Supwisdom Source - institute/deploy-authx-service.git/blob

   1 # thirdparty-agent-service.yaml
   2
   3 ---
   4 apiVersion: v1
   5 kind: ConfigMap
   6 metadata:
   7   namespace: thirdparty-agent-service
   8   name: agent-service-env
   9 data:
  10   SERVER_PORT: "8080"
  11   SSL_ENABLED: "false"
  12   #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
  13   #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
  14
  15   SERVER_MAXHTTPHEADERSIZE: "10240"
  16
  17   SERVER_TOMCAT_ACCEPT_COUNT: "5000"
  18   SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
  19   SERVER_TOMCAT_MAX_THREADS: "800"
  20   SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
  21
  22
  23   SPRING_DATASOURCE_DRUID_INITIAL_SIZE: "10"
  24   SPRING_DATASOURCE_DRUID_MAX_ACTIVE: "20"
  25   SPRING_DATASOURCE_DRUID_MIN_IDLE: "10"
  26
  27   LOGGING_LEVEL_COM_SUPWISDOM_INSTITUTE_TPAS: INFO
  28
  29   ## file-db
  30   FILE_DB_AUTOCONFIGURE_ENABLED: "false"
  31
  32   ## file-minio
  33   FILE_MINIO_AUTOCONFIGURE_ENABLED: "true"
  34   FILE_MINIO_ENDPOINT: http://minio-svc.authx-service.svc.cluster.local:9000
  35   # FILE_MINIO_ACCESSKEY: ""
  36   # FILE_MINIO_SECRETKEY: ""
  37
  38   ## mail-console
  39   MAIL_CONSOLE_AUTOCONFIGURE_ENABLED: "true"
  40
  41   # 若须对接邮件服务，须提供 SMTP 帐号
  42   ## mail-smtp
  43   MAIL_SMTP_AUTOCONFIGURE_ENABLED: "false"
  44   MAIL_SMTP_HOST: smtp.mxhichina.com
  45   MAIL_SMTP_PORT: "25"
  46   MAIL_SMTP_SECURE_MODE: NONE
  47   MAIL_SMTP_USERNAME: security.institute@supwisdom.com
  48   MAIL_SMTP_PASSWORD: Security2019
  49   MAIL_SMTP_FROM: security.institute@supwisdom.com
  50   MAIL_SMTP_FROM_PERSONAL: 智慧校园
  51
  52   ## sms-console
  53   SMS_CONSOLE_AUTOCONFIGURE_ENABLED: "true"
  54
  55   # 若须使用阿里云短信服务，须提供帐号
  56   ## sms-aliyun
  57   SMS_ALIYUN_AUTOCONFIGURE_ENABLED: "false"
  58   SMS_ALIYUN_REGION_ID: cn-hangzhou
  59   SMS_ALIYUN_ACCESS_KEY_ID: ""
  60   SMS_ALIYUN_ACCESS_SECRET: ""
  61
  62   # 若须对接sms 接口，须进行二开定制
  63
  64
  65 ---
  66 apiVersion: v1
  67 kind: Secret
  68 metadata:
  69   namespace: thirdparty-agent-service
  70   name: agent-service-env-secret
  71 type: Opaque
  72 data:
  73   #SSL_KEYSTORE_PASSWORD: ""
  74   #SSL_TRUSTSTORE_PASSWORD: ""
  75
  76   ## file-minio
  77   FILE_MINIO_ACCESSKEY: MXk4TkA4UkBhXzJ1
  78   # 1y8N@8R@a_2u
  79   FILE_MINIO_SECRETKEY: OHB4bEllOSNsTjdR
  80   # 8pxlIe9#lN7Q
  81
  82
  83 ---
  84 apiVersion: v1
  85 kind: Service
  86 metadata:
  87   namespace: thirdparty-agent-service
  88   name: agent-service-svc
  89   labels:
  90     app: agent-service
  91     needMonitor: 'true'
  92 spec:
  93   ports:
  94     - port: 8080
  95       targetPort: http
  96       protocol: TCP
  97       name: http
  98     - port: 6060
  99       targetPort: http-metrics
 100       protocol: TCP
 101       name: http-metrics
 102   selector:
 103     app: agent-service
 104
 105 ---
 106 apiVersion: apps/v1
 107 kind: Deployment
 108 metadata:
 109   namespace: thirdparty-agent-service
 110   name: agent-service
 111 spec:
 112   selector:
 113     matchLabels:
 114       app: agent-service
 115   replicas: 1
 116   template:
 117     metadata:
 118       labels:
 119         app: agent-service
 120     spec:
 121       containers:
 122       - name: agent-service
 123         # 若使用了学校搭设的私有仓库，请修改
 124         image: harbor.supwisdom.com/thirdparty-agent-service/agent-service:0.0.1-SNAPSHOT
 125         imagePullPolicy: Always
 126         ports:
 127         - containerPort: 8080
 128           name: http
 129         - containerPort: 6060
 130           name: http-metrics
 131         envFrom:
 132         - configMapRef:
 133             name: jvm-env
 134         - secretRef:
 135             name: datasource-env-secret
 136         - secretRef:
 137             name: agent-service-env-secret
 138         - configMapRef:
 139             name: agent-service-env
 140         resources:
 141           requests:
 142             memory: "512Mi"
 143           limits:
 144             memory: "512Mi"
 145         readinessProbe:
 146           httpGet:
 147             path: /actuator/health
 148             port: 8080
 149           initialDelaySeconds: 20
 150           periodSeconds: 5
 151           timeoutSeconds: 5
 152           successThreshold: 1
 153           failureThreshold: 10
 154       imagePullSecrets:
 155         - name: harbor-registry
 156