seon
1db68b643f
WP-14(Terraform 설계서 7.3, 실험·앱 설계서 3.1·4.3). - apps/ingress-nginx: baremetal 매니페스트(controller-v1.15.1)를 kustomize로 가져와 NodePort 30080/30443 고정(ALB TG와 일치). - apps/demo-app + workloads/demo-app: front(nginx-unprivileged 1.31.6, 정적 페이지 + /api/ 프록시) 2, api(demo-api:8f5378b) 3 + PDB minAvailable 2, Service, Ingress(/ front, /api api). DB_DSN은 Secret demo-db(make k8s-secrets로 생성, git 밖). - apps/chaos-mesh: Helm chart 2.8.4(containerd 소켓, dashboard 없음). - vm/observability/grafana/provisioning/alerting: contact point harness-webhook (10.20.0.11:8080/hooks/alert), 루트 정책, 규칙 8건(ProbeDown·ApiLatencyHigh· ApiErrorRateHigh·PodCrashLooping·LegacyUnhealthy·DbReplicationLag·DbPrimaryDown· GitOpsDrift, 라벨 layer/signature).
31 lines
823 B
YAML
31 lines
823 B
YAML
# Chaos Mesh via the official Helm chart (containerd socket). Fault injection for the container layer (experiment design 7).
|
|
# https://chaos-mesh.org/docs/production-installation-using-helm/
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: chaos-mesh
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: https://charts.chaos-mesh.org
|
|
chart: chaos-mesh
|
|
targetRevision: 2.8.4
|
|
helm:
|
|
releaseName: chaos-mesh
|
|
valuesObject:
|
|
chaosDaemon:
|
|
runtime: containerd
|
|
socketPath: /run/containerd/containerd.sock
|
|
dashboard:
|
|
create: false
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: chaos-mesh
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- ServerSideApply=true
|