Files
kmsvc-manage/k8s/environments/homelab.yaml
T

33 lines
1.2 KiB
YAML

# design.md §7b: cluster-specific values for the homelab environment.
# No secrets here — Authentik client secret etc. flow through the existing
# Vault/talos-cli pattern, referenced at deploy time, not inlined.
namespace: sqs
kafkaCluster:
nodePool:
replicas: 3
storage:
# longhorn-kafka pins numberOfReplicas to 2 to match the current
# 2-node cluster (see kafka-cluster chart's storageclass.yaml).
# Switch back to "longhorn" (3 replicas) once the 3rd node joins.
class: longhorn-kafka
# Longhorn's per-node scheduling budget on the current 2-node cluster
# only has ~36Gi of headroom (other PVCs reserve the rest), and each
# node hosts one replica of all 3 broker volumes, so 3 * sizeGi must
# fit in that headroom. Revisit once the 3rd node joins.
sizeGi: 10
resources:
memory: 5Gi
cpu: "2"
redis:
storageClass: longhorn
memoryLimit: 1Gi
managementService:
ingress:
host: kmsvc.riotpiao.homelab.com
clusterIssuer: homelab-ca
authentikIssuerURL: "https://authentik.riotpiao.homelab.com/application/o/kafaka/"
authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"