Add http-service chart

http-service/.helmignore

@@ -0,0 +1,21 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj

http-service/Chart.yaml

@@ -0,0 +1,5 @@
+apiVersion: v2
+name: http-service
+description: An opinionated Helm chart for language-agnostic HTTP services with sensible defaults
+type: application
+version: 0.1.0

http-service/Makefile

@@ -0,0 +1,60 @@
+KUBERNETES_VERSION = $${KUBERNETES_VERSION:-"1.33.0"}
+RELEASE = $$(basename $$PWD)
+
+.PHONY: install
+install:
+	helm upgrade -i -f examples/deployment.yaml --wait $(RELEASE) .
+
+.PHONY: lint
+lint: lint-deployment lint-deployment-hpa lint-deployment-ingress lint-deployment-keda lint-deployment-rollout
+
+.PHONY: lint-deployment
+lint-deployment:
+	@echo "=> Linting examples/deployment.yaml"
+	helm lint --strict -f examples/deployment.yaml
+	@echo "=> Validating examples/deployment.yaml"
+	helm template -f examples/deployment.yaml . | kubeval --strict --ignore-missing-schemas --additional-schema-locations https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/ --kubernetes-version $(KUBERNETES_VERSION) --exit-on-error
+
+.PHONY: lint-deployment-hpa
+lint-deployment-hpa:
+	@echo "=> Linting examples/deployment-hpa.yaml"
+	helm lint --strict -f examples/deployment-hpa.yaml
+	@echo "=> Validating examples/deployment-hpa.yaml"
+	helm template -f examples/deployment-hpa.yaml . | kubeval --strict --ignore-missing-schemas --additional-schema-locations https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/ --kubernetes-version $(KUBERNETES_VERSION) --exit-on-error
+
+.PHONY: lint-deployment-ingress
+lint-deployment-ingress:
+	@echo "=> Linting examples/deployment-ingress.yaml"
+	helm lint --strict -f examples/deployment-ingress.yaml
+	@echo "=> Validating examples/deployment-ingress.yaml"
+	helm template -f examples/deployment-ingress.yaml . | kubeval --strict --ignore-missing-schemas --additional-schema-locations https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/ --kubernetes-version $(KUBERNETES_VERSION) --exit-on-error
+
+.PHONY: lint-deployment-keda
+lint-deployment-keda:
+	@echo "=> Linting examples/deployment-keda.yaml"
+	helm lint --strict -f examples/deployment-keda.yaml
+	@echo "=> Validating examples/deployment-keda.yaml"
+	helm template -f examples/deployment-keda.yaml . | kubeval --strict --ignore-missing-schemas --additional-schema-locations https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/ --kubernetes-version $(KUBERNETES_VERSION) --exit-on-error
+
+.PHONY: lint-deployment-rollout
+lint-deployment-rollout:
+	@echo "=> Linting examples/deployment-rollout.yaml"
+	helm lint --strict -f examples/deployment-rollout.yaml
+	@echo "=> Validating examples/deployment-rollout.yaml"
+	helm template -f examples/deployment-rollout.yaml . | kubeval --strict --ignore-missing-schemas --additional-schema-locations https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/ --kubernetes-version $(KUBERNETES_VERSION) --exit-on-error
+
+.PHONY: test
+test: test-deployment
+
+.PHONY: test-deployment
+test-deployment:
+	@if helm ls | grep -v "NAME" | cut -f1 | grep -e "^$(RELEASE)$$" > /dev/null; then helm uninstall $(RELEASE); fi
+	@echo "=> Testing examples/deployment.yaml"
+	helm upgrade -i --wait -f examples/deployment.yaml $(RELEASE)-deployment .
+	sleep 30
+	helm test $(RELEASE)-deployment --logs
+	helm uninstall $(RELEASE)-deployment
+
+.PHONY: uninstall
+uninstall:
+	@if helm ls | grep -v "NAME" | cut -f1 | grep -e "^$(RELEASE)$$" > /dev/null; then helm uninstall $(RELEASE); fi

http-service/README.md

@@ -0,0 +1,82 @@
+# http-service
+
+An opinionated Helm chart for language-agnostic HTTP services with sensible defaults.
+
+## Install
+
+\`\`\`sh
+helm repo add chatwork https://chatwork.github.io/charts
+helm install my-service chatwork/http-service -f values.yaml
+\`\`\`
+
+## Opinionated defaults
+
+| Concern | Default | Rationale |
+|---------|---------|-----------|
+| Strategy | \`RollingUpdate\` (maxSurge 25%, maxUnavailable 1) | Zero-downtime deploys |
+| PDB | \`pod.disruptionBudget.enabled: true\`, \`maxUnavailable: 1\` | Protect availability during node drain |
+| Reloader | \`enabled: true\` | Auto-restart on ConfigMap/Secret changes |
+| Datadog tags | \`enabled: true\` | Unified service tags (\`env\`, \`service\`, \`version\`) on Deployment and Pod |
+| Graceful shutdown | Required (\`trafficDrainSeconds\` + \`appShutdownTimeoutSeconds\`) | Prevent traffic loss during termination |
+| Probes | \`startupProbe\` and \`livenessProbe\` required, \`readinessProbe\` optional | Enforce health check discipline |
+
+## Required values
+
+The following values must be provided — the template will fail with an explicit error if they are missing:
+
+- \`image.repository\` / \`image.tag\`
+- \`gracefulShutdown.trafficDrainSeconds\` — seconds to sleep in preStop, waiting for LB deregistration
+- \`gracefulShutdown.appShutdownTimeoutSeconds\` — seconds the app gets after SIGTERM
+- \`startupProbe\`
+- \`livenessProbe\`
+- \`datadog.env\` / \`datadog.service\` / \`datadog.version\` (when \`datadog.enabled: true\`)
+
+## Autoscaling
+
+Controlled by \`autoscaling.type\`:
+
+| Type | Description |
+|------|-------------|
+| \`none\` | Fixed replicas (set \`replicas\` value) |
+| \`hpa\` | Kubernetes-native HorizontalPodAutoscaler |
+| \`keda\` | KEDA ScaledObject (manages HPA internally) |
+
+When \`autoscaling.type\` is \`hpa\` or \`keda\`, setting \`replicas\` will cause a template error to prevent conflicts.
+
+## Argo Rollouts
+
+Set \`rollout.enabled: true\` to create a Rollout resource that references the Deployment via \`workloadRef\`. The HPA/KEDA \`scaleTargetRef\` automatically switches to target the Rollout.
+
+\`rollout.strategy\` is required when enabled.
+
+## Graceful shutdown
+
+The chart auto-generates \`terminationGracePeriodSeconds\` and a preStop hook:
+
+\`\`\`
+|-- terminationGracePeriodSeconds (drain + app) --|
+|-- preStop sleep (drain) --|-- app shutdown ------|
+                             ^
+                          SIGTERM
+\`\`\`
+
+The preStop sleep holds the container alive while the load balancer finishes deregistering the Pod.
+
+## Examples
+
+See [\`examples/\`](examples/) for values files covering common patterns:
+
+| File | Pattern |
+|------|---------|
+| \`deployment.yaml\` | Basic deployment with fixed replicas |
+| \`deployment-hpa.yaml\` | HPA autoscaling |
+| \`deployment-ingress.yaml\` | Ingress with ALB |
+| \`deployment-keda.yaml\` | KEDA autoscaling |
+| \`deployment-rollout.yaml\` | Argo Rollouts canary |
+
+## Lint & test
+
+\`\`\`sh
+make lint           # lint all examples
+make test           # deploy + helm test (requires cluster)
+\`\`\`

http-service/examples/deployment-hpa.yaml

@@ -0,0 +1,64 @@
+# Deployment with HPA autoscaling
+image:
+  repository: nginx
+  tag: latest
+
+containerPort: 80
+
+gracefulShutdown:
+  trafficDrainSeconds: 25
+  appShutdownTimeoutSeconds: 30
+
+startupProbe:
+  httpGet:
+    path: /
+    port: 80
+  failureThreshold: 5
+  initialDelaySeconds: 10
+  periodSeconds: 1
+
+livenessProbe:
+  httpGet:
+    path: /
+    port: 80
+  failureThreshold: 2
+  periodSeconds: 10
+
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 100m
+    memory: 128Mi
+
+datadog:
+  enabled: true
+  env: production
+  service: nginx-example-hpa
+  version: "1.0.0"
+
+autoscaling:
+  type: hpa
+  minReplicas: 2
+  maxReplicas: 10
+  hpa:
+    metrics:
+      - type: Resource
+        resource:
+          name: cpu
+          target:
+            type: Utilization
+            averageUtilization: 50
+    behavior:
+      scaleDown:
+        stabilizationWindowSeconds: 300
+
+service:
+  enabled: true
+  type: ClusterIP
+  ports:
+    http:
+      targetPort: 80
+      port: 80
+      protocol: TCP

http-service/examples/deployment-ingress.yaml

@@ -0,0 +1,65 @@
+# Deployment with Ingress
+image:
+  repository: nginx
+  tag: latest
+
+containerPort: 80
+
+replicas: 2
+
+gracefulShutdown:
+  trafficDrainSeconds: 25
+  appShutdownTimeoutSeconds: 30
+
+startupProbe:
+  httpGet:
+    path: /
+    port: 80
+  failureThreshold: 5
+  initialDelaySeconds: 10
+  periodSeconds: 1
+
+livenessProbe:
+  httpGet:
+    path: /
+    port: 80
+  failureThreshold: 2
+  periodSeconds: 10
+
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 100m
+    memory: 128Mi
+
+datadog:
+  enabled: true
+  env: production
+  service: nginx-example-ingress
+  version: "1.0.0"
+
+service:
+  enabled: true
+  type: ClusterIP
+  ports:
+    http:
+      targetPort: 80
+      port: 80
+      protocol: TCP
+
+ingress:
+  enabled: true
+  ingresses:
+    main:
+      ingressClassName: alb
+      annotations:
+        alb.ingress.kubernetes.io/scheme: internal
+        alb.ingress.kubernetes.io/target-type: ip
+      hosts:
+        - host: example.com
+          paths:
+            - path: "/*"
+              pathType: ImplementationSpecific
+              portNumber: 80

http-service/examples/deployment-keda.yaml

@@ -0,0 +1,61 @@
+# Deployment with KEDA autoscaling
+image:
+  repository: nginx
+  tag: latest
+
+containerPort: 80
+
+gracefulShutdown:
+  trafficDrainSeconds: 25
+  appShutdownTimeoutSeconds: 30
+
+startupProbe:
+  httpGet:
+    path: /
+    port: 80
+  failureThreshold: 5
+  initialDelaySeconds: 10
+  periodSeconds: 1
+
+livenessProbe:
+  httpGet:
+    path: /
+    port: 80
+  failureThreshold: 2
+  periodSeconds: 10
+
+resources:
+  requests:
+    cpu: 100m
+    memory: 128Mi
+  limits:
+    cpu: 100m
+    memory: 128Mi
+
+datadog:
+  enabled: true
+  env: production
+  service: nginx-example-keda
+  version: "1.0.0"
+
+autoscaling:
+  type: keda
+  minReplicas: 2
+  maxReplicas: 10
+  keda:
+    pollingInterval: 30
+    cooldownPeriod: 300
+    triggers:
+      - type: cpu
+        metadata:
+          type: Utilization
+          value: "50"
+
+service:
+  enabled: true
+  type: ClusterIP
+  ports:
+    http:
+      targetPort: 80
+      port: 80
+      protocol: TCP