wip: helmfileify

2025-06-02 22:25:06 +02:00
parent 65d65ea126
commit a0a0f8586d
73 changed files with 1491 additions and 121 deletions
@@ -0,0 +1,58 @@
+replicaCount: 2
+
+datastore:
+  engine: postgres
+  uriSecret: prod-openfga-db-superuser
+  migrationType: initContainer
+
+#postgresql:
+#  enabled: false
+#
+#playground:
+#  enabled: false
+#
+#telemetry:
+#  metrics:
+#    enabled: true
+#    serviceMonitor:
+#      enabled: true
+#    enableRPCHistograms: true
+#  trace:
+#    enabled: true
+#    otlp:
+#      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+#    sampleRatio: 0.1
+
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+  hosts:
+    - host: openfga.srv.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+   - secretName: prod-openfga-tls
+     hosts:
+       - openfga.srv.oceanbox.io
+
+extraObjects:
+ - apiVersion: postgresql.cnpg.io/v1
+   kind: Cluster
+   metadata:
+     name: prod-openfga-db
+     namespace: openfga
+   spec:
+     instances: 2
+     imageName: ghcr.io/cloudnative-pg/postgresql:17-bookworm
+     storage:
+       resizeInUseVolumes: true
+       size: 10Gi
+     backup:
+       retentionPolicy: 60d
+       target: prefer-standby
+
@@ -0,0 +1,79 @@
+replicaCount: 1
+
+datastore:
+  engine: postgres
+  uriSecret: staging-openfga-db-superuser
+  migrationType: initContainer
+
+#postgresql:
+#  enabled: false
+#
+#playground:
+#  enabled: false
+#
+#telemetry:
+#  metrics:
+#    enabled: true
+#    serviceMonitor:
+#      enabled: true
+#    enableRPCHistograms: true
+#  trace:
+#    enabled: true
+#    otlp:
+#      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+#    sampleRatio: 0.1
+
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
+  hosts:
+    - host: openfga.dev.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+   - secretName: staging-openfga-tls
+     hosts:
+       - openfga.dev.oceanbox.io
+
+extraObjects:
+  - apiVersion: postgresql.cnpg.io/v1
+    kind: Cluster
+    metadata:
+      name: staging-openfga-db
+      namespace: openfga
+    spec:
+      instances: 1
+      imageName: ghcr.io/cloudnative-pg/postgresql:17-bookworm
+      storage:
+        resizeInUseVolumes: true
+        size: 10Gi
+      backup:
+        retentionPolicy: 60d
+        target: prefer-standby
+      bootstrap:
+        pg_basebackup:
+          database: ""
+          owner: ""
+          source: openfga
+      enableSuperuserAccess: true
+      externalClusters:
+      - name: openfga
+        connectionParameters:
+          host: prod-openfga-db-rw.openfga
+          sslmode: verify-full
+          user: streaming_replica
+        sslCert:
+          key: tls.crt
+          name: prod-openfga-db-replication
+        sslKey:
+          key: tls.key
+          name: prod-openfga-db-replication
+        sslRootCert:
+          key: ca.crt
+          name: prod-openfga-db-ca
+
@@ -0,0 +1,17 @@
+postgresql:
+  enabled: false
+
+playground:
+  enabled: false
+
+telemetry:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    enableRPCHistograms: true
+  trace:
+    enabled: true
+    otlp:
+      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+    sampleRatio: 0.1