Files
qinglong/deploy/kubernetes/ql3-cluster/operations/provider-credential-management/cloudnative-pg/deployment-patch.yaml
T

80 lines
3.5 KiB
YAML

- op: replace
path: /spec/template/spec/containers/0/env
value:
- name: QL3_PROFILE
value: cluster-admin
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_ENABLED
value: 'true'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_HOST
value: 0.0.0.0
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_PORT
value: '8446'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_TLS_CERT_FILE
value: /var/run/secrets/qinglong3/provider-credential-management-tls/tls.crt
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_TLS_KEY_FILE
value: /var/run/secrets/qinglong3/provider-credential-management-tls/tls.key
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_CLIENT_CA_FILE
value: /var/run/secrets/qinglong3/provider-credential-management-tls/ca.crt
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_CLIENT_CRL_FILE
value: /var/run/secrets/qinglong3/provider-credential-management-tls/client.crl
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_IDENTITY_KEYSET_FILE
value: /var/run/qinglong3/provider-credential-management-identity/keyset.json
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_ALLOWLIST_FILE
value: /var/run/qinglong3/provider-credential-test/allowlist.json
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_PLAN_LIFETIME_MS
value: '60000'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_QUOTA_WINDOW_MS
value: '60000'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_QUOTA_LIMIT
value: '5'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_MAX_BODY_BYTES
value: '32768'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_MAX_CONNECTIONS
value: '32'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_MAX_CONCURRENT_REQUESTS
value: '8'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_REQUEST_TIMEOUT_MS
value: '10000'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_DRAIN_TIMEOUT_MS
value: '5000'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_RATE_WINDOW_MS
value: '60000'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_PEER_REQUEST_LIMIT
value: '30'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_GLOBAL_REQUEST_LIMIT
value: '120'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_MANAGEMENT_MAX_RATE_LIMIT_PEERS
value: '256'
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_TLS_MODE
value: verify-full
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_TLS_CA_FILE
value: /var/run/secrets/qinglong3/postgres-ai-credential-manager/ca.crt
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_APPLICATION_NAME
value: qinglong3-ai-credential-manager
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_POOL_MAX
value: '2'
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_HOST
value: ql3-postgres-rw.qinglong3-system.svc
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_PORT
value: '5432'
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_DATABASE
value: qinglong
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_USER
valueFrom:
secretKeyRef:
name: ql3-postgres-ai-credential-manager-auth
key: username
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_PASSWORD
valueFrom:
secretKeyRef:
name: ql3-postgres-ai-credential-manager-auth
key: password
- name: QL3_POSTGRES_AI_CREDENTIAL_MANAGER_TLS_SERVERNAME
value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
path: /spec/template/spec/volumes/4/secret/secretName
value: ql3-postgres-ca
- op: replace
path: /spec/template/spec/volumes/4/secret/items/0/key
value: ca.crt