pikastech
146 lines
3.7 KiB
YAML
146 lines
3.7 KiB
YAML
version: 1
|
|
kind: platform-infra-temporal
|
|
|
|
metadata:
|
|
id: temporal-shared
|
|
owner: platform-infra
|
|
relatedIssues:
|
|
- 2358
|
|
- 2374
|
|
- 2784
|
|
|
|
defaults:
|
|
targetId: NC01
|
|
|
|
images:
|
|
server: temporalio/auto-setup:1.28.1
|
|
ui: temporalio/ui:2.52.1
|
|
authProxy: caddy:2.10.2-alpine
|
|
pullPolicy: IfNotPresent
|
|
|
|
targets:
|
|
- id: NC01
|
|
route: NC01:k3s
|
|
namespace: temporal
|
|
createNamespace: true
|
|
enabled: true
|
|
|
|
delivery:
|
|
enabled: true
|
|
repositoryRef: sentinel-nc01-v03
|
|
sourceBranch: master
|
|
sourceSnapshotPrefix: refs/unidesk/snapshots/gitea-actions/unidesk-master-nc01
|
|
pipeline:
|
|
name: platform-infra-temporal-nc01-pac
|
|
runPrefix: platform-infra-temporal-nc01-
|
|
namespace: devops-infra
|
|
serviceAccount: default
|
|
timeout: 600s
|
|
gitops:
|
|
readUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
|
|
writeUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-unidesk.git
|
|
auth:
|
|
username: unidesk-admin
|
|
secretName: pac-gitea-sentinel-nc01-v03
|
|
tokenKey: token
|
|
branch: temporal-nc01-gitops
|
|
path: deploy/gitops/platform-infra/temporal-nc01
|
|
manifestPath: deploy/gitops/platform-infra/temporal-nc01/resources.yaml
|
|
author:
|
|
name: unidesk-temporal-ci
|
|
email: unidesk-temporal-ci@unidesk.local
|
|
argo:
|
|
namespace: argocd
|
|
application: platform-infra-temporal-nc01
|
|
project: default
|
|
destinationNamespace: temporal
|
|
automated: true
|
|
materializationPaths:
|
|
- config/platform-infra/temporal.yaml
|
|
- scripts/src/platform-infra-temporal.ts
|
|
- scripts/native/cicd/publish-platform-infra-temporal-gitops.ts
|
|
- .tekton/platform-infra-temporal-nc01-pac.yaml
|
|
|
|
database:
|
|
configRef: config/platform-db/postgres-nc01.yaml
|
|
sourceRef: platform-db/temporal-nc01-db.env
|
|
sourceKeys:
|
|
user: TEMPORAL_DB_USER
|
|
password: TEMPORAL_DB_PASSWORD
|
|
database: TEMPORAL_DB_NAME
|
|
visibilityDatabase: TEMPORAL_VISIBILITY_DB_NAME
|
|
host: 10.42.0.1
|
|
port: 5432
|
|
sslMode: require
|
|
disableHostVerification: true
|
|
skipCreate: true
|
|
secretName: temporal-database
|
|
|
|
runtime:
|
|
server:
|
|
deploymentName: temporal
|
|
serviceName: temporal-frontend
|
|
replicas: 1
|
|
frontendPort: 7233
|
|
dynamicConfigFilePath: /etc/temporal/config/dynamicconfig/docker.yaml
|
|
enableServiceLinks: false
|
|
shareProcessNamespace: true
|
|
ui:
|
|
deploymentName: temporal-ui
|
|
serviceName: temporal-ui
|
|
replicas: 1
|
|
port: 8080
|
|
enableServiceLinks: false
|
|
auth:
|
|
username: admin
|
|
proxyPort: 8081
|
|
secretName: temporal-web-admin
|
|
passwordKey: password
|
|
logicalNamespaces:
|
|
- name: unidesk
|
|
retention: 7d
|
|
rolloutTimeoutSeconds: 300
|
|
|
|
publicExposure:
|
|
enabled: true
|
|
publicBaseUrl: https://temporal.hwpod.com
|
|
hostname: temporal.hwpod.com
|
|
upstream: http://temporal-ui.temporal.svc.cluster.local:8080
|
|
healthPath: /healthz
|
|
expectedA: 152.53.229.148
|
|
|
|
webProbe:
|
|
enabled: true
|
|
productId: temporal
|
|
runner:
|
|
node: NC01
|
|
lane: v03
|
|
origin:
|
|
browserProxyMode: direct
|
|
authentication:
|
|
mode: basic-auth
|
|
path: /namespaces/unidesk/workflows
|
|
authenticatedSelector: body
|
|
credentials:
|
|
configRef: config/secrets-distribution.yaml
|
|
targetId: temporal-nc01
|
|
secretName: temporal-web-admin
|
|
passwordTargetKey: password
|
|
defaultSmokeProfile: admin-readonly
|
|
smokeProfiles:
|
|
admin-readonly:
|
|
path: /namespaces/unidesk/workflows
|
|
readySelector: body
|
|
minimumBodyTextBytes: 32
|
|
screenshotName: temporal-admin-readonly.png
|
|
viewport:
|
|
width: 1920
|
|
height: 1080
|
|
navigationTimeoutMs: 30000
|
|
settleMs: 1000
|
|
commandTimeoutSeconds: 120
|
|
outputLimits:
|
|
failures: 8
|
|
network: 24
|
|
console: 12
|