wip: atlantis local chart and muliple envs

values/atlantis/prod/appsettings.json

@@ -1,96 +0,0 @@
-{
-    "oidc": {
-        "issuer": "https://auth.oceanbox.io/realms/oceanbox",
-        "authorization_endpoint": "https://auth.oceanbox.io/realms/oceanbox/protocol/openid-connect/auth",
-        "token_endpoint": "https://auth.oceanbox.io/realms/oceanbox/protocol/openid-connect/token",
-        "jwks_uri": "https://auth.oceanbox.io/realms/oceanbox/protocol/openid-connect/certs",
-        "userinfo_endpoint": "https://auth.oceanbox.io/realms/oceanbox/protocol/openid-connect/userinfo",
-        "end_session_endpoint": "https://auth.oceanbox.io/realms/oceanbox/protocol/openid-connect/logout",
-        "device_authorization_endpoint": "https://auth.oceanbox.io/realms/oceanbox/protocol/openid-connect/auth/device",
-        "clientId": "atlantis",
-        "clientSecret": "",
-        "scopes": [
-            "openid",
-            "email",
-            "offline_access",
-            "profile"
-        ],
-        "audiences": [
-            "atlantis",
-            "atlantis_dev",
-            "sorcerer",
-            "sorcerer_dev"
-        ]
-    },
-    "sso": {
-        "cookieDomain": ".oceanbox.io",
-        "cookieName": ".obx.prod",
-        "ttl": 12.0,
-        "signedOutRedirectUri": "https://maps.beta.oceanbox.io",
-        "realm": "atlantis",
-        "environment": "prod",
-        "keyStore": {
-            "kind": "azure",
-            "uri": "https://atlantis.blob.core.windows.net",
-            "key": "dataprotection-keys"
-        },
-        "keyVault": {
-            "kind": "azure",
-            "uri": "https://atlantisvault.vault.azure.net",
-            "key": "dataencryption-keys"
-        }
-    },
-    "fga": {
-      "apiUrl": "http://prod-openfga.openfga.svc.cluster.local:8080",
-      "apiKey": "",
-      "storeId": "01JKTZXMP7ANN4GG2P5W8Y56M6",
-      "modelId": "01JKTZYMCZZBVSBG66W27XMW0A"
-    },
-    "plainAuthUsers": [
-        {
-            "username": "admin",
-            "password": "en-to-tre-fire",
-            "groups": [ "/oceanbox" ],
-            "roles": [ "admin" ]
-        },
-        {
-            "username": "sorcerer",
-            "password": "fire tre to en",
-            "groups": [ "/oceanbox" ],
-            "roles": [ "admin" ]
-        },
-        {
-            "username": "archivist",
-            "password": "en-to-tre-fire",
-            "groups": [ "/oceanbox" ],
-            "roles": [ "admin" ]
-        }
-    ],
-    "redis": "prod-atlantis-redis-master:6379",
-    "objectStore": "https://atlantis.blob.core.windows.net",
-    "connString": "Username=postgres;Password=secret;Host=localhost;Port=5432;Database=app;Pooling=true;",
-    "sorcerer" : "https://sorcerer.data.oceanbox.io",
-    "allowedOrigins": [
-        "https://maps.oceanbox.io",
-        "https://maps.beta.oceanbox.io",
-    ],
-    "appName": "atlantis",
-    "appEnv": "prod",
-    "appNamespace": "atlantis",
-    "appVersion": "2.95.1",
-    "otelCollector": "http://opentelemetry-collector.otel.svc:4317",
-    "pubsubName": "pubsub",
-    "pubsubTopic": "hipster-atlantis",
-    "slurm": {
-        "baseUrl": "https://hipster-slurmrestd.ekman.oceanbox.io/",
-        "slurmApi": "slurm/v0.0.39/",
-        "dbdApi": "slurmdbd/v0.0.39/",
-        "user": "serf",
-        "password": "wooqueiLee3ao0ha"
-    },
-    "amqp": {
-        "auth": "user:hunny-bunny",
-        "host": "10.255.241.201:30673"
-    },
-    "fenceRadius": 1250.0
-}

values/atlantis/prod/barentswatch-api.env

@@ -1,2 +0,0 @@
-client-id=simen.kirkvik@tromso.serit.no:simkir-tilt-atlantis
-secret=d9tInZ1XpeDAxD.DySv'*SB=P

values/atlantis/prod/bindings.yaml

@@ -1,22 +0,0 @@
-apiVersion: dapr.io/v1alpha1
-kind: Component
-metadata:
-  name: slurm-events
-spec:
-  type: bindings.rabbitmq
-  version: v1
-  metadata:
-  - name: host
-    secretKeyRef:
-      name: prod-atlantis-rabbitmq
-      key:  connString
-  - name: queueName
-    value: prod-slurm-job-events
-  - name: durable
-    value: true
-  - name: contentType
-    value: "application/json"
-  - name: route
-    value: /events/slurm
-scopes:
-  - prod-atlantis

values/atlantis/prod/configurations.yaml

@@ -1,20 +0,0 @@
-apiVersion: dapr.io/v1alpha1
-kind: Component
-metadata:
-  name: configstore
-spec:
-  type: configuration.redis
-  version: v1
-  metadata:
-  - name: redisHost
-    value: prod-atlantis-redis-master:6379
-  - name: redisUsername
-    value: default
-  - name: redisPassword
-    secretKeyRef:
-      name: prod-atlantis-redis
-      key:  redis-password
-  - name: redisDB
-    value: "1"
-scopes:
-  - prod-atlantis

values/atlantis/prod/default.env

@@ -1 +0,0 @@
-OIDC_CLIENT_SECRET=KOJ6bDHzE5vdyfSrzgwLjtM5PzA809Zm

values/atlantis/prod/deployment_patch.yaml

@@ -1,10 +0,0 @@
-- op: add
-  path: /spec/template/spec/containers/0/envFrom/-
-  value:
-    secretRef:
-      name: azure-keyvault
-- op: add
-  path: /spec/template/spec/containers/0/envFrom/-
-  value:
-    secretRef:
-      name: prod-atlantis-env

values/atlantis/prod/keyvault.yaml

@@ -1,22 +0,0 @@
-apiVersion: dapr.io/v1alpha1
-kind: Component
-metadata:
-  name: azure-keyvault
-spec:
-  type: secretstores.azure.keyvault
-  version: v1
-  metadata:
-  - name: vaultName
-    value: atlantisvault
-  - name: azureTenantId
-    secretKeyRef:
-      name: azure-keyvault
-      key: AZURE_TENANT_ID
-  - name: azureClientId
-    secretKeyRef:
-      name: azure-keyvault
-      key: AZURE_CLIENT_ID
-  - name: azureClientSecret
-    secretKeyRef:
-      name: azure-keyvault
-      key: AZURE_CLIENT_SECRET

values/atlantis/prod/kustomization.yaml

@@ -1,24 +0,0 @@
-generatorOptions:
-  disableNameSuffixHash: true
-configMapGenerator:
-- name: prod-atlantis-appsettings
-  files:
-    - appsettings.json
-patches:
-  - target:
-      group: apps
-      version: v1
-      kind: Deployment
-    path: deployment_patch.yaml
-resources:
-  - ../base
-  - secrets.yaml
-  - rbac.yaml
-  - tracing.yaml
-  - bindings.yaml
-  - pubsub.yaml
-  - statestore.yaml
-  - subscriptions.yaml
-  - configurations.yaml
-  - secretstore.yaml
-  - keyvault.yaml

values/atlantis/prod/pubsub.yaml

@@ -1,52 +0,0 @@
-apiVersion: dapr.io/v1alpha1
-kind: Component
-metadata:
-  name: pubsub
-spec:
-  version: v1
-  type: pubsub.rabbitmq
-  metadata:
-  - name: hostname
-    value: prod-rabbitmq.rabbitmq
-  - name: username
-    value: user
-  - name: password
-    secretKeyRef:
-      name: prod-atlantis-rabbitmq
-      key:  rabbitmq-password
-  - name: protocol
-    value: amqp
-  - name: durable
-    value: true
-  - name: deletedWhenUnused
-    value: false
-  - name: autoAck
-    value: false
-  - name: deliveryMode
-    value: 1
-  - name: requeueInFailure
-    value: false
-  - name: prefetchCount
-    value: 0
-  - name: reconnectWait
-    value: 0
-  - name: concurrencyMode
-    value: parallel
-  - name: publisherConfirm
-    value: false
-  - name: backOffPolicy
-    value: exponential
-  - name: backOffInitialInterval
-    value: 100
-  - name: backOffMaxRetries
-    value: 16
-  - name: enableDeadLetter # Optional enable dead Letter or not
-    value: true
-  - name: maxLen # Optional max message count in a queue
-    value: 3000
-  - name: maxLenBytes # Optional maximum length in bytes of a queue.
-    value: 10485760
-  - name: exchangeKind
-    value: fanout
-  - name: clientName
-    value: "{appID}"

values/atlantis/prod/rbac.yaml

@@ -1,39 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: prod-atlantis
-  namespace: prod-atlantis
-rules:
-- apiGroups:
-  - ""
-  resourceNames:
-  - prod-atlantis-appsettings
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - watch
-- apiGroups:
-  - ""
-  resourceNames:
-  - azure-keyvault
-  - prod-atlantis-redis
-  resources:
-  - secrets
-  verbs:
-  - get
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: prod-atlantis
-  namespace: prod-atlantis
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: prod-atlantis
-subjects:
-- kind: ServiceAccount
-  name: prod-atlantis
-  namespace: prod-atlantis

values/atlantis/prod/redis.yaml

@@ -1,23 +0,0 @@
-architecture: replication
-
-replica:
-  replicaCount: 2
-
-auth:
-  enabled: true
-  sentinel: true
-  password: ""
-  usePasswordFiles: false
-  existingSecretPasswordKey: ""
-  existingSecret: prod-atlantis-redis
-
-master:
-  resources:
-    limits:
-      ephemeral-storage: 1024Mi
-      memory: 192Mi
-    requests:
-      cpu: 150m
-      ephemeral-storage: 50Mi
-      memory: 128Mi
-

values/atlantis/prod/secrets.yaml

@@ -1,9 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  annotations:
-    kyverno/clone: "true"
-    kyverno/env: "prod"
-  name: prod-atlantis-rabbitmq
-type: Opaque
-data:

values/atlantis/prod/secretstore.yaml

@@ -1,10 +0,0 @@
-apiVersion: dapr.io/v1alpha1
-kind: Component
-metadata:
-  name: secretstore
-spec:
-  type: secretstores.kubernetes
-  version: v1
-  metadata:
-   - name: defaultNamespace
-     value: prod-atlantis

values/atlantis/prod/statestore.yaml

@@ -1,22 +0,0 @@
-apiVersion: dapr.io/v1alpha1
-kind: Component
-metadata:
-  name: statestore
-spec:
-  type: state.redis
-  version: v1
-  metadata:
-  - name: redisHost
-    value: prod-atlantis-redis-master:6379
-  - name: redisUsername
-    value: default
-  - name: redisPassword
-    secretKeyRef:
-      name: prod-atlantis-redis
-      key:  redis-password
-  - name: actorStateStore
-    value: "true"
-  - name: redisDB
-    value: "0"
-scopes:
-  - prod-atlantis

values/atlantis/prod/subscriptions.yaml

@@ -1,27 +0,0 @@
-apiVersion: dapr.io/v2alpha1
-kind: Subscription
-metadata:
-  name: hipster-events
-spec:
-  topic: hipster
-  routes:
-    default: /events/hipster
-  pubsubname: pubsub
-  metadata:
-    queueType: quorum
-scopes:
-- prod-atlantis
----
-apiVersion: dapr.io/v2alpha1
-kind: Subscription
-metadata:
-  name: inbox-events
-spec:
-  topic: inbox
-  routes:
-    default: /events/inbox
-  pubsubname: pubsub
-  metadata:
-    queueType: quorum
-scopes:
-- prod-atlantis

values/atlantis/prod/tracing.yaml

@@ -1,11 +0,0 @@
-apiVersion: dapr.io/v1alpha1
-kind: Configuration
-metadata:
-  name: tracing
-spec:
-  tracing:
-    samplingRate: "1"
-    otel:
-      endpointAddress: "opentelemetry-collector.otel.svc.cluster.local:4317"
-      protocol: grpc
-      isSecure: false