feat(cluster): replace ealenn/echo-server with jmalloc/echo-server

Signed-off-by: Devin Buhl <devin@buhl.casa>

cluster/apps/default/echo-server/helm-release.yaml

@@ -2,31 +2,71 @@
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
-  name: echo-server
+  name: &app echo-server
   namespace: default
 spec:
   interval: 5m
   chart:
     spec:
-      chart: echo-server
-      version: 0.4.0
+      chart: kah-common-chart
+      version: 1.1.2
       sourceRef:
         kind: HelmRepository
-        name: ealenn-charts
+        name: k8s-at-home-charts
         namespace: flux-system
       interval: 5m
   install:
     createNamespace: true
-    remediation:
-      retries: 3
-  upgrade:
-    remediation:
-      retries: 3
   values:
-    replicaCount: 2
+    global:
+      nameOverride: *app
+    controller:
+      replicas: 2
+      strategy: RollingUpdate
+    image:
+      repository: docker.io/jmalloc/echo-server
+      tag: 0.3.1
+    service:
+      main:
+        ports:
+          http:
+            port: &port 8080
+    probes:
+      liveness:
+        enabled: true
+        custom: true
+        spec:
+          httpGet:
+            path: /health
+            port: *port
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          failureThreshold: 3
+      readiness:
+        enabled: true
+        custom: true
+        spec:
+          httpGet:
+            path: /health
+            port: *port
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          failureThreshold: 3
+      startup:
+        enabled: true
+        custom: true
+        spec:
+          httpGet:
+            path: /health
+            port: *port
+          failureThreshold: 30
+          periodSeconds: 10
     ingress:
-      enabled: true
-      ingressClassName: "traefik"
+      main:
+        enabled: true
+        ingressClassName: "traefik"
       annotations:
         cert-manager.io/cluster-issuer: "letsencrypt-staging"
         external-dns.alpha.kubernetes.io/target: "ipv4.${SECRET_DOMAIN}"
@@ -35,14 +75,23 @@ spec:
         hajimari.io/icon: "video-input-antenna"
         traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
         traefik.ingress.kubernetes.io/router.middlewares: "networking-cloudflare-only@kubernetescrd"
-      hosts:
-        - host: "echo-server.${SECRET_DOMAIN}"
-          paths:
-            - "/"
-      tls:
-        - secretName: echo-server-tls
-          hosts:
-            - "echo-server.${SECRET_DOMAIN}"
+        hosts:
+          - host: &host "{{ .Release.Name }}.${SECRET_DOMAIN}"
+            paths:
+              - path: /
+                pathType: Prefix
+        tls:
+          - hosts:
+              - *host
+    # # FIXME: Uncomment this block to ensure multiple
+    # # replicas of the pod are scheduled on different nodes
+    # topologySpreadConstraints:
+    #   - maxSkew: 1
+    #     topologyKey: kubernetes.io/hostname
+    #     whenUnsatisfiable: DoNotSchedule
+    #     labelSelector:
+    #       matchLabels:
+    #         app.kubernetes.io/name: *app
     resources:
       requests:
         cpu: 50m