113 lines
5.4 KiB
YAML
113 lines
5.4 KiB
YAML
namespace: dev
|
|
|
|
image:
|
|
repository: nexus.essocode.ru/ess/emulator-smev
|
|
tag: "{{.tag}}"
|
|
libericaImage:
|
|
repository: nexus.essocode.ru/bellsoft/liberica-openjdk-debian
|
|
tag: "11"
|
|
pullPolicy: Always
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8059
|
|
targetPort: 8059
|
|
portJMX: 9010
|
|
targetPortJMX: 9010
|
|
|
|
replicaCount: 1
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "0"
|
|
kubernetes.io/ingress.class: nginx
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
cert-manager.io/issue-temporary-certificate: "true"
|
|
acme.cert-manager.io/http01-edit-in-place: "true"
|
|
ingress.kubernetes.io/ssl-redirect: "true"
|
|
tlsEnabled: true # New parameter to control TLS
|
|
hosts:
|
|
- host: smev-emulator.dev.essocode.ru
|
|
paths:
|
|
- path: /
|
|
pathType: ImplementationSpecific
|
|
tls:
|
|
- secretName: emulator-dev-tls
|
|
hosts:
|
|
- smev-emulator.dev.essocode.ru
|
|
|
|
secret:
|
|
enabled: true
|
|
name: dev-smev-emulator-back-cred
|
|
data:
|
|
# smev-emulator
|
|
APPLICATION_NAME: c21ldi1lbXVsYXRvcg==
|
|
# 2.11
|
|
APPLICATION_VERSION: Mi4xMQ==
|
|
# 8059
|
|
SERVER_PORT: ODA1OQ==
|
|
# jdbc:postgresql://217.79.22.46:5432/dev_emul_smev
|
|
SPRING_DATASOURCE_URL: amRiYzpwb3N0Z3Jlc3FsOi8vMjE3Ljc5LjIyLjQ2OjU0MzIvZGV2X2VtdWxfc21ldg==
|
|
# root
|
|
SPRING_DATASOURCE_USERNAME: cm9vdA==
|
|
# root
|
|
SPRING_DATASOURCE_PASSWORD: cm9vdA==
|
|
# https://smev-emulator.dev.essocode.ru
|
|
SWAGGER_URL: aHR0cHM6Ly9zbWV2LWVtdWxhdG9yLmRldi5lc3NvY29kZS5ydQ==
|
|
# http://log-service.dev.svc.cluster.local:8055/api/v1/audit/external
|
|
AUDIT_URL: aHR0cDovL2xvZy1zZXJ2aWNlLmRldi5zdmMuY2x1c3Rlci5sb2NhbDo4MDU1L2FwaS92MS9hdWRpdC9leHRlcm5hbA==
|
|
# /v3/api-docs/**,/configuration/ui,/swagger-resources/**,/configuration/security,/swagger-ui.html,/swagger-ui/**,/v3/api-docs.yaml,/webjars/**,/.well-known/acme-challenge/**,/ws/**,/user/**,/favicon.ico,/api/v1/certificate-data/archive,/api/v1/trusted_certificate/archive,/api/v1/revoked_certificate,/api/v1/revoked_certificate/archive,/api/v1/revoked_certificate/{id:\d+},/api/v1/revoked_certificate/content/{id:\d+},/api/v1/verify/sign,/api/v1/certificate-data/xml,/api/v1/ca-ref-book,/api/v1/ca-ref-book/{id:\d+},/api/v1/ca-certificate/archive,/api/v1/ca-certificate/archive,/api/v1/trusted-certificate/archive,/api/v1/crl,/api/v1/crl/{id:\d+},/api/v1/crl/archive,/api/v1/user-certificate/,/api/v1/user-certificate/me,/api/v1/audit/,/api/v1/order-fk/{id:\d+}/cert/save,/api/v1/order-fk/{id:\d+}/cert/reset-status-issue,/api/v1/archive/**,/api/v1/change-mode/**,/api/v1/health,/actuator,/actuator/health,/actuator/info,/actuator/env,/actuator/beans,/actuator/metrics,/actuator/loggers,/actuator/mappings,/api/v1/notifications/send,/api/v1/order-fk/ucfk-response/**
|
|
WHITE_LIST: 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
|
|
# *
|
|
ACTUATOR_ENDPOINTS: Kg==
|
|
# http://log-service.dev.svc.cluster.local:8055
|
|
LOG_SERVICE_BASE_URI: aHR0cDovL2xvZy1zZXJ2aWNlLmRldi5zdmMuY2x1c3Rlci5sb2NhbDo4MDU1
|
|
|
|
jvmOptions:
|
|
xms: 1G
|
|
xmx: 1536m
|
|
gc: "-XX:+UseG1GC"
|
|
minHeapFreeRatio: 10
|
|
maxHeapFreeRatio: 30
|
|
portJMX: 9010
|
|
authenticateJMX: false
|
|
sslJMX: false
|
|
hostnameJMX: localhost
|
|
localOnlyJMX: false
|
|
timezone: UTC
|
|
encoding: UTF-8
|
|
logFilePath: /var/log/pep
|
|
logFileName: emulator-smev.log
|
|
|
|
deployment:
|
|
container:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 1Gi
|
|
limits:
|
|
cpu: 600m
|
|
memory: 2Gi
|
|
|
|
jarFile: emulator-smev-0.0.1-SNAPSHOT.jar
|
|
|
|
env:
|
|
APPLICATION_NAME: APPLICATION_NAME
|
|
APPLICATION_VERSION: APPLICATION_VERSION
|
|
SERVER_PORT: SERVER_PORT
|
|
SPRING_DATASOURCE_URL: SPRING_DATASOURCE_URL
|
|
SPRING_DATASOURCE_USERNAME: SPRING_DATASOURCE_USERNAME
|
|
SPRING_DATASOURCE_PASSWORD: SPRING_DATASOURCE_PASSWORD
|
|
SWAGGER_URL: SWAGGER_URL
|
|
AUDIT_URL: AUDIT_URL
|
|
WHITE_LIST: WHITE_LIST
|
|
ACTUATOR_ENDPOINTS: ACTUATOR_ENDPOINTS
|
|
LOG_SERVICE_BASE_URI: LOG_SERVICE_BASE_URI
|
|
|
|
appName: smev-emulator
|
|
|
|
imagePullSecrets:
|
|
- registrypullsecret
|
|
|
|
resources: {}
|