arvatoaws-labs/wordpress-bedrock-helm-chart

Opinionated helm chart for running wordpress at scale on AWS

wordpress-bedrock-helm-chart

This chart is for use with wordpress bedrock. In order to use it you must build a custom php-fpm image with the application code located in /var/www/html.

The init container of this chart prepares a volume for /var/www/html, which is then shared between the nginx and the php-fpm container.

The setup is tested on AWS EKS and scales well. A typical setup would look like this:

Cloudfront (blog.example.com) <-> AWS WF       Cloudfront (static.example.com)
       |                                            |
     AWS ALB                                     S3 bucket (filled by wp offload plugin)
       |
     AWS EKS Cluster
       |
     wordpress pods
     |          |
   nginx      php-fpm
         |
   shared volume (EmptyDir synced from /var/www/html)
   
   
         |
      AWS RDS / aurora serverless

Features

• seperate containers for nginx (offical image) and php-fpm (custom image)
• seperate pod for cron jobs
• secure default setup (read only volumes, non root containers, hide versions)
• support for exporters and services monitors (see exporters and monitoring section in values.yaml)
• support for wp media offload plugin (see offload section in values.yaml)
• support for external secrets using paramater store (see externalSecrets section in values.yaml)
• support for pre-install, post-install, pre-upgrade and post-upgrade hooks (see hooks section in values.yaml)
• support for hpa (based on cpu, memory, nginx and php connections see hpa section in values.yaml)
• support for custom php config (see php section in values.yaml)
• support for custom nginx config (see nginx section additional_config in values.yaml)
• support for kube-downscaler (see wordpress uptime section in values.yaml)
• support for shared nfs volumes using EFS (see example in values_test.yaml)
• support for custom volumes mounts (see example in values_test.yaml)
• support for custom cron jobs (see example in values_test.yaml)

wordpress-bedrock-helm-chart's Issues

Database connection/implementation

I see nowhere any info (except concerning in values.yaml the part talking about externalSecrets which mentions db password etc.) to connect to a MariaDB or a MySQL database. Would you care to explain me how do you make it work ?
Oh and FYI, I'm not deploying this on AWS, I'm deploying this on a K8S cluster that is managed by Rancher.

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

helm-values

values.yaml

• public.ecr.aws/nginx/nginx 1.25
• ghcr.io/arvatoaws-labs/nginx-exporter 1.0.0
• ghcr.io/arvatoaws-labs/hipages/php-fpm_exporter 2.2.0

---

• Check this box to trigger a request for Renovate to run again on this repository

imagePullSecrets not working

Hello, the chart seems pretty good, but when using a custom image for php-fpm requiring imagePullSecrets, it doesn't work.
Modifying cron-job.yaml by adding line 44 those lines will fix it:

       {{- with $.Values.imagePullSecrets }}
          imagePullSecrets:
            {{- toYaml . | nindent 12 }}
        {{- end }}

and same for hook-jobs.yaml line 22:

    {{- with $.Values.imagePullSecrets }}
      imagePullSecrets:
        {{- toYaml . | nindent 8 }}
    {{- end }}

License

Can you kindly add a license to this project? Thanks!