Add repertory-api backend

charts/repertory-api/templates/external-secret.yaml

@@ -0,0 +1,28 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: repertory-api-secrets
+  namespace: repertory-api
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: aws-secrets-manager
+    kind: ClusterSecretStore
+  target:
+    name: repertory-api-secrets
+    template:
+      data:
+        API_KEY: "{{ `{{ .api_key }}` }}"
+        DATABASE_URL: "postgresql://postgres:{{ `{{ .postgres_password }}` }}@postgres.postgres.svc.cluster.local:5432/repertory"
+        CORS_ORIGINS: "{{ .Values.corsOrigins }}"
+  data:
+    - secretKey: api_key
+      remoteRef:
+        key: dumpnet
+        property: repertory_api.api_key
+    - secretKey: postgres_password
+      remoteRef:
+        key: dumpnet
+        property: postgres.password

charts/repertory-api/templates/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: repertory-api

charts/repertory-api/templates/registry-secret.yaml

@@ -0,0 +1,27 @@
+{{- $host := .Values.registry.host }}
+{{- $user := .Values.registry.user }}
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: forgejo-registry
+  namespace: repertory-api
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: aws-secrets-manager
+    kind: ClusterSecretStore
+  target:
+    name: forgejo-registry
+    template:
+      engineVersion: v2
+      mergePolicy: Replace
+      type: kubernetes.io/dockerconfigjson
+      data:
+        .dockerconfigjson: '{"auths":{"{{ $host }}":{"username":"{{ $user }}","password":"{{ "{{" }} .registry_token {{ "}}" }}","auth":"{{ "{{" }} printf "{{ $user }}:%s" .registry_token | b64enc {{ "}}" }}"}}}'
+  data:
+    - secretKey: registry_token
+      remoteRef:
+        key: dumpnet
+        property: forgejo.registry_token

charts/repertory-api/templates/repertory-api.yaml

@@ -0,0 +1,96 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: repertory-api
+  namespace: repertory-api
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: repertory-api
+  template:
+    metadata:
+      labels:
+        app: repertory-api
+    spec:
+      imagePullSecrets:
+        - name: forgejo-registry
+      containers:
+        - name: repertory-api
+          image: "{{ .Values.registry.host }}/{{ .Values.registry.user }}/repertory-api:latest"
+          ports:
+            - containerPort: 5000
+          envFrom:
+            - secretRef:
+                name: repertory-api-secrets
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 5000
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 5000
+            initialDelaySeconds: 10
+            periodSeconds: 20
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: repertory-api
+  namespace: repertory-api
+spec:
+  selector:
+    app: repertory-api
+  ports:
+    - port: 80
+      targetPort: 5000
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: repertory-api
+  namespace: repertory-api
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - repertory-api.{{ .Values.domain }}
+      secretName: repertory-api-tls
+  rules:
+    - host: repertory-api.{{ .Values.domain }}
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: repertory-api
+                port:
+                  number: 80
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: repertory-api-migrate
+  namespace: repertory-api
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
+spec:
+  ttlSecondsAfterFinished: 120
+  template:
+    spec:
+      restartPolicy: Never
+      imagePullSecrets:
+        - name: forgejo-registry
+      containers:
+        - name: migrate
+          image: "{{ .Values.registry.host }}/{{ .Values.registry.user }}/repertory-api:latest"
+          command: ["uv", "run", "alembic", "upgrade", "head"]
+          envFrom:
+            - secretRef:
+                name: repertory-api-secrets