From d49dd6be06dbd1636b7f2f5f7133381b47e2fded Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B0=D0=BD=D0=B4=D1=80=20?=
 =?UTF-8?q?=D0=97=D0=B8=D0=BC=D0=B8=D0=BD?= <zimin.an@nstart.space>
Date: Sun, 3 May 2026 20:24:53 +0300
Subject: [PATCH] fix(k8s): add datasource/kafka/redis config to k8s profile
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

K8s profile relied on shared/dev defaults for spring.datasource.url, but those
live inside the dev profile block — invisible when k8s profile is active.
Result: 'APPLICATION FAILED TO START — Failed to configure a DataSource'.

Move full datasource (and kafka/redis for projection-writer) wiring into the
k8s profile section. ENV vars come from Vault Agent injector
(ORDINIS_PG_USER/PASSWORD, ORDINIS_KAFKA_USER/PASSWORD, ORDINIS_REDIS_PASSWORD)
and chart-supplied ENV (ORDINIS_PG_HOST, ORDINIS_KAFKA_BOOTSTRAP, etc).
---
 .../src/main/resources/application.yml        | 21 +++++++++++++++
 .../src/main/resources/application.yml        | 27 +++++++++++++++++++
 .../src/main/resources/application.yml        |  4 +++
 3 files changed, 52 insertions(+)

diff --git a/ordinis-app/src/main/resources/application.yml b/ordinis-app/src/main/resources/application.yml
index c4bf989..b43bef7 100644
--- a/ordinis-app/src/main/resources/application.yml
+++ b/ordinis-app/src/main/resources/application.yml
@@ -133,6 +133,27 @@ spring:
         enabled: true
         backend: secret
         application-name: ordinis/cuod
+  datasource:
+    url: jdbc:postgresql://${ORDINIS_PG_HOST}:${ORDINIS_PG_PORT:5432}/${ORDINIS_PG_DB:ordinis}
+    username: ${ORDINIS_PG_USER}
+    password: ${ORDINIS_PG_PASSWORD}
+    driver-class-name: org.postgresql.Driver
+  kafka:
+    bootstrap-servers: ${ORDINIS_KAFKA_BOOTSTRAP}
+    properties:
+      security.protocol: ${ORDINIS_KAFKA_SECURITY:SASL_PLAINTEXT}
+      sasl.mechanism: ${ORDINIS_KAFKA_SASL_MECHANISM:SCRAM-SHA-512}
+      sasl.jaas.config: >-
+        org.apache.kafka.common.security.scram.ScramLoginModule required
+        username="${ORDINIS_KAFKA_USER}"
+        password="${ORDINIS_KAFKA_PASSWORD}";
+    producer:
+      acks: all
+      key-serializer: org.apache.kafka.common.serialization.StringSerializer
+      value-serializer: org.apache.kafka.common.serialization.StringSerializer
+      properties:
+        enable.idempotence: true
+        compression.type: lz4
   jpa:
     hibernate:
       ddl-auto: validate
diff --git a/ordinis-projection-writer/src/main/resources/application.yml b/ordinis-projection-writer/src/main/resources/application.yml
index b003e3c..e4b118b 100644
--- a/ordinis-projection-writer/src/main/resources/application.yml
+++ b/ordinis-projection-writer/src/main/resources/application.yml
@@ -114,8 +114,35 @@ spring:
         backend: secret
         application-name: ordinis/cuod
   datasource:
+    url: jdbc:postgresql://${ORDINIS_PG_HOST}:${ORDINIS_PG_PORT:5432}/${ORDINIS_PG_DB:ordinis}
+    username: ${ORDINIS_PG_USER}
+    password: ${ORDINIS_PG_PASSWORD}
+    driver-class-name: org.postgresql.Driver
     hikari:
       read-only: true
+  data:
+    redis:
+      host: ${ORDINIS_REDIS_HOST:ordinis-redis}
+      port: ${ORDINIS_REDIS_PORT:6379}
+      password: ${ORDINIS_REDIS_PASSWORD:}
+      timeout: 2s
+  kafka:
+    bootstrap-servers: ${ORDINIS_KAFKA_BOOTSTRAP}
+    properties:
+      security.protocol: ${ORDINIS_KAFKA_SECURITY:SASL_PLAINTEXT}
+      sasl.mechanism: ${ORDINIS_KAFKA_SASL_MECHANISM:SCRAM-SHA-512}
+      sasl.jaas.config: >-
+        org.apache.kafka.common.security.scram.ScramLoginModule required
+        username="${ORDINIS_KAFKA_USER}"
+        password="${ORDINIS_KAFKA_PASSWORD}";
+    consumer:
+      group-id: ordinis-projection-cuod
+      auto-offset-reset: earliest
+      enable-auto-commit: false
+      key-deserializer: org.apache.kafka.common.serialization.StringDeserializer
+      value-deserializer: org.apache.kafka.common.serialization.StringDeserializer
+    listener:
+      ack-mode: record
   jpa:
     hibernate:
       ddl-auto: none
diff --git a/ordinis-read-api/src/main/resources/application.yml b/ordinis-read-api/src/main/resources/application.yml
index 9df0e93..0899ebb 100644
--- a/ordinis-read-api/src/main/resources/application.yml
+++ b/ordinis-read-api/src/main/resources/application.yml
@@ -111,6 +111,10 @@ spring:
         backend: secret
         application-name: ordinis/cuod
   datasource:
+    url: jdbc:postgresql://${ORDINIS_PG_HOST}:${ORDINIS_PG_PORT:5432}/${ORDINIS_PG_DB:ordinis}
+    username: ${ORDINIS_PG_USER}
+    password: ${ORDINIS_PG_PASSWORD}
+    driver-class-name: org.postgresql.Driver
     hikari:
       read-only: true
   jpa: