Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~$ helm --kube-context rcsdstbl -n isys-efr get values cdi-person-service-rumsk1
USER-SUPPLIED VALUES:
additionalLabels:
isys: efr
psvc: cdi-person-service
version: 6.9.2
additionalPodAnnotations:
inject.istio.io/templates: sidecar,custom
prometheus.io/path: /metrics
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
sidecar.istio.io/proxyCPU: 100m
sidecar.istio.io/proxyCPULimit: 400m
sidecar.istio.io/proxyMemory: 128Mi
sidecar.istio.io/proxyMemoryLimit: 512Mi
sidecar.istio.io/userVolume: '[{"name": "wasmfilters-dir","configMap": {"name":
"efr-envoy-filters"}}]'
sidecar.istio.io/userVolumeMount: '[{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]'
additionalWorkloadAnnotations:
gitlabCommit: 13869b63b0ab42012f09a79242fe7c6def13a86d
gitlabPipeline: https://gitlab.rshbdev.ru/rshbintech/retail/frontsystem/efr/biz/cdi-person-service/-/pipelines/3228052
platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 13869b63
platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3228052"
configMapsEnvChangeTriggersRestart: true
containers:
app:
appVersion: 6.9.2
config: ""
dynamicConfig: ""
env:
ACCESS_TOKEN_JWKS_URL: https://tst-espp-ap13.go.rshbank.ru/ek_am/efr4rf/.well
APP_POSTGRESQL_PRIMARY_HOST: 10.21.16.7
APP_POSTGRESQL_PRIMARY_NAME: efr_client_rtest
APP_POSTGRESQL_PRIMARY_PORT: 5432
APP_POSTGRESQL_SECONDARY_HOST: 10.21.16.7
APP_POSTGRESQL_SECONDARY_NAME: efr_client_rtest
APP_POSTGRESQL_SECONDARY_PORT: 5432
AUTH_TOKEN_EXP_TIME: 60
JAVA_OPTS: -XX:MaxRAMPercentage=75.0 -XX:MinRAMPercentage=75.0 -Duser.timezone=Europe/Moscow
KEYCLOAK_GRANT_TYPE: client_credentials
KEYCLOAK_REALM: platform
KEYCLOAK_URL: https://auth.rshbdev.ru/auth/
KEYCLOAK_USERNAME: service-account-isys-efr-dev-client
LOGGING_APPLICATION_ID: 75
LOGGING_EXCHANGE_LOG: JMS
LOGGING_JMS_BROKER_URL: failover:(tcp://10.21.21.90:61616,tcp://10.21.21.91:61616)?randomize=false&priorityBackup=true&jms.connectResponseTimeout=30000&maxReconnectAttempts=5
LOGGING_JMS_MESSAGE_LIFETIME: 10000
LOGGING_JMS_QUEUE_NAME: systemjournal.event
LOGGING_OPERATION_LOG: JMS
LOGGING_SETTINGS_SERVICE_TIMEOUT: 1
LOGGING_SYSTEM_LOG: JMS
TRANSPORT_QUEUE_BROKER_URL: failover:(tcp://10.21.16.9:61616,tcp://10.21.21.48:61616)?randomize=false&priorityBackup=true&jms.connectResponseTimeout=30000&maxReconnectAttempts=5&jms.prefetchPolicy.queuePrefetch=1
TRANSPORT_QUEUE_REQUEST: TRANSPORT-REQUEST-QUEUE
TRANSPORT_QUEUE_REQUEST_LISTENER_CONCURRENCY: 3-10
TRANSPORT_QUEUE_RESPONSE: TRANSPORT-RESPONSE-QUEUE
TRANSPORT_QUEUE_RESPONSE_LISTENER_CONCURRENCY: 3-10
TRANSPORT_TOPIC_BROKER_URL: failover:(tcp://10.21.16.9:61616,tcp://10.21.21.48:61616)?randomize=false&priorityBackup=true&jms.connectResponseTimeout=30000&maxReconnectAttempts=5&jms.prefetchPolicy.queuePrefetch=1
TRANSPORT_TOPIC_EVENT: TRANSPORT-EVENT-TOPIC
image: registry.rshbdev.ru/rshbintech/retail/frontsystem/efr/biz/cdi-person-service
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 360
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 180
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
resources:
limits:
cpu: 500m
memory: 512Mi
requests:
cpu: 200m
memory: 128Mi
secretEnv:
APP_POSTGRESQL_PRIMARY_PASSWORD: cdi_person
APP_POSTGRESQL_PRIMARY_USER: cdi_person
APP_POSTGRESQL_READONLY_PASSWORD: cdi_person
APP_POSTGRESQL_SECONDARY_PASSWORD: cdi_person
APP_POSTGRESQL_SECONDARY_USER: cdi_person
AUTH_TOKEN_SECRET: TopSecret
KEYCLOAK_EXSYS_LOGIN: exsys-efr-ext-dev-client
KEYCLOAK_EXSYS_PASSWORD: cR4jvkZhpOXhL1tJuL7oKQB8NZE3Qf0L
KEYCLOAK_ISYS_LOGIN: isys-efr-dev-client
KEYCLOAK_ISYS_PASSWORD: GAK8SF5woFvIM1m83IxAePOKskZyFMnN
SSO_TOKEN_SECRET: SomeAnotherSecret
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
nameOverride: cdi-person-service
nodeSelector:
workload.topology.app.farm/zone: rumsk1
podSecurityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
priorityClassName: rumsk1
publishAPI:
enabled: true
replicaCount: 1
secretEnvChangeTriggersRestart: true
servicePorts:
web:
servicePort: "80"
targetPort: "8080"
skipDeployService: false
strategyType: RollingUpdate
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
type: stateless
zonesLabels:
workload.topology.app.farm/zone: rumsk1