173b210d59a3382c49d6bcd837e15779da520a56
[institute/deploy-authx-service.git] /
1 # user-authorization-poa.yaml
2
3 ---
4 apiVersion: v1
5 kind: ConfigMap
6 metadata:
7   namespace: user-authorization-service
8   name: user-authorization-poa-env
9 data:
10   SERVER_PORT: "8080"
11   SSL_ENABLED: "false"
12   #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
13   #SSL_KEYSTORE_PASSWORD: ""
14   #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
15   #SSL_TRUSTSTORE_PASSWORD: ""
16
17   SERVER_MAXHTTPHEADERSIZE: "10240"
18
19   SERVER_TOMCAT_ACCEPT_COUNT: "5000"
20   SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
21   SERVER_TOMCAT_MAX_THREADS: "800"
22   SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
23
24
25   SPRING_DATASOURCE_DRUID_INITIAL_SIZE: "10"
26   SPRING_DATASOURCE_DRUID_MAX_ACTIVE: "50"
27   SPRING_DATASOURCE_DRUID_MIN_IDLE: "10"
28
29
30   USER_DATA_SERVICE_SERVER_URL: http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080
31   USER_DATA_SERVICE_CLIENT_AUTH_ENABLED: "false"
32   #USER_DATA_SERVICE_CLIENT_AUTH_KEY_PASSWORD: ""
33   #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/client/client.keystore
34   #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
35   #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/client/client.truststore
36   #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
37
38   LOGGING_LEVEL_COM_SUPWISDOM_INSTITUTE_USER_AUTHORIZATION_SERVICE_COMMON_LOG: INFO
39
40 ---
41 apiVersion: v1
42 kind: Service
43 metadata:
44   namespace: user-authorization-service
45   name: user-authorization-poa-svc
46   labels:
47     app: user-authorization-poa
48     needMonitor: 'true'
49 spec:
50   ports:
51     - port: 8080
52       targetPort: http
53       protocol: TCP
54       name: http
55     - port: 6060
56       targetPort: http-metrics
57       protocol: TCP
58       name: http-metrics
59   selector:
60     app: user-authorization-poa
61
62 ---
63 apiVersion: apps/v1
64 kind: Deployment
65 metadata:
66   namespace: user-authorization-service
67   name: user-authorization-poa
68 spec:
69   selector:
70     matchLabels:
71       app: user-authorization-poa
72   replicas: 1
73   template:
74     metadata:
75       labels:
76         app: user-authorization-poa
77     spec:
78       containers:
79       - name: user-authorization-poa
80         # 若使用了学校搭设的私有仓库,请修改
81         image: harbor.supwisdom.com/user-authorization-service/user-authorization-poa:1.2.5-RELEASE
82         imagePullPolicy: Always
83         ports:
84         - containerPort: 8080
85           name: http
86         - containerPort: 6060
87           name: http-metrics
88         envFrom:
89         - secretRef:
90             name: datasource-env-secret
91         - configMapRef:
92             name: jvm-env
93         - configMapRef:
94             name: user-authorization-poa-env
95         resources:
96           requests:
97             memory: "1024Mi"
98           limits:
99             memory: "1024Mi"
100         readinessProbe:
101           httpGet:
102             path: /actuator/health
103             port: 8888
104           initialDelaySeconds: 20
105           periodSeconds: 5
106           timeoutSeconds: 5
107           successThreshold: 1
108           failureThreshold: 10
109       imagePullSecrets:
110         - name: harbor-registry
111