Add platform infrastructure configuration

2026-08-28 17:35:41 +09:00
parent fa76531e5b
commit 16c337bcc9
302 changed files with 83259 additions and 1 deletions
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+patches:
+  - path: service-boundary-only-patch.yaml
+    target:
+      group: helm.cattle.io
+      version: v1
+      kind: HelmChartConfig
+      name: traefik
+      namespace: kube-system
@@ -0,0 +1,28 @@
+- op: replace
+  path: /spec/valuesContent
+  value: |-
+    deployment:
+      podAnnotations:
+        prometheus.io/path: /metrics
+        prometheus.io/port: "9100"
+        prometheus.io/scrape: "true"
+    service:
+      spec:
+        type: NodePort
+        externalTrafficPolicy: Cluster
+    ports:
+      web:
+        nodePort: 30080
+      websecure:
+        nodePort: 30443
+    metrics:
+      prometheus:
+        service:
+          enabled: true
+        serviceMonitor:
+          enabled: true
+          additionalLabels:
+            observability.hyeonworks.com/instance: home
+          jobLabel: app.kubernetes.io/name
+          interval: 30s
+          scrapeTimeout: 10s
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+patches:
+  - path: trusted-proxy-cidr-patch.yaml
+    target:
+      group: helm.cattle.io
+      version: v1
+      kind: HelmChartConfig
+      name: traefik
+      namespace: kube-system
@@ -0,0 +1,41 @@
+- op: replace
+  path: /spec/valuesContent
+  value: |-
+    deployment:
+      podAnnotations:
+        prometheus.io/path: /metrics
+        prometheus.io/port: "9100"
+        prometheus.io/scrape: "true"
+    service:
+      spec:
+        type: NodePort
+        externalTrafficPolicy: Cluster
+    ports:
+      web:
+        nodePort: 30080
+        forwardedHeaders:
+          trustedIPs:
+            # 2026-07-23 Host Nginx 경유 probe에서 관측한 Traefik ClientHost이다.
+            - "10.42.0.1/32"
+      websecure:
+        nodePort: 30443
+    metrics:
+      prometheus:
+        service:
+          enabled: true
+        serviceMonitor:
+          enabled: true
+          additionalLabels:
+            observability.hyeonworks.com/instance: home
+          jobLabel: app.kubernetes.io/name
+          interval: 30s
+          scrapeTimeout: 10s
+    logs:
+      access:
+        enabled: true
+        format: json
+        fields:
+          general:
+            defaultmode: keep
+          headers:
+            defaultmode: drop