init: 아르고cd, vault 기반 인프라 설계

2026-07-24 14:31:09 +09:00
parent 8879d0a3fe
commit d507ac6ee9
137 changed files with 11431 additions and 1 deletions
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: platform-config
+data:
+  POSTGRES_SUPERUSER: postgres
+  POSTGRES_DEFAULT_DB: postgres
+  AUTH_DB_NAME: project_auth
+  AUTH_DB_USER: project_auth
+  KEYCLOAK_DB_NAME: keycloak
+  KEYCLOAK_DB_USER: keycloak
+  KEYCLOAK_BOOTSTRAP_ADMIN_USERNAME: admin
+  KEYCLOAK_CLIENT_ID: project-auth-server
+  AUTH_SERVER_BASE_URL: http://auth-server.auth-prod.svc.cluster.local
+  VAULT_TRANSIT_KEY_NAME: project-auth-jwt
@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: platform-prod
+
+resources:
+  - ../../base
+  - namespace.yaml
+  - configmap.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: platform-prod
+  labels:
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/enforce-version: latest
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/warn-version: latest
+    pod-security.kubernetes.io/audit: restricted
+    pod-security.kubernetes.io/audit-version: latest