chore: Checkout of previous helm config for atlantis, openfga, redis and rabbitmq

2025-06-10 20:06:01 +02:00
parent 1807d99524
commit 9e56811a8f
56 changed files with 1823 additions and 0 deletions
@@ -0,0 +1,41 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: staging-openfga-migrate
+  labels:
+    helm.sh/chart: openfga-0.2.12
+    app.kubernetes.io/name: openfga
+    app.kubernetes.io/instance: staging
+    app.kubernetes.io/version: "v1.5.9"
+    app.kubernetes.io/managed-by: Helm
+  annotations:
+    helm.sh/hook: post-install, post-upgrade, post-rollback, post-delete
+    helm.sh/hook-delete-policy: before-hook-creation
+    helm.sh/hook-weight: "-5"
+spec:
+  template:
+    metadata:
+      annotations:
+        helm.sh/hook: post-install, post-upgrade, post-rollback, post-delete
+        helm.sh/hook-delete-policy: before-hook-creation
+        helm.sh/hook-weight: "-5"
+    spec:
+      serviceAccountName: staging-openfga
+      containers:
+        - name: migrate-database
+          securityContext:
+            {}
+          image: "openfga/openfga:v1.5.9"
+          args: ["migrate"]
+          env:
+            - name: OPENFGA_DATASTORE_ENGINE
+              value: "postgres"
+            - name: OPENFGA_DATASTORE_URI
+              valueFrom:
+                secretKeyRef:
+                  name: "staging-openfga-db-superuser"
+                  key: "uri"
+          resources:
+            {}
+      restartPolicy: Never
+  backoffLimit: 1
@@ -0,0 +1,19 @@
+apiVersion: v1
+stringData:
+  postgres-password: blT6zzv37KyFvzb1Ct3bhfAwPxhTG2fBO1EiIASQWI4wnEOB8AOWvmVa2sogGexr
+  uri:  postgres://postgres:blT6zzv37KyFvzb1Ct3bhfAwPxhTG2fBO1EiIASQWI4wnEOB8AOWvmVa2sogGexr@prod-openfga-rw.openfga.svc.cluster.local:5432/postgres?sslmode=disable
+kind: Secret
+metadata:
+  name: prod-openfga-postgresql
+  namespace: openfga
+type: Opaque
+---
+apiVersion: v1
+stringData:
+  postgres-password: iAnMHs3eEuQM0D4jeAP1dwEoLWUBSwNXwhBuPDOgmfoeZ58iV0zogQ77U3GNUbwa
+  uri:  postgres://postgres:iAnMHs3eEuQM0D4jeAP1dwEoLWUBSwNXwhBuPDOgmfoeZ58iV0zogQ77U3GNUbwa@staging-openfga-rw.openfga.svc.cluster.local:5432/postgres?sslmode=disable
+kind: Secret
+metadata:
+  name: staging-openfga-postgresql
+  namespace: openfga
+type: Opaque
@@ -0,0 +1,57 @@
+replicaCount: 2
+
+datastore:
+  engine: postgres
+  uriSecret: prod-openfga-db-superuser
+  migrationType: initContainer
+
+postgresql:
+  enabled: false
+
+playground:
+  enabled: false
+
+telemetry:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    enableRPCHistograms: true
+  trace:
+    enabled: true
+    otlp:
+      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+    sampleRatio: 0.1
+
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+  hosts:
+    - host: openfga.srv.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+   - secretName: prod-openfga-tls
+     hosts:
+       - openfga.srv.oceanbox.io
+
+extraObjects:
+ - apiVersion: postgresql.cnpg.io/v1
+   kind: Cluster
+   metadata:
+     name: prod-openfga-db
+     namespace: openfga
+   spec:
+     instances: 2
+     imageName: ghcr.io/cloudnative-pg/postgresql:17-bookworm
+     storage:
+       resizeInUseVolumes: true
+       size: 10Gi
+     backup:
+       retentionPolicy: 60d
+       target: prefer-standby
@@ -0,0 +1,78 @@
+replicaCount: 1
+
+datastore:
+  engine: postgres
+  uriSecret: staging-openfga-db-superuser
+  migrationType: initContainer
+
+postgresql:
+  enabled: false
+
+playground:
+  enabled: false
+
+telemetry:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    enableRPCHistograms: true
+  trace:
+    enabled: true
+    otlp:
+      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+    sampleRatio: 0.1
+
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+  hosts:
+    - host: openfga.dev.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+   - secretName: staging-openfga-tls
+     hosts:
+       - openfga.dev.oceanbox.io
+
+extraObjects:
+  - apiVersion: postgresql.cnpg.io/v1
+    kind: Cluster
+    metadata:
+      name: staging-openfga-db
+      namespace: openfga
+    spec:
+      instances: 1
+      imageName: ghcr.io/cloudnative-pg/postgresql:17-bookworm
+      storage:
+        resizeInUseVolumes: true
+        size: 10Gi
+      backup:
+        retentionPolicy: 60d
+        target: prefer-standby
+      bootstrap:
+        pg_basebackup:
+          database: ""
+          owner: ""
+          source: openfga
+      enableSuperuserAccess: true
+      externalClusters:
+      - name: openfga
+        connectionParameters:
+          host: prod-openfga-db-rw.openfga
+          sslmode: verify-full
+          user: streaming_replica
+        sslCert:
+          key: tls.crt
+          name: prod-openfga-db-replication
+        sslKey:
+          key: tls.key
+          name: prod-openfga-db-replication
+        sslRootCert:
+          key: ca.crt
+          name: prod-openfga-db-ca