helmsdeep/helmfile.yaml
Sergey Yelin 35ae3ab89f
Switch to docker hub (#75)
* Switch to docker hub

* Add missing

* This image not in public

* bump image tags

* Fix more urls

* Fix URL to test image

* downgrade api

* Ft/use public repo update (#78)

* Fix test-transaction labels (#73)

And remove obsolete config mount

* fix pass to default (#76)

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>

* Fix test_transaction_v2 volume mount in job (#77)

* Remove dr2reg from values

* Fix README

* Remove dedicated binbase-test from helmfile

* Completely remove dedicated binbase-test

* Wrap imagePullSecrets call in deployment's chart

* Bumb binbase-test-data

* Remove `pathType` from payform ingress spec (#80)

Only k8s >= 1.18 supports this field. And GKE doesn't support these versions of k8s

* Use standard io for logs (ex machinegun for now) (#81)

* Use standard io for logs (ex machinegun for now)

* Fix accesslog

* Unify podSecurityContext usage in riak chart (#79)

And also set fsGroup as container user id

* Use standard output for mg (#82)

* Update machinegun (#83)

* Add empty imagePullSecrets to our services' yamls

* Stabilize helmfile sync; add cold_reset.sh script

* Bump binbase-test-data

Co-authored-by: Andrey Fadeev <me@ciiol.net>
Co-authored-by: vilorij <vilorij@ya.ru>
Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: Sergey Yelin <elinsn@gmail.com>

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: Andrey Abramov <a.abramov@rbkmoney.com>
Co-authored-by: Andrey Fadeev <me@ciiol.net>
Co-authored-by: vilorij <vilorij@ya.ru>
2020-10-20 13:10:02 +03:00

294 lines
7.1 KiB
YAML

repositories:
- name: stable
url: https://kubernetes-charts.storage.googleapis.com
- name: incubator
url: https://kubernetes-charts-incubator.storage.googleapis.com
- name: bitnami
url: https://charts.bitnami.com/bitnami
- name: hashicorp
url: https://helm.releases.hashicorp.com
- name: codecentric
url: https://codecentric.github.io/helm-charts
templates:
default: &default
chart: ./services/{{`{{ .Release.Name }}`}}
namespace: default
# This prevents helmfile exiting when it encounters a missing file
# Valid values are "Error", "Warn", "Info", "Debug". The default is "Error"
# Use "Debug" to make missing files errors invisible at the default log level(--log-level=INFO)
missingFileHandler: Warn
values:
- config/{{`{{ .Release.Name }}`}}/values.yaml
timeout: 900
helmfiles:
- # Path to the helmfile state file being processed BEFORE releases in this state file
path: helmfile-infra.yaml
releases:
- name: zookeeper
<<: *default
chart: incubator/zookeeper
version: 2.1.3
- name: kafka
<<: *default
needs:
- default/zookeeper
chart: incubator/kafka
version: 0.21.2
- name: consul
<<: *default
chart: stable/consul
version: 3.9.5
- name: postgres
<<: *default
chart: bitnami/postgresql
version: 9.2.0
wait: true
- name: vault
<<: *default
chart: hashicorp/vault
version: 0.7.0
needs:
- default/postgres
wait: true
- name: keycloak-realms
<<: *default
- name: keycloak
<<: *default
chart: codecentric/keycloak
version: 9.0.1
needs:
- default/postgres
wait: true
- name: holmes
<<: *default
- name: riak
<<: *default
chart: ./services/riak
set:
- name: config.user
file: config/riak/user.yaml
- name: machinegun
<<: *default
needs:
- default/consul
- default/riak
- default/kafka
set:
- name: appConfig
file: config/machinegun/config.yaml
- name: bender
<<: *default
set:
- name: appConfig
file: config/bender/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: kds
<<: *default
set:
- name: appConfig
file: config/kds/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: caCrt
file: config/kds/ca.crt
- name: serverCrt
file: config/kds/server.pem
- name: cds
<<: *default
needs:
- default/kds
- default/riak
set:
- name: appConfig
file: config/cds/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: caCrt
file: config/cds/ca.crt
- name: clientCrt
file: config/cds/client.pem
- name: shumway
<<: *default
needs:
- default/vault
- default/postgres
set:
- name: entrypoint
file: config/shumway/entrypoint.sh
wait: true
- name: hooker
<<: *default
set:
- name: entrypoint
file: config/hooker/entrypoint.sh
needs:
- default/vault
- default/kafka
- name: dominant
<<: *default
needs:
- default/shumway
wait: true
set:
- name: initializationTask.script
file: config/dominant/init-script.sh
- name: appConfig
file: config/dominant/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: binbase
<<: *default
set:
- name: entrypoint
file: config/binbase/entrypoint.sh
- name: proxy-mocketbank
<<: *default
set:
- name: knownCards
file: config/proxy-mocketbank/cards.csv
- name: errorMapping
file: config/proxy-mocketbank/errors.json
- name: proxy-mocket-inspector
<<: *default
- name: hellgate
<<: *default
set:
- name: appConfig
file: config/hellgate/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: capi-pcidss-v2
<<: *default
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-pcidss-v2/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: capi-pcidss-v1
<<: *default
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-pcidss-v1/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: url-shortener
<<: *default
set:
- name: appConfig
file: config/url-shortener/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: capi-v1
<<: *default
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-v1/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: capi-v2
<<: *default
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-v2/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: wapi-pcidss-v0
<<: *default
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/wapi-pcidss-v0/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: privatePem
file: config/api-common/keys/capi.privkey.pem
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
needs:
- default/keycloak
- name: wapi
<<: *default
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/wapi/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: wapiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: payform
<<: *default
set:
- name: appconfig
file: config/payform/appConfig.json
- name: test-transaction
<<: *default
needs:
- default/shumway
- default/dominant
- default/cds
- default/keycloak