Allow application websocket connection (#46)

Author: karthiknatarajan

app/pipeline/convert/templates/static/3-app.yaml

@@ -10,6 +10,7 @@ metadata:
     app.kubernetes.io/component: app
     app.kubernetes.io/managed-by: cloudness
 spec:
+  progressDeadlineSeconds: 600  
   selector:
     matchLabels:
       app.kubernetes.io/name: {{ .Identifier }}
@@ -25,9 +26,6 @@ spec:
         app.kubernetes.io/managed-by: cloudness
     spec:
       securityContext:
-        runAsNonRoot: true
-        runAsUser: 1001
-        fsGroup: 1001
         seccompProfile:
           type: RuntimeDefault
       serviceAccountName: {{ .Identifier }}-sa
@@ -41,14 +39,6 @@ spec:
       containers:
       - name: app
         image: {{ .Image }}
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: false
-          runAsNonRoot: true
-          runAsUser: 1001
-          capabilities:
-            drop:
-              - ALL
         {{- if .Command }}
         command:
           {{- range .Command }}
@@ -145,6 +135,7 @@ metadata:
     app.kubernetes.io/component: app
     app.kubernetes.io/managed-by: cloudness
 spec:
+  podManagementPolicy: Parallel
   selector:
     matchLabels:
       app.kubernetes.io/name: {{ .Identifier }}
@@ -160,9 +151,6 @@ spec:
         app.kubernetes.io/managed-by: cloudness
     spec:
       securityContext:
-        runAsNonRoot: true
-        runAsUser: 1001
-        fsGroup: 1001
         seccompProfile:
           type: RuntimeDefault
       serviceAccountName: {{ .Identifier }}-sa
@@ -176,14 +164,6 @@ spec:
       containers:
       - name: app
         image: {{ .Image }}
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: false
-          runAsNonRoot: true
-          runAsUser: 1001
-          capabilities:
-            drop:
-              - ALL
         {{- if .Command }}
         command:
           {{- range .Command }}
@@ -267,6 +247,7 @@ spec:
   {{- range $index, $value := .ServicePorts }}
   - name: {{ $value }}-port
     protocol: TCP
+    appProtocol: {{ if and $.ServiceDomain $.ServiceDomain.Websecure }}kubernetes.io/wss{{ else }}kubernetes.io/ws{{ end }}
     port: {{ $value }}
     targetPort: {{ $value }}
   {{- end }}

app/pipeline/convert/templates/static/4-httproute.yaml

@@ -34,6 +34,15 @@ spec:
             type: PathPrefix
             value: /
 
+       filters:
+        - type: ResponseHeaderModifier
+          responseHeaderModifier:
+            set:
+              - name: Upgrade
+                value: websocket
+              - name: Connection
+                value: Upgrade
+
        timeouts:
          request: 300s
          backendRequest: 300s

templates/7-n8n.json

@@ -27,46 +27,20 @@
                     "path": "/"
                 }
             },
-            "volumes": [
-                {
-                    "name": "n8n-data",
-                    "mountPath": "/home/n8n"
-                }
-            ],
             "variables": [
                 {
-                    "key": "N8N_USER_FOLDER",
-                    "value": "/home/n8n",
-                    "type": "run"
-                },
-                {
-                    "key": "N8N_HOST",
-                    "value": "${{CLOUDNESS_PUBLIC_DOMAIN}}",
-                    "type": "run"
-                },
-                {
-                    "key": "N8N_PROTOCOL",
-                    "value": "https",
-                    "type": "run"
-                },
-                {
-                    "key": "WEBHOOK_URL",
-                    "value": "${{CLOUDNESS_PUBLIC_DOMAIN}}",
-                    "type": "run"
-                },
-                {
-                    "key": "N8N_PORT",
-                    "value": "5678",
+                    "key": "DB_POSTGRESDB_DATABASE",
+                    "value": "${{n8n-db.POSTGRES_DB}}",
                     "type": "run"
                 },
                 {
-                    "key": "DB_TYPE",
-                    "value": "postgresdb",
+                    "key": "DB_POSTGRESDB_HOST",
+                    "value": "${{n8n-db.CLOUDNESS_PRIVATE_DOMAIN}}",
                     "type": "run"
                 },
                 {
-                    "key": "DB_POSTGRESDB_HOST",
-                    "value": "${{n8n-db.CLOUDNESS_PRIVATE_DOMAIN}}",
+                    "key": "DB_POSTGRESDB_PASSWORD",
+                    "value": "${{n8n-db.POSTGRES_PASSWORD}}",
                     "type": "run"
                 },
                 {
@@ -75,33 +49,33 @@
                     "type": "run"
                 },
                 {
-                    "key": "DB_POSTGRESDB_DATABASE",
-                    "value": "${{n8n-db.POSTGRES_DB}}",
+                    "key": "DB_POSTGRESDB_USER",
+                    "value": "${{n8n-db.POSTGRES_USER}}",
                     "type": "run"
                 },
                 {
-                    "key": "DB_POSTGRESDB_USER",
-                    "value": "${{n8n-db.POSTGRES_USER}}",
+                    "key": "DB_TYPE",
+                    "value": "postgresdb",
                     "type": "run"
                 },
                 {
-                    "key": "DB_POSTGRESDB_PASSWORD",
-                    "value": "${{n8n-db.POSTGRES_PASSWORD}}",
+                    "key": "N8N_ENCRYPTION_KEY",
+                    "value": "${{secret(32)}}",
                     "type": "run"
                 },
                 {
-                    "key": "EXECUTIONS_DATA_PRUNE",
-                    "value": "true",
+                    "key": "N8N_PORT",
+                    "value": "5678",
                     "type": "run"
                 },
                 {
-                    "key": "EXECUTIONS_DATA_MAX_AGE",
-                    "value": "168",
+                    "key": "PORT",
+                    "value": "5678",
                     "type": "run"
                 },
                 {
-                    "key": "N8N_METRICS",
-                    "value": "false",
+                    "key": "WEBHOOK_URL",
+                    "value": "${{CLOUDNESS_PUBLIC_DOMAIN}}",
                     "type": "run"
                 }
             ]