Initial render: k3s-dev environment
This commit is contained in:
gitea-admin
@@ -0,0 +1,399 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadata-loader
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadata-loader
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadata-loader-2.4.3-a
|
||||
name: metadata-loader
|
||||
namespace: abinitio
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/instance: metadata-loader
|
||||
app.kubernetes.io/name: metadata-loader
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadata-loader
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadata-loader
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadata-loader-2.4.3-a
|
||||
name: metadata-loader
|
||||
spec:
|
||||
containers:
|
||||
- args:
|
||||
- --ab-k8s-job-launch-script
|
||||
- /ab-setup/setup_pod.sh
|
||||
command:
|
||||
- ab-container-entrypoint.ksh
|
||||
env:
|
||||
- name: AB_AIR_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: AB_AIR_ROOT
|
||||
value: //eme-0.eme-headless/abinitio/eme/eme
|
||||
- name: AB_AIR_USER
|
||||
value: aiadmin
|
||||
- name: AB_ALLOW_FILE_LOCK_ON_REMOTE_FILE_SYSTEM
|
||||
value: "true"
|
||||
- name: AB_AUTHORIZATION_GATEWAY_URL
|
||||
value: http://authgateway:8080/authgateway
|
||||
- name: AB_BRIDGE_CONFIGURATION_DIR
|
||||
value: /abinitio/bridge
|
||||
- name: AB_BRIDGE_CONFIGURATION_NAME
|
||||
value: container-bridge
|
||||
- name: AB_CHARSET
|
||||
value: utf-8
|
||||
- name: AB_CONFIGURATION
|
||||
value: /config/pod/abinitiorc:/config/pod/apphubrc
|
||||
- name: AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY
|
||||
value: file=/secrets/bridge/password
|
||||
- name: AB_CONNECTION_BRIDGE_PORT
|
||||
value: "7070"
|
||||
- name: AB_CONNECTION_BRIDGE_RPC_ENCRYPTION_TYPE
|
||||
value: aes128-gcm
|
||||
- name: AB_CONNECTION_BRIDGE_SECURITY_CONFIGURATION
|
||||
value: container-bridge-security
|
||||
- name: AB_HOSTNAME_KEYSERVER_URLS
|
||||
value: abks://key-server:6151
|
||||
- name: AB_IPV4_ONLY
|
||||
value: "true"
|
||||
- name: AB_K8S_MAX_IDLE_SECONDS
|
||||
value: "0"
|
||||
- name: AB_K8S_START_BRIDGE
|
||||
value: background
|
||||
- name: AB_K8S_START_REPORTER
|
||||
value: "true"
|
||||
- name: AB_KEY_DAEMON_DIR
|
||||
value: /tmp/abkc/data
|
||||
- name: AB_MHUB_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: AB_MHUB_URL
|
||||
value: http://metadatahub:8080/metadatahub
|
||||
- name: AB_MHUB_USERNAME
|
||||
value: aiadmin
|
||||
- name: AB_MUX_ENABLE_AG_CREDENTIAL_MAPPING
|
||||
value: "false"
|
||||
- name: AB_OPS_CONSOLE_URL
|
||||
value: http://controlcenter:8080/controlcenter
|
||||
- name: AB_OPS_WSS_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/ocagent/password
|
||||
- name: AB_OPS_WSS_USERNAME
|
||||
value: ocagent
|
||||
- name: AB_PASSWORD_KEY_FILE
|
||||
value: /secrets/password_key_file/password
|
||||
- name: AIC_EXTENSIONS
|
||||
value: <nil>
|
||||
- name: BRIDGE_AB_ENCRYPTED_KEY
|
||||
value: file=/secrets/bridge/password
|
||||
- name: CC_ADMIN_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: CC_ADMIN_USERNAME
|
||||
value: aiadmin
|
||||
- name: CMAP_MOUNT
|
||||
value: /config/pod
|
||||
- name: DEPLOY_NAME
|
||||
value: metadata-loader
|
||||
- name: JAVA_OPTS
|
||||
value: -XX:InitialRAMPercentage=50.0 -XX:MaxRAMPercentage=75.0
|
||||
- name: LOAD_PHYSOBJECTS
|
||||
value: "true"
|
||||
- name: NAMESPACE
|
||||
value: abinitio
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: POD_LABEL
|
||||
value: 'abinitio/product: metadata-loader, abinitio/deployment: metadata-loader'
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_SERVICE
|
||||
value: metadata-loader
|
||||
- name: POD_SERVICE_HEADLESS
|
||||
value: metadata-loader-headless
|
||||
- name: WAIT_FOR_PRODUCTS
|
||||
value: promotion,sd,physobjects,dqa,edm,blueprints
|
||||
image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/metadata-loader:4.4.1.1-1
|
||||
imagePullPolicy: IfNotPresent
|
||||
livenessProbe:
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 20
|
||||
tcpSocket:
|
||||
port: 7070
|
||||
name: metadata-loader
|
||||
readinessProbe:
|
||||
exec:
|
||||
command:
|
||||
- stat
|
||||
- /abinitio/.accepting_files.state
|
||||
failureThreshold: 30
|
||||
periodSeconds: 30
|
||||
resources:
|
||||
limits:
|
||||
ephemeral-storage: 2Gi
|
||||
memory: 8Gi
|
||||
requests:
|
||||
cpu: 500m
|
||||
ephemeral-storage: 2Gi
|
||||
memory: 4Gi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
volumeMounts:
|
||||
- mountPath: /config/pod
|
||||
name: pod-config
|
||||
- mountPath: /abinitio
|
||||
name: abinitio-local
|
||||
- mountPath: /secrets/aiadmin/password
|
||||
name: aiadmin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ocagent/password
|
||||
name: ocagent
|
||||
subPath: password
|
||||
- mountPath: /secrets/bridge/password
|
||||
name: bridge
|
||||
subPath: password
|
||||
- mountPath: /secrets/eme_join_user/password
|
||||
name: eme-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qi_join_user/password
|
||||
name: qi-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_utility_user/password
|
||||
name: dcs-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_utility_user/password
|
||||
name: mhub-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_db_importer/password
|
||||
name: ag-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/admin/password
|
||||
name: admin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_ui_importer/password
|
||||
name: ag-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/cafe_join_user/password
|
||||
name: cafe-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_join_user/password
|
||||
name: cc-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_join_user/password
|
||||
name: dcs-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ei_join_user/password
|
||||
name: ei-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_join_user/password
|
||||
name: mhub-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qiadmin_join_user/password
|
||||
name: qiadmin-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/sd_join_user/password
|
||||
name: sd-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/trw_join_user/password
|
||||
name: trw-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_db_importer/password
|
||||
name: mhub-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_ui_importer/password
|
||||
name: mhub-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_appserver/password
|
||||
name: ag-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_report/password
|
||||
name: ag-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_jdbc/password
|
||||
name: cc-jdbc
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_hmac_key/password
|
||||
name: dcs-hmac-key
|
||||
subPath: password
|
||||
- mountPath: /secrets/abinitio/password
|
||||
name: abinitio
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_appserver/password
|
||||
name: mhub-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_report/password
|
||||
name: mhub-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/runtime_locator_join_user/password
|
||||
name: runtime-locator-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/password_key_file/password
|
||||
name: password-key-file
|
||||
subPath: password
|
||||
- mountPath: /ab_share
|
||||
name: ab-share-data-and-appconf-root
|
||||
- mountPath: /tmp
|
||||
name: tmp-volume
|
||||
hostAliases:
|
||||
- hostnames:
|
||||
- metadata-loader.abinitio
|
||||
ip: 127.0.0.1
|
||||
hostname: metadata-loader
|
||||
initContainers:
|
||||
- args:
|
||||
- |
|
||||
set -e
|
||||
mkdir -p /abinitio/install && \
|
||||
for archive in /*.tar.gz; do \
|
||||
echo "Unpacking $archive..." && \
|
||||
tar -xvzf "$archive" -C /abinitio/install; \
|
||||
done && \
|
||||
chmod -R 755 /abinitio/install
|
||||
command:
|
||||
- sh
|
||||
- -c
|
||||
image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/metadata-loader-platform-init:4.4.1.1-1
|
||||
imagePullPolicy: IfNotPresent
|
||||
name: metadata-loader-platform-init
|
||||
resources:
|
||||
limits:
|
||||
ephemeral-storage: 2Gi
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 500m
|
||||
ephemeral-storage: 1Gi
|
||||
memory: 1Gi
|
||||
securityContext:
|
||||
runAsUser: 1000
|
||||
volumeMounts:
|
||||
- mountPath: /abinitio
|
||||
name: abinitio-local
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
serviceAccountName: abinitio-sa
|
||||
terminationGracePeriodSeconds: 30
|
||||
volumes:
|
||||
- configMap:
|
||||
defaultMode: 511
|
||||
name: metadata-loader
|
||||
name: pod-config
|
||||
- name: abinitio-local
|
||||
persistentVolumeClaim:
|
||||
claimName: metadata-loader-claim
|
||||
- emptyDir: {}
|
||||
name: tmp-volume
|
||||
- name: aiadmin
|
||||
secret:
|
||||
secretName: aiadmin
|
||||
- name: ocagent
|
||||
secret:
|
||||
secretName: ocagent
|
||||
- name: bridge
|
||||
secret:
|
||||
secretName: bridge
|
||||
- name: eme-join-user
|
||||
secret:
|
||||
secretName: eme-join-user
|
||||
- name: qi-join-user
|
||||
secret:
|
||||
secretName: qi-join-user
|
||||
- name: dcs-utility-user
|
||||
secret:
|
||||
secretName: dcs-utility-user
|
||||
- name: mhub-utility-user
|
||||
secret:
|
||||
secretName: mhub-utility-user
|
||||
- name: ag-db-importer
|
||||
secret:
|
||||
secretName: ag-db-importer
|
||||
- name: admin
|
||||
secret:
|
||||
secretName: admin
|
||||
- name: ag-ui-importer
|
||||
secret:
|
||||
secretName: ag-ui-importer
|
||||
- name: cafe-join-user
|
||||
secret:
|
||||
secretName: cafe-join-user
|
||||
- name: cc-join-user
|
||||
secret:
|
||||
secretName: cc-join-user
|
||||
- name: dcs-join-user
|
||||
secret:
|
||||
secretName: dcs-join-user
|
||||
- name: ei-join-user
|
||||
secret:
|
||||
secretName: ei-join-user
|
||||
- name: mhub-join-user
|
||||
secret:
|
||||
secretName: mhub-join-user
|
||||
- name: qiadmin-join-user
|
||||
secret:
|
||||
secretName: qiadmin-join-user
|
||||
- name: sd-join-user
|
||||
secret:
|
||||
secretName: sd-join-user
|
||||
- name: trw-join-user
|
||||
secret:
|
||||
secretName: trw-join-user
|
||||
- name: mhub-db-importer
|
||||
secret:
|
||||
secretName: mhub-db-importer
|
||||
- name: mhub-ui-importer
|
||||
secret:
|
||||
secretName: mhub-ui-importer
|
||||
- name: ag-appserver
|
||||
secret:
|
||||
secretName: ag-appserver
|
||||
- name: ag-report
|
||||
secret:
|
||||
secretName: ag-report
|
||||
- name: cc-jdbc
|
||||
secret:
|
||||
secretName: cc-jdbc
|
||||
- name: dcs-hmac-key
|
||||
secret:
|
||||
secretName: dcs-hmac-key
|
||||
- name: abinitio
|
||||
secret:
|
||||
secretName: abinitio
|
||||
- name: mhub-appserver
|
||||
secret:
|
||||
secretName: mhub-appserver
|
||||
- name: mhub-report
|
||||
secret:
|
||||
secretName: mhub-report
|
||||
- name: runtime-locator-join-user
|
||||
secret:
|
||||
secretName: runtime-locator-join-user
|
||||
- name: password-key-file
|
||||
secret:
|
||||
secretName: password-key-file
|
||||
- name: ab-share-data-and-appconf-root
|
||||
persistentVolumeClaim:
|
||||
claimName: ab-shared-data-and-appconf-root-claim
|
||||
@@ -0,0 +1,382 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadatahub-importer
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub-importer
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-importer-2.4.3-a
|
||||
name: metadatahub-importer
|
||||
namespace: abinitio
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/instance: metadatahub-importer
|
||||
app.kubernetes.io/name: metadatahub-importer
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadatahub-importer
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub-importer
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-importer-2.4.3-a
|
||||
name: metadatahub-importer
|
||||
spec:
|
||||
containers:
|
||||
- args:
|
||||
- --ab-k8s-start-reporter
|
||||
- "true"
|
||||
- --ab-k8s-job-launch-script
|
||||
- /ab-setup/setup_pod.sh
|
||||
command:
|
||||
- ab-container-entrypoint.ksh
|
||||
env:
|
||||
- name: AB_AIR_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: AB_AIR_ROOT
|
||||
value: //eme-0.eme-headless/abinitio/eme/eme
|
||||
- name: AB_AIR_USER
|
||||
value: aiadmin
|
||||
- name: AB_ALLOW_FILE_LOCK_ON_REMOTE_FILE_SYSTEM
|
||||
value: "true"
|
||||
- name: AB_AUTHORIZATION_GATEWAY_URL
|
||||
value: http://authgateway:8080/authgateway
|
||||
- name: AB_BRIDGE_CONFIGURATION_DIR
|
||||
value: /abinitio/bridge
|
||||
- name: AB_BRIDGE_CONFIGURATION_NAME
|
||||
value: container-bridge
|
||||
- name: AB_CHARSET
|
||||
value: utf-8
|
||||
- name: AB_CONFIGURATION
|
||||
value: /config/pod/abinitiorc:/config/pod/apphubrc
|
||||
- name: AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY
|
||||
value: file=/secrets/bridge/password
|
||||
- name: AB_CONNECTION_BRIDGE_PORT
|
||||
value: "7070"
|
||||
- name: AB_CONNECTION_BRIDGE_RPC_ENCRYPTION_TYPE
|
||||
value: aes128-gcm
|
||||
- name: AB_CONNECTION_BRIDGE_SECURITY_CONFIGURATION
|
||||
value: container-bridge-security
|
||||
- name: AB_HOSTNAME_KEYSERVER_URLS
|
||||
value: abks://key-server:6151
|
||||
- name: AB_IPV4_ONLY
|
||||
value: "true"
|
||||
- name: AB_K8S_MAX_IDLE_SECONDS
|
||||
value: "0"
|
||||
- name: AB_K8S_START_BRIDGE
|
||||
value: background
|
||||
- name: AB_K8S_START_REPORTER
|
||||
value: "true"
|
||||
- name: AB_KEY_DAEMON_DIR
|
||||
value: /tmp/abkc/data
|
||||
- name: AB_MHUB_EME_WAYS_PARALLEL
|
||||
value: "4"
|
||||
- name: AB_MHUB_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: AB_MHUB_USERNAME
|
||||
value: aiadmin
|
||||
- name: AB_MUX_ENABLE_AG_CREDENTIAL_MAPPING
|
||||
value: "false"
|
||||
- name: AB_OPS_CONSOLE_URL
|
||||
value: http://controlcenter:8080/controlcenter
|
||||
- name: AB_OPS_PHYSICAL_HOSTNAME
|
||||
value: metadatahub-importer
|
||||
- name: AB_OPS_WSS_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/ocagent/password
|
||||
- name: AB_OPS_WSS_USERNAME
|
||||
value: ocagent
|
||||
- name: AB_PASSWORD_KEY_FILE
|
||||
value: /secrets/password_key_file/password
|
||||
- name: AB_RWI_BRIDGE_CONNECTION_DESCRIPTION
|
||||
value: Ab Initio Bridge connection for Viewing Records with Data Quality
|
||||
Issues
|
||||
- name: AB_RWI_BRIDGE_CONNECTION_NAME
|
||||
value: dq-rwi-Bridge-Connection
|
||||
- name: AB_RWI_BRIDGE_CONNECTION_SECURITY_CONFIGURATION
|
||||
value: rwi-security-config
|
||||
- name: AB_RWI_BRIDGE_CONNECTION_SECURITY_TYPE_ID
|
||||
value: "2"
|
||||
- name: AB_RWI_BRIDGE_CONNECTION_URL
|
||||
value: http://rwi:7171
|
||||
- name: AB_RWI_BRIDGE_CONNECTION_USERNAME
|
||||
value: rwi-bridge-user
|
||||
- name: APP_FULL_URL
|
||||
value: ""
|
||||
- name: BRIDGE_AB_ENCRYPTED_KEY
|
||||
value: file=/secrets/bridge/password
|
||||
- name: CC_ADMIN_ENCRYPTED_PASSWORD
|
||||
value: file=/secrets/aiadmin/password
|
||||
- name: CC_ADMIN_USERNAME
|
||||
value: aiadmin
|
||||
- name: CMAP_MOUNT
|
||||
value: /config/pod
|
||||
- name: DEPLOY_NAME
|
||||
value: metadatahub-importer
|
||||
- name: JAVA_OPTS
|
||||
value: -XX:InitialRAMPercentage=50.0 -XX:MaxRAMPercentage=75.0
|
||||
- name: LOAD_PHYSOBJECTS
|
||||
value: "true"
|
||||
- name: NAMESPACE
|
||||
value: abinitio
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: POD_LABEL
|
||||
value: 'abinitio/product: metadatahub-importer, abinitio/deployment: metadatahub-importer'
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_SERVICE
|
||||
value: metadatahub-importer
|
||||
- name: POD_SERVICE_HEADLESS
|
||||
value: metadatahub-importer-headless
|
||||
image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/metadatahub-importer:4.4.1.1-1
|
||||
imagePullPolicy: IfNotPresent
|
||||
name: metadatahub-importer
|
||||
readinessProbe:
|
||||
exec:
|
||||
command:
|
||||
- stat
|
||||
- /tmp/.pod.ready
|
||||
failureThreshold: 240
|
||||
initialDelaySeconds: 45
|
||||
periodSeconds: 10
|
||||
resources:
|
||||
limits:
|
||||
ephemeral-storage: 8Gi
|
||||
memory: 12Gi
|
||||
requests:
|
||||
cpu: "1"
|
||||
ephemeral-storage: 8Gi
|
||||
memory: 12Gi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
volumeMounts:
|
||||
- mountPath: /config/pod
|
||||
name: pod-config
|
||||
- mountPath: /abinitio
|
||||
name: abinitio-local
|
||||
- mountPath: /secrets/aiadmin/password
|
||||
name: aiadmin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ocagent/password
|
||||
name: ocagent
|
||||
subPath: password
|
||||
- mountPath: /secrets/bridge/password
|
||||
name: bridge
|
||||
subPath: password
|
||||
- mountPath: /secrets/eme_join_user/password
|
||||
name: eme-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qi_join_user/password
|
||||
name: qi-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_utility_user/password
|
||||
name: dcs-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_utility_user/password
|
||||
name: mhub-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_db_importer/password
|
||||
name: ag-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/admin/password
|
||||
name: admin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_ui_importer/password
|
||||
name: ag-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/cafe_join_user/password
|
||||
name: cafe-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_join_user/password
|
||||
name: cc-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_join_user/password
|
||||
name: dcs-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ei_join_user/password
|
||||
name: ei-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_join_user/password
|
||||
name: mhub-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qiadmin_join_user/password
|
||||
name: qiadmin-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/sd_join_user/password
|
||||
name: sd-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/trw_join_user/password
|
||||
name: trw-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_db_importer/password
|
||||
name: mhub-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_ui_importer/password
|
||||
name: mhub-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_appserver/password
|
||||
name: ag-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_report/password
|
||||
name: ag-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_jdbc/password
|
||||
name: cc-jdbc
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_hmac_key/password
|
||||
name: dcs-hmac-key
|
||||
subPath: password
|
||||
- mountPath: /secrets/abinitio/password
|
||||
name: abinitio
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_appserver/password
|
||||
name: mhub-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_report/password
|
||||
name: mhub-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/runtime_locator_join_user/password
|
||||
name: runtime-locator-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/password_key_file/password
|
||||
name: password-key-file
|
||||
subPath: password
|
||||
- mountPath: /ab_share
|
||||
name: ab-share-data-and-appconf-root
|
||||
- mountPath: /tmp
|
||||
name: tmp-volume
|
||||
hostAliases:
|
||||
- hostnames:
|
||||
- metadatahub-importer.abinitio
|
||||
ip: 127.0.0.1
|
||||
hostname: metadatahub-importer
|
||||
initContainers: null
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
serviceAccountName: abinitio-sa
|
||||
terminationGracePeriodSeconds: 30
|
||||
volumes:
|
||||
- configMap:
|
||||
defaultMode: 511
|
||||
name: metadatahub-importer
|
||||
name: pod-config
|
||||
- name: abinitio-local
|
||||
persistentVolumeClaim:
|
||||
claimName: metadatahub-importer-claim
|
||||
- emptyDir: {}
|
||||
name: tmp-volume
|
||||
- name: aiadmin
|
||||
secret:
|
||||
secretName: aiadmin
|
||||
- name: ocagent
|
||||
secret:
|
||||
secretName: ocagent
|
||||
- name: bridge
|
||||
secret:
|
||||
secretName: bridge
|
||||
- name: eme-join-user
|
||||
secret:
|
||||
secretName: eme-join-user
|
||||
- name: qi-join-user
|
||||
secret:
|
||||
secretName: qi-join-user
|
||||
- name: dcs-utility-user
|
||||
secret:
|
||||
secretName: dcs-utility-user
|
||||
- name: mhub-utility-user
|
||||
secret:
|
||||
secretName: mhub-utility-user
|
||||
- name: ag-db-importer
|
||||
secret:
|
||||
secretName: ag-db-importer
|
||||
- name: admin
|
||||
secret:
|
||||
secretName: admin
|
||||
- name: ag-ui-importer
|
||||
secret:
|
||||
secretName: ag-ui-importer
|
||||
- name: cafe-join-user
|
||||
secret:
|
||||
secretName: cafe-join-user
|
||||
- name: cc-join-user
|
||||
secret:
|
||||
secretName: cc-join-user
|
||||
- name: dcs-join-user
|
||||
secret:
|
||||
secretName: dcs-join-user
|
||||
- name: ei-join-user
|
||||
secret:
|
||||
secretName: ei-join-user
|
||||
- name: mhub-join-user
|
||||
secret:
|
||||
secretName: mhub-join-user
|
||||
- name: qiadmin-join-user
|
||||
secret:
|
||||
secretName: qiadmin-join-user
|
||||
- name: sd-join-user
|
||||
secret:
|
||||
secretName: sd-join-user
|
||||
- name: trw-join-user
|
||||
secret:
|
||||
secretName: trw-join-user
|
||||
- name: mhub-db-importer
|
||||
secret:
|
||||
secretName: mhub-db-importer
|
||||
- name: mhub-ui-importer
|
||||
secret:
|
||||
secretName: mhub-ui-importer
|
||||
- name: ag-appserver
|
||||
secret:
|
||||
secretName: ag-appserver
|
||||
- name: ag-report
|
||||
secret:
|
||||
secretName: ag-report
|
||||
- name: cc-jdbc
|
||||
secret:
|
||||
secretName: cc-jdbc
|
||||
- name: dcs-hmac-key
|
||||
secret:
|
||||
secretName: dcs-hmac-key
|
||||
- name: abinitio
|
||||
secret:
|
||||
secretName: abinitio
|
||||
- name: mhub-appserver
|
||||
secret:
|
||||
secretName: mhub-appserver
|
||||
- name: mhub-report
|
||||
secret:
|
||||
secretName: mhub-report
|
||||
- name: runtime-locator-join-user
|
||||
secret:
|
||||
secretName: runtime-locator-join-user
|
||||
- name: password-key-file
|
||||
secret:
|
||||
secretName: password-key-file
|
||||
- name: ab-share-data-and-appconf-root
|
||||
persistentVolumeClaim:
|
||||
claimName: ab-shared-data-and-appconf-root-claim
|
||||
@@ -0,0 +1,315 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: metadatahub
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-2.4.3-a
|
||||
name: metadatahub
|
||||
namespace: abinitio
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/name: metadatahub
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: metadatahub
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-2.4.3-a
|
||||
name: metadatahub
|
||||
spec:
|
||||
containers:
|
||||
- env:
|
||||
- name: AB_CONFIG_PROVIDER_URL
|
||||
value: file://localhost/config
|
||||
- name: AB_IPV4_ONLY
|
||||
value: "true"
|
||||
- name: AB_PASSWORD_KEY_FILE
|
||||
value: /secrets/password_key_file/password
|
||||
- name: CATALINA_TMPDIR
|
||||
value: /tmp
|
||||
- name: DEPLOY_NAME
|
||||
value: metadatahub
|
||||
- name: JAVA_OPTS
|
||||
value: -XX:InitialRAMPercentage=50.0 -XX:MaxRAMPercentage=75.0
|
||||
- name: LOAD_PHYSOBJECTS
|
||||
value: "true"
|
||||
- name: NAMESPACE
|
||||
value: abinitio
|
||||
- name: POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.podIP
|
||||
- name: POD_LABEL
|
||||
value: 'abinitio/product: metadatahub, abinitio/deployment: metadatahub'
|
||||
- name: POD_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: metadata.name
|
||||
- name: POD_SERVICE
|
||||
value: metadatahub
|
||||
image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/metadatahub:4.4.1.1-1
|
||||
imagePullPolicy: IfNotPresent
|
||||
lifecycle:
|
||||
preStop:
|
||||
exec:
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- ${CATALINA_HOME}/bin/catalina.sh stop
|
||||
livenessProbe:
|
||||
failureThreshold: 3
|
||||
httpGet:
|
||||
path: /metadatahub/api/abwebinternal/health/k8s/liveness
|
||||
port: 8080
|
||||
initialDelaySeconds: 5
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 5
|
||||
name: metadatahub-app
|
||||
readinessProbe:
|
||||
failureThreshold: 3
|
||||
httpGet:
|
||||
path: /metadatahub/api/abwebinternal/health/k8s/readiness
|
||||
port: 8080
|
||||
initialDelaySeconds: 10
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 5
|
||||
resources:
|
||||
limits:
|
||||
ephemeral-storage: 2Gi
|
||||
memory: 24Gi
|
||||
requests:
|
||||
cpu: "2"
|
||||
ephemeral-storage: 2Gi
|
||||
memory: 16Gi
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
startupProbe:
|
||||
failureThreshold: 60
|
||||
httpGet:
|
||||
path: /metadatahub/api/abwebinternal/health/k8s/startup
|
||||
port: 8080
|
||||
initialDelaySeconds: 30
|
||||
periodSeconds: 30
|
||||
timeoutSeconds: 5
|
||||
volumeMounts:
|
||||
- mountPath: /config/metadatahub
|
||||
name: app-external-config
|
||||
- mountPath: /abinitio
|
||||
name: abinitio-local
|
||||
- mountPath: /tmp
|
||||
name: tmp-volume
|
||||
- mountPath: /secrets/aiadmin/password
|
||||
name: aiadmin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ocagent/password
|
||||
name: ocagent
|
||||
subPath: password
|
||||
- mountPath: /secrets/bridge/password
|
||||
name: bridge
|
||||
subPath: password
|
||||
- mountPath: /secrets/eme_join_user/password
|
||||
name: eme-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qi_join_user/password
|
||||
name: qi-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_utility_user/password
|
||||
name: dcs-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_utility_user/password
|
||||
name: mhub-utility-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_db_importer/password
|
||||
name: ag-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/admin/password
|
||||
name: admin
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_ui_importer/password
|
||||
name: ag-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/cafe_join_user/password
|
||||
name: cafe-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_join_user/password
|
||||
name: cc-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_join_user/password
|
||||
name: dcs-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/ei_join_user/password
|
||||
name: ei-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_join_user/password
|
||||
name: mhub-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/qiadmin_join_user/password
|
||||
name: qiadmin-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/sd_join_user/password
|
||||
name: sd-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/trw_join_user/password
|
||||
name: trw-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_db_importer/password
|
||||
name: mhub-db-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_ui_importer/password
|
||||
name: mhub-ui-importer
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_appserver/password
|
||||
name: ag-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/ag_report/password
|
||||
name: ag-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/cc_jdbc/password
|
||||
name: cc-jdbc
|
||||
subPath: password
|
||||
- mountPath: /secrets/dcs_hmac_key/password
|
||||
name: dcs-hmac-key
|
||||
subPath: password
|
||||
- mountPath: /secrets/abinitio/password
|
||||
name: abinitio
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_appserver/password
|
||||
name: mhub-appserver
|
||||
subPath: password
|
||||
- mountPath: /secrets/mhub_report/password
|
||||
name: mhub-report
|
||||
subPath: password
|
||||
- mountPath: /secrets/runtime_locator_join_user/password
|
||||
name: runtime-locator-join-user
|
||||
subPath: password
|
||||
- mountPath: /secrets/password_key_file/password
|
||||
name: password-key-file
|
||||
subPath: password
|
||||
hostname: metadatahub
|
||||
initContainers: null
|
||||
securityContext:
|
||||
fsGroup: 1000
|
||||
fsGroupChangePolicy: OnRootMismatch
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
serviceAccountName: abinitio-sa
|
||||
terminationGracePeriodSeconds: 30
|
||||
volumes:
|
||||
- emptyDir: {}
|
||||
name: abinitio-local
|
||||
- configMap:
|
||||
defaultMode: 511
|
||||
name: metadatahub-external-config
|
||||
name: app-external-config
|
||||
- emptyDir: {}
|
||||
name: tmp-volume
|
||||
- name: aiadmin
|
||||
secret:
|
||||
secretName: aiadmin
|
||||
- name: ocagent
|
||||
secret:
|
||||
secretName: ocagent
|
||||
- name: bridge
|
||||
secret:
|
||||
secretName: bridge
|
||||
- name: eme-join-user
|
||||
secret:
|
||||
secretName: eme-join-user
|
||||
- name: qi-join-user
|
||||
secret:
|
||||
secretName: qi-join-user
|
||||
- name: dcs-utility-user
|
||||
secret:
|
||||
secretName: dcs-utility-user
|
||||
- name: mhub-utility-user
|
||||
secret:
|
||||
secretName: mhub-utility-user
|
||||
- name: ag-db-importer
|
||||
secret:
|
||||
secretName: ag-db-importer
|
||||
- name: admin
|
||||
secret:
|
||||
secretName: admin
|
||||
- name: ag-ui-importer
|
||||
secret:
|
||||
secretName: ag-ui-importer
|
||||
- name: cafe-join-user
|
||||
secret:
|
||||
secretName: cafe-join-user
|
||||
- name: cc-join-user
|
||||
secret:
|
||||
secretName: cc-join-user
|
||||
- name: dcs-join-user
|
||||
secret:
|
||||
secretName: dcs-join-user
|
||||
- name: ei-join-user
|
||||
secret:
|
||||
secretName: ei-join-user
|
||||
- name: mhub-join-user
|
||||
secret:
|
||||
secretName: mhub-join-user
|
||||
- name: qiadmin-join-user
|
||||
secret:
|
||||
secretName: qiadmin-join-user
|
||||
- name: sd-join-user
|
||||
secret:
|
||||
secretName: sd-join-user
|
||||
- name: trw-join-user
|
||||
secret:
|
||||
secretName: trw-join-user
|
||||
- name: mhub-db-importer
|
||||
secret:
|
||||
secretName: mhub-db-importer
|
||||
- name: mhub-ui-importer
|
||||
secret:
|
||||
secretName: mhub-ui-importer
|
||||
- name: ag-appserver
|
||||
secret:
|
||||
secretName: ag-appserver
|
||||
- name: ag-report
|
||||
secret:
|
||||
secretName: ag-report
|
||||
- name: cc-jdbc
|
||||
secret:
|
||||
secretName: cc-jdbc
|
||||
- name: dcs-hmac-key
|
||||
secret:
|
||||
secretName: dcs-hmac-key
|
||||
- name: abinitio
|
||||
secret:
|
||||
secretName: abinitio
|
||||
- name: mhub-appserver
|
||||
secret:
|
||||
secretName: mhub-appserver
|
||||
- name: mhub-report
|
||||
secret:
|
||||
secretName: mhub-report
|
||||
- name: runtime-locator-join-user
|
||||
secret:
|
||||
secretName: runtime-locator-join-user
|
||||
- name: password-key-file
|
||||
secret:
|
||||
secretName: password-key-file
|
||||
@@ -0,0 +1,34 @@
|
||||
apiVersion: v1
|
||||
data:
|
||||
abinitiorc: |
|
||||
AB_AIR_BRANCH @ expressit : main
|
||||
AB_AIR_ROOT : //eme-0.eme-headless/abinitio/eme/eme
|
||||
AB_AIR_ROOT @ expressit : //eme-0.eme-headless/abinitio/eme/eme
|
||||
AB_APPCONF_ROOT_DIR @ expressit : /ab_share/ab_appconf_root
|
||||
AB_BRIDGE_WORKDIR @ container-bridge : /tmp/container-bridge-workdir
|
||||
AB_CHARSET : utf-8
|
||||
AB_CONNECTION : bridge
|
||||
AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY : file=/secrets/bridge/password
|
||||
AB_HOSTNAME_KEYSERVER_URLS : abks://key-server:6151
|
||||
AB_MHUB_LOCAL_ROOT : /abinitio/deploy
|
||||
AB_OPS_CONSOLE_URL : http://controlcenter:8080/controlcenter
|
||||
AB_OPS_MONITOR : true
|
||||
AB_OPS_MONITOR_RESOURCES : false
|
||||
AB_OPS_PHYSICAL_HOSTNAME : metadata-loader
|
||||
AB_PROC_DIR : /tmp
|
||||
AB_WORK_DIR : /abinitio/work
|
||||
apphubrc: |
|
||||
AB_BRIDGE_VOLATILE_DIR : /tmp/ab-bridge-volatile-dir
|
||||
AB_KEYSERVER_GROUP : AI-IC-AWS001a
|
||||
AB_KEYSERVER_URLS : abks://key-server:6150
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadata-loader
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadata-loader
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadata-loader-2.4.3-a
|
||||
name: metadata-loader
|
||||
namespace: abinitio
|
||||
@@ -0,0 +1,155 @@
|
||||
apiVersion: v1
|
||||
data:
|
||||
default-resources.xml: |
|
||||
<?xml version='1.1' encoding='UTF-8'?>
|
||||
<config>
|
||||
<initial>
|
||||
<Entities>
|
||||
<Principal.Role>
|
||||
<Principal.Role>MDP Viewer Role</Principal.Role>
|
||||
<Description>View Metadata Promotion configuration and jobs.</Description>
|
||||
<IsProvisionable>Y</IsProvisionable>
|
||||
<Name>MDP Viewer Role</Name>
|
||||
</Principal.Role>
|
||||
<Principal.Role>
|
||||
<Principal.Role>MDP Operator Role</Principal.Role>
|
||||
<Description>Run and operate Metadata Promotion jobs.</Description>
|
||||
<IsProvisionable>Y</IsProvisionable>
|
||||
<Name>MDP Operator Role</Name>
|
||||
</Principal.Role>
|
||||
<Principal.Role>
|
||||
<Principal.Role>MDP Editor Role</Principal.Role>
|
||||
<Description>Edit Metadata Promotion configurations.</Description>
|
||||
<IsProvisionable>Y</IsProvisionable>
|
||||
<Name>MDP Editor Role</Name>
|
||||
<SynchronizationNumber />
|
||||
</Principal.Role>
|
||||
<Principal.Role>
|
||||
<Principal.Role>MDP Administrator Role</Principal.Role>
|
||||
<Description>Administrative role that can perform all Metadata Promotion activities.</Description>
|
||||
<IsProvisionable>Y</IsProvisionable>
|
||||
<Name>MDP Administrator Role</Name>
|
||||
</Principal.Role>
|
||||
<Principal.Role>
|
||||
<Principal.Role>DiscoveryAdministratorRole</Principal.Role>
|
||||
<Description>Administrative role that can access all of the Semantic Discovery views.</Description>
|
||||
<IsProvisionable>Y</IsProvisionable>
|
||||
<Name>Discovery Administrator Role</Name>
|
||||
</Principal.Role>
|
||||
<Principal.Role>
|
||||
<Principal.Role>DiscoveryOperatorRole</Principal.Role>
|
||||
<Description>Operations role that can request Semantic Discovery job execution.</Description>
|
||||
<IsProvisionable>Y</IsProvisionable>
|
||||
<Name>Discovery Operator Role</Name>
|
||||
</Principal.Role>
|
||||
</Entities>
|
||||
</initial>
|
||||
</config>
|
||||
mhub.yaml: |
|
||||
externalConfig:
|
||||
metadataHub:
|
||||
appserverType: tomcat
|
||||
authentication:
|
||||
type: ag
|
||||
authorization:
|
||||
type: ag
|
||||
authorizationGateway:
|
||||
password: file=/secrets/mhub_join_user/password
|
||||
productIdentifier: Metadata Hub
|
||||
productName: Metadata Hub
|
||||
url: http://authgateway:8080/authgateway
|
||||
username: mhub_join_user
|
||||
bridgeConnectionList:
|
||||
- encryptionType: aes128-gcm
|
||||
name: container-bridge
|
||||
rpcSecret: file=/secrets/bridge/password
|
||||
securityConfig: container-bridge-security
|
||||
url: http://metadatahub-importer:7070
|
||||
- encryptionType: aes128
|
||||
name: dq-rwi-Bridge-Connection
|
||||
rpcSecret: file=/secrets/bridge/password
|
||||
securityConfig: rwi-security-config
|
||||
url: http://rwi:7171
|
||||
db:
|
||||
appserver:
|
||||
password: file=/secrets/mhub_appserver/password
|
||||
username: mhub_appserver
|
||||
host: metadatahub-rw.abinitio-db.svc
|
||||
importer:
|
||||
password: file=/secrets/mhub_db_importer/password
|
||||
username: mhub_importer
|
||||
mainSchema:
|
||||
name: mhub_main
|
||||
metaSchema:
|
||||
name: mhub_meta
|
||||
name: metadatahub
|
||||
port: 5432
|
||||
report:
|
||||
password: file=/secrets/mhub_report/password
|
||||
username: mhub_report
|
||||
type: postgresql
|
||||
interop:
|
||||
aiCentral:
|
||||
url: http://aicentral:8080/aicentral
|
||||
dataCatalogServices:
|
||||
url: http://datacatalog:8080/datacatalog
|
||||
logging:
|
||||
directoryPath: /abinitio/webapp/logs
|
||||
maxBackups: 5
|
||||
packageForSupport:
|
||||
encrypted: EncryptForNonAdmins
|
||||
serverConfiguration:
|
||||
abinitioCustomServices:
|
||||
enabled: true
|
||||
url: http://cafe:8080/portal
|
||||
aiCentral:
|
||||
directProxy: {}
|
||||
enabled: false
|
||||
client:
|
||||
businessGlossary:
|
||||
technicalDataElemBizTermLink: viaBusinessDataElem
|
||||
techAssetDQ:
|
||||
mode: showControls
|
||||
cluster:
|
||||
autoConfig:
|
||||
hosts: metadatahub-jgroup
|
||||
port: 7800
|
||||
protocol: TCP
|
||||
enabled: true
|
||||
encryption:
|
||||
enabled: false
|
||||
dataCatalog:
|
||||
enabled: true
|
||||
usePhysicalObjectModel: true
|
||||
utility:
|
||||
password: file=/secrets/dcs_utility_user/password
|
||||
user: dcs_utility
|
||||
extensionSet:
|
||||
customerDefinedExtensionSetLexicographicSort: false
|
||||
mtbridge:
|
||||
dQRecordsWithIssuesBridgeConnection: dq-rwi-Bridge-Connection
|
||||
defaultBridgeConnection: container-bridge
|
||||
importHostServicesBridgeConnection: container-bridge
|
||||
search:
|
||||
index:
|
||||
thread:
|
||||
pool:
|
||||
bootstrapSize: 1
|
||||
size: 1
|
||||
indexDirectoryRoot: file:///abinitio/data/searchIndex
|
||||
urlFromBrowser: https://aidp.k3s.sg.ic.cloudguild.gcp.abinitio.com/metadatahub
|
||||
urlFromImporter: http://metadatahub:8080/metadatahub
|
||||
websockets:
|
||||
forceDisable: false
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: metadatahub
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-2.4.3-a
|
||||
name: metadatahub-external-config
|
||||
namespace: abinitio
|
||||
@@ -0,0 +1,80 @@
|
||||
apiVersion: v1
|
||||
data:
|
||||
abinitiorc: |
|
||||
AB_BRIDGE_WORKDIR @ container-bridge : /tmp/container-bridge-workdir
|
||||
AB_CHARSET : utf-8
|
||||
AB_CONNECTION : bridge
|
||||
AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY : file=/secrets/bridge/password
|
||||
AB_CONNECTION_BRIDGE_PORT : 7070
|
||||
AB_CONNECTION_BRIDGE_RPC_ENCRYPTION_TYPE : aes128-gcm
|
||||
AB_CONNECTION_BRIDGE_SECURITY_CONFIGURATION : container-bridge-security
|
||||
AB_HOME @ emeabeme : /usr/local/abinitio
|
||||
AB_HOSTNAME_KEYSERVER_URLS : abks://key-server:6151
|
||||
AB_MHUB_LOCAL_ROOT : /abinitio/deploy
|
||||
AB_NODES @ emeabeme : eme-0.eme-headless
|
||||
AB_OPS_CONSOLE_URL : http://controlcenter:8080/controlcenter
|
||||
AB_OPS_MONITOR : true
|
||||
AB_OPS_MONITOR_RESOURCES : false
|
||||
AB_OPS_PHYSICAL_HOSTNAME : metadatahub-importer
|
||||
AB_PROC_DIR : /tmp
|
||||
AB_WORK_DIR : /abinitio/work
|
||||
apphubrc: |
|
||||
AB_BRIDGE_VOLATILE_DIR : /tmp/ab-bridge-volatile-dir
|
||||
AB_KEYSERVER_GROUP : AI-IC-AWS001a
|
||||
AB_KEYSERVER_URLS : abks://key-server:6150
|
||||
deploy_params.config: |
|
||||
appserver.cluster.option: '3'
|
||||
appserver.host: 'metadatahub'
|
||||
appserver.port: '8080'
|
||||
appserver.protocol: 'http'
|
||||
appserver.type: 'tomcat'
|
||||
bridge.config: 'container-bridge'
|
||||
bridge.create.security.config: 'N'
|
||||
bridge.host: 'metadatahub-importer'
|
||||
bridge.port: '7070'
|
||||
bridge.rpc.aes128gcm.ab_encrypted_key: 'file=/secrets/bridge/password'
|
||||
bridge.rpc.aes128gcm.mhub_encrypted_key: 'file=/secrets/bridge/password'
|
||||
bridge.security_config: 'container-bridge-security'
|
||||
bridge.security_type: 'aes-128-gcm'
|
||||
db.appserver.mhub_encrypted_password: 'file=/secrets/mhub_appserver/password'
|
||||
db.appserver.username: 'mhub_appserver'
|
||||
db.create: 'Y'
|
||||
db.create_physical: 'N'
|
||||
db.datastore.destroy_if_exists: 'N'
|
||||
db.host: 'metadatahub-rw.abinitio-db.svc'
|
||||
db.importer.ab_encrypted_password: 'file=/secrets/mhub_db_importer/password'
|
||||
db.importer.mhub_encrypted_password: 'file=/secrets/mhub_db_importer/password'
|
||||
db.importer.username: 'mhub_importer'
|
||||
db.name: 'metadatahub'
|
||||
db.port: '5432'
|
||||
db.report.mhub_encrypted_password: 'file=/secrets/mhub_report/password'
|
||||
db.report.username: 'mhub_report'
|
||||
db.type: 'postgresql'
|
||||
deployment.name: 'metadatahub-importer'
|
||||
deployment.set_server_config: 'N'
|
||||
deployment.type_basic: 'N'
|
||||
lineage.server: 'N'
|
||||
lineageserver.url: ''
|
||||
security.encryption.keyDirectory: ''
|
||||
security.encryption.useExternalKey: 'N'
|
||||
ui.webaccess.admin.ab_encrypted_password: 'file=/secrets/admin/password'
|
||||
ui.webaccess.admin.password_hash_encrypted: 'file=/secrets/admin/password'
|
||||
ui.webaccess.importer.ab_encrypted_password: 'file=/secrets/mhub_ui_importer/password'
|
||||
ui.webaccess.importer.password_hash_encrypted: 'file=/secrets/mhub_ui_importer/password'
|
||||
webapp.app_name: 'metadatahub'
|
||||
webapp.cluster.hosts: 'metadatahub-jgroup'
|
||||
webapp.cluster.port: '7800'
|
||||
webapp.clustered.deployment: 'Y'
|
||||
webapp.deploy_warfile: 'N'
|
||||
webapp.indexDirectoryRoot: 'file:///abinitio/data/searchIndex'
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadatahub-importer
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub-importer
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-importer-2.4.3-a
|
||||
name: metadatahub-importer
|
||||
namespace: abinitio
|
||||
@@ -0,0 +1,18 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadata-loader
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadata-loader
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadata-loader-2.4.3-a
|
||||
name: metadata-loader-claim
|
||||
namespace: abinitio
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
@@ -0,0 +1,18 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadatahub-importer
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub-importer
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-importer-2.4.3-a
|
||||
name: metadatahub-importer-claim
|
||||
namespace: abinitio
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
@@ -0,0 +1,23 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadata-loader
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadata-loader
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadata-loader-2.4.3-a
|
||||
name: metadata-loader
|
||||
namespace: abinitio
|
||||
spec:
|
||||
ports:
|
||||
- name: bridge
|
||||
port: 7070
|
||||
protocol: TCP
|
||||
targetPort: 7070
|
||||
publishNotReadyAddresses: false
|
||||
selector:
|
||||
app.kubernetes.io/instance: metadata-loader
|
||||
app.kubernetes.io/name: metadata-loader
|
||||
type: ClusterIP
|
||||
@@ -0,0 +1,23 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/instance: metadatahub-importer
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub-importer
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-importer-2.4.3-a
|
||||
name: metadatahub-importer
|
||||
namespace: abinitio
|
||||
spec:
|
||||
ports:
|
||||
- name: bridge
|
||||
port: 7070
|
||||
protocol: TCP
|
||||
targetPort: 7070
|
||||
publishNotReadyAddresses: true
|
||||
selector:
|
||||
app.kubernetes.io/instance: metadatahub-importer
|
||||
app.kubernetes.io/name: metadatahub-importer
|
||||
type: ClusterIP
|
||||
@@ -0,0 +1,25 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: metadatahub
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-2.4.3-a
|
||||
name: metadatahub-jgroup
|
||||
namespace: abinitio
|
||||
spec:
|
||||
clusterIP: None
|
||||
ports:
|
||||
- name: jgroup-channel
|
||||
port: 7800
|
||||
protocol: TCP
|
||||
targetPort: 7800
|
||||
publishNotReadyAddresses: true
|
||||
selector:
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/name: metadatahub
|
||||
type: ClusterIP
|
||||
@@ -0,0 +1,27 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
abinitio/deployment: metadatahub
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/name: metadatahub
|
||||
app.kubernetes.io/part-of: AbInitio
|
||||
app.kubernetes.io/version: 4.4.1
|
||||
helm.sh/chart: metadatahub-2.4.3-a
|
||||
name: metadatahub
|
||||
namespace: abinitio
|
||||
spec:
|
||||
ports:
|
||||
- name: http
|
||||
port: 8080
|
||||
protocol: TCP
|
||||
targetPort: 8080
|
||||
selector:
|
||||
app.kubernetes.io/instance: metadatahub
|
||||
app.kubernetes.io/name: metadatahub
|
||||
sessionAffinity: ClientIP
|
||||
sessionAffinityConfig:
|
||||
clientIP:
|
||||
timeoutSeconds: 86400
|
||||
type: ClusterIP
|
||||
Reference in New Issue
Block a user