Gitiles
Code Review Sign In
source.supwisdom.com / institute / deploy-authx-service / 31335287b37f198614e6288d0106de9f18e6e43e / . / project / nwpu / k8s-rancher / 1.authx-service / 5.token-server / 0.token-server-base.yaml
blob: 0353ee31596020e24274a1056a4767d1498cb02c [file] [log] [blame]
刘洪青a1bab152022-03-11 14:30:36 +0800[diff] [blame]1# 0.token-server-base.yaml
2
3####################################################
4# harbor private docker registry
5####################################################
6---
7apiVersion: v1
8kind: Secret
9type: kubernetes.io/dockerconfigjson
10metadata:
11 name: harbor-registry
12 namespace: token-server
13data:
14 # 修改harbor仓库配置，并使用 base64 工具进行编码
15 # {"auths":{"harbor.supwisdom.com":{"password":"PWMgP85qiLFC","username":"rancher.devops"}}}
16 .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQyIsInVzZXJuYW1lIjoicmFuY2hlci5kZXZvcHMifX19
17
18
19####################################################
20# redis-server
21####################################################
22---
23apiVersion: v1
24kind: Secret
25metadata:
26 labels:
27 app: redis
28 release: redis-server
29 name: redis-server
30 namespace: token-server
31type: Opaque
32data:
33 REDIS_PASSWORD: OEt1d29zbE9pdXc3SA==
34---
35apiVersion: v1
36kind: Service
37metadata:
38 labels:
39 app: redis
40 release: redis-server
41 name: redis-server
42 namespace: token-server
43spec:
44 ports:
45 - name: redis
46 port: 6379
47 protocol: TCP
48 targetPort: redis
49 selector:
50 app: redis
51 release: redis-server
52 role: master
53 type: ClusterIP
54---
55apiVersion: apps/v1
56kind: StatefulSet
57metadata:
58 labels:
59 app: redis
60 release: redis-server
61 name: redis-server
62 namespace: token-server
63spec:
64 podManagementPolicy: OrderedReady
65 replicas: 1
66 revisionHistoryLimit: 10
67 selector:
68 matchLabels:
69 app: redis
70 release: redis-server
71 role: master
72 serviceName: redis-master
73 template:
74 metadata:
75 labels:
76 app: redis
77 release: redis-server
78 role: master
79 spec:
80 containers:
81 - name: redis-server
82 env:
83 - name: REDIS_DISABLE_COMMANDS
84 value: FLUSHDB,FLUSHALL
85 - name: REDIS_REPLICATION_MODE
86 value: master
87 - name: REDIS_PASSWORD
88 valueFrom:
89 secretKeyRef:
90 name: redis-server
91 key: REDIS_PASSWORD
92 # 若使用了学校搭设的私有仓库，请修改
93 image: bitnami/redis:4.0
94 # 若使用了学校搭设的私有仓库，请修改 为 Always
95 imagePullPolicy: IfNotPresent
96 # imagePullPolicy: Always
97 livenessProbe:
98 exec:
99 command:
100 - redis-cli
101 - ping
102 failureThreshold: 5
103 initialDelaySeconds: 30
104 periodSeconds: 10
105 successThreshold: 1
106 timeoutSeconds: 5
107 ports:
108 - containerPort: 6379
109 name: redis
110 protocol: TCP
111 readinessProbe:
112 exec:
113 command:
114 - redis-cli
115 - ping
116 failureThreshold: 5
117 initialDelaySeconds: 5
118 periodSeconds: 10
119 successThreshold: 1
120 timeoutSeconds: 1
121 volumeMounts:
122 - mountPath: /bitnami/redis/data
123 name: redis-data
124 dnsPolicy: ClusterFirst
125 restartPolicy: Always
126 securityContext:
127 fsGroup: 0
128 # fsGroup: 1001
129 # runAsUser: 1001
130 # https://github.com/bitnami/bitnami-docker-redis/issues/106#issuecomment-388884372
131 runAsUser: 0
132 terminationGracePeriodSeconds: 30
133 volumes:
134 - emptyDir: {}
135 name: redis-data
136 # 若使用了学校搭设的私有仓库，请增加以下配置（取消注释即可）
137 # imagePullSecrets:
138 # - name: harbor-registry
139 updateStrategy:
140 rollingUpdate:
141 partition: 0
142 type: RollingUpdate
143