aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

HOM-14: Complete Helm chart for Paperclip #211

Merged
aaron merged 2 commits from paperclip/HOM-14-chart into live 2026-06-01 18:03:15 +00:00
Conversation 0 Commits 2 Files changed 8 +248 -42
aaron commented 2026-06-01 17:53:37 +00:00
Owner
Copy link

Completes the Paperclip Helm chart with proper deployment manifests, probes, security contexts, and fixes HOM-13 port misconfiguration.

Refs: HOM-14

Completes the Paperclip Helm chart with proper deployment manifests, probes, security contexts, and fixes HOM-13 port misconfiguration. Refs: HOM-14
- Change app port from 3100 to 8080 (lab-director backend listens on 8080)
- Update CiliumNetworkPolicy ingress port to 8080
- Fix DATABASE_URL env var name (was PAPERCLIP_DATABASE_URL)
- Remove unused PAPERCLIP_AGENT_JWT_SECRET env var
- Update HTTPRoute backend port to 8080

Refs: HOM-13
feat(paperclip): complete Helm chart for HOM-14
Some checks failed
0/0 projects applied successfully.
CI Review / pr-title (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
660acb574f 
- Revert HOM-13 incorrect port changes (8080 → 3100) in HTTPRoute and CiliumNetworkPolicy
- Parameterize CiliumNetworkPolicy ingress port via .Values.port
- Add ServiceAccount template and helper
- Rewrite deployment with:
  - Proper security contexts (pod and container level)
  - Liveness, readiness, and startup probes on /api/health
  - Complete Paperclip env vars (deployment mode, public URL, storage, etc.)
  - DATABASE_URL from CNPG secret
  - PAPERCLIP_AGENT_JWT_SECRET and BETTER_AUTH_SECRET support
  - Correct volume mount: /paperclip (was /data)
  - Master key secret mounted as file at /paperclip/instances/default/secrets/master.key
  - Recreate strategy for RWO PVC safety
- Update service to use .Values.service.type and .Values.service.port
- Add betterAuthSecret placeholder to secret template
- Chart metadata: version 0.2.0, appVersion v2026.529.0
aaron merged commit 1b8e346f64 into live 2026-06-01 18:03:15 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!211
No description provided.