feat(ql3): establish 3.0 incubation baseline

2026-09-23 03:18:09 +08:00 · 2026-08-12 00:25:26 +08:00
parent 4bf92dcfeb
commit c699c32461
2817 changed files with 779642 additions and 653 deletions
@@ -0,0 +1,71 @@
+- op: replace
+  path: /spec/template/spec/containers/0/env
+  value:
+    - name: QL3_PROFILE
+      value: cluster-admin
+    - name: QL3_APPROVAL_MANAGEMENT_ENABLED
+      value: 'true'
+    - name: QL3_APPROVAL_MANAGEMENT_HOST
+      value: 0.0.0.0
+    - name: QL3_APPROVAL_MANAGEMENT_PORT
+      value: '8447'
+    - name: QL3_APPROVAL_MANAGEMENT_TLS_CERT_FILE
+      value: /var/run/secrets/qinglong3/approval-management-tls/tls.crt
+    - name: QL3_APPROVAL_MANAGEMENT_TLS_KEY_FILE
+      value: /var/run/secrets/qinglong3/approval-management-tls/tls.key
+    - name: QL3_APPROVAL_MANAGEMENT_CLIENT_CA_FILE
+      value: /var/run/secrets/qinglong3/approval-management-tls/ca.crt
+    - name: QL3_APPROVAL_MANAGEMENT_CLIENT_CRL_FILE
+      value: /var/run/secrets/qinglong3/approval-management-tls/client.crl
+    - name: QL3_APPROVAL_MANAGEMENT_IDENTITY_KEYSET_FILE
+      value: /var/run/qinglong3/approval-management-identity/keyset.json
+    - name: QL3_APPROVAL_MANAGEMENT_MAX_BODY_BYTES
+      value: '65536'
+    - name: QL3_APPROVAL_MANAGEMENT_MAX_CONNECTIONS
+      value: '32'
+    - name: QL3_APPROVAL_MANAGEMENT_MAX_CONCURRENT_REQUESTS
+      value: '16'
+    - name: QL3_APPROVAL_MANAGEMENT_REQUEST_TIMEOUT_MS
+      value: '10000'
+    - name: QL3_APPROVAL_MANAGEMENT_DRAIN_TIMEOUT_MS
+      value: '5000'
+    - name: QL3_APPROVAL_MANAGEMENT_RATE_WINDOW_MS
+      value: '60000'
+    - name: QL3_APPROVAL_MANAGEMENT_PEER_REQUEST_LIMIT
+      value: '30'
+    - name: QL3_APPROVAL_MANAGEMENT_GLOBAL_REQUEST_LIMIT
+      value: '300'
+    - name: QL3_APPROVAL_MANAGEMENT_MAX_RATE_LIMIT_PEERS
+      value: '1024'
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_TLS_MODE
+      value: verify-full
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_TLS_CA_FILE
+      value: /var/run/secrets/qinglong3/postgres-approval-manager/ca.crt
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_APPLICATION_NAME
+      value: qinglong3-approval-manager
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_POOL_MAX
+      value: '2'
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_HOST
+      value: ql3-postgres-rw.qinglong3-system.svc
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_PORT
+      value: '5432'
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_DATABASE
+      value: qinglong
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_USER
+      valueFrom:
+        secretKeyRef:
+          name: ql3-postgres-approval-manager-auth
+          key: username
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_PASSWORD
+      valueFrom:
+        secretKeyRef:
+          name: ql3-postgres-approval-manager-auth
+          key: password
+    - name: QL3_POSTGRES_APPROVAL_MANAGER_TLS_SERVERNAME
+      value: ql3-postgres-rw.qinglong3-system.svc
+- op: replace
+  path: /spec/template/spec/volumes/3/secret/secretName
+  value: ql3-postgres-ca
+- op: replace
+  path: /spec/template/spec/volumes/3/secret/items/0/key
+  value: ca.crt