docs: 认证授权服务部署文档
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/0.jobs-server-base.yaml b/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/0.jobs-server-base.yaml
new file mode 100644
index 0000000..d3f82f8
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/0.jobs-server-base.yaml
@@ -0,0 +1,88 @@
+# jobs-server-base.yaml
+
+####################################################
+# harbor private docker registry
+####################################################
+---
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+ name: harbor-registry
+ namespace: jobs-server
+data:
+ # 修改harbor仓库配置,并使用 base64 工具进行编码
+ # {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
+ .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQyIsInVzZXJuYW1lIjoicmFuY2hlci5kZXZvcHMifX19
+
+
+####################################################
+# rabbitmq-server
+####################################################
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ labels:
+ app: rabbitmq
+ release: rabbitmq-server
+ name: rabbitmq-server
+ namespace: jobs-server
+type: Opaque
+data:
+ RABBITMQ_USERNAME: Z3Vlc3Q=
+ RABBITMQ_PASSWORD: Z3Vlc3Q=
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: rabbitmq-server
+ namespace: jobs-server
+ labels:
+ app: rabbitmq-server
+spec:
+ ports:
+ - port: 5672
+ targetPort: tcp-1
+ protocol: TCP
+ name: tcp-1
+ - port: 15672
+ targetPort: tcp-2
+ protocol: TCP
+ name: tcp-2
+ selector:
+ app: rabbitmq-server
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: rabbitmq-server
+ namespace: jobs-server
+spec:
+ selector:
+ matchLabels:
+ app: rabbitmq-server
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: rabbitmq-server
+ annotations:
+ sidecar.istio.io/inject: "false"
+ spec:
+ containers:
+ - name: rabbitmq-server
+ # 若使用了学校搭设的私有仓库,请修改
+ image: rabbitmq:management
+ # 若使用了学校搭设的私有仓库,请修改 为 Always
+ imagePullPolicy: IfNotPresent
+ # imagePullPolicy: Always
+ ports:
+ - containerPort: 5672
+ name: tcp-1
+ - containerPort: 15672
+ name: tcp-2
+ # 若使用了学校搭设的私有仓库,请增加以下配置(取消注释即可)
+ # imagePullSecrets:
+ # - name: harbor-registry
+
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/1.jobs-server-env.yaml b/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/1.jobs-server-env.yaml
new file mode 100644
index 0000000..7ac9df8
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/1.jobs-server-env.yaml
@@ -0,0 +1,23 @@
+# 1.jobs-server-env.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: jobs-server
+ name: jvm-env
+data:
+ MAX_RAM_PERCENTAGE: "75.0"
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ namespace: jobs-server
+ name: rabbitmq-env-secret
+type: Opaque
+data:
+ SPRING_RABBITMQ_HOST: cmFiYml0bXEtc2VydmVy
+ SPRING_RABBITMQ_PORT: NTY3Mg==
+ SPRING_RABBITMQ_USERNAME: Z3Vlc3Q=
+ SPRING_RABBITMQ_PASSWORD: Z3Vlc3Q=
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/4.1.jobs-server.yaml b/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/4.1.jobs-server.yaml
new file mode 100644
index 0000000..e9b40b2
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/1.authx-service/9.jobs-server/4.1.jobs-server.yaml
@@ -0,0 +1,137 @@
+# 4.1.jobs-server.yaml
+
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: jobs-server
+ name: jobs-server-env
+data:
+ LOGGING_LEVEL_COM_SUPWISDOM_INSITITUTE_JOBS_SERVER: INFO
+
+
+---
+# 组织机构数据,定时触发 OrganizationTrans2UserSvcJob
+# 适用于由交换同步到转换表的场景
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: jobs-server
+ name: jobs-server-organizationtriggertransjob-env
+data:
+ ORGANIZATIONTRIGGERTRANSJOB_ENABLED: "false"
+ # cron 和 fixedDelay 只能 二选一,配置一个即可
+ # 0 0 2 * * *
+ ORGANIZATIONTRIGGERTRANSJOB_SCHEDULED_CRON: ""
+ # 120 秒
+ ORGANIZATIONTRIGGERTRANSJOB_SCHEDULED_FIXED_DELAY: "1200000"
+ ORGANIZATIONTRIGGERTRANSJOB_WRITER_DATASOURCE_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user?serverTimezone=Asia/Shanghai"
+ ORGANIZATIONTRIGGERTRANSJOB_WRITER_DATASOURCE_USERNAME: "user"
+ # 修改为实际的数据库密码
+ ORGANIZATIONTRIGGERTRANSJOB_WRITER_DATASOURCE_PASSWORD: "kingstar"
+
+
+---
+# 组织机构数据,临时表 - 正式
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: jobs-server
+ name: jobs-server-organizationtrans2usersvcjob-env
+data:
+ ORGANIZATIONTRANS2USERSVCJOB_ENABLED: "false"
+ ORGANIZATIONTRANS2USERSVCJOB_PAGE_SIZE: "1000"
+ ORGANIZATIONTRANS2USERSVCJOB_READER_DATASOURCE_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user?serverTimezone=Asia/Shanghai"
+ ORGANIZATIONTRANS2USERSVCJOB_READER_DATASOURCE_USERNAME: "user"
+ # 修改为实际的数据库密码
+ ORGANIZATIONTRANS2USERSVCJOB_READER_DATASOURCE_PASSWORD: "kingstar"
+
+ ORGANIZATIONTRANS2USERSVCJOB_WRITE_USER_DATA_SERVICE_SERVER_URL: http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080
+
+
+---
+# 帐号数据,定时触发 AccountTrans2UserSvcJob
+# 适用于由交换同步到转换表的场景
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: jobs-server
+ name: jobs-server-accounttriggertransjob-env
+data:
+ ACCOUNTTRIGGERTRANSJOB_ENABLED: "false"
+ # cron 和 fixedDelay 只能 二选一,配置一个即可
+ # 0 0 2 * * *
+ ACCOUNTTRIGGERTRANSJOB_SCHEDULED_CRON: ""
+ # 120 秒
+ ACCOUNTTRIGGERTRANSJOB_SCHEDULED_FIXED_DELAY: "1200000"
+ ACCOUNTTRIGGERTRANSJOB_WRITER_DATASOURCE_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user?serverTimezone=Asia/Shanghai"
+ ACCOUNTTRIGGERTRANSJOB_WRITER_DATASOURCE_USERNAME: "user"
+ # 修改为实际的数据库密码
+ ACCOUNTTRIGGERTRANSJOB_WRITER_DATASOURCE_PASSWORD: "kingstar"
+
+
+---
+# 帐号数据,临时表 - 正式
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: jobs-server
+ name: jobs-server-accounttrans2usersvcjob-env
+data:
+ ACCOUNTTRANS2USERSVCJOB_ENABLED: "false"
+ ACCOUNTTRANS2USERSVCJOB_PAGE_SIZE: "1000"
+ ACCOUNTTRANS2USERSVCJOB_READER_DATASOURCE_JDBC_URL: "jdbc:mysql://mysql-server.authx-service.svc.cluster.local:3306/user?serverTimezone=Asia/Shanghai"
+ ACCOUNTTRANS2USERSVCJOB_READER_DATASOURCE_USERNAME: "user"
+ # 修改为实际的数据库密码
+ ACCOUNTTRANS2USERSVCJOB_READER_DATASOURCE_PASSWORD: "kingstar"
+
+ ACCOUNTTRANS2USERSVCJOB_WRITE_USER_DATA_SERVICE_SERVER_URL: http://user-data-service-goa-svc.user-data-service.svc.cluster.local:8080
+
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ namespace: jobs-server
+ name: jobs-server
+spec:
+ selector:
+ matchLabels:
+ app: jobs-server
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: jobs-server
+ spec:
+ containers:
+ - name: jobs-server
+ # 若使用了学校搭设的私有仓库,请修改
+ image: harbor.supwisdom.com/jobs-server/jobs-server:1.0.0-SNAPSHOT
+ imagePullPolicy: Always
+ ports:
+ - containerPort: 6060
+ name: http-metrics
+ envFrom:
+ - configMapRef:
+ name: jvm-env
+ - secretRef:
+ name: rabbitmq-env-secret
+ - configMapRef:
+ name: jobs-server-env
+ - configMapRef:
+ name: jobs-server-organizationtriggertransjob-env
+ - configMapRef:
+ name: jobs-server-organizationtrans2usersvcjob-env
+ - configMapRef:
+ name: jobs-server-accounttriggertransjob-env
+ - configMapRef:
+ name: jobs-server-accounttrans2usersvcjob-env
+ resources:
+ requests:
+ memory: "1000Mi"
+ limits:
+ memory: "1000Mi"
+ imagePullSecrets:
+ - name: harbor-registry
+