# {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
.dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQyIsInVzZXJuYW1lIjoicmFuY2hlci5kZXZvcHMifX19
+
+
+####################################################
+# rabbitmq-server
+####################################################
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ labels:
+ app: rabbitmq
+ release: rabbitmq-server
+ name: rabbitmq-server
+ namespace: user-data-service
+type: Opaque
+data:
+ RABBITMQ_USERNAME: Z3Vlc3Q=
+ RABBITMQ_PASSWORD: Z3Vlc3Q=
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: rabbitmq-server
+ namespace: user-data-service
+ labels:
+ app: rabbitmq-server
+spec:
+ ports:
+ - port: 5672
+ targetPort: tcp-1
+ protocol: TCP
+ name: tcp-1
+ - port: 15672
+ targetPort: tcp-2
+ protocol: TCP
+ name: tcp-2
+ selector:
+ app: rabbitmq-server
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: rabbitmq-server
+ namespace: user-data-service
+spec:
+ selector:
+ matchLabels:
+ app: rabbitmq-server
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: rabbitmq-server
+ annotations:
+ sidecar.istio.io/inject: "false"
+ spec:
+ containers:
+ - name: rabbitmq-server
+ # 若使用了学校搭设的私有仓库，请修改
+ image: rabbitmq:management
+ # 若使用了学校搭设的私有仓库，请修改 为 Always
+ imagePullPolicy: IfNotPresent
+ # imagePullPolicy: Always
+ ports:
+ - containerPort: 5672
+ name: tcp-1
+ - containerPort: 15672
+ name: tcp-2
+ # 若使用了学校搭设的私有仓库，请增加以下配置（取消注释即可）
+ # imagePullSecrets:
+ # - name: harbor-registry
# SBA_URL: http://spring-boot-admin-svc.base.svc.cluster.local:8080
+ USER_AUTHORIZATION_SA_USER_RABBITMQ_CONSUMER_ENABLED: "false"
+ USER_AUTHORIZATION_SA_USER_RABBITMQ_HOST: rabbitmq-server.jobs-server.svc.cluster.local
+ USER_AUTHORIZATION_SA_USER_RABBITMQ_PORT: "5672"
+ USER_AUTHORIZATION_SA_USER_RABBITMQ_USERNAME: guest
+ USER_AUTHORIZATION_SA_USER_RABBITMQ_PASSWORD: guest
+
---
apiVersion: v1
containers:
- name: user-authorization-sa
# 若使用了学校搭设的私有仓库，请修改
- image: harbor.supwisdom.com/user-authorization-service/user-authorization-sa:1.1.7-RELEASE
+ image: harbor.supwisdom.com/user-authorization-service/user-authorization-sa:1.2.0-SNAPSHOT
imagePullPolicy: Always
ports:
- containerPort: 8080
- containerPort: 6060
name: http-metrics
envFrom:
- - secretRef:
- name: datasource-env-secret
- configMapRef:
name: jvm-env
+ - secretRef:
+ name: datasource-env-secret
+ - secretRef:
+ name: rabbitmq-env-secret
- configMapRef:
name: user-authorization-sa-env
resources:
# user-authorization-datax-job.yaml
+# 废弃，改由消息队列进行数据同步
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
- namespace: user-authorization-service
- name: user-authorization-datax-job-env
-data:
- JOB_USER2AUTHZ_MYSQLREADER8_USERNAME: "user"
- # 修改为实际的数据库密码
- JOB_USER2AUTHZ_MYSQLREADER8_PASSWORD: "kingstar"
- JOB_USER2AUTHZ_MYSQLREADER8_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user?serverTimezone=Asia/Shanghai"
+# ---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+# namespace: user-authorization-service
+# name: user-authorization-datax-job-env
+# data:
+# JOB_USER2AUTHZ_MYSQLREADER8_USERNAME: "user"
+# # 修改为实际的数据库密码
+# JOB_USER2AUTHZ_MYSQLREADER8_PASSWORD: "kingstar"
+# JOB_USER2AUTHZ_MYSQLREADER8_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user?serverTimezone=Asia/Shanghai"
- JOB_USER2AUTHZ_MYSQLWRITER8_USERNAME: "user_authz"
- # 修改为实际的数据库密码
- JOB_USER2AUTHZ_MYSQLWRITER8_PASSWORD: "kingstar"
- JOB_USER2AUTHZ_MYSQLWRITER8_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user_authz?serverTimezone=Asia/Shanghai"
+# JOB_USER2AUTHZ_MYSQLWRITER8_USERNAME: "user_authz"
+# # 修改为实际的数据库密码
+# JOB_USER2AUTHZ_MYSQLWRITER8_PASSWORD: "kingstar"
+# JOB_USER2AUTHZ_MYSQLWRITER8_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user_authz?serverTimezone=Asia/Shanghai"
----
-apiVersion: batch/v1beta1
-kind: CronJob
-metadata:
- name: user-authorization-datax-job
- namespace: user-authorization-service
-spec:
- schedule: "*/10 * * * *"
- jobTemplate:
- metadata:
- labels:
- app: user-authorization-datax-job
- spec:
- completions: 1
- parallelism: 1
- template:
- metadata:
- labels:
- app: user-authorization-datax-job
- spec:
- restartPolicy: Never
- containers:
- - name: user-authorization-datax-job
- # 若使用了学校搭设的私有仓库，请修改
- image: harbor.supwisdom.com/user-authorization-service/user-authorization-datax-job:1.1.7-RELEASE
- imagePullPolicy: Always
- envFrom:
- - configMapRef:
- name: user-authorization-datax-job-env
- # resources:
- # requests:
- # memory: "400Mi"
- # limits:
- # memory: "400Mi"
- imagePullSecrets:
- - name: harbor-registry
+# ---
+# apiVersion: batch/v1beta1
+# kind: CronJob
+# metadata:
+# name: user-authorization-datax-job
+# namespace: user-authorization-service
+# spec:
+# schedule: "*/10 * * * *"
+# jobTemplate:
+# metadata:
+# labels:
+# app: user-authorization-datax-job
+# spec:
+# completions: 1
+# parallelism: 1
+# template:
+# metadata:
+# labels:
+# app: user-authorization-datax-job
+# spec:
+# restartPolicy: Never
+# containers:
+# - name: user-authorization-datax-job
+# # 若使用了学校搭设的私有仓库，请修改
+# image: harbor.supwisdom.com/user-authorization-service/user-authorization-datax-job:1.2.0-SNAPSHOT
+# imagePullPolicy: Always
+# envFrom:
+# - configMapRef:
+# name: user-authorization-datax-job-env
+# # resources:
+# # requests:
+# # memory: "400Mi"
+# # limits:
+# # memory: "400Mi"
+# imagePullSecrets:
+# - name: harbor-registry
Code Review / institute / deploy-authx-service.git / commitdiff
