From 3a62bd4792d98ebdb3173d0b5a8dc869eb1f6ef4 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 22 Oct 2026 14:30:59 +0300
Subject: [PATCH] ++ spicedb vk prod

---
 .../vk-prod/infrastructure/kustomization.yaml |  1 +
 .../spicedb/vk-prod/kustomization.yaml        |  4 ++
 infrastructure/spicedb/vk-prod/spicedb.yaml   | 37 +++++++++++++++++++
 3 files changed, 42 insertions(+)
 create mode 100644 infrastructure/spicedb/vk-prod/kustomization.yaml
 create mode 100644 infrastructure/spicedb/vk-prod/spicedb.yaml

diff --git a/clusters/vk-prod/infrastructure/kustomization.yaml b/clusters/vk-prod/infrastructure/kustomization.yaml
index 9f288f5..1cc58d8 100644
--- a/clusters/vk-prod/infrastructure/kustomization.yaml
+++ b/clusters/vk-prod/infrastructure/kustomization.yaml
@@ -12,3 +12,4 @@ resources:
   - ../../../infrastructure/valkey/vk-prod
   - ../../../infrastructure/clickhouse/vk-prod
   - ../../../infrastructure/camunda/vk-prod
+  - ../../../infrastructure/spicedb/vk-prod
diff --git a/infrastructure/spicedb/vk-prod/kustomization.yaml b/infrastructure/spicedb/vk-prod/kustomization.yaml
new file mode 100644
index 0000000..0ed8ebf
--- /dev/null
+++ b/infrastructure/spicedb/vk-prod/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - spicedb.yaml
diff --git a/infrastructure/spicedb/vk-prod/spicedb.yaml b/infrastructure/spicedb/vk-prod/spicedb.yaml
new file mode 100644
index 0000000..bf83a2f
--- /dev/null
+++ b/infrastructure/spicedb/vk-prod/spicedb.yaml
@@ -0,0 +1,37 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: spicedb
+  namespace: spicedb-prod
+spec:
+  interval: 5m
+  timeout: 10m
+  chart:
+    spec:
+      chart: spicedb
+      version: "0.1.4-prod"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 0
+      remediateLastFailure: false
+  values:
+    replicas: 1
+    image:
+      repository: cr.yandex/crp3ccidau046kdj8g9q/spicedb-prod
+      tag: v1.54.0
+    imagePullSecrets:
+      - name: regcred
+    datastore:
+      mode: external
+      database: spicedb
+      username: spicedb
+    auth:
+      existingSecret: spicedb-secret