bb88657562
Some checks failed
CD - Build & Deploy / release (push) Has been cancelled
CD - Build & Deploy / build-and-push (push) Has been cancelled
CD - Build & Deploy / package-helm (push) Has been cancelled
CD - Build & Deploy / deploy-staging (push) Has been cancelled
CD - Build & Deploy / deploy-production (push) Has been cancelled
CI / test (3.11) (push) Has been cancelled
CI / test (3.12) (push) Has been cancelled
CI / security (push) Has been cancelled
ci/woodpecker/push/woodpecker Pipeline failed
ci/woodpecker/manual/woodpecker Pipeline failed
139 lines
3.2 KiB
YAML
139 lines
3.2 KiB
YAML
# Production-specific values for peikarband
|
|
# This file overrides default values.yaml for production
|
|
|
|
replicaCount: 1
|
|
|
|
image:
|
|
pullPolicy: Always
|
|
|
|
# Auto-create registry secret
|
|
registrySecret:
|
|
enabled: true
|
|
name: hub-registry-secret
|
|
server: hub.peikarband.ir
|
|
username: "admin"
|
|
password: "5459ed7590d37656410fae38bdf59eb7ee33b68cd4c"
|
|
|
|
imagePullSecrets:
|
|
- name: hub-registry-secret
|
|
|
|
# Auto-create application secrets (database, redis, etc)
|
|
appSecrets:
|
|
enabled: false # Set to true if you need database/redis
|
|
name: peikarband-prod-secrets
|
|
dbUsername: ""
|
|
dbPassword: ""
|
|
redisPassword: ""
|
|
|
|
# Reflex configuration for production
|
|
reflex:
|
|
apiUrl: "https://peikarband.ir" # Production API URL
|
|
|
|
podAnnotations:
|
|
prometheus.io/scrape: "true"
|
|
prometheus.io/port: "8000"
|
|
prometheus.io/path: "/metrics"
|
|
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
|
|
autoscaling:
|
|
enabled: false
|
|
minReplicas: 1
|
|
maxReplicas: 5
|
|
targetCPUUtilizationPercentage: 70
|
|
targetMemoryUtilizationPercentage: 80
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: "traefik"
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
# Rate limiting and body size should be configured via Traefik Middleware
|
|
# Example: traefik.ingress.kubernetes.io/router.middlewares: default-ratelimit@kubernetescrd
|
|
hosts:
|
|
- host: peikarband.ir
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
- host: www.peikarband.ir
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: peikarband-tls
|
|
hosts:
|
|
- peikarband.ir
|
|
- www.peikarband.ir
|
|
|
|
postgresql:
|
|
enabled: false # Using SQLite for now
|
|
external:
|
|
host: "postgres-prod.default.svc.cluster.local"
|
|
port: "5432"
|
|
database: "peikarband_prod"
|
|
usernameSecret:
|
|
name: "peikarband-prod-secrets"
|
|
key: "db-username"
|
|
passwordSecret:
|
|
name: "peikarband-prod-secrets"
|
|
key: "db-password"
|
|
|
|
redis:
|
|
enabled: false # Not used yet
|
|
external:
|
|
host: "redis-prod.default.svc.cluster.local"
|
|
port: "6379"
|
|
passwordSecret:
|
|
name: "peikarband-prod-secrets"
|
|
key: "redis-password"
|
|
|
|
# Override readiness probe for production (Reflex needs more time to start)
|
|
# Using /ping endpoint (simpler, faster response)
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /ping
|
|
port: 8000
|
|
initialDelaySeconds: 120 # Increased to allow Reflex to fully compile and start
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 6 # Allow more failures during startup (2 minutes total)
|
|
|
|
# Override liveness probe
|
|
# Using /live endpoint which is specifically designed for liveness checks
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /live
|
|
port: 8000
|
|
initialDelaySeconds: 120 # Increased to allow Reflex to fully start
|
|
periodSeconds: 15
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
|
|
configMap:
|
|
data:
|
|
APP_NAME: "peikarband"
|
|
LOG_LEVEL: "warning"
|
|
ENVIRONMENT: "prod"
|
|
|
|
podDisruptionBudget:
|
|
enabled: false
|
|
minAvailable: 1
|
|
|
|
networkPolicy:
|
|
enabled: true
|
|
|
|
monitoring:
|
|
serviceMonitor:
|
|
enabled: true
|
|
interval: 30s
|
|
scrapeTimeout: 10s
|
|
|