Add Helm chart and GitLab CI pipeline

- Helm chart with PostgreSQL, MinIO, Redis as optional subcharts
- Production and external infrastructure value files
- HPA, Ingress, and health probe support
- GitLab CI pipeline using Buildah for container builds
- Multi-stage pipeline: test, build, publish

helm/orchard/templates/_helpers.tpl

@@ -0,0 +1,121 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "orchard.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+*/}}
+{{- define "orchard.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "orchard.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "orchard.labels" -}}
+helm.sh/chart: {{ include "orchard.chart" . }}
+{{ include "orchard.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "orchard.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "orchard.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "orchard.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "orchard.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
+
+{{/*
+PostgreSQL host
+*/}}
+{{- define "orchard.postgresql.host" -}}
+{{- if .Values.postgresql.enabled }}
+{{- printf "%s-postgresql" .Release.Name }}
+{{- else }}
+{{- .Values.orchard.database.host }}
+{{- end }}
+{{- end }}
+
+{{/*
+PostgreSQL secret name
+*/}}
+{{- define "orchard.postgresql.secretName" -}}
+{{- if .Values.orchard.database.existingSecret }}
+{{- .Values.orchard.database.existingSecret }}
+{{- else if .Values.postgresql.enabled }}
+{{- printf "%s-postgresql" .Release.Name }}
+{{- else }}
+{{- printf "%s-db-secret" (include "orchard.fullname" .) }}
+{{- end }}
+{{- end }}
+
+{{/*
+PostgreSQL password key in secret
+*/}}
+{{- define "orchard.postgresql.passwordKey" -}}
+{{- if .Values.orchard.database.existingSecret }}
+{{- .Values.orchard.database.existingSecretPasswordKey }}
+{{- else if .Values.postgresql.enabled }}
+password
+{{- else }}
+password
+{{- end }}
+{{- end }}
+
+{{/*
+MinIO host
+*/}}
+{{- define "orchard.minio.host" -}}
+{{- if .Values.minio.enabled }}
+{{- printf "http://%s-minio:9000" .Release.Name }}
+{{- else }}
+{{- .Values.orchard.s3.endpoint }}
+{{- end }}
+{{- end }}
+
+{{/*
+MinIO secret name
+*/}}
+{{- define "orchard.minio.secretName" -}}
+{{- if .Values.orchard.s3.existingSecret }}
+{{- .Values.orchard.s3.existingSecret }}
+{{- else if .Values.minio.enabled }}
+{{- printf "%s-minio" .Release.Name }}
+{{- else }}
+{{- printf "%s-s3-secret" (include "orchard.fullname" .) }}
+{{- end }}
+{{- end }}