Update Yonote v2 branch
This commit is contained in:
@@ -0,0 +1,23 @@
|
||||
# Patterns to ignore when building packages.
|
||||
# This supports shell glob matching, relative path matching, and
|
||||
# negation (prefixed with !). Only one pattern per line.
|
||||
.DS_Store
|
||||
# Common VCS dirs
|
||||
.git/
|
||||
.gitignore
|
||||
.bzr/
|
||||
.bzrignore
|
||||
.hg/
|
||||
.hgignore
|
||||
.svn/
|
||||
# Common backup files
|
||||
*.swp
|
||||
*.bak
|
||||
*.tmp
|
||||
*.orig
|
||||
*~
|
||||
# Various IDEs
|
||||
.project
|
||||
.idea/
|
||||
*.tmproj
|
||||
.vscode/
|
||||
@@ -0,0 +1,30 @@
|
||||
dependencies:
|
||||
- name: app
|
||||
repository: https://dysnix.github.io/charts
|
||||
version: 0.3.15
|
||||
- name: app
|
||||
repository: https://dysnix.github.io/charts
|
||||
version: 0.3.15
|
||||
- name: app
|
||||
repository: https://dysnix.github.io/charts
|
||||
version: 0.3.15
|
||||
- name: app
|
||||
repository: https://dysnix.github.io/charts
|
||||
version: 0.3.15
|
||||
- name: app
|
||||
repository: https://dysnix.github.io/charts
|
||||
version: 0.3.15
|
||||
- name: postgres
|
||||
repository: https://groundhog2k.github.io/helm-charts/
|
||||
version: 0.3.9
|
||||
- name: redis
|
||||
repository: https://groundhog2k.github.io/helm-charts/
|
||||
version: 0.7.0
|
||||
- name: minio
|
||||
repository: https://charts.min.io/
|
||||
version: 5.4.0
|
||||
- name: keycloakx
|
||||
repository: https://codecentric.github.io/helm-charts
|
||||
version: 1.3.2
|
||||
digest: sha256:ad0128ad6d526a8946d659481ec5dc19d1faf785919efbcc689a37ae80bc820e
|
||||
generated: "2025-10-30T14:17:59.001901626+03:00"
|
||||
@@ -0,0 +1,60 @@
|
||||
apiVersion: v2
|
||||
name: yonote-chart
|
||||
version: 2.0.1
|
||||
description:
|
||||
Generic application Helm chart.
|
||||
This chart includes multiple dependencies. The base of this chart is derived from the Dysnix app chart.
|
||||
maintainers:
|
||||
- name: Dysnix
|
||||
email: support@dysnix.com
|
||||
url: https://github.com/dysnix/charts/tree/main/dysnix/app
|
||||
|
||||
dependencies:
|
||||
- name: app
|
||||
version: "0.3.15"
|
||||
repository: https://dysnix.github.io/charts
|
||||
alias: yonote-web
|
||||
|
||||
- name: app
|
||||
version: "0.3.15"
|
||||
repository: https://dysnix.github.io/charts
|
||||
alias: yonote-websocket
|
||||
|
||||
- name: app
|
||||
version: "0.3.15"
|
||||
repository: https://dysnix.github.io/charts
|
||||
alias: yonote-whiteboard
|
||||
|
||||
- name: app
|
||||
version: "0.3.15"
|
||||
repository: https://dysnix.github.io/charts
|
||||
alias: yonote-worker
|
||||
|
||||
- name: app
|
||||
version: "0.3.15"
|
||||
repository: https://dysnix.github.io/charts
|
||||
alias: yonote-collaboration
|
||||
|
||||
- name: postgres
|
||||
version: "0.3.9"
|
||||
repository: https://groundhog2k.github.io/helm-charts/
|
||||
condition: postgres.enabled
|
||||
alias: postgres
|
||||
|
||||
- name: redis
|
||||
version: "0.7.0"
|
||||
repository: https://groundhog2k.github.io/helm-charts/
|
||||
condition: redis.enabled
|
||||
alias: redis
|
||||
|
||||
- name: minio
|
||||
version: "5.4.0"
|
||||
repository: https://charts.min.io/
|
||||
condition: minio.enabled
|
||||
alias: minio
|
||||
|
||||
- name: keycloakx
|
||||
version: "1.3.2"
|
||||
repository: https://codecentric.github.io/helm-charts
|
||||
condition: keycloak.enabled
|
||||
alias: keycloak
|
||||
@@ -0,0 +1,171 @@
|
||||
# Yonote Onprem Charts
|
||||
|
||||
## Важная информация
|
||||
|
||||
### Статус веток
|
||||
В настоящее время доступны **2 ветки**:
|
||||
|
||||
| Ветка | Версия | Статус |
|
||||
|--------|---------|--------|
|
||||
| `master` | yonote Helm Charts v1.x.x | Устаревшая |
|
||||
| `2.0.0` | yonote Helm Charts v2.x.x | Актуальная |
|
||||
|
||||
> **⚠️ Важно:** между этими версиями чартов **нет прямого пути миграции**. При обновлении необходимо внимательно выбирать подходящую версию чарта.
|
||||
|
||||
### Рекомендации по развёртыванию
|
||||
- **Новые развёртывания**: необходимо использовать чарты версии `2.0.0`.
|
||||
- **Существующие развёртывания**: продолжайте использовать текущую версию.
|
||||
- **Предстоящие изменения**: в ближайшее время ветка `2.0.0` будет повышена до `master`. Текущая ветка `master` будет перемещена в ветку с пометкой «устаревшая».
|
||||
|
||||
---
|
||||
|
||||
## Быстрый старт
|
||||
|
||||
### Добавление репозитория
|
||||
```bash
|
||||
helm repo add yonote https://artifacts.wilix.dev/repository/helm-yonote
|
||||
helm repo update
|
||||
```
|
||||
|
||||
### Сравнение чартов
|
||||
|
||||
| Характеристика | yonote-helm-chart |
|
||||
|----------------|-------------------------|
|
||||
| Сервер yonote | ✅ Включён | ✅ Включён |
|
||||
| PostgreSQL | ✅ Включён |
|
||||
| MinIO | ✅ Включён |
|
||||
|
||||
---
|
||||
|
||||
### Матрица версий
|
||||
|
||||
| Версия чарта | Ветка | Статус | Рекомендуется для |
|
||||
|--------------|-------|--------|-------------------|
|
||||
| v1.x.x | master | Устаревшая | Существующие развёртывания v1 |
|
||||
| v2.x.x | 2.0.0 | Актуальная | Все новые развёртывания |
|
||||
|
||||
---
|
||||
|
||||
### Уведомление о миграции
|
||||
|
||||
> **Прямого пути обновления между v1.x.x и v2.x.x не существует**
|
||||
|
||||
Если вы сейчас используете чарты v1.x.x:
|
||||
- **НЕ** пытайтесь выполнить обновление на месте до v2.x.x
|
||||
- Путь обновления будет предоставлен в будущем
|
||||
|
||||
---
|
||||
|
||||
### Настройка значений
|
||||
|
||||
Перед развертыванием приложения через Helm необходимо внести валидные значения в файлы values.yaml и secret-values.yaml. Эти файлы содержат параметры конфигурации, которые будут использованы при установке приложения.
|
||||
|
||||
Настройте необходимые параметры. В файлах values.yaml и secret-values.yaml вы найдете различные секции, каждая из которых соответствует определенной части конфигурации приложения. Внимательно изучите комментарии в этих файлах; они указывают на места, где необходимо внести изменения. Обратите особое внимание на секцию ingress, так как её настройка важна для правильной работы приложения. Вам потребуется заменить или настроить значения в этой секции в соответствии с вашими требованиями.
|
||||
Также обратите внимание на все строки с доменом example.com — его необходимо заменить на ваше собственное доменное имя, которое будет использоваться для работы приложения. Учтите, что путь в переменных и в конфигурации Ingress менять не нужно, заменяйте только сам домен.
|
||||
|
||||
Более подробно ознакомиться с переменными вы можете по следующей ссылке: https://yo.yonote.ru/share/onprem/doc/peremennye-okruzheniya-mOI8Jl6B05
|
||||
|
||||
### Запуск приложения
|
||||
|
||||
После настройки значений выполните команду:
|
||||
|
||||
```bash
|
||||
helm install app -f values.yaml -f secret-values.yaml -n yonote-onprem .
|
||||
```
|
||||
После выполнения команды начнётся установка приложения и всех дополнительных сервисов к нему. Остаётся только подождать, пока все сервисы запустятся.
|
||||
|
||||
---
|
||||
|
||||
### Обратная связь
|
||||
|
||||
Если у вас есть вопросы или вам нужна помощь, пишите на email: hello@yonote.ru
|
||||
|
||||
###
|
||||
|
||||
# yonote Onprem Charts
|
||||
|
||||
## Important Information
|
||||
|
||||
### Branch Status
|
||||
There are currently **2 branches** available:
|
||||
|
||||
| Branch | Version | Status |
|
||||
|--------|---------|--------|
|
||||
| `master` | yonote Helm Charts v1.x.x | Legacy |
|
||||
| `2.0.0` | yonote Helm Charts v2.x.x | Current |
|
||||
|
||||
> **⚠️ Important:** These charts do **not** have a direct migration path between versions. Care must be taken to use the correct chart version for upgrades.
|
||||
|
||||
### Deployment Recommendations
|
||||
- **New deployments**: Must use version `2.0.0` charts
|
||||
- **Existing deployments**: Continue using your current version
|
||||
- **Upcoming changes**: The `2.0.0` branch will be promoted to `master` in the near future. The current `master` will be moved to a deprecated branch.
|
||||
|
||||
---
|
||||
|
||||
## Quick Start
|
||||
|
||||
### Add Repository
|
||||
```bash
|
||||
helm repo add yonote https://artifacts.wilix.dev/repository/helm-yonote
|
||||
helm repo update
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Chart Features
|
||||
|
||||
| Feature | yonote-helm-chart |
|
||||
|---------|------------------------|
|
||||
| yonote Server | ✅ Included |
|
||||
| PostgreSQL | ✅ Included |
|
||||
| MinIO | ✅ Included |
|
||||
|
||||
---
|
||||
|
||||
## Version Matrix
|
||||
|
||||
| Chart Version | Branch | Status | Recommended For |
|
||||
|---------------|--------|--------|-----------------|
|
||||
| v1.x.x | `master` | Legacy | Existing v1 deployments |
|
||||
| v2.x.x | `2.0.0` | Current | All new deployments |
|
||||
|
||||
---
|
||||
|
||||
## Migration Notice
|
||||
|
||||
> **No direct upgrade path exists between v1.x.x and v2.x.x**
|
||||
|
||||
If you are currently using v1.x.x charts:
|
||||
- **DO NOT** attempt an in-place upgrade to v2.x.x
|
||||
|
||||
The upgrade path will be provided in the future.
|
||||
|
||||
---
|
||||
|
||||
### Configuring the Values
|
||||
|
||||
Before deploying the application via Helm, you need to enter valid values in the values.yaml and secret-values.yaml files. These files contain configuration parameters that will be used when installing the application.
|
||||
|
||||
Configure the required parameters. In the values.yaml and secret-values.yaml files, you’ll find various sections — each corresponds to a specific part of the application’s configuration. Carefully review the comments in these files; they indicate where changes need to be made.
|
||||
|
||||
Pay special attention to the ingress section, as its configuration is crucial for the proper operation of the application. You’ll need to replace or adjust the values in this section according to your requirements.
|
||||
|
||||
Also, note all the lines containing the example.com domain — you must replace it with your own domain name that will be used for the application. Keep in mind that you don’t need to change the path in the variables and Ingress configuration; only replace the domain itself.
|
||||
|
||||
You can learn more about the variables using the following link.: https://yo.yonote.ru/share/onprem/doc/peremennye-okruzheniya-mOI8Jl6B05
|
||||
|
||||
### Application Launch
|
||||
|
||||
After configuring the values, run the following command:
|
||||
|
||||
```bash
|
||||
helm install app -f values.yaml -f secret-values.yaml -n yonote-onprem .
|
||||
```
|
||||
Once the command is executed, the installation of the application and all additional services will begin. Just wait until all the services are up and running.
|
||||
|
||||
---
|
||||
|
||||
### Feedback
|
||||
|
||||
If you have any questions or need assistance, please send an email to:: hello@yonote.ru
|
||||
@@ -0,0 +1,45 @@
|
||||
global:
|
||||
yonote:
|
||||
config:
|
||||
secret:
|
||||
stringData:
|
||||
DATABASE_URL: 'postgres://{{ .Values.postgres.userDatabase.user }}:{{ .Values.postgres.userDatabase.password }}@yonote-database:5432/{{ .Values.postgres.userDatabase.name }}'
|
||||
POSTGRES_PASSWORD: "{{ .Values.postgres.userDatabase.password }}"
|
||||
AWS_ACCESS_KEY_ID: "qwer12314q" # Ваш идентификатор ключа доступа к AWS.
|
||||
AWS_SECRET_ACCESS_KEY: "qwer-12314q-qwersa" # Ваш секретный ключ доступа AWS.
|
||||
OIDC_CLIENT_SECRET: "{{ .Values.keycloak.secrets.secrets.stringData.OIDC_CLIENT_SECRET }}" # Секретный ключ клиента для аутентификации по OpenID Connect (OIDC).
|
||||
SECRET_KEY: "659a8881b186198c3146e316f6dab67df25496534d1fa156d624b037260df688" # Сгенерируйте 32-байтовый случайный ключ в шестнадцатеричном коде. Вам следует использовать `openssl rand -hex 32` в вашем терминале для генерации случайного значения.
|
||||
SMTP_PASSWORD: "1234"
|
||||
UTILS_SECRET: "7bd5e9ac4415dd0dbf6b7721e2a21e9427b268cd0140c7516d13dece5024d479" # Сгенерируйте уникальный случайный ключ. Формат не важен, но вы все равно можете использовать`openssl rand -hex 32` в вашем терминале, чтобы создать это.
|
||||
TELEGRAM_BOT_TOKEN: "1234"
|
||||
UNSPLASH_API_ACCESS_KEY: "a-yGo6HpRP6jNfravx4Bz-oiPrRnH_5-24Xa9ZPlePE"
|
||||
LICENSE_KEY: "" # Обратитесь в отдел продаж для получения
|
||||
SERVICE_WORKER_PUBLIC_KEY: "1234"
|
||||
SERVICE_WORKER_PRIVATE_KEY: "1234"
|
||||
# Генерация ключей (web-push) Service Worker
|
||||
# 1) Установить Node.js и npm
|
||||
# 2) Выполнить команду для генерации ключей
|
||||
# npx web-push generate-vapid-keys
|
||||
# 3) Полученные значения ввести в .env файл (SERVICE_WORKER_PUBLIC_KEY, SERVICE_WORKER_PRIVATE_KEY)
|
||||
|
||||
postgres:
|
||||
settings:
|
||||
superuserPassword: "QQYw4UjOU"
|
||||
userDatabase:
|
||||
password: "wsGZ6kXhr5"
|
||||
|
||||
redis:
|
||||
args:
|
||||
- "--user redis:redis"
|
||||
|
||||
minio:
|
||||
rootPassword: "qwettaas"
|
||||
|
||||
keycloak:
|
||||
database:
|
||||
password: keycloakdbpassword
|
||||
secrets:
|
||||
secrets:
|
||||
stringData:
|
||||
KEYCLOAK_ADMIN_PASSWORD: secret
|
||||
OIDC_CLIENT_SECRET: "iS3jOA3Z7zXBwSN8EzJm36ybz57JNgpR"
|
||||
@@ -0,0 +1,14 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: postgres-init-scripts
|
||||
data:
|
||||
init-keycloak-db.sh: |
|
||||
!/bin/bash
|
||||
set -e
|
||||
|
||||
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
|
||||
CREATE DATABASE {{ .Values.keycloak.database.database }};
|
||||
CREATE USER {{ .Values.keycloak.database.username }} WITH PASSWORD '{{ .Values.keycloak.database.password }}';
|
||||
GRANT ALL PRIVILEGES ON DATABASE keycloak TO {{ .Values.keycloak.database.username }};
|
||||
EOSQL
|
||||
@@ -0,0 +1,10 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: yonote-configs
|
||||
labels:
|
||||
{{- include "common.labels.standard" $ | nindent 4 }}
|
||||
{{- with .Values.global.yonote.config.plain.data }}
|
||||
data:
|
||||
{{- include "common.tplvalues.render" (dict "value" . "context" $) | nindent 2 }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,69 @@
|
||||
{{- if eq ($.Values.global.yonote_cron_calendar_events.cron_enabled | toString) "true" }}
|
||||
apiVersion: batch/v1
|
||||
kind: CronJob
|
||||
metadata:
|
||||
name: cron-calendar-events
|
||||
spec:
|
||||
schedule: "*/1 * * * *"
|
||||
jobTemplate:
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: cron-calendar-events
|
||||
image: curlimages/curl
|
||||
imagePullPolicy: IfNotPresent
|
||||
envFrom:
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- >-
|
||||
date;
|
||||
curl
|
||||
-X POST
|
||||
{{ .Values.global.yonote_cron_calendar_events.url }}
|
||||
-H "Content-Type: application/json"
|
||||
-d '
|
||||
{
|
||||
"token": "$(UTILS_SECRET)"
|
||||
}
|
||||
'
|
||||
restartPolicy: OnFailure
|
||||
{{- end }}
|
||||
---
|
||||
{{- if eq ($.Values.global.yonote_cron_task_scheduler.cron_enabled | toString) "true" }}
|
||||
apiVersion: batch/v1
|
||||
kind: CronJob
|
||||
metadata:
|
||||
name: cron-task-scheduler
|
||||
spec:
|
||||
schedule: "0 */1 * * *"
|
||||
jobTemplate:
|
||||
spec:
|
||||
template:
|
||||
spec:
|
||||
containers:
|
||||
- name: cron-task-scheduler
|
||||
image: curlimages/curl
|
||||
imagePullPolicy: IfNotPresent
|
||||
envFrom:
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- >-
|
||||
date;
|
||||
curl
|
||||
-X POST
|
||||
{{ .Values.global.yonote_cron_task_scheduler.url }}
|
||||
-H "Content-Type: application/json"
|
||||
-d '
|
||||
{
|
||||
"token":"$(UTILS_SECRET)", "limit":"200"
|
||||
}
|
||||
'
|
||||
restartPolicy: OnFailure
|
||||
{{- end }}
|
||||
@@ -0,0 +1,34 @@
|
||||
{{- if .Values.ingress.enabled }}
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
name: {{ .Values.ingress.name }}
|
||||
namespace: {{ .Values.ingress.namespace }}
|
||||
annotations:
|
||||
{{- range $key, $value := .Values.ingress.annotations }}
|
||||
{{ $key }}: "{{ $value }}"
|
||||
{{- end }}
|
||||
spec:
|
||||
ingressClassName: {{ .Values.ingress.ingressClassName }}
|
||||
tls:
|
||||
- secretName: "{{ .Values.ingress.tls.secretName }}"
|
||||
hosts:
|
||||
{{- range .Values.ingress.tls.hosts }}
|
||||
- "{{ . }}"
|
||||
{{- end }}
|
||||
rules:
|
||||
{{- range .Values.ingress.rules }}
|
||||
- host: "{{ .host }}"
|
||||
http:
|
||||
paths:
|
||||
{{- range .paths }}
|
||||
- path: {{ .path }}
|
||||
pathType: {{ .pathType }}
|
||||
backend:
|
||||
service:
|
||||
name: {{ .service.name }}
|
||||
port:
|
||||
number: {{ .service.port | int }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,85 @@
|
||||
{{- if .Values.mcJob.enabled }}
|
||||
apiVersion: batch/v1
|
||||
kind: Job
|
||||
metadata:
|
||||
name: yonote-minio-mc-job
|
||||
labels:
|
||||
app: yonote-minio
|
||||
spec:
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: yonote-minio
|
||||
spec:
|
||||
containers:
|
||||
- name: mc-client
|
||||
image: "minio/mc:RELEASE.2025-01-17T23-25-50Z"
|
||||
command: ["/bin/sh", "-c"]
|
||||
args:
|
||||
- |
|
||||
until mc alias set myminio http://yonote-minio:9000 {{ .Values.minio.rootUser }} {{ .Values.minio.rootPassword }}; do
|
||||
echo "Waiting for MinIO to be ready..."
|
||||
sleep 5
|
||||
done
|
||||
echo "MinIO is ready and alias is set."
|
||||
|
||||
# Создание бакета
|
||||
if ! mc ls myminio/{{ .Values.global.yonote.config.plain.data.AWS_S3_UPLOAD_BUCKET_NAME }}; then
|
||||
mc mb myminio/{{ .Values.global.yonote.config.plain.data.AWS_S3_UPLOAD_BUCKET_NAME }}
|
||||
echo "Bucket {{ .Values.global.yonote.config.plain.data.AWS_S3_UPLOAD_BUCKET_NAME }} created successfully."
|
||||
else
|
||||
echo "Bucket {{ .Values.global.yonote.config.plain.data.AWS_S3_UPLOAD_BUCKET_NAME }} already exists."
|
||||
fi
|
||||
|
||||
# Установка политик для бакета
|
||||
cat <<EOF > /tmp/minio-bucket-policy.json
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Principal": {
|
||||
"AWS": [
|
||||
"*"
|
||||
]
|
||||
},
|
||||
"Action": [
|
||||
"s3:GetBucketLocation"
|
||||
],
|
||||
"Resource": [
|
||||
"arn:aws:s3:::{{ .Values.global.yonote.config.plain.data.AWS_S3_UPLOAD_BUCKET_NAME }}"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Principal": {
|
||||
"AWS": [
|
||||
"*"
|
||||
]
|
||||
},
|
||||
"Action": [
|
||||
"s3:GetObject"
|
||||
],
|
||||
"Resource": [
|
||||
"arn:aws:s3:::{{ .Values.global.yonote.config.plain.data.AWS_S3_UPLOAD_BUCKET_NAME }}/*"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
EOF
|
||||
echo "Bucket policy JSON file created."
|
||||
|
||||
mc anonymous set-json /tmp/minio-bucket-policy.json myminio/{{ .Values.global.yonote.config.plain.data.AWS_S3_UPLOAD_BUCKET_NAME }}
|
||||
echo "Bucket policy applied."
|
||||
|
||||
resources:
|
||||
requests:
|
||||
memory: "128Mi"
|
||||
cpu: "100m"
|
||||
limits:
|
||||
memory: "256Mi"
|
||||
cpu: "200m"
|
||||
restartPolicy: OnFailure
|
||||
backoffLimit: 5
|
||||
ttlSecondsAfterFinished: 180
|
||||
{{- end }}
|
||||
@@ -0,0 +1,14 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: yonote-secrets
|
||||
labels:
|
||||
{{- include "common.labels.standard" $ | nindent 4 }}
|
||||
type: Opaque
|
||||
{{- with .Values.global.yonote.config.secret.data }}
|
||||
data:
|
||||
{{- toYaml . | nindent 2 }}
|
||||
{{- end }}
|
||||
{{- with .Values.global.yonote.config.secret.stringData }}
|
||||
stringData: {{- include "common.tplvalues.render" (dict "value" . "context" $) | nindent 2 }}
|
||||
{{- end }}
|
||||
@@ -0,0 +1,712 @@
|
||||
global:
|
||||
name: yonote-app
|
||||
yonote:
|
||||
dbMigrationEnv: production-ssl-disabled # Режим подключения к базе данных при выполнении миграций. При использовании SSL подключения, установите значение `production`
|
||||
baseListenAddress: example.com # Доменный адрес для yonote
|
||||
|
||||
config:
|
||||
plain:
|
||||
data:
|
||||
DEBUG: debug
|
||||
NODE_ENV: production
|
||||
FORCE_HTTPS: "false"
|
||||
PGSSLMODE: disable # Отключает SSL подключение к базе данных. Уберите эту строку, если вы используете SSL подключение к PostgreSQL
|
||||
WEB_CONCURRENCY: "1"
|
||||
|
||||
BIND_HOST: 0.0.0.0 # Хост по умолчанию
|
||||
PORT: "3000" # Порт по умолчанию
|
||||
|
||||
REDIS_URL: redis://yonote-redis:6379
|
||||
|
||||
DEFAULT_LANGUAGE: ru_RU # Язык по умолчанию
|
||||
ENABLE_UPDATES: "false"
|
||||
|
||||
AI_URL: "1234"
|
||||
AI_API_KEY: "1234"
|
||||
|
||||
URL: 'https://app.{{ .Values.global.yonote.baseListenAddress }}' # Базовый url приложения
|
||||
COLLABORATION_URL: 'wss://app.{{ .Values.global.yonote.baseListenAddress }}' # Cервер, для нормальной работы это не нужно устанавливать
|
||||
|
||||
#DEPLOYMENT: 'hosted'
|
||||
|
||||
OIDC_DISPLAY_NAME: email
|
||||
OIDC_SCOPES: openid email
|
||||
OIDC_CLIENT_ID: yonote
|
||||
OIDC_AUTH_URI: 'https://auth.example.com/realms/yonote/protocol/openid-connect/auth' # URL для авторизации пользователей через OpenID Connect (OIDC). Пользователь перенаправляется на этот адрес для входа в систему.
|
||||
OIDC_LOGOUT_URI: 'https://auth.example.com/realms/yonote/protocol/openid-connect/logout' # URL для выхода из системы через OIDC. Пользователь перенаправляется на этот адрес для завершения сессии и выхода.
|
||||
OIDC_TOKEN_URI: 'https://auth.example.com/realms/yonote/protocol/openid-connect/token' # URL для получения токенов доступа и обновления. Этот адрес используется для обмена авторизационным кодом на токены
|
||||
OIDC_USERINFO_URI: 'https://auth.example.com/realms/yonote/protocol/openid-connect/userinfo' # URL для получения информации о пользователе. Используется для получения данных профиля пользователя на основе его токена.
|
||||
|
||||
AWS_S3_ACL: private
|
||||
AWS_S3_UPLOAD_BUCKET_URL: 'https://s3.example.com' # Адрес API S3 хранилища
|
||||
AWS_S3_UPLOAD_BUCKET_NAME: yonote-bucket # Имя хранилища
|
||||
AWS_REGION: "RU"
|
||||
AWS_S3_UPLOAD_MAX_SIZE: "226214400" # Максимальный размер хранилища
|
||||
AWS_S3_FORCE_PATH_STYLE: "false" # Следует ли принудительно использовать URL-адреса стиля пути для объектов S3
|
||||
S3_PROXY_ENABLED: "false" # Включает или выключает проксирование загрузки/выгрузки файлов на S3 через бэкенд, принимает boolean
|
||||
S3_MULTIPART_PART_SIZE: "1000" # Настройка размера частей для multipart загрузки на S3 хранилище, принимает число, по умолчанию 1000 (1GB), значение в мегабайтах.
|
||||
|
||||
SUBDOMAINS_ENABLED: "true" # Поддержка поддоменов для команд
|
||||
BASENAME_FOR_SUBDOMAIN: '{{ .Values.global.yonote.baseListenAddress }}' # Имя хоста
|
||||
NOT_ALLOWED_SUBDOMAINS: app,collaboration,auth,api,dev,docs,doc,admin,test,quota,billing,i,storage,host,updates # Запрещенные поддомены
|
||||
|
||||
TELEGRAM_API_URL: https://api.telegram.org
|
||||
|
||||
UNSPLASH_API_BASENAME: https://api.unsplash.com
|
||||
|
||||
RESERVED_SUBDOMAINS: about,account,admin,advertising,api,app,assets,archive,beta,billing,blog,cache,cdn,code,community,dashboard,developer,developers,forum,help,home,http,https,imap,localhost,mail,marketing,mobile,multiplayer,new,news,newsletter,ns1,ns2,ns3,ns4,password,profile,realtime,sandbox,script,scripts,setup,signin,signup,site,smtp,support,status,static,stats,test,update,updates,ws,wss,web,websockets,www,www1,www2,www3,www4
|
||||
|
||||
SMTP_HOST: "smtp.wilix.dev"
|
||||
SMTP_USERNAME: ""
|
||||
SMTP_FROM_EMAIL: ""
|
||||
SMTP_REPLY_EMAIL: ""
|
||||
SMTP_PORT: "456"
|
||||
SMTP_SECURE: "" # connection will be upgraded: https://nodemailer.com/smtp/
|
||||
SMTP_REQUIRE_TLS: ""
|
||||
|
||||
yonote_cron_calendar_events:
|
||||
cron_enabled: "true"
|
||||
url: http://yonote-web/api/cron.calendar_events
|
||||
|
||||
yonote_cron_task_scheduler:
|
||||
cron_enabled: "true"
|
||||
url: http://yonote-web/api/cron.schedule
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
name: yonote-ingress
|
||||
namespace: yonote-onprem
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
secretName: "example.com-tls"
|
||||
hosts:
|
||||
- "app.example.com"
|
||||
- "team.example.com"
|
||||
rules:
|
||||
- host: "app.example.com"
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-web
|
||||
port: 80
|
||||
- path: /realtime
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-websockets
|
||||
port: 80
|
||||
- path: /whiteboard
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-whiteboard
|
||||
port: 80
|
||||
- path: /collaboration
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-collaboration
|
||||
port: 80
|
||||
- host: "team.example.com"
|
||||
paths:
|
||||
- path: /
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-web
|
||||
port: 80
|
||||
- path: /realtime
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-websockets
|
||||
port: 80
|
||||
- path: /whiteboard
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-whiteboard
|
||||
port: 80
|
||||
- path: /collaboration
|
||||
pathType: Prefix
|
||||
service:
|
||||
name: yonote-collaboration
|
||||
port: 80
|
||||
|
||||
#annotations:
|
||||
# cert-manager.io/cluster-issuer: # Если используете
|
||||
|
||||
yonote-web:
|
||||
fullnameOverride: yonote-web
|
||||
nameOverride: yonote-web
|
||||
name: web
|
||||
|
||||
image:
|
||||
registry: images.updates.yonote.ru
|
||||
repository: yonote
|
||||
tag: 1.45.33-1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
command: ["/bin/sh", "-c"]
|
||||
args: ['IS_COMPILED=true yarn bytenode ./build/server/main.jsc --services=web']
|
||||
|
||||
initContainers:
|
||||
- name: yonote-migration
|
||||
image: images.updates.yonote.ru/yonote:1.22.11
|
||||
imagePullPolicy: IfNotPresent
|
||||
command:
|
||||
- /bin/sh
|
||||
- -c
|
||||
- npx sequelize db:migrate
|
||||
env:
|
||||
- name: NODE_ENV
|
||||
value: '{{ .Values.global.yonote.dbMigrationEnv }}' # В настройках для sequelize прописан такой env для запуска миграций без ssl
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: yonote-configs
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 1
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 256Mi
|
||||
|
||||
containerPorts:
|
||||
- containerPort: 3000
|
||||
name: app
|
||||
protocol: TCP
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
targetPort: app
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: yonote-configs
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
|
||||
podLabels:
|
||||
redis-client: 'true'
|
||||
|
||||
podAnnotations:
|
||||
checksum/configmap: "{{ toJson .Values.global.yonote.config.plain | sha256sum }}"
|
||||
checksum/secret: "{{ toJson .Values.global.yonote.config.secret | sha256sum }}"
|
||||
|
||||
readinessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
livenessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
yonote-websocket:
|
||||
fullnameOverride: yonote-websockets
|
||||
nameOverride: yonote-websockets
|
||||
name: websockets
|
||||
|
||||
image:
|
||||
registry: images.updates.yonote.ru
|
||||
repository: yonote
|
||||
tag: 1.45.33-1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
command: ["/bin/sh", "-c"]
|
||||
args: ['IS_COMPILED=true yarn bytenode ./build/server/main.jsc --services=websockets']
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 150m
|
||||
memory: 128Mi
|
||||
|
||||
checksums: null
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: yonote-configs
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
|
||||
containerPorts:
|
||||
- containerPort: 3000
|
||||
name: app
|
||||
protocol: TCP
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
targetPort: app
|
||||
|
||||
podLabels:
|
||||
redis-client: 'true'
|
||||
|
||||
podAnnotations:
|
||||
checksum/configmap: "{{ toJson .Values.global.yonote.config.plain | sha256sum }}"
|
||||
checksum/secret: "{{ toJson .Values.global.yonote.config.secret | sha256sum }}"
|
||||
|
||||
readinessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
livenessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
yonote-whiteboard:
|
||||
fullnameOverride: yonote-whiteboard
|
||||
nameOverride: yonote-whiteboard
|
||||
name: whiteboard
|
||||
|
||||
image:
|
||||
registry: images.updates.yonote.ru
|
||||
repository: yonote
|
||||
tag: 1.45.33-1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
command: ["/bin/sh", "-c"]
|
||||
args: ['IS_COMPILED=true yarn bytenode ./build/server/main.jsc --services=whiteboard']
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 150m
|
||||
memory: 128Mi
|
||||
|
||||
checksums: null
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: yonote-configs
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
|
||||
containerPorts:
|
||||
- containerPort: 3000
|
||||
name: app
|
||||
protocol: TCP
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
targetPort: app
|
||||
|
||||
podLabels:
|
||||
redis-client: 'true'
|
||||
|
||||
podAnnotations:
|
||||
checksum/configmap: "{{ toJson .Values.global.yonote.config.plain | sha256sum }}"
|
||||
checksum/secret: "{{ toJson .Values.global.yonote.config.secret | sha256sum }}"
|
||||
|
||||
readinessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
livenessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
yonote-worker:
|
||||
fullnameOverride: yonote-worker
|
||||
nameOverride: yonote-worker
|
||||
name: worker
|
||||
|
||||
image:
|
||||
registry: images.updates.yonote.ru
|
||||
repository: yonote
|
||||
tag: 1.45.33-1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
command: ["/bin/sh", "-c"]
|
||||
args: ['IS_COMPILED=true yarn bytenode ./build/server/main.jsc --services=worker']
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 1
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 256Mi
|
||||
|
||||
checksums: null
|
||||
|
||||
containerPorts:
|
||||
- containerPort: 3000
|
||||
name: app
|
||||
protocol: TCP
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
targetPort: app
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: yonote-configs
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
|
||||
podLabels:
|
||||
redis-client: 'true'
|
||||
|
||||
podAnnotations:
|
||||
checksum/configmap: "{{ toJson .Values.global.yonote.config.plain | sha256sum }}"
|
||||
checksum/secret: "{{ toJson .Values.global.yonote.config.secret | sha256sum }}"
|
||||
|
||||
readinessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
livenessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
yonote-collaboration:
|
||||
fullnameOverride: yonote-collaboration
|
||||
nameOverride: yonote-collaboration
|
||||
name: collaboration
|
||||
|
||||
image:
|
||||
registry: images.updates.yonote.ru
|
||||
repository: yonote
|
||||
tag: 1.45.33-1
|
||||
pullPolicy: IfNotPresent
|
||||
|
||||
command: ["/bin/sh", "-c"]
|
||||
args: ['IS_COMPILED=true yarn bytenode ./build/server/main.jsc --services=collaboration']
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 150m
|
||||
memory: 128Mi
|
||||
|
||||
checksums: null
|
||||
|
||||
containerPorts:
|
||||
- containerPort: 3000
|
||||
name: app
|
||||
protocol: TCP
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
port: 80
|
||||
targetPort: app
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: yonote-configs
|
||||
- secretRef:
|
||||
name: yonote-secrets
|
||||
|
||||
podLabels:
|
||||
redis-client: 'true'
|
||||
|
||||
podAnnotations:
|
||||
checksum/configmap: "{{ toJson .Values.global.yonote.config.plain | sha256sum }}"
|
||||
checksum/secret: "{{ toJson .Values.global.yonote.config.secret | sha256sum }}"
|
||||
|
||||
readinessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
livenessProbe:
|
||||
enabled: true
|
||||
failureThreshold: 6
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 10
|
||||
successThreshold: 1
|
||||
timeoutSeconds: 5
|
||||
httpGet:
|
||||
path: /_health
|
||||
port: app
|
||||
|
||||
postgres:
|
||||
enabled: true
|
||||
#settings:
|
||||
# Default postgres
|
||||
# superuser:
|
||||
|
||||
userDatabase:
|
||||
name: yonote
|
||||
user: yonote
|
||||
|
||||
fullnameOverride: yonote-database
|
||||
nameOverride: yonote-database
|
||||
|
||||
storage:
|
||||
requestedSize: 5Gi
|
||||
className: ""
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 2
|
||||
memory: 5Gi
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
|
||||
extraScripts: postgres-init-scripts
|
||||
|
||||
redis:
|
||||
enabled: true
|
||||
fullnameOverride: yonote-redis
|
||||
nameOverride: redis
|
||||
|
||||
storage:
|
||||
requestedSize: 1Gi
|
||||
className: ""
|
||||
resources:
|
||||
limits:
|
||||
cpu: 1
|
||||
memory: 4Gi
|
||||
requests:
|
||||
cpu: 500m
|
||||
memory: 512Mi
|
||||
|
||||
minio:
|
||||
enabled: true
|
||||
name: minio
|
||||
fullnameOverride: yonote-minio
|
||||
nameOverride: yonote-minio
|
||||
mode: standalone
|
||||
rootUser: admin
|
||||
|
||||
policies:
|
||||
- name: yonote_user_policy
|
||||
statements:
|
||||
- resources:
|
||||
- 'arn:aws:s3:::yonote-bucket/*'
|
||||
actions:
|
||||
- "s3:GetObject"
|
||||
- "s3:PutObject"
|
||||
- "s3:DeleteObject"
|
||||
|
||||
users:
|
||||
- accessKey: qwer12314q
|
||||
secretKey: qwer-12314q-qwersa
|
||||
policy: yonote_user_policy
|
||||
|
||||
persistence:
|
||||
enabled: true
|
||||
annotations:
|
||||
helm.sh/resource-policy: keep
|
||||
size: 1Gi
|
||||
storageClass: ""
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
hosts:
|
||||
- s3.example.com
|
||||
ingressClassName: traefik
|
||||
path: '/'
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: traefik
|
||||
#cert-manager.io/cluster-issuer: letsencrypt.rancher.wilix.dev # Если используете
|
||||
tls:
|
||||
- hosts:
|
||||
- "s3.example.com"
|
||||
secretName: "example.com-tls"
|
||||
|
||||
consoleIngress:
|
||||
enabled: true
|
||||
hosts:
|
||||
- s3-console.example.com
|
||||
ingressClassName: traefik
|
||||
path: '/'
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: traefik
|
||||
#cert-manager.io/cluster-issuer: letsencrypt.rancher.wilix.dev # Если используете
|
||||
tls:
|
||||
- hosts:
|
||||
- "s3-console.example.com"
|
||||
secretName: "example.com-tls"
|
||||
|
||||
resources:
|
||||
requests:
|
||||
memory: 512Mi
|
||||
cpu: 250m
|
||||
limits:
|
||||
memory: 2Gi
|
||||
cpu: 1
|
||||
|
||||
mcJob:
|
||||
enabled: true
|
||||
|
||||
keycloak:
|
||||
enabled: true
|
||||
fullnameOverride: yonote-keycloak
|
||||
nameOverride: yonote-keycloak
|
||||
|
||||
image:
|
||||
repository: images.updates.yonote.ru/yonote-keycloak
|
||||
tag: latest
|
||||
|
||||
args:
|
||||
- start-dev --spi-login-protocol-openid-connect-legacy-logout-redirect-uri=true --import-realm
|
||||
|
||||
cache:
|
||||
stack: custom
|
||||
|
||||
proxy:
|
||||
enabled: "false"
|
||||
|
||||
extraEnv: |
|
||||
- name: KEYCLOAK_ADMIN
|
||||
value: root
|
||||
- name: KEYCLOAK_ADMIN_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "keycloak.fullname" . }}-secrets
|
||||
key: KEYCLOAK_ADMIN_PASSWORD
|
||||
- name: OIDC_CLIENT_SECRET
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ include "keycloak.fullname" . }}-secrets
|
||||
key: OIDC_CLIENT_SECRET
|
||||
- name: BASENAME_FOR_SUBDOMAIN
|
||||
value: example.com
|
||||
- name: KC_HOSTNAME_STRICT
|
||||
value: "false"
|
||||
- name: KC_HOSTNAME
|
||||
value: auth.example.com
|
||||
- name: KC_HOSTNAME_STRICT_HTTPS
|
||||
value: "false"
|
||||
- name: KC_HOSTNAME_PATH
|
||||
value: "/"
|
||||
- name: KC_HTTP_ENABLED
|
||||
value: "true"
|
||||
- name: PROXY_ADDRESS_FORWARDING
|
||||
value: "true"
|
||||
|
||||
http:
|
||||
relativePath: "/"
|
||||
|
||||
ingress:
|
||||
enabled: true
|
||||
hostname: auth.example.com
|
||||
ingressClassName: traefik
|
||||
tls:
|
||||
- hosts:
|
||||
- "auth.example.com"
|
||||
secretName: "example.com-tls"
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: traefik
|
||||
#cert-manager.io/cluster-issuer: #Если используете
|
||||
|
||||
rules:
|
||||
- host: "auth.example.com"
|
||||
paths:
|
||||
- path: /
|
||||
pathType: ImplementationSpecific
|
||||
service:
|
||||
name: yonote-keycloak
|
||||
port: http
|
||||
- path: /admin
|
||||
pathType: ImplementationSpecific
|
||||
service:
|
||||
name: yonote-keycloak
|
||||
port: http
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu: 1
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 256Mi
|
||||
|
||||
dbchecker:
|
||||
enabled: "true"
|
||||
|
||||
database:
|
||||
vendor: postgres
|
||||
hostname: yonote-database
|
||||
port: 5432
|
||||
database: keycloak
|
||||
username: keycloak
|
||||
|
||||
livenessProbe: |
|
||||
httpGet:
|
||||
path: '{{ trimSuffix "/" .Values.http.relativePath}}/'
|
||||
port: http
|
||||
initialDelaySeconds: 240
|
||||
timeoutSeconds: 5
|
||||
|
||||
# Readiness probe configuration
|
||||
readinessProbe: |
|
||||
httpGet:
|
||||
path: '{{ trimSuffix "/" .Values.http.relativePath}}/realms/master'
|
||||
port: http
|
||||
initialDelaySeconds: 120
|
||||
timeoutSeconds: 1
|
||||
Reference in New Issue
Block a user