iac/infrastructure/kafka/d8-ugmk-prod/kafka.yaml
emelinda 1e1971317d refactor(d8-ugmk-prod): move infrastructure patches into per-module overlays
Relocate patches from clusters/d8-ugmk-prod/infrastructure/patches into
infrastructure/<module>/d8-ugmk-prod/ overlays (base + patches), matching
the apps/<app>/<cluster> and existing yc-k8s-test layout.

clusters/d8-ugmk-prod/infrastructure/kustomization.yaml now just references
the kafka, rabbitmq, camunda, vault, postgresql and zitadel overlays, with
no patches block. The patches/ directory is removed.

No rendered change: HelmRelease, namespace patches are preserved 1:1.
2026-07-15 12:01:32 +03:00

74 lines
1.8 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: kafka
namespace: kafka
spec:
interval: 5m
timeout: 10m
postRenderers:
- kustomize:
patches:
- target:
group: apps
version: v1
kind: StatefulSet
namespace: kafka
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
values:
global:
imagePullSecrets:
- regcred
defaultStorageClass: nfs01
image:
pullSecrets:
- regcred
controller:
replicaCount: 1
automountServiceAccountToken: true
persistence:
size: 8Gi
storageClass: nfs01
overrideConfiguration:
offsets.topic.replication.factor: 1
transaction.state.log.replication.factor: 1
transaction.state.log.min.isr: 1
default.replication.factor: 1
min.insync.replicas: 1
broker:
replicaCount: 0
automountServiceAccountToken: true
listeners:
client:
protocol: SASL_SSL
sslClientAuth: "none"
provisioning:
enabled: false
sasl:
managedExistingSecret:
enabled: false
existingSecret: ""
enabledMechanisms: PLAIN,SCRAM-SHA-512
interBrokerMechanism: PLAIN
controllerMechanism: PLAIN
client:
users: []
passwords: ""
tls:
type: PEM
vault:
enabled: true
role: kafka
authPath: auth/kubernetes
secretPath: secrets/data/kafka/bootstrap
clusterIdKey: clusterId
interBrokerPasswordKey: interBrokerPassword
controllerPasswordKey: controllerPassword