From 1fc4d69c98c19c1d7475348cd4e35494ec66e6a5 Mon Sep 17 00:00:00 2001 From: thenav56 Date: Sun, 9 Aug 2026 23:37:28 +0545 Subject: [PATCH 1/6] chore(helm): upgrade banjo-helm to 0.5.0-dev1 --- helm/Chart.lock | 6 +++--- helm/Chart.yaml | 2 +- helm/snapshots/alpha-1.yaml | 5 ++--- helm/snapshots/staging.yaml | 4 +--- helm/tests/staging.yaml | 2 +- helm/values/alpha.yaml | 2 +- 6 files changed, 9 insertions(+), 12 deletions(-) diff --git a/helm/Chart.lock b/helm/Chart.lock index ffb7fef..5e58e37 100644 --- a/helm/Chart.lock +++ b/helm/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: banjo-helm repository: oci://ghcr.io/toggle-corp - version: 0.4.0 -digest: sha256:962f25aab2f21bc6c7d642be104a0590bc323b5d6b4daa1a8cd94b6fa4ca2ebd -generated: "2026-07-08T21:15:58.231349627+05:45" + version: 0.5.0-dev1 +digest: sha256:d57b508037a30cc827fc1a7ec927f72a9716cc93dac7f943a4bec067428c05b8 +generated: "2026-08-09T23:36:39.977347388+05:45" diff --git a/helm/Chart.yaml b/helm/Chart.yaml index 0868592..fb03843 100644 --- a/helm/Chart.yaml +++ b/helm/Chart.yaml @@ -9,5 +9,5 @@ sources: dependencies: - name: banjo-helm alias: app - version: 0.4.0 + version: 0.5.0-dev1 repository: oci://ghcr.io/toggle-corp diff --git a/helm/snapshots/alpha-1.yaml b/helm/snapshots/alpha-1.yaml index 5ed099d..d7d7d55 100644 --- a/helm/snapshots/alpha-1.yaml +++ b/helm/snapshots/alpha-1.yaml @@ -54,10 +54,9 @@ kind: ConfigMap metadata: name: risk-1-create-users-files annotations: - argocd.argoproj.io/hook: "Sync" - argocd.argoproj.io/sync-wave: "25" - # Refresh content on every sync and clean up before the next run. + argocd.argoproj.io/hook: Sync argocd.argoproj.io/hook-delete-policy: BeforeHookCreation + argocd.argoproj.io/sync-wave: "25" labels: app: risk-1 component: hook diff --git a/helm/snapshots/staging.yaml b/helm/snapshots/staging.yaml index 928665e..2560927 100644 --- a/helm/snapshots/staging.yaml +++ b/helm/snapshots/staging.yaml @@ -5,10 +5,8 @@ kind: ServiceAccount metadata: name: service-token-reader annotations: - - azure.workload.identity/client-id: null + azure.workload.identity/client-id: test-client-id labels: - azure.workload.identity/use: "true" automountServiceAccountToken: true diff --git a/helm/tests/staging.yaml b/helm/tests/staging.yaml index b317ce4..208c339 100644 --- a/helm/tests/staging.yaml +++ b/helm/tests/staging.yaml @@ -16,7 +16,7 @@ app: AZURE_STORAGE_MANAGED_IDENTITY: "true" serviceAccount: annotations: - azure.workload.identity/client-id: + azure.workload.identity/client-id: test-client-id secretsStoreCsiDriver: parameters: clientID: AZURE_CLIENT_ID-XYZ diff --git a/helm/values/alpha.yaml b/helm/values/alpha.yaml index 50d5682..49aa586 100644 --- a/helm/values/alpha.yaml +++ b/helm/values/alpha.yaml @@ -18,7 +18,7 @@ app: command: ["./manage.py", "wait_for_resources", "--db", "--cache", "--minio"] create-users: enabled: true - annotations: + jobAnnotations: argocd.argoproj.io/hook: "Sync" argocd.argoproj.io/sync-wave: "25" argocd.argoproj.io/hook-delete-policy: BeforeHookCreation From e7fa49bf1ecca7841029b18deebb5905b86d5430 Mon Sep 17 00:00:00 2001 From: thenav56 Date: Thu, 10 Sep 2026 18:47:12 +0545 Subject: [PATCH 2/6] chore(helm): pin banjo-helm 0.5.0 --- helm/Chart.lock | 6 +++--- helm/Chart.yaml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/helm/Chart.lock b/helm/Chart.lock index 5e58e37..c98aa93 100644 --- a/helm/Chart.lock +++ b/helm/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: banjo-helm repository: oci://ghcr.io/toggle-corp - version: 0.5.0-dev1 -digest: sha256:d57b508037a30cc827fc1a7ec927f72a9716cc93dac7f943a4bec067428c05b8 -generated: "2026-08-09T23:36:39.977347388+05:45" + version: 0.5.0 +digest: sha256:08b8147edabbe2ccba7982b18b3ff233330ede52fa5bdeda04ebf46a3d6f9aaf +generated: "2026-09-10T18:47:05.642300394+05:45" diff --git a/helm/Chart.yaml b/helm/Chart.yaml index fb03843..6050d86 100644 --- a/helm/Chart.yaml +++ b/helm/Chart.yaml @@ -9,5 +9,5 @@ sources: dependencies: - name: banjo-helm alias: app - version: 0.5.0-dev1 + version: 0.5.0 repository: oci://ghcr.io/toggle-corp From e5d48bd6227ce5c966dade8ca0fd96b71b0efcf2 Mon Sep 17 00:00:00 2001 From: thenav56 Date: Thu, 10 Sep 2026 18:48:15 +0545 Subject: [PATCH 3/6] feat(helm): serve the api ingress through traefik --- helm/snapshots/alpha-1.yaml | 12 ++++++++++++ helm/snapshots/staging.yaml | 13 ++++++++++++- helm/tests.yaml | 2 ++ helm/values/go-deploy.yaml | 1 - helm/values/traefik.yaml | 21 +++++++++++++++++++++ 5 files changed, 47 insertions(+), 2 deletions(-) create mode 100644 helm/values/traefik.yaml diff --git a/helm/snapshots/alpha-1.yaml b/helm/snapshots/alpha-1.yaml index d7d7d55..ce15a24 100644 --- a/helm/snapshots/alpha-1.yaml +++ b/helm/snapshots/alpha-1.yaml @@ -571,7 +571,9 @@ metadata: release: release-name annotations: argocd.argoproj.io/sync-wave: "30" + traefik.ingress.kubernetes.io/router.middlewares: default-risk-module-body-size@kubernetescrd spec: + ingressClassName: "traefik" rules: - host: "risk-1.ifrcgo.local.example.com" http: @@ -613,3 +615,13 @@ spec: requests: storage: 1Gi storageClassName: local-path +--- +# Source: ifrcgo-risk-module-helm/charts/app/templates/extraManifests.yaml +# Manifest: traefik-body-size-middleware +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: risk-module-body-size +spec: + buffering: + maxRequestBodyBytes: 524288000 diff --git a/helm/snapshots/staging.yaml b/helm/snapshots/staging.yaml index 2560927..3bef465 100644 --- a/helm/snapshots/staging.yaml +++ b/helm/snapshots/staging.yaml @@ -559,8 +559,9 @@ metadata: release: release-name annotations: argocd.argoproj.io/sync-wave: "30" + traefik.ingress.kubernetes.io/router.middlewares: default-risk-module-body-size@kubernetescrd spec: - ingressClassName: "nginx" + ingressClassName: "traefik" rules: - host: "go-risk-api-stage.ifrc.org" http: @@ -605,6 +606,16 @@ spec: resources: requests: storage: 1Gi +--- +# Source: ifrcgo-risk-module-helm/charts/app/templates/extraManifests.yaml +# Manifest: traefik-body-size-middleware +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: risk-module-body-size +spec: + buffering: + maxRequestBodyBytes: 524288000 --- # Source: ifrcgo-risk-module-helm/charts/app/templates/api/secrets-provider-class.yaml diff --git a/helm/tests.yaml b/helm/tests.yaml index 5284ce3..d0564e9 100644 --- a/helm/tests.yaml +++ b/helm/tests.yaml @@ -2,7 +2,9 @@ tests: alpha-1.yaml: - values/operators.yaml - values/alpha.yaml + - values/traefik.yaml staging.yaml: - values/operators.yaml - values/go-deploy.yaml - values/staging.yaml + - values/traefik.yaml diff --git a/helm/values/go-deploy.yaml b/helm/values/go-deploy.yaml index 4e992a0..6bbcbf3 100644 --- a/helm/values/go-deploy.yaml +++ b/helm/values/go-deploy.yaml @@ -7,7 +7,6 @@ app: api: ingress: enabled: true - className: nginx tls: enabled: true diff --git a/helm/values/traefik.yaml b/helm/values/traefik.yaml new file mode 100644 index 0000000..bcc9b84 --- /dev/null +++ b/helm/values/traefik.yaml @@ -0,0 +1,21 @@ +# Serve the api ingress through Traefik. Layer this after an environment overlay +# so the class here wins. +app: + api: + ingress: + className: traefik + # Attach the risk-module-body-size Middleware to the api router. Traefik + # references CRD middlewares as `-@kubernetescrd`; the + # namespace is resolved via tpl so this stays namespace-agnostic. + annotations: + traefik.ingress.kubernetes.io/router.middlewares: "{{ $.Release.Namespace }}-risk-module-body-size@kubernetescrd" + + extraManifests: + traefik-body-size-middleware: + apiVersion: traefik.io/v1alpha1 + kind: Middleware + metadata: + name: risk-module-body-size + spec: + buffering: + maxRequestBodyBytes: 524288000 # 500 MiB From c30e944db40f42cded32b306ecf077eb5dd22818 Mon Sep 17 00:00:00 2001 From: thenav56 Date: Thu, 10 Sep 2026 21:53:01 +0545 Subject: [PATCH 4/6] chore(ci): upgrade banjo-action to v0.4.0 --- .github/workflows/ci.yml | 2 +- .github/workflows/helm-publish.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a58fbbe..4616487 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,7 +6,7 @@ on: jobs: _: - uses: toggle-corp/banjo-action/.github/workflows/pipeline.yml@v0.2.0 + uses: toggle-corp/banjo-action/.github/workflows/pipeline.yml@v0.4.0 with: # Job: Pre-commit pre_commit__apt_packages: "gdal-bin libgdal-dev" diff --git a/.github/workflows/helm-publish.yml b/.github/workflows/helm-publish.yml index 0a10d10..9c69be8 100644 --- a/.github/workflows/helm-publish.yml +++ b/.github/workflows/helm-publish.yml @@ -9,7 +9,7 @@ on: jobs: _: - uses: toggle-corp/banjo-action/.github/workflows/pipeline.yml@v0.2.0 + uses: toggle-corp/banjo-action/.github/workflows/pipeline.yml@v0.4.0 with: # -- Same as validate # Job: Pre-commit From 1e950f5e310a1a427446732fc1cac2156d08129e Mon Sep 17 00:00:00 2001 From: thenav56 Date: Fri, 11 Sep 2026 09:32:30 +0545 Subject: [PATCH 5/6] ci: pin the helm version used to validate and publish the chart --- .github/workflows/ci.yml | 3 +++ .github/workflows/helm-publish.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4616487..92ce6c2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,3 +28,6 @@ jobs: } # Job: Helm helm__chart_directory: "./helm" + # Pinned: helm renders whitespace differently across releases and the pipeline + # diffs the committed chart snapshots byte-for-byte. + helm__version: "v4.2.2" diff --git a/.github/workflows/helm-publish.yml b/.github/workflows/helm-publish.yml index 9c69be8..cf0ee79 100644 --- a/.github/workflows/helm-publish.yml +++ b/.github/workflows/helm-publish.yml @@ -32,6 +32,9 @@ jobs: } # Job: Helm helm__chart_directory: "./helm" + # Pinned: helm renders whitespace differently across releases and the pipeline + # diffs the committed chart snapshots byte-for-byte. + helm__version: "v4.2.2" # -- Publish docker__push: true helm__push: true From 97b6f4744b8415f984dcf8a9e9af060110b03672 Mon Sep 17 00:00:00 2001 From: thenav56 Date: Fri, 11 Sep 2026 11:08:59 +0545 Subject: [PATCH 6/6] chore: remove git lint already included in banjo-action --- .github/workflows/git.yml | 11 ----------- 1 file changed, 11 deletions(-) delete mode 100644 .github/workflows/git.yml diff --git a/.github/workflows/git.yml b/.github/workflows/git.yml deleted file mode 100644 index 52c6062..0000000 --- a/.github/workflows/git.yml +++ /dev/null @@ -1,11 +0,0 @@ -name: Lint commits - -on: [pull_request] - -jobs: - lint: - name: Commit Lint - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@main - - uses: toggle-corp/commit-lint@main