ptd/examples/workload/ptd.yaml at main · posit-dev/ptd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
# Example Workload Configuration
#
# This file configures a PTD Workload - a complete Posit Team deployment
# with Workbench, Connect, and Package Manager.
#
# Place this file at: infra/__work__/<workload-name>/ptd.yaml

apiVersion: posit.team/v1
kind: AWSWorkloadConfig
spec:
  # AWS account ID where the workload will be deployed
  account_id: "123456789012"

  # Human-readable tenant name for alerts (defaults to compound_name if not set)
  tenant_name: "Example Analytics Team"

  # Control room that manages this workload
  control_room_account_id: "123456789012"
  control_room_cluster_name: control-room-production
  control_room_domain: cr.example.posit.team

  # AWS region for deployment
  region: us-east-2

  # RDS PostgreSQL configuration
  db_engine_version: "15.12"
  db_instance_class: db.m5d.large
  db_performance_insights_enabled: true
  db_deletion_protection: true
  db_max_allocated_storage: 1024

  # Additional PostgreSQL databases beyond the default
  extra_postgres_dbs:
    - analytics

  # FSx for OpenZFS shared storage
  fsx_openzfs_storage_capacity: 900
  fsx_openzfs_throughput_capacity: 320

  # Domain configuration source
  # Options: ANNOTATION_JSON, ROUTE53_PRIVATE_ZONE
  domain_source: ANNOTATION_JSON

  # Enable Keycloak for authentication (if not using external IdP)
  keycloak_enabled: false

  # Enable hosted zone management (set to false for externally managed DNS)
  # When false, you must provide certificate_arn for each site
  # hosted_zone_management_enabled: true

  # Enable cluster autoscaling
  autoscaling_enabled: true

  # EKS cluster configuration
  clusters:
    # Cluster name - use a date-based naming convention for easy upgrades
    "20250115":
      spec:
        cluster_version: "1.33"

        # Node pool sizing
        mp_min_size: 3
        mp_max_size: 10
        mp_instance_type: r6a.2xlarge

        # Root disk size in GB
        root_disk_size: 200

        # Traffic routing weight (for blue/green deployments)
        routing_weight: "100"

        # Component versions
        components:
          traefik_forward_auth_version: "0.0.14"

  # Site configurations - each site is a separate Posit Team environment
  sites:
    main:
      spec:
        domain: analytics.example.com
        use_traefik_forward_auth: false
        # Required when hosted_zone_management_enabled is false:
        # certificate_arn: arn:aws:acm:us-east-2:123456789012:certificate/example-id
        # certificate_validation_enabled: false
    dev:
      spec:
        domain: analytics-dev.example.com
        use_traefik_forward_auth: false
        # Required when hosted_zone_management_enabled is false:
        # certificate_arn: arn:aws:acm:us-east-2:123456789012:certificate/example-id
        # certificate_validation_enabled: false