db leverege/timescale-db \
+    --version $TIMESCALE_HELM_CHART \
+    -f $GITTOP/timescale-db/tsdb-values.yaml
+}
+

package/src/overwhelm.js

@@ -24,6 +24,7 @@ const optionsDefinitions = [
   { name : 'continue', alias : 'c', type : Boolean, default : false },
   { name : 'checkctx', alias : 't', type : Boolean, default : false }, // checks overwhelm context
   { name : 'fetchctx', alias : 'f', type : Boolean, default : false }, // fetch and set k8s context
+  { name : 'genvals',  alias : 'g', type : Boolean, default : false }, // only generates values.yaml
   { name : 'matchk8s', alias : 'm', type : Boolean, default : false }, // checks k8s context
   { name : 'verbose',  alias : 'v', type : Boolean, default : false },
   /* eslint-enable no-multi-spaces */
@@ -301,6 +302,8 @@ glob.sync( '**/*.ovh' ).forEach( ( cfgmap ) => {
   fs.writeFileSync( target, valuesOut )
 } )
 
+if( args.genvals ) { process.exit( 0 ) }
+
 // Set the GCP context for safety!
 const clusterName = over.CLUSTER_NAME
 if ( over.PROJECT_NAME === 'minikube' ) {

package/src/system-charts/elasticsearch-local.yaml

@@ -0,0 +1,14 @@
+tolerations:
+- key: "database"
+  operator: "Equal"
+  value: "true"
+  effect: "NoSchedule"
+
+nodeAffinity:
+  requiredDuringSchedulingIgnoredDuringExecution:
+    nodeSelectorTerms:
+    - matchExpressions:
+      - key: target-env
+        operator: In
+        values:
+        - database

package/src/system-charts/elasticsearch.hup

@@ -0,0 +1,18 @@
+#!/bin/bash
+#
+# Do not move to 7.17+ until the memory explosion problem is resolved
+#
+showInstalling "Elastic Search"
+
+checkSSDStorageClass
+
+LOCAL_ES_VALUES="elasticsearch/elasticsearch-local.yaml"
+[ ! -f "$LOCAL_ES_VALUES" ] && exitOnError 1 "Missing the local ES config file => `color y $LOCAL_ES_VALUES`"
+
+addHelmRepo elastic https://helm.elastic.co
+helm upgrade --install elasticsearch elastic/elasticsearch \
+  --version 7.16 \
+  --values $LOCAL_ES_VALUES \
+  --set volumeClaimTemplate.storageClassName="ssd" $HELM_WHAT
+
+removeHelmRepo elastic

package/src/system-charts/grafana-local.yaml

@@ -0,0 +1,29 @@
+service:
+  type: "NodePort"
+  port: "9000"
+
+persistence:
+  enabled: true
+  storageClassName: ssd
+
+plugins:
+  - grafana-piechart-panel
+  - agenty-flowcharting-panel
+
+deploymentStrategy:
+  type: Recreate
+
+affinity:
+  nodeAffinity:
+    requiredDuringSchedulingIgnoredDuringExecution:
+      nodeSelectorTerms:
+      - matchExpressions:
+        - key: target-env
+          operator: In
+          values:
+          - database
+tolerations:
+- key: "database"
+  operator: "Equal"
+  value: "true"
+  effect: "NoSchedule"

package/src/system-charts/grafana.hup

@@ -0,0 +1,17 @@
+#!/bin/bash
+#
+showInstalling "Grafana"
+
+createNamespaceIfNeeded monitoring
+
+addHelmRepo grafana https://grafana.github.io/helm-charts
+
+[ -z "$GRAFANA_HELM_CHART" ] && GRAFANA_HELM_CHART="6"
+helm upgrade --install grafana grafana/grafana \
+  --namespace monitoring \
+  --values grafana/grafana-local.yaml \
+  --version $GRAFANA_HELM_CHART $HELM_WHAT
+
+helmup monitoring-wtf
+
+removeHelmRepo grafana