docs: 部署问题,更新镜像版本 1.5.0-RELEASE
author刘洪青 <hongqing.liu@supwisdom.com>
Mon, 27 Dec 2021 05:31:09 +0000 (13:31 +0800)
committer刘洪青 <hongqing.liu@supwisdom.com>
Mon, 27 Dec 2021 05:31:09 +0000 (13:31 +0800)
30 files changed:
deploy-manifests/k8s-rancher/1.authx-service/0.authx-service/4.4.authx-service-bff.yaml
deploy-manifests/k8s-rancher/1.authx-service/0.authx-service/4.9.authx-management.yaml
deploy-manifests/k8s-rancher/1.authx-service/1.thirdparty-agent-service/4.2.thirdparty-agent-service.yaml
deploy-manifests/k8s-rancher/1.authx-service/2.user-data-service/4.0.user-data-service-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/2.user-data-service/4.1.user-data-service-poa.yaml
deploy-manifests/k8s-rancher/1.authx-service/2.user-data-service/4.2.user-data-service-goa.yaml
deploy-manifests/k8s-rancher/1.authx-service/2.user-data-service/4.3.user-data-service-biz.yaml
deploy-manifests/k8s-rancher/1.authx-service/2.user-data-service/5.user-data-service-datax-job.yaml
deploy-manifests/k8s-rancher/1.authx-service/2.user-data-service/9.api-docs-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/3.user-authorization-service/4.0.user-authorization-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/3.user-authorization-service/4.1.user-authorization-poa.yaml
deploy-manifests/k8s-rancher/1.authx-service/3.user-authorization-service/4.2.user-authorization-sa.yaml
deploy-manifests/k8s-rancher/1.authx-service/3.user-authorization-service/5.user-authorization-datax-job.yaml
deploy-manifests/k8s-rancher/1.authx-service/3.user-authorization-service/9.api-docs-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/4.cas-server/4.0.cas-server-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/4.cas-server/4.2.cas-server-sa-api.yaml
deploy-manifests/k8s-rancher/1.authx-service/4.cas-server/4.3.cas-server-security-engine.yaml
deploy-manifests/k8s-rancher/1.authx-service/4.cas-server/4.5.cas-server-site-webapp.yaml
deploy-manifests/k8s-rancher/1.authx-service/4.cas-server/4.6.cas-server-site-scheme.yaml
deploy-manifests/k8s-rancher/1.authx-service/4.cas-server/5.cas-server-datax-job.yaml
deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.0.token-server-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.1.token-server.yaml
deploy-manifests/k8s-rancher/1.authx-service/5.token-server/9.api-docs-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/6.personal-security-center/4.4.personal-security-center-bff.yaml
deploy-manifests/k8s-rancher/1.authx-service/6.personal-security-center/4.5.personal-security-center-zuul.yaml
deploy-manifests/k8s-rancher/1.authx-service/6.personal-security-center/4.9.security-center-ui.yaml
deploy-manifests/k8s-rancher/1.authx-service/7.attest-server/4.1.attest-server.yaml
deploy-manifests/k8s-rancher/1.authx-service/8.authx-log/4.0.authx-log-installer.yaml
deploy-manifests/k8s-rancher/1.authx-service/8.authx-log/4.2.authx-log-sa.yaml
deploy-manifests/k8s-rancher/1.authx-service/99.init-installer/4.99.init-installer.yaml [new file with mode: 0644]

index c535c46..090a8fb 100644 (file)
@@ -122,7 +122,7 @@ spec:
     spec:
       containers:
       - name: authx-service-bff
-        image: harbor.supwisdom.com/authx-service/authx-service-bff:1.4.0-RELEASE
+        image: harbor.supwisdom.com/authx-service/authx-service-bff:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 06c3911..151fc5e 100644 (file)
@@ -44,7 +44,7 @@ spec:
     spec:
       containers:
       - name: authx-management
-        image: harbor.supwisdom.com/authx-service/authx-management:1.4.0-RELEASE
+        image: harbor.supwisdom.com/authx-service/authx-management:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 80
index eef5afa..eccdbef 100644 (file)
@@ -138,7 +138,7 @@ spec:
       containers:
       - name: agent-service
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/thirdparty-agent-service/agent-service:1.3.0-RELEASE
+        image: harbor.supwisdom.com/thirdparty-agent-service/agent-service:1.3.1-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 745c460..8c1bb80 100644 (file)
@@ -28,7 +28,7 @@ spec:
       containers:
       - name: user-data-service-installer
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/goa/installer:1.4.0-RELEASE
+        image: harbor.supwisdom.com/goa/installer:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index 63d972c..e65c200 100644 (file)
@@ -99,7 +99,7 @@ spec:
       containers:
       - name: user-data-service-poa
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/goa/poa-api:1.4.0-RELEASE
+        image: harbor.supwisdom.com/goa/poa-api:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 68cfc18..d568d6b 100644 (file)
@@ -129,7 +129,7 @@ spec:
       containers:
       - name: user-data-service-goa
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/goa/goa-api:1.4.0-RELEASE
+        image: harbor.supwisdom.com/goa/goa-api:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 74d6c2a..7605c23 100644 (file)
@@ -103,7 +103,7 @@ spec:
       containers:
       - name: user-data-service-biz
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/goa/biz-api:1.4.0-RELEASE
+        image: harbor.supwisdom.com/goa/biz-api:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 1bba19f..9a5d371 100644 (file)
@@ -41,7 +41,7 @@ spec:
           containers:
           - name: user-data-service-datax-job
             # 若使用了学校搭设的私有仓库,请修改
-            image: harbor.supwisdom.com/goa/datax-job:1.4.0-RELEASE
+            image: harbor.supwisdom.com/goa/datax-job:1.5.0-RELEASE
             imagePullPolicy: Always
             envFrom:
             - configMapRef:
index bfc4af5..12bc416 100644 (file)
@@ -38,7 +38,7 @@ spec:
       containers:
       - name: api-docs-installer
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/goa/api-docs-installer:1.4.0-RELEASE
+        image: harbor.supwisdom.com/goa/api-docs-installer:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index 4afd7d8..52fc2ff 100644 (file)
@@ -28,7 +28,7 @@ spec:
       containers:
       - name: user-authorization-installer
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/user-authorization-service/user-authorization-installer:1.4.0-RELEASE
+        image: harbor.supwisdom.com/user-authorization-service/user-authorization-installer:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index 740ee97..8cb03ad 100644 (file)
@@ -86,7 +86,7 @@ spec:
       containers:
       - name: user-authorization-poa
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/user-authorization-service/user-authorization-poa:1.4.0-RELEASE
+        image: harbor.supwisdom.com/user-authorization-service/user-authorization-poa:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index bb55321..5f36800 100644 (file)
@@ -88,7 +88,7 @@ spec:
       containers:
       - name: user-authorization-sa
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/user-authorization-service/user-authorization-sa:1.4.0-RELEASE
+        image: harbor.supwisdom.com/user-authorization-service/user-authorization-sa:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index e4789b1..67d05e1 100644 (file)
@@ -41,7 +41,7 @@ spec:
           containers:
           - name: user-authorization-datax-job
             # 若使用了学校搭设的私有仓库,请修改
-            image: harbor.supwisdom.com/user-authorization-service/user-authorization-datax-job:1.4.0-RELEASE
+            image: harbor.supwisdom.com/user-authorization-service/user-authorization-datax-job:1.5.0-RELEASE
             imagePullPolicy: Always
             envFrom:
             - configMapRef:
index 90d8627..c839deb 100644 (file)
@@ -38,7 +38,7 @@ spec:
       containers:
       - name: api-docs-installer
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/user-authorization-service/api-docs-installer:1.4.0-RELEASE
+        image: harbor.supwisdom.com/user-authorization-service/api-docs-installer:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index 8fe13ae..dcd8535 100644 (file)
@@ -28,7 +28,7 @@ spec:
       containers:
       - name: cas-server-installer
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/cas-server/cas-server-installer:1.4.0-RELEASE
+        image: harbor.supwisdom.com/cas-server/cas-server-installer:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index 4ba150a..400bdfe 100644 (file)
@@ -102,7 +102,7 @@ spec:
       containers:
       - name: cas-server-sa-api
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/cas-server/cas-server-sa-api:1.4.0-RELEASE
+        image: harbor.supwisdom.com/cas-server/cas-server-sa-api:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 38a0a80..d836c75 100644 (file)
@@ -65,7 +65,7 @@ spec:
       containers:
       - name: cas-server-security-engine
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/cas-server/cas-server-security-engine:1.4.0-RELEASE
+        image: harbor.supwisdom.com/cas-server/cas-server-security-engine:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 6060
index aee638a..35f41cd 100644 (file)
@@ -290,7 +290,7 @@ spec:
       containers:
       - name: cas-server-site-webapp
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/cas-server/cas-server-site-webapp:1.4.0-RELEASE
+        image: harbor.supwisdom.com/cas-server/cas-server-site-webapp:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 4ca985f..63849c1 100644 (file)
@@ -95,7 +95,7 @@ spec:
             memory: "256Mi"
       - name: cas-server-site-scheme-generator
         # 根据情况修改镜像地址
-        image: harbor.supwisdom.com/cas-server/cas-server-site-scheme:1.4.0-RELEASE
+        image: harbor.supwisdom.com/cas-server/cas-server-site-scheme:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index b390d9b..c7056e7 100644 (file)
@@ -42,7 +42,7 @@ spec:
           containers:
           - name: cas-server-datax-job
             # 若使用了学校搭设的私有仓库,请修改
-            image: harbor.supwisdom.com/cas-server/cas-server-datax-job:1.4.0-RELEASE
+            image: harbor.supwisdom.com/cas-server/cas-server-datax-job:1.5.0-RELEASE
             imagePullPolicy: Always
             envFrom:
             - configMapRef:
index ad0118a..bc0c910 100644 (file)
@@ -28,7 +28,7 @@ spec:
       containers:
       - name: token-server-installer
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/token-server/token-server-installer:1.4.0-RELEASE
+        image: harbor.supwisdom.com/token-server/token-server-installer:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index 89706ed..ce7615c 100644 (file)
@@ -225,7 +225,7 @@ spec:
       containers:
       - name: token-server
         # 若使用了学校搭设的私有仓库,请 **修改**
-        image: harbor.supwisdom.com/token-server/token-server:1.4.0-RELEASE
+        image: harbor.supwisdom.com/token-server/token-server:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 836af30..129e2ff 100644 (file)
@@ -38,7 +38,7 @@ spec:
       containers:
       - name: api-docs-installer
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/token-server/api-docs-installer:1.4.0-RELEASE
+        image: harbor.supwisdom.com/token-server/api-docs-installer:1.5.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
index 9f93bb9..aa24ace 100644 (file)
@@ -227,7 +227,7 @@ spec:
       containers:
       - name: personal-security-center-bff
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/personal-security-center/personal-security-bff:1.4.0-RELEASE
+        image: harbor.supwisdom.com/personal-security-center/personal-security-bff:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 32c52ba..f1fd455 100644 (file)
@@ -154,7 +154,7 @@ spec:
       containers:
       - name: personal-security-center-zuul
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/personal-security-center/personal-security-zuul:1.4.0-RELEASE
+        image: harbor.supwisdom.com/personal-security-center/personal-security-zuul:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index 671389a..a20b877 100644 (file)
@@ -64,7 +64,7 @@ spec:
       containers:
       - name: security-center-ui
         # 若使用了学校搭设的私有仓库,请修改
-        image: harbor.supwisdom.com/personal-security-center/security-center-ui:1.4.0-RELEASE
+        image: harbor.supwisdom.com/personal-security-center/security-center-ui:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 80
index fb8aa8b..fe104d3 100644 (file)
@@ -139,7 +139,7 @@ spec:
     spec:
       containers:
       - name: attest-server
-        image: harbor.supwisdom.com/attest-server/attest-server:1.4.0-RELEASE
+        image: harbor.supwisdom.com/attest-server/attest-server:1.5.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
index bfc032f..2f6b228 100644 (file)
@@ -27,7 +27,7 @@ spec:
       restartPolicy: Never
       containers:
         - name: authx-log-installer
-          image: harbor.supwisdom.com/authx-log/authx-log-installer:1.4.0-RELEASE
+          image: harbor.supwisdom.com/authx-log/authx-log-installer:1.5.0-RELEASE
           imagePullPolicy: Always
           envFrom:
             - configMapRef:
index 36bd04c..09ef7ed 100644 (file)
@@ -84,7 +84,7 @@ spec:
     spec:
       containers:
         - name: authx-log-sa
-          image: harbor.supwisdom.com/authx-log/authx-log-sa:1.4.0-RELEASE
+          image: harbor.supwisdom.com/authx-log/authx-log-sa:1.5.0-RELEASE
           imagePullPolicy: Always
           ports:
             - containerPort: 8080
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/99.init-installer/4.99.init-installer.yaml b/deploy-manifests/k8s-rancher/1.authx-service/99.init-installer/4.99.init-installer.yaml
new file mode 100644 (file)
index 0000000..b8b3950
--- /dev/null
@@ -0,0 +1,68 @@
+# 4.99.init-installer.yaml
+
+## 安装完 authx-service 和 admin-platform 后,再执行
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: authx-service
+  name: init-installer-env
+data:
+
+  ##
+  # 安全中心访问地址,域名
+  # **修改** 学校的根域名
+  PERSONAL_SECURITY_CENTER_DOMAIN: "authx-service.paas.<school>.edu.cn"
+  PERSONAL_SECURITY_CENTER_EXTERNAL_URL: "https://authx-service.paas.<school>.edu.cn"
+
+  ##
+  # 云平台访问地址
+  # **修改** 学校的根域名
+  ADMIN_PLATFORM_EXTERNAL_URL: "https://admin-platform.paas.<school>.edu.cn"
+
+  # 服务的sa接口地址
+  # **修改** k8s内部地址
+  CAS_SA_SERVER_URL: "http://cas-server-sa-api-svc.cas-server.svc.cluster.local:8080"
+  USER_DATA_SA_SERVER_URL: "http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080"
+  USER_AUTHZ_SA_SERVER_URL: "http://user-authorization-sa-svc.user-authorization-service.svc.cluster.local:8080"
+  ADMIN_CENTER_SA_SERVER_URL: "http://admin-center-sa-svc.admin-center.svc.cluster.local:8080"
+
+  # 路由接口地址
+  # **修改** k8s内部地址
+  USER_DATA_SERVICE_GOA_INTERNAL_URL: "http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080"
+  PERSONAL_SECURITY_CENTER_BFF_INTERNAL_URL: "http://personal-security-center-bff-svc.personal-security-center.svc.cluster.local:8080"
+  AUTHX_SERVICE_BFF_INTERNAL_URL: "http://authx-service-bff-svc.authx-service.svc.cluster.local:8080"
+
+
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  namespace: authx-service
+  name: init-installer
+spec:
+  completions: 1
+  parallelism: 1
+  template:
+    metadata:
+      labels:
+        app: init-installer
+    spec:
+      restartPolicy: Never
+      containers:
+      - name: init-installer
+        # 若使用了学校搭设的私有仓库,请修改
+        image: harbor.supwisdom.com/authx-service/authx-init-installer:1.5.0-RELEASE
+        imagePullPolicy: Always
+        envFrom:
+        - configMapRef:
+            name: init-installer-env
+        # resources:
+        #   requests:
+        #     memory: "256Mi"
+        #   limits:
+        #     memory: "256Mi"
+      imagePullSecrets:
+        - name: harbor-registry
+