sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

++

Browse Source
This commit is contained in:
ivan 2026-07-25 20:40:22 +05:00
parent 465140806a
commit 12e4d88957
6 changed files with 37 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
apps/rfi/base/backend-deployment.yaml
View File

@ -24,12 +24,12 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true" vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: rfi vault.hashicorp.com/role: rfi
vault.hashicorp.com/agent-inject-secret-rfi-db: secrets/data/postgresql/apps/rfi vault.hashicorp.com/agent-inject-secret-rfi-db: secrets/data/apps/notes/postgres/rfi
vault.hashicorp.com/agent-inject-template-rfi-db: |- vault.hashicorp.com/agent-inject-template-rfi-db: |-
{{- with secret "secrets/data/postgresql/apps/rfi" -}} {{- with secret "secrets/data/apps/notes/postgres/rfi" -}}
DB_HOST=postgresql.rfi.svc.cluster.local DB_HOST={{ index .Data.data "host" }}
DB_PORT=5432 DB_PORT={{ index .Data.data "port" }}
DB_NAME=rfi_db DB_NAME={{ index .Data.data "database" }}
DB_USER={{ index .Data.data "username" }} DB_USER={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }} DB_PASSWORD={{ index .Data.data "password" }}
{{- end -}} {{- end -}}

10
apps/rfi/base/celery-deployment.yaml
View File

@ -24,12 +24,12 @@ spec:
vault.hashicorp.com/agent-pre-populate-only: "true" vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: auth/kubernetes vault.hashicorp.com/auth-path: auth/kubernetes
vault.hashicorp.com/role: rfi vault.hashicorp.com/role: rfi
vault.hashicorp.com/agent-inject-secret-rfi-db: secrets/data/postgresql/apps/rfi vault.hashicorp.com/agent-inject-secret-rfi-db: secrets/data/apps/notes/postgres/rfi
vault.hashicorp.com/agent-inject-template-rfi-db: |- vault.hashicorp.com/agent-inject-template-rfi-db: |-
{{- with secret "secrets/data/postgresql/apps/rfi" -}} {{- with secret "secrets/data/apps/notes/postgres/rfi" -}}
DB_HOST=postgresql.rfi.svc.cluster.local DB_HOST={{ index .Data.data "host" }}
DB_PORT=5432 DB_PORT={{ index .Data.data "port" }}
DB_NAME=rfi_db DB_NAME={{ index .Data.data "database" }}
DB_USER={{ index .Data.data "username" }} DB_USER={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }} DB_PASSWORD={{ index .Data.data "password" }}
{{- end -}} {{- end -}}

1
apps/rfi/base/namespace.yaml
View File

@ -5,3 +5,4 @@ metadata:
name: rfi name: rfi
labels: labels:
istio-injection: enabled istio-injection: enabled
security.deckhouse.io/pod-policy: privileged

11
apps/rfi/d8-ugmk-prod/kustomization.yaml Normal file
View File

@ -0,0 +1,11 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: rfi
resources:
- ../base
patches:
- path: patch.yaml
target:
kind: HelmRelease
name: frontend

13
apps/rfi/d8-ugmk-prod/patch.yaml Normal file
View File

@ -0,0 +1,13 @@
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: frontend
namespace: rfi
spec:
values:
services:
frontend:
deployment:
replicaCount:
_default: 1

3
clusters/d8-ugmk-prod/kustomization.yaml
View File

@ -23,4 +23,5 @@ resources:
- ../../apps/remarks/d8-ugmk-prod - ../../apps/remarks/d8-ugmk-prod
- ../../apps/auth-flow/d8-ugmk-prod - ../../apps/auth-flow/d8-ugmk-prod
- ../../apps/notes/d8-ugmk-prod - ../../apps/notes/d8-ugmk-prod
- ../../apps/workspaces/d8-ugmk-prod - ../../apps/workspaces/d8-ugmk-prod
- ../../apps/rfi/d8-ugmk-prod