- op: replace
  path: /spec/template/spec/containers/0/env
  value:
    - name: QL3_PROFILE
      value: cluster-admin
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_ENABLED
      value: 'true'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_HOST
      value: 0.0.0.0
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_PORT
      value: '8443'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_TLS_CERT_FILE
      value: /var/run/secrets/qinglong3/plugin-package-management-tls/tls.crt
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_TLS_KEY_FILE
      value: /var/run/secrets/qinglong3/plugin-package-management-tls/tls.key
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_IDENTITY_KEYSET_FILE
      value: /var/run/qinglong3/plugin-package-management-identity/keyset.json
    - name: QL3_PLUGIN_PACKAGE_PUBLISHER_TRUST_FILE
      value: /var/run/qinglong3/plugin-package-trust/publishers.json
    - name: QL3_PLUGIN_PACKAGE_TRUST_AUTHORITY_PROJECT_ID
      value: cluster-trust-authority
    - name: QL3_PLUGIN_PACKAGE_TRUST_AUTHORITY_ID
      value: cluster
    - name: QL3_PLUGIN_PACKAGE_TRUST_OBSERVER_ID
      value: cluster-package-manager
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_APPROVAL_LIFETIME_MS
      value: '900000'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_QUOTA_WINDOW_MS
      value: '60000'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_PROPOSE_QUOTA
      value: '30'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_DECIDE_QUOTA
      value: '60'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_INSPECT_QUOTA
      value: '600'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_BODY_BYTES
      value: '65536'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_CONNECTIONS
      value: '32'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_CONCURRENT_REQUESTS
      value: '16'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_REQUEST_TIMEOUT_MS
      value: '10000'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_DRAIN_TIMEOUT_MS
      value: '10000'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_RATE_WINDOW_MS
      value: '60000'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_PEER_REQUEST_LIMIT
      value: '60'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_GLOBAL_REQUEST_LIMIT
      value: '600'
    - name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_RATE_LIMIT_PEERS
      value: '512'
    - name: QL3_POSTGRES_PACKAGE_MANAGER_TLS_MODE
      value: verify-full
    - name: QL3_POSTGRES_PACKAGE_MANAGER_TLS_CA_FILE
      value: /var/run/secrets/qinglong3/postgres-package-manager/ca.crt
    - name: QL3_POSTGRES_PACKAGE_MANAGER_APPLICATION_NAME
      value: qinglong3-plugin-package-manager
    - name: QL3_POSTGRES_PACKAGE_MANAGER_MAX_CONNECTIONS
      value: '2'
    - name: QL3_POSTGRES_PACKAGE_MANAGER_HOST
      value: ql3-postgres-rw.qinglong3-system.svc
    - name: QL3_POSTGRES_PACKAGE_MANAGER_PORT
      value: '5432'
    - name: QL3_POSTGRES_PACKAGE_MANAGER_DATABASE
      value: qinglong
    - name: QL3_POSTGRES_PACKAGE_MANAGER_USER
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-package-manager-auth
          key: username
    - name: QL3_POSTGRES_PACKAGE_MANAGER_PASSWORD
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-package-manager-auth
          key: password
    - name: QL3_POSTGRES_PACKAGE_MANAGER_TLS_SERVERNAME
      value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
  path: /spec/template/spec/volumes/4/secret/secretName
  value: ql3-postgres-ca
- op: replace
  path: /spec/template/spec/volumes/4/secret/items/0/key
  value: ca.crt