cld2labs/ubuntu22.04-deployment-scripts

core/helm-charts/apisix-helm/Chart.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: v2
 name: auth-apisix

core/helm-charts/apisix-helm/openshift-values.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 
 # APISIX Namespace
@@ -33,9 +33,9 @@ apisix:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -76,9 +76,9 @@ apisix:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -105,9 +105,9 @@ apisix:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists

core/helm-charts/apisix-helm/values.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 
 # APISIX Namespace
@@ -28,9 +28,9 @@ apisix:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -64,9 +64,9 @@ apisix:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -93,9 +93,9 @@ apisix:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists

core/helm-charts/ceph/operator-values.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 image:
   repository: docker.io/rook/ceph

core/helm-charts/fluentbit/fluebit-values.yml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 
 fluent-bit:

core/helm-charts/fluentbit/fluentbit-config.yml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: v1
 data:

core/helm-charts/genai-gateway-trace/charts/langfuse/Chart.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: v2
 name: langfuse

core/helm-charts/genai-gateway-trace/charts/langfuse/values.lint.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 # This file is used to validate the Chart and sets some values for required fields. It is not used for the deployment.
 # Example usage: `helm lint . --values values.lint.yaml`

core/helm-charts/genai-gateway-trace/charts/langfuse/values.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 # Langfuse Helm Chart Configuration
 
@@ -148,9 +148,9 @@ langfuse:
       requiredDuringSchedulingIgnoredDuringExecution:
         nodeSelectorTerms:
         - matchExpressions:
-          - key: role
+          - key: ei-infra-eligible
             operator: In
-            values: ["infra"]
+            values: ["true"]
         - matchExpressions:
           - key: node-role.kubernetes.io/control-plane
             operator: Exists
@@ -509,9 +509,9 @@ postgresql:
       requiredDuringSchedulingIgnoredDuringExecution:
         nodeSelectorTerms:
         - matchExpressions:
-          - key: role
+          - key: ei-infra-eligible
             operator: In
-            values: ["infra"]
+            values: ["true"]
         - matchExpressions:
           - key: node-role.kubernetes.io/control-plane
             operator: Exists
@@ -536,9 +536,9 @@ postgresql:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -596,9 +596,9 @@ redis:
       requiredDuringSchedulingIgnoredDuringExecution:
         nodeSelectorTerms:
         - matchExpressions:
-          - key: role
+          - key: ei-infra-eligible
             operator: In
-            values: ["infra"]
+            values: ["true"]
         - matchExpressions:
           - key: node-role.kubernetes.io/control-plane
             operator: Exists
@@ -625,9 +625,9 @@ redis:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -660,9 +660,9 @@ clickhouse:
       requiredDuringSchedulingIgnoredDuringExecution:
         nodeSelectorTerms:
         - matchExpressions:
-          - key: role
+          - key: ei-infra-eligible
             operator: In
-            values: ["infra"]
+            values: ["true"]
         - matchExpressions:
           - key: node-role.kubernetes.io/control-plane
             operator: Exists
@@ -690,9 +690,9 @@ clickhouse:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -887,9 +887,9 @@ s3:
       requiredDuringSchedulingIgnoredDuringExecution:
         nodeSelectorTerms:
         - matchExpressions:
-          - key: role
+          - key: ei-infra-eligible
             operator: In
-            values: ["infra"]
+            values: ["true"]
         - matchExpressions:
           - key: node-role.kubernetes.io/control-plane
             operator: Exists

core/helm-charts/genai-gateway/Chart.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: v2
 name: genaigateway

core/helm-charts/genai-gateway/templates/configmap.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: v1
 kind: ConfigMap

core/helm-charts/genai-gateway/templates/deployment.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: apps/v1
 kind: Deployment

core/helm-charts/genai-gateway/templates/ingress.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 {{- if .Values.ingress.enabled }}
 apiVersion: networking.k8s.io/v1

core/helm-charts/genai-gateway/templates/ingress_eks.yaml

@@ -5,12 +5,15 @@ metadata:
   annotations:
     alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig":
       { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}'
-    alb.ingress.kubernetes.io/certificate-arn: "{{ default "" .Values.aws_certificate_arn }}"
-    alb.ingress.kubernetes.io/group.name: eks-genai
+  {{- if .Values.aws_certificate_arn }}
+    alb.ingress.kubernetes.io/certificate-arn: '{{ .Values.aws_certificate_arn }}'
+  {{- end }}
+    alb.ingress.kubernetes.io/group.name: ei-eks
     alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
     alb.ingress.kubernetes.io/reconcile: now
     alb.ingress.kubernetes.io/scheme: internet-facing
     alb.ingress.kubernetes.io/target-type: ip
+    alb.ingress.kubernetes.io/group.order: '3'
   name: genai-gateway-ingress
 spec:
   ingressClassName: alb

core/helm-charts/genai-gateway/templates/job-rbac.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role

core/helm-charts/genai-gateway/templates/postgres-backup-cronjob.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 {{- if .Values.backup.enabled }}
 apiVersion: batch/v1

core/helm-charts/genai-gateway/templates/postgres-backup-pvc.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 {{- if .Values.backup.enabled }}
 {{- if .Values.backup.pvc.enabled }}

core/helm-charts/genai-gateway/templates/postgres-restore-job.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 {{- if .Values.restoreJob.enabled }}
 apiVersion: batch/v1

core/helm-charts/genai-gateway/templates/route.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 {{- if .Values.route.enabled }}
 apiVersion: route.openshift.io/v1

core/helm-charts/genai-gateway/templates/service.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: v1
 kind: Service

core/helm-charts/genai-gateway/values.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 replicaCount: 1
 image:
@@ -15,9 +15,9 @@ affinity:
     requiredDuringSchedulingIgnoredDuringExecution:
       nodeSelectorTerms:
       - matchExpressions:
-        - key: role
+        - key: ei-infra-eligible
           operator: In
-          values: ["infra"]
+          values: ["true"]
       - matchExpressions:
         - key: node-role.kubernetes.io/control-plane
           operator: Exists
@@ -113,9 +113,9 @@ postgresql:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists
@@ -144,9 +144,9 @@ redis:
         requiredDuringSchedulingIgnoredDuringExecution:
           nodeSelectorTerms:
           - matchExpressions:
-            - key: role
+            - key: ei-infra-eligible
               operator: In
-              values: ["infra"]
+              values: ["true"]
           - matchExpressions:
             - key: node-role.kubernetes.io/control-plane
               operator: Exists

core/helm-charts/istio/peer-auth-ingress.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: security.istio.io/v1
 kind: PeerAuthentication

core/helm-charts/istio/peer-authentication.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: security.istio.io/v1
 kind: PeerAuthentication

core/helm-charts/keycloak/Chart.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: v2
 name: keycloak-apisix

core/helm-charts/keycloak/templates/apisixTls.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: apisix.apache.org/v2
 kind: ApisixTls

core/helm-charts/keycloak/templates/apisixroute.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: apisix.apache.org/v2
 kind: ApisixRoute

core/helm-charts/keycloak/templates/ingress.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 {{- if not .Values.apisixRoute.enabled }}
 apiVersion: networking.k8s.io/v1

core/helm-charts/keycloak/templates/ingress_eks.yaml

@@ -1,4 +1,4 @@
-# Copyright (C) 2024-2025 Intel Corporation
+# Copyright (C) 2025-2026 Intel Corporation
 # SPDX-License-Identifier: Apache-2.0
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -7,8 +7,10 @@ metadata:
   namespace: auth-apisix
   annotations:
     alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}'
-    alb.ingress.kubernetes.io/certificate-arn: "{{ default "" .Values.aws_certificate_arn }}"
-    alb.ingress.kubernetes.io/group.name: keycloak-apisix
+  {{- if .Values.aws_certificate_arn }}
+    alb.ingress.kubernetes.io/certificate-arn: '{{ .Values.aws_certificate_arn }}'
+  {{- end }}
+    alb.ingress.kubernetes.io/group.name: ei-eks
     alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
     alb.ingress.kubernetes.io/scheme: internet-facing
     alb.ingress.kubernetes.io/target-type: ip