mirror of
https://github.com/valitydev/helmsdeep.git
synced 2024-11-06 08:55:21 +00:00
e7e975dd43
* BJ-1007: Add adapter-standoff * typo fix * vault config for kv secrets * Add standoff adapter to domain config * Add fallback_risk_score to Fraudbusters inspector This should allow HG to ignore Fraudbusters failures * BJ-1007: Bump image Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com> Co-authored-by: Andrey Fadeev <me@ciiol.net>
414 lines
8.9 KiB
YAML
414 lines
8.9 KiB
YAML
{{ readFile "hf-templates.yaml" }}
|
|
|
|
repositories:
|
|
- name: stable
|
|
url: https://charts.helm.sh/stable
|
|
- name: incubator
|
|
url: https://charts.helm.sh/incubator
|
|
- name: bitnami
|
|
url: https://charts.bitnami.com/bitnami
|
|
- name: hashicorp
|
|
url: https://helm.releases.hashicorp.com
|
|
- name: codecentric
|
|
url: https://codecentric.github.io/helm-charts
|
|
|
|
helmfiles:
|
|
- # Path to the helmfile state file being processed BEFORE releases in this state file
|
|
path: helmfile-infra.yaml
|
|
|
|
releases:
|
|
#######################
|
|
## External services ##
|
|
#######################
|
|
- name: zookeeper
|
|
<<: *default
|
|
chart: incubator/zookeeper
|
|
version: 2.1.3
|
|
- name: kafka
|
|
<<: *default
|
|
needs:
|
|
- default/zookeeper
|
|
chart: incubator/kafka
|
|
version: 0.21.2
|
|
- name: consul
|
|
<<: *default
|
|
- name: postgres
|
|
<<: *default
|
|
chart: bitnami/postgresql-ha
|
|
wait: true
|
|
- name: postgres-not-ha
|
|
<<: *default
|
|
chart: bitnami/postgresql
|
|
version: 9.2.0
|
|
wait: true
|
|
installed: false
|
|
- name: vault
|
|
<<: *default
|
|
chart: hashicorp/vault
|
|
version: 0.7.0
|
|
needs:
|
|
- default/postgres
|
|
wait: true
|
|
- name: riak
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
chart: ./services/riak
|
|
set:
|
|
- name: config.user
|
|
file: config/riak/user.yaml
|
|
|
|
|
|
############
|
|
## Erlang ##
|
|
############
|
|
- name: machinegun
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/consul
|
|
- default/riak
|
|
- default/kafka
|
|
set:
|
|
- name: appConfig
|
|
file: config/machinegun/config.yaml
|
|
- name: dominant
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/shumway
|
|
wait: true
|
|
set:
|
|
- name: initializationTask.script
|
|
file: config/dominant/init-script.sh
|
|
- name: appConfig
|
|
file: config/dominant/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: bender
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
set:
|
|
- name: appConfig
|
|
file: config/bender/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: kds
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
set:
|
|
- name: appConfig
|
|
file: config/kds/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: caCrt
|
|
file: config/kds/ca.crt
|
|
- name: serverCrt
|
|
file: config/kds/server.pem
|
|
- name: cds
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/kds
|
|
- default/riak
|
|
set:
|
|
- name: appConfig
|
|
file: config/cds/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: caCrt
|
|
file: config/cds/ca.crt
|
|
- name: clientCrt
|
|
file: config/cds/client.pem
|
|
- name: hellgate
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/dominant
|
|
set:
|
|
- name: appConfig
|
|
file: config/hellgate/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: capi-pcidss-v1
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
ingress: true
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-pcidss-v1/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: capi-pcidss-v2
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
ingress: true
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-pcidss-v2/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: capi-v1
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
ingress: true
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-v1/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: capi-v2
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
ingress: true
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/capi-v2/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: capiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
- name: wapi-pcidss-v0
|
|
<<: *default
|
|
installed: false
|
|
labels:
|
|
logfmt: cri
|
|
ingress: true
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/wapi-pcidss-v0/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: privatePem
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
needs:
|
|
- default/keycloak
|
|
- name: wapi
|
|
<<: *default
|
|
installed: false
|
|
labels:
|
|
logfmt: cri
|
|
ingress: true
|
|
set:
|
|
- name: fetchKeycloakPubkey
|
|
file: config/api-common/fetch-keycloak-pubkey.sh
|
|
- name: appConfig
|
|
file: config/wapi/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
- name: oopsBody1
|
|
file: config/api-common/oops-bodies/sad-kitty1
|
|
- name: oopsBody2
|
|
file: config/api-common/oops-bodies/sad-kitty2
|
|
- name: tokenEncryptionKey1
|
|
file: config/api-common/keys/token-encryption-keys/1.jwk
|
|
- name: wapiPrivkey
|
|
file: config/api-common/keys/capi.privkey.pem
|
|
needs:
|
|
- default/keycloak
|
|
|
|
|
|
|
|
|
|
##########
|
|
## Java ##
|
|
##########
|
|
- name: keycloak
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
chart: codecentric/keycloak
|
|
version: 9.0.1
|
|
needs:
|
|
- default/postgres
|
|
wait: true
|
|
- name: keycloak-realms
|
|
<<: *default
|
|
- name: shumway
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/vault
|
|
- default/postgres
|
|
set:
|
|
- name: entrypoint
|
|
file: config/shumway/entrypoint.sh
|
|
- name: logback
|
|
file: config/logs/logback.xml
|
|
- name: loggers
|
|
file: config/shumway/loggers.xml
|
|
wait: true
|
|
- name: hooker
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
set:
|
|
- name: entrypoint
|
|
file: config/hooker/entrypoint.sh
|
|
- name: logback
|
|
file: config/logs/logback.xml
|
|
- name: loggers
|
|
file: config/hooker/loggers.xml
|
|
needs:
|
|
- default/vault
|
|
- default/kafka
|
|
- name: binbase
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
set:
|
|
- name: entrypoint
|
|
file: config/binbase/entrypoint.sh
|
|
- name: logback
|
|
file: config/logs/logback.xml
|
|
- name: loggers
|
|
file: config/binbase/loggers.xml
|
|
- name: proxy-mocketbank
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/hellgate
|
|
set:
|
|
- name: knownCards
|
|
file: config/proxy-mocketbank/cards.csv
|
|
- name: errorMapping
|
|
file: config/proxy-mocketbank/errors.json
|
|
- name: logback
|
|
file: config/logs/logback.xml
|
|
- name: loggers
|
|
file: config/proxy-mocketbank/loggers.xml
|
|
- name: proxy-mocketbank-mpi
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/proxy-mocketbank
|
|
set:
|
|
- name: knownCards
|
|
file: config/proxy-mocketbank-mpi/cards.csv
|
|
- name: logback
|
|
file: config/logs/logback.xml
|
|
- name: loggers
|
|
file: config/proxy-mocketbank-mpi/loggers.xml
|
|
- name: proxy-mocket-inspector
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/hellgate
|
|
set:
|
|
- name: logback
|
|
file: config/logs/logback.xml
|
|
- name: loggers
|
|
file: config/proxy-mocket-inspector/loggers.xml
|
|
- name: adapter-standoff
|
|
<<: *default
|
|
labels:
|
|
logfmt: cri
|
|
needs:
|
|
- default/vault
|
|
- default/postgres
|
|
set:
|
|
- name: entrypoint
|
|
file: config/adapter-standoff/entrypoint.sh
|
|
- name: logback
|
|
file: config/logs/logback.xml
|
|
- name: loggers
|
|
file: config/adapter-standoff/loggers.xml
|
|
- name: errors
|
|
file: config/adapter-standoff/errors.json
|
|
|
|
- name: url-shortener
|
|
<<: *default
|
|
set:
|
|
- name: appConfig
|
|
file: config/url-shortener/sys.config
|
|
- name: vmConfig
|
|
file: config/vm/erl_inetrc
|
|
|
|
|
|
##############
|
|
## Frontend ##
|
|
##############
|
|
- name: payform
|
|
<<: *default
|
|
set:
|
|
- name: appconfig
|
|
file: config/payform/appConfig.json
|
|
|
|
|
|
##########
|
|
## Misc ##
|
|
##########
|
|
- name: test-transaction
|
|
<<: *default
|
|
needs:
|
|
- default/shumway
|
|
- default/dominant
|
|
- default/cds
|
|
- default/keycloak
|
|
- name: holmes
|
|
<<: *default
|