BAI-1503 create initial helm modelscan values

infrastructure/helm/bailo/templates/modelscan/modelscan.deployment.yaml

@@ -0,0 +1,51 @@
+{{- if .Values.modelscan.enabled }}
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "bailo.fullname" . }}-modelscan
+  labels:
+    {{- include "bailo.labels" . | nindent 4 }}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      name: modelscan
+  template:
+    metadata:
+      labels:
+        name: modelscan
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      securityContext:
+        runAsUser: {{ .Values.modelscan.runAsUser }}
+      containers:
+      - name: {{ include "bailo.fullname" . }}-modelscan
+        ports:
+          - name: modelscanport
+            containerPort: 3311
+            protocol: TCP
+        image: {{ .Values.modelscan.image }}
+        resources:
+          requests:
+            memory: "100Mi"
+            ephemeral-storage: "100Mi"
+            cpu: "200m"
+          limits:
+            memory: "2Gi"
+            ephemeral-storage: "300Mi"
+            cpu: "1"
+        volumeMounts:
+        - name: tmp
+          mountPath: /tmp
+        securityContext:
+          allowPrivilegeEscalation: false
+      volumes:
+        - name: tmp
+          emptyDir: {}
+        - name: modelscan-log
+          emptyDir: {}
+{{- end }}

infrastructure/helm/bailo/templates/modelscan/modelscan.service.yaml

@@ -0,0 +1,17 @@
+{{- if .Values.modelscan.enabled }}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "bailo.fullname" . }}-modelscan
+  labels:
+    {{- include "bailo.labels" . | nindent 4 }}
+spec:
+  ports:
+    - port: {{ .Values.modelscan.port }}
+      targetPort: {{ .Values.modelscan.port }}
+      protocol: TCP
+      name: http
+  selector:
+    name: modelscan
+{{- end }}

infrastructure/helm/bailo/values.yaml

@@ -63,7 +63,7 @@ route:
   enabled: false # false for k8s | aws
   appPublicRoute: "route-url" # can also be used for aws loadbalancer url
 
-# Oauth | Congnito
+# Oauth | Cognito
 # using bash for generating cookie secret example
 # dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\n' | tr -- '+/' '-_'; echo
 cookie:
@@ -76,7 +76,7 @@ oauth:
     secret: "cognito app client secret"
     dynamic: [] # example 'scope'
     response: [] #example 'tokens', 'raw', 'jwt'
-    callback: "" # exmaple /
+    callback: "" # example /
     subdomain: "cognito domain"
   identityProviderClient:
     userPoolId: "region_id"
@@ -118,11 +118,11 @@ mongodb:
   enabled: true
   ssl: false
   sslValidate: false
-  host: "" # serviceName:mongoport/collectioname or serviceName-headless:mongoport/collectionname for mongodb replicaset. see template/_helper.tpl and templates/bailo/bailo.configmap.yaml.
+  host: "" # serviceName:mongoport/collectionname or serviceName-headless:mongoport/collectionname for mongodb replicaset. see template/_helper.tpl and templates/bailo/bailo.configmap.yaml.
   livenessProbe:
     enabled: false
   readinessProbe:
-    enabled: false #Rediness probe failed: /bitnami/scripts/readiness-probe.sh: line 9: mongosh: command not found
+    enabled: false #Readiness probe failed: /bitnami/scripts/readiness-probe.sh: line 9: mongosh: command not found
   auth:
     rootUser: ""
     rootPassword: ""
@@ -135,7 +135,7 @@ mongodb:
     port: 27017
   collectionName: bailo # Collection name in Mongo
   persistence:
-    #enabled: false # Required for aws. EKS is not able to handle dynamic creation of PVC using this helm chart. Instead /templates/storage.yaml handles eks storage. Stoage is not removed when deployed mongodb is removed.
+    #enabled: false # Required for aws. EKS is not able to handle dynamic creation of PVC using this helm chart. Instead /templates/storage.yaml handles eks storage. Storage is not removed when deployed mongodb is removed.
     size: 10Gi
   containerSecurityContext:
     enabled: false
@@ -165,7 +165,7 @@ minio:
       api: 31111 # default 9000
   useSSL: false
   persistence:
-    #enabled: false # Required for aws. EKS is not able to handle dynamic creation of PVC using this helm chart. Instead /templates/storage.yaml handles eks storage. Stoage is not removed when deployed minio is removed.
+    #enabled: false # Required for aws. EKS is not able to handle dynamic creation of PVC using this helm chart. Instead /templates/storage.yaml handles eks storage. Storage is not removed when deployed minio is removed.
     size: 20Gi
   containerSecurityContext:
     enabled: false
@@ -196,7 +196,7 @@ registry:
 
 # Nginx Dependencies
 nginxAuth:
-  repository: nginxinc/nginx-unprivileged # runs Nginx as non-root unrivileged user.
+  repository: nginxinc/nginx-unprivileged # runs Nginx as non-root unprivileged user.
   tag: latest
   #host: "bailo-nginx" # service name
   port: 8080
@@ -296,3 +296,11 @@ clamav:
   accessModes:
     - ReadWriteOnce
   size: 10G
+
+modelscan:
+  enabled: false
+  image: bailo-modelscan
+  port: 3311
+  accessModes:
+    - ReadWriteOnce
+  size: 20G  # modelscan saves each incoming file to the disk so needs plenty of storage