em-core Chart

Helm chart for deploying the CRAFT core platform — em-platform, em-user-service, em-user-portal, Keycloak, PostgreSQL and Redis.

em-core Chart

em-core deploys the CRAFT core platform to a Kubernetes cluster. It includes all services required to run the platform’s core capabilities.

Components

Component	Image	Purpose
em-platform	ghcr.io/emergenceai/em-platform	Main backend with workflow orchestration
em-user-service	ghcr.io/emergenceai/em-user-service	User management and authentication
em-user-portal	ghcr.io/emergenceai/em-user-portal	Frontend web application
keycloak	upstream Keycloak	Identity and access management
postgresql	postgres:alpine	Persistent data storage
redis	redis:alpine	In-memory caching and session storage
nginx	upstream Nginx	Ingress and load balancing

Quick start

1. Set environment variables

   export HOSTNAME=platform.example.com
   export KEYCLOAK_ADMIN_PASSWORD=<secure-password>
   export POSTGRES_PASSWORD=<secure-password>
   
2. Create namespace

   kubectl create namespace em-core
   
3. Create secrets

   kubectl create secret generic em-core-credentials \
     --namespace em-core \
     --from-literal=KEYCLOAK_ADMIN_PASSWORD=$KEYCLOAK_ADMIN_PASSWORD \
     --from-literal=POSTGRES_PASSWORD=$POSTGRES_PASSWORD
   
4. Install the chart

   helm install em-core oci://ghcr.io/emergenceai/em-charts/em-core \
     --version 0.0.8 \
     --namespace em-core \
     --set hostname=$HOSTNAME \
     --set postgresql.existingSecret=em-core-credentials \
     --set redis.existingSecret=em-core-credentials
   

Using external PostgreSQL and Redis

For production deployments, disable the bundled databases and connect to managed instances:

# values.yaml
postgresql:
  enabled: false

redis:
  enabled: false

postgresql:
  existingSecret: my-external-db-credentials  # Secret must contain: POSTGRES_HOST, POSTGRES_PORT, POSTGRES_DB, POSTGRES_USER, POSTGRES_PASSWORD

redis:
  existingSecret: my-external-db-credentials  # Secret must contain: REDIS_HOST, REDIS_PORT

Enabling HTTPS

Install cert-manager and configure a ClusterIssuer, then:

hostname: platform.example.com
schema: https

ingress:
  tls:
    enabled: true
    issuer: letsencrypt-prod

Key values

Value	Default	Description
hostname	localhost	External hostname for ingress and service discovery
schema	http	http or https
em-platform.image.repository	ghcr.io/emergenceai/em-platform	em-platform image
em-user-service.image.repository	ghcr.io/emergenceai/em-user-service	em-user-service image
em-user-portal.image.repository	ghcr.io/emergenceai/em-user-portal	em-user-portal image
postgresql.enabled	true	Deploy bundled PostgreSQL
redis.enabled	true	Deploy bundled Redis

The full values reference is in charts/em-core/values.yaml in the em-charts repository.

Related

em-data-insights Chart

Extends em-core with data analysis and insights capabilities.

em-service Chart

Base chart used by em-core for each component.

Upgrades

Chart version upgrade procedures.