Kubernetes & Helm

# Add the TestMesh Helm repository
helm repo add testmesh https://test-mesh.github.io/helm-charts
helm repo update

# Install with external PostgreSQL and Redis
helm install testmesh testmesh/testmesh \
  --namespace testmesh \
  --create-namespace \
  --set database.external.host=my-postgres.example.com \
  --set database.external.password=secure_password \
  --set redis.external.host=my-redis.example.com

# Or install from the local chart
helm install testmesh ./deploy/helm/testmesh \
  --namespace testmesh \
  --create-namespace \
  -f values.yaml

image:
  repository: testmesh/api
  tag: latest
  pullPolicy: IfNotPresent

dashboard:
  image:
    repository: testmesh/dashboard
    tag: latest

# API server replicas
replicaCount: 3

# Background workers
worker:
  replicaCount: 5
  autoscaling:
    enabled: true
    minReplicas: 2
    maxReplicas: 20
    # Scale based on Redis Streams queue depth
    targetQueueDepth: 100

resources:
  api:
    limits:
      cpu: "2"
      memory: 2Gi
    requests:
      cpu: "500m"
      memory: 512Mi
  worker:
    limits:
      cpu: "1"
      memory: 1Gi
    requests:
      cpu: "250m"
      memory: 256Mi

ingress:
  enabled: true
  className: nginx
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
  hosts:
    - host: testmesh.example.com
      paths:
        - path: /api
          pathType: Prefix
          service: api
        - path: /
          pathType: Prefix
          service: dashboard
  tls:
    - secretName: testmesh-tls
      hosts:
        - testmesh.example.com

database:
  postgresql:
    enabled: false  # Disable bundled Postgres
  external:
    enabled: true
    host: my-postgres.example.com
    port: 5432
    username: testmesh
    password: secure_password   # Use a secret ref in production
    database: testmesh
    sslmode: require

redis:
  bundled:
    enabled: false  # Disable bundled Redis
  external:
    enabled: true
    host: my-redis.example.com
    port: 6379
    password: secure_password
    tls: true

kafka:
  bundled:
    enabled: false
  external:
    enabled: true
    brokers:
      - broker1.example.com:9092
      - broker2.example.com:9092
    sasl:
      enabled: true
      mechanism: SCRAM-SHA-512
      username: testmesh
      password: secure_password
    tls:
      enabled: true

Namespace: testmesh
│
├── Deployments
│   ├── testmesh-server     (3 replicas)   — HTTP API + Scheduler
│   ├── testmesh-worker     (5-20 replicas) — Background job processing
│   └── testmesh-dashboard  (2 replicas)   — Next.js dashboard
│
├── Services
│   ├── testmesh-server     (LoadBalancer, port 5016)
│   └── testmesh-dashboard  (LoadBalancer, port 3000)
│
├── HorizontalPodAutoscaler
│   └── testmesh-worker-hpa  — Scales workers based on queue depth
│
├── ConfigMaps
│   └── testmesh-config      — Non-sensitive configuration
│
└── Secrets
    ├── database-credentials
    ├── redis-credentials
    └── jwt-secret

# API server
command: ["./testmesh-api", "server"]

# Background worker
command: ["./testmesh-api", "worker"]

apiVersion: v1
kind: ConfigMap
metadata:
  name: testmesh-config
  namespace: testmesh
data:
  LOG_LEVEL: "info"
  ENV: "production"
  KAFKA_ENABLED: "true"
  KAFKA_BROKERS: "broker1:9092,broker2:9092"

apiVersion: v1
kind: Secret
metadata:
  name: testmesh-secrets
  namespace: testmesh
type: Opaque
stringData:
  DATABASE_URL: "postgres://testmesh:secure@my-postgres:5432/testmesh?sslmode=require"
  REDIS_URL: "rediss://:secure@my-redis:6380/0"
  JWT_SECRET: "your-jwt-secret"
  KAFKA_SASL_PASSWORD: "kafka-password"

containers:
- name: api
  image: testmesh/api:latest
  envFrom:
    - configMapRef:
        name: testmesh-config
  env:
    - name: DATABASE_URL
      valueFrom:
        secretKeyRef:
          name: testmesh-secrets
          key: DATABASE_URL
    - name: JWT_SECRET
      valueFrom:
        secretKeyRef:
          name: testmesh-secrets
          key: JWT_SECRET

livenessProbe:
  httpGet:
    path: /health
    port: 5016
  initialDelaySeconds: 30
  periodSeconds: 10
  failureThreshold: 3

readinessProbe:
  httpGet:
    path: /health
    port: 5016
  initialDelaySeconds: 5
  periodSeconds: 5
  failureThreshold: 2

{
  "status": "healthy",
  "services": {
    "database": "connected",
    "redis": "connected",
    "kafka": "connected"
  }
}

apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: testmesh-worker-hpa
  namespace: testmesh
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: testmesh-worker
  minReplicas: 2
  maxReplicas: 20
  metrics:
    - type: External
      external:
        metric:
          name: redis_stream_length
          selector:
            matchLabels:
              stream: testmesh-jobs
        target:
          type: AverageValue
          averageValue: "100"

helm repo update

# Upgrade to latest
helm upgrade testmesh testmesh/testmesh \
  --namespace testmesh \
  -f values.yaml

# Rollback if needed
helm rollback testmesh 1 --namespace testmesh

helm uninstall testmesh --namespace testmesh
kubectl delete namespace testmesh