223 lines
7.3 KiB
YAML
223 lines
7.3 KiB
YAML
# ---------- iam-db ----------
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata: {name: iam-db-data, namespace: enkly}
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: managed-nfs-storage
|
|
resources: {requests: {storage: 5Gi}}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata: {name: iam-db, namespace: enkly, labels: {app: iam-db}}
|
|
spec:
|
|
replicas: 1
|
|
strategy: {type: Recreate}
|
|
selector: {matchLabels: {app: iam-db}}
|
|
template:
|
|
metadata: {labels: {app: iam-db}}
|
|
spec:
|
|
imagePullSecrets: [{name: enkly-registry}]
|
|
containers:
|
|
- name: postgres
|
|
image: postgres:16-alpine
|
|
ports: [{name: pg, containerPort: 5432}]
|
|
env:
|
|
- {name: POSTGRES_USER, value: "enkly"}
|
|
- {name: POSTGRES_DB, value: "enkly_iam"}
|
|
- {name: PGDATA, value: "/var/lib/postgresql/data/pgdata"}
|
|
- name: POSTGRES_PASSWORD
|
|
valueFrom: {secretKeyRef: {name: enkly-secrets, key: POSTGRES_PASSWORD}}
|
|
resources:
|
|
requests: {cpu: 100m, memory: 256Mi}
|
|
limits: {cpu: 500m, memory: 512Mi}
|
|
readinessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
failureThreshold: 10
|
|
livenessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 15
|
|
failureThreshold: 6
|
|
volumeMounts: [{name: data, mountPath: /var/lib/postgresql/data}]
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim: {claimName: iam-db-data}
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata: {name: iam-db, namespace: enkly, labels: {app: iam-db}}
|
|
spec:
|
|
selector: {app: iam-db}
|
|
ports: [{name: pg, port: 5432, targetPort: pg}]
|
|
|
|
# ---------- billing-db ----------
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata: {name: billing-db-data, namespace: enkly}
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: managed-nfs-storage
|
|
resources: {requests: {storage: 5Gi}}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata: {name: billing-db, namespace: enkly, labels: {app: billing-db}}
|
|
spec:
|
|
replicas: 1
|
|
strategy: {type: Recreate}
|
|
selector: {matchLabels: {app: billing-db}}
|
|
template:
|
|
metadata: {labels: {app: billing-db}}
|
|
spec:
|
|
imagePullSecrets: [{name: enkly-registry}]
|
|
containers:
|
|
- name: postgres
|
|
image: postgres:16-alpine
|
|
ports: [{name: pg, containerPort: 5432}]
|
|
env:
|
|
- {name: POSTGRES_USER, value: "enkly"}
|
|
- {name: POSTGRES_DB, value: "enkly_billing"}
|
|
- {name: PGDATA, value: "/var/lib/postgresql/data/pgdata"}
|
|
- name: POSTGRES_PASSWORD
|
|
valueFrom: {secretKeyRef: {name: enkly-secrets, key: POSTGRES_PASSWORD}}
|
|
resources:
|
|
requests: {cpu: 100m, memory: 256Mi}
|
|
limits: {cpu: 500m, memory: 512Mi}
|
|
readinessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
failureThreshold: 10
|
|
livenessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 15
|
|
failureThreshold: 6
|
|
volumeMounts: [{name: data, mountPath: /var/lib/postgresql/data}]
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim: {claimName: billing-db-data}
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata: {name: billing-db, namespace: enkly, labels: {app: billing-db}}
|
|
spec:
|
|
selector: {app: billing-db}
|
|
ports: [{name: pg, port: 5432, targetPort: pg}]
|
|
|
|
# ---------- conversation-db ----------
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata: {name: conversation-db-data, namespace: enkly}
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: managed-nfs-storage
|
|
resources: {requests: {storage: 5Gi}}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata: {name: conversation-db, namespace: enkly, labels: {app: conversation-db}}
|
|
spec:
|
|
replicas: 1
|
|
strategy: {type: Recreate}
|
|
selector: {matchLabels: {app: conversation-db}}
|
|
template:
|
|
metadata: {labels: {app: conversation-db}}
|
|
spec:
|
|
imagePullSecrets: [{name: enkly-registry}]
|
|
containers:
|
|
- name: postgres
|
|
image: postgres:16-alpine
|
|
ports: [{name: pg, containerPort: 5432}]
|
|
env:
|
|
- {name: POSTGRES_USER, value: "enkly"}
|
|
- {name: POSTGRES_DB, value: "enkly_conversation"}
|
|
- {name: PGDATA, value: "/var/lib/postgresql/data/pgdata"}
|
|
- name: POSTGRES_PASSWORD
|
|
valueFrom: {secretKeyRef: {name: enkly-secrets, key: POSTGRES_PASSWORD}}
|
|
resources:
|
|
requests: {cpu: 100m, memory: 256Mi}
|
|
limits: {cpu: 500m, memory: 512Mi}
|
|
readinessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
failureThreshold: 10
|
|
livenessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 15
|
|
failureThreshold: 6
|
|
volumeMounts: [{name: data, mountPath: /var/lib/postgresql/data}]
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim: {claimName: conversation-db-data}
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata: {name: conversation-db, namespace: enkly, labels: {app: conversation-db}}
|
|
spec:
|
|
selector: {app: conversation-db}
|
|
ports: [{name: pg, port: 5432, targetPort: pg}]
|
|
|
|
# ---------- knowledge-db (pgvector) ----------
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata: {name: knowledge-db-data, namespace: enkly}
|
|
spec:
|
|
accessModes: [ReadWriteOnce]
|
|
storageClassName: managed-nfs-storage
|
|
resources: {requests: {storage: 10Gi}}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata: {name: knowledge-db, namespace: enkly, labels: {app: knowledge-db}}
|
|
spec:
|
|
replicas: 1
|
|
strategy: {type: Recreate}
|
|
selector: {matchLabels: {app: knowledge-db}}
|
|
template:
|
|
metadata: {labels: {app: knowledge-db}}
|
|
spec:
|
|
imagePullSecrets: [{name: enkly-registry}]
|
|
containers:
|
|
- name: postgres
|
|
image: pgvector/pgvector:pg16
|
|
ports: [{name: pg, containerPort: 5432}]
|
|
env:
|
|
- {name: POSTGRES_USER, value: "enkly"}
|
|
- {name: POSTGRES_DB, value: "enkly_knowledge"}
|
|
- {name: PGDATA, value: "/var/lib/postgresql/data/pgdata"}
|
|
- name: POSTGRES_PASSWORD
|
|
valueFrom: {secretKeyRef: {name: enkly-secrets, key: POSTGRES_PASSWORD}}
|
|
resources:
|
|
requests: {cpu: 200m, memory: 512Mi}
|
|
limits: {cpu: 1, memory: 1Gi}
|
|
readinessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
periodSeconds: 5
|
|
timeoutSeconds: 5
|
|
failureThreshold: 10
|
|
livenessProbe:
|
|
exec: {command: ["pg_isready", "-U", "enkly"]}
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 15
|
|
failureThreshold: 6
|
|
volumeMounts: [{name: data, mountPath: /var/lib/postgresql/data}]
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim: {claimName: knowledge-db-data}
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata: {name: knowledge-db, namespace: enkly, labels: {app: knowledge-db}}
|
|
spec:
|
|
selector: {app: knowledge-db}
|
|
ports: [{name: pg, port: 5432, targetPort: pg}]
|