iac/clusters/sarex-contour/kustomization.yaml
ivan 9baaa3d7f1 ++ sarex-contour: zitadel
infrastructure/zitadel/sarex-contour (chart idp-contour 4.12.13), по
образцу overlay vad: без dependsOn на postgresql (БД внешняя, отдельная
машина 111.88.255.180 — заказана через terraform live/database, не
in-cluster HelmRelease), postRenderer снимает nodeSelector с Deployment
+ 2 Job'ов и подменяет vault-agent template на свой (кладёт
Admin.Password/FirstInstance.Org.Human.Password из
secrets/data/zitadel/postgresql).

ExternalDomain — заглушка zitadel.sarex-contour.internal, istio-config
для внешнего доступа ещё не заведён.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-11 18:15:12 +05:00

18 lines
534 B
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ./flux-system
- ./helm-repositories.yaml
# infrastructure
- ../../infrastructure/istio-base/sarex-contour
- ../../infrastructure/istio-pilot/sarex-contour
- ../../infrastructure/istio-gateway/sarex-contour
- ../../infrastructure/vault/sarex-contour
- ../../infrastructure/kafka/sarex-contour
- ../../infrastructure/rabbitmq/sarex-contour
- ../../infrastructure/zitadel/sarex-contour
# apps
- ../../apps/control-interface/sarex-contour