Supwisdom Source - institute/deploy-authx-service.git/blob

   1 # user-authorization-poa.yaml
   2
   3 ---
   4 apiVersion: v1
   5 kind: ConfigMap
   6 metadata:
   7   namespace: user-authorization-service
   8   name: user-authorization-poa-env
   9 data:
  10   SERVER_PORT: "8080"
  11   SSL_ENABLED: "false"
  12   #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
  13   #SSL_KEYSTORE_PASSWORD: ""
  14   #SSL_TRUSTSTORE_FILE: file:/certs/server/server.truststore
  15   #SSL_TRUSTSTORE_PASSWORD: ""
  16
  17   SERVER_MAXHTTPHEADERSIZE: "10240"
  18
  19   SERVER_TOMCAT_ACCEPT_COUNT: "5000"
  20   SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
  21   SERVER_TOMCAT_MAX_THREADS: "800"
  22   SERVER_TOMCAT_MIN_SPARE_THREADS: "100"
  23
  24
  25   SPRING_DATASOURCE_DRUID_INITIAL_SIZE: "10"
  26   SPRING_DATASOURCE_DRUID_MAX_ACTIVE: "50"
  27   SPRING_DATASOURCE_DRUID_MIN_IDLE: "10"
  28
  29
  30   USER_DATA_SERVICE_SERVER_URL: http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080
  31   USER_DATA_SERVICE_CLIENT_AUTH_ENABLED: "false"
  32   #USER_DATA_SERVICE_CLIENT_AUTH_KEY_PASSWORD: ""
  33   #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_FILE: file:/certs/client/client.keystore
  34   #USER_DATA_SERVICE_CLIENT_AUTH_KEYSTORE_PASSWORD: ""
  35   #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_FILE: file:/certs/client/client.truststore
  36   #USER_DATA_SERVICE_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
  37
  38
  39 ---
  40 apiVersion: v1
  41 kind: Service
  42 metadata:
  43   namespace: user-authorization-service
  44   name: user-authorization-poa-svc
  45   labels:
  46     app: user-authorization-poa
  47     needMonitor: 'true'
  48 spec:
  49   ports:
  50     - port: 8080
  51       targetPort: http
  52       protocol: TCP
  53       name: http
  54     - port: 6060
  55       targetPort: http-metrics
  56       protocol: TCP
  57       name: http-metrics
  58   selector:
  59     app: user-authorization-poa
  60
  61 ---
  62 apiVersion: apps/v1
  63 kind: Deployment
  64 metadata:
  65   namespace: user-authorization-service
  66   name: user-authorization-poa
  67 spec:
  68   selector:
  69     matchLabels:
  70       app: user-authorization-poa
  71   replicas: 1
  72   template:
  73     metadata:
  74       labels:
  75         app: user-authorization-poa
  76     spec:
  77       containers:
  78       - name: user-authorization-poa
  79         # 若使用了学校搭设的私有仓库，请修改
  80         image: harbor.supwisdom.com/user-authorization-service/user-authorization-poa:1.1.5-RELEASE
  81         imagePullPolicy: Always
  82         ports:
  83         - containerPort: 8080
  84           name: http
  85         - containerPort: 6060
  86           name: http-metrics
  87         envFrom:
  88         - secretRef:
  89             name: datasource-env-secret
  90         - configMapRef:
  91             name: jvm-env
  92         - configMapRef:
  93             name: user-authorization-poa-env
  94         resources:
  95           requests:
  96             memory: "1024Mi"
  97           limits:
  98             memory: "1024Mi"
  99         readinessProbe:
 100           httpGet:
 101             path: /actuator/health
 102             port: 8888
 103           initialDelaySeconds: 20
 104           periodSeconds: 5
 105           timeoutSeconds: 5
 106           successThreshold: 1
 107           failureThreshold: 10
 108       imagePullSecrets:
 109         - name: harbor-registry
 110