https://pastein.ru/t/yNB
Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n platform get cm platform-operator-app-cm-env -o yaml
apiVersion: v1
data:
GOMEMLIMIT: 9GiB
kind: ConfigMap
metadata:
annotations:
meta.helm.sh/release-name: platform-operator
meta.helm.sh/release-namespace: platform
creationTimestamp: "2026-01-12T16:29:19Z"
labels:
app: platform-operator
app.kubernetes.io/managed-by: Helm
chart: base-1.14.2
fullname: platform-operator
heritage: Helm
release: platform-operator
version: v25.13.4
name: platform-operator-app-cm-env
namespace: platform
resourceVersion: "24895810533"
uid: de531720-9474-4560-8fd2-2de2177da00c
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n platform get cm platform-operator-app-dynamic-cm-env -o yaml
apiVersion: v1
data:
dynamic-config: |
gitlabPrefixWhiteList:
- /rshbgroup
- /appfarm
- /examples
gitlabPrefixWhiteListEnabled: false
logFormat: json
loggers:
component.platformscaler:
level: info
component.scheduler:
level: info
controller.department:
level: info
controller.externalservice:
level: info
controller.externalsystem:
level: info
controller.internalsystem:
level: info
controller.kafkaadapter:
level: info
controller.kafkalinkadapter:
level: info
controller.kafkalinkdefinition:
level: info
controller.linkadapter:
level: info
controller.linkapproval:
level: info
controller.linkdefinition:
level: info
controller.messagequeue:
level: info
controller.platformadapter:
level: info
controller.platformdatabase:
level: info
controller.platformjob:
level: info
controller.platformkafkacluster:
level: info
controller.platformkafkatopic:
level: info
controller.platformscalertrigger:
level: info
controller.platformservice:
level: info
controller.platformsidecar:
level: info
controller.remotedebug:
level: info
controller.resourcepool:
level: info
controller.zone:
level: info
handler.debuggingpodhandler:
level: info
handler.nodesbindinghandler:
level: info
library.runtime-config-watcher:
level: info
webhook.externalsystemwebhook:
level: info
webhook.internalsystemwebhook:
level: info
webhook.kafkalinkdefinitionwebhook:
level: info
webhook.linkapprovalwebhook:
level: info
webhook.linkdefinitionwebhook:
level: info
webhook.platformjobwebhook:
level: info
webhook.platformkafkaclusterwebhook:
level: info
webhook.platformkafkatopicwebhook:
level: info
webhook.platformservicewebhook:
level: info
webhook.zonesbindingwebhook:
level: info
kind: ConfigMap
metadata:
annotations:
meta.helm.sh/release-name: platform-operator
meta.helm.sh/release-namespace: platform
creationTimestamp: "2025-02-28T09:05:26Z"
labels:
app: platform-operator
app.kubernetes.io/managed-by: Helm
chart: base-1.14.2
fullname: platform-operator
heritage: Helm
release: platform-operator
version: v25.13.4
name: platform-operator-app-dynamic-cm-env
namespace: platform
resourceVersion: "24895810536"
uid: ff03cf8f-e666-4d0d-9ea6-76f640559e32
dmitriev-aal@VDI-Dmitriev-A:~$ helm --kube-context devstbl -n platform get values platform-operator
USER-SUPPLIED VALUES:
additionalLabels:
version: v25.13.4
additionalPodAnnotations:
inject.istio.io/templates: sidecar,custom
platform-operator.cpuLimit: "7"
platform-operator.memoryLimit: 9Gi
prometheus.io/path: /metrics
prometheus.io/port: "8080"
prometheus.io/scrape: "true"
sidecar.istio.io/proxyCPU: 400m
sidecar.istio.io/proxyCPULimit: 800m
sidecar.istio.io/proxyMemory: 800Mi
sidecar.istio.io/proxyMemoryLimit: 1224Mi
traffic.sidecar.istio.io/excludeInboundPorts: 9443,8085
additionalWorkloadAnnotations:
gitlabCommit: 4151486d874bd0566fa4681529412b02eea2975a
gitlabPipeline: https://gitlab.rshbdev.ru/appfarm/platform/operators/platform-operator/-/pipelines/3220376
platform.ckpr.integrations.rshbintech.ru/gitlab-commit-sha: 4151486d
platform.ckpr.integrations.rshbintech.ru/gitlab-pipeline-id: "3220376"
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: workload.topology.app.farm/zone
operator: Exists
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- platform-operator
topologyKey: workload.topology.app.farm/zone
weight: 100
configMapsEnvChangeTriggersRestart: true
containers:
app:
appVersion: v25.13.4
config: |
activeUserEnvironments:
- dev
- rc
- production
- regress
- stress
amqClusterKubeConfig: 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
amqConfig:
deployCronExpression: '*/5 * * * *'
environments:
dev:
adminCredentials:
password: 6Oi4j7KtkqwkiAGvylBf2AQ3nWo2POun
username: umqa
authClient: amq-pd-dev-broker
brokerNamespace: amq-pd-dev
brokerUrl: amqps://amq-0.pd.dev.rshbdev.ru:5672,amqps://amq-1.pd.dev.rshbdev.ru:5672
automaticMigrationIbmMqToAmq:
environments:
dev:
targetSystemToSourceSystems:
cft:
- aml-adapters
- brok
- cfo
- coin
- data-hub
- dbo2
- dbole2
- efr-ext
- electronic-platform
- flow-adapters
- ip1
- ips
- kfo2
- kkrle
- ndbo
clusterDomain: rshbdev.ru
clusterName: devstbl
controllerManagement:
skip:
controllerNames: []
enabled: true
mode: cluster
vaultConfig:
address: https://vault.rshbdev.ru
authPath: devstbl
environmentKvMapping:
dev: manual_kv_dev
production: manual_kv_production
rc: manual_kv_rc
regress: manual_kv_regress
stress: manual_kv_stress
requestTimeoutSeconds: 10
roleName: platform-operator
sessionGracePeriod: 5
dmzGatewayHost: 100.72.64.3
envelopeValidationExclusionSystems:
- SMEV
- OCRMFL
envoy:
inLuaFilters:
- name: lua/appfarm/platform/filters/envoy-platform-lua-filter/envoy-platform-lua-filter-0.3.7.lua
outLuaFilters:
- name: lua/rshbintech/integrations/ckpr/platform/filters/envoy-platform-lua-filter-out/envoy-platform-lua-filter-out-0.0.2.lua
imageRegistryHostname: registry.rshbdev.ru
istioIngressgatewayConfig:
deployCronExpression: '*/5 * * * *'
disableAccessLog: true
disasterRecoveryDeploy: true
hpa:
cpu:
utilizationPercent: 75
enabled: true
maxReplicas: 10
replicas: 6
resources:
limits:
cpu: "2"
memory: 4Gi
requests:
cpu: 500m
memory: 1.5Gi
kafka:
bindings:
- image: /appfarm/infra/images/strimzi/platform-kafka:0.25.0-kafka-2.8.0-rshb.4.0.1
kafka: 2.8.0
strimzi: 0.25.0
- image: /appfarm/infra/images/strimzi/platform-kafka:0.46.1-kafka-4.0.0-rshb.3.0.1
kafka: 4.0.0
strimzi: 0.46.1
kafkas:
- version: 2.8.0
- version: 4.0.0
kafkaClusterKubeConfig: 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
kafkaUi:
imagePath: /appfarm/infra/images/kafbat-kafka-ui
imageVersion: v1.2.0-rshb.0.1.1
keycloak:
CICDRealm: cicd
certificateKey: rshb-ca-bundle.pem
certificateSecretName: rshb-ca-bundle
clientsRealm: platform
deployCronExpression: '*/5 * * * *'
hostname: auth.rshbdev.ru
jwksExpirySeconds: 1800
jwksMinRefreshPauseSeconds: 600
jwksRefreshSeconds: 30
kubernetesClientBurst: 300
kubernetesClientQPS: 300
leaderElectionConfig:
leaderElectionID: production.197fd736.rshbintech.ru
logFormat: json
loggers:
component.platformscaler:
level: info
component.scheduler:
level: info
controller.department:
level: info
controller.externalservice:
level: info
controller.externalsystem:
level: info
controller.internalsystem:
level: info
controller.kafkaadapter:
level: info
controller.kafkalinkadapter:
level: info
controller.kafkalinkdefinition:
level: info
controller.kafkaui:
level: info
controller.linkadapter:
level: info
controller.linkapproval:
level: info
controller.linkdefinition:
level: info
controller.messagequeue:
level: info
controller.platformadapter:
level: info
controller.platformdatabase:
level: info
controller.platformjob:
level: info
controller.platformkafkacluster:
level: info
controller.platformkafkatopic:
level: info
controller.platformscalertrigger:
level: info
controller.platformservice:
level: info
controller.platformsidecar:
level: info
controller.remotedebug:
level: info
controller.resourcepool:
level: info
controller.systemregistry:
level: info
controller.zone:
level: info
handler.debuggingpodhandler:
level: info
handler.nodesbindinghandler:
level: info
library.runtime-config-watcher:
level: info
webhook.externalsystemwebhook:
level: info
webhook.internalsystemwebhook:
level: info
webhook.kafkalinkdefinitionwebhook:
level: info
webhook.linkapprovalwebhook:
level: info
webhook.linkdefinitionwebhook:
level: info
webhook.platformjobwebhook:
level: info
webhook.platformkafkaclusterwebhook:
level: info
webhook.platformkafkatopicwebhook:
level: info
webhook.platformservicewebhook:
level: info
webhook.zonesbindingwebhook:
level: info
mqConfig:
allowedHostnames: 10.7.27.98,10.7.27.101,10.7.27.137,10.7.9.20,10.7.9.11,10.7.9.12,10.7.27.84
environments:
dev:
adminCredentials:
password: mq@dm
username: mqadm
defaultParameters:
- channel: K8S.SVRCONN
conn-name: 10.7.27.98(1414)
password: APP_SECRET_MQ_PASSWORD
queue-manager: IP2.GTW.DEV
user: APP_SECRET_MQ_USER
mqLinkAdaptersIterativeUpdateConfig:
adaptersWithFailedLinksPercentThreshold: 5
disableIterativeUpdate: true
failedAdaptersPercentThreshold: 5
failedLinksPercentThreshold: 50
linksThreshold: 10
updateAdaptersStepPercent: 10
mutualTLSMode: STRICT
observabilityServerConfig:
observabilityServerAddr: :8080
observabilityServerReadTimeout: 5s
observabilityServerWriteTimeout: 5s
openApi:
clusterKubeConfig: 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
operatorNamespace: platform
operatorName: platform-operator
portalAuthClient: portal
pprof:
address: :8888
enabled: true
proxyServiceUrl: http://proxy-service
remoteDebugEnabled: true
remoteDebugPort: 8001
umqaServiceCredentials:
authClientId: umqa
authClientSecret: 6Oi4j7KtkqwkiAGvylBf2AQ3nWo2POun
zeroScaler:
address: platform-operator.platform.svc.cluster.local
metricsServerUrl: https://vmselect.devstbl.rshbdev.ru/select/3/prometheus/
port: 8085
dynamicConfig:
gitlabPrefixWhiteList:
- /rshbgroup
- /appfarm
- /examples
gitlabPrefixWhiteListEnabled: false
logFormat: json
loggers:
component.platformscaler:
level: info
component.scheduler:
level: info
controller.department:
level: info
controller.externalservice:
level: info
controller.externalsystem:
level: info
controller.internalsystem:
level: info
controller.kafkaadapter:
level: info
controller.kafkalinkadapter:
level: info
controller.kafkalinkdefinition:
level: info
controller.linkadapter:
level: info
controller.linkapproval:
level: info
controller.linkdefinition:
level: info
controller.messagequeue:
level: info
controller.platformadapter:
level: info
controller.platformdatabase:
level: info
controller.platformjob:
level: info
controller.platformkafkacluster:
level: info
controller.platformkafkatopic:
level: info
controller.platformscalertrigger:
level: info
controller.platformservice:
level: info
controller.platformsidecar:
level: info
controller.remotedebug:
level: info
controller.resourcepool:
level: info
controller.zone:
level: info
handler.debuggingpodhandler:
level: info
handler.nodesbindinghandler:
level: info
library.runtime-config-watcher:
level: info
webhook.externalsystemwebhook:
level: info
webhook.internalsystemwebhook:
level: info
webhook.kafkalinkdefinitionwebhook:
level: info
webhook.linkapprovalwebhook:
level: info
webhook.linkdefinitionwebhook:
level: info
webhook.platformjobwebhook:
level: info
webhook.platformkafkaclusterwebhook:
level: info
webhook.platformkafkatopicwebhook:
level: info
webhook.platformservicewebhook:
level: info
webhook.zonesbindingwebhook:
level: info
env:
GOMEMLIMIT: 9GiB
image: registry.rshbdev.ru/appfarm/platform/operators/platform-operator
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 5
httpGet:
path: /health/liveness
port: 8080
initialDelaySeconds: 30
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
readinessProbe:
failureThreshold: 3
httpGet:
path: /health/readiness
port: 8080
initialDelaySeconds: 15
periodSeconds: 5
successThreshold: 1
timeoutSeconds: 1
resources:
limits:
cpu: "13"
memory: 9Gi
requests:
cpu: 300m
memory: 5Gi
secretEnv: {}
secrets:
- mountPath: tmp/k8s-webhook-server/serving-certs
name: platform-operator-webhook-server
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
procMount: Default
readOnlyRootFilesystem: false
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
ingress:
enabled: true
ingresses:
api:
annotations:
cert-manager.io/cluster-issuer: vault-issuer
cert-manager.io/common-name: platform-operator.devstbl.rshbdev.ru
external-dns.alpha.kubernetes.io/hostname: platform-operator.devstbl.rshbdev.ru
nginx.ingress.kubernetes.io/service-upstream: "true"
nginx.ingress.kubernetes.io/upstream-vhost: platform-operator.platform.svc.cluster.local
ingressClassName: nginx
rules:
- host: platform-operator.devstbl.rshbdev.ru
paths:
- path: /api
pathType: Prefix
servicePort: 80
tls:
enabled: true
secrets:
- hosts:
- platform-operator.devstbl.rshbdev.ru
secretName: platform-operator-tls
type: default
istio:
gatewaySelector:
app: istio-ingressgateway
issuer: vault-issuer
namespace: istio-system
nameOverride: platform-operator
podSecurityContext:
fsGroup: 1001
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
preInstallHookImage: registry.rshbdev.ru/rshbintech/integrations/ckpr/infra/images/base-pre-install-hook:1.1.4
rbac:
clusterRole:
bindWithClusterRoleBinding: true
create: true
rules:
- apiGroups:
- authentication.k8s.io
resources:
- tokenreviews
verbs:
- create
- apiGroups:
- authorization.k8s.io
resources:
- subjectaccessreviews
verbs:
- create
- apiGroups:
- ""
resources:
- namespaces
- resourcequotas
- services
- secrets
- configmaps
- events
- endpoints
- pods
- serviceaccounts
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- apps
- extensions
resources:
- deployments
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- batch
resources:
- jobs
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- scheduling.k8s.io
resources:
- priorityclasses
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- internalsystems
- internalsystems/status
- platformservices
- platformservices/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- externalsystems
- externalsystems/status
- externalservices
- externalservices/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- linkdefinitions
- linkdefinitions/status
- linkadapters
- linkadapters/status
- platformadapters
- platformadapters/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- messagequeues
- messagequeues/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- keycloakclients
- keycloakclients/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- keycloakclientroles
- keycloakclientroles/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- keycloakclientrolebindings
- keycloakclientrolebindings/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- keycloakclientauthresources
- keycloakclientauthresources/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- keycloakclientauthpolicies
- keycloakclientauthpolicies/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- keycloakclientauthpermissions
- keycloakclientauthpermissions/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- platformdatabases
- platformdatabases/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- platformreleases
- platformreleases/status
- platformreleaseartifacts
- platformreleaseartifacts/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- platformkafkaclusters
- platformkafkaclusters/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- platformkafkatopics
- platformkafkatopics/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- kafkauis
- kafkauis/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- monitoring.coreos.com
resources:
- servicemonitors
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- networking.k8s.io
- extensions
resources:
- ingresses
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- crd.projectcalico.org
resources:
- networkpolicies
- networksets
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- security.istio.io
resources:
- peerauthentications
- authorizationpolicies
- requestauthentications
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- networking.istio.io
resources:
- envoyfilters
- destinationrules
- gateways
- serviceentries
- virtualservices
- sidecars
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- departments
- departments/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- elasticroles
- elasticusers
- elasticalerts
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- cert-manager.io
resources:
- certificates
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- kafka.strimzi.io
resources:
- kafkas
- kafkatopics
- kafkanodepools
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- kafkalinkdefinitions
- kafkalinkdefinitions/status
- kafkalinkadapters
- kafkalinkadapters/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- kafkaadapters
- kafkaadapters/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- resourcepools
- resourcepools/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- platformscalertrigger
- platformscalertrigger/status
- platformscalertriggers
- platformscalertriggers/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- keda.sh
resources:
- scaledobject
- scaledobjects
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- broker.amq.io
resources:
- activemqartemisaddresses
- activemqartemisaddresses/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- linkapprovals
- linkapprovals/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- rbac.authorization.k8s.io
resources:
- roles
- rolebindings
- clusterrolebindings
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- telemetry.istio.io
resources:
- telemetries
- telemetries/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- platformjobs
- platformjobs/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- remotedebugs
- remotedebugs/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- zones
- zones/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- platformsidecars
- platformsidecars/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- systemregistries
- systemregistries/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- istioingresses
- istioingresses/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- workloadquotas
- workloadquotas/status
verbs:
- get
- list
- watch
- create
- update
- delete
- patch
replicaCount: 3
secretEnvChangeTriggersRestart: true
serviceAccount:
create: true
name: platform-operator
servicePorts:
grpc:
servicePort: 8085
targetPort: 8085
webhook:
servicePort: 443
targetPort: 9443
skipDeployService: false
strategyType: RollingUpdate
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
topologySpreadConstraints:
- labelSelector:
matchExpressions:
- key: app
operator: In
values:
- platform-operator
maxSkew: 2
topologyKey: workload.topology.app.farm/zone
whenUnsatisfiable: DoNotSchedule
type: stateless
dmitriev-aal@VDI-Dmitriev-A:~$ helm --kube-context devstbl -n platform get manifest platform-operator | grep -i -A5 -B5 "quota\|reserve\|workload"
- create
- apiGroups:
- ""
resources:
- namespaces
- resourcequotas
- services
- secrets
- configmaps
- events
- endpoints
--
- delete
- patch
- apiGroups:
- production.platform.ckpr.integrations.rshbintech.ru
resources:
- workloadquotas
- workloadquotas/status
verbs:
- get
- list
- watch
- create
--
app: platform-operator
fullname: platform-operator
release: platform-operator
type: ClusterIP
---
# Source: base/templates/workload.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: platform-operator
labels:
--
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: workload.topology.app.farm/zone
operator: Exists
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values:
- platform-operator
topologyKey: workload.topology.app.farm/zone
weight: 100
topologySpreadConstraints:
- labelSelector:
matchExpressions:
- key: app
operator: In
values:
- platform-operator
maxSkew: 2
topologyKey: workload.topology.app.farm/zone
whenUnsatisfiable: DoNotSchedule
containers:
- name: app
image: registry.rshbdev.ru/appfarm/platform/operators/platform-operator:v25.13.4
imagePullPolicy: IfNotPresent
--
runAsGroup: 1001
runAsNonRoot: true
runAsUser: 1001
tolerations:
- effect: NoSchedule
key: workload.topology.app.farm/zone
operator: Exists
hostNetwork: false
volumes:
- name: platform-operator-webhook-server
secret:
