renolation
46927b01b6
Clone dev into envs/staging and envs/prod, deploying to namespaces dbiz-staging and dbiz-prod on the same cluster. App names suffixed per env, destination namespaces + external-services namespaces + ingress hosts adjusted. Monitoring kept as a single cluster-wide stack in dev (not duplicated). Sealed secrets left empty pending per-namespace re-seal (sealed secrets are namespace-scoped).
argo-k8s — DBIZ GitOps
Quản lý deploy DBIZ stateless apps lên K8s qua ArgoCD.
Cấu trúc
charts/dbiz-springboot/ Chart chung (env-agnostic) cho mọi Spring Boot service
envs/dev/
apps/ ArgoCD Applications (App-of-Apps)
root.yaml Root app — trỏ tới chính thư mục apps/
infra.yaml External Service+Endpoints
sealed-secrets.yaml Sealed secrets
platform-api.yaml Deploy platform-api (helm + values)
tenant-api.yaml Deploy tenant-api
values/ Values per-service (IP, env, resources)
infra/ Service+Endpoints external (Oracle/Redis/Kafka/S3)
sealed-secrets/ Secret đã seal (an toàn commit)
envs/prod/ (làm sau — copy dev, đổi config, re-seal secret)
Bootstrap (lần đầu)
- Đảm bảo cluster đã có: ArgoCD, sealed-secrets controller, MetalLB, Traefik.
- Seal secret (xem PHASE 3 trong kế hoạch) → đặt vào
envs/dev/sealed-secrets/. - Apply root app:
kubectl apply -f envs/dev/apps/root.yaml - ArgoCD tự sync: root → infra + secrets + platform-api + tenant-api.
Lưu ý
- Sealed secret seal bằng key của TỪNG cluster — dev/prod không dùng chung.
latesttag ở dev; prod nên pin version.