Skip to content

Commit 91e65d6

Browse files
shabrul2451shabrul2451
committed
add k8s directory
1 parent fe4026b commit 91e65d6

File tree

4 files changed

+102
-0
lines changed

4 files changed

+102
-0
lines changed

‎k8s/configmap.yml

+24
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
apiVersion: v1
2+
kind: ConfigMap
3+
metadata:
4+
name: klovercloud-security-envar-config
5+
namespace: klovercloud
6+
data:
7+
RUN_MODE: "PRODUCTION"
8+
MONGO_SERVER: "kcprod-mongodb-0.kcprod-mongodb-svc.klovercloud.svc.cluster.local"
9+
MONGO_PORT: "27017"
10+
DATABASE_NAME: "klovercloud-security"
11+
SERVER_PORT: "8080"
12+
DEVELOPER_ALIAS: "klovercloud"
13+
REGULAR_TOKEN_LIFETIME: "300000"
14+
CTL_TOKEN_LIFETIME: "311040000000"
15+
PRIVATE_KEY: "-----BEGIN RSA PRIVATE KEY-----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\n-----END RSA PRIVATE KEY-----\n"
16+
PUBLIC_KEY: "-----BEGIN RSA PUBLIC KEY-----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\n-----END RSA PUBLIC KEY-----\n"
17+
MAIL_SERVER_HOST_EMAIL:
18+
MAIL_SERVER_HOST_EMAIL_SECRET:
19+
SMTP_HOST: "smtp.gmail.com"
20+
SMTP_PORT: "587"
21+
RESOURCES: "user,pipeline,process,company,repository,application"
22+
PERMISSIONS: "CREATE,READ,UPDATE,DELETE"
23+
API_SERVER_URL: "http://ci-api-server/api/v1"
24+

‎k8s/deployment.yaml

+54
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
apiVersion: apps/v1
2+
kind: Deployment
3+
metadata:
4+
name: klovercloud-security
5+
namespace: klovercloud
6+
spec:
7+
replicas: 1
8+
selector:
9+
matchLabels:
10+
app: klovercloud-security
11+
strategy:
12+
type: RollingUpdate
13+
rollingUpdate:
14+
maxSurge: 2
15+
maxUnavailable: 0
16+
minReadySeconds: 25
17+
template:
18+
metadata:
19+
labels:
20+
app: klovercloud-security
21+
spec:
22+
terminationGracePeriodSeconds: 60
23+
containers:
24+
- name: app
25+
imagePullPolicy: Always
26+
image: klovercloud/service:security-v0.1.0
27+
resources:
28+
requests:
29+
cpu: 66m
30+
memory: 256Mi
31+
limits:
32+
cpu: 200m
33+
memory: 256Mi
34+
envFrom:
35+
- secretRef:
36+
name: klovercloud-mongo-secret
37+
- configMapRef:
38+
name: klovercloud-security-envar-config
39+
ports:
40+
- containerPort: 8080
41+
readinessProbe:
42+
httpGet:
43+
path: /health
44+
port: 8080
45+
initialDelaySeconds: 30
46+
periodSeconds: 10
47+
livenessProbe:
48+
httpGet:
49+
path: /health
50+
port: 8080
51+
initialDelaySeconds: 30
52+
periodSeconds: 10
53+
imagePullSecrets:
54+
- name: regcred-dh

‎k8s/mongo-secret.yml

+9
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
apiVersion: v1
2+
kind: Secret
3+
metadata:
4+
name: klovercloud-mongo-secret
5+
namespace: klovercloud
6+
type: Opaque
7+
stringData:
8+
MONGO_USERNAME: root
9+
MONGO_PASSWORD: admin123

‎k8s/service.yaml

+15
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
name: klovercloud-security
5+
namespace: klovercloud
6+
labels:
7+
app: klovercloud-security
8+
spec:
9+
ports:
10+
- name: http-rest
11+
port: 80
12+
protocol: TCP
13+
targetPort: 8080
14+
selector:
15+
app: klovercloud-security

0 commit comments

Comments
 (0)