feat: add new altinn-app helm chart

[sduranc]

Description

• Creates a new chart for common use for Altinn apps
• Includes the possibility to add (cron)jobs in the values if necessary
• Can include slos and use workload identity if desired

Related Issue(s)

• #{issue number}

Verification

• Your code builds clean without any errors or warnings
• Manual testing done (required)
• Relevant automated test added (if you find this hard, leave it and we'll help out)
• All tests run green

Documentation

• User documentation is updated with a separate linked PR in altinn-studio-docs. (if applicable)

[sduranc]

I think we shouldn't add the "common" hsts-header here and just let the app default to the hsts in -n traefik, which will be there anyway, as it's deployed by the platform @bengtfredh - what do you think?

[tjololo]

Should we make it possible to change the liveness/readiness probes?
Also should we add a default startup probe?

[bengtfredh]

I think we shouldn't add the "common" hsts-header here and just let the app default to the hsts in -n traefik, which will be there anyway, as it's deployed by the platform @bengtfredh - what do you think?

Middleware is namespaced, so apps can not use hsts defined in -n traefik. If this deployment dont add it - we need to create it another way.

[sduranc]

I think we shouldn't add the "common" hsts-header here and just let the app default to the hsts in -n traefik, which will be there anyway, as it's deployed by the platform @bengtfredh - what do you think?

Middleware is namespaced, so apps can not use hsts defined in -n traefik. If this deployment dont add it - we need to create it another way.

Ah, interesting, didn't know that. Should be added here then.

[bengtfredh]

add optional config for dual stack.

spec:
  ipFamilyPolicy: PreferDualStack
  ipFamilies:
  - IPv4
  - IPv6

[tjololo]

Would this break in a non dual-stack cluster?

[bengtfredh]

From what I can find. PreferDualStack is safe on non-dual-stack; just don’t use RequireDualStack unless you’re sure the cluster supports it.

You where thinking to make it default?

[bengtfredh]

We made it default but optional in deployment chart:
05d3acd#diff-55f3c921ec57f475e38963114bc7afc38b746a6acc33b6641182d13be3be13c8

[tjololo]

I assumed it would be ok when it says prefer, but was in doubt so asked.