You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
prodwork01-mobene-deployment/values_nsodev.yaml

138 lines
4.3 KiB
YAML

# minio tenant
tenant:
tenant:
name: s3-nsodev-prodwork01
configuration:
name: minio-config
pools:
- servers: 2
volumesPerServer: 2
storageClassName: hcloud-volumes
size: 20Gi
buckets:
- name: mysql
region: ""
- name: postgres
region: ""
- name: wordpress
region: ""
users:
- name: pgbackup
- name: wpbackup
prometheus:
diskCapacityGB: false
log:
audit:
diskCapacityGB: false
env:
- name: MINIO_PROMETHEUS_AUTH_TYPE
value: "public"
- name: MINIO_PROMETHEUS_JOB_ID
value: "minio"
- name: MINIO_PROMETHEUS_URL
value: "http://kube-prometheus-stack-prometheus.monitoring:9090"
- name: CONSOLE_PROMETHEUS_URL
value: "http://kube-prometheus-stack-prometheus.monitoring:9090"
ingress:
api:
enabled: true
ingressClassName: nginx
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
cert-manager.io/issue-temporary-certificate: "true"
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
nginx.ingress.kubernetes.io/proxy-body-size: 32m
nginx.ingress.kubernetes.io/whitelist-source-range: >-
212.121.131.106/32,149.233.6.129/32,46.245.219.98/32,164.138.195.162/32,195.201.31.227/32,167.235.150.201/32,167.235.150.198/32,167.235.150.195/32,167.235.150.133/32,167.235.150.197/32,23.88.53.161/32,195.201.113.110/32,5.75.184.216/32,195.201.127.50/32
host: s3storage-nsodev-prodwork01.smardigo.digital
tls:
- secretName: s3-miniotest-cert
hosts:
- s3storage-nsodev-prodwork01.smardigo.digital
console:
enabled: true
ingressClassName: nginx
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
cert-manager.io/issue-temporary-certificate: "true"
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
host: s3console-nsodev-prodwork01.smardigo.digital
tls:
- secretName: s3-console-cert
hosts:
- s3console-nsodev-prodwork01.smardigo.digital
kibana:
name: kibana-nsodev-prodwork01.smardigo.digital
smardigo-connect:
postgres:
spec:
volume:
size: 11Gi
monitoring:
alerts:
postgres:
basebackup:
timeThreshold: 86400 # for backups older than 1 day
teamLabel: alerting-nso-mobene
connect:
additional_labels:
restart: 20230217-1145
domain: connect-nsodev-prodwork01.smardigo.digital
image:
version: 10.4.13
oidc:
client_id: nsodev
registration_id: nsodev
issuer_host: prodnso-keycloak-01.smardigo.digital
realm: mobene
iam:
iam_module: external
iam_client_enabled: "true"
protocol: http
hostname: iam.mobene-keycloak
port: 8080
ocr:
enabled: true
four_eyes_principle_deletion: true
config_delete_scope_enabled: true
smardigo-worker:
uba:
enabled: true
sepa:
enabled: true
ocr:
enabled: true
image:
version: 10.4.5
smardigo-wordpress:
wordpress:
nameOverride: wordpress-thgquotenservice
multisite:
host: connect-wordpress-nsodev-prodwork01.smardigo.digital
customPostInitScripts:
install-plugins.sh: |
#!/bin/bash
wp plugin install https://updraftplus.com/wp-content/uploads/updraftplus.zip --activate-network
ingress:
hostname: connect-wordpress-nsodev-prodwork01.smardigo.digital
extraHosts:
- name: "*.connect-wordpress-nsodev-prodwork01.smardigo.digital"
path: /
extraTls:
- hosts:
- "*.connect-wordpress-nsodev-prodwork01.smardigo.digital"
secretName: "connect-wordpress-nsodev-prodwork01.smardigo.digital-wildcard-tls"
customerIpWhitelist: "212.121.131.106/32,149.233.6.129/32,46.245.219.98/32,164.138.195.162/32,195.201.31.227/32,167.235.150.201/32,167.235.150.198/32,167.235.150.195/32,167.235.150.133/32,167.235.150.197/32,23.88.53.161/32,195.201.113.110/32,5.75.184.216/32,195.201.127.50/32,79.140.122.22/32"
commonLabels:
app: wordpress
project: thgquotenservice
egeld24-wordpress:
enabled: false