헬름 차트: K8s 패키지 관리

# 설치
brew install helm  # 또는 OS별

# 차트 검색
helm search repo bitnami/postgresql

# 추가 + 설치
helm repo add bitnami https://charts.bitnami.com/bitnami
helm install my-postgres bitnami/postgresql --namespace ohs-prod

# 업그레이드
helm upgrade my-postgres bitnami/postgresql --set auth.password=newpass

# 롤백
helm history my-postgres
helm rollback my-postgres 1

ohs-backend/
├── Chart.yaml          # 차트 메타데이터
├── values.yaml         # 기본값
├── values-prod.yaml    # 환경별 오버라이드
├── values-dev.yaml
├── templates/
│   ├── deployment.yaml
│   ├── service.yaml
│   ├── ingress.yaml
│   ├── configmap.yaml
│   ├── secret.yaml
│   ├── hpa.yaml
│   └── _helpers.tpl
└── charts/             # 의존 차트

apiVersion: v2
name: ohs-backend
description: OHS Backend
type: application
version: 1.0.0
appVersion: "1.0.0"
dependencies:
  - name: postgresql
    version: "13.4.0"
    repository: https://charts.bitnami.com/bitnami
    condition: postgresql.enabled
  - name: redis
    version: "18.6.0"
    repository: https://charts.bitnami.com/bitnami
    condition: redis.enabled

replicaCount: 3

image:
  repository: myorg/ohs-backend
  tag: "1.0.0"
  pullPolicy: IfNotPresent

service:
  type: ClusterIP
  port: 80
  targetPort: 8080

ingress:
  enabled: true
  hosts:
    - host: api.openhyperstep.com
      paths:
        - path: /
          pathType: Prefix

resources:
  requests:
    memory: "512Mi"
    cpu: "250m"
  limits:
    memory: "1Gi"
    cpu: "1000m"

autoscaling:
  enabled: true
  minReplicas: 3
  maxReplicas: 20
  targetCPUUtilizationPercentage: 70

postgresql:
  enabled: true
  auth:
    database: ohsdb

redis:
  enabled: true

env:
  SPRING_PROFILES_ACTIVE: prod

apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "ohs-backend.fullname" . }}
  labels:
    {{- include "ohs-backend.labels" . | nindent 4 }}
spec:
  {{- if not .Values.autoscaling.enabled }}
  replicas: {{ .Values.replicaCount }}
  {{- end }}
  selector:
    matchLabels:
      {{- include "ohs-backend.selectorLabels" . | nindent 6 }}
  template:
    metadata:
      labels:
        {{- include "ohs-backend.selectorLabels" . | nindent 8 }}
    spec:
      containers:
        - name: {{ .Chart.Name }}
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          ports:
            - containerPort: {{ .Values.service.targetPort }}
          env:
            {{- range $key, $val := .Values.env }}
            - name: {{ $key }}
              value: {{ $val | quote }}
            {{- end }}
          resources:
            {{- toYaml .Values.resources | nindent 12 }}

{{- define "ohs-backend.fullname" -}}
{{- printf "%s-%s" .Release.Name .Chart.Name | trunc 63 -}}
{{- end -}}

{{- define "ohs-backend.labels" -}}
app.kubernetes.io/name: {{ .Chart.Name }}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/managed-by: helm
{{- end -}}

{{- define "ohs-backend.selectorLabels" -}}
app.kubernetes.io/name: {{ .Chart.Name }}
app.kubernetes.io/instance: {{ .Release.Name }}
{{- end -}}

# 개발
helm install ohs-backend ./ohs-backend \
    -f values.yaml -f values-dev.yaml \
    --namespace ohs-dev --create-namespace

# 프로덕션
helm upgrade --install ohs-backend ./ohs-backend \
    -f values.yaml -f values-prod.yaml \
    --namespace ohs-prod \
    --set image.tag=1.1.0

- name: Deploy to K8s
  run: |
    helm upgrade --install ohs-backend ./helm/ohs-backend \
        -f ./helm/values-${{ env.ENVIRONMENT }}.yaml \
        --set image.tag=${{ github.sha }} \
        --namespace ohs-${{ env.ENVIRONMENT }} \
        --wait \
        --timeout 5m