3ce93017f9
All checks were successful
AI Code Review / ai-review (pull_request) Successful in 34s
Two new ArgoCD Applications:
- forte-drop-postgresql: in-cluster Postgres 16 StatefulSet, 5Gi PVC,
POSTGRES_DB=drops, creds from forte-drop-pg-creds SealedSecret.
- forte-drop-minio: in-cluster MinIO StatefulSet, 20Gi PVC, bootstrap
Job creates the 'drops' bucket post-sync, creds from
forte-drop-minio-creds SealedSecret.
Both live in namespace 'forte-drop'. Mirrors the Vaultwarden pattern.
Sealed secrets are added in a follow-up commit by the maintainer:
kubeseal --fetch-cert > pub.pem
kubeseal --cert pub.pem --format yaml < private/forte-drop-pg-creds.yaml > \
infra/overlays/upc-dev/forte-drop-postgresql/resources/forte-drop-pg-creds-sealed.yaml
kubeseal --cert pub.pem --format yaml < private/forte-drop-minio-creds.yaml > \
infra/overlays/upc-dev/forte-drop-minio/resources/forte-drop-minio-creds-sealed.yaml
21 lines
465 B
YAML
21 lines
465 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- ../../base
|
|
- vaultwarden-postgresql
|
|
- vaultwarden
|
|
- forte-drop-postgresql
|
|
- forte-drop-minio
|
|
|
|
# No patches needed — base already has "upc-dev" paths
|
|
# upc-dev is the default/base cluster
|
|
|
|
patches:
|
|
- target:
|
|
kind: Application
|
|
name: databunker
|
|
patch: |
|
|
- op: add
|
|
path: /spec/sources/0/helm/valueFiles/-
|
|
value: $values/infra/values/upc-dev/databunker-values.yaml
|