| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| ## Specifies the type of Kubernetes resource, such as "Deployment" or "StatefulSet." |
| deployType: Deployment |
| |
| ## Override the namespace where the resource is deployed. |
| namespaceOverride: ~ |
| |
| ## Labels to attach to the resource. |
| labels: ~ |
| |
| ## Annotations to attach to the resource. |
| annotations: ~ |
| |
| ## Node selector to constrain where the pods can be scheduled. |
| nodeSelector: ~ |
| |
| ## List of image pull secrets for pulling private container images. |
| imagePullSecrets: ~ |
| |
| ## Specifies the cluster's domain name for DNS resolution. |
| clusterDomain: cluster.local |
| |
| ## Number of replicas for the Deployment. |
| replicas: 1 |
| |
| image: |
| # Source of the container image. |
| registry: docker.io/apache/dubbo-admin |
| # Version tag of the container image. |
| tag: 0.5.0 |
| # Image pull policy, available options are: Always, IfNotPresent, Never. |
| pullPolicy: IfNotPresent |
| |
| rbac: |
| # Whether to enable the RBAC. |
| enabled: true |
| # Labels for RBAC resources. |
| labels: ~ |
| # Annotations for RBAC resources. |
| annotations: ~ |
| |
| serviceAccount: |
| # Whether to enable the ServiceAccount. |
| enabled: true |
| # Labels to be applied to the ServiceAccount. |
| labels: ~ |
| # Annotations to be added to the ServiceAccount. |
| annotations: ~ |
| |
| ## Define volume mounts for the application, Each item in the list represents a separate volume mount. |
| volumeMounts: ~ |
| ## Example: |
| # - name: vol |
| # mountPath: /data |
| # readOnly: true |
| |
| ## Define volumes for the application, Each item in the list represents a separate volume. |
| volumes: ~ |
| # - name: vol |
| # hostPath: |
| # path: /data |
| |
| ## Define a ConfigMap for the application, You can create a ConfigMap and specify its name, items, and defaultMode. |
| configMap: ~ |
| # name: config-file |
| # items: |
| # - key: file |
| # path: file |
| # defaultMode: 420 |
| |
| ## Define a Secret for the application, You can create a Secret and specify its name, items, and their corresponding keys and paths. |
| secret: ~ |
| # secretName: secret-file |
| # items: |
| # - key: tls.crt |
| # path: certificate |
| # - key: tls.key |
| # path: private |
| |
| strategy: |
| # Define the strategy for the application's deployment. |
| type: RollingUpdate |
| # Additional configuration for the RollingUpdate strategy can be specified here. |
| rollingUpdate: |
| # Maximum number or percentage of new replicas that can be created during an update. |
| maxSurge: 25% |
| # Maximum number or percentage of replicas that can be unavailable during an update. |
| maxUnavailable: 1 |
| |
| updateStrategy: |
| # Define the update strategy for the application's statefulSet. |
| type: RollingUpdate |
| # Additional configuration for the RollingUpdate update strategy can be specified here. |
| rollingUpdate: ~ |
| |
| ## Minimum time a pod must be ready before being considered available. |
| minReadySeconds: 0 |
| |
| ## Number of old ReplicaSets to retain for the Deployment. |
| revisionHistoryLimit: 10 |
| |
| ## Termination grace period for pods. |
| terminationGracePeriodSeconds: 30 |
| |
| startupProbe: |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 60 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 30 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The path to use for the HTTP GET request. |
| path: / |
| # The port on which the HTTP GET request will be made. |
| port: 8080 |
| |
| readinessProbe: |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 60 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 30 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The path to use for the HTTP GET request. |
| path: / |
| # The port on which the HTTP GET request will be made. |
| port: 8080 |
| |
| livenessProbe: |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 60 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 30 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The path to use for the HTTP GET request. |
| path: / |
| # The port on which the HTTP GET request will be made. |
| port: 8080 |
| |
| ## Define lifecycle hooks for the application container. |
| lifecycleHooks: ~ |
| # postStart: |
| # exec: |
| # command: ["/bin/sh", "-c", "echo Discover Infinite Possibilities, Starting Now! >> /var/log/postStart.log"] |
| # preStop: |
| # exec: |
| # command: ["/bin/sh", "-c", "while true; do echo Shutting down... >> /var/log/postStop.log; sleep 30; done"] |
| |
| service: |
| # Whether to enable the service. |
| enabled: true |
| # Labels to be applied to the service. |
| labels: ~ |
| # Annotations to be added to the service. |
| annotations: ~ |
| # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.). |
| type: ClusterIP |
| # Specifies the ClusterIP for the service, or use "~" to auto-assign. |
| clusterIP: ~ |
| # List of external IPs to associate with the service. |
| externalIPs: ~ |
| # Specifies the IP address for a LoadBalancer service. |
| loadBalancerIP: ~ |
| # Restrict access to the LoadBalancer by IP ranges. |
| loadBalancerSourceRanges: ~ |
| # Specifies the LoadBalancer class (if applicable). |
| loadBalancerClass: ~ |
| # Specifies the session affinity mode (None, ClientIP) |
| sessionAffinity: None |
| # Set to 'true' to publish endpoints for not-ready pods. |
| publishNotReadyAddresses: true |
| # Protocol used by the service. |
| protocol: TCP |
| |
| resources: |
| # Maximum CPU and memory resources allowed for the container. |
| limits: |
| # CPU usage limit. |
| cpu: 1024m |
| # Memory usage limit. |
| memory: 1Gi |
| # Initial CPU and memory resource requests for the container. |
| requests: |
| # CPU usage request. |
| cpu: 512m |
| # Memory usage request. |
| memory: 512Mi |
| |
| ## Define toleration's for the application pods. |
| tolerations: ~ |
| # - key: CriticalAddonsOnly |
| # operator: Exists |
| # - effect: NoSchedule |
| # key: node-role.kubernetes.io/control-plane |
| |
| persistence: |
| # Whether to enable the persistence volume. |
| enabled: false |
| # Labels to be applied to the persistence volume. |
| labels: ~ |
| # Annotations to be added to the persistence volume. |
| annotations: ~ |
| # Name of the PersistentVolumeClaim. |
| claimName: "" |
| # Storage class for the PersistentVolumeClaim. |
| storageclass: "" |
| # Size of the PersistentVolumeClaim. |
| size: 5Gi |
| # Access modes for the PersistentVolumeClaim. |
| accessModes: ReadWriteOnce |
| |
| securityContext: |
| # Specifies the user ID under which the container should run. |
| runAsUser: 1000 |
| # Specifies the user ID under which the container should run. |
| runAsGroup: 1000 |
| # Set to 'true' to run the container as a non-root user. |
| runAsNonRoot: false |
| # Prevent the container from writing to the root file system. |
| readOnlyRootFilesystem: true |
| # Set to 'false' to disallow privilege escalation for the container. |
| allowPrivilegeEscalation: false |
| |
| podDisruptionBudget: |
| # Whether to enable the PDB. |
| enabled: false |
| # Labels to be applied to the PDB. |
| labels: ~ |
| # Annotations to be added to the PDB. |
| annotations: ~ |
| # Minimum number of pods that must be available during disruptions. |
| minAvailable: 1 |
| # Maximum number of pods that can be unavailable during disruptions. |
| maxUnavailable: 1 |
| # Unhealthy Pod Eviction Policy when PDB is disabled (IfHealthyBudget or DoNotEvict). |
| unhealthyPodEvictionPolicy: IfHealthyBudget |
| |
| podSecurityPolicy: |
| # Whether to enable the PSP. |
| enabled: false |
| # Labels to be applied to the PSP. |
| labels: ~ |
| # Annotations to be added to the PSP. |
| annotations: ~ |
| |
| networkPolicy: |
| # Whether to enable the network policies. |
| enabled: false |
| # Labels to be applied to the network policy. |
| labels: ~ |
| # Annotations to be added to the network policy |
| annotations: ~ |
| # Define the pod selector for network policy. |
| podSelector: ~ |
| # Define ingress rules for network policy. |
| ingress: ~ |
| # - from: |
| # - ipBlock: |
| # cidr: 172.16.0.0/16 |
| # except: |
| # - 172.16.1.0/24 |
| # - podSelector: |
| # matchLabels: |
| # role: admin |
| # - namespaceSelector: |
| # matchLabels: |
| # role: frontend |
| # ports: |
| # - port: 10001 |
| # endPort: 10002 |
| # protocol: TCP |
| # Define egress rules for network policy. |
| egress: ~ |
| # - ports: |
| # - port: 10001 |
| # endPort: 10002 |
| # protocol: TCP |
| # to: |
| # - ipBlock: |
| # cidr: 172.16.0.0/16 |
| # - podSelector: |
| # matchLabels: |
| # role: db |
| # - namespaceSelector: |
| # matchExpressions: |
| # - key: namespace |
| # operator: In |
| # values: |
| # - frontend |
| # - backend |
| |
| jobs: |
| # Override the namespace where the resource is deployed. |
| namespaceOverride: ~ |
| # Labels to attach to the resource. |
| labels: ~ |
| # Annotations to attach to the resource. |
| annotations: ~ |
| # Specify the restart policy (OnFailure, Never, Always, etc.). |
| restartPolicy: OnFailure |
| |
| image: |
| # Source of the container image. |
| registry: docker.io/bitnami/kubectl |
| # Version tag of the container image. |
| tag: 1.28.4 |
| # Image pull policy, available options are: Always, IfNotPresent, Never. |
| pullPolicy: IfNotPresent |
| |
| auth: |
| ## Whether to enable the control-plane auth control. |
| enabled: false |
| |
| authorization: |
| # Specify the action for authorization (DENY, ALLOW, etc.) |
| action: DENY |
| |
| # Specify the match type for authorization (anyMatch, allMatch, etc.) |
| matchType: anyMatch |
| |
| # Specify the match type for authorization rule sampling rate has a range of 0 to 100. |
| samples: 0 |
| |
| authentication: |
| # Specify the action for authentication (STRICT, PERMISSIVE, etc.) |
| action: STRICT |
| |
| # Specify the action for authentication port number for applying the authentication policy |
| port: 38080 |
| |
| traffic: |
| ## Whether to enable the traffic. |
| enabled: false |
| |
| conditionRoute: |
| # Supports service and application scope rules. |
| scope: service |
| # Whether enable this rule or not, set enabled:false to disable this rule. |
| enabled: true |
| # The behaviour when the instance subset is empty after routing. |
| force: true |
| # Whether run routing rule for every rpc invocation or use routing cache if available. |
| runtime: true |
| # Specify the specific priority for traffic (adjust within the range 1 ~ 100). |
| priority: 100 |
| # The version of the condition rule definition, currently available version is v3.0. |
| configVersion: v3.0 |
| # The identifier of the target service or application that this rule is about to apply to. |
| # If scope:service is set, then keyshould be specified as the Dubbo service key that this rule targets to control. |
| # If scope:application is set, then keyshould be specified as the name of the application that this rule targets to control, application should always be a Dubbo Consumer. |
| key: org.apache.dubbo.samples.CommentService |
| # The condition routing rule definition of this configuration. Check Condition for details. |
| conditions: method=getComment => region=Hangzhou |
| |
| dynamicConfig: |
| # Supports service and application scope rules. |
| scope: service |
| # The version of the tag rule definition, currently available version is v3.0. |
| configVersion: v3.0 |
| # The identifier of the target service or application that this rule is about to apply to. |
| # If scope:service is set, then keyshould be specified as the Dubbo service key that this rule targets to control. |
| # If scope:application is set, then keyshould be specified as the name of the application that this rule targets to control, application should always be a Dubbo Consumer. |
| key: org.apache.dubbo.samples.UserService |
| # Especially useful when scope:service is set. |
| # side: providermeans this Config will only take effect on the provider instances of the service key. |
| # side: consumermeans this Config will only take effect on the consumer instances of the service key |
| side: consumer |
| # The application matching condition for this config rule to take effect. |
| # Effective when scope:service is set. |
| # https://github.com/google/re2/wiki/Syntax. |
| # exact: value for exact string |
| exact: shop-frontend |
| |
| tagRoute: |
| # The name of the tag used to match the dubbo tag value in the request context. |
| name: gray |
| # Whether enable this rule or not, set enabled:false to disable this rule. |
| enabled: false |
| # The behaviour when the instance subset is empty after routing. |
| force: true |
| # The version of the tag rule definition, currently available version is v3.0. |
| configVersion: v3.0 |
| # Specify the specific priority for traffic (adjust within the range 1 ~ 100). |
| priority: 99 |
| # The identifier of the target application that this rule is about to control. |
| key: details |
| |
| observable: |
| ## Whether to enable the observability. |
| enabled: true |
| |
| zookeeper: |
| ## Whether to enable the zookeeper. |
| enabled: false |
| |
| ## Override the namespace where the resource is deployed. |
| namespaceOverride: ~ |
| |
| ## Labels to attach to the resource. |
| labels: ~ |
| |
| ## Annotations to attach to the resource. |
| annotations: ~ |
| |
| ## Specifies the cluster's domain name for DNS resolution. |
| clusterDomain: cluster.local |
| |
| ## Number of replicas for the Deployment. |
| replicas: 1 |
| |
| image: |
| # Source of the container image. |
| registry: docker.io/bitnami/zookeeper |
| # Version tag of the container image. |
| tag: 3.8.1-debian-11-r18 |
| # Image pull policy, available options are: Always, IfNotPresent, Never. |
| pullPolicy: IfNotPresent |
| # Set to 'true' to enable debug mode for the image. |
| debug: false |
| |
| securityContext: |
| # Whether to enable the security context. |
| enabled: true |
| # Defines the POSIX group ID that owns the pod's volumes. |
| fsGroup: 1001 |
| |
| containerSecurityContext: |
| # Whether to enable the container security context. |
| enabled: true |
| # Specifies the user ID under which the container should run. |
| runAsUser: 1001 |
| # Set to 'true' to run the container as a non-root user. |
| runAsNonRoot: true |
| # Set to 'false' to disallow privilege escalation for the container. |
| allowPrivilegeEscalation: false |
| |
| service: |
| # Labels to be applied to the service. |
| labels: ~ |
| # Annotations to be added to the service. |
| annotations: ~ |
| # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.). |
| type: ClusterIP |
| # Specifies the ClusterIP for the service, or use "~" to auto-assign. |
| clusterIP: ~ |
| # List of external IPs to associate with the service. |
| externalIPs: ~ |
| # Specifies the IP address for a LoadBalancer service. |
| loadBalancerIP: ~ |
| # Restrict access to the LoadBalancer by IP ranges. |
| loadBalancerSourceRanges: ~ |
| # Specifies the LoadBalancer class (if applicable). |
| loadBalancerClass: ~ |
| # Specifies the session affinity mode (None, ClientIP) |
| sessionAffinity: None |
| # Set to 'true' to publish endpoints for not-ready pods. |
| publishNotReadyAddresses: true |
| |
| resources: |
| # Maximum CPU and memory resources allowed for the container. |
| limits: |
| # CPU usage limit. |
| cpu: 250m |
| # Memory usage limit. |
| memory: 256Mi |
| # Initial CPU and memory resource requests for the container. |
| requests: |
| # CPU usage request. |
| cpu: 250m |
| # Memory usage request. |
| memory: 256Mi |
| |
| startupProbe: |
| # Number of consecutive failures before marking the container as unhealthy. |
| failureThreshold: 6 |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 5 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 5 |
| exec: |
| # Run the specified command to check. |
| command: [ '/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2 localhost 2181 | grep imok' ] |
| |
| readinessProbe: |
| # Number of consecutive failures before marking the container as unhealthy. |
| failureThreshold: 6 |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 5 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 5 |
| exec: |
| # Run the specified command to check. |
| command: [ '/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2 localhost 2181 | grep imok' ] |
| |
| livenessProbe: |
| # Number of consecutive failures before marking the container as unhealthy. |
| failureThreshold: 6 |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 30 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 5 |
| exec: |
| # Run the specified command to check. |
| command: [ '/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2 localhost 2181 | grep imok' ] |
| |
| # This allows a dedicated log device to be used, and helps avoid competition between logging and snapshots. |
| dataLogDir: "" |
| # tickTime Basic time unit (in milliseconds) used by ZooKeeper for heartbeats. |
| tickTime: 2000 |
| # initLimit ZooKeeper uses to limit the length of time the ZooKeeper servers in quorum have to connect to a leader. |
| initLimit: 10 |
| # syncLimit How far out of date a server can be from a leader. |
| syncLimit: 5 |
| # preAllocSize Block size for transaction log file. |
| preAllocSize: 65536 |
| # snapCount The number of transactions recorded in the transaction log before a snapshot can be taken (and the transaction log rolled). |
| snapCount: 100000 |
| # fourlwCommandsWhitelist A list of comma separated Four Letter Words commands that can be executed. |
| fourlwCommandsWhitelist: srvr, mntr, ruok |
| # listenOnAllIPs Allow ZooKeeper to listen for connections from its peers on all available IP addresses. |
| listenOnAllIPs: false |
| # Ongoing data directory cleanup configuration |
| autopurge: |
| # snapRetainCount The most recent snapshots amount (and corresponding transaction logs) to retain. |
| snapRetainCount: 3 |
| # purgeInterval The time interval (in hours) for which the purge task has to be triggered. |
| purgeInterval: 0 |
| # maxClientCnxns Limits the number of concurrent connections that a single client may make to a single member of the ZooKeeper ensemble. |
| maxClientCnxns: 60 |
| # maxSessionTimeout Maximum session timeout (in milliseconds) that the server will allow the client to negotiate. |
| maxSessionTimeout: 40000 |
| # heapSize Size (in MB) for the Java Heap options (Xmx and Xms). |
| heapSize: 1024 |
| # logLevel Log level for the ZooKeeper server. ERROR by default. |
| logLevel: ERROR |
| # authentication parameters. |
| auth: |
| # authentication client settings. |
| client: |
| # auth.client.enabled Enable ZooKeeper client-server authentication. It uses SASL/Digest-MD5. |
| enabled: false |
| # auth.client.clientUser User that will use ZooKeeper clients to auth. |
| clientUser: "" |
| # auth.client.clientPassword Password that will use ZooKeeper clients to auth. |
| clientPassword: "" |
| # auth.client.serverUsers Comma, semicolon or whitespace separated list of user to be created. |
| serverUsers: "" |
| # auth.client.serverPasswords Comma, semicolon or whitespace separated list of passwords to assign to users when created. |
| serverPasswords: "" |
| # auth.client.existingSecret Use existing secret (ignores previous passwords). |
| existingSecret: "" |
| # authentication quorum settings. |
| quorum: |
| # auth.quorum.enabled Enable ZooKeeper server-server authentication. It uses SASL/Digest-MD5. |
| enabled: false |
| # auth.quorum.learnerUser User that the ZooKeeper quorumLearner will use to authenticate to quorumServers. |
| learnerUser: "" |
| # auth.quorum.learnerPassword Password that the ZooKeeper quorumLearner will use to authenticate to quorumServers. |
| learnerPassword: "" |
| # auth.quorum.serverUsers Comma, semicolon or whitespace separated list of users for the quorumServers. |
| serverUsers: "" |
| # auth.quorum.serverPasswords Comma, semicolon or whitespace separated list of passwords to assign to users when created. |
| serverPasswords: "" |
| # auth.quorum.existingSecret Use existing secret (ignores previous passwords). |
| existingSecret: "" |
| |
| nacos: |
| ## Whether to enable the nacos. |
| enabled: true |
| |
| ## Specifies the mode in which nacos is running (standalone, cluster, etc.). |
| mode: standalone |
| |
| ## Override the namespace where the resource is deployed. |
| namespaceOverride: ~ |
| |
| ## Labels to attach to the resource. |
| labels: ~ |
| |
| ## Annotations to attach to the resource. |
| annotations: ~ |
| |
| ## Specifies the cluster's domain name for DNS resolution. |
| clusterDomain: cluster.local |
| |
| ## Number of replicas for the Deployment. |
| replicas: 1 |
| |
| plugin: |
| # Whether to enable the plugin. |
| enabled: true |
| # Configure the container image for the plugin. |
| image: |
| # Docker registry where the plugin image is hosted. |
| registry: nacos/nacos-peer-finder-plugin |
| # Specifies the image tag to use. |
| tag: 1.1 |
| # Image pull policy (IfNotPresent, Always, Never). |
| pullPolicy: IfNotPresent |
| |
| image: |
| # Source of the container image. |
| registry: docker.io/nacos/nacos-server |
| # Version tag of the container image. |
| tag: v2.2.3 |
| # Image pull policy, available options are: Always, IfNotPresent, Never. |
| pullPolicy: IfNotPresent |
| |
| securityContext: |
| # Whether to enable the security context. |
| enabled: true |
| # Defines the POSIX group ID that owns the pod's volumes. |
| fsGroup: 1001 |
| |
| containerSecurityContext: |
| # Whether to enable the container security context. |
| enabled: true |
| # Specifies the user ID under which the container should run. |
| runAsUser: 1001 |
| # Set to 'true' to run the container as a non-root user. |
| runAsNonRoot: true |
| # Set to 'false' to disallow privilege escalation for the container. |
| allowPrivilegeEscalation: false |
| |
| service: |
| # Labels to be applied to the service. |
| labels: ~ |
| # Annotations to be added to the service. |
| annotations: ~ |
| # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.). |
| type: NodePort |
| # Specifies the ClusterIP for the service, or use "~" to auto-assign. |
| clusterIP: ~ |
| # List of external IPs to associate with the service. |
| externalIPs: ~ |
| # Specifies the IP address for a LoadBalancer service. |
| loadBalancerIP: ~ |
| # Restrict access to the LoadBalancer by IP ranges. |
| loadBalancerSourceRanges: ~ |
| # Specifies the LoadBalancer class (if applicable). |
| loadBalancerClass: ~ |
| # Specifies the session affinity mode (None, ClientIP) |
| sessionAffinity: None |
| # Set to 'true' to publish endpoints for not-ready pods. |
| publishNotReadyAddresses: true |
| |
| startupProbe: |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 180 |
| # How often to perform the probe. |
| periodSeconds: 5 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 10 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The protocol used for the HTTP GET request (HTTP, HTTPS). |
| scheme: HTTP |
| # The port on which the HTTP GET request will be made. |
| port: 8848 |
| # The path to use for the HTTP GET request. |
| path: /nacos/v1/console/health/readiness |
| |
| readinessProbe: |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 10 |
| # How often to perform the probe. |
| periodSeconds: 5 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 10 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The protocol used for the HTTP GET request (HTTP, HTTPS). |
| scheme: HTTP |
| # The port on which the HTTP GET request will be made. |
| port: 8848 |
| # The path to use for the HTTP GET request. |
| path: /nacos/v1/console/health/readiness |
| |
| livenessProbe: |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 10 |
| # How often to perform the probe. |
| periodSeconds: 5 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 10 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The protocol used for the HTTP GET request (HTTP, HTTPS). |
| scheme: HTTP |
| # The port on which the HTTP GET request will be made. |
| port: 8848 |
| # The path to use for the HTTP GET request. |
| path: /nacos/v1/console/health/liveness |
| |
| resources: |
| # Maximum CPU and memory resources allowed for the container. |
| limits: |
| # CPU usage limit. |
| cpu: ~ |
| # Memory usage limit. |
| memory: ~ |
| # Initial CPU and memory resource requests for the container. |
| requests: |
| # CPU usage request. |
| cpu: ~ |
| # Memory usage request. |
| memory: ~ |
| |
| # Specifies the port on which the server should run. |
| serverPort: 8848 |
| |
| # Specifies the preferred host mode (e.g., 'hostname'). |
| preferhostmode: ~ |
| |
| storage: |
| # Specifies the storage type (embedded, mysql, etc.). |
| type: embedded |
| # For MySQL storage, you need to change the "embedded" to "mysql" before you can use the db configuration. |
| db: |
| # Specifies the database host. |
| host: localhost |
| # Specifies the database name. |
| name: nacos |
| # Specifies the database port. |
| port: 3306 |
| # Specifies the database username. |
| username: mysql |
| # Specifies the database password. |
| password: passw0rd |
| # Additional database connection parameters (if needed). |
| param: "" |
| |
| ingress: |
| ## Whether to enable the ingress. |
| enabled: false |
| |
| hosts: |
| # Specify the host for the admin Ingress |
| admin: admin.k8s.example |
| # Specify the host for the Prometheus Ingress |
| prometheus: prom.k8s.example |
| # Specify the host for the Grafana Ingress |
| grafana: grafana.k8s.example |
| |
| ## Override the name of the resource. |
| nameOverride: ~ |
| |
| ## Override the namespace where the resource is deployed. |
| namespaceOverride: ~ |
| |
| ## Labels to attach to the resource. |
| labels: ~ |
| |
| ## Annotations to attach to the resource. |
| annotations: ~ |
| |
| ## Node selector to constrain where the pods can be scheduled. |
| nodeSelector: ~ |
| |
| ## Number of replicas for the Deployment. |
| replicas: 1 |
| |
| image: |
| # Source of the container image. |
| registry: docker.io/traefik |
| # Version tag of the container image. |
| tag: v2.10.4 |
| # Image pull policy, available options are: Always, IfNotPresent, Never. |
| pullPolicy: IfNotPresent |
| |
| readinessProbe: |
| # Number of consecutive failures before marking the container as unhealthy. |
| failureThreshold: 1 |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 2 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 2 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The path to use for the HTTP GET request. |
| path: /ping |
| # The port on which the HTTP GET request will be made. |
| port: 9000 |
| # The protocol used for the HTTP GET request (HTTP, HTTPS). |
| scheme: HTTP |
| |
| livenessProbe: |
| # Number of consecutive failures before marking the container as unhealthy. |
| failureThreshold: 3 |
| # Delay before the probe is initiated. |
| initialDelaySeconds: 2 |
| # How often to perform the probe. |
| periodSeconds: 10 |
| # Minimum consecutive successes for the probe to be considered successful. |
| successThreshold: 1 |
| # Time to wait for the probe to complete. |
| timeoutSeconds: 2 |
| # Perform an HTTP GET request to check. |
| httpGet: |
| # The path to use for the HTTP GET request. |
| path: /ping |
| # The port on which the HTTP GET request will be made. |
| port: 9000 |
| # The protocol used for the HTTP GET request (HTTP, HTTPS). |
| scheme: HTTP |
| |
| strategy: |
| # Additional configuration for the RollingUpdate strategy can be specified here. |
| rollingUpdate: |
| # Maximum number of pods that can be created above the desired replica count. |
| maxSurge: 1 |
| # Maximum number of pods that can be unavailable during the update. |
| maxUnavailable: 0 |
| |
| securityContext: |
| # Specifies the user ID under which the container should run. |
| runAsUser: 65532 |
| # Specifies the group ID under which the container should run. |
| runAsGroup: 65532 |
| # Set to 'true' to run the container as a non-root user. |
| runAsNonRoot: true |
| |
| containersecurityContext: |
| # Configure Linux capabilities for the container. |
| capabilities: |
| # Drop all capabilities |
| drop: |
| - ALL |
| # Prevent the container from writing to the root file system. |
| readOnlyRootFilesystem: true |
| # Set to 'false' to disallow privilege escalation for the container. |
| allowPrivilegeEscalation: false |
| |
| resources: |
| # Maximum CPU and memory resources allowed for the container. |
| limits: |
| # CPU usage limit. |
| cpu: 100m |
| # Memory usage limit. |
| memory: 100Mi |
| # Initial CPU and memory resource requests for the container. |
| requests: |
| # CPU usage request. |
| cpu: 100m |
| # Memory usage request. |
| memory: 100Mi |