From a7c97027aefab2aba1a00de0119418ad589e4437 Mon Sep 17 00:00:00 2001
From: emelinda <emelin_d_a@mail.ru>
Date: Thu, 30 Jul 2026 11:51:24 +0300
Subject: [PATCH] =?UTF-8?q?feat(k3s):=20processing-k8s-init=20=E2=80=94=20?=
 =?UTF-8?q?=D0=BF=D1=80=D0=B8=D0=BC=D0=B5=D0=BD=D0=B5=D0=BD=D0=B8=D0=B5=20?=
 =?UTF-8?q?DNS-=D0=BC=D0=BE=D1=81=D1=82=D0=B0=20=D1=87=D0=B5=D1=80=D0=B5?=
 =?UTF-8?q?=D0=B7=20kubectl?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker-compose.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index 7f69c00..0354589 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -62,6 +62,26 @@ services:
         soft: 65535
         hard: 65535
 
+  # Одноразовый провижининг k3s: namespace processing + DNS-мост postgres/minio.
+  # Образ k3s содержит kubectl; server/tls перекрываем на k3s-server:6443
+  # (kubeconfig из /output даёт клиентские креды, адрес/TLS переопределяем флагами).
+  processing-k8s-init:
+    image: ${K3S_IMAGE:-rancher/k3s:v1.36.2-k3s1}
+    container_name: processing-k8s-init
+    restart: "no"
+    depends_on:
+      k3s-server:
+        condition: service_healthy
+    entrypoint: ["/bin/sh", "-ec"]
+    command:
+      - |
+        kubectl --kubeconfig /kube/config \
+          --server https://k3s-server:6443 --insecure-skip-tls-verify \
+          apply -f /manifests/
+    volumes:
+      - ./k3s/kubeconfig.yaml:/kube/config:ro,z
+      - ./k3s/manifests/processing:/manifests:ro,z
+
   gitea:
     image: ${GITEA_IMAGE:-gitea/gitea:1.22}
     container_name: gitea