homelab/k8s/applications/sqs/environments/homelab.yaml

# design.md §7b: cluster-specific values for the homelab environment.
# No secrets here — Authentik client secret etc. flow through the existing
# Vault/talos-cli pattern, referenced at deploy time, not inlined.
namespace: sqs

kafkaCluster:
  nodePool:
    replicas: 3
    storage:
      # Use unified longhorn StorageClass (3 replicas, Immediate binding)
      class: longhorn
      # Per-node headroom: with 3 nodes and existing PVCs, estimate ~100+ Gi total
      # available. Each node hosts one replica of all 3 broker volumes, so 3 *
      # sizeGi must fit. Monitor usage during Kafka deployment.
      sizeGi: 10
    resources:
      memory: 5Gi
      cpu: "2"

redis:
  storageClass: longhorn
  memoryLimit: 1Gi

managementService:
  ingress:
    host: kmsvc.riotpiao.com
    clusterIssuer: homelab-ca
  authentikIssuerURL: "https://authentik.riotpiao.com/application/o/kafaka/"
  authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"