Sienna Meridian Satterwhite
a589e6280d
- Ory Hydra + Kratos: fixed secret management, DSN config, DB migrations, OAuth2Client CRD (helm template skips crds/ dir), login-ui env vars - SeaweedFS: added s3.json credentials file via -s3.config CLI flag - OpenBao: standalone mode with auto-unseal sidecar, keys in K8s secret - OpenSearch: increased memory to 1.5Gi / JVM 1g heap - Gitea: SSL_MODE disable, S3 bucket creation fixed - Hive: automountServiceAccountToken: false (Lima virtiofs read-only rootfs quirk) - LiveKit: API keys in values, hostPort conflict resolved - Linkerd: native sidecar (proxy.nativeSidecar=true) to avoid blocking Jobs - All placeholder images replaced: pingora→nginx:alpine, login-ui→oryd/kratos-selfservice-ui-node Full stack running: postgres, valkey, openbao, opensearch, seaweedfs, kratos, hydra, gitea, livekit, hive (placeholder), login-ui
37 lines
873 B
YAML
37 lines
873 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: ory
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- login-ui-deployment.yaml
|
|
# Hydra chart CRDs are not rendered by helm template; apply manually.
|
|
- hydra-oauth2client-crd.yaml
|
|
|
|
# The hydra-maester sub-chart does not set .Release.Namespace in its Deployment template.
|
|
patches:
|
|
- patch: |
|
|
- op: add
|
|
path: /metadata/namespace
|
|
value: ory
|
|
target:
|
|
kind: Deployment
|
|
name: hydra-hydra-maester
|
|
|
|
helmCharts:
|
|
# helm repo add ory https://k8s.ory.sh/helm/charts
|
|
- name: kratos
|
|
repo: https://k8s.ory.sh/helm/charts
|
|
version: "0.60.1"
|
|
releaseName: kratos
|
|
namespace: ory
|
|
valuesFile: kratos-values.yaml
|
|
|
|
- name: hydra
|
|
repo: https://k8s.ory.sh/helm/charts
|
|
version: "0.60.1"
|
|
releaseName: hydra
|
|
namespace: ory
|
|
valuesFile: hydra-values.yaml
|