Vote Demo Infrastructure

chartmuseum.yaml

# Chart Museum - Chart values.yaml
persistence:
  enabled: true
# Set ingress to use cert-manager/lets encrypt for TLS
ingress:
  enabled: true
  annotations:
    certmanager\.k8s\.io/cluster-issuer: letsencrypt-prod
  hosts:
    charts\.your\.domain\.com:
    - /
  tls:
  - secretName: chartmuseum-server-tls
    hosts:
    - charts.your.domain.com
env:
  open:
    DISABLE_API: "false"
    ALLOW_OVERWRITE: "true"
    DEPTH: "1"
    AUTH_ANONYMOUS_GET: "true"
    CHART_URL: https://charts.your.domain.com
  secret:
    BASIC_AUTH_USER: rancher-charts
    BASIC_AUTH_PASS: SomeGoodPassword

clusterIssuer.yaml

# Cluster Issuer for "Admin" cluster with chart museum
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
  namespace: cert-manager
spec:
  acme:
    # The ACME server URL
    server: https://acme-v02.api.letsencrypt.org/directory
    # Email address used for ACME registration
    email: [email protected]
    # Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: letsencrypt-prod
    # Enable HTTP01 validations
    http01: {}

external-dns.yaml

# external-dns - Chart values.yaml
rbac:
  create: true
txtOwnerId: us-east2-prd
domainFilters:
- your.domain.com
provider: aws
aws:
  zoneType: public
sources:
- ingress

nginx-ingress.yaml

# Nginx-Ingress - Chart values.yaml
# Use aws cloud provider integration to launch ELB to route traffic into cluster
controller:
  publishService:
    enabled: true

postgresql.yaml

# PostgreSQL - Chart values.yaml
postgresqlDatabase: vote

rabbitmq.yaml

# RabbitMQ - Chart values.yaml
persistence:
  enabled: true