Skip to content

Commit 110cb2d

Browse files
adskyiprogeradskyiproger
committed
Added new environment
1 parent f5c1459 commit 110cb2d

File tree

5 files changed

+222
-0
lines changed

5 files changed

+222
-0
lines changed

‎environments/demo-prod/dependencies/values.yaml‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
storage_type: host_path
2+
3+
ingress:
4+
tls_resolver: letsencrypt
5+
6+
minio:
7+
use_default_credentials: false
8+
9+
elasticsearch:
10+
use_default_credentials: false
11+
12+
mongodb:
13+
use_default_credentials: false
14+
15+
postgres:
16+
use_default_credentials: false
17+
18+
monitoring:
19+
enabled: true
20+
21+
elastalert:
22+
env:
23+
HTTP_POST2_ALERT_URL: http://countryconfig.opencrvs-demo-prod.svc.cluster.local:3040

‎environments/demo-prod/mosip-api/values.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
ingress:
2+
ssl_enabled: true

‎environments/demo-prod/opencrvs-services/values.yaml‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
########################################################################################
2+
# Initial configuration file for OpenCRVS installation
3+
########################################################################################
4+
# Some properties are not defined in this file and should be provided as key/value at
5+
# installation time:
6+
# - hostname: valid DNS name for opencrvs
7+
# - countryconfig.image.name: Countryconfig image repository
8+
# - countryconfig.image.tag: Countryconfig image tag
9+
ingress:
10+
tls_resolver: letsencrypt
11+
12+
hpa:
13+
enabled: false
14+
15+
env:
16+
APN_SERVICE_URL: "http://apm-server.opencrvs-deps-demo-prod.svc.cluster.local:8200"
17+
18+
influxdb:
19+
host: influxdb-0.influxdb.opencrvs-deps-demo-prod.svc.cluster.local
20+
elasticsearch:
21+
auth_mode: auto
22+
host: elasticsearch.opencrvs-deps-demo-prod.svc.cluster.local
23+
24+
25+
minio:
26+
auth_mode: use_secret
27+
host: minio-0.minio.opencrvs-deps-demo-prod.svc.cluster.local
28+
external_hostname: minio.test-k8s.opencrvs.dev
29+
30+
mongodb:
31+
auth_mode: auto
32+
host: mongodb-0.mongodb.opencrvs-deps-demo-prod.svc.cluster.local
33+
34+
redis:
35+
auth_mode: acl
36+
host: redis-0.redis.opencrvs-deps-demo-prod.svc.cluster.local
37+
38+
postgres:
39+
auth_mode: auto
40+
host: postgres-0.postgres.opencrvs-deps-demo-prod.svc.cluster.local
41+
42+
imagePullSecrets:
43+
# Default value for credentials created while yarn environment:init
44+
- name: dockerhub-credentials
45+
46+
countryconfig:
47+
smtp-config:
48+
- ALERT_EMAIL
49+
- SENDER_EMAIL_ADDRESS
50+
- SMTP_HOST
51+
- SMTP_PASSWORD
52+
- SMTP_PORT
53+
- SMTP_SECURE
54+
- SMTP_USERNAME

‎environments/demo-prod/traefik/values.yaml‎

Lines changed: 74 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
# Overwriting https://github.com/traefik/traefik-helm-chart/blob/master/traefik/values.yaml
2+
namespaceOverride: "traefik"
3+
logs:
4+
general:
5+
# "TRACE", "DEBUG", "INFO", "WARN", "ERROR", "FATAL", "PANIC"
6+
level: "INFO"
7+
# format: "common" # For local environment
8+
format: "json" # For server environment
9+
access:
10+
# -- To enable access logs
11+
enabled: true
12+
format: "json"
13+
ingressRoute:
14+
dashboard:
15+
enabled: false
16+
17+
# Be explicit that we only use CRDs, not ingress/gw support
18+
providers:
19+
kubernetesCRD:
20+
enabled: true
21+
kubernetesIngress:
22+
enabled: true
23+
kubernetesGateway:
24+
enabled: false
25+
26+
service:
27+
enabled: true
28+
single: false
29+
type: NodePort
30+
31+
ports:
32+
web:
33+
port: 8000
34+
hostPort: 80
35+
protocol: TCP
36+
nodePort: 30080
37+
websecure:
38+
port: 8443
39+
nodePort: 30443
40+
hostPort: 443
41+
protocol: TCP
42+
43+
certificatesResolvers:
44+
letsencrypt:
45+
acme:
46+
tlsChallenge: false
47+
httpChallenge:
48+
entryPoint: web
49+
email: vadym@opencrvs.org
50+
# Storage for production certificates:
51+
# storage: /data/acme.json
52+
# Storage for staging certificates:
53+
storage: /data/acme-staging.json
54+
# Staging server
55+
caServer: https://acme-staging-v02.api.letsencrypt.org/directory
56+
# Production server
57+
# caServer: https://acme-v02.api.letsencrypt.org/directory
58+
59+
# Additional arguments
60+
additionalArguments:
61+
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
62+
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
63+
- "--certificatesresolvers.letsencrypt.acme.email=vadym@opencrvs.org"
64+
# Storage for staging certificates:
65+
- "--certificatesresolvers.letsencrypt.acme.storage=/data/acme-staging.json"
66+
# Storage for staging certificates:
67+
# - "--certificatesresolvers.letsencrypt.acme.storage=/data/acme.json"
68+
69+
deployment:
70+
hostNetwork: true
71+
additionalVolumes:
72+
- name: acme
73+
hostPath:
74+
path: /data/traefik

‎infrastructure/server-setup/inventory/demo-prod.yml‎

Lines changed: 69 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,69 @@
1+
all:
2+
vars:
3+
# single_node:
4+
# For development/qa/testing/staging keep true
5+
# For production keep false
6+
# Defaults production configuration:
7+
# - master node
8+
# - 2 worker nodes
9+
single_node: false
10+
11+
# Domain/IP address for remote access to your cluster API
12+
# Domain/IP address will be added as main endpoint to your ~/.kube/config
13+
# - If you are behind VPN, use private IP address
14+
# - If your server is exposed (not recommeded), use public IP address
15+
# - If you would like to run kubectl commands from the remote server, leave this field empty
16+
# kube_api_endpoint: ''
17+
18+
# IMPORTANT: If master VM has multiple ethernet interfaces, put private IP address at kube_api_address
19+
# kube_api_host: 10.10.10.10
20+
kube_api_host: demo-prod.opencrvs.dev
21+
22+
# Default ansible provision user, keep as is
23+
ansible_user: provision
24+
25+
# users: Add as many users as you wish
26+
# Configuration example
27+
# - name: <login>
28+
# ssh_keys:
29+
# - <public ssh key 1>
30+
# - <public ssh key 2>
31+
# state: present
32+
# role: admin
33+
# Allowed roles:
34+
# - operator, read only access to OS, full access to kubernetes cluster
35+
# - admin, full access
36+
# Allowed states:
37+
# - present, user is allowed to login
38+
# - absent, account is disabled
39+
users: []
40+
41+
children:
42+
master:
43+
hosts:
44+
# Replace master with value returned by command: hostname
45+
master:
46+
# Keep values (ansible_host, ansible_connection) as is
47+
# Ansible is executed on master node
48+
ansible_host: localhost
49+
ansible_connection: local
50+
labels:
51+
# traefik-role label is used to identify where to deploy traefik
52+
traefik-role: ingress
53+
54+
# Workers section is optional, for single node cluster feel free to remove this section
55+
# section can be added later
56+
# more workers can be added later as well
57+
58+
workers:
59+
hosts:
60+
worker0:
61+
ansible_host: 157.180.92.54
62+
labels:
63+
# By default all datastores are deployed to worker node with role data1
64+
role: data1
65+
66+
67+
68+
# backup section is optional, feel free to remove if backups are not enabled
69+
# section can be added later

0 commit comments

Comments
 (0)