From 6ead15adffc17085934c97cc41c2215fa7d41460 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Tue, 20 Oct 2026 15:40:12 +0300
Subject: [PATCH] ++ valkey acl

---
 infrastructure/valkey/vk-prod/valkey.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/infrastructure/valkey/vk-prod/valkey.yaml b/infrastructure/valkey/vk-prod/valkey.yaml
index 74d37b6..c5d6eba 100644
--- a/infrastructure/valkey/vk-prod/valkey.yaml
+++ b/infrastructure/valkey/vk-prod/valkey.yaml
@@ -37,6 +37,7 @@ spec:
       appendonly yes
       save ""
       maxmemory 6gb
+      aclfile /opt/bitnami/valkey/acl/users.acl
     serviceAccount:
       create: true
       automountServiceAccountToken: true
@@ -81,5 +82,14 @@ spec:
         enabled: true
         size: 32Gi
         storageClass: csi-ceph-ssd-retain
+      extraVolumes:
+        - name: users-acl
+          secret:
+            secretName: valkey-users-acl
+            defaultMode: 292
+      extraVolumeMounts:
+        - name: users-acl
+          mountPath: /opt/bitnami/valkey/acl
+          readOnly: true
     metrics:
       enabled: false