Sienna Meridian Satterwhite
e3336ff2a9
- Add base/vso/ with Helm chart (v0.9.0 from helm.releases.hashicorp.com), namespace, and test-rbac.yaml granting the Helm test pod's default SA permission to create/read/delete Secrets, ConfigMaps, and Leases so the bundled connectivity test passes. - Wire ../../base/vso into overlays/local/kustomization.yaml. - Add image aliases for lasuite/people-backend and lasuite/people-frontend so kustomize rewrites those pulls to our Gitea registry (amd64-only images that are patched and mirrored by sunbeam.py).
55 lines
1.8 KiB
YAML
55 lines
1.8 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
# Local dev overlay — targets Lima VM running k3s on macOS
|
|
# Deploy with: kubectl apply -k overlays/local/
|
|
#
|
|
# NOTE: base/mesh (Linkerd) is excluded here. Linkerd is bootstrapped
|
|
# separately by scripts/local-up.sh via the Linkerd CLI, which avoids
|
|
# the identity cert bootstrapping problem at kustomize render time.
|
|
#
|
|
# DOMAIN_SUFFIX substitution: local-up.sh pipes `kustomize build | sed` to
|
|
# replace DOMAIN_SUFFIX with <LIMA_IP>.sslip.io before kubectl apply.
|
|
|
|
resources:
|
|
- ../../base/ingress
|
|
- ../../base/ory
|
|
- ../../base/data
|
|
- ../../base/storage
|
|
- ../../base/lasuite
|
|
- ../../base/media
|
|
- ../../base/devtools
|
|
- ../../base/vso
|
|
|
|
images:
|
|
# Local dev: sunbeam-proxy is built and imported directly into k3s containerd.
|
|
# imagePullPolicy: Never is set in values-pingora.yaml so k3s never tries to pull.
|
|
# Production overlay points this at src.DOMAIN_SUFFIX/studio/sunbeam-proxy:latest.
|
|
- name: sunbeam-proxy
|
|
newName: sunbeam-proxy
|
|
newTag: dev
|
|
|
|
# amd64-only La Suite images — mirrored to our Gitea registry with a patched
|
|
# OCI index that adds an arm64 alias so Rosetta can run them on the Lima VM.
|
|
# DOMAIN_SUFFIX is substituted by local-up.py at deploy time (sed replacement).
|
|
- name: lasuite/people-backend
|
|
newName: src.DOMAIN_SUFFIX/studio/people-backend
|
|
- name: lasuite/people-frontend
|
|
newName: src.DOMAIN_SUFFIX/studio/people-frontend
|
|
|
|
patches:
|
|
# Add hostPort for TURN relay range on Lima VM
|
|
- path: values-pingora.yaml
|
|
target:
|
|
kind: Deployment
|
|
name: pingora
|
|
|
|
# Downgrade LiveKit TURN service from LoadBalancer → ClusterIP (klipper would take hostPort 443)
|
|
- path: values-livekit.yaml
|
|
target:
|
|
kind: Service
|
|
name: livekit-server-turn
|
|
|
|
# Apply §10.7 memory limits to all Deployments
|
|
- path: values-resources.yaml
|