- op: replace
  path: /spec/template/spec/containers/0/env
  value:
    - name: QL3_PROFILE
      value: cluster-admin
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_ENABLED
      value: 'true'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_HOST
      value: 0.0.0.0
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_PORT
      value: '8444'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_TLS_CERT_FILE
      value: /var/run/secrets/qinglong3/worker-credential-management-tls/tls.crt
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_TLS_KEY_FILE
      value: /var/run/secrets/qinglong3/worker-credential-management-tls/tls.key
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_CLIENT_CA_FILE
      value: /var/run/secrets/qinglong3/worker-credential-management-tls/ca.crt
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_CLIENT_CRL_FILE
      value: /var/run/secrets/qinglong3/worker-credential-management-tls/client.crl
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_IDENTITY_KEYSET_FILE
      value: /var/run/qinglong3/worker-credential-management-identity/keyset.json
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_PLAN_LIFETIME_MS
      value: '900000'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_APPROVAL_LIFETIME_MS
      value: '900000'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_QUOTA_WINDOW_MS
      value: '60000'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_PLAN_QUOTA
      value: '30'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_PROPOSE_QUOTA
      value: '30'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_DECIDE_QUOTA
      value: '60'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_INSPECT_QUOTA
      value: '600'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_MAX_BODY_BYTES
      value: '65536'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_MAX_CONNECTIONS
      value: '32'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_MAX_CONCURRENT_REQUESTS
      value: '16'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_REQUEST_TIMEOUT_MS
      value: '10000'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_DRAIN_TIMEOUT_MS
      value: '10000'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_RATE_WINDOW_MS
      value: '60000'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_PEER_REQUEST_LIMIT
      value: '60'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_GLOBAL_REQUEST_LIMIT
      value: '600'
    - name: QL3_WORKER_CREDENTIAL_MANAGEMENT_MAX_RATE_LIMIT_PEERS
      value: '512'
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_TLS_MODE
      value: verify-full
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_TLS_CA_FILE
      value: /var/run/secrets/qinglong3/postgres-worker-credential-manager/ca.crt
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_APPLICATION_NAME
      value: qinglong3-worker-credential-manager
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_MAX_CONNECTIONS
      value: '2'
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_HOST
      value: ql3-postgres-rw.qinglong3-system.svc
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_PORT
      value: '5432'
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_DATABASE
      value: qinglong
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_USER
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-worker-credential-manager-auth
          key: username
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_PASSWORD
      valueFrom:
        secretKeyRef:
          name: ql3-postgres-worker-credential-manager-auth
          key: password
    - name: QL3_POSTGRES_WORKER_CREDENTIAL_MANAGER_TLS_SERVERNAME
      value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
  path: /spec/template/spec/volumes/3/secret/secretName
  value: ql3-postgres-ca
- op: replace
  path: /spec/template/spec/volumes/3/secret/items/0/key
  value: ca.crt