mirror of
https://github.com/valitydev/helmsdeep.git
synced 2024-11-06 00:45:18 +00:00
35ae3ab89f
* Switch to docker hub * Add missing * This image not in public * bump image tags * Fix more urls * Fix URL to test image * downgrade api * Ft/use public repo update (#78) * Fix test-transaction labels (#73) And remove obsolete config mount * fix pass to default (#76) Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com> * Fix test_transaction_v2 volume mount in job (#77) * Remove dr2reg from values * Fix README * Remove dedicated binbase-test from helmfile * Completely remove dedicated binbase-test * Wrap imagePullSecrets call in deployment's chart * Bumb binbase-test-data * Remove `pathType` from payform ingress spec (#80) Only k8s >= 1.18 supports this field. And GKE doesn't support these versions of k8s * Use standard io for logs (ex machinegun for now) (#81) * Use standard io for logs (ex machinegun for now) * Fix accesslog * Unify podSecurityContext usage in riak chart (#79) And also set fsGroup as container user id * Use standard output for mg (#82) * Update machinegun (#83) * Add empty imagePullSecrets to our services' yamls * Stabilize helmfile sync; add cold_reset.sh script * Bump binbase-test-data Co-authored-by: Andrey Fadeev <me@ciiol.net> Co-authored-by: vilorij <vilorij@ya.ru> Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com> Co-authored-by: Sergey Yelin <elinsn@gmail.com> Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com> Co-authored-by: Andrey Abramov <a.abramov@rbkmoney.com> Co-authored-by: Andrey Fadeev <me@ciiol.net> Co-authored-by: vilorij <vilorij@ya.ru>
294 lines
7.1 KiB
YAML
294 lines
7.1 KiB
YAML
repositories:
|
|
- name: stable
|
|
url: https://kubernetes-charts.storage.googleapis.com
|
|
- name: incubator
|
|
url: https://kubernetes-charts-incubator.storage.googleapis.com
|
|
- name: bitnami
|
|
url: https://charts.bitnami.com/bitnami
|
|
- name: hashicorp
|
|
url: https://helm.releases.hashicorp.com
|
|
- name: codecentric
|
|
url: https://codecentric.github.io/helm-charts
|
|
|
|
templates:
|
|
default: &default
|
|
chart: ./services/{{`{{ .Release.Name }}`}}
|
|
namespace: default
|
|
# This prevents helmfile exiting when it encounters a missing file
|
|
# Valid values are "Error", "Warn", "Info", "Debug". The default is "Error"
|
|
# Use "Debug" to make missing files errors invisible at the default log level(--log-level=INFO)
|
|
missingFileHandler: Warn
|
|
values:
|
|
- config/{{`{{ .Release.Name }}`}}/values.yaml
|
|
timeout: 900
|
|
|
|
|
|
helmfiles:
|
|
- # Path to the helmfile state file being processed BEFORE releases in this state file
|
|
path: helmfile-infra.yaml
|
|
|
|
releases:
|
|
- name: zookeeper
|
|
<<: *default
|
|
chart: incubator/zookeeper
|
|
version: 2.1.3
|
|
- name: kafka
|
|
<<: *default
|
|
needs:
|
|
- default/zookeeper
|
|
chart: incubator/kafka
|
|
version: 0.21.2
|
|
- name: consul
|
|
<<: *default
|
|
chart: stable/consul
|
|
version: 3.9.5
|
|
- name: postgres
|
|
<<: *default
|
|
chart: bitnami/postgresql
|
|
version: 9.2.0
|
|
wait: true
|
|
- name: vault
|
|
<<: *default
|
|
chart: hashicorp/vault
|
|
version: 0.7.0
|
|
needs:
|
|
- default/postgres
|
|
wait: true
|
|
- name: keycloak-realms
|
|
<<: *default
|
|
- name: keycloak
|
|
<<: *default
|
|
chart: codecentric/keycloak
|
|
version: 9.0.1
|
|
needs:
|
|
- default/postgres
|
|
wait: true
|
|
- name: holmes
|
|
<<: *default
|
|
- name: riak
|
|
<<: *default
|
|
chart: ./services/riak
|
|
set:
|
|
- name: config.user
|
|
file: config/riak/user.yaml
|
|
- name: machinegun
|
|
<<: *default
|
|
needs:
|
|
- default/consul
|
|
- default/riak
|
|
- default/kafka
|
|
set:
|
|
- name: appConfig
|
|
file: config/machinegun/config.yaml
|
|
- name: bender
|
|
<<: *default
|
|
set:
|
|
- name: appConfig
|
|
file: config/bender/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: kds
|
|
<<: *default
|
|
set:
|
|
- name: appConfig
|
|
file: config/kds/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: caCrt
|
|
file: config/kds/ca.crt
|
|
- name: serverCrt
|
|
file: config/kds/server.pem
|
|
- name: cds
|
|
<<: *default
|
|
needs:
|
|
- default/kds
|
|
- default/riak
|
|
set:
|
|
- name: appConfig
|
|
file: config/cds/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: caCrt
|
|
file: config/cds/ca.crt
|
|
- name: clientCrt
|
|
file: config/cds/client.pem
|
|
- name: shumway
|
|
<<: *default
|
|
needs:
|
|
- default/vault
|
|
- default/postgres
|
|
set:
|
|
- name: entrypoint
|
|
file: config/shumway/entrypoint.sh
|
|
wait: true
|
|
- name: hooker
|
|
<<: *default
|
|
set:
|
|
- name: entrypoint
|
|
file: config/hooker/entrypoint.sh
|
|
needs:
|
|
- default/vault
|
|
- default/kafka
|
|
- name: dominant
|
|
<<: *default
|
|
needs:
|
|
- default/shumway
|
|
wait: true
|
|
set:
|
|
- name: initializationTask.script
|
|
file: config/dominant/init-script.sh
|
|
- name: appConfig
|
|
file: config/dominant/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: binbase
|
|
<<: *default
|
|
set:
|
|
- name: entrypoint
|
|
file: config/binbase/entrypoint.sh
|
|
- name: proxy-mocketbank
|
|
<<: *default
|
|
set:
|
|
- name: knownCards
|
|
file: config/proxy-mocketbank/cards.csv
|
|
- name: errorMapping
|
|
file: config/proxy-mocketbank/errors.json
|
|
- name: proxy-mocket-inspector
|
|
<<: *default
|
|
- name: hellgate
|
|
<<: *default
|
|
set:
|
|
- name: appConfig
|
|
file: config/hellgate/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: capi-pcidss-v2
|
|
<<: *default
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-pcidss-v2/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: capi-pcidss-v1
|
|
<<: *default
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-pcidss-v1/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: url-shortener
|
|
<<: *default
|
|
set:
|
|
- name: appConfig
|
|
file: config/url-shortener/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: capi-v1
|
|
<<: *default
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-v1/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: capi-v2
|
|
<<: *default
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-v2/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: wapi-pcidss-v0
|
|
<<: *default
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/wapi-pcidss-v0/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: privatePem
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
needs:
|
|
- default/keycloak
|
|
- name: wapi
|
|
<<: *default
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/wapi/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: wapiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: payform
|
|
<<: *default
|
|
set:
|
|
- name: appconfig
|
|
file: config/payform/appConfig.json
|
|
- name: test-transaction
|
|
<<: *default
|
|
needs:
|
|
- default/shumway
|
|
- default/dominant
|
|
- default/cds
|
|
- default/keycloak
|