init: registry server + operator from VM

2026-07-01 17:37:08 +04:00
commit dd1007d24c
67 changed files with 3293 additions and 0 deletions
@@ -0,0 +1,71 @@
+global:
+  registryHostname: "terra.k8c.ru"       # Переопределяется при миграции
+  namespace: "terraform-registry"
+
+registry:
+  image:
+    repository: "naeel/terraform-registry-server"  # → Harbor при миграции
+    tag: "latest"
+    pullPolicy: IfNotPresent
+  replicas: 1                             # → 2 в prod
+  resources:
+    requests:
+      cpu: 100m
+      memory: 128Mi
+    limits:
+      cpu: 500m
+      memory: 256Mi
+  service:
+    port: 80
+    targetPort: 8080
+  healthcheck:
+    enabled: true
+    path: /healthz
+    port: 8080
+
+operator:
+  image:
+    repository: "naeel/terraform-registry-operator"
+    tag: "latest"
+  replicas: 1
+  resources:
+    requests:
+      cpu: 50m
+      memory: 64Mi
+    limits:
+      cpu: 500m
+      memory: 128Mi
+
+docs:
+  enabled: false
+  image:
+    repository: "naeel/terraform-registry-server"
+    tag: "docs-dev-fixed"
+    pullPolicy: IfNotPresent
+
+ingress:
+  enabled: true
+  className: "nginx"
+  host: "terra.k8c.ru"                   # Переопределяется
+  tls:
+    enabled: true
+    issuer: "letsencrypt-prod"           # НЕ ТРОГАТЬ LetsEncrypt issuer!
+    secretName: "registry-tls"
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-body-size: "100m"
+
+s3:
+  endpoint: "s3.msk-1.ngcloud.ru"
+  bucket: "terraform-registry"
+  useSSL: true
+  # credentials через existingSecret
+  existingSecret: "s3-credentials"
+  accessKeyField: "access-key"
+  secretKeyField: "secret-key"
+
+pdb:
+  enabled: false                          # → true в prod
+  minAvailable: 1
+
+networkPolicy:
+  enabled: false                          # → true при миграции