e8970d6280
New service on universal-chart with Vault Agent: role premises, SA premises-vault, creds for its own postgres, kafka and S3 plus the five neighbour databases the sync script reads. The vad overlay mounts the Kafka CA and drops the prod-sized resource requests; istio-config routes sarex.vadroad.ru/premises/api/ to backend-svc.premises.
32 lines
761 B
YAML
32 lines
761 B
YAML
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: backend
|
|
namespace: premises
|
|
spec:
|
|
values:
|
|
services:
|
|
backend:
|
|
deployment:
|
|
resources:
|
|
requests:
|
|
cpu: null
|
|
memory: null
|
|
volumes:
|
|
_default:
|
|
- name: kafka-ca-cert
|
|
mountPath:
|
|
_default: /usr/local/share/ca-certificates/kafka.crt
|
|
subPath:
|
|
_default: kafka.crt
|
|
readOnly:
|
|
_default: true
|
|
configMap:
|
|
name:
|
|
_default: kafka-ca-cert
|
|
items:
|
|
- key: kafka.crt
|
|
path:
|
|
_default: kafka.crt
|