iac/clusters/d8-ugmk-prod/infrastructure/patches/camunda.yaml

297 lines
8.2 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: camunda
namespace: camunda
spec:
dependsOn: []
interval: 5m
timeout: 15m
postRenderers:
- kustomize:
patches:
- target:
group: apps
version: v1
kind: Deployment
namespace: camunda
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: StatefulSet
namespace: camunda
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: batch
version: v1
kind: Job
namespace: camunda
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: Deployment
namespace: camunda
name: camunda-connectors
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: Deployment
namespace: camunda
name: camunda-identity
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: Deployment
namespace: camunda
name: camunda-operate
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: Deployment
namespace: camunda
name: camunda-optimize
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: Deployment
namespace: camunda
name: camunda-tasklist
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: Deployment
namespace: camunda
name: camunda-zeebe-gateway
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
- target:
group: apps
version: v1
kind: StatefulSet
namespace: camunda
name: camunda-zeebe
patch: |-
- op: add
path: /spec/template/spec/nodeSelector
value:
node.deckhouse.io/group: generic
- op: add
path: /spec/template/spec/tolerations
value: []
values:
global:
vault:
enabled: true
role: camunda
authPath: auth/kubernetes
image:
pullSecrets:
- name: regcred
identity:
auth:
publicIssuerUrl: "https://camunda-keycloak.contour.infra.sarex.tech/auth/realms/camunda-platform"
identity:
redirectUrl: "https://camunda-identity.contour.infra.sarex.tech"
operate:
redirectUrl: "https://camunda-operate.contour.infra.sarex.tech"
tasklist:
redirectUrl: "https://camunda-tasklist.contour.infra.sarex.tech"
optimize:
redirectUrl: "https://camunda-optimize.contour.infra.sarex.tech"
webModeler:
redirectUrl: "https://camunda-web-modeler.contour.infra.sarex.tech"
console:
redirectUrl: "https://camunda-console.contour.infra.sarex.tech"
identityPostgresql:
auth:
usePasswordFiles: true
primary:
automountServiceAccountToken: true
persistence:
size: 10Gi
storageClass: nfs01
identityKeycloak:
postgresql:
auth:
usePasswordFiles: true
primary:
automountServiceAccountToken: true
persistence:
size: 10Gi
storageClass: nfs01
vaultEnv:
enabled: true
role: camunda
authPath: auth/kubernetes
envFiles:
KEYCLOAK_ADMIN_PASSWORD:
path: secrets/data/camunda/keycloak-admin
key: admin-password
KEYCLOAK_PASSWORD:
path: secrets/data/camunda/keycloak-admin
key: admin-password
KEYCLOAK_DATABASE_PASSWORD:
path: secrets/data/camunda/postgresql
key: password
global:
storageClass: nfs01
tolerations: []
postgresql:
auth:
usePasswordFiles: true
primary:
automountServiceAccountToken: true
persistence:
size: 10Gi
storageClass: nfs01
elasticsearch:
master:
persistence:
size: 10Gi
storageClass: nfs01
tolerations: []
metrics:
enabled: false
serviceMonitor:
enabled: false
prometheusRule:
enabled: false
tolerations: []
camundaCanary:
enabled: false
prometheusServiceMonitor:
enabled: false
console:
image:
pullSecrets:
- name: regcred
tolerations: []
zeebe:
pvcStorageClassName: nfs01
image:
pullSecrets:
- name: regcred
tolerations: []
zeebeGateway:
image:
pullSecrets:
- name: regcred
tolerations: []
operate:
image:
pullSecrets:
- name: regcred
serviceAccount:
automountServiceAccountToken: true
tolerations: []
tasklist:
image:
pullSecrets:
- name: regcred
serviceAccount:
automountServiceAccountToken: true
tolerations: []
optimize:
image:
pullSecrets:
- name: regcred
serviceAccount:
automountServiceAccountToken: true
tolerations: []
executionIdentity:
image:
pullSecrets:
- name: regcred
tolerations: []
identity:
image:
pullSecrets:
- name: regcred
tolerations: []
webModeler:
image:
pullSecrets:
- name: regcred
restapi:
tolerations: []
webapp:
tolerations: []
websockets:
tolerations: []
connectors:
image:
pullSecrets:
- name: regcred
serviceAccount:
automountServiceAccountToken: true
tolerations: []