✨ initial acapy-cloud dev values

.github/actions/deploy-eks/action.yml

@@ -64,7 +64,8 @@ runs:
         helmfile-args: |
           destroy \
             --environment ${{ inputs.environment }} \
-            -f ./helm/acapy-cloud.yaml.gotmpl
+            -f ./helm/acapy-cloud.yaml.gotmpl \
+            --state-values-set namespace=${{ inputs.namespace }}
         helm-plugins: ${{ inputs.helmfile-plugins }}
         helmfile-version: ${{ inputs.helmfile-version }}
         helm-version: ${{ inputs.helm-version }}
@@ -91,7 +92,8 @@ runs:
             -f ./helm/acapy-cloud.yaml.gotmpl \
             --state-values-set image.tag=${{ inputs.image-tag }} \
             --state-values-set image.registry=ghcr.io/${{ github.repository_owner }} \
-            --state-values-set pgProxyEnabled=${{ inputs.clean-start == 'false' }}
+            --state-values-set pgProxyEnabled=${{ inputs.clean-start == 'false' }} \
+            --state-values-set namespace=${{ inputs.namespace }}
         helm-plugins: ${{ inputs.helmfile-plugins }}
         helmfile-version: ${{ inputs.helmfile-version }}
         helm-version: ${{ inputs.helm-version }}

helm/acapy-cloud/conf/dev/connect-cloud.yaml

@@ -0,0 +1,25 @@
+image:
+  tag: 4
+updateStrategy:
+  type: Recreate
+
+logger:
+  level: info
+  format: json
+  add_timestamp: true
+  static_fields:
+    "@service": connect-cloud
+
+http:
+  debug_endpoints: true
+
+streams:
+  enabled: true
+
+deployment:
+  podLabels:
+    sidecar.istio.io/inject: "false"
+
+env:
+  - name: GOVERNANCE_ACAPY_LABEL
+    value: Governance

helm/acapy-cloud/conf/dev/endorser.yaml

@@ -0,0 +1,126 @@
+fullnameOverride: endorser
+
+replicaCount: 2
+
+podAnnotations:
+  sidecar.istio.io/proxyCPU: 10m
+  ad.datadoghq.com/endorser.logs: '[{"source": "python.uvicorn", "service": "endorser"}]'
+  proxy.istio.io/config: |-
+    proxyMetadata:
+      ISTIO_META_IDLE_TIMEOUT: 0s
+podLabels:
+  admission.datadoghq.com/enabled: "true"
+
+image:
+  name: d-cloud/endorser
+  pullPolicy: Always
+  tag: master
+
+command:
+  - poetry
+  - run
+  - uvicorn
+  - endorser.main:app
+  - --log-config=/tmp/log_conf.yaml
+  - --reload
+  - --host
+  - 0.0.0.0
+  - --port
+  - 3009
+
+service:
+  name: endorser
+  port: 3009
+  containerPort: 3009
+  appProtocol: http
+
+livenessProbe:
+  httpGet:
+    path: /health/live
+    port: endorser
+readinessProbe:
+  httpGet:
+    path: /health/ready
+    port: endorser
+
+autoscaling:
+  enabled: false
+
+# resources:
+#   requests:
+#     cpu: 50m
+#     memory: 128Mi
+#   limits:
+#     cpu: 250m
+#     memory: 256Mi
+
+secretData:
+  ACAPY_GOVERNANCE_AGENT_API_KEY: adminApiKey
+
+env:
+  LOG_LEVEL: info
+  PYTHONPATH: /
+
+  ACAPY_GOVERNANCE_AGENT_URL: http://governance-agent:3021
+
+  # Trust registry
+  TRUST_REGISTRY_URL: http://trust-registry:8000
+
+  GOVERNANCE_ACAPY_LABEL: Governance
+  ENABLE_SERIALIZE_LOGS: "FALSE"
+
+podSecurityContext:
+  fsGroup: 65534
+securityContext:
+  runAsUser: 0
+
+extraVolumes:
+  - name: logs
+    emptyDir: {}
+extraVolumeMounts:
+  - name: logs
+    mountPath: /logs
+
+podAntiAffinityPreset: soft
+nodeAffinityPreset:
+  type: soft
+  key: node.kubernetes.io/lifecycle
+  values:
+    - spot
+
+configFiles:
+  log_conf.yaml:
+    path: /tmp/log_conf.yaml
+    content: |-
+      version: 1
+      disable_existing_loggers: False
+      formatters:
+        default:
+          "()": uvicorn.logging.DefaultFormatter
+          format: '%(asctime)s %(name)s %(levelname)s %(message)s'
+          use_colors: null
+        access:
+          "()": uvicorn.logging.AccessFormatter
+          format: '%(asctime)s %(name)s %(levelname)s %(client_addr)s - "%(request_line)s" %(status_code)s'
+      handlers:
+        default:
+          formatter: default
+          class: logging.StreamHandler
+          stream: ext://sys.stderr
+        access:
+          formatter: access
+          class: logging.StreamHandler
+          stream: ext://sys.stdout
+      loggers:
+        uvicorn:
+          level: INFO
+          handlers:
+            - default
+          propagate: no
+        uvicorn.error:
+          level: INFO
+        uvicorn.access:
+          level: INFO
+          handlers:
+            - access
+          propagate: no

helm/acapy-cloud/conf/dev/governance-agent-pg-proxy.yaml

@@ -0,0 +1,3 @@
+secretData:
+  ACAPY_WALLET_STORAGE_CONFIG: '{ "max_connections":10, "min_idle_count":10, "url":"cloudapi-pgpool:5432" }'
+  WALLET_DB_HOST: cloudapi-pgpool