mon-chart/
├── Chart.yaml            # metadata (nom, version)
├── values.yaml           # valeurs PAR DEFAUT
└── templates/            # templates YAML
    ├── deployment.yaml
    ├── service.yaml
    └── _helpers.tpl      # fonctions de template partagees (nom prefixe _)

helm lint ./chart                                              # verifier la syntaxe
helm template <release> ./chart -f values-<env>.yaml           # rendu SEC (aucun deploiement)
helm install <release> ./chart -f values-<env>.yaml -n <ns>    # deploiement reel
helm upgrade <release> ./chart -f values-<env>.yaml -n <ns>    # modification incrementale
helm rollback <release> <revision> -n <ns>                     # retour arriere

spec.selector: Invalid value: ...: field is immutable

projet13-kubernetes-helm-tp/
├── 00-ENONCE.md                              <- este documento
│
├── apps/                                     <- O CODIGO (ANEXO A) — NAO MODIFICAR
│   ├── portail/
│   │   ├── app.py
│   │   ├── requirements.txt
│   │   └── Dockerfile
│   └── api/
│       ├── app.py
│       ├── requirements.txt
│       └── Dockerfile
│
├── chart/                                    <- O CHART A COMPLETAR
│   ├── Chart.yaml                            <- esqueleto (ANEXO B)
│   ├── values.yaml                           <- valores por omissao (ANEXO B)
│   │
│   ├── environments/                         <- A SUA VEZ
│   │   ├── values-dev.yaml                   <- esqueleto TODO (ANEXO B)
│   │   ├── values-staging.yaml               <- esqueleto TODO (ANEXO B)
│   │   └── values-prod.yaml                  <- esqueleto TODO (ANEXO B)
│   │
│   ├── templates/                            <- A SUA VEZ
│   │   ├── _helpers.tpl                      <- esqueleto TODO (ANEXO B)
│   │   ├── portail-deployment.yaml           <- esqueleto TODO (ANEXO B)
│   │   ├── portail-service.yaml              <- esqueleto TODO (ANEXO B)
│   │   ├── api-deployment.yaml               <- esqueleto TODO (ANEXO B)
│   │   └── api-service.yaml                  <- esqueleto TODO (ANEXO B)
│   │
│   └── casses/                               <- FORNECIDOS mas DEFEITUOSOS (ANEXO C)
│       ├── casse-1-configmap.yaml
│       ├── casse-2-worker-deployment.yaml
│       └── casse-3-cache-deployment.yaml
│
├── outils/
│   └── valider.ps1                           <- FORNECIDO (ANEXO D)
│
└── RAPPORT.md                                <- A REDIGIR por si

docker build -t hedge-portail:1.0 .\apps\portail
docker build -t hedge-api:1.0     .\apps\api

docker images | Select-String "^hedge"      # doit afficher les 2 images

helm lint .\chart
# doit afficher : 1 chart(s) linted, 0 chart(s) failed

helm template check .\chart -f .\chart\environments\values-dev.yaml
# doit afficher 2 Deployments + 2 Services, tous prefixes par "check-"

{{ include "hedge.labels" (dict "root" . "composant" "portail") | nindent 4 }}

helm install hedge-dev     .\chart -f .\chart\environments\values-dev.yaml     -n hedge-dev     --create-namespace
helm install hedge-staging .\chart -f .\chart\environments\values-staging.yaml -n hedge-staging --create-namespace
helm install hedge-prod    .\chart -f .\chart\environments\values-prod.yaml    -n hedge-prod    --create-namespace

kubectl wait --for=condition=ready pod --all -n hedge-dev     --timeout=120s
kubectl wait --for=condition=ready pod --all -n hedge-staging --timeout=120s
kubectl wait --for=condition=ready pod --all -n hedge-prod    --timeout=120s

start http://localhost:30130       # DEV — bandeau bleu, 1 replique
start http://localhost:30131       # STAGING — bandeau orange, 2 repliques
start http://localhost:30132       # PROD — bandeau vert, 3 repliques

# rendu SEC d'un seul template (n'installe rien)
helm template hedge-dev .\chart -f .\chart\environments\values-dev.yaml `
  --show-only templates/casse-3-cache-deployment.yaml --debug

.\outils\valider.ps1

[OK]    Mission 1 - Chart valide.............. 10/10
[OK]    Mission 2 - Templating de base........ 20/20
[ECHEC] Mission 3 - Helpers et labels.........  0/15   -> helper hedge.selectorLabels manquant
[OK]    Mission 4 - Trois environnements...... 20/20
[ECHEC] Mission 5 - Upgrade + rollback........  0/10   -> aucun rollback detecte dans l'historique
[OK]    Mission 6 - Reparations (3 pannes).... 14/20   -> casse-3 : typo .Values.portal toujours present

SCORE AUTOMATIQUE : 64 / 95

# ANALYSE (aucun deploiement)
helm lint .\chart                                                        # syntaxe + best practices
helm template <release> .\chart -f <values.yaml>                         # rendu complet
helm template <release> .\chart -f <values.yaml> --show-only templates/<fichier>   # rendu ciblé
helm template <release> .\chart -f <values.yaml> --debug                 # avec traces
helm show values .\chart                                                 # valeurs par défaut

# DEPLOIEMENT
helm install <release> .\chart -f <values.yaml> -n <ns> --create-namespace
helm upgrade <release> .\chart -f <values.yaml> -n <ns>
helm upgrade <release> .\chart -f <values.yaml> --set portail.replicas=5 -n <ns>
helm rollback <release> <revision> -n <ns>
helm uninstall <release> -n <ns>

# OBSERVATION
helm list -A                                                             # toutes les releases
helm status <release> -n <ns>
helm history <release> -n <ns>
helm get values <release> -n <ns>                                        # les valeurs actives
helm get manifest <release> -n <ns>                                      # les manifestes appliques

"""Portal — painel multiambiente.

Este Pod mostra o ambiente em que corre (DEV / STAGING / PROD),
a versao da aplicacao, o numero de replicas e o estado do backend.

Todos os valores mostrados vem de VARIAVEIS DE AMBIENTE injetadas
pelo Helm a partir de values-<env>.yaml. O mesmo codigo adapta-se a cada
ambiente sem nenhuma alteracao.
"""

import os
import socket
import time
import urllib.error
import urllib.request

from flask import Flask, jsonify, request

app = Flask(__name__)
DEMARRAGE = time.time()


def cfg():
    return {
        "env": os.environ.get("ENVIRONMENT", "desconhecido"),
        "version": os.environ.get("APP_VERSION", "0.0.0"),
        "theme": os.environ.get("THEME_COLOR", "#64748b"),
        "message": os.environ.get("BANNIERE_MESSAGE", "Implantado com Helm"),
        "backend_url": os.environ.get("BACKEND_URL", "http://api"),
        "replicas_info": os.environ.get("REPLICAS_INFO", "?"),
        "pod": socket.gethostname(),
        "uptime": int(time.time() - DEMARRAGE),
    }


def tester_backend(url):
    try:
        with urllib.request.urlopen(url + "/ping", timeout=1.5) as reponse:
            corps = reponse.read(200).decode("utf-8", "ignore")
        return "ok", corps.strip()
    except urllib.error.HTTPError as err:
        return "http", "HTTP %s" % err.code
    except Exception as err:
        return "ko", type(err).__name__


@app.route("/health")
def health():
    return "OK", 200


@app.route("/api-json")
def api_json():
    """Rota util para a validacao automatica."""
    c = cfg()
    etat, detail = tester_backend(c["backend_url"])
    return jsonify(pod=c["pod"], env=c["env"], version=c["version"],
                   backend=etat, backend_detail=detail, uptime=c["uptime"])


@app.route("/")
def accueil():
    c = cfg()
    etat, detail = tester_backend(c["backend_url"])
    # ... (modelo HTML completo no ficheiro — nao repetido aqui para permanecer legivel)

flask==3.0.3

FROM python:3.12-slim
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY app.py .
CMD ["python", "app.py"]

"""API — backend simples para o exemplo Helm."""

import os
import socket
import time

from flask import Flask, jsonify

app = Flask(__name__)
DEMARRAGE = time.time()

ENV = os.environ.get("ENVIRONMENT", "desconhecido")
VERSION = os.environ.get("APP_VERSION", "0.0.0")


@app.route("/")
@app.route("/ping")
def ping():
    return jsonify(service="api", env=ENV, version=VERSION,
                   pod=socket.gethostname(),
                   uptime=int(time.time() - DEMARRAGE))


@app.route("/health")
def health():
    return "OK", 200


if __name__ == "__main__":
    app.run(host="0.0.0.0", port=8000)

flask==3.0.3

FROM python:3.12-slim
WORKDIR /app
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt
COPY app.py .
CMD ["python", "app.py"]

# ? Preencha os campos obrigatorios de um Chart Helm.
# ? apiVersion deve valer v2 (a v1 esta obsoleta desde o Helm 3).
# ? type e "application" (por oposicao a "library").

apiVersion: TODO
name: hedge
description: TODO
type: TODO
version: 0.1.0
appVersion: "1.0.0"

# values.yaml — valores por omissao do chart hedge.
# Cada ambiente fornece um ficheiro values-<env>.yaml que SOBREPOE
# estes valores por cima. Mantenha este ficheiro NEUTRO (nenhum valor especifico
# de um ambiente).

environment: default

banniere:
  message: "Chart Helm — application multi-environnement"
  couleur: "#64748b"

portail:
  image:
    repository: hedge-portail
    tag: "1.0"
    pullPolicy: IfNotPresent
  replicas: 1
  service:
    type: NodePort
    port: 80
    targetPort: 5000
    nodePort: 30130

api:
  image:
    repository: hedge-api
    tag: "1.0"
    pullPolicy: IfNotPresent
  replicas: 1
  service:
    type: ClusterIP
    port: 80
    targetPort: 8000

{{/*
Nome completo de um recurso : "<release>-<composant>".
Uso : {{ include "hedge.fullname" (dict "root" . "composant" "portail") }}
*/}}
{{- define "hedge.fullname" -}}
{{- printf "TODO" .root.Release.Name .composant | trunc 63 | trimSuffix "-" -}}
{{- end -}}


{{/*
Labels comuns a todos os recursos.
Uso : {{ include "hedge.labels" (dict "root" . "composant" "portail") | nindent 4 }}
*/}}
{{- define "hedge.labels" -}}
# ? preencha os 7 labels pedidos na Missao 3
app.kubernetes.io/name: TODO
app.kubernetes.io/instance: TODO
# ... continue ...
{{- end -}}


{{/*
Selector labels : subconjunto ESTAVEL dos labels.
Colocar aqui APENAS labels que NUNCA mudarao para uma instancia.
*/}}
{{- define "hedge.selectorLabels" -}}
# ? os 3 labels ESTRITAMENTE imutaveis apenas
{{- end -}}

# ? Deployment do portal. Use :
#   - .Values.portail.replicas
#   - .Values.portail.image.{repository,tag,pullPolicy}
#   - .Values.portail.service.targetPort
#   - .Values.environment
#   - .Values.banniere.{couleur,message}
#   - .Chart.AppVersion (pour APP_VERSION)
#   - O NOME do Service api construido com .Release.Name (para BACKEND_URL)
apiVersion: apps/v1
kind: Deployment
metadata:
  name: TODO
  labels:
    TODO
spec:
  replicas: TODO
  selector:
    matchLabels:
      TODO
  template:
    metadata:
      labels:
        TODO
    spec:
      containers:
        - name: portail
          image: TODO
          imagePullPolicy: TODO
          ports:
            - containerPort: TODO
          env:
            - name: ENVIRONMENT
              value: TODO
            # ? acrescente APP_VERSION, THEME_COLOR, BANNIERE_MESSAGE,
            #   BACKEND_URL, REPLICAS_INFO
          readinessProbe:
            httpGet:
              path: /health
              port: TODO
            initialDelaySeconds: 3
            periodSeconds: 5

# ? Service para o portal. Tipo NodePort. Use a condicao
#   {{- if eq .Values.portail.service.type "NodePort" }} ... {{- end }}
#   para incluir "nodePort" APENAS se for mesmo um NodePort.
apiVersion: v1
kind: Service
metadata:
  name: TODO
  labels:
    TODO
spec:
  type: TODO
  selector:
    TODO
  ports:
    - port: TODO
      targetPort: TODO
      # ? nodePort apenas se type == NodePort

# ? Mesma estrutura que portail-deployment.yaml, mas :
#   - composant = "api"
#   - variaveis de ambiente : ENVIRONMENT e APP_VERSION apenas
#   - porta do contentor = .Values.api.service.targetPort (8000)
apiVersion: apps/v1
kind: Deployment
metadata:
  name: TODO
spec:
  # ... (estrutura semelhante ao portal) ...

# ? Service ClusterIP para a api. Uma so porta. Sem nodePort.
apiVersion: v1
kind: Service
metadata:
  name: TODO
spec:
  type: TODO
  selector:
    TODO
  ports:
    - port: TODO
      targetPort: TODO

# ? Ambiente DEV : 1 replica, bandeau azul #2563eb, NodePort 30130.
environment: TODO

banniere:
  message: TODO
  couleur: TODO

portail:
  replicas: TODO
  service:
    nodePort: TODO

api:
  replicas: TODO

# ? Ambiente STAGING : 2 replicas, bandeau laranja #ea580c, NodePort 30131.
environment: TODO
# ... complete no modelo de values-dev.yaml ...

# ? Ambiente PROD : 3 replicas, bandeau verde #16a34a, NodePort 30132.
environment: TODO
# ...

# AVARIA 1
# Sintoma : instale hedge-dev, depois tente instalar hedge-staging
# NO MESMO NAMESPACE. A segunda instalacao falha com :
#   ConfigMap "hedge-config" ... exists and cannot be imported ...
apiVersion: v1
kind: ConfigMap
metadata:
  name: hedge-config
  labels:
    {{- include "hedge.labels" (dict "root" . "composant" "config") | nindent 4 }}
data:
  timezone: "America/Toronto"
  langue: "fr-CA"

# AVARIA 2
# Sintoma : "helm install" funciona. "helm upgrade" com um
# --set environment=recette falha com :
#   spec.selector: Invalid value: ...: field is immutable
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "hedge.fullname" (dict "root" . "composant" "worker") }}
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: {{ .Chart.Name }}
      app.kubernetes.io/instance: {{ .Release.Name }}
      app.kubernetes.io/component: worker
      hedge/environment: {{ .Values.environment | quote }}
  template:
    metadata:
      labels:
        {{- include "hedge.labels" (dict "root" . "composant" "worker") | nindent 8 }}
    spec:
      containers:
        - name: worker
          image: "{{ .Values.api.image.repository }}:{{ .Values.api.image.tag }}"

# AVARIA 3
# Sintoma : "helm install" falha com :
#   Error: template ...at <.Values.portal.replicas>:
#   nil pointer evaluating interface {}.replicas
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "hedge.fullname" (dict "root" . "composant" "cache") }}
spec:
  replicas: {{ .Values.portal.replicas }}
  selector:
    matchLabels:
      {{- include "hedge.selectorLabels" (dict "root" . "composant" "cache") | nindent 6 }}
  template:
    metadata:
      labels:
        {{- include "hedge.selectorLabels" (dict "root" . "composant" "cache") | nindent 8 }}
    spec:
      containers:
        - name: cache
          image: "{{ .Values.api.image.repository }}:{{ .Values.api.image.tag }}"

.\outils\valider.ps1