@yarkivaev/scada 2.3.90 → 2.3.113

package/README.md

@@ -134,7 +134,7 @@ Main entry (`import { … } from '@yarkivaev/scada'`):
 | `pgTimeline`, `pgAlerts`, `stateDataFromPool`, `stateDataFromMemory` | State ports |
 | `stompTimeline`, `stompAlerts`, `userDecisions` | STOMP messaging |
 | `machineOwners`, `ownerTimeline`, `httpTimeline`, `httpOperations` | Owner-routed timeline and operations write (local or edge HTTP) |
-| `mqttMetrics`, `modbusMqtt`, `activityTracking`, `amqpMetricsIngest` | Ingest pipelines |
+| `mqttMetrics`, `modbusMqtt`, `modbusPublish`, `activityTracking`, `amqpMetricsIngest` | Ingest pipelines |
 | `analyticsMcp`, `namespaceTree`, `coverageSpans`, `coverageOverlay`, `coverageCursor`, `sqlGuard` | Analytics MCP, path index, coverage spans, timeline-name overlay, checkpoint-or-sample cursor, read-only SQL guard |
 
 Subpath exports:
@@ -184,6 +184,7 @@ Alert and HMI copy are inject-only: pass `translations` into `siteServer` / `pla
 | Binary | Role |
 |--------|------|
 | `supervisor-sink` | STOMP → PostgreSQL ingest + edge HTTP API (`STATE_HTTP_PORT`, default 8081) |
+| `modbus-to-mqtt` | Poll Modbus and publish `STREAM` + `MAPPING` document paths (`src/bin/modbus-to-mqtt.js`) |
 
 Full plant API with site-specific routes: plant packages call `siteServer` from this package.
 
@@ -223,6 +224,10 @@ Set `SINK_DB_PROFILE=central|edge`. Migrations run at supervisor-sink startup vi
 | `CLICKHOUSE_URL` | Central metrics sink |
 | `PORT` | Plant API port (siteServer, default 3000) |
 
+## Deploy
+
+The deployment DSL is specified in [docs/deploy.md](docs/deploy.md). A flow is `from` and `name`. An object listed on a node is state that node is responsible for. Profile, cluster, and modules are implementation. One Helm release of `charts/scada` is one cluster, cut from that document.
+
 ## Testing
 
 ```bash

package/charts/scada/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: scada
+description: Generic SCADA site — site-server, supervisor-sink, collectors, Postgres, RabbitMQ, optional ClickHouse
+type: application
+version: 0.2.3
+appVersion: "2.3.113"

package/charts/scada/templates/_helpers.tpl

@@ -0,0 +1,88 @@
+{{- define "scada.labels" -}}
+app.kubernetes.io/name: scada
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- include "scada.extraLabels" . }}
+{{- end }}
+
+{{- define "scada.extraLabels" -}}
+{{- range $key, $val := (.Values.extraLabels | default dict) }}
+{{ $key }}: {{ $val | quote }}
+{{- end }}
+{{- end }}
+
+{{- define "scada.match" -}}
+app: {{ .app }}
+{{- range $key, $val := (.ctx.Values.extraLabels | default dict) }}
+{{ $key }}: {{ $val | quote }}
+{{- end }}
+{{- end }}
+
+{{- define "scada.claim" -}}
+accessModes: ["ReadWriteOnce"]
+{{- if .class }}
+storageClassName: {{ .class | quote }}
+{{- end }}
+resources:
+  requests:
+    storage: {{ .size | quote }}
+volumeMode: Filesystem
+{{- end }}
+
+{{- define "scada.device" -}}
+{{- $serial := regexFind "/dev/tty[A-Za-z0-9]+" . -}}
+{{- if $serial -}}
+{{- $serial -}}
+{{- else -}}
+{{- . -}}
+{{- end -}}
+{{- end }}
+
+{{- define "scada.slug" -}}
+{{- regexReplaceAll "[^A-Za-z0-9]+" . "-" | trimAll "-" | lower -}}
+{{- end }}
+
+{{- define "scada.routingKey" -}}
+{{- if eq . "*" -}}
+#
+{{- else if hasSuffix "/*" . -}}
+{{- printf "%s.#" (replace "/" "." (trimSuffix "/*" .)) -}}
+{{- else -}}
+{{- replace "/" "." . -}}
+{{- end -}}
+{{- end }}
+
+{{- define "scada.linkEnv" -}}
+- name: SINK_DB_PROFILE
+  value: {{ .Values.role | quote }}
+{{- if .Values.postgres.enabled }}
+- name: POSTGRES_URL
+  valueFrom:
+    secretKeyRef:
+      name: {{ .Values.postgres.secret }}
+      key: url
+- name: POSTGRES_ADMIN_URL
+  valueFrom:
+    secretKeyRef:
+      name: {{ .Values.postgres.secret }}
+      key: adminUrl
+{{- end }}
+{{- if .Values.rabbitmq.enabled }}
+- name: STOMP_URL
+  value: {{ printf "stomp://%s-rabbitmq:61613" .Release.Name | quote }}
+- name: STOMP_LOGIN
+  value: guest
+- name: STOMP_PASSCODE
+  value: guest
+- name: STOMP_HOST
+  value: /
+- name: AMQP_URL
+  value: {{ printf "amqp://guest:guest@%s-rabbitmq:5672" .Release.Name | quote }}
+{{- end }}
+{{- if .Values.clickhouse.enabled }}
+- name: CLICKHOUSE_HOST
+  value: {{ printf "%s-clickhouse" .Release.Name | quote }}
+- name: CLICKHOUSE_URL
+  value: {{ printf "http://%s-clickhouse:8123" .Release.Name | quote }}
+{{- end }}
+{{- end }}

package/charts/scada/templates/clickhouse.yaml

@@ -0,0 +1,62 @@
+{{- if .Values.clickhouse.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}-clickhouse
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: clickhouse
+spec:
+  ports:
+    - name: http
+      port: 8123
+      targetPort: http
+    - name: native
+      port: 9000
+      targetPort: native
+    - name: metrics
+      port: 9363
+      targetPort: metrics
+  selector:
+    {{- include "scada.match" (dict "app" "clickhouse" "ctx" .) | nindent 4 }}
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .Release.Name }}-clickhouse
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: clickhouse
+spec:
+  serviceName: {{ .Release.Name }}-clickhouse
+  replicas: 1
+  selector:
+    matchLabels:
+      {{- include "scada.match" (dict "app" "clickhouse" "ctx" .) | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "scada.labels" . | nindent 8 }}
+        {{- include "scada.match" (dict "app" "clickhouse" "ctx" .) | nindent 8 }}
+    spec:
+      containers:
+        - name: clickhouse
+          image: {{ .Values.clickhouse.image | quote }}
+          ports:
+            - name: http
+              containerPort: 8123
+            - name: native
+              containerPort: 9000
+            - name: metrics
+              containerPort: 9363
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/clickhouse
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        {{- include "scada.claim" (dict "size" .Values.clickhouse.storage "class" .Values.clickhouse.storageClass) | nindent 8 }}
+{{- end }}

package/charts/scada/templates/collector.yaml

@@ -0,0 +1,114 @@
+{{- if .Values.collectors }}
+{{- $groups := dict -}}
+{{- range $item := .Values.collectors }}
+{{- $device := include "scada.device" $item.address | trim -}}
+{{- if not $device }}
+{{- fail "collector has no address" }}
+{{- end }}
+{{- if not $item.path }}
+{{- fail (printf "collector %s has no path" $device) }}
+{{- end }}
+{{- if not $item.command }}
+{{- fail (printf "collector %s has no command" $device) }}
+{{- end }}
+{{- $token := $item.command | toJson -}}
+{{- $prior := list -}}
+{{- if hasKey $groups $token }}
+{{- $prior = index $groups $token -}}
+{{- end }}
+{{- $groups = set $groups $token (append $prior $item) -}}
+{{- end }}
+{{- $claimed := dict -}}
+{{- range $token, $items := $groups }}
+{{- range $item := $items }}
+{{- $device := include "scada.device" $item.address | trim -}}
+{{- if hasPrefix "/dev/" $device }}
+{{- if and (hasKey $claimed $device) (ne (index $claimed $device) $token) }}
+{{- fail (printf "collectors on %s use different commands" $device) }}
+{{- end }}
+{{- $claimed = set $claimed $device $token -}}
+{{- end }}
+{{- end }}
+{{- end }}
+{{- range $token, $items := $groups }}
+{{- $argv := (index $items 0).command -}}
+{{- $slug := include "scada.slug" (index $argv (sub (len $argv) 1)) | trim -}}
+{{- if not $slug }}
+{{- fail (printf "collector %s has no name" $token) }}
+{{- end }}
+{{- $paths := list -}}
+{{- $maps := list -}}
+{{- $addresses := list -}}
+{{- $serials := list -}}
+{{- range $item := $items }}
+{{- $paths = append $paths $item.path -}}
+{{- $maps = append $maps ($item.mapping | default (dict)) -}}
+{{- $addresses = append $addresses $item.address -}}
+{{- $device := include "scada.device" $item.address | trim -}}
+{{- if and (hasPrefix "/dev/" $device) (not (has $device $serials)) }}
+{{- $serials = append $serials $device -}}
+{{- end }}
+{{- end }}
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ $.Release.Name }}-collector-{{ $slug }}
+  namespace: {{ $.Release.Namespace }}
+  labels:
+    {{- include "scada.labels" $ | nindent 4 }}
+    app: collector
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      {{- include "scada.match" (dict "app" "collector" "ctx" $) | nindent 6 }}
+      scada/command: {{ $slug }}
+  template:
+    metadata:
+      labels:
+        {{- include "scada.labels" $ | nindent 8 }}
+        {{- include "scada.match" (dict "app" "collector" "ctx" $) | nindent 8 }}
+        scada/command: {{ $slug }}
+    spec:
+      {{- with $.Values.pullSecret }}
+      imagePullSecrets:
+        - name: {{ . }}
+      {{- end }}
+      containers:
+        - name: collector
+          image: {{ required "image is required" $.Values.image | quote }}
+          command: {{ $argv | toJson }}
+          {{- if $serials }}
+          securityContext:
+            privileged: true
+          volumeMounts:
+            {{- range $serials }}
+            - name: {{ include "scada.slug" . | trim }}
+              mountPath: {{ . }}
+            {{- end }}
+          {{- end }}
+          env:
+            - name: ADDRESS
+              value: {{ $addresses | toJson | quote }}
+            - name: STREAM
+              value: {{ $paths | toJson | quote }}
+            - name: MAPPING
+              value: {{ $maps | toJson | quote }}
+            {{- if $.Values.rabbitmq.enabled }}
+            - name: MQTT_URL
+              value: {{ printf "mqtt://%s-rabbitmq:1883" $.Release.Name | quote }}
+            {{- end }}
+          resources:
+            {{- toYaml $.Values.resources | nindent 12 }}
+      {{- if $serials }}
+      volumes:
+        {{- range $serials }}
+        - name: {{ include "scada.slug" . | trim }}
+          hostPath:
+            path: {{ . }}
+            type: CharDevice
+        {{- end }}
+      {{- end }}
+{{- end }}
+{{- end }}

package/charts/scada/templates/postgres.yaml

@@ -0,0 +1,67 @@
+{{- if .Values.postgres.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}-postgres
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: postgres
+spec:
+  ports:
+    - name: postgres
+      port: 5432
+      targetPort: postgres
+  selector:
+    {{- include "scada.match" (dict "app" "postgres" "ctx" .) | nindent 4 }}
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .Release.Name }}-postgres
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: postgres
+spec:
+  serviceName: {{ .Release.Name }}-postgres
+  replicas: 1
+  selector:
+    matchLabels:
+      {{- include "scada.match" (dict "app" "postgres" "ctx" .) | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "scada.labels" . | nindent 8 }}
+        {{- include "scada.match" (dict "app" "postgres" "ctx" .) | nindent 8 }}
+    spec:
+      containers:
+        - name: postgres
+          image: {{ .Values.postgres.image | quote }}
+          ports:
+            - name: postgres
+              containerPort: 5432
+          env:
+            - name: POSTGRES_DB
+              value: {{ .Values.postgres.database | quote }}
+            - name: POSTGRES_USER
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.postgres.secret }}
+                  key: user
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: {{ .Values.postgres.secret }}
+                  key: password
+            - name: PGDATA
+              value: {{ .Values.postgres.data | quote }}
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/postgresql/data
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        {{- include "scada.claim" (dict "size" .Values.postgres.storage "class" .Values.postgres.storageClass) | nindent 8 }}
+{{- end }}

package/charts/scada/templates/rabbitmq.yaml

@@ -0,0 +1,174 @@
+{{- if .Values.rabbitmq.enabled }}
+{{- $ingest := list -}}
+{{- $outgoing := list -}}
+{{- range .Values.collectors }}
+{{- if .path }}
+{{- $ingest = append $ingest (include "scada.routingKey" .path | trim) -}}
+{{- end }}
+{{- end }}
+{{- range $item := concat (.Values.buses | default (list)) (.Values.bus | default (list)) }}
+{{- range $name := ($item.names | default (list)) }}
+{{- $routed := include "scada.routingKey" $name | trim -}}
+{{- $ingest = append $ingest $routed -}}
+{{- $outgoing = append $outgoing $routed -}}
+{{- end }}
+{{- end }}
+{{- $outgoing = $outgoing | uniq -}}
+{{- if $ingest }}
+{{- $ingest = $ingest | uniq -}}
+{{- else }}
+{{- $ingest = list "#" -}}
+{{- end }}
+{{- $exchange := list
+  (dict "name" "scada.alerts" "vhost" "/" "type" "topic" "durable" true "auto_delete" false)
+  (dict "name" "scada.segments" "vhost" "/" "type" "topic" "durable" true "auto_delete" false)
+  (dict "name" "scada.telemetry" "vhost" "/" "type" "topic" "durable" true "auto_delete" false)
+  (dict "name" "scada.operations" "vhost" "/" "type" "topic" "durable" true "auto_delete" false)
+  (dict "name" "scada.user_decisions" "vhost" "/" "type" "topic" "durable" true "auto_delete" false)
+-}}
+{{- $queue := list
+  (dict "name" "scada.segments.ingest" "vhost" "/" "durable" true "auto_delete" false)
+  (dict "name" "scada.telemetry.ingest" "vhost" "/" "durable" true "auto_delete" false)
+  (dict "name" "scada.operations.ingest" "vhost" "/" "durable" true "auto_delete" false)
+  (dict "name" "scada.user_decisions" "vhost" "/" "durable" true "auto_delete" false)
+-}}
+{{- if $outgoing }}
+{{- $queue = append $queue (dict "name" "scada.telemetry.outbox" "vhost" "/" "durable" true "auto_delete" false) -}}
+{{- end }}
+{{- $binding := list -}}
+{{- range $key := $ingest }}
+{{- $binding = append $binding (dict "source" "scada.telemetry" "vhost" "/" "destination" "scada.telemetry.ingest" "destination_type" "queue" "routing_key" $key) -}}
+{{- end }}
+{{- range $pair := (list
+  (dict "source" "scada.operations" "destination" "scada.operations.ingest")
+  (dict "source" "scada.segments" "destination" "scada.segments.ingest")
+  (dict "source" "scada.user_decisions" "destination" "scada.user_decisions")) }}
+{{- $binding = append $binding (dict "source" $pair.source "vhost" "/" "destination" $pair.destination "destination_type" "queue" "routing_key" "#") -}}
+{{- end }}
+{{- range $key := $outgoing }}
+{{- $binding = append $binding (dict "source" "scada.telemetry" "vhost" "/" "destination" "scada.telemetry.outbox" "destination_type" "queue" "routing_key" $key) -}}
+{{- end }}
+{{- $definitions := dict
+  "vhosts" (list (dict "name" "/"))
+  "users" (list (dict "name" "guest" "password" "guest" "tags" (list "administrator")))
+  "permissions" (list (dict "user" "guest" "vhost" "/" "configure" ".*" "write" ".*" "read" ".*"))
+  "exchanges" $exchange
+  "queues" $queue
+  "bindings" $binding
+-}}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ .Release.Name }}-rabbitmq
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: rabbitmq
+data:
+  enabled_plugins: |
+    [rabbitmq_stomp, rabbitmq_mqtt, rabbitmq_management].
+  rabbitmq.conf: |
+    load_definitions = /etc/rabbitmq/definitions.json
+    mqtt.listeners.tcp.default = 1883
+    mqtt.allow_anonymous = true
+    mqtt.vhost = /
+    mqtt.exchange = scada.telemetry
+  definitions.json: |
+{{ $definitions | toPrettyJson | nindent 4 }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}-rabbitmq
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: rabbitmq
+spec:
+  {{- $svc := .Values.rabbitmq.service | default dict }}
+  type: {{ $svc.type | default "ClusterIP" }}
+  ports:
+    - name: amqp
+      port: 5672
+      targetPort: amqp
+      {{- with $svc.nodePorts }}
+      {{- if .amqp }}
+      nodePort: {{ .amqp }}
+      {{- end }}
+      {{- end }}
+    - name: mqtt
+      port: 1883
+      targetPort: mqtt
+    - name: stomp
+      port: 61613
+      targetPort: stomp
+      {{- with $svc.nodePorts }}
+      {{- if .stomp }}
+      nodePort: {{ .stomp }}
+      {{- end }}
+      {{- end }}
+    - name: management
+      port: 15672
+      targetPort: management
+      {{- with $svc.nodePorts }}
+      {{- if .management }}
+      nodePort: {{ .management }}
+      {{- end }}
+      {{- end }}
+  selector:
+    {{- include "scada.match" (dict "app" "rabbitmq" "ctx" .) | nindent 4 }}
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ .Release.Name }}-rabbitmq
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: rabbitmq
+spec:
+  serviceName: {{ .Release.Name }}-rabbitmq
+  replicas: 1
+  selector:
+    matchLabels:
+      {{- include "scada.match" (dict "app" "rabbitmq" "ctx" .) | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "scada.labels" . | nindent 8 }}
+        {{- include "scada.match" (dict "app" "rabbitmq" "ctx" .) | nindent 8 }}
+    spec:
+      containers:
+        - name: rabbitmq
+          image: {{ .Values.rabbitmq.image | quote }}
+          ports:
+            - name: amqp
+              containerPort: 5672
+            - name: mqtt
+              containerPort: 1883
+            - name: stomp
+              containerPort: 61613
+            - name: management
+              containerPort: 15672
+          volumeMounts:
+            - name: config
+              mountPath: /etc/rabbitmq/enabled_plugins
+              subPath: enabled_plugins
+            - name: config
+              mountPath: /etc/rabbitmq/rabbitmq.conf
+              subPath: rabbitmq.conf
+            - name: config
+              mountPath: /etc/rabbitmq/definitions.json
+              subPath: definitions.json
+            - name: data
+              mountPath: /var/lib/rabbitmq
+      volumes:
+        - name: config
+          configMap:
+            name: {{ .Release.Name }}-rabbitmq
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        {{- include "scada.claim" (dict "size" .Values.rabbitmq.storage "class" .Values.rabbitmq.storageClass) | nindent 8 }}
+{{- end }}

package/charts/scada/templates/site-server.yaml

@@ -0,0 +1,107 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .Release.Name }}-site-server
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: site-server
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      {{- include "scada.match" (dict "app" "site-server" "ctx" .) | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "scada.labels" . | nindent 8 }}
+        {{- include "scada.match" (dict "app" "site-server" "ctx" .) | nindent 8 }}
+    spec:
+      {{- with .Values.pullSecret }}
+      imagePullSecrets:
+        - name: {{ . }}
+      {{- end }}
+      containers:
+        - name: site-server
+          image: {{ required "image is required" .Values.image | quote }}
+          {{- with .Values.command }}
+          command: {{ toJson . }}
+          {{- end }}
+          ports:
+            - name: http
+              containerPort: {{ .Values.service.port }}
+            - name: internal-api
+              containerPort: {{ .Values.service.internalPort }}
+          env:
+            - name: PORT
+              value: {{ .Values.service.port | quote }}
+            - name: STATE_HTTP_PORT
+              value: {{ .Values.service.internalPort | quote }}
+            {{- include "scada.linkEnv" . | nindent 12 }}
+            - name: SINK_PIPELINES
+              value: "false"
+            {{- if .Values.machines }}
+            - name: EDGE_MACHINES
+              value: {{ .Values.machines | toJson | quote }}
+            {{- end }}
+            {{- if .Values.sites }}
+            - name: EDGE_SITES
+              value: {{ .Values.sites | toJson | quote }}
+            {{- end }}
+            {{- range .Values.env }}
+            - name: {{ .name }}
+              value: {{ .value | quote }}
+            {{- end }}
+          readinessProbe:
+            httpGet:
+              path: /api/v1/machines
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          livenessProbe:
+            httpGet:
+              path: /api/v1/machines
+              port: http
+            initialDelaySeconds: 15
+            periodSeconds: 30
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}-site-server
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: site-server
+spec:
+  ports:
+    - name: http
+      port: {{ .Values.service.port }}
+      targetPort: http
+    - name: internal-api
+      port: {{ .Values.service.internalPort }}
+      targetPort: internal-api
+  selector:
+    {{- include "scada.match" (dict "app" "site-server" "ctx" .) | nindent 4 }}
+{{- if gt (int .Values.service.nodePort) 0 }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}-site-server-plant-lan
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "scada.labels" . | nindent 4 }}
+    app: site-server
+spec:
+  type: NodePort
+  ports:
+    - name: http
+      port: {{ .Values.service.port }}
+      targetPort: http
+      nodePort: {{ .Values.service.nodePort }}
+  selector:
+    {{- include "scada.match" (dict "app" "site-server" "ctx" .) | nindent 4 }}
+{{- end }}