Files
qinglong/deploy/kubernetes/ql3-cluster/operations/provider-credential-test-executor/cloudnative-pg/job-patch.yaml
T

52 lines
2.1 KiB
YAML

- op: replace
path: /spec/template/spec/containers/0/env
value:
- name: QL3_PROFILE
value: cluster-admin
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_EXECUTOR_ENABLED
value: 'true'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_WRITE_TERMINATION_MESSAGE
value: 'true'
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_COMMAND_FILE
value: /var/run/qinglong3/provider-credential-test/command.json
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_ALLOWLIST_FILE
value: /var/run/qinglong3/provider-credential-test/allowlist.json
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_SECRET_ROOT
value: /var/run/secrets/qinglong3/provider-credential-test
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_DENY_CANARY_HOST
value: kubernetes.default.svc
- name: QL3_MODEL_PROVIDER_CREDENTIAL_TEST_DENY_CANARY_PORT
value: '443'
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_TLS_MODE
value: verify-full
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_TLS_CA_FILE
value: /var/run/secrets/qinglong3/postgres-ai-credential-tester/ca.crt
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_APPLICATION_NAME
value: qinglong3-ai-credential-tester
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_POOL_MAX
value: '1'
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_HOST
value: ql3-postgres-rw.qinglong3-system.svc
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_PORT
value: '5432'
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_DATABASE
value: qinglong
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_USER
valueFrom:
secretKeyRef:
name: ql3-postgres-ai-credential-tester-auth
key: username
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_PASSWORD
valueFrom:
secretKeyRef:
name: ql3-postgres-ai-credential-tester-auth
key: password
- name: QL3_POSTGRES_AI_CREDENTIAL_TESTER_TLS_SERVERNAME
value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
path: /spec/template/spec/volumes/3/secret/secretName
value: ql3-postgres-ca
- op: replace
path: /spec/template/spec/volumes/3/secret/items/0/key
value: ca.crt