Compare commits
1 Commits
master
...
INFRA-2004
| Author | SHA1 | Date | |
|---|---|---|---|
| 0d1023a84a |
File diff suppressed because it is too large
Load Diff
@ -1,27 +0,0 @@
|
||||
# This manifest was generated by flux. DO NOT EDIT.
|
||||
---
|
||||
apiVersion: source.toolkit.fluxcd.io/v1
|
||||
kind: GitRepository
|
||||
metadata:
|
||||
name: flux-system
|
||||
namespace: flux-system
|
||||
spec:
|
||||
interval: 1m0s
|
||||
ref:
|
||||
branch: master
|
||||
secretRef:
|
||||
name: flux-system
|
||||
url: https://gitlab.sarex.io/infra/iac.git
|
||||
---
|
||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
||||
kind: Kustomization
|
||||
metadata:
|
||||
name: flux-system
|
||||
namespace: flux-system
|
||||
spec:
|
||||
interval: 10m0s
|
||||
path: ./clusters/yc-k8s-test-02
|
||||
prune: true
|
||||
sourceRef:
|
||||
kind: GitRepository
|
||||
name: flux-system
|
||||
@ -1,5 +0,0 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- gotk-components.yaml
|
||||
- gotk-sync.yaml
|
||||
@ -1,12 +0,0 @@
|
||||
---
|
||||
apiVersion: source.toolkit.fluxcd.io/v1
|
||||
kind: HelmRepository
|
||||
metadata:
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
spec:
|
||||
type: oci
|
||||
interval: 10m0s
|
||||
url: oci://cr.yandex/crp3ccidau046kdj8g9q/charts
|
||||
secretRef:
|
||||
name: yc-cr-auth
|
||||
@ -1,125 +0,0 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- ../../../infrastructure/istio-base
|
||||
- ../../../infrastructure/istio-pilot
|
||||
- ../../../infrastructure/istio-gateway
|
||||
- ../../../infrastructure/istio-config
|
||||
- ../../../infrastructure/dashboard
|
||||
- ../../../infrastructure/local-path-provisioner
|
||||
- ../../../infrastructure/minio
|
||||
- ../../../infrastructure/rabbitmq
|
||||
- ../../../infrastructure/kafka
|
||||
- ../../../infrastructure/redis
|
||||
- ../../../infrastructure/camunda
|
||||
- ./postgresql-namespace.yaml
|
||||
- ../../../infrastructure/postgresql
|
||||
- ../../../infrastructure/zitadel
|
||||
- ../../../infrastructure/keycloak
|
||||
- ../../../infrastructure/vault
|
||||
patches:
|
||||
- path: ./patches/istio-base.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: istio-base
|
||||
namespace: istio-system
|
||||
- path: ./patches/istio-pilot.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: istiod
|
||||
namespace: istio-system
|
||||
- path: ./patches/istio-gateway.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: ingressgateway
|
||||
namespace: istio-system
|
||||
- path: ./patches/istio-config.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: istio-config
|
||||
namespace: default
|
||||
- path: ./patches/dashboard.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
- path: ./patches/local-path-provisioner.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: local-path-provisioner
|
||||
namespace: local-path-provisioner
|
||||
- path: ./patches/minio.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: minio
|
||||
namespace: minio
|
||||
- path: ./patches/rabbitmq.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: rabbitmq
|
||||
namespace: rabbitmq
|
||||
- path: ./patches/kafka.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: kafka
|
||||
namespace: kafka
|
||||
- path: ./patches/redis.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: redis
|
||||
namespace: redis
|
||||
- path: ./patches/camunda.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: camunda
|
||||
namespace: camunda
|
||||
- path: ./patches/postgresql.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: postgresql
|
||||
namespace: postgresql
|
||||
- path: ./patches/zitadel.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: zitadel
|
||||
namespace: zitadel
|
||||
- path: ./patches/keycloak.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: keycloak
|
||||
namespace: keycloak
|
||||
- path: ./patches/vault.yaml
|
||||
target:
|
||||
group: helm.toolkit.fluxcd.io
|
||||
version: v2
|
||||
kind: HelmRelease
|
||||
name: vault
|
||||
namespace: vault
|
||||
@ -1,155 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: camunda
|
||||
namespace: camunda
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 15m
|
||||
values:
|
||||
global:
|
||||
vault:
|
||||
enabled: true
|
||||
role: camunda
|
||||
authPath: auth/kubernetes
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
identity:
|
||||
auth:
|
||||
publicIssuerUrl: "https://camunda-keycloak.contour.infra.sarex.tech/auth/realms/camunda-platform"
|
||||
identity:
|
||||
redirectUrl: "https://camunda-identity.contour.infra.sarex.tech"
|
||||
operate:
|
||||
redirectUrl: "https://camunda-operate.contour.infra.sarex.tech"
|
||||
tasklist:
|
||||
redirectUrl: "https://camunda-tasklist.contour.infra.sarex.tech"
|
||||
optimize:
|
||||
redirectUrl: "https://camunda-optimize.contour.infra.sarex.tech"
|
||||
webModeler:
|
||||
redirectUrl: "https://camunda-web-modeler.contour.infra.sarex.tech"
|
||||
console:
|
||||
redirectUrl: "https://camunda-console.contour.infra.sarex.tech"
|
||||
identityPostgresql:
|
||||
auth:
|
||||
usePasswordFiles: true
|
||||
primary:
|
||||
automountServiceAccountToken: true
|
||||
persistence:
|
||||
size: 10Gi
|
||||
storageClass: local-path
|
||||
identityKeycloak:
|
||||
postgresql:
|
||||
auth:
|
||||
usePasswordFiles: true
|
||||
primary:
|
||||
automountServiceAccountToken: true
|
||||
persistence:
|
||||
size: 10Gi
|
||||
storageClass: local-path
|
||||
vaultEnv:
|
||||
enabled: true
|
||||
role: camunda
|
||||
authPath: auth/kubernetes
|
||||
envFiles:
|
||||
KEYCLOAK_ADMIN_PASSWORD:
|
||||
path: secrets/data/camunda/keycloak-admin
|
||||
key: admin-password
|
||||
KEYCLOAK_PASSWORD:
|
||||
path: secrets/data/camunda/keycloak-admin
|
||||
key: admin-password
|
||||
KEYCLOAK_DATABASE_PASSWORD:
|
||||
path: secrets/data/camunda/postgresql
|
||||
key: password
|
||||
global:
|
||||
storageClass: local-path
|
||||
tolerations: []
|
||||
postgresql:
|
||||
auth:
|
||||
usePasswordFiles: true
|
||||
primary:
|
||||
automountServiceAccountToken: true
|
||||
persistence:
|
||||
size: 10Gi
|
||||
storageClass: local-path
|
||||
elasticsearch:
|
||||
master:
|
||||
persistence:
|
||||
size: 10Gi
|
||||
storageClass: local-path
|
||||
tolerations: []
|
||||
metrics:
|
||||
enabled: false
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
prometheusRule:
|
||||
enabled: false
|
||||
tolerations: []
|
||||
camundaCanary:
|
||||
enabled: false
|
||||
prometheusServiceMonitor:
|
||||
enabled: false
|
||||
console:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
tolerations: []
|
||||
zeebe:
|
||||
pvcStorageClassName: local-path
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
tolerations: []
|
||||
zeebeGateway:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
tolerations: []
|
||||
operate:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
serviceAccount:
|
||||
automountServiceAccountToken: true
|
||||
tolerations: []
|
||||
tasklist:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
serviceAccount:
|
||||
automountServiceAccountToken: true
|
||||
tolerations: []
|
||||
optimize:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
serviceAccount:
|
||||
automountServiceAccountToken: true
|
||||
tolerations: []
|
||||
executionIdentity:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
tolerations: []
|
||||
identity:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
tolerations: []
|
||||
webModeler:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
restapi:
|
||||
tolerations: []
|
||||
webapp:
|
||||
tolerations: []
|
||||
websockets:
|
||||
tolerations: []
|
||||
connectors:
|
||||
image:
|
||||
pullSecrets:
|
||||
- name: regcred
|
||||
serviceAccount:
|
||||
automountServiceAccountToken: true
|
||||
tolerations: []
|
||||
@ -1,25 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: dashboard
|
||||
namespace: kubernetes-dashboard
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
destinationRule:
|
||||
enabled: true
|
||||
host: "dashboard-kong-proxy"
|
||||
tlsMode: "DISABLE"
|
||||
virtualService:
|
||||
enabled: false
|
||||
gateway:
|
||||
enabled: false
|
||||
app:
|
||||
image:
|
||||
pullSecrets:
|
||||
- regcred
|
||||
kong:
|
||||
image:
|
||||
pullSecrets:
|
||||
- regcred
|
||||
@ -1,8 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: istio-base
|
||||
namespace: istio-system
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
@ -1,640 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: istio-config
|
||||
namespace: default
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
global:
|
||||
env: contour
|
||||
environments:
|
||||
contour:
|
||||
certManager:
|
||||
certificates:
|
||||
platform-tls:
|
||||
dnsNames:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
minio-tls:
|
||||
dnsNames:
|
||||
- minio.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
zitadel-tls:
|
||||
dnsNames:
|
||||
- zitadel.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
dashboard-tls:
|
||||
dnsNames:
|
||||
- dashboard.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
rabbitmq-tls:
|
||||
dnsNames:
|
||||
- rabbitmq.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
keycloak-tls:
|
||||
dnsNames:
|
||||
- keycloak.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
glitchtip-tls:
|
||||
dnsNames:
|
||||
- glitchtip.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
openobserve-tls:
|
||||
dnsNames:
|
||||
- openobserve.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
camunda-keycloak-tls:
|
||||
dnsNames:
|
||||
- camunda-keycloak.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
camunda-identity-tls:
|
||||
dnsNames:
|
||||
- camunda-identity.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
camunda-operate-tls:
|
||||
dnsNames:
|
||||
- camunda-operate.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
camunda-tasklist-tls:
|
||||
dnsNames:
|
||||
- camunda-tasklist.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
camunda-optimize-tls:
|
||||
dnsNames:
|
||||
- camunda-optimize.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
vault-tls:
|
||||
dnsNames:
|
||||
- vault.contour.infra.sarex.tech
|
||||
issuerRef:
|
||||
name: letsencrypt-issuer-istio
|
||||
kind: ClusterIssuer
|
||||
istio:
|
||||
gateways:
|
||||
platform:
|
||||
name: platform-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: platform-tls
|
||||
minio:
|
||||
name: minio-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- minio.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: minio-tls
|
||||
zitadel:
|
||||
name: zitadel-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- zitadel.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: zitadel-tls
|
||||
dashboard:
|
||||
name: dashboard-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- dashboard.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: dashboard-tls
|
||||
rabbitmq:
|
||||
name: rabbitmq-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- rabbitmq.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: rabbitmq-tls
|
||||
keycloak:
|
||||
name: keycloak-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- keycloak.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: keycloak-tls
|
||||
glitchtip:
|
||||
name: glitchtip-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- glitchtip.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: glitchtip-tls
|
||||
openobserve:
|
||||
name: openobserve-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- openobserve.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: openobserve-tls
|
||||
vault:
|
||||
name: vault-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- vault.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: vault-tls
|
||||
camunda:
|
||||
name: camunda-gateway
|
||||
namespace: gateway
|
||||
servers:
|
||||
- hosts:
|
||||
- camunda-keycloak.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: camunda-keycloak-tls
|
||||
- hosts:
|
||||
- camunda-identity.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: camunda-identity-tls
|
||||
- hosts:
|
||||
- camunda-operate.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: camunda-operate-tls
|
||||
- hosts:
|
||||
- camunda-tasklist.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: camunda-tasklist-tls
|
||||
- hosts:
|
||||
- camunda-optimize.contour.infra.sarex.tech
|
||||
tls:
|
||||
credentialName: camunda-optimize-tls
|
||||
virtualServices:
|
||||
platform:
|
||||
name: sarex-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /admin/
|
||||
service: backend-svc.django.svc.cluster.local
|
||||
port: 80
|
||||
|
||||
- path:
|
||||
prefix: /api/
|
||||
service: backend-svc.django.svc.cluster.local
|
||||
port: 80
|
||||
|
||||
- path:
|
||||
prefix: /
|
||||
service: frontend-svc.django.svc.cluster.local
|
||||
port: 80
|
||||
gateway-platform:
|
||||
name: pdm-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /gateway/
|
||||
rewrite: /
|
||||
service: pdm-svc.documentations.svc.cluster.local
|
||||
port: 80
|
||||
resources-admin:
|
||||
name: resources-admin-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /resource-management
|
||||
rewrite: /resource-management
|
||||
service: backend-svc.resources.svc.cluster.local
|
||||
port: 80
|
||||
srx-admin-frontend:
|
||||
name: srx-admin-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /control-interface/
|
||||
rewrite: /
|
||||
service: frontend-svc.control-interface.svc.cluster.local
|
||||
port: 80
|
||||
workflows-frontend:
|
||||
name: workflows-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /workflows/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.processing.svc.cluster.local
|
||||
port: 80
|
||||
- path:
|
||||
prefix: /workflows/
|
||||
rewrite: /
|
||||
service: frontend-svc.processing.svc.cluster.local
|
||||
port: 80
|
||||
eav-api:
|
||||
name: eav-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /eav/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.eav.svc.cluster.local
|
||||
port: 80
|
||||
issues-api:
|
||||
name: issues-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /issues/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.issues.svc.cluster.local
|
||||
port: 80
|
||||
flows-api:
|
||||
name: flows-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /flows/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.flows.svc.cluster.local
|
||||
port: 80
|
||||
rfi-api:
|
||||
name: rfi-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /rfi/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.rfi.svc.cluster.local
|
||||
port: 80
|
||||
transmittals-api:
|
||||
name: flows-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /transmittals/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.transmittal.svc.cluster.local
|
||||
port: 80
|
||||
workspaces-api:
|
||||
name: workspaces-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /workspaces/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.workspaces.svc.cluster.local
|
||||
port: 80
|
||||
documentations-frontend:
|
||||
name: documentations-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /documentations/static/
|
||||
rewrite: /
|
||||
service: frontend-svc.documentations.svc.cluster.local
|
||||
port: 80
|
||||
transmittal-frontend:
|
||||
name: transmittal-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /transmittal/static/
|
||||
rewrite: /
|
||||
service: frontend-svc.transmittal.svc.cluster.local
|
||||
port: 80
|
||||
documentations-api:
|
||||
name: documentations-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /documentations/api/
|
||||
rewrite: /api/
|
||||
service: backend-api-svc.documentations.svc.cluster.local
|
||||
port: 80
|
||||
mapper-api:
|
||||
name: mapper-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /mapper/api/
|
||||
rewrite: /api/
|
||||
service: backend-svc.mapper.svc.cluster.local
|
||||
port: 80
|
||||
filestream-api:
|
||||
name: documentations-filestream-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /files/api/
|
||||
rewrite: /api/
|
||||
service: backend-filestream-svc.documentations.svc.cluster.local
|
||||
port: 80
|
||||
issues-frontend:
|
||||
name: issues-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /issues/static/
|
||||
rewrite: /
|
||||
service: frontend-svc.issues.svc.cluster.local
|
||||
port: 80
|
||||
flows-frontend:
|
||||
name: flows-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /flows/static/
|
||||
rewrite: /
|
||||
service: frontend-svc.flows.svc.cluster.local
|
||||
port: 80
|
||||
reviews-frontend:
|
||||
name: reviews-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /reviews/static/
|
||||
rewrite: /
|
||||
service: frontend-svc.reviews.svc.cluster.local
|
||||
port: 80
|
||||
rfi-frontend:
|
||||
name: rfi-frontend-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- sarex.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/platform-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /rfi/static/
|
||||
rewrite: /
|
||||
service: frontend-svc.rfi.svc.cluster.local
|
||||
port: 80
|
||||
vault:
|
||||
name: vault-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- vault.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/vault-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: vault-vault-contour.vault.svc.cluster.local
|
||||
port: 8200
|
||||
minio:
|
||||
name: minio-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- minio.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/minio-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /console/
|
||||
service: minio-console.minio.svc.cluster.local
|
||||
port: 9001
|
||||
minio-api:
|
||||
name: minio-api-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- minio.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/minio-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: minio.minio.svc.cluster.local
|
||||
port: 9000
|
||||
zitadel:
|
||||
name: zitadel-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- zitadel.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/zitadel-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: zitadel-idp-contour.zitadel.svc.cluster.local
|
||||
port: 8080
|
||||
dashboard:
|
||||
name: dashboard-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- dashboard.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/dashboard-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: dashboard-kong-proxy.kubernetes-dashboard.svc.cluster.local
|
||||
port: 80
|
||||
rabbitmq:
|
||||
name: rabbitmq-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- rabbitmq.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/rabbitmq-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: rabbitmq.rabbitmq.svc.cluster.local
|
||||
port: 15672
|
||||
keycloak:
|
||||
name: keycloak-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- keycloak.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/keycloak-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: keycloak-keycloak-contour.keycloak.svc.cluster.local
|
||||
port: 80
|
||||
glitchtip:
|
||||
name: glitchtip-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- glitchtip.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/glitchtip-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: glitchtip-web.glitchtip.svc.cluster.local
|
||||
port: 8000
|
||||
openobserve:
|
||||
name: openobserve-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- openobserve.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/openobserve-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: openobserve-web.openobserve.svc.cluster.local
|
||||
port: 5080
|
||||
camunda-keycloak:
|
||||
name: camunda-keycloak-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- camunda-keycloak.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/camunda-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: camunda-keycloak.camunda.svc.cluster.local
|
||||
port: 80
|
||||
camunda-identity:
|
||||
name: camunda-identity-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- camunda-identity.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/camunda-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: camunda-identity.camunda.svc.cluster.local
|
||||
port: 80
|
||||
camunda-operate:
|
||||
name: camunda-operate-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- camunda-operate.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/camunda-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: camunda-operate.camunda.svc.cluster.local
|
||||
port: 80
|
||||
camunda-tasklist:
|
||||
name: camunda-tasklist-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- camunda-tasklist.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/camunda-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: camunda-tasklist.camunda.svc.cluster.local
|
||||
port: 80
|
||||
camunda-optimize:
|
||||
name: camunda-optimize-virt-service
|
||||
namespace: gateway
|
||||
hosts:
|
||||
- camunda-optimize.contour.infra.sarex.tech
|
||||
gateways:
|
||||
- gateway/camunda-gateway
|
||||
routes:
|
||||
- path:
|
||||
prefix: /
|
||||
service: camunda-optimize.camunda.svc.cluster.local
|
||||
port: 80
|
||||
@ -1,20 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: ingressgateway
|
||||
namespace: istio-system
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
dependsOn:
|
||||
- name: istio-base
|
||||
namespace: istio-system
|
||||
- name: istiod
|
||||
namespace: istio-system
|
||||
values:
|
||||
_internal_defaults_do_not_set:
|
||||
replicaCount: 1
|
||||
autoscaling:
|
||||
enabled: false
|
||||
minReplicas: 1
|
||||
maxReplicas: 1
|
||||
@ -1,11 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: istiod
|
||||
namespace: istio-system
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
dependsOn:
|
||||
- name: istio-base
|
||||
namespace: istio-system
|
||||
@ -1,57 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: kafka
|
||||
namespace: kafka
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
global:
|
||||
imagePullSecrets:
|
||||
- regcred
|
||||
defaultStorageClass: local-path
|
||||
image:
|
||||
pullSecrets:
|
||||
- regcred
|
||||
controller:
|
||||
replicaCount: 1
|
||||
automountServiceAccountToken: true
|
||||
persistence:
|
||||
size: 8Gi
|
||||
storageClass: local-path
|
||||
overrideConfiguration:
|
||||
offsets.topic.replication.factor: 1
|
||||
transaction.state.log.replication.factor: 1
|
||||
transaction.state.log.min.isr: 1
|
||||
default.replication.factor: 1
|
||||
min.insync.replicas: 1
|
||||
broker:
|
||||
replicaCount: 0
|
||||
automountServiceAccountToken: true
|
||||
listeners:
|
||||
client:
|
||||
protocol: SASL_SSL
|
||||
sslClientAuth: "none"
|
||||
provisioning:
|
||||
enabled: false
|
||||
sasl:
|
||||
managedExistingSecret:
|
||||
enabled: false
|
||||
existingSecret: ""
|
||||
enabledMechanisms: PLAIN,SCRAM-SHA-512
|
||||
interBrokerMechanism: PLAIN
|
||||
controllerMechanism: PLAIN
|
||||
client:
|
||||
users: []
|
||||
passwords: ""
|
||||
tls:
|
||||
type: PEM
|
||||
vault:
|
||||
enabled: true
|
||||
role: kafka
|
||||
authPath: auth/kubernetes
|
||||
secretPath: secrets/data/kafka/bootstrap
|
||||
clusterIdKey: clusterId
|
||||
interBrokerPasswordKey: interBrokerPassword
|
||||
controllerPasswordKey: controllerPassword
|
||||
@ -1,52 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: keycloak
|
||||
namespace: keycloak
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 15m
|
||||
dependsOn:
|
||||
- name: postgresql
|
||||
namespace: postgresql
|
||||
values:
|
||||
global:
|
||||
defaultStorageClass: local-path
|
||||
imageRegistry: ""
|
||||
persistence:
|
||||
enabled: true
|
||||
storageClass: local-path
|
||||
size: 10Gi
|
||||
postgresql:
|
||||
enabled: false
|
||||
vaultEnv:
|
||||
enabled: true
|
||||
role: keycloak
|
||||
authPath: auth/kubernetes
|
||||
envFiles:
|
||||
KEYCLOAK_ADMIN_PASSWORD:
|
||||
path: secrets/data/keycloak/admin
|
||||
key: password
|
||||
KEYCLOAK_PASSWORD:
|
||||
path: secrets/data/keycloak/admin
|
||||
key: password
|
||||
KEYCLOAK_DATABASE_HOST:
|
||||
path: secrets/data/keycloak/postgresql
|
||||
key: host
|
||||
KEYCLOAK_DATABASE_PORT:
|
||||
path: secrets/data/keycloak/postgresql
|
||||
key: port
|
||||
KEYCLOAK_DATABASE_USER:
|
||||
path: secrets/data/keycloak/postgresql
|
||||
key: user
|
||||
KEYCLOAK_DATABASE_NAME:
|
||||
path: secrets/data/keycloak/postgresql
|
||||
key: database
|
||||
KEYCLOAK_DATABASE_PASSWORD:
|
||||
path: secrets/data/keycloak/postgresql
|
||||
key: password
|
||||
externalDatabase:
|
||||
host: "postgresql.postgresql.svc.cluster.local"
|
||||
port: 5432
|
||||
user: keycloak
|
||||
database: keycloak
|
||||
@ -1,53 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: local-path-provisioner
|
||||
namespace: local-path-provisioner
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
replicaCount: 1
|
||||
image:
|
||||
repository: cr.yandex/crp3ccidau046kdj8g9q/contour/local-path-provisioner-nn/local-path-provisioner
|
||||
tag: v0.0.24
|
||||
pullPolicy: IfNotPresent
|
||||
helperImage:
|
||||
repository: cr.yandex/crp3ccidau046kdj8g9q/contour/local-path-provisioner-nn/busybox
|
||||
tag: latest
|
||||
defaultSettings:
|
||||
registrySecret: null
|
||||
privateRegistry:
|
||||
registryUrl: null
|
||||
registryUser: null
|
||||
registryPasswd: null
|
||||
imagePullSecrets:
|
||||
- name: regcred
|
||||
nameOverride: ""
|
||||
fullnameOverride: ""
|
||||
storageClass:
|
||||
create: true
|
||||
defaultClass: false
|
||||
name: local-path
|
||||
reclaimPolicy: Delete
|
||||
nodePathMap:
|
||||
- node: DEFAULT_PATH_FOR_NON_LISTED_NODES
|
||||
paths:
|
||||
- /opt/local-path-provisioner
|
||||
resources: {}
|
||||
rbac:
|
||||
create: true
|
||||
serviceAccount:
|
||||
create: true
|
||||
name: ""
|
||||
nodeSelector: {}
|
||||
tolerations: []
|
||||
affinity: {}
|
||||
configmap:
|
||||
name: local-path-config
|
||||
setup: |-
|
||||
set -eu
|
||||
mkdir -m 0777 -p "$VOL_DIR"
|
||||
teardown: |-
|
||||
set -eu
|
||||
rm -rf "$VOL_DIR"
|
||||
@ -1,39 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: minio
|
||||
namespace: minio
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
nameOverride: "minio"
|
||||
mode: standalone
|
||||
environment:
|
||||
MINIO_SERVER_URL: "https://minio.contour.infra.sarex.tech"
|
||||
MINIO_BROWSER_REDIRECT_URL: "https://minio.contour.infra.sarex.tech/console/"
|
||||
MINIO_API_CORS_ALLOW_ORIGIN: "https://minio.contour.infra.sarex.tech"
|
||||
imagePullSecrets:
|
||||
- name: regcred
|
||||
vaultRoot:
|
||||
enabled: true
|
||||
role: minio
|
||||
authPath: auth/kubernetes
|
||||
secretPath: secrets/data/minio/admin
|
||||
rootUserKey: rootUser
|
||||
rootPasswordKey: rootPassword
|
||||
drivesPerNode: 1
|
||||
replicas: 1
|
||||
nodeSelector:
|
||||
dedicated: s3
|
||||
tolerations:
|
||||
- key: dedicated
|
||||
operator: Equal
|
||||
value: s3
|
||||
effect: NoSchedule
|
||||
persistence:
|
||||
storageClass: local-path
|
||||
size: 100Gi
|
||||
resources:
|
||||
requests:
|
||||
memory: 1Gi
|
||||
@ -1,419 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: postgresql
|
||||
namespace: postgresql
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 2h
|
||||
|
||||
install:
|
||||
timeout: 2h
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
timeout: 2h
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
security:
|
||||
allowInsecureImages: true
|
||||
defaultStorageClass: local-path
|
||||
postgresql:
|
||||
auth:
|
||||
username: ""
|
||||
database: ""
|
||||
secretKeys:
|
||||
userPasswordKey: "postgres-password"
|
||||
auth:
|
||||
username: ""
|
||||
database: ""
|
||||
secretKeys:
|
||||
userPasswordKey: "postgres-password"
|
||||
image:
|
||||
registry: cr.yandex/crp3ccidau046kdj8g9q
|
||||
repository: contour/postgresql
|
||||
tag: 17.0.7
|
||||
pullPolicy: Always
|
||||
metrics:
|
||||
enabled: false
|
||||
prometheusRule:
|
||||
enabled: false
|
||||
primary:
|
||||
automountServiceAccountToken: true
|
||||
containerSecurityContext:
|
||||
readOnlyRootFilesystem: false
|
||||
persistence:
|
||||
storageClass: local-path
|
||||
size: 20Gi
|
||||
customLivenessProbe:
|
||||
exec:
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- exec pg_isready -U "postgres" -d postgres -h 127.0.0.1 -p 5432
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
successThreshold: 1
|
||||
failureThreshold: 6
|
||||
customReadinessProbe:
|
||||
exec:
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- exec pg_isready -U "postgres" -d postgres -h 127.0.0.1 -p 5432
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
successThreshold: 1
|
||||
failureThreshold: 6
|
||||
customStartupProbe:
|
||||
exec:
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- exec pg_isready -U "postgres" -d postgres -h 127.0.0.1 -p 5432
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
successThreshold: 1
|
||||
failureThreshold: 6
|
||||
nodeSelector:
|
||||
dedicated: db
|
||||
tolerations:
|
||||
- key: dedicated
|
||||
operator: Equal
|
||||
value: db
|
||||
effect: NoSchedule
|
||||
contour:
|
||||
enabled: true
|
||||
adminUser: "postgres"
|
||||
vault:
|
||||
enabled: true
|
||||
role: postgresql
|
||||
authPath: auth/kubernetes
|
||||
secretPath: secrets/data/postgresql/admin
|
||||
secretKey: postgres-password
|
||||
usersSecretPath: secrets/data/postgresql/users
|
||||
sharedPreloadLibraries: "timescaledb,pg_stat_statements"
|
||||
databases:
|
||||
# - name: attachments_db
|
||||
# user: attachments
|
||||
# passwordKey: attachments
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
# dumpKey: attachments.sql
|
||||
- name: zitadel
|
||||
user: zitadel
|
||||
passwordKey: zitadel
|
||||
extensions: []
|
||||
restoreFromDump: false
|
||||
- name: keycloak
|
||||
user: keycloak
|
||||
passwordKey: keycloak
|
||||
extensions: []
|
||||
restoreFromDump: false
|
||||
- name: automation
|
||||
user: automation
|
||||
passwordKey: automation
|
||||
extensions:
|
||||
- pg_stat_statements
|
||||
- uuid-ossp
|
||||
restoreFromDump: false
|
||||
|
||||
- name: bi
|
||||
user: bi
|
||||
passwordKey: bi
|
||||
extensions:
|
||||
- ltree
|
||||
- pg_stat_statements
|
||||
- uuid-ossp
|
||||
restoreFromDump: false
|
||||
- name: glitchtip
|
||||
user: glitchtip
|
||||
passwordKey: glitchtip
|
||||
extensions: []
|
||||
restoreFromDump: false
|
||||
- name: openobserve
|
||||
user: openobserve
|
||||
passwordKey: openobserve
|
||||
extensions: []
|
||||
restoreFromDump: false
|
||||
|
||||
# - name: camunda_db
|
||||
# user: camunda
|
||||
# passwordKey: camunda
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: camunda_new
|
||||
# user: camunda
|
||||
# passwordKey: camunda
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: checklists
|
||||
# user: checklists_user
|
||||
# passwordKey: checklists
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: comparator
|
||||
# user: prod_user
|
||||
# passwordKey: comparator
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: comparisons
|
||||
# user: comparisons_prod
|
||||
# passwordKey: comparisons
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: contracts_prod_db
|
||||
# user: prod_user
|
||||
# passwordKey: contracts
|
||||
# extensions:
|
||||
# - btree_gist
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: data-engine_db
|
||||
# user: data-engine
|
||||
# passwordKey: data-engine
|
||||
# extensions:
|
||||
# - btree_gin
|
||||
# - btree_gist
|
||||
# - hstore
|
||||
# - ltree
|
||||
# - pg_partman
|
||||
# - pg_trgm
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: drawings
|
||||
# user: prod_user
|
||||
# passwordKey: drawings
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: flow_db
|
||||
# user: flow
|
||||
# passwordKey: flow
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: inspections
|
||||
# user: prod_user
|
||||
# passwordKey: inspections
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# - postgis
|
||||
# - timescaledb
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: issues
|
||||
# user: prod_user
|
||||
# passwordKey: issues
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# - pg_trgm
|
||||
# - postgis
|
||||
# - timescaledb
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: mailer
|
||||
# user: mailer
|
||||
# passwordKey: mailer
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: notes_db
|
||||
# user: note
|
||||
# passwordKey: notes
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: pm_db
|
||||
# user: pm
|
||||
# passwordKey: pm
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: premises_db
|
||||
# user: premises
|
||||
# passwordKey: premises
|
||||
# extensions:
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: preprod_sarex_db
|
||||
# user: preprod_sarex
|
||||
# passwordKey: preprod-sarex
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: processing
|
||||
# user: prod_user
|
||||
# passwordKey: processing
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: pulse_db
|
||||
# user: pulse
|
||||
# passwordKey: pulse
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: remarks
|
||||
# user: prod_user
|
||||
# passwordKey: remarks
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: resources
|
||||
# user: prod_user
|
||||
# passwordKey: resources
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# - postgis
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: restored_flow_db
|
||||
# user: flow
|
||||
# passwordKey: flow
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: rfi
|
||||
# user: rfi_user
|
||||
# passwordKey: rfi
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: sarex_compute
|
||||
# user: prod_user
|
||||
# passwordKey: sarex-compute
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: sarex_db
|
||||
# user: sarex
|
||||
# passwordKey: sarex
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: srx-data-engine
|
||||
# user: admin_user
|
||||
# passwordKey: srx-data-engine
|
||||
# extensions:
|
||||
# - btree_gist
|
||||
# - ltree
|
||||
# - pg_partman
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: subscriptions
|
||||
# user: prod_user
|
||||
# passwordKey: subscriptions
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# - postgis
|
||||
# - timescaledb
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: superset
|
||||
# user: sarex
|
||||
# passwordKey: superset
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: system_log
|
||||
# user: prod_user
|
||||
# passwordKey: system-log
|
||||
# extensions:
|
||||
# - ltree
|
||||
# - pg_stat_statements
|
||||
# - timescaledb
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: transmittal
|
||||
# user: transmittal
|
||||
# passwordKey: transmittal
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: workspaces
|
||||
# user: prod_user
|
||||
# passwordKey: workspaces
|
||||
# extensions:
|
||||
# - pg_stat_statements
|
||||
# - uuid-ossp
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: bim
|
||||
# user: bim
|
||||
# passwordKey: bim
|
||||
# extensions: []
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: documentations
|
||||
# user: documentations
|
||||
# passwordKey: documentations
|
||||
# extensions: []
|
||||
# restoreFromDump: false
|
||||
|
||||
# - name: eav
|
||||
# user: eav
|
||||
# passwordKey: eav
|
||||
# extensions: []
|
||||
# restoreFromDump: false
|
||||
s3-proxy:
|
||||
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"
|
||||
@ -1,42 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: rabbitmq
|
||||
namespace: rabbitmq
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
global:
|
||||
security:
|
||||
allowInsecureImages: true
|
||||
virtualService: null
|
||||
gateway: null
|
||||
certificate: null
|
||||
metrics:
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
default:
|
||||
enabled: false
|
||||
perObject:
|
||||
enabled: false
|
||||
detailed:
|
||||
enabled: false
|
||||
extraServiceMonitors: []
|
||||
replicaCount: 1
|
||||
resources:
|
||||
requests:
|
||||
memory: 1Gi
|
||||
persistence:
|
||||
storageClass: local-path
|
||||
size: 10Gi
|
||||
auth:
|
||||
securePassword: true
|
||||
existingPasswordSecret: ""
|
||||
vault:
|
||||
enabled: true
|
||||
role: rabbitmq
|
||||
authPath: auth/kubernetes
|
||||
secretPath: secrets/data/rabbitmq/auth
|
||||
usernameKey: username
|
||||
passwordKey: password
|
||||
@ -1,27 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: redis
|
||||
namespace: redis
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
global:
|
||||
defaultStorageClass: local-path
|
||||
architecture: standalone
|
||||
auth:
|
||||
enabled: true
|
||||
sentinel:
|
||||
enabled: false
|
||||
replica:
|
||||
replicaCount: 0
|
||||
master:
|
||||
count: 1
|
||||
resources:
|
||||
requests:
|
||||
memory: 1Gi
|
||||
limits: {}
|
||||
persistence:
|
||||
storageClass: local-path
|
||||
size: 10Gi
|
||||
@ -1,12 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: vault
|
||||
namespace: vault
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
values:
|
||||
server:
|
||||
dataStorage:
|
||||
storageClass: local-path
|
||||
@ -1,40 +0,0 @@
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: zitadel
|
||||
namespace: zitadel
|
||||
spec:
|
||||
interval: 5m
|
||||
timeout: 10m
|
||||
dependsOn:
|
||||
- name: postgresql
|
||||
namespace: postgresql
|
||||
values:
|
||||
postgresqlSecret:
|
||||
create: false
|
||||
vault:
|
||||
enabled: true
|
||||
role: zitadel
|
||||
authPath: auth/kubernetes
|
||||
secretPath: secrets/data/zitadel/postgresql
|
||||
secretKey: password
|
||||
zitadel:
|
||||
configmapConfig:
|
||||
ExternalDomain: zitadel.contour.infra.sarex.tech
|
||||
login:
|
||||
env:
|
||||
- name: ZITADEL_DEFAULTINSTANCE_FEATURES_LOGINV2_REQUIRED
|
||||
value: "false"
|
||||
- name: ZITADEL_DATABASE_POSTGRES_HOST
|
||||
value: "postgresql.postgresql.svc.cluster.local"
|
||||
- name: ZITADEL_DATABASE_POSTGRES_PORT
|
||||
value: "5432"
|
||||
env:
|
||||
- name: ZITADEL_DEFAULTINSTANCE_FEATURES_LOGINV2_REQUIRED
|
||||
value: "false"
|
||||
- name: ZITADEL_DATABASE_POSTGRES_HOST
|
||||
value: "postgresql.postgresql.svc.cluster.local"
|
||||
- name: ZITADEL_DATABASE_POSTGRES_PORT
|
||||
value: "5432"
|
||||
- name: DUMB_FUCK
|
||||
value: "ass"
|
||||
@ -1,4 +0,0 @@
|
||||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: postgresql
|
||||
@ -1,6 +0,0 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
resources:
|
||||
- ./flux-system
|
||||
- ./helm-repositories.yaml
|
||||
- ./infrastructure
|
||||
@ -2,3 +2,5 @@ apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: postgresql
|
||||
labels:
|
||||
istio-injection: enabled
|
||||
|
||||
@ -2,5 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: postgresql
|
||||
resources:
|
||||
- namespace.yaml
|
||||
- helmrelease.yaml
|
||||
|
||||
Loading…
Reference in New Issue
Block a user