$ show Kong/charts
This repository is the official Helm chart collection for deploying Kong API Gateway and related operators (Kong Ingress Controller, Kong Gateway Operator, Kong Operator, Kong AI Gateway) on Kubernetes. It provides production-grade deployment templates with support for DB-less, PostgreSQL, hybrid mode, enterprise features, cert-manager integration, Prometheus monitoring, and admission webhooks. The architecture is a multi-chart Helm repository with subcharts for CRDs (kic-crds, gwapi-crds, ko-crds) and extensive CI snapshot testing via helm-chartsnap. Key entry points include the main `charts/kong/` chart for the gateway and ingress controller, `charts/kong-operator/` for the Kong Operator managing Konnect and AI gateway resources, and `charts/gateway-operator/` for the Gateway API operator. External dependencies include Kong container images, cert-manager, Bitnami PostgreSQL (optional), and Konnect SaaS for enterprise deployments. The repository is actively maintained with regular releases, changelogs, and upgrade guides, though CRDs are auto-generated and may drift from upstream operator versions.
The LLM identified 4 files worth highlighting for reuse:
A comprehensive set of Helm template functions (kong.listen, kong.env, kong.volumeMounts, kong.ingress, kong.service, etc.) that generate Kubernetes resources from chart values. These helpers encapsulate complex logic for listen string generation, environment variable merging, RBAC rule construction, and version-conditional feature toggles. They are self-contained and could be extracted for use in other Kong-related Helm charts with minimal modification, demonstrating high craftsmanship in Helm templating.
Implements a ValidatingWebhookConfiguration for Kong CRDs with self-signed certificate generation using genCA/genSignedCert and Helm's lookup function to preserve existing secrets across upgrades. This pattern is reusable for any Helm chart requiring admission webhooks with automatic certificate rotation, avoiding regeneration on each helm upgrade. It demonstrates non-obvious handling of certificate lifecycle in Helm.
A Helm template for running Kong database migrations as a Job with pre-upgrade and post-upgrade hooks. It includes bootstrap, up, and finish phases, ArgoCD sync wave annotations, and conditional execution based on database mode. This pattern is reusable for any Helm chart that needs to run database migrations during upgrades, with proper ordering and idempotency.
A ValidatingAdmissionPolicy using CEL expressions to validate DataPlane port mappings (e.g., ensuring container ports match service ports). This auto-generated policy demonstrates how to enforce complex cross-resource constraints using Kubernetes admission policies, and can serve as a template for similar validation needs in other operators.