sharang
6be727d404
3 Orca clusters (breakpilot-edge / breakpilot-control / breakpilot-app), 1 plane each. Single-VM core with Keycloak co-tenant on vm-edge. App cluster gets prod + stage VMs. Manifests reorganized into clusters/<name>/services/; validator now enforces per-cluster node whitelist. Multi-VM rollout gated on legal entity.
23 lines
460 B
TOML
23 lines
460 B
TOML
# pg-keycloak stub — full config lands in M2.1.
|
|
# Host: vm-edge. Resource budget per INFRASTRUCTURE.md §6 co-tenant notes.
|
|
|
|
[[service]]
|
|
name = "pg-keycloak"
|
|
image = "postgres:16-alpine"
|
|
port = 5432
|
|
|
|
[service.placement]
|
|
node = "vm-edge"
|
|
|
|
[service.resources]
|
|
memory = "512Mi"
|
|
cpu = 0.5
|
|
|
|
[service.volume]
|
|
path = "/var/lib/postgresql/data"
|
|
|
|
[service.env]
|
|
POSTGRES_DB = "keycloak"
|
|
POSTGRES_USER = "keycloak"
|
|
POSTGRES_PASSWORD = "${secrets.PG_KEYCLOAK_PASSWORD}"
|