Files
qinglong/deploy/kubernetes/ql3-cluster/operations/plugin-package-management/cloudnative-pg/deployment-patch.yaml
T

86 lines
3.4 KiB
YAML

- op: replace
path: /spec/template/spec/containers/0/env
value:
- name: QL3_PROFILE
value: cluster-admin
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_ENABLED
value: 'true'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_HOST
value: 0.0.0.0
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_PORT
value: '8443'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_TLS_CERT_FILE
value: /var/run/secrets/qinglong3/plugin-package-management-tls/tls.crt
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_TLS_KEY_FILE
value: /var/run/secrets/qinglong3/plugin-package-management-tls/tls.key
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_IDENTITY_KEYSET_FILE
value: /var/run/qinglong3/plugin-package-management-identity/keyset.json
- name: QL3_PLUGIN_PACKAGE_PUBLISHER_TRUST_FILE
value: /var/run/qinglong3/plugin-package-trust/publishers.json
- name: QL3_PLUGIN_PACKAGE_TRUST_AUTHORITY_PROJECT_ID
value: cluster-trust-authority
- name: QL3_PLUGIN_PACKAGE_TRUST_AUTHORITY_ID
value: cluster
- name: QL3_PLUGIN_PACKAGE_TRUST_OBSERVER_ID
value: cluster-package-manager
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_APPROVAL_LIFETIME_MS
value: '900000'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_QUOTA_WINDOW_MS
value: '60000'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_PROPOSE_QUOTA
value: '30'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_DECIDE_QUOTA
value: '60'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_INSPECT_QUOTA
value: '600'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_BODY_BYTES
value: '65536'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_CONNECTIONS
value: '32'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_CONCURRENT_REQUESTS
value: '16'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_REQUEST_TIMEOUT_MS
value: '10000'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_DRAIN_TIMEOUT_MS
value: '10000'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_RATE_WINDOW_MS
value: '60000'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_PEER_REQUEST_LIMIT
value: '60'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_GLOBAL_REQUEST_LIMIT
value: '600'
- name: QL3_PLUGIN_PACKAGE_MANAGEMENT_MAX_RATE_LIMIT_PEERS
value: '512'
- name: QL3_POSTGRES_PACKAGE_MANAGER_TLS_MODE
value: verify-full
- name: QL3_POSTGRES_PACKAGE_MANAGER_TLS_CA_FILE
value: /var/run/secrets/qinglong3/postgres-package-manager/ca.crt
- name: QL3_POSTGRES_PACKAGE_MANAGER_APPLICATION_NAME
value: qinglong3-plugin-package-manager
- name: QL3_POSTGRES_PACKAGE_MANAGER_MAX_CONNECTIONS
value: '2'
- name: QL3_POSTGRES_PACKAGE_MANAGER_HOST
value: ql3-postgres-rw.qinglong3-system.svc
- name: QL3_POSTGRES_PACKAGE_MANAGER_PORT
value: '5432'
- name: QL3_POSTGRES_PACKAGE_MANAGER_DATABASE
value: qinglong
- name: QL3_POSTGRES_PACKAGE_MANAGER_USER
valueFrom:
secretKeyRef:
name: ql3-postgres-package-manager-auth
key: username
- name: QL3_POSTGRES_PACKAGE_MANAGER_PASSWORD
valueFrom:
secretKeyRef:
name: ql3-postgres-package-manager-auth
key: password
- name: QL3_POSTGRES_PACKAGE_MANAGER_TLS_SERVERNAME
value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
path: /spec/template/spec/volumes/4/secret/secretName
value: ql3-postgres-ca
- op: replace
path: /spec/template/spec/volumes/4/secret/items/0/key
value: ca.crt