Files
kmsvc-manage/k8s/environments/homelab.yaml
T

26 lines
677 B
YAML
Raw Normal View History

# design.md §7b: cluster-specific values for the homelab environment.
# No secrets here — Authentik client secret etc. flow through the existing
# Vault/talos-cli pattern, referenced at deploy time, not inlined.
namespace: sqs
kafkaCluster:
nodePool:
replicas: 3
storage:
class: longhorn
sizeGi: 50
resources:
memory: 5Gi
cpu: "2"
redis:
storageClass: longhorn
memoryLimit: 1Gi
managementService:
ingress:
host: kmsvc.homelab.internal
clusterIssuer: homelab-ca
authentikIssuerURL: "" # cluster/KMSVC_AUTHENTIK_ISSUER_URL — fill in once task 0 is done
authentikAudience: "" # cluster/KMSVC_AUTHENTIK_AUDIENCE