5e5148e951
ns postgres-tls-test: postgresql-contour pg-tls с tls.autoGenerated, ssl_min_protocol_version TLSv1.2, pg_hba только hostssl (local для администрирования); notes-tls на образе notes-backend с PG_SSL_MODE/PGSSLMODE=verify-full и CA из pg-tls-crt. regcred в ns создаётся вручную.
85 lines
2.4 KiB
YAML
85 lines
2.4 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- ./flux-system
|
|
- ./helm-repositories.yaml
|
|
|
|
- ../../infrastructure/vault/uralkal
|
|
- ../../infrastructure/istio-base/uralkal
|
|
- ../../infrastructure/istio-pilot/uralkal
|
|
- ../../infrastructure/istio-gateway/uralkal
|
|
- ../../infrastructure/rabbitmq/uralkal
|
|
- ../../infrastructure/kafka/uralkal
|
|
- ../../infrastructure/postgresql/uralkal
|
|
- ../../infrastructure/zitadel/uralkal
|
|
- ../../infrastructure/camunda/uralkal
|
|
- ../../infrastructure/superset/uralkal
|
|
- ../../infrastructure/trino/uralkal
|
|
- ../../infrastructure/istio-config/uralkal
|
|
- ../../infrastructure/s3-proxy/uralkal
|
|
|
|
- ../../apps/reviews/uralkal
|
|
- ../../apps/remarks/uralkal
|
|
- ../../apps/auth-flow/uralkal
|
|
- ../../apps/control-interface/uralkal
|
|
- ../../apps/workspaces/uralkal
|
|
- ../../apps/eav/uralkal
|
|
- ../../apps/notes/uralkal
|
|
- ../../apps/rfi/uralkal
|
|
- ../../apps/checklists/uralkal
|
|
- ../../apps/contracts/uralkal
|
|
- ../../apps/django/uralkal
|
|
- ../../apps/documentations/uralkal
|
|
- ../../apps/processing/uralkal
|
|
- ../../apps/flows/uralkal
|
|
- ../../apps/issues/uralkal
|
|
- ../../apps/bim/uralkal
|
|
- ../../apps/attachments/uralkal
|
|
- ../../apps/bi/uralkal
|
|
- ../../apps/comparisons/uralkal
|
|
- ../../apps/drawings/uralkal
|
|
- ../../apps/inspections/uralkal
|
|
- ../../apps/mapper/uralkal
|
|
- ../../apps/measurements/uralkal
|
|
- ../../apps/subscriptions/uralkal
|
|
- ../../apps/system-log/uralkal
|
|
- ../../apps/transmittal/uralkal
|
|
- ../../apps/cross-section/uralkal
|
|
- ../../apps/document-link/uralkal
|
|
- ../../apps/prescriptions/uralkal
|
|
- ../../apps/projects/uralkal
|
|
- ../../apps/stamp-verification/uralkal
|
|
- ../../apps/faas/uralkal
|
|
- ../../apps/iam/uralkal
|
|
- ../../apps/pm/uralkal
|
|
- ../../apps/message-hub/uralkal
|
|
- ../../apps/cde/uralkal
|
|
- ../../apps/postgres-tls-test/uralkal
|
|
|
|
patches:
|
|
- target:
|
|
kind: HelmRelease
|
|
patch: |
|
|
- op: add
|
|
path: /spec/driftDetection
|
|
value:
|
|
mode: enabled
|
|
ignore:
|
|
- paths: ["/webhooks"]
|
|
target:
|
|
kind: MutatingWebhookConfiguration
|
|
- paths: ["/webhooks"]
|
|
target:
|
|
kind: ValidatingWebhookConfiguration
|
|
- target:
|
|
kind: HelmRelease
|
|
name: istiod
|
|
patch: |
|
|
- op: add
|
|
path: /spec/driftDetection/ignore/-
|
|
value:
|
|
paths: ["/spec/replicas"]
|
|
target:
|
|
kind: Deployment
|
|
|