رسومات Helm: إدارة حزم Kubernetes

my-app-chart/
├── Chart.yaml          # معلومات Chart ورقم الإصدار
├── values.yaml         # القيم الافتراضية للتكوين
├── charts/             # Charts التابعة
├── templates/          # نماذج الموارد لـ Kubernetes
│   ├── deployment.yaml
│   ├── service.yaml
│   ├── ingress.yaml
│   ├── _helpers.tpl    # مساعدي النماذج
│   └── NOTES.txt       # ملاحظات بعد التثبيت
├── .helmignore         # الملفات التي يجب تجاهلها عند التعبئة
├── README.md
└── LICENSE

helm create my-application
cd my-application

apiVersion: v2
name: my-application
description: Chart تطبيق جاهز للإنتاج
type: application
version: 1.0.0        # إصدار Chart
appVersion: "2.4.1"   # إصدار التطبيق

maintainers:
  - name: فريقك
    email: team@company.com

dependencies:
  - name: postgresql
    version: "12.x.x"
    repository: "https://charts.bitnami.com/bitnami"
    condition: postgresql.enabled

replicaCount: 3

image:
  repository: myapp/backend
  tag: "1.0.0"
  pullPolicy: IfNotPresent

service:
  type: ClusterIP
  port: 80

ingress:
  enabled: true
  className: "nginx"
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
  hosts:
    - host: myapp.example.com
      paths:
        - path: /
          pathType: Prefix

resources:
  limits:
    cpu: 500m
    memory: 512Mi
  requests:
    cpu: 250m
    memory: 256Mi

autoscaling:
  enabled: true
  minReplicas: 3
  maxReplicas: 10
  targetCPUUtilizationPercentage: 80

apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "my-application.fullname" . }}
  labels:
    {{- include "my-application.labels" . | nindent 4 }}
spec:
  {{- if not .Values.autoscaling.enabled }}
  replicas: {{ .Values.replicaCount }}
  {{- end }}
  selector:
    matchLabels:
      {{- include "my-application.selectorLabels" . | nindent 6 }}
  template:
    metadata:
      labels:
        {{- include "my-application.selectorLabels" . | nindent 8 }}
    spec:
      containers:
      - name: {{ .Chart.Name }}
        image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
        imagePullPolicy: {{ .Values.image.pullPolicy }}
        ports:
        - containerPort: 8080
          protocol: TCP
        resources:
          {{- toYaml .Values.resources | nindent 10 }}

{{/*
توسيع اسم Chart.
*/}}
{{- define "my-application.name" -}}
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
{{- end }}

{{/*
إنشاء اسم تطبيق كامل بشكل افتراضي.
*/}}
{{- define "my-application.fullname" -}}
{{- if .Values.fullnameOverride }}
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
{{- else }}
{{- $name := default .Chart.Name .Values.nameOverride }}
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
{{- end }}
{{- end }}

{{/*
العلامات الشائعة
*/}}
{{- define "my-application.labels" -}}
helm.sh/chart: {{ include "my-application.chart" . }}
{{ include "my-application.selectorLabels" . }}
{{- if .Chart.AppVersion }}
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
{{- end }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
{{- end }}

# تثبيت من مستودع
helm install my-release bitnami/postgresql

# تثبيت من دليل محلي
helm install my-app ./my-application

# تثبيت مع قيم مخصصة
helm install my-app ./my-application -f values-production.yaml

# تثبيت مع تجاوزات قيم مدمجة
helm install my-app ./my-application \
  --set replicaCount=5 \
  --set image.tag=2.0.0

# تحديث مع قيم جديدة
helm upgrade my-app ./my-application -f values-production.yaml

# تحديث مع تراجع تلقائي في حالة الفشل
helm upgrade my-app ./my-application --atomic --timeout 5m

# إجبار تحديث الموارد
helm upgrade my-app ./my-application --force

# عرض سجل الإصدار
helm history my-app

# التراجع إلى الإصدار السابق
helm rollback my-app

# التراجع إلى إصدار محدد
helm rollback my-app 3

# تشغيل جاف لرؤية المانيفستات المُولَّدة
helm install my-app ./my-application --dry-run --debug

# عرض النماذج دون تثبيت
helm template my-app ./my-application

# فحص Chart للحصول على مشاكل
helm lint ./my-application

# اختبار الإصدار مع م-hooks
helm test my-app

dependencies:
  - name: redis
    version: "17.x.x"
    repository: "https://charts.bitnami.com/bitnami"
    condition: redis.enabled
  - name: postgresql
    version: "12.x.x"
    repository: "https://charts.bitnami.com/bitnami"
    condition: postgresql.enabled

helm dependency update ./my-application

apiVersion: batch/v1
kind: Job
metadata:
  name: {{ include "my-application.fullname" . }}-db-migration
  annotations:
    "helm.sh/hook": pre-upgrade,pre-install
    "helm.sh/hook-weight": "5"
    "helm.sh/hook-delete-policy": before-hook-creation
spec:
  template:
    spec:
      containers:
      - name: db-migrate
        image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
        command: ["python", "manage.py", "migrate"]
      restartPolicy: Never

{{- if .Values.ingress.enabled }}
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ include "my-application.fullname" . }}
  {{- with .Values.ingress.annotations }}
  annotations:
    {{- toYaml . | nindent 4 }}
  {{- end }}
spec:
  {{- if .Values.ingress.className }}
  ingressClassName: {{ .Values.ingress.className }}
  {{- end }}
  rules:
  {{- range .Values.ingress.hosts }}
  - host: {{ .host | quote }}
    http:
      paths:
      {{- range .paths }}
      - path: {{ .path }}
        pathType: {{ .pathType }}
        backend:
          service:
            name: {{ include "my-application.fullname" $ }}
            port:
              number: {{ $.Values.service.port }}
      {{- end }}
  {{- end }}
{{- end }}

# تسجيل الدخول إلى المستودع
helm registry login registry.example.com

# تعبئة Chart
helm package ./my-application

# دفع إلى مستودع OCI
helm push my-application-1.0.0.tgz oci://registry.example.com/charts

# تثبيت من مستودع OCI
helm install my-app oci://registry.example.com/charts/my-application --version 1.0.0

# -- عدد النسخ الاحتياطية للتطبيق
replicaCount: 3

# -- تكوين الصورة
image:
  # -- مستودع الصورة
  repository: myapp/backend
  # -- سياسة سحب الصورة
  pullPolicy: IfNotPresent
  # -- إصدار الصورة (يُحدد افتراضيًا إلى إصدار Chart appVersion)
  tag: ""

resources:
  limits:
    cpu: 1000m
    memory: 1Gi
  requests:
    cpu: 500m
    memory: 512Mi

securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  fsGroup: 1000
  capabilities:
    drop:
    - ALL
  readOnlyRootFilesystem: true

livenessProbe:
  httpGet:
    path: /health
    port: 8080
  initialDelaySeconds: 30
  periodSeconds: 10

readinessProbe:
  httpGet:
    path: /ready
    port: 8080
  initialDelaySeconds: 5
  periodSeconds: 5

envFrom:
- secretRef:
    name: {{ include "my-application.fullname" . }}-secrets
- configMapRef:
    name: {{ include "my-application.fullname" . }}-config

{
  "$schema": "https://json-schema.org/draft-07/schema#",
  "properties": {
    "replicaCount": {
      "type": "integer",
      "minimum": 1
    },
    "image": {
      "type": "object",
      "properties": {
        "repository": {
          "type": "string"
        },
        "tag": {
          "type": "string"
        }
      },
      "required": ["repository"]
    }
  },
  "required": ["image"]
}

1. احصل على عنوان URL للتطبيق عن طريق تشغيل:
{{- if .Values.ingress.enabled }}
  https://{{ (index .Values.ingress.hosts 0).host }}
{{- else if contains "NodePort" .Values.service.type }}
  export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "my-application.fullname" . }})
  export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
  echo http://$NODE_IP:$NODE_PORT
{{- end }}

2. مراقبة النشر:
  kubectl --namespace {{ .Release.Namespace }} get pods -l "app.kubernetes.io/name={{ include "my-application.name" . }}"

# تثبيت chart-testing
brew install chart-testing

# فحص Charts
ct lint --config ct.yaml

# تثبيت واختبار Charts
ct install --config ct.yaml

name: Helm Chart CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  lint-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: إعداد Helm
        uses: azure/setup-helm@v3
        with:
          version: 3.12.0

      - name: إعداد chart-testing
        uses: helm/chart-testing-action@v2

      - name: فحص Charts
        run: ct lint --config ct.yaml

      - name: إنشاء كластر kind
        uses: helm/kind-action@v1

      - name: تثبيت Charts
        run: ct install --config ct.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: my-application
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://github.com/myorg/my-app-chart
    targetRevision: main
    path: charts/my-application
    helm:
      valueFiles:
        - values-production.yaml
  destination:
    server: https://kubernetes.default.svc
    namespace: production
  syncPolicy:
    automated:
      prune: true
      selfHeal: true

apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: my-application
  namespace: flux-system
spec:
  interval: 5m
  chart:
    spec:
      chart: my-application
      version: '1.x.x'
      sourceRef:
        kind: HelmRepository
        name: my-charts
  values:
    replicaCount: 5
    image:
      tag: "2.0.0"

# تحقق من حالة الإصدار
helm list --all-namespaces

# الحصول على تفاصيل الإصدار
helm status my-app -n namespace

# حذف إجباري إذا لزم الأمر (استخدم بحذر)
kubectl delete secret -n namespace -l owner=helm,name=my-app

# تصحيح توليد النماذج
helm template my-app ./my-application --debug

# التحقق من Kubernetes
helm template my-app ./my-application | kubectl apply --dry-run=client -f -

# تحقق من القيم المدمجة
helm get values my-app

# عرض جميع القيم المحسوبة
helm get values my-app --all

repositories:
  - name: bitnami
    url: https://charts.bitnami.com/bitnami

releases:
  - name: postgresql
    namespace: database
    chart: bitnami/postgresql
    version: 12.x.x
    values:
      - postgresql:
          auth:
            database: myapp
            username: appuser

  - name: my-app
    namespace: production
    chart: ./charts/my-application
    values:
      - values-production.yaml
    needs:
      - database/postgresql