++ spicedb vk prod

clusters/vk-prod/infrastructure/kustomization.yaml

@@ -12,3 +12,4 @@ resources:
   - ../../../infrastructure/valkey/vk-prod
   - ../../../infrastructure/clickhouse/vk-prod
   - ../../../infrastructure/camunda/vk-prod
+  - ../../../infrastructure/spicedb/vk-prod

infrastructure/spicedb/vk-prod/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - spicedb.yaml

infrastructure/spicedb/vk-prod/spicedb.yaml

@@ -0,0 +1,37 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: spicedb
+  namespace: spicedb-prod
+spec:
+  interval: 5m
+  timeout: 10m
+  chart:
+    spec:
+      chart: spicedb
+      version: "0.1.4-prod"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 0
+      remediateLastFailure: false
+  values:
+    replicas: 1
+    image:
+      repository: cr.yandex/crp3ccidau046kdj8g9q/spicedb-prod
+      tag: v1.54.0
+    imagePullSecrets:
+      - name: regcred
+    datastore:
+      mode: external
+      database: spicedb
+      username: spicedb
+    auth:
+      existingSecret: spicedb-secret