Files
poimen-memory/k8s/infra/databases/kustomization.yaml
T
rock 48bcf39a64
CI / CI (pull_request) Successful in 12m1s
fix(opensearch): single-node discovery, fsGroup, encrypt secrets, drop obsidian
- discovery.type: single-node (bypasses vm.max_map_count bootstrap check)
- fsGroup: 1000 (fixes AccessDeniedException on PVC data dir)
- control-plane tolerations (schedulable on CP nodes)
- secrets moved to opensearch-secrets.enc.yaml (SOPS-encrypted)
- remove orphaned obsidian-git-ssh-secret.enc.yaml
2026-09-12 23:18:33 +09:00

10 lines
296 B
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# Poimen Memory databases:
# - CNPG Postgres cluster with pgvector extension (semantic search)
# - OpenSearch cluster with JWT realm (lexical search)
resources:
- memory-db.yaml
- opensearch.yaml
- opensearch-secrets.enc.yaml