183 lines
4.2 KiB
YAML
183 lines
4.2 KiB
YAML
global:
|
|
namespace: my-apps
|
|
imagePullSecrets: []
|
|
|
|
# Backend configuration
|
|
backend:
|
|
name: backend
|
|
replicaCount: 2
|
|
image:
|
|
repository: harbor.dvirlabs.com/my-apps/my-recipes-backend
|
|
pullPolicy: IfNotPresent
|
|
tag: "latest"
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8000
|
|
targetPort: 8000
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
|
|
env:
|
|
PYTHONUNBUFFERED: "1"
|
|
|
|
# Secrets are created in db-secret.yaml
|
|
# These are passed via envFrom secretRef
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: "alb"
|
|
annotations:
|
|
alb.ingress.kubernetes.io/scheme: internet-facing
|
|
alb.ingress.kubernetes.io/target-type: ip
|
|
alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
|
|
alb.ingress.kubernetes.io/certificate-arn: "" # Set in project-specific values
|
|
hosts:
|
|
- host: api-my-recipes.dvirlabs.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: api-my-recipes-tls
|
|
hosts:
|
|
- api-my-recipes.dvirlabs.com
|
|
|
|
# Frontend configuration
|
|
frontend:
|
|
name: frontend
|
|
replicaCount: 2
|
|
image:
|
|
repository: harbor.dvirlabs.com/my-apps/my-recipes-frontend
|
|
pullPolicy: IfNotPresent
|
|
tag: "latest"
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 80
|
|
targetPort: 80
|
|
|
|
env:
|
|
API_BASE: "https://api-my-recipes.dvirlabs.com"
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: "alb"
|
|
annotations:
|
|
alb.ingress.kubernetes.io/scheme: internet-facing
|
|
alb.ingress.kubernetes.io/target-type: ip
|
|
alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
|
|
alb.ingress.kubernetes.io/certificate-arn: "" # Set in project-specific values
|
|
hosts:
|
|
- host: my-recipes.dvirlabs.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: my-recipes-tls
|
|
hosts:
|
|
- my-recipes.dvirlabs.com
|
|
externalUrl: "https://my-recipes.dvirlabs.com"
|
|
|
|
# PostgreSQL configuration
|
|
postgres:
|
|
name: db
|
|
image:
|
|
repository: postgres
|
|
tag: "16-alpine"
|
|
pullPolicy: IfNotPresent
|
|
|
|
user: recipes_user
|
|
password: recipes_password
|
|
database: recipes_db
|
|
port: 5432
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 5432
|
|
targetPort: 5432
|
|
|
|
persistence:
|
|
enabled: true
|
|
accessMode: ReadWriteOnce
|
|
storageClass: "nfs-client"
|
|
size: 10Gi
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
|
|
# OAuth Configuration
|
|
oauth:
|
|
google:
|
|
clientId: "143092846986-hsi59m0on2c9rb5qrdoejfceieao2ioc.apps.googleusercontent.com"
|
|
clientSecret: "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"
|
|
redirectUri: "https://api-my-recipes.dvirlabs.com/auth/google/callback"
|
|
|
|
azure:
|
|
clientId: "db244cf5-eb11-4738-a2ea-5b0716c9ec0a"
|
|
clientSecret: "Zad8Q~qRBxaQq8up0lLXAq4pHzrVM2JFGFJhHaDp"
|
|
tenantId: "consumers"
|
|
redirectUri: "https://api-my-recipes.dvirlabs.com/auth/azure/callback"
|
|
|
|
# Email Configuration
|
|
email:
|
|
smtpHost: "smtp.gmail.com"
|
|
smtpPort: "587"
|
|
smtpUser: "dvirlabs@gmail.com"
|
|
smtpPassword: "agaanrhbbazbdytv"
|
|
smtpFrom: "dvirlabs@gmail.com"
|
|
|
|
# S3 Backup Configuration
|
|
s3:
|
|
endpoint: "https://s3.amazonaws.com" # Can be overridden for specific regions
|
|
accessKey: "" # Set this in project-specific values.yaml
|
|
secretKey: "" # Set this in project-specific values.yaml
|
|
bucketName: "" # Set this in project-specific values.yaml
|
|
region: "us-east-1" # Set this in project-specific values.yaml
|
|
backupInterval: "weekly" # Options: test (1 min), daily, weekly
|
|
|
|
# Admin User Configuration
|
|
admin:
|
|
username: "admin"
|
|
email: "admin@example.com"
|
|
password: "admin123" # Change this in production!
|
|
firstName: "Admin"
|
|
lastName: "User"
|
|
displayName: "Admin User"
|
|
|
|
# Ingress configuration
|
|
ingress:
|
|
enabled: false # Individual frontend/backend ingress resources handle routing instead
|
|
className: "nginx"
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
hosts:
|
|
- host: my-recipes.dvirlabs.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend: frontend
|
|
tls:
|
|
- secretName: recipes-tls
|
|
hosts:
|
|
- my-recipes.dvirlabs.com
|
|
|