From 26f4d13d47f3ec7b9479ee5309e11b819a7d926c Mon Sep 17 00:00:00 2001 From: Kochetkov S Date: Fri, 25 Sep 2026 12:07:57 +0300 Subject: [PATCH] ++ uralkal kafka rabbitmq --- clusters/uralkal/kustomization.yaml | 2 + infrastructure/kafka/uralkal/kafka.yaml | 73 ++++++++++++ .../kafka/uralkal/kustomization.yaml | 6 + .../rabbitmq/uralkal/kustomization.yaml | 6 + infrastructure/rabbitmq/uralkal/rabbitmq.yaml | 104 ++++++++++++++++++ 5 files changed, 191 insertions(+) create mode 100644 infrastructure/kafka/uralkal/kafka.yaml create mode 100644 infrastructure/kafka/uralkal/kustomization.yaml create mode 100644 infrastructure/rabbitmq/uralkal/kustomization.yaml create mode 100644 infrastructure/rabbitmq/uralkal/rabbitmq.yaml diff --git a/clusters/uralkal/kustomization.yaml b/clusters/uralkal/kustomization.yaml index 73122b5..e50900e 100644 --- a/clusters/uralkal/kustomization.yaml +++ b/clusters/uralkal/kustomization.yaml @@ -8,3 +8,5 @@ resources: - ../../infrastructure/istio-base/uralkal - ../../infrastructure/istio-pilot/uralkal - ../../infrastructure/istio-gateway/uralkal + - ../../infrastructure/rabbitmq/uralkal + - ../../infrastructure/kafka/uralkal diff --git a/infrastructure/kafka/uralkal/kafka.yaml b/infrastructure/kafka/uralkal/kafka.yaml new file mode 100644 index 0000000..54e3e12 --- /dev/null +++ b/infrastructure/kafka/uralkal/kafka.yaml @@ -0,0 +1,73 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: kafka + namespace: kafka +spec: + interval: 5m + timeout: 10m + postRenderers: + - kustomize: + patches: + - target: + group: apps + version: v1 + kind: StatefulSet + namespace: kafka + patch: |- + - op: add + path: /spec/template/spec/nodeSelector + value: + dedicated: generic + - op: add + path: /spec/template/spec/tolerations + value: [] + values: + global: + imagePullSecrets: + - regcred + defaultStorageClass: local-path + image: + pullSecrets: + - regcred + controller: + replicaCount: 1 + automountServiceAccountToken: true + persistence: + size: 8Gi + storageClass: local-path + overrideConfiguration: + offsets.topic.replication.factor: 1 + transaction.state.log.replication.factor: 1 + transaction.state.log.min.isr: 1 + default.replication.factor: 1 + min.insync.replicas: 1 + broker: + replicaCount: 0 + automountServiceAccountToken: true + listeners: + client: + protocol: SASL_SSL + sslClientAuth: "none" + provisioning: + enabled: false + sasl: + managedExistingSecret: + enabled: false + existingSecret: "" + enabledMechanisms: PLAIN,SCRAM-SHA-512 + interBrokerMechanism: PLAIN + controllerMechanism: PLAIN + client: + users: [] + passwords: "" + tls: + type: PEM + vault: + enabled: true + role: kafka + authPath: auth/kubernetes + secretPath: secrets/data/kafka/bootstrap + clusterIdKey: clusterId + interBrokerPasswordKey: interBrokerPassword + controllerPasswordKey: controllerPassword diff --git a/infrastructure/kafka/uralkal/kustomization.yaml b/infrastructure/kafka/uralkal/kustomization.yaml new file mode 100644 index 0000000..f60b1c1 --- /dev/null +++ b/infrastructure/kafka/uralkal/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base +patches: + - path: kafka.yaml diff --git a/infrastructure/rabbitmq/uralkal/kustomization.yaml b/infrastructure/rabbitmq/uralkal/kustomization.yaml new file mode 100644 index 0000000..e9a2db5 --- /dev/null +++ b/infrastructure/rabbitmq/uralkal/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ../base +patches: + - path: rabbitmq.yaml diff --git a/infrastructure/rabbitmq/uralkal/rabbitmq.yaml b/infrastructure/rabbitmq/uralkal/rabbitmq.yaml new file mode 100644 index 0000000..498bbef --- /dev/null +++ b/infrastructure/rabbitmq/uralkal/rabbitmq.yaml @@ -0,0 +1,104 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: rabbitmq + namespace: rabbitmq +spec: + interval: 5m + timeout: 10m + postRenderers: + - kustomize: + patches: + - target: + group: apps + version: v1 + kind: StatefulSet + namespace: rabbitmq + patch: |- + - op: add + path: /spec/template/spec/nodeSelector + value: + dedicated: generic + - op: add + path: /spec/template/spec/tolerations + value: [] + - target: + group: cert-manager.io + version: v1 + kind: Certificate + namespace: gateway + name: rmq-tls + patch: |- + $patch: delete + apiVersion: cert-manager.io/v1 + kind: Certificate + metadata: + name: rmq-tls + namespace: gateway + - target: + group: networking.istio.io + version: v1beta1 + kind: Gateway + namespace: gateway + name: rmq-gateway + patch: |- + $patch: delete + apiVersion: networking.istio.io/v1beta1 + kind: Gateway + metadata: + name: rmq-gateway + namespace: gateway + - target: + group: networking.istio.io + version: v1 + kind: VirtualService + namespace: rabbitmq + name: rmq-virt-service + patch: |- + $patch: delete + apiVersion: networking.istio.io/v1 + kind: VirtualService + metadata: + name: rmq-virt-service + namespace: rabbitmq + values: + global: + security: + allowInsecureImages: true + virtualService: null + gateway: null + certificate: null + metrics: + serviceMonitor: + enabled: false + default: + enabled: false + perObject: + enabled: false + detailed: + enabled: false + extraServiceMonitors: [] + replicaCount: 1 + resources: + requests: + memory: 1Gi + persistence: + storageClass: local-path + size: 10Gi + auth: + securePassword: true + enableLoopbackUser: false + existingPasswordSecret: "" + vault: + enabled: true + role: rabbitmq + authPath: auth/kubernetes + secretPath: secrets/data/rabbitmq/auth + usernameKey: username + passwordKey: password + advancedConfiguration: |- + [ + {rabbit, [ + {loopback_users, []} + ]} + ].