mrcharles
7461efb210
Framework enforcement layer adopted; check-rules green. Manifest secrets are placeholders only. https://projects.knownelement.com/issues/707#note-4537
47 lines
992 B
YAML
47 lines
992 B
YAML
---
|
|
# AWX namespace
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: awx
|
|
---
|
|
# Admin password secret — the password is 'REDACTED_PASSWORD' (fleet standard)
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: awx-admin-password
|
|
namespace: awx
|
|
type: Opaque
|
|
stringData:
|
|
password: REDACTED_PASSWORD
|
|
---
|
|
# AWX Custom Resource — single instance, LoadBalancer service
|
|
apiVersion: awx.ansible.com/v1beta1
|
|
kind: AWX
|
|
metadata:
|
|
name: tsys-awx
|
|
namespace: awx
|
|
spec:
|
|
service_type: LoadBalancer
|
|
ingress_type: none
|
|
|
|
admin_user: admin
|
|
admin_password_secret: awx-admin-password
|
|
|
|
# PostgreSQL — bundled, stored on local disk via PVC (k3s local-path)
|
|
postgres_storage_class: local-path
|
|
postgres_storage_requirements:
|
|
requests:
|
|
storage: 8Gi
|
|
postgres_resource_requirements:
|
|
requests:
|
|
memory: 1Gi
|
|
|
|
# Resource limits — fit within 12 GB host RAM
|
|
web_resource_requirements:
|
|
requests:
|
|
memory: 1Gi
|
|
task_resource_requirements:
|
|
requests:
|
|
memory: 1Gi
|