iac/infrastructure/rabbitmq/vk-prod/rabbitmq.yaml
2026-10-19 11:03:42 +03:00

97 lines
2.6 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: rabbitmq
namespace: rabbitmq
spec:
interval: 5m
timeout: 10m
postRenderers:
- kustomize:
patches:
- target:
group: cert-manager.io
version: v1
kind: Certificate
namespace: gateway
name: rmq-tls
patch: |-
$patch: delete
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: rmq-tls
namespace: gateway
- target:
group: networking.istio.io
version: v1beta1
kind: Gateway
namespace: gateway
name: rmq-gateway
patch: |-
$patch: delete
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
name: rmq-gateway
namespace: gateway
- target:
group: networking.istio.io
version: v1
kind: VirtualService
namespace: rabbitmq
name: rmq-virt-service
patch: |-
$patch: delete
apiVersion: networking.istio.io/v1
kind: VirtualService
metadata:
name: rmq-virt-service
namespace: rabbitmq
values:
global:
security:
allowInsecureImages: true
virtualService: null
gateway: null
certificate: null
metrics:
serviceMonitor:
enabled: false
default:
enabled: false
perObject:
enabled: false
detailed:
enabled: false
extraServiceMonitors: []
replicaCount: 3
podAntiAffinityPreset: hard
topologySpreadConstraints:
- maxSkew: 1
topologyKey: topology.kubernetes.io/zone
whenUnsatisfiable: DoNotSchedule
labelSelector:
matchLabels:
app.kubernetes.io/name: rabbitmq-contour
app.kubernetes.io/instance: rabbitmq
resources:
requests:
cpu: 500m
memory: 2Gi
limits:
memory: 3Gi
persistence:
storageClass: csi-ceph-ssd-retain
size: 30Gi
auth:
username: rmq_admin
securePassword: true
existingPasswordSecret: rabbitmq-admin
existingSecretPasswordKey: rabbitmq-password
existingErlangSecret: rabbitmq-erlang
extraConfiguration: |-
cluster_formation.k8s.host = kubernetes.default.svc.cluster.local
default_queue_type = quorum
cluster_partition_handling = pause_minority