Initial render: k3s-dev environment
This commit is contained in:
gitea-admin
@@ -0,0 +1,364 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: expressit-bridge
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit-bridge
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-bridge-2.4.3-a
|
||||
name: expressit-bridge
|
||||
namespace: abinitio
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/instance: expressit-bridge
|
||||
app.kubernetes.io/name: expressit-bridge
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: expressit-bridge
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit-bridge
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-bridge-2.4.3-a
|
||||
name: expressit-bridge
|
||||
spec:
|
||||
containers:
|
||||
- args:
|
||||
- --ab-k8s-start-reporter
|
||||
- "true"
|
||||
- --ab-k8s-job-launch-script
|
||||
- /ab-setup/setup_pod.sh
|
||||
command:
|
||||
- ab-container-entrypoint.ksh
|
||||
env:
|
||||
- name: AB_AIR_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: AB_AIR_ROOT
|
||||
value: //eme-0.eme-headless/abinitio/eme/eme
|
||||
- name: AB_AIR_USER
|
||||
value: aiadmin
|
||||
- name: AB_ALLOW_FILE_LOCK_ON_REMOTE_FILE_SYSTEM
|
||||
value: "true"
|
||||
- name: AB_AUTHORIZATION_GATEWAY_URL
|
||||
value: http://authgateway:8080/authgateway
|
||||
- name: AB_BRIDGE_CONFIGURATION_DIR
|
||||
value: /abinitio/bridge
|
||||
- name: AB_BRIDGE_CONFIGURATION_NAME
|
||||
value: container-bridge
|
||||
- name: AB_CHARSET
|
||||
value: utf-8
|
||||
- name: AB_CONFIGURATION
|
||||
value: /config/pod/abinitiorc:/config/pod/apphubrc
|
||||
- name: AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY
|
||||
value: file=/secrets/bridge/password
|
||||
- name: AB_CONNECTION_BRIDGE_PORT
|
||||
value: "7070"
|
||||
- name: AB_CONNECTION_BRIDGE_RPC_ENCRYPTION_TYPE
|
||||
value: aes128-gcm
|
||||
- name: AB_CONNECTION_BRIDGE_SECURITY_CONFIGURATION
|
||||
value: container-bridge-security
|
||||
- name: AB_HOSTNAME_KEYSERVER_URLS
|
||||
value: abks://key-server:6151
|
||||
- name: AB_IPV4_ONLY
|
||||
value: "true"
|
||||
- name: AB_K8S_MAX_IDLE_SECONDS
|
||||
value: "0"
|
||||
- name: AB_K8S_START_BRIDGE
|
||||
value: background
|
||||
- name: AB_K8S_START_REPORTER
|
||||
value: "true"
|
||||
- name: AB_KEY_DAEMON_DIR
|
||||
value: /tmp/abkc/data
|
||||
- name: AB_MHUB_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: AB_MHUB_URL
|
||||
value: http://metadatahub:8080/metadatahub
|
||||
- name: AB_MHUB_USERNAME
|
||||
value: aiadmin
|
||||
- name: AB_MUX_ENABLE_AG_CREDENTIAL_MAPPING
|
||||
value: "false"
|
||||
- name: AB_OPS_CONSOLE_URL
|
||||
value: http://controlcenter:8080/controlcenter
|
||||
- name: AB_OPS_PHYSICAL_HOSTNAME
|
||||
value: expressit-bridge
|
||||
- name: AB_OPS_WSS_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/ocagent/password
|
||||
- name: AB_OPS_WSS_USERNAME
|
||||
value: ocagent
|
||||
- name: AB_PASSWORD_KEY_FILE
|
||||
value: /secrets/password_key_file/password
|
||||
- name: BRIDGE_AB_ENCRYPTED_KEY
|
||||
value: file=/secrets/bridge/password
|
||||
- name: CC_ADMIN_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: CC_ADMIN_USERNAME
|
||||
value: aiadmin
|
||||
- name: CMAP_MOUNT
|
||||
value: /config/pod
|
||||
- name: DEPLOY_NAME
|
||||
value: expressit-bridge
|
||||
- name: LOAD_PHYSOBJECTS
|
||||
value: "true"
|
||||
- name: NAMESPACE
|
||||
value: abinitio
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: POD_LABEL
|
||||
value: 'abinitio/product: expressit-bridge, abinitio/deployment: expressit-bridge'
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_SERVICE
|
||||
value: expressit-bridge
|
||||
- name: POD_SERVICE_HEADLESS
|
||||
value: expressit-bridge-headless
|
||||
image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/expressit-bridge:4.4.1.1-1
|
||||
imagePullPolicy: IfNotPresent
|
||||
name: expressit-bridge
|
||||
readinessProbe:
|
||||
exec:
|
||||
command:
|
||||
- stat
|
||||
- /tmp/.pod.ready
|
||||
failureThreshold: 240
|
||||
periodSeconds: 10
|
||||
resources:
|
||||
limits:
|
||||
ephemeral-storage: 8Gi
|
||||
memory: 8Gi
|
||||
requests:
|
||||
cpu: "1"
|
||||
ephemeral-storage: 8Gi
|
||||
memory: 4Gi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
volumeMounts:
|
||||
- mountPath: /config/pod
|
||||
name: pod-config
|
||||
- mountPath: /abinitio
|
||||
name: abinitio-local
|
||||
- mountPath: /secrets/aiadmin/password
|
||||
name: aiadmin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ocagent/password
|
||||
name: ocagent
|
||||
subPath: password
|
||||
- mountPath: /secrets/bridge/password
|
||||
name: bridge
|
||||
subPath: password
|
||||
- mountPath: /secrets/eme_join_user/password
|
||||
name: eme-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qi_join_user/password
|
||||
name: qi-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_utility_user/password
|
||||
name: dcs-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_utility_user/password
|
||||
name: mhub-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_db_importer/password
|
||||
name: ag-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/admin/password
|
||||
name: admin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_ui_importer/password
|
||||
name: ag-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/cafe_join_user/password
|
||||
name: cafe-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_join_user/password
|
||||
name: cc-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_join_user/password
|
||||
name: dcs-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ei_join_user/password
|
||||
name: ei-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_join_user/password
|
||||
name: mhub-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qiadmin_join_user/password
|
||||
name: qiadmin-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/sd_join_user/password
|
||||
name: sd-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/trw_join_user/password
|
||||
name: trw-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_db_importer/password
|
||||
name: mhub-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_ui_importer/password
|
||||
name: mhub-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_appserver/password
|
||||
name: ag-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_report/password
|
||||
name: ag-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_jdbc/password
|
||||
name: cc-jdbc
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_hmac_key/password
|
||||
name: dcs-hmac-key
|
||||
subPath: password
|
||||
- mountPath: /secrets/abinitio/password
|
||||
name: abinitio
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_appserver/password
|
||||
name: mhub-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_report/password
|
||||
name: mhub-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/runtime_locator_join_user/password
|
||||
name: runtime-locator-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/password_key_file/password
|
||||
name: password-key-file
|
||||
subPath: password
|
||||
- mountPath: /ab_share
|
||||
name: ab-share-data-and-appconf-root
|
||||
- mountPath: /tmp
|
||||
name: tmp-volume
|
||||
hostAliases:
|
||||
- hostnames:
|
||||
- expressit-bridge.abinitio
|
||||
ip: 127.0.0.1
|
||||
hostname: expressit-bridge
|
||||
initContainers: null
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
serviceAccountName: abinitio-sa
|
||||
terminationGracePeriodSeconds: 30
|
||||
volumes:
|
||||
- configMap:
|
||||
defaultMode: 511
|
||||
name: expressit-bridge
|
||||
name: pod-config
|
||||
- name: abinitio-local
|
||||
persistentVolumeClaim:
|
||||
claimName: expressit-bridge-claim
|
||||
- emptyDir: {}
|
||||
name: tmp-volume
|
||||
- name: aiadmin
|
||||
secret:
|
||||
secretName: aiadmin
|
||||
- name: ocagent
|
||||
secret:
|
||||
secretName: ocagent
|
||||
- name: bridge
|
||||
secret:
|
||||
secretName: bridge
|
||||
- name: eme-join-user
|
||||
secret:
|
||||
secretName: eme-join-user
|
||||
- name: qi-join-user
|
||||
secret:
|
||||
secretName: qi-join-user
|
||||
- name: dcs-utility-user
|
||||
secret:
|
||||
secretName: dcs-utility-user
|
||||
- name: mhub-utility-user
|
||||
secret:
|
||||
secretName: mhub-utility-user
|
||||
- name: ag-db-importer
|
||||
secret:
|
||||
secretName: ag-db-importer
|
||||
- name: admin
|
||||
secret:
|
||||
secretName: admin
|
||||
- name: ag-ui-importer
|
||||
secret:
|
||||
secretName: ag-ui-importer
|
||||
- name: cafe-join-user
|
||||
secret:
|
||||
secretName: cafe-join-user
|
||||
- name: cc-join-user
|
||||
secret:
|
||||
secretName: cc-join-user
|
||||
- name: dcs-join-user
|
||||
secret:
|
||||
secretName: dcs-join-user
|
||||
- name: ei-join-user
|
||||
secret:
|
||||
secretName: ei-join-user
|
||||
- name: mhub-join-user
|
||||
secret:
|
||||
secretName: mhub-join-user
|
||||
- name: qiadmin-join-user
|
||||
secret:
|
||||
secretName: qiadmin-join-user
|
||||
- name: sd-join-user
|
||||
secret:
|
||||
secretName: sd-join-user
|
||||
- name: trw-join-user
|
||||
secret:
|
||||
secretName: trw-join-user
|
||||
- name: mhub-db-importer
|
||||
secret:
|
||||
secretName: mhub-db-importer
|
||||
- name: mhub-ui-importer
|
||||
secret:
|
||||
secretName: mhub-ui-importer
|
||||
- name: ag-appserver
|
||||
secret:
|
||||
secretName: ag-appserver
|
||||
- name: ag-report
|
||||
secret:
|
||||
secretName: ag-report
|
||||
- name: cc-jdbc
|
||||
secret:
|
||||
secretName: cc-jdbc
|
||||
- name: dcs-hmac-key
|
||||
secret:
|
||||
secretName: dcs-hmac-key
|
||||
- name: abinitio
|
||||
secret:
|
||||
secretName: abinitio
|
||||
- name: mhub-appserver
|
||||
secret:
|
||||
secretName: mhub-appserver
|
||||
- name: mhub-report
|
||||
secret:
|
||||
secretName: mhub-report
|
||||
- name: runtime-locator-join-user
|
||||
secret:
|
||||
secretName: runtime-locator-join-user
|
||||
- name: password-key-file
|
||||
secret:
|
||||
secretName: password-key-file
|
||||
- name: ab-share-data-and-appconf-root
|
||||
persistentVolumeClaim:
|
||||
claimName: ab-shared-data-and-appconf-root-claim
|
||||
@@ -0,0 +1,312 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: expressit
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-2.4.3-a
|
||||
name: expressit
|
||||
namespace: abinitio
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/name: expressit
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: expressit
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-2.4.3-a
|
||||
name: expressit
|
||||
spec:
|
||||
containers:
|
||||
- env:
|
||||
- name: AB_CONFIG_PROVIDER_URL
|
||||
value: file://localhost/config
|
||||
- name: AB_IPV4_ONLY
|
||||
value: "true"
|
||||
- name: AB_PASSWORD_KEY_FILE
|
||||
value: /secrets/password_key_file/password
|
||||
- name: CATALINA_TMPDIR
|
||||
value: /tmp
|
||||
- name: DEPLOY_NAME
|
||||
value: expressit
|
||||
- name: JAVA_OPTS
|
||||
value: -XX:InitialRAMPercentage=50.0 -XX:MaxRAMPercentage=75.0
|
||||
- name: LOAD_PHYSOBJECTS
|
||||
value: "true"
|
||||
- name: NAMESPACE
|
||||
value: abinitio
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: POD_LABEL
|
||||
value: 'abinitio/product: expressit, abinitio/deployment: expressit'
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_SERVICE
|
||||
value: expressit
|
||||
image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/expressit:4.4.1.1-1
|
||||
imagePullPolicy: IfNotPresent
|
||||
lifecycle:
|
||||
preStop:
|
||||
exec:
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- ${CATALINA_HOME}/bin/catalina.sh stop
|
||||
livenessProbe:
|
||||
failureThreshold: 3
|
||||
httpGet:
|
||||
path: /expressit/api/abwebinternal/health/k8s/liveness
|
||||
port: 8080
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 30
|
||||
name: expressit-app
|
||||
readinessProbe:
|
||||
failureThreshold: 3
|
||||
httpGet:
|
||||
path: /expressit/api/abwebinternal/health/k8s/readiness
|
||||
port: 8080
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 30
|
||||
resources:
|
||||
limits:
|
||||
ephemeral-storage: 2Gi
|
||||
memory: 4Gi
|
||||
requests:
|
||||
cpu: 100m
|
||||
ephemeral-storage: 2Gi
|
||||
memory: 4Gi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
startupProbe:
|
||||
failureThreshold: 3
|
||||
httpGet:
|
||||
path: /expressit/api/abwebinternal/health/k8s/startup
|
||||
port: 8080
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
volumeMounts:
|
||||
- mountPath: /config/expressit
|
||||
name: app-external-config
|
||||
- mountPath: /abinitio
|
||||
name: abinitio-local
|
||||
- mountPath: /tmp
|
||||
name: tmp-volume
|
||||
- mountPath: /secrets/aiadmin/password
|
||||
name: aiadmin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ocagent/password
|
||||
name: ocagent
|
||||
subPath: password
|
||||
- mountPath: /secrets/bridge/password
|
||||
name: bridge
|
||||
subPath: password
|
||||
- mountPath: /secrets/eme_join_user/password
|
||||
name: eme-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qi_join_user/password
|
||||
name: qi-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_utility_user/password
|
||||
name: dcs-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_utility_user/password
|
||||
name: mhub-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_db_importer/password
|
||||
name: ag-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/admin/password
|
||||
name: admin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_ui_importer/password
|
||||
name: ag-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/cafe_join_user/password
|
||||
name: cafe-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_join_user/password
|
||||
name: cc-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_join_user/password
|
||||
name: dcs-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ei_join_user/password
|
||||
name: ei-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_join_user/password
|
||||
name: mhub-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qiadmin_join_user/password
|
||||
name: qiadmin-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/sd_join_user/password
|
||||
name: sd-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/trw_join_user/password
|
||||
name: trw-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_db_importer/password
|
||||
name: mhub-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_ui_importer/password
|
||||
name: mhub-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_appserver/password
|
||||
name: ag-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_report/password
|
||||
name: ag-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_jdbc/password
|
||||
name: cc-jdbc
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_hmac_key/password
|
||||
name: dcs-hmac-key
|
||||
subPath: password
|
||||
- mountPath: /secrets/abinitio/password
|
||||
name: abinitio
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_appserver/password
|
||||
name: mhub-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_report/password
|
||||
name: mhub-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/runtime_locator_join_user/password
|
||||
name: runtime-locator-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/password_key_file/password
|
||||
name: password-key-file
|
||||
subPath: password
|
||||
hostname: expressit
|
||||
initContainers: null
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
serviceAccountName: abinitio-sa
|
||||
terminationGracePeriodSeconds: 30
|
||||
volumes:
|
||||
- emptyDir: {}
|
||||
name: abinitio-local
|
||||
- configMap:
|
||||
defaultMode: 511
|
||||
name: expressit-external-config
|
||||
name: app-external-config
|
||||
- emptyDir: {}
|
||||
name: tmp-volume
|
||||
- name: aiadmin
|
||||
secret:
|
||||
secretName: aiadmin
|
||||
- name: ocagent
|
||||
secret:
|
||||
secretName: ocagent
|
||||
- name: bridge
|
||||
secret:
|
||||
secretName: bridge
|
||||
- name: eme-join-user
|
||||
secret:
|
||||
secretName: eme-join-user
|
||||
- name: qi-join-user
|
||||
secret:
|
||||
secretName: qi-join-user
|
||||
- name: dcs-utility-user
|
||||
secret:
|
||||
secretName: dcs-utility-user
|
||||
- name: mhub-utility-user
|
||||
secret:
|
||||
secretName: mhub-utility-user
|
||||
- name: ag-db-importer
|
||||
secret:
|
||||
secretName: ag-db-importer
|
||||
- name: admin
|
||||
secret:
|
||||
secretName: admin
|
||||
- name: ag-ui-importer
|
||||
secret:
|
||||
secretName: ag-ui-importer
|
||||
- name: cafe-join-user
|
||||
secret:
|
||||
secretName: cafe-join-user
|
||||
- name: cc-join-user
|
||||
secret:
|
||||
secretName: cc-join-user
|
||||
- name: dcs-join-user
|
||||
secret:
|
||||
secretName: dcs-join-user
|
||||
- name: ei-join-user
|
||||
secret:
|
||||
secretName: ei-join-user
|
||||
- name: mhub-join-user
|
||||
secret:
|
||||
secretName: mhub-join-user
|
||||
- name: qiadmin-join-user
|
||||
secret:
|
||||
secretName: qiadmin-join-user
|
||||
- name: sd-join-user
|
||||
secret:
|
||||
secretName: sd-join-user
|
||||
- name: trw-join-user
|
||||
secret:
|
||||
secretName: trw-join-user
|
||||
- name: mhub-db-importer
|
||||
secret:
|
||||
secretName: mhub-db-importer
|
||||
- name: mhub-ui-importer
|
||||
secret:
|
||||
secretName: mhub-ui-importer
|
||||
- name: ag-appserver
|
||||
secret:
|
||||
secretName: ag-appserver
|
||||
- name: ag-report
|
||||
secret:
|
||||
secretName: ag-report
|
||||
- name: cc-jdbc
|
||||
secret:
|
||||
secretName: cc-jdbc
|
||||
- name: dcs-hmac-key
|
||||
secret:
|
||||
secretName: dcs-hmac-key
|
||||
- name: abinitio
|
||||
secret:
|
||||
secretName: abinitio
|
||||
- name: mhub-appserver
|
||||
secret:
|
||||
secretName: mhub-appserver
|
||||
- name: mhub-report
|
||||
secret:
|
||||
secretName: mhub-report
|
||||
- name: runtime-locator-join-user
|
||||
secret:
|
||||
secretName: runtime-locator-join-user
|
||||
- name: password-key-file
|
||||
secret:
|
||||
secretName: password-key-file
|
||||
@@ -0,0 +1,48 @@
|
||||
apiVersion: v1
|
||||
data:
|
||||
abinitiorc: |
|
||||
AB_AIR_BRANCH @ expressit : main
|
||||
AB_AIR_ROOT : //eme-0.eme-headless/abinitio/eme/eme
|
||||
AB_AIR_ROOT @ expressit : //eme-0.eme-headless/abinitio/eme/eme
|
||||
AB_APPCONF_ROOT_DIR @ expressit : /ab_share/ab_appconf_root
|
||||
AB_BRE_ALLOW_STRINGY_AUTOMAP : true
|
||||
AB_BRE_ENABLE_MARKDOWN_COMMENTS : true
|
||||
AB_BRIDGE_WORKDIR @ container-bridge : /tmp/container-bridge-workdir
|
||||
AB_CHARSET : utf-8
|
||||
AB_CHARSET @ rwi : utf-8
|
||||
AB_CONNECTION @ emeabeme : bridge
|
||||
AB_CONNECTION @ rwi : bridge
|
||||
AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY @ emeabeme : file=/secrets/bridge/password
|
||||
AB_CONNECTION_BRIDGE_PORT @ emeabeme : 7070
|
||||
AB_CONNECTION_BRIDGE_RPC_ENCRYPTION_TYPE @ emeabeme : aes128-gcm
|
||||
AB_CONNECTION_BRIDGE_SECURITY_CONFIGURATION @ emeabeme : container-bridge-security
|
||||
AB_ENV_ROOT : /abinitio/sandboxes/sand/stdenv
|
||||
AB_HOME @ emeabeme : /usr/local/abinitio
|
||||
AB_HOSTNAME_KEYSERVER_URLS : abks://key-server:6151
|
||||
AB_NODES @ emeabeme : eme-0.eme-headless
|
||||
AB_OPS_CONSOLE_URL : http://controlcenter:8080/controlcenter
|
||||
AB_OPS_MONITOR : true
|
||||
AB_OPS_MONITOR_RESOURCES : false
|
||||
AB_OPS_PHYSICAL_HOSTNAME : expressit-bridge
|
||||
AB_PROC_DIR : /tmp
|
||||
AB_WORK_DIR : /abinitio/work
|
||||
apphubrc: |
|
||||
AB_AIR_BRANCH @ eme : main
|
||||
AB_AIR_ROOT @ eme : //eme-0.eme-headless/abinitio/eme/eme
|
||||
AB_BRIDGE_VOLATILE_DIR : /tmp/ab-bridge-volatile-dir
|
||||
AB_DESCRIPTION @ eme : Ab Initio Data Platform technical repository
|
||||
AB_DISPLAY_NAME @ eme : Default technical repository deployed in eme StatefulSet
|
||||
AB_EME_REPOSITORIES : eme
|
||||
AB_KEYSERVER_GROUP : AI-IC-AWS001a
|
||||
AB_KEYSERVER_URLS : abks://key-server:6150
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: expressit-bridge
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit-bridge
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-bridge-2.4.3-a
|
||||
name: expressit-bridge
|
||||
namespace: abinitio
|
||||
@@ -0,0 +1,57 @@
|
||||
apiVersion: v1
|
||||
data:
|
||||
expressit.yaml: |
|
||||
externalConfig:
|
||||
expressIt:
|
||||
allowDrillDown: true
|
||||
appIdentifier: expressit
|
||||
appserverType: tomcat
|
||||
authentication:
|
||||
type: ag
|
||||
authorization:
|
||||
type: ag
|
||||
authorizationGateway:
|
||||
password: file=/secrets/ei_join_user/password
|
||||
productIdentifier: Express>It
|
||||
productName: Express>It
|
||||
url: http://authgateway:8080/authgateway
|
||||
username: ei_join_user
|
||||
bridgeConnection:
|
||||
encryptionType: aes128-gcm
|
||||
rpcSecret: file=/secrets/bridge/password
|
||||
securityConfig: container-bridge-security
|
||||
url: http://expressit-bridge:7070
|
||||
cluster:
|
||||
autoConfig:
|
||||
hosts: expressit-jgroup
|
||||
port: 7800
|
||||
protocol: tcp
|
||||
channelName: ch01
|
||||
enabled: true
|
||||
emeTR:
|
||||
useAgCredentials: true
|
||||
interop:
|
||||
dataCatalogServices:
|
||||
url: http://datacatalog:8080/datacatalog
|
||||
metadataHub:
|
||||
url: http://metadatahub:8080/metadatahub
|
||||
logging:
|
||||
directoryPath: /abinitio/webapp/logs
|
||||
maxBackups: 3
|
||||
packageForSupport:
|
||||
encrypted: EncryptForNonAdmins
|
||||
urlFromBrowser: https://aidp.k3s.sg.ic.cloudguild.gcp.abinitio.com/expressit
|
||||
websockets:
|
||||
forceDisable: false
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: expressit
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-2.4.3-a
|
||||
name: expressit-external-config
|
||||
namespace: abinitio
|
||||
@@ -0,0 +1,18 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: expressit-bridge
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit-bridge
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-bridge-2.4.3-a
|
||||
name: expressit-bridge-claim
|
||||
namespace: abinitio
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
@@ -0,0 +1,23 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: expressit-bridge
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit-bridge
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-bridge-2.4.3-a
|
||||
name: expressit-bridge
|
||||
namespace: abinitio
|
||||
spec:
|
||||
ports:
|
||||
- name: bridge
|
||||
port: 7070
|
||||
protocol: TCP
|
||||
targetPort: 7070
|
||||
publishNotReadyAddresses: false
|
||||
selector:
|
||||
app.kubernetes.io/instance: expressit-bridge
|
||||
app.kubernetes.io/name: expressit-bridge
|
||||
type: ClusterIP
|
||||
@@ -0,0 +1,25 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: expressit
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-2.4.3-a
|
||||
name: expressit-jgroup
|
||||
namespace: abinitio
|
||||
spec:
|
||||
clusterIP: None
|
||||
ports:
|
||||
- name: jgroup-channel
|
||||
port: 7800
|
||||
protocol: TCP
|
||||
targetPort: 7800
|
||||
publishNotReadyAddresses: true
|
||||
selector:
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/name: expressit
|
||||
type: ClusterIP
|
||||
@@ -0,0 +1,27 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: expressit
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: expressit
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: expressit-2.4.3-a
|
||||
name: expressit
|
||||
namespace: abinitio
|
||||
spec:
|
||||
ports:
|
||||
- name: http
|
||||
port: 8080
|
||||
protocol: TCP
|
||||
targetPort: 8080
|
||||
selector:
|
||||
app.kubernetes.io/instance: expressit
|
||||
app.kubernetes.io/name: expressit
|
||||
sessionAffinity: ClientIP
|
||||
sessionAffinityConfig:
|
||||
clientIP:
|
||||
timeoutSeconds: 86400
|
||||
type: ClusterIP
|
||||
Reference in New Issue
Block a user