Files
qinglong/deploy/kubernetes/ql3-cluster/operations/approval-management/cloudnative-pg/deployment-patch.yaml
T

72 lines
2.8 KiB
YAML

- op: replace
path: /spec/template/spec/containers/0/env
value:
- name: QL3_PROFILE
value: cluster-admin
- name: QL3_APPROVAL_MANAGEMENT_ENABLED
value: 'true'
- name: QL3_APPROVAL_MANAGEMENT_HOST
value: 0.0.0.0
- name: QL3_APPROVAL_MANAGEMENT_PORT
value: '8447'
- name: QL3_APPROVAL_MANAGEMENT_TLS_CERT_FILE
value: /var/run/secrets/qinglong3/approval-management-tls/tls.crt
- name: QL3_APPROVAL_MANAGEMENT_TLS_KEY_FILE
value: /var/run/secrets/qinglong3/approval-management-tls/tls.key
- name: QL3_APPROVAL_MANAGEMENT_CLIENT_CA_FILE
value: /var/run/secrets/qinglong3/approval-management-tls/ca.crt
- name: QL3_APPROVAL_MANAGEMENT_CLIENT_CRL_FILE
value: /var/run/secrets/qinglong3/approval-management-tls/client.crl
- name: QL3_APPROVAL_MANAGEMENT_IDENTITY_KEYSET_FILE
value: /var/run/qinglong3/approval-management-identity/keyset.json
- name: QL3_APPROVAL_MANAGEMENT_MAX_BODY_BYTES
value: '65536'
- name: QL3_APPROVAL_MANAGEMENT_MAX_CONNECTIONS
value: '32'
- name: QL3_APPROVAL_MANAGEMENT_MAX_CONCURRENT_REQUESTS
value: '16'
- name: QL3_APPROVAL_MANAGEMENT_REQUEST_TIMEOUT_MS
value: '10000'
- name: QL3_APPROVAL_MANAGEMENT_DRAIN_TIMEOUT_MS
value: '5000'
- name: QL3_APPROVAL_MANAGEMENT_RATE_WINDOW_MS
value: '60000'
- name: QL3_APPROVAL_MANAGEMENT_PEER_REQUEST_LIMIT
value: '30'
- name: QL3_APPROVAL_MANAGEMENT_GLOBAL_REQUEST_LIMIT
value: '300'
- name: QL3_APPROVAL_MANAGEMENT_MAX_RATE_LIMIT_PEERS
value: '1024'
- name: QL3_POSTGRES_APPROVAL_MANAGER_TLS_MODE
value: verify-full
- name: QL3_POSTGRES_APPROVAL_MANAGER_TLS_CA_FILE
value: /var/run/secrets/qinglong3/postgres-approval-manager/ca.crt
- name: QL3_POSTGRES_APPROVAL_MANAGER_APPLICATION_NAME
value: qinglong3-approval-manager
- name: QL3_POSTGRES_APPROVAL_MANAGER_POOL_MAX
value: '2'
- name: QL3_POSTGRES_APPROVAL_MANAGER_HOST
value: ql3-postgres-rw.qinglong3-system.svc
- name: QL3_POSTGRES_APPROVAL_MANAGER_PORT
value: '5432'
- name: QL3_POSTGRES_APPROVAL_MANAGER_DATABASE
value: qinglong
- name: QL3_POSTGRES_APPROVAL_MANAGER_USER
valueFrom:
secretKeyRef:
name: ql3-postgres-approval-manager-auth
key: username
- name: QL3_POSTGRES_APPROVAL_MANAGER_PASSWORD
valueFrom:
secretKeyRef:
name: ql3-postgres-approval-manager-auth
key: password
- name: QL3_POSTGRES_APPROVAL_MANAGER_TLS_SERVERNAME
value: ql3-postgres-rw.qinglong3-system.svc
- op: replace
path: /spec/template/spec/volumes/3/secret/secretName
value: ql3-postgres-ca
- op: replace
path: /spec/template/spec/volumes/3/secret/items/0/key
value: ca.crt