-
Notifications
You must be signed in to change notification settings - Fork 3
/
ci-values.yaml
157 lines (153 loc) · 3.62 KB
/
ci-values.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
applicationPort: 3000
registerAdditionalDns:
enabled: false
memoryRequests: 64Mi
cpuRequests: 25m
memoryLimits: 512Mi
cpuLimits: 500m
readinessPath: /health
readinessDelay: 5
readinessTimeout: 3
readinessPeriod: 15
livenessDelay: 5
livenessTimeout: 3
livenessPeriod: 15
livenessFailureThreshold: 3
startupDelay: 5
startupTimeout: 3
startupPeriod: 15
startupFailureThreshold: 3
dnsConfig:
ndots: "3"
pdb:
enabled: true
maxUnavailable: 50%
prometheus:
enabled: false
path: /metrics
ingressClass: traefik
useWorkloadIdentity: true
global:
tenantId: "531ff96d-0ae9-462a-8d2d-bec7c0b42082"
environment: aat
enableKeyVaults: true
devMode: false
smoketestscron:
enabled: true
functionaltestscron:
enabled: true
image: hmctspublic.azurecr.io/chart-nodejs/testapp
replicas: 2
ingressHost: "{{.Release.Name}}.service.core-compute-preview.internal"
disableTraefikTls: true
livenessPath: /health/liveness
startupPath: /health/liveness
imagePullPolicy: Always
env:
- name: DESIRED_VERSION
value: "10.2.0"
volumes:
- name: hung-pod-script
configMap:
name: delete-hung-pods
defaultMode: 0777
volumeMounts:
- name: hung-pod-script
mountPath: /mnt
nodeSelector:
agentpool: cronjob
spotInstances:
enabled: true
tolerations:
- effect: NoSchedule
key: dedicated
operator: Equal
value: jobs
environment:
REFORM_TEAM: cnp
REFORM_SERVICE_NAME: rhubarb-frontend
REFORM_ENVIRONMENT: preview
configmap:
VAR_A: VALUE_A
VAR_B: VALUE_B
saEnabled: false
customServiceAccountName: customServiceAccount
envFromSecret: "env-secret"
keyVaults:
bulk-scan:
excludeEnvironmentSuffix: false
secrets:
- name: idam-client-secret
alias: idam.client.secret
- name: s2s-secret
- name: idam-client-<ENV>-secret
alias: idam.client.env.secret
- name: s2s-<ENV>-secret
certs:
- name: idam-client-cert
alias: idam.client.cert
- name: s2s-cert
bulk-scan-v2:
mountPath: /run/secrets/bulk-scan-alias
excludeEnvironmentSuffix: false
secrets:
- name: alias-secret
additionalPathBasedRoutes:
"/test": "{{.Release.Name}}"
secrets:
STORAGE_ACCOUNT_NAME:
secretRef: storage-secret-example-{{ .Release.Name }}
key: storageAccountName
# WARNING: ingressSessionAffinity is a temporary option.
# This is subject to removal without notice. Do NOT use for any reason!
ingressSessionAffinity:
enabled: false
sessionCookieName: sticky
testsConfig:
memoryRequests: "256Mi"
cpuRequests: "100m"
memoryLimits: "2048Mi"
cpuLimits: "1000m"
serviceAccountName: tests-service-account
keyVaults:
bulk-scan:
excludeEnvironmentSuffix: true
secrets:
- name: idam-client-secret
alias: IDAM_CLIENT_SECRET
- name: s2s-secret
- name: idam-client-<ENV>-secret
alias: idam.client.env.secret
- name: s2s-<ENV>-secret
certs:
- name: idam-client-cert
alias: IDAM_CLIENT_CERT
- name: s2s-cert
smoketests:
image: hmctspublic.azurecr.io/spring-boot/template
enabled: false
functionaltests:
image: hmctspublic.azurecr.io/spring-boot/template
enabled: false
smoketestscron:
image: hmctspublic.azurecr.io/spring-boot/template
enabled: false
schedule: "20 0/1 * * *"
functionaltestscron:
image: hmctspublic.azurecr.io/spring-boot/template
enabled: true
schedule: "30 0/6 * * *"
# HPA
autoscaling:
enabled: true
maxReplicas: 5
cpu:
enabled: true
averageUtilization: 80
memory:
enabled: true
averageUtilization: 80
args:
- this
- that
additionalIngressHosts: ["{{ .Release.Name }}-ci-01.platform.hmcts.net", "ci-02.platform.hmcts.net"]