Sirius Devops
d079d1239f
- Add Helm chart with 19 templates (Deployments, Services, Ingress, ConfigMaps, Secrets, NetworkPolicy, cert-manager) - Add Dockerfiles for 4 microservices (dashboard, data-service, execute-service, news-service) - Add CI/CD workflows (build-test, build-push, deploy) - Add raw K8s manifests, per-service Helm charts, and deploy scripts - Add SOPS-encrypted secrets template and config - Configure deployment to customer1 namespace - Include infrastructure components: PostgreSQL, Redis, Kafka
19 lines
707 B
YAML
19 lines
707 B
YAML
# SOPS configuration for trading platform secrets
|
|
# Usage: sops -e -i trading-secrets.yaml && kubectl apply -f trading-secrets.yaml
|
|
creation_rules:
|
|
# Production secrets - encrypted with Age key
|
|
- path_regex: trading-secrets.yaml$
|
|
encrypted_regex: "^(stringData|data)$"
|
|
age: >-
|
|
age1ql3z7hjy54pw3hyww5ayyfg7zqgvcnw3eks6lekrq733qkq76jwqgq3g20
|
|
|
|
# Per-environment overrides
|
|
- path_regex: .*/staging/trading-secrets.yaml$
|
|
encrypted_regex: "^(stringData|data)$"
|
|
age: >-
|
|
age1ql3z7hjy54pw3hyww5ayyfg7zqgvcnq76jwqgq3g20
|
|
|
|
- path_regex: .*/production/trading-secrets.yaml$
|
|
encrypted_regex: "^(stringData|data)$"
|
|
age: >-
|
|
age1ql3z7hjy54pw3hyww5ayyfg7zqgvcnq76jwqgq3g20
|