helmsdeep/helmfile.yaml
Alexander Romanov e7e975dd43
BJ-1007: Add adapter-standoff (#116)
* BJ-1007: Add adapter-standoff

* typo fix

* vault config for kv secrets

* Add standoff adapter to domain config

* Add fallback_risk_score to Fraudbusters inspector

This should allow HG to ignore Fraudbusters failures

* BJ-1007: Bump image

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: Andrey Fadeev <me@ciiol.net>
2020-11-11 14:32:55 +03:00

414 lines
8.9 KiB
YAML

{{ readFile "hf-templates.yaml" }}
repositories:
- name: stable
url: https://charts.helm.sh/stable
- name: incubator
url: https://charts.helm.sh/incubator
- name: bitnami
url: https://charts.bitnami.com/bitnami
- name: hashicorp
url: https://helm.releases.hashicorp.com
- name: codecentric
url: https://codecentric.github.io/helm-charts
helmfiles:
- # Path to the helmfile state file being processed BEFORE releases in this state file
path: helmfile-infra.yaml
releases:
#######################
## External services ##
#######################
- name: zookeeper
<<: *default
chart: incubator/zookeeper
version: 2.1.3
- name: kafka
<<: *default
needs:
- default/zookeeper
chart: incubator/kafka
version: 0.21.2
- name: consul
<<: *default
- name: postgres
<<: *default
chart: bitnami/postgresql-ha
wait: true
- name: postgres-not-ha
<<: *default
chart: bitnami/postgresql
version: 9.2.0
wait: true
installed: false
- name: vault
<<: *default
chart: hashicorp/vault
version: 0.7.0
needs:
- default/postgres
wait: true
- name: riak
<<: *default
labels:
logfmt: cri
chart: ./services/riak
set:
- name: config.user
file: config/riak/user.yaml
############
## Erlang ##
############
- name: machinegun
<<: *default
labels:
logfmt: cri
needs:
- default/consul
- default/riak
- default/kafka
set:
- name: appConfig
file: config/machinegun/config.yaml
- name: dominant
<<: *default
labels:
logfmt: cri
needs:
- default/shumway
wait: true
set:
- name: initializationTask.script
file: config/dominant/init-script.sh
- name: appConfig
file: config/dominant/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: bender
<<: *default
labels:
logfmt: cri
set:
- name: appConfig
file: config/bender/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: kds
<<: *default
labels:
logfmt: cri
set:
- name: appConfig
file: config/kds/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: caCrt
file: config/kds/ca.crt
- name: serverCrt
file: config/kds/server.pem
- name: cds
<<: *default
labels:
logfmt: cri
needs:
- default/kds
- default/riak
set:
- name: appConfig
file: config/cds/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: caCrt
file: config/cds/ca.crt
- name: clientCrt
file: config/cds/client.pem
- name: hellgate
<<: *default
labels:
logfmt: cri
needs:
- default/dominant
set:
- name: appConfig
file: config/hellgate/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: capi-pcidss-v1
<<: *default
labels:
logfmt: cri
ingress: true
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-pcidss-v1/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: capi-pcidss-v2
<<: *default
labels:
logfmt: cri
ingress: true
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-pcidss-v2/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: capi-v1
<<: *default
labels:
logfmt: cri
ingress: true
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-v1/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: capi-v2
<<: *default
labels:
logfmt: cri
ingress: true
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/capi-v2/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: capiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
- name: wapi-pcidss-v0
<<: *default
installed: false
labels:
logfmt: cri
ingress: true
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/wapi-pcidss-v0/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: privatePem
file: config/api-common/keys/capi.privkey.pem
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
needs:
- default/keycloak
- name: wapi
<<: *default
installed: false
labels:
logfmt: cri
ingress: true
set:
- name: fetchKeycloakPubkey
file: config/api-common/fetch-keycloak-pubkey.sh
- name: appConfig
file: config/wapi/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
- name: oopsBody1
file: config/api-common/oops-bodies/sad-kitty1
- name: oopsBody2
file: config/api-common/oops-bodies/sad-kitty2
- name: tokenEncryptionKey1
file: config/api-common/keys/token-encryption-keys/1.jwk
- name: wapiPrivkey
file: config/api-common/keys/capi.privkey.pem
needs:
- default/keycloak
##########
## Java ##
##########
- name: keycloak
<<: *default
labels:
logfmt: cri
chart: codecentric/keycloak
version: 9.0.1
needs:
- default/postgres
wait: true
- name: keycloak-realms
<<: *default
- name: shumway
<<: *default
labels:
logfmt: cri
needs:
- default/vault
- default/postgres
set:
- name: entrypoint
file: config/shumway/entrypoint.sh
- name: logback
file: config/logs/logback.xml
- name: loggers
file: config/shumway/loggers.xml
wait: true
- name: hooker
<<: *default
labels:
logfmt: cri
set:
- name: entrypoint
file: config/hooker/entrypoint.sh
- name: logback
file: config/logs/logback.xml
- name: loggers
file: config/hooker/loggers.xml
needs:
- default/vault
- default/kafka
- name: binbase
<<: *default
labels:
logfmt: cri
set:
- name: entrypoint
file: config/binbase/entrypoint.sh
- name: logback
file: config/logs/logback.xml
- name: loggers
file: config/binbase/loggers.xml
- name: proxy-mocketbank
<<: *default
labels:
logfmt: cri
needs:
- default/hellgate
set:
- name: knownCards
file: config/proxy-mocketbank/cards.csv
- name: errorMapping
file: config/proxy-mocketbank/errors.json
- name: logback
file: config/logs/logback.xml
- name: loggers
file: config/proxy-mocketbank/loggers.xml
- name: proxy-mocketbank-mpi
<<: *default
labels:
logfmt: cri
needs:
- default/proxy-mocketbank
set:
- name: knownCards
file: config/proxy-mocketbank-mpi/cards.csv
- name: logback
file: config/logs/logback.xml
- name: loggers
file: config/proxy-mocketbank-mpi/loggers.xml
- name: proxy-mocket-inspector
<<: *default
labels:
logfmt: cri
needs:
- default/hellgate
set:
- name: logback
file: config/logs/logback.xml
- name: loggers
file: config/proxy-mocket-inspector/loggers.xml
- name: adapter-standoff
<<: *default
labels:
logfmt: cri
needs:
- default/vault
- default/postgres
set:
- name: entrypoint
file: config/adapter-standoff/entrypoint.sh
- name: logback
file: config/logs/logback.xml
- name: loggers
file: config/adapter-standoff/loggers.xml
- name: errors
file: config/adapter-standoff/errors.json
- name: url-shortener
<<: *default
set:
- name: appConfig
file: config/url-shortener/sys.config
- name: vmConfig
file: config/vm/erl_inetrc
##############
## Frontend ##
##############
- name: payform
<<: *default
set:
- name: appconfig
file: config/payform/appConfig.json
##########
## Misc ##
##########
- name: test-transaction
<<: *default
needs:
- default/shumway
- default/dominant
- default/cds
- default/keycloak
- name: holmes
<<: *default