mirror of
https://github.com/whyour/qinglong.git
synced 2026-09-22 02:27:44 +08:00
75 lines
3.0 KiB
YAML
75 lines
3.0 KiB
YAML
- op: replace
|
|
path: /spec/template/spec/containers/0/env
|
|
value:
|
|
- name: QL3_PROFILE
|
|
value: cluster-admin
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_ENABLED
|
|
value: 'true'
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_COMMAND_FILE
|
|
value: /var/run/qinglong3/worker-credential-command/command.json
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_PEPPER_FILE
|
|
value: /var/run/secrets/qinglong3/worker-credential-executor/pepper
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_CLUSTER_IDENTITY
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: ql3-worker-credential-executor-config
|
|
key: cluster-identity
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_STAGE_NAMESPACE
|
|
value: qinglong3-worker-credential-staging
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_NAMESPACE
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: ql3-worker-credential-executor-config
|
|
key: target-namespace
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_SECRET
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: ql3-worker-credential-executor-config
|
|
key: target-secret
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_DEPLOYMENT
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: ql3-worker-credential-executor-config
|
|
key: target-deployment
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_TARGET_DATA_KEY
|
|
value: credential-token
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_DELIVERY_SERVICE_ACCOUNT
|
|
value: ql3-worker-credential-admin
|
|
- name: QL3_WORKER_CREDENTIAL_EXECUTOR_IDENTITY_SECRET
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: ql3-worker-credential-executor-config
|
|
key: identity-secret
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_TLS_MODE
|
|
value: verify-full
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_TLS_CA_FILE
|
|
value: /var/run/secrets/qinglong3/postgres-worker-credential-executor/ca.crt
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_APPLICATION_NAME
|
|
value: qinglong3-worker-credential-executor
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_MAX_CONNECTIONS
|
|
value: '1'
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_HOST
|
|
value: ql3-postgres-rw.qinglong3-system.svc
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_PORT
|
|
value: '5432'
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_DATABASE
|
|
value: qinglong
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ql3-postgres-worker-credential-executor-auth
|
|
key: username
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ql3-postgres-worker-credential-executor-auth
|
|
key: password
|
|
- name: QL3_POSTGRES_WORKER_CREDENTIAL_EXECUTOR_TLS_SERVERNAME
|
|
value: ql3-postgres-rw.qinglong3-system.svc
|
|
- op: replace
|
|
path: /spec/template/spec/volumes/4/secret/secretName
|
|
value: ql3-postgres-ca
|
|
- op: replace
|
|
path: /spec/template/spec/volumes/4/secret/items/0/key
|
|
value: ca.crt
|