chore(charts): productionize sam-mesh chart - #302

Merged

aojea merged 26 commits into

google:mainfrom

kaisoz:kaisoz/chart-productionize

Aug 25, 2026

Commits on Aug 25, 2026

charts: expose the router at its node IP, GKE-style
kaisoz
committed
71e472f
charts: make sam:role:node's allowed services configurable
kaisoz
committed
e9a7af4
charts: front the mesh with Gateway API
kaisoz
committed
f2b76a0
charts: drop the bundled Dex
kaisoz
committed
0bffff7
development/kind: deploy the mesh behind the gateway surface
kaisoz
committed
aade64f
tests/e2e: pin the chart values the bats lane asserts on
kaisoz
committed
a0cffcc
docs: describe the gateway-fronted kind mesh
kaisoz
committed
7672f21
development/examples: pin greeter-mcp to mcp 1.x
kaisoz
committed
5163c85
charts: run the sam pods under the restricted Pod Security Standard
kaisoz
committed
ca94afa
charts: allow overriding the image tag per image
kaisoz
committed
713727f
charts: roll control plane and console when the shared secret changes
kaisoz
committed
362c122
charts: stop granting the bootstrap job access to every secret
kaisoz
committed
ff8159c
charts: warn in NOTES when hostPort caps routers at one per node
kaisoz
committed
313d3a9
charts: persist the router key on a PVC
kaisoz
committed
06ec530
charts: add pg_isready probes to the db statefulset
kaisoz
committed
8cf6ff4
charts: pass nodeSelector, tolerations and affinity through to every workload
kaisoz
committed
b079565
charts: give the curl init/bootstrap containers requests and limits
kaisoz
committed
64968a7
charts: add helm-unittest template tests
kaisoz
committed
7fa1d8a
ci: lint and unit-test the chart on chart changes
kaisoz
committed
2913960
Add helm-template make target. Reduce comments
kaisoz
committed
e356126
tests/e2e: recover the reused cluster from immutable StatefulSet changes
kaisoz
committed
2ebbe51
charts: derive announced router port from service.port; optional PVC storageClass
kaisoz
committed
54618a8
charts: disable surge when controlPlane.hostPort is set
kaisoz
committed
678ea5f
Makefile: drop --verify=false from helm plugin install; helm 3 has no such flag
kaisoz
committed
e4116b1
ci: drop helm-lint from chart-test, test.yaml already runs it
kaisoz
committed
d7a7066
charts: let the bootstrap job update the router-token secret
kaisoz
committed
7b3c172

Navigation Menu

Uh oh!

chore(charts): productionize sam-mesh chart - #302

chore(charts): productionize sam-mesh chart#302
aojea merged 26 commits into
google:mainfrom
kaisoz:kaisoz/chart-productionize

Commits on Aug 25, 2026

charts: expose the router at its node IP, GKE-style

charts: make sam:role:node's allowed services configurable

charts: front the mesh with Gateway API

charts: drop the bundled Dex

development/kind: deploy the mesh behind the gateway surface

tests/e2e: pin the chart values the bats lane asserts on

docs: describe the gateway-fronted kind mesh

development/examples: pin greeter-mcp to mcp 1.x

charts: run the sam pods under the restricted Pod Security Standard

charts: allow overriding the image tag per image

charts: roll control plane and console when the shared secret changes

charts: stop granting the bootstrap job access to every secret

charts: warn in NOTES when hostPort caps routers at one per node

charts: persist the router key on a PVC

charts: add pg_isready probes to the db statefulset

charts: pass nodeSelector, tolerations and affinity through to every workload

charts: give the curl init/bootstrap containers requests and limits

charts: add helm-unittest template tests

ci: lint and unit-test the chart on chart changes

Add helm-template make target. Reduce comments

tests/e2e: recover the reused cluster from immutable StatefulSet changes

charts: derive announced router port from service.port; optional PVC storageClass

charts: disable surge when controlPlane.hostPort is set

Makefile: drop --verify=false from helm plugin install; helm 3 has no such flag

ci: drop helm-lint from chart-test, test.yaml already runs it

charts: let the bootstrap job update the router-token secret