add ai-teacher helm chart and rename notes to readme

ai-teacher/templates/_helpers.tpl

@@ -0,0 +1,15 @@
+{{- define "ai-teacher.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-ai-teacher" .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+
+{{- define "ai-teacher.secretName" -}}
+{{- if .Values.backend.existingSecret }}
+{{- .Values.backend.existingSecret }}
+{{- else }}
+{{- printf "%s-secret" (include "ai-teacher.fullname" .) }}
+{{- end }}
+{{- end }}

ai-teacher/templates/backend-deployment.yaml

@@ -0,0 +1,90 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "ai-teacher.fullname" . }}-backend
+  labels:
+    app: {{ include "ai-teacher.fullname" . }}-backend
+spec:
+  replicas: {{ .Values.backend.replicaCount }}
+  selector:
+    matchLabels:
+      app: {{ include "ai-teacher.fullname" . }}-backend
+  template:
+    metadata:
+      labels:
+        app: {{ include "ai-teacher.fullname" . }}-backend
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: backend
+          image: "{{ .Values.backend.image.repository }}:{{ .Values.backend.image.tag }}"
+          imagePullPolicy: {{ .Values.backend.image.pullPolicy }}
+          ports:
+            - containerPort: 8080
+          env:
+            - name: DB_URL
+              value: {{ .Values.backend.env.DB_URL | quote }}
+            - name: DB_USERNAME
+              value: {{ .Values.backend.env.DB_USERNAME | quote }}
+            - name: UPLOAD_ENABLED
+              value: {{ .Values.backend.env.UPLOAD_ENABLED | quote }}
+            - name: DELETE_ENABLED
+              value: {{ .Values.backend.env.DELETE_ENABLED | quote }}
+            - name: MARKER_BASE_URL
+              value: {{ .Values.backend.env.MARKER_BASE_URL | quote }}
+            - name: VISION_MIN_INTERVAL_MS
+              value: {{ .Values.backend.env.VISION_MIN_INTERVAL_MS | quote }}
+            - name: S3_ENDPOINT
+              value: {{ .Values.backend.env.S3_ENDPOINT | quote }}
+            - name: S3_BUCKET
+              value: {{ .Values.backend.env.S3_BUCKET | quote }}
+            - name: S3_REGION
+              value: {{ .Values.backend.env.S3_REGION | quote }}
+            # Sensitive — from Secret
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "ai-teacher.secretName" . }}
+                  key: DB_PASSWORD
+            - name: OPENAI_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "ai-teacher.secretName" . }}
+                  key: OPENAI_API_KEY
+            - name: APP_AUTH_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "ai-teacher.secretName" . }}
+                  key: APP_AUTH_USERNAME
+            - name: APP_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "ai-teacher.secretName" . }}
+                  key: APP_PASSWORD
+            - name: S3_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "ai-teacher.secretName" . }}
+                  key: S3_ACCESS_KEY_ID
+            - name: S3_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "ai-teacher.secretName" . }}
+                  key: S3_SECRET_ACCESS_KEY
+          resources:
+            {{- toYaml .Values.backend.resources | nindent 12 }}
+          # readinessProbe:
+          #   httpGet:
+          #     path: /actuator/health
+          #     port: 8080
+          #   initialDelaySeconds: 20
+          #   periodSeconds: 10
+          # livenessProbe:
+          #   httpGet:
+          #     path: /actuator/health
+          #     port: 8080
+          #   initialDelaySeconds: 40
+          #   periodSeconds: 30

ai-teacher/templates/backend-service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "ai-teacher.fullname" . }}-backend
+spec:
+  selector:
+    app: {{ include "ai-teacher.fullname" . }}-backend
+  ports:
+    - port: 8080
+      targetPort: 8080

ai-teacher/templates/frontend-configmap.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "ai-teacher.fullname" . }}-nginx
+data:
+  default.conf: |
+    server {
+        listen 80;
+        server_name _;
+        root /usr/share/nginx/html;
+        index index.html;
+
+        # Proxy API calls to the backend service
+        location ^~ /api/{
+            proxy_pass http://{{ include "ai-teacher.fullname" . }}-backend:8080;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_read_timeout 120s;
+        }
+
+        # Vue Router — serve index.html for all non-asset routes
+        location / {
+            try_files $uri $uri/ /index.html;
+        }
+
+        # Cache static assets aggressively (content-hashed filenames)
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff2?)$ {
+            expires 1y;
+            add_header Cache-Control "public, immutable";
+        }
+
+        gzip on;
+        gzip_types text/plain text/css application/javascript application/json;
+        gzip_min_length 1024;
+    }

ai-teacher/templates/frontend-deployment.yaml

@@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "ai-teacher.fullname" . }}-frontend
+  labels:
+    app: {{ include "ai-teacher.fullname" . }}-frontend
+spec:
+  replicas: {{ .Values.frontend.replicaCount }}
+  selector:
+    matchLabels:
+      app: {{ include "ai-teacher.fullname" . }}-frontend
+  template:
+    metadata:
+      labels:
+        app: {{ include "ai-teacher.fullname" . }}-frontend
+    spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      containers:
+        - name: frontend
+          image: "{{ .Values.frontend.image.repository }}:{{ .Values.frontend.image.tag }}"
+          imagePullPolicy: {{ .Values.frontend.image.pullPolicy }}
+          ports:
+            - containerPort: 80
+          env:
+            - name: VITE_UPLOAD_ENABLED
+              value: {{ .Values.frontend.env.VITE_UPLOAD_ENABLED | quote }}
+            - name: VITE_DELETE_ENABLED
+              value: {{ .Values.frontend.env.VITE_DELETE_ENABLED | quote }}
+            - name: VITE_APP_AUTH_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "ai-teacher.secretName" . }}
+                  key: APP_AUTH_USERNAME
+          volumeMounts:
+            - name: nginx-conf
+              mountPath: /etc/nginx/conf.d/default.conf
+              subPath: default.conf
+          resources:
+            {{- toYaml .Values.frontend.resources | nindent 12 }}
+      volumes:
+        - name: nginx-conf
+          configMap:
+            name: {{ include "ai-teacher.fullname" . }}-nginx

ai-teacher/templates/frontend-service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "ai-teacher.fullname" . }}-frontend
+spec:
+  selector:
+    app: {{ include "ai-teacher.fullname" . }}-frontend
+  ports:
+    - port: 80
+      targetPort: 80

ai-teacher/templates/ingress.yaml

@@ -0,0 +1,28 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "ai-teacher.fullname" . }}
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+spec:
+  ingressClassName: {{ .Values.ingress.className | quote }}
+  {{- if .Values.ingress.tls }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host | quote }}
+      secretName: {{ .Values.ingress.tlsSecretName | quote }}
+  {{- end }}
+  rules:
+    - host: {{ .Values.ingress.host | quote }}
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ include "ai-teacher.fullname" . }}-frontend
+                port:
+                  number: 80
+{{- end }}

ai-teacher/templates/secret.yaml

@@ -0,0 +1,17 @@
+{{- if not .Values.backend.existingSecret }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "ai-teacher.fullname" . }}-secret
+  labels:
+    app.kubernetes.io/managed-by: {{ .Release.Service }}
+    helm.sh/chart: {{ .Chart.Name }}-{{ .Chart.Version }}
+type: Opaque
+stringData:
+  DB_PASSWORD: {{ .Values.backend.secret.DB_PASSWORD | quote }}
+  OPENAI_API_KEY: {{ .Values.backend.secret.OPENAI_API_KEY | quote }}
+  APP_AUTH_USERNAME: {{ .Values.backend.secret.APP_AUTH_USERNAME | quote }}
+  APP_PASSWORD: {{ .Values.backend.secret.APP_PASSWORD | quote }}
+  S3_ACCESS_KEY_ID: {{ .Values.backend.secret.S3_ACCESS_KEY_ID | quote }}
+  S3_SECRET_ACCESS_KEY: {{ .Values.backend.secret.S3_SECRET_ACCESS_KEY | quote }}
+{{- end }}