icecheng/freeleaps-ops
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'master' of https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops

Browse Source
This commit is contained in:
zhenyus 2025-07-31 23:58:55 +08:00
commit 16bfcf1e5c
2 changed files with 79 additions and 129 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

194
freeleaps-devops-reconciler/helm-pkg/reconciler/values.alpha.yaml
View File

@ -1,41 +1,33 @@
# Default values for freeleaps-devops-reconciler
replicaCount: 1 replicaCount: 1
reconciler: reconciler:
image: image:
repository: freeleaps/reconciler repository: null
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
tag: "1.1.0" tag: 1.1.1
registry: docker.io
name: reconciler
imagePullSecrets: [] imagePullSecrets: []
nameOverride: "" nameOverride: ''
fullnameOverride: "" fullnameOverride: ''
# Operator Configuration
operator: operator:
clusterwide: false clusterwide: false
priority: 100 priority: 100
peeringName: "freeleaps-devops-reconciler" peeringName: freeleaps-devops-reconciler
namespaces: namespaces:
- "freeleaps-devops-system" - freeleaps-devops-system
debug: false debug: false
serviceAccount: serviceAccount:
create: true create: true
annotations: {} annotations: {}
name: "" name: ''
rbac: rbac:
create: true create: true
additionalRules: [] additionalRules: []
podAnnotations: {} podAnnotations: {}
podSecurityContext: podSecurityContext:
fsGroup: 1000 fsGroup: 1000
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000 runAsUser: 1000
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
@ -44,15 +36,13 @@ securityContext:
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000 runAsUser: 1000
service: service:
type: ClusterIP type: ClusterIP
port: 8080 port: 8080
targetPort: 8080 targetPort: 8080
ingress: ingress:
enabled: false enabled: false
className: "" className: ''
annotations: {} annotations: {}
hosts: hosts:
- host: devops-reconciler.local - host: devops-reconciler.local
@ -60,7 +50,6 @@ ingress:
- path: / - path: /
pathType: Prefix pathType: Prefix
tls: [] tls: []
resources: resources:
limits: limits:
cpu: 500m cpu: 500m
@ -68,116 +57,85 @@ resources:
requests: requests:
cpu: 100m cpu: 100m
memory: 128Mi memory: 128Mi
nodeSelector: {} nodeSelector: {}
tolerations: [] tolerations: []
affinity: {} affinity: {}
# Environment Configuration
env: env:
# General Configuration reconcilerDebug: 'false'
reconcilerDebug: "false" defaultHttpTimeout: 30s
defaultHttpTimeout: "30s" k8sClusterDomain: kubernetes.default.svc.freeleaps.cluster
k8sClusterDomain: "kubernetes.default.svc.freeleaps.cluster" kubernetesApiTimeout: 30s
kubernetesApiTimeout: "30s" autoDiscoverK8sClusterDomainMaxRetries: '5'
autoDiscoverK8sClusterDomainMaxRetries: "5" logLevel: INFO
logLevel: "INFO" logFormat: text
logFormat: "text" operatorNamespace: freeleaps-devops-system
operatorNamespace: "freeleaps-devops-system" reconcileInterval: 30s
reconcileInterval: "30s" allowHttpGitUrls: 'false'
allowHttpGitUrls: "false"
# RabbitMQ Configuration
rabbitmq: rabbitmq:
host: "freeleaps-alpha-rabbitmq-cluster.freeleaps-alpha.svc.freeleaps.cluster" host: freeleaps-alpha-rabbitmq-cluster.freeleaps-alpha.svc.freeleaps.cluster
port: "5672" port: '5672'
vhost: "/" vhost: /
inputQueue: "freeleaps.devops.reconciler.input" inputQueue: freeleaps.devops.reconciler.input
outputQueue: "freeleaps.devops.reconciler.output" outputQueue: freeleaps.devops.reconciler.output
enableExchangeBinding: "true" enableExchangeBinding: 'true'
inputExchange: "freeleaps.notification.exchange" inputExchange: freeleaps.notification.exchange
inputExchangeType: "direct" inputExchangeType: direct
inputRoutingKey: "freeleaps.devops.reconciler.input" inputRoutingKey: freeleaps.devops.reconciler.input
outputExchange: "freeleaps.notification.exchange" outputExchange: freeleaps.notification.exchange
outputRoutingKey: "freeleaps.devops.reconciler.output" outputRoutingKey: freeleaps.devops.reconciler.output
# Jenkins Configuration
jenkins: jenkins:
endpoint: "http://jenkins.freeleaps-devops-system.svc.freeleaps.cluster:8080" endpoint: http://jenkins.freeleaps-devops-system.svc.freeleaps.cluster:8080
apiTimeout: "30" apiTimeout: '30'
folderCreationRetryCount: "3" folderCreationRetryCount: '3'
# ArgoCD Configuration
argocd: argocd:
endpoint: "http://argocd-server.freeleaps-devops-system.svc.freeleaps.cluster:80" endpoint: http://argocd-server.freeleaps-devops-system.svc.freeleaps.cluster:80
apiTimeout: "30" apiTimeout: '30'
resourceCreationTimeout: "300" resourceCreationTimeout: '300'
# Network Resource Management
networkResources: networkResources:
domainTemplate: "{env}.{project_id}.internalmathmast.com" domainTemplate: '{env}.{project_id}.internalmathmast.com'
ingressClassName: "nginx" ingressClassName: nginx
certManagerClusterIssuer: "internal-mathmast-com" certManagerClusterIssuer: internal-mathmast-com
ingressControllerIp: "4.155.160.32" ingressControllerIp: 4.155.160.32
dnsCreationTimeout: "300" dnsCreationTimeout: '300'
certificateIssuanceTimeout: "600" certificateIssuanceTimeout: '600'
ingressReadyTimeout: "300" ingressReadyTimeout: '300'
networkResourceCleanupTimeout: "300" networkResourceCleanupTimeout: '300'
networkResourceRetryCount: "3" networkResourceRetryCount: '3'
networkResourceRetryDelay: "30" networkResourceRetryDelay: '30'
# Secret data
secrets: secrets:
# RabbitMQ credentials
rabbitmqCredentials: rabbitmqCredentials:
username: "user" username: user
password: "4O80YlxnlhHrjzaM" password: 4O80YlxnlhHrjzaM
# Jenkins credentials
jenkinsCredentials: jenkinsCredentials:
username: "admin" username: admin
token: "119fe346a7d5e1fc7f9ed4d98eac3e73ee" token: 119fe346a7d5e1fc7f9ed4d98eac3e73ee
# ArgoCD credentials
argocdCredentials: argocdCredentials:
username: "admin" username: admin
password: "ELvjjaHupgWomLj9" password: ELvjjaHupgWomLj9
# Default Git credentials
defaultGitCredentials: defaultGitCredentials:
username: "freeleaps" username: freeleaps
password: "r8sA8CPHD9!bt6d" password: r8sA8CPHD9!bt6d
# Default Docker Registry credentials
defaultDockerRegistryCredentials: defaultDockerRegistryCredentials:
username: "freeleapsdevops" username: freeleapsdevops
password: "dckr_pat_y-KsBOwcEGTdCQDsAb-NBz9_beg" password: dckr_pat_y-KsBOwcEGTdCQDsAb-NBz9_beg
# Docker Registry PAT credentials
dockerRegistryPat: dockerRegistryPat:
username: "freeleapsdevops" username: freeleapsdevops
token: "dckr_pat_UHFbzDZk-gZSM2UhRgnmTCMis9g" token: dckr_pat_UHFbzDZk-gZSM2UhRgnmTCMis9g
# Azure Key Vault configuration
azureKeyVault: azureKeyVault:
endpoint: "https://freeleaps-secrets.vault.azure.net/" endpoint: https://freeleaps-secrets.vault.azure.net/
clientId: "b6be5b92-25a8-482d-8dcd-7321bf2f83d9" clientId: b6be5b92-25a8-482d-8dcd-7321bf2f83d9
clientSecret: "4Nx8Q~fYFM~V~3otsN7YB4GPRQ0R8CHJ7XtpLcVA" clientSecret: 4Nx8Q~fYFM~V~3otsN7YB4GPRQ0R8CHJ7XtpLcVA
tenantId: "cf151ee8-5c2c-4fe7-a1c4-809ba43c9f24" tenantId: cf151ee8-5c2c-4fe7-a1c4-809ba43c9f24
subscriptionId: "0a280068-dec4-4bf0-9f04-65b64f412b50" subscriptionId: 0a280068-dec4-4bf0-9f04-65b64f412b50
resourceGroup: "k8s" resourceGroup: k8s
name: "freeleaps-secrets" name: freeleaps-secrets
# Azure DNS configuration
azureDns: azureDns:
subscriptionId: "0a280068-dec4-4bf0-9f04-65b64f412b50" subscriptionId: 0a280068-dec4-4bf0-9f04-65b64f412b50
tenantId: "cf151ee8-5c2c-4fe7-a1c4-809ba43c9f24" tenantId: cf151ee8-5c2c-4fe7-a1c4-809ba43c9f24
clientId: "b6be5b92-25a8-482d-8dcd-7321bf2f83d9" clientId: b6be5b92-25a8-482d-8dcd-7321bf2f83d9
clientSecret: "4Nx8Q~fYFM~V~3otsN7YB4GPRQ0R8CHJ7XtpLcVA" clientSecret: 4Nx8Q~fYFM~V~3otsN7YB4GPRQ0R8CHJ7XtpLcVA
resourceGroup: "k8s" resourceGroup: k8s
zoneName: "internalmathmast.com" zoneName: internalmathmast.com
# Monitoring
monitoring: monitoring:
serviceMonitor: serviceMonitor:
enabled: false enabled: false
@ -187,8 +145,6 @@ monitoring:
grafanaDashboard: grafanaDashboard:
enabled: false enabled: false
labels: {} labels: {}
# Health checks
healthcheck: healthcheck:
livenessProbe: livenessProbe:
enabled: true enabled: true
@ -208,21 +164,15 @@ healthcheck:
periodSeconds: 5 periodSeconds: 5
timeoutSeconds: 3 timeoutSeconds: 3
failureThreshold: 3 failureThreshold: 3
# Deployment strategy
strategy: strategy:
type: RollingUpdate type: RollingUpdate
rollingUpdate: rollingUpdate:
maxUnavailable: 1 maxUnavailable: 1
maxSurge: 1 maxSurge: 1
# Network Policy
networkPolicy: networkPolicy:
enabled: false enabled: false
ingress: [] ingress: []
egress: [] egress: []
# CRDs Management
crds: crds:
install: false install: false
keep: true keep: true

2
freeleaps/helm-pkg/devops/values.alpha.yaml
View File

@ -10,7 +10,7 @@ devops:
registry: docker.io registry: docker.io
repository: null repository: null
name: devops name: devops
tag: snapshot-311fd21 tag: snapshot-12a0d9a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
ports: ports:
- name: http - name: http