feat: bring up local dev stack — all services running

- Ory Hydra + Kratos: fixed secret management, DSN config, DB migrations,
  OAuth2Client CRD (helm template skips crds/ dir), login-ui env vars
- SeaweedFS: added s3.json credentials file via -s3.config CLI flag
- OpenBao: standalone mode with auto-unseal sidecar, keys in K8s secret
- OpenSearch: increased memory to 1.5Gi / JVM 1g heap
- Gitea: SSL_MODE disable, S3 bucket creation fixed
- Hive: automountServiceAccountToken: false (Lima virtiofs read-only rootfs quirk)
- LiveKit: API keys in values, hostPort conflict resolved
- Linkerd: native sidecar (proxy.nativeSidecar=true) to avoid blocking Jobs
- All placeholder images replaced: pingora→nginx:alpine, login-ui→oryd/kratos-selfservice-ui-node

Full stack running: postgres, valkey, openbao, opensearch, seaweedfs,
kratos, hydra, gitea, livekit, hive (placeholder), login-ui
This commit is contained in:
2026-02-28 22:08:38 +00:00
parent 92e80a761c
commit a589e6280d
19 changed files with 852 additions and 103 deletions

View File

@@ -19,26 +19,27 @@ spec:
secret:
name: postgres-superuser
postInitSQL:
# Create all 10 logical databases and their owners
- CREATE USER kratos;
# Create all 10 logical databases and their owners.
# Passwords are set by the seed-secrets script via ALTER USER after init.
- CREATE USER kratos WITH LOGIN;
- CREATE DATABASE kratos_db OWNER kratos;
- CREATE USER hydra;
- CREATE USER hydra WITH LOGIN;
- CREATE DATABASE hydra_db OWNER hydra;
- CREATE USER docs;
- CREATE USER docs WITH LOGIN;
- CREATE DATABASE docs_db OWNER docs;
- CREATE USER meet;
- CREATE USER meet WITH LOGIN;
- CREATE DATABASE meet_db OWNER meet;
- CREATE USER drive;
- CREATE USER drive WITH LOGIN;
- CREATE DATABASE drive_db OWNER drive;
- CREATE USER messages;
- CREATE USER messages WITH LOGIN;
- CREATE DATABASE messages_db OWNER messages;
- CREATE USER conversations;
- CREATE USER conversations WITH LOGIN;
- CREATE DATABASE conversations_db OWNER conversations;
- CREATE USER people;
- CREATE USER people WITH LOGIN;
- CREATE DATABASE people_db OWNER people;
- CREATE USER gitea;
- CREATE USER gitea WITH LOGIN;
- CREATE DATABASE gitea_db OWNER gitea;
- CREATE USER hive;
- CREATE USER hive WITH LOGIN;
- CREATE DATABASE hive_db OWNER hive;
storage: