Supwisdom Source - institute/deploy-authx-service.git/blob

   1 # user-authorization-poa.yaml
   2
   3 ---
   4 apiVersion: v1
   5 kind: ConfigMap
   6 metadata:
   7   namespace: user-authorization-service
   8   name: user-authorization-poa-env
   9 data:
  10   SERVER_PORT: "8080"
  11   SSL_ENABLED: "false"
  12   #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
  13   #SSL_KEYSTORE_PASSWORD: ""
  14   #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
  15   #SSL_TRUSTSTORE_PASSWORD: ""
  16
  17   SERVER_MAXHTTPHEADERSIZE: "10240"
  18
  19   SERVER_TOMCAT_ACCEPT_COUNT: "5000"
  20   SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
  21   SERVER_TOMCAT_MAX_THREADS: "800"
  22   SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
  23
  24
  25   SPRING_DATASOURCE_DRUID_INITIAL_SIZE: "10"
  26   SPRING_DATASOURCE_DRUID_MAX_ACTIVE: "50"
  27   SPRING_DATASOURCE_DRUID_MIN_IDLE: "10"
  28
  29
  30   USER_DATA_SERVICE_SERVER_URL: http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080
  31   USER_DATA_SERVICE_CLIENT_AUTH_ENABLED: "false"
  32   #USER_DATA_SERVICE_CLIENT_AUTH_KEY_PASSWORD: ""
  33   #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/client/client.keystore
  34   #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
  35   #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/client/client.truststore
  36   #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
  37
  38   LOGGING_LEVEL_COM_SUPWISDOM_INSTITUTE_USER_AUTHORIZATION_SERVICE_COMMON_LOG: INFO
  39
  40
  41   AUTHX_LOG_ENABLED: "true"
  42   AUTHX_LOG_RABBITMQ_HOST: rabbitmq-server.authx-service.svc.cluster.local
  43   AUTHX_LOG_RABBITMQ_PORT: "5672"
  44   AUTHX_LOG_RABBITMQ_USERNAME: guest
  45   AUTHX_LOG_RABBITMQ_PASSWORD: guest
  46
  47
  48 ---
  49 apiVersion: v1
  50 kind: Service
  51 metadata:
  52   namespace: user-authorization-service
  53   name: user-authorization-poa-svc
  54   labels:
  55     app: user-authorization-poa
  56     needMonitor: 'true'
  57 spec:
  58   ports:
  59     - port: 8080
  60       targetPort: http
  61       protocol: TCP
  62       name: http
  63     - port: 6060
  64       targetPort: http-metrics
  65       protocol: TCP
  66       name: http-metrics
  67   selector:
  68     app: user-authorization-poa
  69
  70 ---
  71 apiVersion: apps/v1
  72 kind: Deployment
  73 metadata:
  74   namespace: user-authorization-service
  75   name: user-authorization-poa
  76 spec:
  77   selector:
  78     matchLabels:
  79       app: user-authorization-poa
  80   replicas: 1
  81   template:
  82     metadata:
  83       labels:
  84         app: user-authorization-poa
  85     spec:
  86       containers:
  87       - name: user-authorization-poa
  88         # 若使用了学校搭设的私有仓库，请修改
  89         image: harbor.supwisdom.com/user-authorization-service/user-authorization-poa:1.4.0-RELEASE
  90         imagePullPolicy: Always
  91         ports:
  92         - containerPort: 8080
  93           name: http
  94         - containerPort: 6060
  95           name: http-metrics
  96         envFrom:
  97         - secretRef:
  98             name: datasource-env-secret
  99         - configMapRef:
 100             name: jvm-env
 101         - configMapRef:
 102             name: user-authorization-poa-env
 103         resources:
 104           requests:
 105             memory: "1024Mi"
 106           limits:
 107             memory: "1024Mi"
 108         readinessProbe:
 109           httpGet:
 110             path: /actuator/health
 111             port: 8888
 112           initialDelaySeconds: 20
 113           periodSeconds: 5
 114           timeoutSeconds: 5
 115           successThreshold: 1
 116           failureThreshold: 10
 117       imagePullSecrets:
 118         - name: harbor-registry
 119