feat: rename kustomizations/ to values/

values/sorcerer/prod/appsettings.json

@@ -0,0 +1,28 @@
+{
+    "sso": {
+        "cookieDomain": ".oceanbox.io",
+        "signedOutRedirectUri": "https://idp.oceanbox.io/dex/static/logout.html",
+        "redis": "10.255.241.201:30379,user=default,password=secret",
+        "appDomain": "atlantis",
+        "dataProtectionKeys": "DataProtection-Keys"
+    },
+    "allowedOrigins": [
+        "http://localhost:8085",
+        "http://localhost:8080",
+        "https://localhost:8080",
+        "https://maps.oceanbox.io",
+        "https://atlantis.srv.oceanbox.io",
+        "https://maps.relic.oceanbox.io",
+        "https://atlantis.beta.oceanbox.io",
+        "https://atlantis.dev.oceanbox.io",
+        "https://atlantis.local.oceanbox.io:8080",
+        "https://jonas-atlantis.dev.oceanbox.io",
+        "https://stig-atlantis.dev.oceanbox.io",
+        "https://simkir-atlantis.dev.oceanbox.io"
+    ],
+    "archiveSvc": "https://archmeister.srv.oceanbox.io",
+    "cacheDir": "/data/archives/cache",
+    "logService" : "https://seq.adm.oceanbox.io",
+    "logApiKey": "",
+    "deployEnv": "prod"
+}

values/sorcerer/prod/archives-backup-volume.yaml

@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-prod-backup-archives
+spec:
+  accessModes:
+  - ReadWriteMany
+  capacity:
+    storage: 400T
+  local:
+    path: /backup/archives
+  persistentVolumeReclaimPolicy: Retain
+  volumeMode: Filesystem
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+      - matchExpressions:
+        - key: kubernetes.io/hostname
+          operator: In
+          values:
+          - ekman
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: prod-oceanbox-backup-archives
+spec:
+  accessModes:
+  - ReadWriteMany
+  resources:
+    requests:
+      storage: 400T
+  storageClassName: ""
+  volumeMode: Filesystem
+  volumeName: pv-prod-backup-archives

values/sorcerer/prod/archives-ceph-volume.yaml

@@ -0,0 +1,37 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-prod-ceph-archives
+spec:
+  accessModes:
+  - ReadWriteMany
+  capacity:
+    storage: 1Gi
+  csi:
+    driver: rook-ceph.cephfs.csi.ceph.com
+    nodeStageSecretRef:
+      name: rook-csi-cephfs-node
+      namespace: rook-ceph
+    volumeAttributes:
+      fsName: data
+      clusterID: rook-ceph
+      staticVolume: "true"
+      rootPath: /
+    volumeHandle: pv-prod-ceph-archives
+  persistentVolumeReclaimPolicy: Retain
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: prod-ceph-archives
+  namespace: sorcerer
+spec:
+  accessModes:
+  - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: ""
+  volumeMode: Filesystem
+  volumeName: pv-prod-ceph-archives

values/sorcerer/prod/default.env

@@ -0,0 +1 @@
+SEQ_APIKEY=7iIXHJukYjSLQDix6CnZ

values/sorcerer/prod/deployment_patch.yaml

@@ -0,0 +1,43 @@
+- op: replace
+  path: /spec/template/spec/containers/0/volumeMounts/0/mountPath
+  value: /data
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    mountPath: /backup/archives
+    name: backup
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: backup
+    persistentVolumeClaim:
+      claimName: prod-oceanbox-backup-archives
+- op: replace
+  path: /spec/template/spec/containers/0/env/0
+  value:
+    name: LOG_LEVEL
+    value: "3"
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_USER
+    value: default
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: prod-redis
+        key: redis-password
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ARCHMEISTER_AUTH
+    value: "admin:en-to-tre-fire"
+- op: add
+  path: /spec/template/spec/containers/0/envFrom/-
+  value:
+    secretRef:
+      name: prod-sorcerer-env
+

values/sorcerer/prod/kustomization.yaml

@@ -0,0 +1,20 @@
+generatorOptions:
+  disableNameSuffixHash: true
+configMapGenerator:
+- name: prod-sorcerer-appsettings
+  files:
+    - appsettings.json
+secretGenerator:
+- name: prod-sorcerer-env
+  envs:
+    - default.env
+patches:
+- target:
+    group: apps
+    version: v1
+    kind: Deployment
+  path: deployment_patch.yaml
+resources:
+- archives-ceph-volume.yaml
+- archives-backup-volume.yaml
+- ../base

values/sorcerer/prod/pv.yaml

@@ -0,0 +1,40 @@
+# apiVersion: v1
+# kind: PersistentVolume
+# metadata:
+#   name: pv-prod-oceanbox-archives
+# spec:
+#   accessModes:
+#   - ReadWriteMany
+#   capacity:
+#     storage: 300T
+#   mountOptions:
+#   - vers=4.2
+#   - rdma
+#   - soft
+#   nfs:
+#     path: /data/archives
+#     server: 10.255.243.80
+#   persistentVolumeReclaimPolicy: Retain
+#   volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-prod-backup-archives
+spec:
+  accessModes:
+  - ReadOnlyMany
+  capacity:
+    storage: 400T
+  local:
+    path: /backup/archives
+  persistentVolumeReclaimPolicy: Retain
+  volumeMode: Filesystem
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+      - matchExpressions:
+        - key: kubernetes.io/hostname
+          operator: In
+          values:
+          - fs-backup

values/sorcerer/prod/pvc.yaml

@@ -0,0 +1,32 @@
+# apiVersion: v1
+# kind: PersistentVolumeClaim
+# metadata:
+#   name: prod-oceanbox-archives
+# spec:
+#   accessModes:
+#   - ReadWriteMany
+#   resources:
+#     requests:
+#       storage: 300T
+#   storageClassName: ""
+#   volumeMode: Filesystem
+#   volumeName: pv-prod-oceanbox-archives
+# status:
+#   accessModes:
+#   - ReadWriteMany
+#   capacity:
+#     storage: 300T
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: prod-oceanbox-backup-archives
+spec:
+  accessModes:
+  - ReadOnlyMany
+  resources:
+    requests:
+      storage: 400T
+  storageClassName: ""
+  volumeMode: Filesystem
+  volumeName: pv-prod-backup-archives