Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
c7774fe
improvement(helm): production-ready chart with security, ESO, and doc…
waleedlatif1 May 12, 2026
80bfaf8
fix(helm): correct resource names in README (sim-sim-* → sim-*)
waleedlatif1 May 12, 2026
7644ba4
improvement(helm): split app/realtime env into Secret-bound + inline …
waleedlatif1 May 12, 2026
c6a4478
fix(helm): address PR review — cronjob validation, ESO apiVersion, se…
waleedlatif1 May 12, 2026
794e418
fix(helm): require critical secrets to be mapped when ESO is enabled
waleedlatif1 May 12, 2026
3340872
fix(helm): auto-enable PDB when HPA minReplicas > 1
waleedlatif1 May 12, 2026
c0bf587
fix(helm): prevent realtime envDefaults from masking app.env Secret v…
waleedlatif1 May 12, 2026
d1a5394
feat(helm): add Claude Skill for chart deployment
waleedlatif1 May 12, 2026
2fa9259
docs(helm): add CRON_SECRET to TL;DR, dry-run, and example install he…
waleedlatif1 May 12, 2026
9519a8f
fix(helm): require INTERNAL_API_SECRET in inline secret mode
waleedlatif1 May 12, 2026
2919ad6
docs(helm): surface INTERNAL_API_SECRET upgrade requirement in NOTES.txt
waleedlatif1 May 12, 2026
9a6b68b
fix(helm): NetworkPolicy egress to OTEL collector + external-db examp…
waleedlatif1 May 12, 2026
5138b09
fix(helm): NOTES.txt no longer prints false secret warning for ESO users
waleedlatif1 May 12, 2026
e05a8af
fix(helm): existingSecret mode no longer drops app.env / realtime.env…
waleedlatif1 May 12, 2026
bc50116
fix(helm): correct realtime env overlay + filter chart-computed keys …
waleedlatif1 May 12, 2026
17632aa
fix(helm): skip envDefaults in existingSecret mode + document egress …
waleedlatif1 May 12, 2026
468dad1
fix(helm): copy-pasteable install commands in copilot + ESO examples
waleedlatif1 May 12, 2026
33a45a0
polish(helm): configurable NetworkPolicy ingress peers + clearer API_…
waleedlatif1 May 12, 2026
716a677
test(helm): add helm-unittest suites + CI workflow + ci values matrix
waleedlatif1 May 12, 2026
4dc7966
test(helm): add helm test hook + kind apiserver dry-run in CI
waleedlatif1 May 12, 2026
0de97f4
chore(helm): remove pre-1.0.0 upgrade fluff + tighten .helmignore
waleedlatif1 May 12, 2026
34b1b6e
chore(helm): drop CI workflow + ci/ fixtures + CONTRIBUTING.md
waleedlatif1 May 12, 2026
51cbb9e
feat(helm): pod rollout on Secret change + topologySpreadConstraints
waleedlatif1 May 12, 2026
570e5f0
fix(helm): drop empty-string shadowing in app/realtime env merge
waleedlatif1 May 12, 2026
a4837de
fix(helm): make topologySpreadConstraints per-component to match docs…
waleedlatif1 May 12, 2026
b9ceff9
fix(helm): allow cron pods through app NetworkPolicy
waleedlatif1 May 12, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix(helm): correct resource names in README (sim-sim-* → sim-*)
The sim.fullname helper collapses to the release name when the release
name contains the chart name. With the documented release name 'sim',
actual resources are 'sim-app', 'sim-postgresql', etc. — not the
'sim-sim-*' form previously documented. Fixes copy-paste commands in the
pre-1.0.0 upgrade walkthrough and several troubleshooting snippets.

Also expands the cronjobs component description to reflect the full set
of 13 scheduled jobs (was understated as just Gmail/Outlook polling).
  • Loading branch information
waleedlatif1 committed May 12, 2026
commit 80bfaf8c79107f33223a72d5fa0e90ff4d2a7575
18 changes: 9 additions & 9 deletions helm/sim/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ This chart deploys the Sim platform on a Kubernetes cluster using the Helm packa
* **`realtime`** — the WebSocket service for live workflow updates (Deployment).
* **`postgresql`** — an in-cluster `pgvector/pgvector` Postgres (StatefulSet, with a headless Service for stable per-pod DNS).
* **`migrations`** — a Job that applies database migrations on install/upgrade.
* **`cronjobs`** — scheduled API pokes for schedule execution and Gmail/Outlook webhook polling.
* **`cronjobs`** — scheduled jobs for workflow schedule execution, inbox/calendar/drive polling (Gmail, Outlook, Calendar, Drive, Sheets, IMAP, RSS), inactivity alerts, subscription renewal, data drains, and connector syncs.
* **`serviceaccount`** — a dedicated ServiceAccount with `automountServiceAccountToken: false`.

Optional components (off by default):
Expand Down Expand Up @@ -141,9 +141,9 @@ helm upgrade sim ./helm/sim --namespace sim --values my-values.yaml
If you previously installed this chart from a git checkout before the `1.0.0` tag, the internal Postgres StatefulSets had their `serviceName` renamed to point at new headless Services. `StatefulSet.spec.serviceName` is immutable, so `helm upgrade` will fail with `Forbidden: updates to statefulset spec ...`. Orphan-delete the affected StatefulSet(s) first — pods and PVCs are preserved, traffic continues to flow:

```bash
kubectl delete statefulset sim-sim-postgresql --namespace sim --cascade=orphan
kubectl delete statefulset sim-postgresql --namespace sim --cascade=orphan
# If copilot is enabled, also:
kubectl delete statefulset sim-sim-copilot-postgresql --namespace sim --cascade=orphan
kubectl delete statefulset sim-copilot-postgresql --namespace sim --cascade=orphan

helm upgrade sim ./helm/sim --namespace sim --values my-values.yaml
```
Expand Down Expand Up @@ -384,14 +384,14 @@ helm install sim ./helm/sim \
### App pods stuck in `CrashLoopBackOff`

```bash
kubectl logs --namespace sim deploy/sim-sim-app --tail 200
kubectl logs --namespace sim deploy/sim-app --tail 200
```

Common causes:

* `NEXT_PUBLIC_APP_URL` still set to `http://localhost:3000` in a clustered deploy → set it to your public origin.
* `DATABASE_URL` not reachable → check the Postgres pod is running and `postgresql.auth.password` matches.
* Missing migration → check `kubectl logs job/sim-sim-migrations`.
* Missing migration → check `kubectl logs job/sim-migrations`.

### Image pull errors (`ErrImagePull` / `ImagePullBackOff`)

Expand Down Expand Up @@ -428,10 +428,10 @@ You're upgrading from a pre-1.0.0 build of the chart. The `StatefulSet.serviceNa
### Get logs from each component

```bash
kubectl --namespace sim logs -f deployment/sim-sim-app
kubectl --namespace sim logs -f deployment/sim-sim-realtime
kubectl --namespace sim logs -f statefulset/sim-sim-postgresql
kubectl --namespace sim logs job/sim-sim-migrations
kubectl --namespace sim logs -f deployment/sim-app
kubectl --namespace sim logs -f deployment/sim-realtime
kubectl --namespace sim logs -f statefulset/sim-postgresql
kubectl --namespace sim logs job/sim-migrations
```

---
Expand Down
Loading