fix: fix fixes

values/sorcerer/prod/rbac.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: prod-sorcerer
-  namespace: prod
+  namespace: prod-sorcerer
 rules:
 - apiGroups:
   - ""
@@ -28,7 +28,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: prod-sorcerer
-  namespace: prod
+  namespace: prod-sorcerer
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -36,4 +36,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: prod-sorcerer
-  namespace: prod
+  namespace: prod-sorcerer

values/sorcerer/prod/secrets.yaml

@@ -1,11 +1,11 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  annotations:
-    kyverno/clone: "true"
-  name: prod-sorcerer-env
-type: Opaque
-data:
+# apiVersion: v1
+# kind: Secret
+# metadata:
+#   annotations:
+#     kyverno/clone: "true"
+#   name: prod-sorcerer-env
+# type: Opaque
+# data:
 ---
 apiVersion: v1
 kind: Secret
@@ -14,4 +14,4 @@ metadata:
     kyverno/clone: "true"
   name: azure-keyvault
 type: Opaque
-data:
+data:

values/sorcerer/staging/rbac.yaml

@@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: staging-sorcerer
-  namespace: staging
+  namespace: staging-sorcerer
 rules:
 - apiGroups:
   - ""
@@ -28,7 +28,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: staging-sorcerer
-  namespace: staging
+  namespace: staging-sorcerer
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
@@ -36,4 +36,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: staging-sorcerer
-  namespace: staging
+  namespace: staging-sorcerer

values/sorcerer/staging/secrets.yaml

@@ -1,11 +1,11 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  annotations:
-    kyverno/clone: "true"
-  name: staging-sorcerer-env
-type: Opaque
-data:
+# apiVersion: v1
+# kind: Secret
+# metadata:
+#   annotations:
+#     kyverno/clone: "true"
+#   name: staging-sorcerer-env
+# type: Opaque
+# data:
 ---
 apiVersion: v1
 kind: Secret
@@ -14,4 +14,4 @@ metadata:
     kyverno/clone: "true"
   name: azure-keyvault
 type: Opaque
-data:
+data:

values/sorcerer/values-prod.yaml

@@ -1,6 +1,35 @@
-replicaCount: 2
+replicaCount: 1
+
+image:
+  tag: latest
+
+podAnnotations:
+  dapr.io/app-id: "prod-sorcerer"
+  dapr.io/enabled: "true"
+  dapr.io/app-port: "8085"
+  dapr.io/config: "tracing"
+  dapr.io/app-protocol: "http"
+  dapr.io/log-as-json: "true"
+  dapr.io/sidecar-cpu-request: "10m"
+  dapr.io/sidecar-memory-request: "50Mi"
+  # dapr.io/sidecar-cpu-limit: "300m"
+  # dapr.io/sidecar-memory-limit: "1000Mi"
+
+env:
+  - name: APP_VERSION
+    value: "0.0.0"
+  - name: LOG_LEVEL
+    value: "2"
+  - name: REDIS_USER
+    value: default
+  - name: REDIS_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: prod-redis
+        key: redis-password
 
 ingress:
+  enabled: true
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production
     nginx.ingress.kubernetes.io/affinity: "cookie"