Shopsys Platform Helm Deployment

Helm/Helmfile replacement of the legacy shopsys/deployment package (bash + sed/yq + kustomize). Phase 1 is a faithful port: the deploy order and all end states of the legacy pipeline are preserved (see docs/deploy-flow.md).

Layout

charts/shopsys-common/   library chart with shared template helpers
charts/shopsys-infra/    release 1: Redis, RabbitMQ (+ services, configmaps, mgmt ingress, hook RBAC)
charts/shopsys-app/      release 2: webserver+php-fpm, storefront, cron, consumers,
                         ingresses, HPAs, secrets and the deploy hooks
                         (cron-suspend → migrate-application → post-deploy)
helmfile.yaml.gotmpl     release composition + dynamic environments
environments/            base.yaml + one directory per environment (example setup)
deploy/deploy.sh         thin wrapper: slack, fe-api-keys, failure recovery, website check
tests/                   golden (snapshot) tests + fixtures
charts/*/tests/          helm-unittest suites
tools/compare-legacy.sh  semantic parity diff against the legacy package's snapshots
docs/                    documentation (start with original-deployment.md and deploy-flow.md)
examples/                what a consuming project copies

Requirements

• Helm 4 (the package supports Helm 4 only), helmfile ≥ 1.7 with the helm-diff plugin
• kubectl, yq, curl, openssl (used by the deploy wrapper)

Quick start

# render everything for an environment
helmfile -e devel template

# diff against the cluster
helmfile -e devel diff

# full deploy (slack, hooks, failure recovery, website check)
TAG=<app-image> STOREFRONT_TAG=<storefront-image> \
CI_REGISTRY=... DEPLOY_REGISTER_USER=... DEPLOY_REGISTER_PASSWORD=... \
RABBITMQ_DEFAULT_USER=... RABBITMQ_DEFAULT_PASS=... \
./deploy/deploy.sh devel

Environments are not fixed: any environments/<name>/values.yaml defines a new one, inheriting from environments/base.yaml. Non-sensitive configuration (domains, crons, consumers, resources) is committed in values; sensitive/CI-dynamic values come from env vars via environments/runtime.yaml.gotmpl. See docs/values.md.

Tests

./tests/run-golden-tests.sh              # snapshot tests (5 scenarios × 3 deploy variants)
./tests/run-golden-tests.sh --update     # regenerate snapshots after intentional changes
helm unittest charts/shopsys-app charts/shopsys-infra
helm lint charts/shopsys-infra -f charts/shopsys-infra/tests/values/required.yaml && helm lint charts/shopsys-app -f charts/shopsys-app/tests/values/required.yaml
LEGACY_REPO=~/src/shopsys-deployment ./tools/compare-legacy.sh basic-production

CI (GitHub Actions) runs lint, unit tests, golden tests, kubeconform validation and shellcheck on every push/PR to main.

Documentation

• docs/original-deployment.md — how the legacy package works (the reference for the rewrite)
• docs/deploy-flow.md — the new deploy flow and end-state mapping
• docs/values.md — values reference + legacy env-var mapping
• docs/migrating-from-shopsys-deployment.md — project migration checklist and the list of intentional deviations