sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

++ add istio routes for ugmk services

Browse Source
This commit is contained in:
Kochetkov S 2026-07-15 11:50:31 +03:00
parent 77b8c84b71
commit 26f10ce34b
2 changed files with 148 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
clusters/d8-ugmk-prod/infrastructure/kustomization.yaml
View File

@ -7,6 +7,7 @@ resources:
- ../../../infrastructure/vault
- ../../../infrastructure/postgresql
- ../../../infrastructure/zitadel
- ../../../infrastructure/istio-config
patches:
- path: ./patches/kafka.yaml
target:
@ -101,3 +102,10 @@ patches:
version: v1
kind: Namespace
name: zitadel
- path: ./patches/istio-config.yaml
target:
group: helm.toolkit.fluxcd.io
version: v2
kind: HelmRelease
name: istio-config
namespace: default

140
clusters/d8-ugmk-prod/infrastructure/patches/istio-config.yaml Normal file
View File

@ -0,0 +1,140 @@
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: istio-config
namespace: default
spec:
dependsOn: []
interval: 5m
timeout: 10m
values:
global:
env: d8-ugmk-prod
environments:
d8-ugmk-prod:
istio:
gateways:
camunda:
name: camunda-gateway
namespace: default
selector:
istio.deckhouse.io/ingress-gateway-class: istio
servers:
- hosts:
- sarex-camunda-keycloak.uralmine.com
tls:
credentialName: istio-ingress-tls
- hosts:
- sarex-camunda-identity.uralmine.com
tls:
credentialName: istio-ingress-tls
- hosts:
- sarex-camunda.uralmine.com
tls:
credentialName: istio-ingress-tls
- hosts:
- sarex-camunda-tasklist.uralmine.com
tls:
credentialName: istio-ingress-tls
- hosts:
- sarex-camunda-optimize.uralmine.com
tls:
credentialName: istio-ingress-tls
rabbitmq:
name: rabbitmq-gateway
namespace: default
selector:
istio.deckhouse.io/ingress-gateway-class: istio
servers:
- hosts:
- sarex-rabbitmq.uralmine.com
tls:
credentialName: istio-ingress-tls
zitadel:
name: zitadel-gateway
namespace: default
selector:
istio.deckhouse.io/ingress-gateway-class: istio
servers:
- hosts:
- sarex-login.uralmine.com
tls:
credentialName: istio-ingress-tls
virtualServices:
camunda-keycloak:
namespace: default
hosts:
- sarex-camunda-keycloak.uralmine.com
gateways:
- default/camunda-gateway
routes:
- path:
prefix: /
service: camunda-keycloak.camunda.svc.cluster.local
port: 80
camunda-identity:
namespace: default
hosts:
- sarex-camunda-identity.uralmine.com
gateways:
- default/camunda-gateway
routes:
- path:
prefix: /
service: camunda-identity.camunda.svc.cluster.local
port: 80
camunda-operate:
namespace: default
hosts:
- sarex-camunda.uralmine.com
gateways:
- default/camunda-gateway
routes:
- path:
prefix: /
service: camunda-operate.camunda.svc.cluster.local
port: 80
camunda-tasklist:
namespace: default
hosts:
- sarex-camunda-tasklist.uralmine.com
gateways:
- default/camunda-gateway
routes:
- path:
prefix: /
service: camunda-tasklist.camunda.svc.cluster.local
port: 80
camunda-optimize:
namespace: default
hosts:
- sarex-camunda-optimize.uralmine.com
gateways:
- default/camunda-gateway
routes:
- path:
prefix: /
service: camunda-optimize.camunda.svc.cluster.local
port: 80
rabbitmq:
namespace: default
hosts:
- sarex-rabbitmq.uralmine.com
gateways:
- default/rabbitmq-gateway
routes:
- path:
prefix: /
service: rabbitmq.rabbitmq.svc.cluster.local
port: 15672
zitadel:
namespace: default
hosts:
- sarex-login.uralmine.com
gateways:
- default/zitadel-gateway
routes:
- path:
prefix: /
service: zitadel-idp-contour.zitadel.svc.cluster.local
port: 8080