184 lines
5.4 KiB
YAML
184 lines
5.4 KiB
YAML
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: ams-sync
|
|
namespace: control-interface
|
|
labels:
|
|
app: ams-sync
|
|
service: backend
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: ams-sync
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: ams-sync
|
|
service: backend
|
|
spec:
|
|
containers:
|
|
- name: backend
|
|
image: cr.yandex/crp3ccidau046kdj8g9q/ams-sync:ugok
|
|
command: ["sleep", "999999999999"]
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- name: http
|
|
containerPort: 8000
|
|
protocol: TCP
|
|
env:
|
|
- name: AMS_SYNC_TOPIC
|
|
value: ams-sync
|
|
- name: ENVIRONMENT
|
|
value: PRODUCTION
|
|
- name: HOST_ORGANIZATION_ID
|
|
value: '392748423989716183'
|
|
- name: ALERT_ENABLED
|
|
value: 'False'
|
|
- name: USER_SERVER_HOST
|
|
value: https://sarex.local.uralkali.com
|
|
- name: AUTH_HOST
|
|
value: https://sarex.local.uralkali.com
|
|
- name: VERIFY_USERS
|
|
value: 'True'
|
|
- name: KAFKA_SECURITY_PROTOCOL
|
|
value: SSL
|
|
- name: KAFKA_SASL_MECHANISM
|
|
value: SCRAM-SHA-512
|
|
- name: RESOURCES_INTERNAL_HOST
|
|
value: http://iams.iam.svc.cluster.local:8080
|
|
- name: TELEGRAM_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: telegram-secret
|
|
key: telegram-token
|
|
- name: TELEGRAM_GROUP_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: telegram-secret
|
|
key: telegram-group-id
|
|
- name: ZITADEL_HOST
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: zitadel-token-secret
|
|
key: zitadel-host
|
|
- name: ZITADEL_SERVICE_ACCESS_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: zitadel-token-secret
|
|
key: zitadel-access-token
|
|
- name: KAFKA_BOOTSTRAP_SERVERS
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ams-kafka-secret
|
|
key: kafka-bootstrap-servers
|
|
- name: KAFKA_SASL_PLAIN_USERNAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ams-kafka-secret
|
|
key: kafka-username
|
|
- name: KAFKA_SASL_PLAIN_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ams-kafka-secret
|
|
key: kafka-password
|
|
- name: KAFKA_SSL_CAFILE
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ams-kafka-secret
|
|
key: kafka-ca-file
|
|
- name: AUTH_ADMIN_USERNAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: auth-secret
|
|
key: admin-username
|
|
- name: AUTH_ADMIN_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: auth-secret
|
|
key: admin-password
|
|
- name: USER_DB_NAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: user-db-secret
|
|
key: user-db-name
|
|
- name: USER_DB_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: user-db-secret
|
|
key: user-db-user
|
|
- name: USER_DB_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: user-db-secret
|
|
key: user-db-password
|
|
- name: USER_DB_HOST
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: user-db-secret
|
|
key: user-db-host
|
|
- name: USER_DB_PORT
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: user-db-secret
|
|
key: user-db-port
|
|
imagePullSecrets:
|
|
- name: regcred
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: ams-kafka-secret
|
|
namespace: control-interface
|
|
type: Opaque
|
|
data:
|
|
kafka-bootstrap-servers: WyJicnVzbmlrYS1zdGFnZS1rYWZrYS1ib290c3RyYXAua2Fma2Euc3ZjLmNsdXN0ZXIubG9jYWw6OTA5MyJd
|
|
kafka-ca-file: L2V0Yy9jYS1jZXJ0aWZpY2F0ZXMvWWFuZGV4L1lhbmRleEludGVybmFsUm9vdENBLmNydA==
|
|
kafka-password: bkszNnNhc3ZTZm9JdEpuWFE0cXhhdjJPVVdJUFg1WkM=
|
|
kafka-username: c2FyZXg=
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: auth-secret
|
|
namespace: control-interface
|
|
type: Opaque
|
|
data:
|
|
admin-password: emVhbG90MDk2
|
|
admin-username: aGFnZW4wMTM=
|
|
host: aHR0cHM6Ly9zYXJleC5sb2NhbC51cmFsa2FsaS5jb20=
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: telegram-secret
|
|
namespace: control-interface
|
|
type: Opaque
|
|
data:
|
|
telegram-group-id: LTEwMDIzNTAyNzE=
|
|
telegram-token: NzAyOTgxMDQ2ODpBQUZBUUI1X0Y5TV92R2RndGlXOVBDRzVTUndIcFg2SnNUZw==
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: user-db-secret
|
|
namespace: control-interface
|
|
type: Opaque
|
|
data:
|
|
user-db-host: MTAuMTMzLjAuMjQ5
|
|
user-db-name: c2FyZXhfZGI=
|
|
user-db-password: QXNOUkE3WUhoUVlIWnNCRXFRUVBxRUUwdEU0ZmtwTTU=
|
|
user-db-port: NTQzMg==
|
|
user-db-user: ZGphbmdv
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: zitadel-token-secret
|
|
namespace: control-interface
|
|
type: Opaque
|
|
data:
|
|
zitadel-access-token: OXk5V0VZR05YYm11UXFxQlRjNDFNSTV1Yjc5R3R6VkR0dFZRM2ZiSE5PMnVpQU9YNTAwRzYyN3BDeUk5TEd2Y1Q0TFlHd2w=
|
|
zitadel-host: aHR0cHM6Ly9sb2dpbi5zYXJleC5sb2NhbC51cmFsa2FsaS5jb20=
|