Add hpcgpt helm chart

charts/kyverno-policies/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: kyverno-policies
 description: OSC Kyverno policies deployment
 type: application
-version: 0.38.3
+version: 0.38.4
 appVersion: "v1.14.5"
 maintainers:
   - name: treydock

charts/kyverno-policies/templates/block-images-with-volumes.yaml

@@ -46,6 +46,7 @@ spec:
           value:
             - prometheus
             - postgresql
+            - minio
         - key: "docker.io"
           operator: AnyNotIn
           value: "{{`{{ images.containers.*.registry }}`}}"

charts/osc-chat/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/osc-chat/Chart.yaml

@@ -0,0 +1,52 @@
+apiVersion: v2
+name: osc-chat
+description: A Helm chart for the OSC Chat service
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "0.1.0"
+maintainers:
+  - name: khsa1
+dependencies:
+  - name: database
+    version: 0.15.0
+    repository: https://osc.github.io/osc-helm-charts
+  - name: minio
+    version: 17.0.21
+    repository: "oci://registry-1.docker.io/bitnamicharts"
+    condition: minio.enable
+  - name: qdrant
+    version: 1.16.3
+    repository: "https://qdrant.github.io/qdrant-helm"
+    condition: qdrant.enable
+  - name: rabbitmq
+    version: 16.0.14
+    repository: "oci://registry-1.docker.io/bitnamicharts"
+    condition: rabbitmq.enable
+  - name: osc-common
+    version: 0.14.1
+    repository: https://osc.github.io/osc-helm-charts
+  - name: vllm-stack
+    # version: 0.1.11
+    # repository: "https://vllm-project.github.io/production-stack"
+    # Use fork until merged and released:
+    # https://github.com/vllm-project/production-stack/pull/954
+    version: '0.1.11-osc-r1'
+    repository: oci://docker-registry.osc.edu/kubernetes/vllm

charts/osc-chat/templates/NOTES.txt

@@ -0,0 +1,109 @@
+1. Get the application URL by running these commands:
+{{- if .Values.frontend.ingress.enabled }}
+{{- range $host := .Values.frontend.ingress.hosts }}
+  {{- range .paths }}
+  http{{ if $.Values.frontend.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }}
+  {{- end }}
+{{- end }}
+{{- else if contains "NodePort" .Values.frontend.service.type }}
+  export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "osc-chat.fullname" . }}-frontend)
+  export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
+  echo http://$NODE_IP:$NODE_PORT
+{{- else if contains "LoadBalancer" .Values.frontend.service.type }}
+     NOTE: It may take a few minutes for the LoadBalancer IP to be available.
+           You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "osc-chat.fullname" . }}-frontend'
+  export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "osc-chat.fullname" . }}-frontend --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
+  echo http://$SERVICE_IP:{{ .Values.frontend.service.port }}
+{{- else if contains "ClusterIP" .Values.frontend.service.type }}
+  export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "{{ include "osc-chat.frontend.selectorLabels" . }}" -o jsonpath="{.items[0].metadata.name}")
+  export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
+  echo "Visit http://127.0.0.1:8080 to use your application"
+  kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
+{{- end }}
+
+2. Application Information:
+   - Namespace: {{ .Release.Namespace }}
+   - Release: {{ .Release.Name }}
+
+3. Services Status:
+{{- if .Values.frontend.enabled }}
+   ✓ Frontend: Enabled
+{{- else }}
+   ✗ Frontend: Disabled (run locally for development)
+{{- end }}
+{{- if .Values.backend.enabled }}
+   ✓ Backend API: Enabled
+{{- else }}
+   ✗ Backend API: Disabled (run locally for development)
+{{- end }}
+{{- if .Values.worker.enabled }}
+   ✓ Worker Service: Enabled
+{{- end }}
+{{- if .Values.qdrant.enabled }}
+   ✓ Qdrant Vector DB: Enabled
+{{- end }}
+{{- if .Values.minio.enable }}
+   ✓ MinIO Object Storage: Enabled
+{{- end }}
+{{- if .Values.keycloak.enabled }}
+   ✓ Keycloak Auth: Enabled
+{{- end }}
+{{- if (index .Values "vllm-stack").enabled }}
+   ✓ VLLM : Enabled
+{{- end }}
+{{- if .Values.ollama.enabled }}
+   ✓ Ollama Local LLM: Enabled (dev mode)
+{{- end }}
+{{- if .Values.database.postgresql.enable }}
+   ✓ PostgreSQL: Enabled
+{{- end }}
+{{- if .Values.database.redis.enable }}
+   ✓ Redis Cache: Enabled
+{{- end }}
+{{- if .Values.rabbitmq.enabled }}
+   ✓ RabbitMQ: Enabled
+{{- end }}
+
+4. Useful Commands:
+   # Check pod status
+   kubectl get pods -l app.kubernetes.io/instance={{ .Release.Name }}
+
+   # View application logs
+   kubectl logs -f deployment/{{ include "osc-chat.fullname" . }}-backend
+
+   # Access MinIO Console (if enabled)
+{{- if .Values.minio.enable }}
+   kubectl port-forward service/{{ include "osc-chat.fullname" . }}-minio 9001:9001
+   # Then visit http://localhost:9001
+{{- end }}
+
+   # Access Keycloak Admin Console (if enabled)
+{{- if .Values.keycloak.enabled }}
+   kubectl port-forward service/{{ include "osc-chat.fullname" . }}-keycloak 8080:8080
+   # Then visit http://localhost:8080/admin
+   # Username: {{ .Values.keycloak.auth.adminUser }}
+   # Password: [check secret {{ include "osc-chat.fullname" . }}-secrets]
+{{- end }}
+
+5. Configuration Notes:
+   🏭 Production Mode Active:
+   - External LLM APIs should be configured
+   - Ensure proper ingress and TLS setup
+   - Monitor resource usage and scaling
+
+{{- if not .Values.secrets.create }}
+   ⚠️  External secrets mode is enabled. Ensure all required secrets are created:
+   - Database passwords
+   - API keys (OpenAI, etc.)
+   - Service credentials
+{{- end }}
+
+{{- if .Values.frontend.ingress.enabled }}
+   🌐 Ingress is enabled. Ensure your ingress controller is properly configured.
+{{- end }}
+
+{{- if .Values.networkPolicies.enabled }}
+   🔒 Network policies are enabled for enhanced security.
+{{- end }}
+
+