mirror of
https://github.com/valitydev/helmsdeep.git
synced 2024-11-06 08:55:21 +00:00
136 lines
3.2 KiB
YAML
136 lines
3.2 KiB
YAML
# -*- mode: yaml -*-
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
repository: {{ .Values.services.global.registry.repository | default "docker.io/rbkmoney" }}/deanonimus
|
|
tag: 23481a728081af23c47c49d8cc11c2d80b160ec4
|
|
pullPolicy: IfNotPresent
|
|
|
|
{{ if .Values.services.global.registry.imagePullSecret }}
|
|
imagePullSecrets:
|
|
- {{ .Values.services.global.registry.imagePullSecret }}
|
|
{{ end }}
|
|
|
|
runopts:
|
|
command: ["/opt/deanonimus/entrypoint.sh"]
|
|
|
|
configMap:
|
|
data:
|
|
entrypoint.sh: |
|
|
{{- readFile "entrypoint.sh" | nindent 6 }}
|
|
loggers.xml: |
|
|
{{- readFile "loggers.xml" | nindent 6 }}
|
|
logback.xml: |
|
|
{{- readFile "../logs/logback.xml" | nindent 6 }}
|
|
|
|
env:
|
|
- name: LOGBACK_SERVICE_NAME
|
|
value: "deanonimus"
|
|
|
|
volumes:
|
|
- name: config-volume
|
|
configMap:
|
|
name: {{ .Release.Name }}
|
|
defaultMode: 0755
|
|
|
|
volumeMounts:
|
|
- name: config-volume
|
|
mountPath: /opt/deanonimus/entrypoint.sh
|
|
subPath: entrypoint.sh
|
|
readOnly: true
|
|
- name: config-volume
|
|
mountPath: /opt/deanonimus/logback.xml
|
|
subPath: logback.xml
|
|
readOnly: true
|
|
- name: config-volume
|
|
mountPath: /opt/deanonimus/loggers.xml
|
|
subPath: loggers.xml
|
|
readOnly: true
|
|
|
|
service:
|
|
ports:
|
|
- name: api
|
|
port: 8022
|
|
- name: management
|
|
port: 8023
|
|
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /actuator/health
|
|
port: api
|
|
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /actuator/health
|
|
port: api
|
|
|
|
{{ $domainWithNamespace := printf "%s.%s" .Release.Namespace .Values.services.ingress.rootDomain }}
|
|
{{ $ingressDomain := .Values.services.ingress.namespacedDomain | ternary $domainWithNamespace .Values.services.ingress.rootDomain }}
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
{{- if .Values.services.ingress.tls.letsEncrypt.enabled }}
|
|
cert-manager.io/cluster-issuer: {{ .Values.services.ingress.tls.letsEncrypt.issuer }}
|
|
{{- end }}
|
|
kubernetes.io/ingress.class: {{ .Values.services.ingress.class | quote }}
|
|
hosts:
|
|
- host: iddqd.{{ $ingressDomain | default "rbk.dev" }}
|
|
paths:
|
|
- /deanonimus
|
|
{{- if .Values.services.ingress.tls.enabled }}
|
|
tls:
|
|
{{ if .Values.services.ingress.tls.letsEncrypt.enabled }}
|
|
- secretName: iddqd-{{ .Values.services.ingress.tls.secretName }}
|
|
{{- else }}
|
|
- secretName: {{ .Values.services.ingress.tls.secretName }}
|
|
{{- end }}
|
|
hosts:
|
|
- iddqd.{{ $ingressDomain | default "rbk.dev" }}
|
|
{{- end }}
|
|
servicePort: 8022
|
|
|
|
metrics:
|
|
serviceMonitor:
|
|
enabled: {{ .Values.services.global.metrics.enabled }}
|
|
namespace: {{ .Release.Namespace }}
|
|
additionalLabels:
|
|
release: prometheus
|
|
endpoints:
|
|
- port: "management"
|
|
path: /actuator/prometheus
|
|
scheme: http
|
|
|
|
ciliumPolicies:
|
|
- filters:
|
|
- port: 5432
|
|
type: TCP
|
|
name: postgres
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 9092
|
|
rules:
|
|
kafka:
|
|
- role: consume
|
|
topics:
|
|
- claim-event-sink
|
|
type: TCP
|
|
name: kafka
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8200
|
|
type: TCP
|
|
name: vault
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8022
|
|
type: TCP
|
|
name: hellgate
|
|
namespace: {{ .Release.Namespace }}
|
|
- filters:
|
|
- port: 8022
|
|
type: TCP
|
|
name: cashier
|
|
namespace: {{ .Release.Namespace }}
|