fix: use kustomize for vc sync on redis

2024-02-06 15:41:57 +01:00
parent 7450a9903e
commit 0e67a9992c
7 changed files with 88 additions and 9 deletions
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- _manifest.yaml
@@ -0,0 +1 @@
+bitnami/redis
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- nodeport.yaml
+- ../base
@@ -0,0 +1,43 @@
+{
+    "connString": "Username=app;Password=secret;Host=staging-archmeister-rw;Port=5432;Database=app;Pooling=true;",
+    "oidc": {
+        "issuer": "https://idp.oceanbox.io/dex",
+        "authorization_endpoint": "https://idp.oceanbox.io/dex/auth",
+        "token_endpoint": "https://idp.oceanbox.io/dex/token",
+        "jwks_uri": "https://idp.oceanbox.io/dex/keys",
+        "userinfo_endpoint": "https://idp.oceanbox.io/dex/userinfo",
+        "device_authorization_endpoint": "https://idp.oceanbox.io/dex/device/code",
+        "clientId": "archmeister_dev",
+        "clientSecret": "",
+        "scopes": [
+            "openid",
+            "email",
+            "offline_access",
+            "profile"
+        ]
+    },
+    "sso": {
+        "cookieDomain": ".oceanbox.io",
+        "signedOutRedirectUri": "https://idp.oceanbox.io/dex/static/logout.html",
+        "redis": "redis-master,user=default,password=secret",
+        "appDomain": "atlantis",
+        "dataProtectionKeys": "DataProtection-Keys"
+    },
+    "allowedOrigins": [
+        "https://beta.sorcerer.ekman.oceanbox.io",
+        "https://sorcerer.ekman.oceanbox.io",
+        "https://sorcerer.hpc.oceanbox.io",
+        "https://s.local.oceanbox.io:8080",
+        "https://maps.oceanbox.io",
+        "https://atlantis.beta.oceanbox.io",
+        "https://jonas-atlantis.beta.oceanbox.io",
+        "https://simkir-atlantis.beta.oceanbox.io",
+        "https://stig-atlantis.beta.oceanbox.io",
+        "https://atlantis.local.oceanbox.io:8080"
+    ],
+    "logService" : "https://seq.oceanbox.io",
+    "logApiKey": "",
+    "cliUsers": [
+        "admin:en-to-tre-fire"
+    ]
+}
@@ -0,0 +1,9 @@
+patches:
+  - target:
+      version: v1
+      kind: Secret
+      name: staging-redis
+    path: secret_patch.yaml
+resources:
+- nodeport.yaml
+- ../base
@@ -0,0 +1,5 @@
+- op: add
+  path: /metadata/annotations
+  value:
+    secret-syncer.cloudarmin.me/enabled: "true"
+    secret-syncer.cloudarmin.me/destination-namespace: "atlantis"