Add platform infrastructure configuration

2026-08-28 17:35:41 +09:00
parent fa76531e5b
commit 16c337bcc9
302 changed files with 83259 additions and 1 deletions
@@ -0,0 +1,22 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: DatabaseRole
+metadata:
+  name: platform-postgres-keycloak
+  labels:
+    app.kubernetes.io/name: keycloak
+    app.kubernetes.io/component: database-role
+spec:
+  cluster:
+    name: platform-postgres
+  name: keycloak
+  comment: Keycloak identity provider database owner
+  login: true
+  superuser: false
+  createdb: false
+  createrole: false
+  replication: false
+  bypassrls: false
+  connectionLimit: 50
+  passwordSecret:
+    name: keycloak-db-credentials
+  databaseRoleReclaimPolicy: retain
@@ -0,0 +1,14 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+  name: platform-postgres-keycloak
+  labels:
+    app.kubernetes.io/name: keycloak
+    app.kubernetes.io/component: database
+spec:
+  cluster:
+    name: platform-postgres
+  name: keycloak
+  owner: keycloak
+  ensure: present
+  databaseReclaimPolicy: retain
@@ -0,0 +1,15 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: platform-data
+
+resources:
+  - keycloak-database-role.yaml
+  - keycloak-database.yaml
+  - platform-postgres-keycloak-network-policy.yaml
+
+labels:
+  - pairs:
+      app.kubernetes.io/part-of: platform
+      app.kubernetes.io/managed-by: kustomize
+    includeSelectors: false
@@ -0,0 +1,21 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: platform-postgres-keycloak-ingress
+  labels:
+    app.kubernetes.io/name: platform-postgres
+    app.kubernetes.io/component: database-network-policy
+spec:
+  podSelector:
+    matchLabels:
+      cnpg.io/cluster: platform-postgres
+  policyTypes:
+    - Ingress
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: keycloak
+      ports:
+        - protocol: TCP
+          port: 5432