Supwisdom Source - institute/deploy-authx-service.git/blob

   1 # thirdparty-agent-service.yaml
   2
   3 ---
   4 apiVersion: v1
   5 kind: ConfigMap
   6 metadata:
   7   namespace: thirdparty-agent-service
   8   name: agent-service-env
   9 data:
  10   SERVER_PORT: "8080"
  11   SSL_ENABLED: "false"
  12   #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
  13   #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
  14
  15   SERVER_MAXHTTPHEADERSIZE: "10240"
  16
  17   SERVER_TOMCAT_ACCEPT_COUNT: "5000"
  18   SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
  19   SERVER_TOMCAT_MAX_THREADS: "800"
  20   SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
  21
  22
  23   SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE: "20"
  24   SPRING_DATASOURCE_HIKARI_MINIMUM_IDLE: "10"
  25
  26   SPRING_DATASOURCE_DRUID_INITIAL_SIZE: "10"
  27   SPRING_DATASOURCE_DRUID_MAX_ACTIVE: "20"
  28   SPRING_DATASOURCE_DRUID_MIN_IDLE: "10"
  29
  30   LOGGING_LEVEL_COM_SUPWISDOM_INSTITUTE_TPAS: INFO
  31
  32   ## file-db
  33   FILE_DB_AUTOCONFIGURE_ENABLED: "false"
  34
  35   ## file-minio
  36   FILE_MINIO_AUTOCONFIGURE_ENABLED: "true"
  37   FILE_MINIO_ENDPOINT: http://minio-svc.authx-service.svc.cluster.local:9000
  38   # FILE_MINIO_ACCESSKEY: ""
  39   # FILE_MINIO_SECRETKEY: ""
  40
  41   ## mail-console
  42   MAIL_CONSOLE_AUTOCONFIGURE_ENABLED: "true"
  43
  44   # 若须对接邮件服务，须提供 SMTP 帐号
  45   ## mail-smtp
  46   MAIL_SMTP_AUTOCONFIGURE_ENABLED: "false"
  47   MAIL_SMTP_HOST: smtp.mxhichina.com
  48   MAIL_SMTP_PORT: "25"
  49   MAIL_SMTP_SECURE_MODE: NONE
  50   MAIL_SMTP_USERNAME: security.institute@supwisdom.com
  51   MAIL_SMTP_PASSWORD: Security2019
  52   MAIL_SMTP_FROM: security.institute@supwisdom.com
  53   MAIL_SMTP_FROM_PERSONAL: 智慧校园
  54
  55   ## sms-console
  56   SMS_CONSOLE_AUTOCONFIGURE_ENABLED: "true"
  57
  58   # 若须使用阿里云短信服务，须提供帐号
  59   ## sms-aliyun
  60   SMS_ALIYUN_AUTOCONFIGURE_ENABLED: "false"
  61   SMS_ALIYUN_REGION_ID: cn-hangzhou
  62   SMS_ALIYUN_ACCESS_KEY_ID: ""
  63   SMS_ALIYUN_ACCESS_SECRET: ""
  64
  65   # 若须对接sms 接口，须进行二开定制
  66
  67
  68 ---
  69 apiVersion: v1
  70 kind: Secret
  71 metadata:
  72   namespace: thirdparty-agent-service
  73   name: agent-service-env-secret
  74 type: Opaque
  75 data:
  76   #SSL_KEYSTORE_PASSWORD: ""
  77   #SSL_TRUSTSTORE_PASSWORD: ""
  78
  79   ## file-minio
  80   FILE_MINIO_ACCESSKEY: MXk4TkA4UkBhXzJ1
  81   # 1y8N@8R@a_2u
  82   FILE_MINIO_SECRETKEY: OHB4bEllOSNsTjdR
  83   # 8pxlIe9#lN7Q
  84
  85
  86 ---
  87 apiVersion: v1
  88 kind: Service
  89 metadata:
  90   namespace: thirdparty-agent-service
  91   name: agent-service-svc
  92   labels:
  93     app: agent-service
  94     needMonitor: 'true'
  95 spec:
  96   ports:
  97     - port: 8080
  98       targetPort: http
  99       protocol: TCP
 100       name: http
 101     - port: 6060
 102       targetPort: http-metrics
 103       protocol: TCP
 104       name: http-metrics
 105   selector:
 106     app: agent-service
 107
 108 ---
 109 apiVersion: apps/v1
 110 kind: Deployment
 111 metadata:
 112   namespace: thirdparty-agent-service
 113   name: agent-service
 114 spec:
 115   selector:
 116     matchLabels:
 117       app: agent-service
 118   replicas: 1
 119   template:
 120     metadata:
 121       labels:
 122         app: agent-service
 123     spec:
 124       containers:
 125       - name: agent-service
 126         # 若使用了学校搭设的私有仓库，请修改
 127         image: harbor.supwisdom.com/thirdparty-agent-service/agent-service:1.2.0-RELEASE
 128         imagePullPolicy: Always
 129         ports:
 130         - containerPort: 8080
 131           name: http
 132         - containerPort: 6060
 133           name: http-metrics
 134         envFrom:
 135         - configMapRef:
 136             name: jvm-env
 137         - secretRef:
 138             name: datasource-env-secret
 139         - secretRef:
 140             name: agent-service-env-secret
 141         - configMapRef:
 142             name: agent-service-env
 143         resources:
 144           requests:
 145             memory: "512Mi"
 146           limits:
 147             memory: "512Mi"
 148         readinessProbe:
 149           httpGet:
 150             path: /actuator/health
 151             port: 8080
 152           initialDelaySeconds: 20
 153           periodSeconds: 5
 154           timeoutSeconds: 5
 155           successThreshold: 1
 156           failureThreshold: 10
 157       imagePullSecrets:
 158         - name: harbor-registry
 159