-
Notifications
You must be signed in to change notification settings - Fork 0
/
rundeckpro-deployment.yaml
200 lines (195 loc) · 6.09 KB
/
rundeckpro-deployment.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: rudeckpro-nginx
annotations:
kubernetes.io/ingress.class: "nginx"
#for sticky sessions
nginx.ingress.kubernetes.io/affinity: "cookie"
nginx.ingress.kubernetes.io/session-cookie-name: "route"
nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
spec:
rules:
- host: localhost
http:
paths:
- backend:
serviceName: rundeckpro
servicePort: 8080
path: /
---
apiVersion: v1
kind: Service
metadata:
name: rundeckpro
spec:
type: LoadBalancer
ports:
- protocol: TCP
port: 8080
targetPort: 4440
selector:
app: rundeckpro
externalTrafficPolicy: Local
sessionAffinity: ClientIP
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: rundeckpro
namespace: default
spec:
replicas: 2
template:
metadata:
labels:
app: rundeckpro
spec:
containers:
- name: rundeck
image: rundeckpro/enterprise:SNAPSHOT
args: ["-Dlogging.config=/home/rundeck/server/config/logback.groovy"]
volumeMounts:
- mountPath: /home/rundeck/etc/rundeckpro-license.key
name: license
subPath: rundeckpro-license.key
- mountPath: /home/rundeck/etc/admin-role.aclpolicy
name: acl
subPath: admin-role.aclpolicy
- mountPath: /home/rundeck/server/config/logback.groovy
name: logback
subPath: logback.groovy
- mountPath: /home/rundeck/server/config/log4j.properties
name: log4j
subPath: log4j.properties
env:
- name: RUNDECK_GRAILS_URL
value: "http://localhost"
- name: RUNDECK_DATABASE_DRIVER
value: "com.mysql.jdbc.Driver"
- name: RUNDECK_DATABASE_URL
value: "jdbc:mysql://mysql.default.svc.cluster.local:3306/rundeckdb?autoReconnect=true&useSSL=false"
- name: RUNDECK_DATABASE_USERNAME
value: "rundeck"
- name: RUNDECK_DATABASE_PASSWORD
valueFrom:
secretKeyRef:
name: mysql-rundeckuser
key: password
#STORAGE
- name: RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_NAME
value: "com.rundeck.rundeckpro.amazon-s3"
- name: RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_BUCKET
value: "rundeck"
- name: RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_REGION
value: "us-east-2"
- name: RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_ENDPOINT
value: "http://minio.default.svc.cluster.local:9000"
- name: RUNDECK_PLUGIN_EXECUTIONFILESTORAGE_S3_PATHSTYLE
value: "true"
- name: AWS_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
name: rundeckpro-log-storage
key: awskey
- name: AWS_SECRET_KEY
valueFrom:
secretKeyRef:
name: rundeckpro-log-storage
key: awssecret
#HEARBEAT
- name: RUNDECK_PLUGIN_CLUSTER_HEARTBEAT_CONSIDERDEAD
value: "120"
- name: RUNDECK_PLUGIN_CLUSTER_AUTOTAKEOVER_SLEEP
value: "10"
#TAKEOVER
- name: RUNDECK_PLUGIN_CLUSTER_AUTOTAKEOVER_ENABLED
value: "true"
- name: RUNDECK_PLUGIN_CLUSTER_AUTOTAKEOVER_SLEEP
value: "5"
- name: RUNDECK_PLUGIN_CLUSTER_AUTOTAKEOVER_POLICY
value: "RemoteExecution"
#REMOTE POLICIES
- name: RUNDECK_PLUGIN_CLUSTER_REMOTEEXECUTION_ENABLED
value: "true"
- name: RUNDECK_PLUGIN_CLUSTER_REMOTEEXECUTION_ALLOWEDTAGS
value: "*"
- name: RUNDECK_PLUGIN_CLUSTER_REMOTEEXECUTION_PREFERREDTAGS
value: "linux"
- name: RUNDECK_STORAGE_CONVERTER_1_CONFIG_PASSWORD
valueFrom:
secretKeyRef:
name: rundeckpro-storage-converter
key: masterpassword
- name: RUNDECK_CONFIG_STORAGE_CONVERTER_1_CONFIG_PASSWORD
valueFrom:
secretKeyRef:
name: rundeckpro-storage-converter
key: masterpassword
#LDAP SETTINGS
- name: RUNDECK_JAAS_MODULES_0
value: "JettyCombinedLdapLoginModule"
- name: RUNDECK_JAAS_LDAP_PROVIDERURL
value: "ldap://ldap.default.svc.cluster.local:389"
- name: RUNDECK_JAAS_LDAP_BINDDN
value: "cn=admin,dc=rdtest,dc=com"
- name: RUNDECK_JAAS_LDAP_BINDPASSWORD
valueFrom:
secretKeyRef:
name: ldap-password
key: password
- name: RUNDECK_JAAS_LDAP_USERBASEDN
value: "ou=users,dc=rdtest,dc=com"
- name: RUNDECK_JAAS_LDAP_ROLEBASEDN
value: "ou=roles,dc=rdtest,dc=com"
- name: RUNDECK_JAAS_LDAP_USERLASTNAMEATTRIBUTE
value: "sn"
- name: RUNDECK_JAAS_LDAP_USERFIRSTNAMEATTRIBUTE
value: "givenName"
- name: RUNDECK_JAAS_LDAP_USEREMAILATTRIBUTE
value: "mail"
- name: RUNDECK_SECURITY_SYNCLDAPUSER
value: "true"
ports:
- containerPort: 4440
livenessProbe:
# an http probe
httpGet:
path: /
port: 4440
scheme: HTTP
initialDelaySeconds: 500
periodSeconds: 120
readinessProbe:
httpGet:
path: /
port: 4440
scheme: HTTP
initialDelaySeconds: 10
periodSeconds: 5
volumes:
- name: license
secret:
secretName: rundeckpro-license
items:
- key: rundeckpro-license.key
path: rundeckpro-license.key
- name: acl
secret:
secretName: rundeckpro-admin-acl
items:
- key: admin-role.aclpolicy
path: admin-role.aclpolicy
- name: logback
secret:
secretName: logback
items:
- key: logback.groovy
path: logback.groovy
- name: log4j
secret:
secretName: log4j
items:
- key: log4j.properties
path: log4j.properties