fix(nubus): Update nubus provisioning and consumer configuration

This commit is contained in:
Johannes Lohmer
2024-08-09 22:56:29 +02:00
committed by Johannes Bornhold
parent 269c8270ee
commit 95c4dd2e2e
6 changed files with 35 additions and 18 deletions

View File

@@ -275,14 +275,21 @@ nubusPortalFrontend:
secretName: {{ .Values.ingress.tls.secretName | quote }} secretName: {{ .Values.ingress.tls.secretName | quote }}
nubusPortalListener: nubusPortalListener:
enabled: false
nubusPortalConsumer:
enabled: true enabled: true
portalListener: portalConsumer:
logLevel: {{ if .Values.debug.enabled }}"DEBUG"{{ else }}"INFO"{{ end }}
objectStorageEndpoint: {{ .Values.objectstores.nubus.endpoint | default (printf "https://%s.%s" .Values.global.hosts.minioApi .Values.global.domain) | quote }} objectStorageEndpoint: {{ .Values.objectstores.nubus.endpoint | default (printf "https://%s.%s" .Values.global.hosts.minioApi .Values.global.domain) | quote }}
objectStorageBucket: {{ .Values.objectstores.nubus.bucket | quote }} objectStorageBucket: {{ .Values.objectstores.nubus.bucket | quote }}
objectStorageCredentialSecret: objectStorageCredentialSecret:
name: "ums-portal-listener-minio-opendesk-credentials" name: "ums-portal-consumer-minio-opendesk-credentials"
accessKeyKey: "access-key-id" accessKeyKey: "access-key-id"
secretKeyKey: "secret-key-id" secretKeyKey: "secret-key-id"
provisioningApi:
auth:
username: "portal-consumer"
nubusPortalConsumer: nubusPortalConsumer:
enabled: false enabled: false
@@ -323,15 +330,17 @@ nubusUdmRestApi:
secretName: {{ .Values.ingress.tls.secretName | quote }} secretName: {{ .Values.ingress.tls.secretName | quote }}
nubusProvisioning: nubusProvisioning:
enabled: false
nubusUdmListener:
enabled: false
nubusSelfServiceListener:
enabled: true enabled: true
nubusSelfServiceConsumer: nubusUdmListener:
enabled: true
nubusSelfServiceListener:
enabled: false enabled: false
nubusSelfServiceConsumer:
enabled: true
# Nubus services # Nubus services
nubusStackDataUms: nubusStackDataUms:
stackDataContext: stackDataContext:
@@ -513,7 +522,7 @@ extraSecrets:
stringData: stringData:
access-key-id: {{ .Values.objectstores.nubus.username | quote }} access-key-id: {{ .Values.objectstores.nubus.username | quote }}
secret-key-id: {{ .Values.objectstores.nubus.secretKey | default .Values.secrets.minio.umsUser | quote }} secret-key-id: {{ .Values.objectstores.nubus.secretKey | default .Values.secrets.minio.umsUser | quote }}
- name: "ums-portal-listener-minio-opendesk-credentials" - name: "ums-portal-consumer-minio-opendesk-credentials"
stringData: stringData:
access-key-id: {{ .Values.objectstores.nubus.username | quote }} access-key-id: {{ .Values.objectstores.nubus.username | quote }}
secret-key-id: {{ .Values.objectstores.nubus.secretKey | default .Values.secrets.minio.umsUser | quote }} secret-key-id: {{ .Values.objectstores.nubus.secretKey | default .Values.secrets.minio.umsUser | quote }}

View File

@@ -87,15 +87,17 @@ nubusKeycloakExtensions:
resources: resources:
{{ .Values.resources.umsKeycloakExtensionProxy | toYaml | nindent 6 }} {{ .Values.resources.umsKeycloakExtensionProxy | toYaml | nindent 6 }}
nubusPortalListener: nubusPortalConsumer:
podAnnotations: podAnnotations:
intents.otterize.com/service-name: "ums-portal-listener" intents.otterize.com/service-name: "ums-portal-consumer"
replicaCount: {{ .Values.replicas.umsPortalListener }} replicaCount: {{ .Values.replicas.umsPortalConsumer }}
resources: resources:
{{ .Values.resources.umsPortalListener | toYaml | nindent 4 }} {{ .Values.resources.umsPortalConsumer | toYaml | nindent 4 }}
resourcesWaitForDependency:
{{ .Values.resources.umsPortalConsumerDependencies | toYaml | nindent 4 }}
persistence: persistence:
storageClass: {{ .Values.persistence.storageClassNames.RWO | quote }} storageClass: {{ .Values.persistence.storageClassNames.RWO | quote }}
size: {{ .Values.persistence.size.nubus.portalListener | quote }} size: {{ .Values.persistence.size.nubus.portalConsumer | quote }}
nubusPortalConsumer: nubusPortalConsumer:
podAnnotations: podAnnotations:

View File

@@ -51,6 +51,13 @@ nubusLdapServer:
repository: {{ .Values.images.nubusWaitForDependency.repository }} repository: {{ .Values.images.nubusWaitForDependency.repository }}
tag: {{ .Values.images.nubusWaitForDependency.tag }} tag: {{ .Values.images.nubusWaitForDependency.tag }}
nubusPortalConsumer:
portalConsumer:
image:
registry: {{ .Values.images.nubusPortalConsumer.registry }}
repository: {{ .Values.images.nubusPortalConsumer.repository }}
tag: {{ .Values.images.nubusPortalConsumer.tag }}
nubusNotificationsApi: nubusNotificationsApi:
image: image:
registry: {{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.nubusNotificationsApi.registry | quote }} registry: {{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.nubusNotificationsApi.registry | quote }}

View File

@@ -93,9 +93,9 @@ replicas:
umsNotificationsApi: 1 umsNotificationsApi: 1
# -- scalable: true # -- scalable: true
umsPortalFrontend: 1 umsPortalFrontend: 1
# -- scalable: tbd # -- scalable: false
umsPortalListener: 1 umsPortalListener: 1
# -- scalable: tbd # -- scalable: False
umsPortalConsumer: 1 umsPortalConsumer: 1
# -- scalable: true # -- scalable: true
umsPortalServer: 1 umsPortalServer: 1

View File

@@ -471,14 +471,14 @@ resources:
requests: requests:
cpu: 0.1 cpu: 0.1
memory: "256Mi" memory: "256Mi"
umsPortalListener: umsPortalConsumer:
limits: limits:
cpu: 99 cpu: 99
memory: "1Gi" memory: "1Gi"
requests: requests:
cpu: 0.1 cpu: 0.1
memory: "256Mi" memory: "256Mi"
umsPortalListenerDependencies: umsPortalConsumerDependencies:
limits: limits:
cpu: 99 cpu: 99
memory: "1Gi" memory: "1Gi"

View File

@@ -36,7 +36,6 @@ secrets:
sysIdpUserPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "nubus" "sysIdpUser" | sha1sum | quote }} sysIdpUserPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "nubus" "sysIdpUser" | sha1sum | quote }}
storeDavUsers: storeDavUsers:
portalServer: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-server" "store-dav" | sha1sum | quote }} portalServer: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-server" "store-dav" | sha1sum | quote }}
portalListener: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-listener" "store-dav" | sha1sum | quote }}
portalConsumer: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-consumer" "store-dav" | sha1sum | quote }} portalConsumer: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-consumer" "store-dav" | sha1sum | quote }}
provisioning: provisioning:
apiNatsPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "api" "nats" | sha1sum | quote }} apiNatsPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "api" "nats" | sha1sum | quote }}