Sirius Devops
d079d1239f
- Add Helm chart with 19 templates (Deployments, Services, Ingress, ConfigMaps, Secrets, NetworkPolicy, cert-manager) - Add Dockerfiles for 4 microservices (dashboard, data-service, execute-service, news-service) - Add CI/CD workflows (build-test, build-push, deploy) - Add raw K8s manifests, per-service Helm charts, and deploy scripts - Add SOPS-encrypted secrets template and config - Configure deployment to customer1 namespace - Include infrastructure components: PostgreSQL, Redis, Kafka
20 lines
929 B
Markdown
20 lines
929 B
Markdown
# =============================================================================
|
|
# mTLS Configuration for Trading Platform
|
|
# =============================================================================
|
|
# This directory contains certificates and configuration for mutual TLS
|
|
# between services. In production, use cert-manager to automate this.
|
|
#
|
|
# Option 1: cert-manager (recommended for production)
|
|
# Option 2: Manual certificate management (for dev/testing)
|
|
#
|
|
# Certificate hierarchy:
|
|
# Root CA
|
|
# ├── Service CA (issues service-to-service certs)
|
|
# │ ├── execute-service cert
|
|
# │ ├── data-service cert
|
|
# │ ├── news-service cert
|
|
# │ ├── api-gateway cert
|
|
# │ └── dashboard cert
|
|
# └── Ingress CA (for external-facing TLS)
|
|
# └── api-gateway TLS cert (for HTTPS)
|
|
# =============================================================================
|