feat(consul): deploy HashiCorp Consul 1.22.7 via Helm chart 1.9.7

5-replica server cluster (bootstrapExpect=5) with datacenter=au-syd1, connect enabled, raft_multiplier=10, http=8500, grpc=8502, https=-1. 10Gi cephrbd-fast-delete PVC. Gateway API HTTPRoute on 443→consul-consul-ui:80→8500. PDB patched from policy/v1beta1 to policy/v1 for k8s 1.25+. ArgoCD platform ApplicationSet updated to include consul overlay path.
2026-05-23 18:50:08 +10:00
parent dcea768c15
commit 0c73cc7594
9 changed files with 237 additions and 0 deletions
@@ -0,0 +1,44 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../../base/consul
+
+patches:
+  - target:
+      kind: Namespace
+      name: consul
+    patch: |-
+      - op: replace
+        path: /metadata/name
+        value: sandbox-consul
+  - target:
+      kind: Gateway
+      name: consul
+    patch: |-
+      - op: replace
+        path: /metadata/namespace
+        value: sandbox-consul
+  - target:
+      kind: HTTPRoute
+      name: consul
+    patch: |-
+      - op: replace
+        path: /metadata/namespace
+        value: sandbox-consul
+  - target:
+      kind: PodDisruptionBudget
+      name: consul-server
+    patch: |-
+      - op: replace
+        path: /apiVersion
+        value: policy/v1
+
+helmCharts:
+  - name: consul
+    repo: https://helm.releases.hashicorp.com
+    version: "1.9.7"
+    releaseName: consul
+    namespace: sandbox-consul
+    valuesFile: values.yaml
@@ -0,0 +1,51 @@
+global:
+  name: consul
+  datacenter: au-syd1
+  domain: consul
+
+server:
+  image: hashicorp/consul:1.22.7
+  replicas: 5
+  bootstrapExpect: 5
+  storage: 10Gi
+  storageClass: cephrbd-fast-delete
+
+  connect: true
+
+  extraConfig: |
+    {
+      "disable_remote_exec": true,
+      "disable_update_check": true,
+      "performance": {
+        "raft_multiplier": 10
+      },
+      "ports": {
+        "dns": 8600,
+        "grpc": 8502,
+        "http": 8500,
+        "https": -1
+      },
+      "primary_datacenter": "au-syd1"
+    }
+
+  resources:
+    requests:
+      memory: 256Mi
+      cpu: 100m
+    limits:
+      memory: 2Gi
+      cpu: 1000m
+
+client:
+  enabled: false
+
+ui:
+  enabled: true
+  service:
+    type: ClusterIP
+
+connectInject:
+  enabled: false
+
+dns:
+  enabled: true