From 77b8c84b71a5bc92084fe7685cce1bc828dd0abf Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Wed, 15 Jul 2026 11:05:02 +0300
Subject: [PATCH] ++ move camunda databases external and scale down

---
 .../infrastructure/patches/camunda.yaml       | 43 ++++++++++++++++---
 1 file changed, 37 insertions(+), 6 deletions(-)

diff --git a/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml b/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml
index 60dbda1..6c10a9e 100644
--- a/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml
+++ b/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml
@@ -153,6 +153,12 @@ spec:
         enabled: true
         role: camunda
         authPath: auth/kubernetes
+        secrets:
+          postgresql:
+            path: secrets/data/camunda/postgresql
+            keys:
+              password: identity-password
+              postgresPassword: postgres-password
       image:
         pullSecrets:
           - name: regcred
@@ -172,6 +178,7 @@ spec:
           console:
             redirectUrl: "https://camunda-console.contour.infra.sarex.tech"
     identityPostgresql:
+      enabled: false
       auth:
         usePasswordFiles: true
       primary:
@@ -180,7 +187,16 @@ spec:
           size: 10Gi
           storageClass: nfs01
     identityKeycloak:
+      externalDatabase:
+        host: 10.222.255.162
+        port: 5432
+        user: bn_keycloak
+        database: bitnami_keycloak
+        password: ""
+        existingSecret: ""
+        existingSecretPasswordKey: password
       postgresql:
+        enabled: false
         auth:
           usePasswordFiles: true
         primary:
@@ -201,7 +217,7 @@ spec:
             key: admin-password
           KEYCLOAK_DATABASE_PASSWORD:
             path: secrets/data/camunda/postgresql
-            key: password
+            key: keycloak-password
       global:
         storageClass: nfs01
       tolerations: []
@@ -215,6 +231,8 @@ spec:
           storageClass: nfs01
     elasticsearch:
       master:
+        replicaCount: 1
+        podAntiAffinityPreset: soft
         persistence:
           size: 10Gi
           storageClass: nfs01
@@ -236,12 +254,30 @@ spec:
           - name: regcred
       tolerations: []
     zeebe:
+      clusterSize: "1"
+      partitionCount: "1"
+      replicationFactor: "1"
       pvcStorageClassName: nfs01
       image:
         pullSecrets:
           - name: regcred
       tolerations: []
     zeebeGateway:
+      replicas: 1
+      image:
+        pullSecrets:
+          - name: regcred
+      tolerations: []
+    identity:
+      externalDatabase:
+        enabled: true
+        host: 10.222.255.162
+        port: 5432
+        username: identity
+        database: identity
+        password: ""
+        existingSecret: ""
+        existingSecretPasswordKey: password
       image:
         pullSecrets:
           - name: regcred
@@ -272,11 +308,6 @@ spec:
         pullSecrets:
           - name: regcred
       tolerations: []
-    identity:
-      image:
-        pullSecrets:
-          - name: regcred
-      tolerations: []
     webModeler:
       image:
         pullSecrets: