feat(infra): production bootstrap — cert-manager, longhorn, monitoring
Add new bases for cert-manager (Let's Encrypt + wildcard cert), Longhorn
distributed storage, and monitoring (kube-prometheus-stack + Loki + Tempo
+ Grafana OIDC). Add cloud-init for Scaleway Elastic Metal provisioning.
Production overlay: add patches for postgres sizing, SeaweedFS volume,
OpenSearch storage, LiveKit service, Pingora host ports, resource limits,
and CNPG daily barman backups. Update cert-manager.yaml with full dnsNames
for all *.sunbeam.pt subdomains.
2026-03-06 12:06:27 +00:00
|
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
|
|
|
kind: Kustomization
|
|
|
|
|
|
|
|
|
|
resources:
|
|
|
|
|
- namespace.yaml
|
2026-04-04 12:53:27 +01:00
|
|
|
- scaleway-dns-secret.yaml
|
feat(infra): production bootstrap — cert-manager, longhorn, monitoring
Add new bases for cert-manager (Let's Encrypt + wildcard cert), Longhorn
distributed storage, and monitoring (kube-prometheus-stack + Loki + Tempo
+ Grafana OIDC). Add cloud-init for Scaleway Elastic Metal provisioning.
Production overlay: add patches for postgres sizing, SeaweedFS volume,
OpenSearch storage, LiveKit service, Pingora host ports, resource limits,
and CNPG daily barman backups. Update cert-manager.yaml with full dnsNames
for all *.sunbeam.pt subdomains.
2026-03-06 12:06:27 +00:00
|
|
|
|
|
|
|
|
helmCharts:
|
|
|
|
|
# helm repo add jetstack https://charts.jetstack.io
|
|
|
|
|
- name: cert-manager
|
|
|
|
|
repo: https://charts.jetstack.io
|
|
|
|
|
version: "1.19.4"
|
|
|
|
|
releaseName: cert-manager
|
|
|
|
|
namespace: cert-manager
|
|
|
|
|
valuesFile: values.yaml
|
|
|
|
|
includeCRDs: true
|
2026-04-04 12:53:27 +01:00
|
|
|
|
|
|
|
|
# helm repo add scaleway https://helm.scw.cloud/
|
|
|
|
|
# DNS-01 webhook for Scaleway DNS — enables wildcard certs.
|
|
|
|
|
- name: scaleway-certmanager-webhook
|
|
|
|
|
repo: https://helm.scw.cloud/
|
|
|
|
|
version: "0.4.1"
|
|
|
|
|
releaseName: scaleway-certmanager-webhook
|
|
|
|
|
namespace: cert-manager
|
