Skip to content

feat(aisix-cloud): add AISIX private-deployment control-plane chart #298

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nic-6443 merged 3 commits into from
Jun 22, 2026
Merged

feat(aisix-cloud): add AISIX private-deployment control-plane chart #298

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
056077d
feat(aisix-cloud): add AISIX private-deployment control-plane chart
jarvis9443 Jun 18, 2026
ae5f0b5
docs(agents): list the aisix-cloud chart
jarvis9443 Jun 18, 2026
9186a63
fix(aisix-cloud): honor postgresql.auth.existingSecret; version DP im…
jarvis9443 Jun 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/workflows/ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,8 @@ jobs:
&& ct lint \
--charts charts/api7 \
--charts charts/gateway \
--charts charts/ingress-controller'
--charts charts/ingress-controller \
--charts charts/aisix-cloud'

- name: Verify Chart.lock files
run: |
Expand Down
1 change: 1 addition & 0 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ This repo (`api7/api7-helm-chart`) holds the Helm charts for API7 EE components
| `gateway` (Data Plane) | `charts/gateway` | yes — appVersion is the EE version |
| `api7-ingress-controller` | `charts/ingress-controller` | no — independent product version |
| `developer-portal-fe` | `charts/developer-portal-fe` | no — independent product version |
| `aisix-cloud` (AISIX private-deployment control plane) | `charts/aisix-cloud` | no — independent product version (source of truth: `api7/AISIX-Cloud` `helm/aisix-cloud`) |

## Multi-line maintenance model

Expand Down
1 change: 1 addition & 0 deletions charts/aisix-cloud/.helmignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
.git
6 changes: 6 additions & 0 deletions charts/aisix-cloud/Chart.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
dependencies:
- name: postgresql
repository: https://charts.bitnami.com/bitnami
version: 12.12.10
digest: sha256:3b8c03cf5b8742b8110494d29a4793f20920294a504bd85940d02bb00d0bc0ea
generated: "2026-05-13T18:33:38.3659398+08:00"
17 changes: 17 additions & 0 deletions charts/aisix-cloud/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
apiVersion: v2
name: aisix-cloud
description: Helm chart for AISIX-Cloud control plane (cp-api, dp-manager, dashboard)
type: application
version: 0.1.0
appVersion: "0.1.0"

maintainers:
- name: API7
email: support@api7.ai
url: https://api7.ai

dependencies:
- name: postgresql
condition: postgresql.builtin
version: "12.12.10"
repository: "https://charts.bitnami.com/bitnami"
123 changes: 123 additions & 0 deletions charts/aisix-cloud/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,123 @@
# aisix-cloud

![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.1.0](https://img.shields.io/badge/AppVersion-0.1.0-informational?style=flat-square)

Helm chart for AISIX-Cloud control plane (cp-api, dp-manager, dashboard)

## Maintainers

| Name | Email | Url |
| ---- | ------ | --- |
| API7 | <support@api7.ai> | <https://api7.ai> |

## Requirements

| Repository | Name | Version |
|------------|------|---------|
| https://charts.bitnami.com/bitnami | postgresql | 12.12.10 |

## Values

| Key | Type | Default | Description |
|-----|------|---------|-------------|
| api.affinity | object | `{}` | |
| api.dpImage | string | `""` | |
| api.dpmgrBaseURL | string | `""` | |
| api.extraEnvVars | list | `[]` | |
| api.image.pullPolicy | string | `"IfNotPresent"` | |
| api.image.repository | string | `"ghcr.io/api7/aisix-cp-api"` | |
| api.image.tag | string | `""` | |
| api.nodeSelector | object | `{}` | |
| api.oauthEnabled | bool | `false` | |
| api.podSecurityContext.fsGroup | int | `101` | |
| api.podSecurityContext.runAsGroup | int | `101` | |
| api.podSecurityContext.runAsNonRoot | bool | `true` | |
| api.podSecurityContext.runAsUser | int | `10001` | |
| api.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
| api.publicBaseURL | string | `"http://localhost:8080"` | |
| api.replicaCount | int | `1` | |
| api.resources.limits.cpu | string | `"1"` | |
| api.resources.limits.memory | string | `"512Mi"` | |
| api.resources.requests.cpu | string | `"100m"` | |
| api.resources.requests.memory | string | `"128Mi"` | |
| api.securityContext.allowPrivilegeEscalation | bool | `false` | |
| api.securityContext.capabilities.drop[0] | string | `"ALL"` | |
| api.securityContext.readOnlyRootFilesystem | bool | `true` | |
| api.service.port | int | `8080` | |
| api.service.type | string | `"ClusterIP"` | |
| api.tolerations | list | `[]` | |
| dpm.affinity | object | `{}` | |
| dpm.extraEnvVars | list | `[]` | |
| dpm.image.pullPolicy | string | `"IfNotPresent"` | |
| dpm.image.repository | string | `"ghcr.io/api7/aisix-cp-dpm"` | |
| dpm.image.tag | string | `""` | |
| dpm.nodeSelector | object | `{}` | |
| dpm.podSecurityContext.fsGroup | int | `101` | |
| dpm.podSecurityContext.runAsGroup | int | `101` | |
| dpm.podSecurityContext.runAsNonRoot | bool | `true` | |
| dpm.podSecurityContext.runAsUser | int | `10001` | |
| dpm.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
| dpm.replicaCount | int | `1` | |
| dpm.resources.limits.cpu | string | `"1"` | |
| dpm.resources.limits.memory | string | `"512Mi"` | |
| dpm.resources.requests.cpu | string | `"100m"` | |
| dpm.resources.requests.memory | string | `"128Mi"` | |
| dpm.securityContext.allowPrivilegeEscalation | bool | `false` | |
| dpm.securityContext.capabilities.drop[0] | string | `"ALL"` | |
| dpm.securityContext.readOnlyRootFilesystem | bool | `true` | |
| dpm.service.nodePort | string | `""` | |
| dpm.service.port | int | `7944` | |
| dpm.service.type | string | `"ClusterIP"` | |
| dpm.tolerations | list | `[]` | |
| externalDatabase.database | string | `"aisix_cloud"` | |
| externalDatabase.existingSecret | string | `""` | |
| externalDatabase.host | string | `""` | |
| externalDatabase.password | string | `""` | |
| externalDatabase.port | int | `5432` | |
| externalDatabase.sslmode | string | `"disable"` | |
| externalDatabase.username | string | `"aisix"` | |
| global.imagePullSecrets | list | `[]` | |
| global.storageClass | string | `""` | |
| postgresql.auth.database | string | `"aisix_cloud"` | |
| postgresql.auth.existingSecret | string | `""` | |
| postgresql.auth.password | string | `"changeme"` | |
| postgresql.auth.postgresPassword | string | `"changeme"` | |
| postgresql.auth.usePostgresUserForAppConnections | bool | `true` | |
| postgresql.auth.username | string | `"aisix"` | |
| postgresql.builtin | bool | `true` | |
| postgresql.fullnameOverride | string | `""` | |
| postgresql.image.registry | string | `"docker.io"` | |
| postgresql.image.repository | string | `"api7/postgresql"` | |
| postgresql.image.tag | string | `"15.4.0-debian-11-r45"` | |
| postgresql.primary.persistence.size | string | `"8Gi"` | |
| postgresql.primary.service.ports.postgresql | int | `5432` | |
| secrets.betterAuthSecret | string | `"CHANGE_ME_GENERATE_WITH_openssl_rand_-base64_48"` | |
| secrets.masterKey | string | `"CHANGE_ME_GENERATE_WITH_openssl_rand_-base64_32"` | |
| secrets.masterKeyID | string | `"env:default"` | |
| serviceAccount.annotations | object | `{}` | |
| serviceAccount.create | bool | `true` | |
| serviceAccount.name | string | `""` | |
| ui.affinity | object | `{}` | |
| ui.defaultLocale | string | `"en"` | |
| ui.extraEnvVars | list | `[]` | |
| ui.image.pullPolicy | string | `"IfNotPresent"` | |
| ui.image.repository | string | `"ghcr.io/api7/aisix-cp-ui"` | |
| ui.image.tag | string | `""` | |
| ui.nodeSelector | object | `{}` | |
| ui.podSecurityContext.fsGroup | int | `65533` | |
| ui.podSecurityContext.runAsGroup | int | `65533` | |
| ui.podSecurityContext.runAsNonRoot | bool | `true` | |
| ui.podSecurityContext.runAsUser | int | `1001` | |
| ui.podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` | |
| ui.replicaCount | int | `1` | |
| ui.resources.limits.cpu | string | `"500m"` | |
| ui.resources.limits.memory | string | `"256Mi"` | |
| ui.resources.requests.cpu | string | `"50m"` | |
| ui.resources.requests.memory | string | `"64Mi"` | |
| ui.securityContext.allowPrivilegeEscalation | bool | `false` | |
| ui.securityContext.capabilities.drop[0] | string | `"ALL"` | |
| ui.securityContext.readOnlyRootFilesystem | bool | `true` | |
| ui.service.port | int | `3000` | |
| ui.service.type | string | `"ClusterIP"` | |
| ui.tolerations | list | `[]` | |

Binary file added charts/aisix-cloud/charts/postgresql-12.12.10.tgz
View file
Open in desktop
Binary file not shown.
37 changes: 37 additions & 0 deletions charts/aisix-cloud/templates/NOTES.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
AISIX-Cloud control plane has been deployed.

Components:
- cp-api: {{ include "aisix-cloud.fullname" . }}-api:{{ .Values.api.service.port }}
- dp-manager: {{ include "aisix-cloud.fullname" . }}-dpm:{{ .Values.dpm.service.port }}
- dashboard: {{ include "aisix-cloud.fullname" . }}-ui:{{ .Values.ui.service.port }}
- PostgreSQL: {{ include "aisix-cloud.pgHost" . }}:{{ include "aisix-cloud.pgPort" . }}

Access the dashboard via cp-api (reverse proxy):
kubectl port-forward svc/{{ include "aisix-cloud.fullname" . }}-api {{ .Values.api.service.port }}:{{ .Values.api.service.port }} -n {{ .Release.Namespace }}
Then open http://localhost:{{ .Values.api.service.port }}

Connect a data-plane (managed mode):
{{- if eq .Values.dpm.service.type "NodePort" }}
DPM is exposed via NodePort.
{{- if .Values.dpm.service.nodePort }}
NodePort: {{ .Values.dpm.service.nodePort }}
{{- else }}
Get the assigned port:
kubectl get svc/{{ include "aisix-cloud.fullname" . }}-dpm -n {{ .Release.Namespace }} -o jsonpath='{.spec.ports[0].nodePort}'
{{- end }}

Run the DP container (replace <node-ip> and <node-port> with actual values):

docker run --rm \
-e AISIX_CONFIG_PATH=/etc/aisix/config.managed.yaml \
-e AISIX_MANAGED__CP_BASE_URL=https://<node-ip>:<node-port> \
-e AISIX_MANAGED__CP_ETCD_ENDPOINT=<node-ip>:<node-port> \
-e AISIX_MANAGED__CP_CERT_PEM='<client-cert-pem>' \
-e AISIX_MANAGED__CP_KEY_PEM='<client-key-pem>' \
-e AISIX_MANAGED__CP_CA_PEM='<ca-cert-pem>' \
-v aisix-mtls:/var/lib/aisix \
ghcr.io/api7/aisix:dev
Comment thread
jarvis9443 marked this conversation as resolved.
Outdated
{{- else }}
DPM is a ClusterIP service. Expose it via Ingress, LoadBalancer, or port-forward:
kubectl port-forward svc/{{ include "aisix-cloud.fullname" . }}-dpm {{ .Values.dpm.service.port }}:{{ .Values.dpm.service.port }} -n {{ .Release.Namespace }}
{{- end }}
Loading
Loading