Sirius Devops
5e477492e6
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl) - Namespace + RBAC manifests - PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB) - NATS JetStream (3 replicas, persistent, custom subjects) - Redis Sentinel (1 primary + 2 replicas, HA) - MinIO distributed (4 replicas, bucket init job) - Gateway API HTTPRoute + cert-manager TLS certificates - Monitoring stack (Prometheus, Grafana, Alertmanager, exporters) - NetworkPolicies (default deny + per-component policies) - GitHub Actions CI/CD pipeline (lint, template, security scan) - Flux CD staging overlay
88 lines
3.2 KiB
YAML
88 lines
3.2 KiB
YAML
{{- if .Values.nats.enabled }}
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: nats-jetstream-init
|
|
namespace: {{ .Values.namespace }}
|
|
labels:
|
|
{{- include "osint-dashboard.labels" . | nindent 4 }}
|
|
app.kubernetes.io/component: message-broker
|
|
annotations:
|
|
"helm.sh/hook": post-install,post-upgrade
|
|
"helm.sh/hook-delete-policy": hook-succeeded
|
|
spec:
|
|
template:
|
|
metadata:
|
|
labels:
|
|
{{- include "osint-dashboard.selectorLabels" . | nindent 8 }}
|
|
app.kubernetes.io/component: message-broker
|
|
spec:
|
|
restartPolicy: OnFailure
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 1000
|
|
containers:
|
|
- name: nats-box
|
|
image: "{{ .Values.nats.image.repository }}:{{ .Values.nats.image.tag }}"
|
|
command:
|
|
- /bin/sh
|
|
- -c
|
|
args:
|
|
- |
|
|
# Wait for NATS to be ready
|
|
until nats-server -version > /dev/null 2>&1 || curl -sf http://nats:{{ .Values.nats.ports.monitor }}/healthz; do
|
|
echo "Waiting for NATS..."
|
|
sleep 2
|
|
done
|
|
|
|
# Download nats CLI
|
|
curl -fsSL https://github.com/nats-io/natscli/releases/latest/download/nats-linux-amd64 -o /tmp/nats
|
|
chmod +x /tmp/nats
|
|
|
|
# Create JetStream stream for events
|
|
/tmp/nats stream add events \
|
|
--subjects=events.gdelt,events.rss,events.social,events.earthquake,events.disaster,events.weather,events.fire,events.satellite,events.new,events.alert \
|
|
--retention=interests \
|
|
--max-consumers=-1 \
|
|
--max-msgs=1000000 \
|
|
--max-bytes=1GB \
|
|
--discard=old \
|
|
--storage=file \
|
|
--replicas=3 \
|
|
--server=nats://nats:{{ .Values.nats.ports.client }} || echo "events stream already exists"
|
|
|
|
# Create JetStream stream for alerts
|
|
/tmp/nats stream add alerts \
|
|
--subjects=alerts.camera_offline,alerts.new \
|
|
--retention=interests \
|
|
--max-consumers=-1 \
|
|
--max-msgs=100000 \
|
|
--discard=old \
|
|
--storage=file \
|
|
--replicas=3 \
|
|
--server=nats://nats:{{ .Values.nats.ports.client }} || echo "alerts stream already exists"
|
|
|
|
# Create JetStream stream for video
|
|
/tmp/nats stream add video \
|
|
--subjects="video.status.>","video.record.>" \
|
|
--retention=limits \
|
|
--max-consumers=-1 \
|
|
--max-msgs=50000 \
|
|
--discard=old \
|
|
--storage=file \
|
|
--replicas=3 \
|
|
--server=nats://nats:{{ .Values.nats.ports.client }} || echo "video stream already exists"
|
|
|
|
echo "JetStream subjects initialized successfully"
|
|
resources:
|
|
requests:
|
|
cpu: "100m"
|
|
memory: "64Mi"
|
|
limits:
|
|
cpu: "500m"
|
|
memory: "256Mi"
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
{{- end }}
|