Supwisdom Source - institute/deploy-authx-service.git/blob

   1 # user-data-service-goa.yaml
   2
   3 ---
   4 apiVersion: v1
   5 kind: ConfigMap
   6 metadata:
   7   namespace: user-data-service-test
   8   name: user-data-service-goa-env
   9 data:
  10   SERVER_PORT: "8080"
  11   SSL_ENABLED: "false"
  12   #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
  13   #SSL_KEYSTORE_PASSWORD: ""
  14   #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
  15   #SSL_TRUSTSTORE_PASSWORD: ""
  16
  17   SERVER_MAXHTTPHEADERSIZE: "10240"
  18
  19
  20   SERVER_TOMCAT_ACCEPT_COUNT: "5000"
  21   SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
  22   SERVER_TOMCAT_MAX_THREADS: "800"
  23   SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
  24
  25   SPRING_DATASOURCE_DRUID_INITIAL_SIZE: "10"
  26   SPRING_DATASOURCE_DRUID_MAX_ACTIVE: "20"
  27   SPRING_DATASOURCE_DRUID_MIN_IDLE: "10"
  28
  29   SPRING_REDIS_JEDIS_POOL_MAXACTIVE: "800"
  30   SPRING_REDIS_JEDIS_POOL_MAXIDLE: "100"
  31   SPRING_REDIS_JEDIS_POOL_MINIDLE: "100"
  32
  33
  34   # 加密算法的实现，默认 default，支持 bcrypt 等加密算法； SHA-256 支持 SHA-256 加密算法
  35   PASSWORD_ENCODER_IMPL: default
  36
  37   SECURITY_API_SECURITY_ACCOUNT_SERVICE_IMPL: redis
  38
  39
  40   # 推送数据到 jobs-server 的配置
  41   JOBS_RABBITMQ_ENABLED: "false"
  42   JOBS_RABBITMQ_HOST: rabbitmq-server.jobs-server-test.svc.cluster.local
  43   JOBS_RABBITMQ_PORT: "5672"
  44   JOBS_RABBITMQ_USERNAME: guest
  45   JOBS_RABBITMQ_PASSWORD: guest
  46
  47
  48   # 是否同步帐号到 openldap（已弃用）
  49   # JOBS_RABBITMQ_ACCOUNTUSERSVC2OPENLDAPRABBITSENDER_ENABLED: "false"
  50
  51   # 是否同步帐号数据至 jobs 的 MQ，由 jobs 再进行分发（如分发到 openldap）
  52   JOBS_RABBITMQ_ACCOUNTUSERSVC2JOBSRABBITSENDER_ENABLED: "false"
  53   # 是否同步密码（明文密码）到 jobs 的 MQ，由 jobs 再进行分发（如分发到 城市热点）
  54   JOBS_RABBITMQ_ACCOUNTUSERSVC2JOBSSYNCPASSWORDRABBITSENDER_ENABLED: "false"
  55
  56   # 是否同步组织机构数据至 jobs 的 MQ，由 jobs 再进行分发（如分发到 openldap）
  57   JOBS_RABBITMQ_ORGANIZATIONUSERSVC2JOBSRABBITSENDER_ENABLED: "false"
  58
  59   # 是否同步用户组数据至 jobs 的 MQ，由 jobs 再进行分发（如分发到 openldap）
  60   JOBS_RABBITMQ_GROUPUSERSVC2JOBSRABBITSENDER_ENABLED: "false"
  61
  62
  63 ---
  64 apiVersion: v1
  65 kind: Service
  66 metadata:
  67   namespace: user-data-service-test
  68   name: user-data-service-goa-svc
  69   labels:
  70     app: user-data-service-goa
  71     needMonitor: 'true'
  72 spec:
  73   ports:
  74     - port: 8080
  75       targetPort: http
  76       protocol: TCP
  77       name: http
  78     - port: 6060
  79       targetPort: http-metrics
  80       protocol: TCP
  81       name: http-metrics
  82   selector:
  83     app: user-data-service-goa
  84
  85 ---
  86 apiVersion: apps/v1
  87 kind: Deployment
  88 metadata:
  89   namespace: user-data-service-test
  90   name: user-data-service-goa
  91 spec:
  92   selector:
  93     matchLabels:
  94       app: user-data-service-goa
  95   replicas: 1
  96   template:
  97     metadata:
  98       labels:
  99         app: user-data-service-goa
 100     spec:
 101       containers:
 102       - name: user-data-service-goa
 103         # 若使用了学校搭设的私有仓库，请修改
 104         image: harbor.supwisdom.com/goa/goa-api:0.1.1-SNAPSHOT
 105         imagePullPolicy: Always
 106         ports:
 107         - containerPort: 8080
 108           name: http
 109         - containerPort: 6060
 110           name: http-metrics
 111         envFrom:
 112         - configMapRef:
 113             name: jvm-env
 114         - secretRef:
 115             name: datasource-env-secret
 116         - secretRef:
 117             name: redis-env-secret
 118         - secretRef:
 119             name: rabbitmq-env-secret
 120         - configMapRef:
 121             name: user-data-service-goa-env
 122         resources:
 123           requests:
 124             memory: "1024Mi"
 125           limits:
 126             memory: "1024Mi"
 127         readinessProbe:
 128           httpGet:
 129             path: /actuator/health
 130             port: 8080
 131           initialDelaySeconds: 20
 132           periodSeconds: 5
 133           timeoutSeconds: 5
 134           successThreshold: 1
 135           failureThreshold: 10
 136       imagePullSecrets:
 137         - name: harbor-registry