mirror of
https://github.com/valitydev/helmsdeep.git
synced 2024-11-06 08:55:21 +00:00
144 lines
3.9 KiB
YAML
144 lines
3.9 KiB
YAML
# -*- mode: yaml -*-
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: {{ .Values.services.global.registry.repository | default "docker.io" }}/rbkmoney/claim-management
|
|
tag: 0bce7ae059b37a2c12a6b8b0d2b9ad661da7b88e
|
|
pullPolicy: IfNotPresent
|
|
|
|
{{ if .Values.services.global.registry.imagePullSecret }}
|
|
imagePullSecrets:
|
|
- {{ .Values.services.global.registry.imagePullSecret }}
|
|
{{ end }}
|
|
|
|
runopts:
|
|
command: ["/opt/claim-management/entrypoint.sh"]
|
|
|
|
configMap:
|
|
data:
|
|
entrypoint.sh: |
|
|
{{- readFile "entrypoint.sh" | nindent 6 }}
|
|
loggers.xml: |
|
|
{{- readFile "loggers.xml" | nindent 6 }}
|
|
logback.xml: |
|
|
{{- readFile "../logs/logback.xml" | nindent 6 }}
|
|
|
|
volumes:
|
|
- name: config-volume
|
|
configMap:
|
|
name: {{ .Release.Name }}
|
|
defaultMode: 0755
|
|
|
|
volumeMounts:
|
|
- name: config-volume
|
|
mountPath: /opt/claim-management/entrypoint.sh
|
|
subPath: entrypoint.sh
|
|
readOnly: true
|
|
- name: config-volume
|
|
mountPath: /opt/claim-management/logback.xml
|
|
subPath: logback.xml
|
|
readOnly: true
|
|
- name: config-volume
|
|
mountPath: /opt/claim-management/loggers.xml
|
|
subPath: loggers.xml
|
|
readOnly: true
|
|
|
|
service:
|
|
ports:
|
|
- name: api
|
|
port: 8022
|
|
- name: management
|
|
port: 8023
|
|
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /actuator/health
|
|
port: management
|
|
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /actuator/health
|
|
port: management
|
|
|
|
podAnnotations:
|
|
vault.hashicorp.com/role: "db-app"
|
|
vault.hashicorp.com/agent-inject: "true"
|
|
vault.hashicorp.com/agent-inject-secret-application.properties: "database/creds/db-app-claim-management"
|
|
vault.hashicorp.com/agent-inject-template-application.properties: |
|
|
{{`{{- with secret "database/creds/db-app-claim-management" -}}
|
|
spring.datasource.url=jdbc:postgresql://postgres-postgresql:5432/claimmng?sslmode=disable
|
|
spring.datasource.username={{ .Data.username }}
|
|
spring.datasource.password={{ .Data.password }}
|
|
spring.flyway.url=jdbc:postgresql://postgres-postgresql:5432/claimmng?sslmode=disable
|
|
spring.flyway.user={{ .Data.username }}
|
|
spring.flyway.password={{ .Data.password }}
|
|
spring.flyway.schemas=cm
|
|
flyway.schemas=cm
|
|
{{- end }}`}}
|
|
|
|
metrics:
|
|
serviceMonitor:
|
|
enabled: {{ .Values.services.global.metrics.enabled }}
|
|
namespace: {{ .Release.Namespace }}
|
|
additionalLabels:
|
|
release: prometheus
|
|
endpoints:
|
|
- port: "management"
|
|
path: /actuator/prometheus
|
|
scheme: http
|
|
|
|
{{ $domainWithNamespace := printf "%s.%s" .Release.Namespace .Values.services.ingress.rootDomain }}
|
|
{{ $ingressDomain := .Values.services.ingress.namespacedDomain | ternary $domainWithNamespace .Values.services.ingress.rootDomain }}
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
{{- if .Values.services.ingress.tls.letsEncrypt.enabled }}
|
|
cert-manager.io/cluster-issuer: {{ .Values.services.ingress.tls.letsEncrypt.issuer }}
|
|
{{- end }}
|
|
kubernetes.io/ingress.class: {{ .Values.services.ingress.class | quote }}
|
|
hosts:
|
|
- host: iddqd.{{ $ingressDomain | default "rbk.dev" }}
|
|
paths:
|
|
- /v1/cm
|
|
{{- if .Values.services.ingress.tls.enabled }}
|
|
tls:
|
|
{{ if .Values.services.ingress.tls.letsEncrypt.enabled }}
|
|
- secretName: iddqd-{{ .Values.services.ingress.tls.secretName }}
|
|
{{- else }}
|
|
- secretName: {{ .Values.services.ingress.tls.secretName }}
|
|
{{- end }}
|
|
hosts:
|
|
- iddqd.{{ $ingressDomain | default "rbk.dev" }}
|
|
{{- end }}
|
|
servicePort: 8022
|
|
|
|
ciliumPolicies:
|
|
- filters:
|
|
- port: 5432
|
|
type: TCP
|
|
name: postgres
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 9092
|
|
rules:
|
|
kafka:
|
|
- role: consume
|
|
topics:
|
|
- claim-event-sink
|
|
type: TCP
|
|
name: kafka
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8200
|
|
type: TCP
|
|
name: vault
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8022
|
|
type: TCP
|
|
name: hellgate
|
|
namespace: {{ .Release.Namespace }}
|
|
|