This is an automated email from the ASF dual-hosted git repository.
zhongxjian pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-kubernetes.git
The following commit(s) were added to refs/heads/master by this push:
new 34924ec5 [charts] Modify values to work with dubboctl. (#478)
34924ec5 is described below
commit 34924ec54fe74a3cf1c8b3cf1030479f1ff6c365
Author: mfordjody <[email protected]>
AuthorDate: Tue Oct 22 17:25:58 2024 +0800
[charts] Modify values to work with dubboctl. (#478)
---
manifests/charts/admin/templates/NOTES.txt | 10 +-
.../admin/templates/admin/admin-deployment.yaml | 17 +-
.../admin/templates/admin/admin-statefulset.yaml | 61 +-
manifests/charts/admin/templates/jobs.yaml | 20 +-
.../charts/admin/templates/modular/_labels.tpl | 4 +-
.../charts/admin/templates/modular/_matches.tpl | 4 +-
.../templates/register/nacos/nacos-configmap.yaml | 2 +-
.../templates/register/nacos/nacos-service.yaml | 4 +-
.../register/nacos/nacos-statefulset.yaml | 2 +-
.../register/zookeeper/zookeeper-configmap.yaml | 2 +-
.../register/zookeeper/zookeeper-service.yaml | 4 +-
.../register/zookeeper/zookeeper-statefulset.yaml | 2 +-
manifests/charts/admin/values.yaml | 669 +++++++++++----------
13 files changed, 406 insertions(+), 395 deletions(-)
diff --git a/manifests/charts/admin/templates/NOTES.txt
b/manifests/charts/admin/templates/NOTES.txt
index f177446a..02c5c911 100644
--- a/manifests/charts/admin/templates/NOTES.txt
+++ b/manifests/charts/admin/templates/NOTES.txt
@@ -5,24 +5,24 @@ Version: {{ .Values.image.tag }}
🔄 Please wait a few minutes for other dependent components to finish deploying.
-{{- if .Values.registerCentre.zookeeper.enabled }}
+{{- if .Values.zookeeper.enabled }}
Dependency: ZooKeeper
-Version: {{ .Values.registerCentre.zookeeper.image.tag }}
+Version: {{ .Values.zookeeper.image.tag }}
🚨 If you are using the Nacos registry, Please disable Zookeeper and enable
Nacos.
Otherwise, Zookeeper is used by default.
🎊 You have enabled the internal Register Center.
-{{- else if .Values.registerCentre.nacos.enabled }}
+{{- else if .Values.nacos.enabled }}
Dependency: Nacos
-Version: {{ .Values.registerCentre.nacos.image.tag }}
+Version: {{ .Values.nacos.image.tag }}
🎊 You have enabled the internal Register Center.
{{- end }}
-{{- if and (eq .Values.registerCentre.zookeeper.enabled false) (eq
.Values.registerCentre.nacos.enabled false) }}
+{{- if and (eq .Values.zookeeper.enabled false) (eq .Values.nacos.enabled
false) }}
Dependency: ❎
🚫 You have disabled the internal Register Center.
diff --git a/manifests/charts/admin/templates/admin/admin-deployment.yaml
b/manifests/charts/admin/templates/admin/admin-deployment.yaml
index 061a165a..4ba7f97c 100644
--- a/manifests/charts/admin/templates/admin/admin-deployment.yaml
+++ b/manifests/charts/admin/templates/admin/admin-deployment.yaml
@@ -1,7 +1,7 @@
{{- $admin := .Values -}}
{{- $cp := .Values.cp -}}
-{{- $zoo := .Values.zookeeper -}}
-{{- $nacos := .Values.nacos -}}
+{{- $zoo := .Values.zookeeper }}
+{{- $nacos := .Values.nacos }}
{{- $prom := .Values.kubePrometheus }}
{{- if eq $admin.deployType "Deployment" }}
apiVersion: {{ template "apiVersion" . }}
@@ -72,7 +72,7 @@ spec:
env:
{{- $zooName := include "zoo.name" . -}}
{{- $nacosName := include "nacos.name" . -}}
- {{- $zooReplicas := int $zoo.replicas -}}
+ {{- $zooReplicas := int .Values.zookeeper.replicas -}}
{{- $nacosReplicas := int $nacos.replicas -}}
{{- $zooHeadless := printf "%s-%s" $zooName "headless" | trunc 63 -}}
{{- $nacosHeadless := printf "%s-%s" $nacosName "headless" | trunc 63
-}}
@@ -81,15 +81,18 @@ spec:
{{- $clusterDomain := $admin.clusterDomain -}}
{{- $zooPort := include "zoo.client" . -}}
{{- $nacosPort := $nacos.serverPort -}}
+ {{- $register := .Values.register }}
+ {{- if (eq $register true) | default true }}
{{- if $zoo.enabled }}
- name: DUBBO_STORE_TRADITIONAL_REGISTRY
value: zookeeper://{{ $zooName }}.{{ $zooNamespace }}.svc.{{
$clusterDomain }}:{{ $zooPort }}
- {{- else if $nacos.enabled }}
+ {{- else if $nacos.enabled }}
- name: DUBBO_STORE_TRADITIONAL_REGISTRY
- value: nacos://{{ range $k, $v := until $nacosReplicas }}{{
$nacosName }}-{{ $v }}.{{ $nacosName }}.{{ $nacosNamespace }}.svc.{{
$clusterDomain }}:{{ $nacosPort }} {{ end }}
- {{- else }}
+ value: nacos://{{ range $k, $v := until $nacosReplicas }}{{
$nacosName }}-{{ $v }}.{{ $nacosName }}.{{ $nacosNamespace }}.svc.{{
$clusterDomain }}:{{ $nacosPort }}{{ if ne (add $k 1) $nacosReplicas }},{{ end
}}{{ end }}
+ {{- else }}
- name: DUBBO_STORE_TRADITIONAL_REGISTRY
- value: zookeeper://{{ range $k, $v := until $zooReplicas }}{{
$zooName }}-{{ $v }}.{{ $zooName }}.{{ $zooNamespace }}.svc.{{ $clusterDomain
}}:{{ $zooPort }} {{ end }}
+ value: zookeeper://{{ range $k, $v := until $zooReplicas }}{{
$zooName }}-{{ $v }}.{{ $zooName }}.{{ $zooNamespace }}.svc.{{ $clusterDomain
}}:{{ $zooPort }}{{ if ne (add $k 1) $zooReplicas }},{{ end }}{{ end }}
+ {{- end }}
{{- end }}
- name: DUBBO_RUNTIME_KUBERNETES_ADMISSION_SERVER_CERT_DIR
value: /var/run/secrets/dubbo.io/tls-cert
diff --git a/manifests/charts/admin/templates/admin/admin-statefulset.yaml
b/manifests/charts/admin/templates/admin/admin-statefulset.yaml
index fa62f534..8903d7aa 100644
--- a/manifests/charts/admin/templates/admin/admin-statefulset.yaml
+++ b/manifests/charts/admin/templates/admin/admin-statefulset.yaml
@@ -73,7 +73,7 @@ spec:
env:
{{- $zooName := include "zoo.name" . -}}
{{- $nacosName := include "nacos.name" . -}}
- {{- $zooReplicas := int $zoo.replicas -}}
+ {{- $zooReplicas := int .Values.zookeeper.replicas -}}
{{- $nacosReplicas := int $nacos.replicas -}}
{{- $zooHeadless := printf "%s-%s" $zooName "headless" | trunc 63 -}}
{{- $nacosHeadless := printf "%s-%s" $nacosName "headless" | trunc 63
-}}
@@ -82,49 +82,52 @@ spec:
{{- $clusterDomain := $admin.clusterDomain -}}
{{- $zooPort := include "zoo.client" . -}}
{{- $nacosPort := $nacos.serverPort -}}
+ {{- $register := .Values.register }}
+ {{- if (eq $register true) | default true }}
{{- if $zoo.enabled }}
- - name: ADMIN_REGISTRY_ADDRESS
- value: zookeeper://{{ range $k, $v := until $zooReplicas }}{{
$zooName }}-{{ $v }}.{{ $zooName }}.{{ $zooNamespace }}.svc.{{ $clusterDomain
}}:{{ $zooPort }} {{ end }}
- {{- else if $nacos.enabled }}
- - name: ADMIN_REGISTRY_ADDRESS
- value: nacos://{{ range $k, $v := until $nacosReplicas }}{{
$nacosName }}-{{ $v }}.{{ $nacosName }}.{{ $nacosNamespace }}.svc.{{
$clusterDomain }}:{{ $nacosPort }} {{ end }}
- {{- else }}
- - name: ADMIN_REGISTRY_ADDRESS
- value: zookeeper://{{ range $k, $v := until $zooReplicas }}{{
$zooName }}-{{ $v }}.{{ $zooName }}.{{ $zooNamespace }}.svc.{{ $clusterDomain
}}:{{ $zooPort }} {{ end }}
+ - name: DUBBO_STORE_TRADITIONAL_REGISTRY
+ value: zookeeper://{{ $zooName }}.{{ $zooNamespace }}.svc.{{
$clusterDomain }}:{{ $zooPort }}
+ {{- else if $nacos.enabled }}
+ - name: DUBBO_STORE_TRADITIONAL_REGISTRY
+ value: nacos://{{ range $k, $v := until $nacosReplicas }}{{
$nacosName }}-{{ $v }}.{{ $nacosName }}.{{ $nacosNamespace }}.svc.{{
$clusterDomain }}:{{ $nacosPort }}{{ if ne (add $k 1) $nacosReplicas }},{{ end
}}{{ end }}
+ {{- else }}
+ - name: DUBBO_STORE_TRADITIONAL_REGISTRY
+ value: zookeeper://{{ range $k, $v := until $zooReplicas }}{{
$zooName }}-{{ $v }}.{{ $zooName }}.{{ $zooNamespace }}.svc.{{ $clusterDomain
}}:{{ $zooPort }}{{ if ne (add $k 1) $zooReplicas }},{{ end }}{{ end }}
+ {{- end }}
{{- end }}
{{- $promName := include "prom.name" . }}
{{- $promPort := include "prom.port" . }}
{{- $promStationaryName := printf "kube-prome-prometheus" }}
{{- $promFullName := printf "%s-%s" $promName $promStationaryName }}
{{- if $prom.enabled }}
- - name: ADMIN_PROMETHEUS_ADDRESS
- value: {{ $promFullName }}:{{ $promPort }}
+ - name: ADMIN_PROMETHEUS_ADDRESS
+ value: {{ $promFullName }}:{{ $promPort }}
{{- $grafanaName := include "grafana.name" . }}
{{- $grafanaPort := include "grafana.port" . }}
{{- $grafanaFullName := printf "%s-%s" $promName $grafanaName }}
- - name: ADMIN_GRAFANA_ADDRESS
- value: {{ $grafanaFullName }}:{{ $grafanaPort }}
+ - name: ADMIN_GRAFANA_ADDRESS
+ value: {{ $grafanaFullName }}:{{ $grafanaPort }}
{{- end }}
volumeMounts:
{{- if $admin.volumeMounts }}
{{- toYaml $admin.volumeMounts | nindent 8 }}
{{- end }}
- - name: general-tls-cert
- mountPath: /var/run/secrets/dubbo.io/tls-cert/tls.crt
- subPath: tls.crt
- readOnly: true
- - name: general-tls-cert
- mountPath: /var/run/secrets/dubbo.io/tls-cert/tls.key
- subPath: tls.key
- readOnly: true
- - name: general-tls-cert{{- if $cp.tls.caSecretName }}-ca{{- end }}
- mountPath: /var/run/secrets/dubbo.io/tls-cert/ca.crt
- subPath: ca.crt
- readOnly: true
- - name: cp-config
- mountPath: /etc/dubbo.io/cp-config/config.yaml
- subPath: config.yaml
- readOnly: true
+ - name: general-tls-cert
+ mountPath: /var/run/secrets/dubbo.io/tls-cert/tls.crt
+ subPath: tls.crt
+ readOnly: true
+ - name: general-tls-cert
+ mountPath: /var/run/secrets/dubbo.io/tls-cert/tls.key
+ subPath: tls.key
+ readOnly: true
+ - name: general-tls-cert{{- if $cp.tls.caSecretName }}-ca{{- end }}
+ mountPath: /var/run/secrets/dubbo.io/tls-cert/ca.crt
+ subPath: ca.crt
+ readOnly: true
+ - name: cp-config
+ mountPath: /etc/dubbo.io/cp-config/config.yaml
+ subPath: config.yaml
+ readOnly: true
securityContext:
{{- if $admin.securityContext }}
{{- toYaml $admin.securityContext | nindent 10 }}
diff --git a/manifests/charts/admin/templates/jobs.yaml
b/manifests/charts/admin/templates/jobs.yaml
index 4c11f540..31481b0a 100644
--- a/manifests/charts/admin/templates/jobs.yaml
+++ b/manifests/charts/admin/templates/jobs.yaml
@@ -1,5 +1,7 @@
{{- $jobs := .Values.jobs -}}
+{{- $mesh := .Values.mesh }}
{{- $prom := .Values.kubePrometheus }}
+{{- $jaeger := .Values.jaeger }}
apiVersion: v1
kind: ConfigMap
metadata:
@@ -10,6 +12,7 @@ metadata:
annotations:
{{- include "jobs.env.annotations" . | nindent 4 }}
data:
+ {{- if (eq $mesh true) }}
kubectl.sh: |-
#!/bin/bash
@@ -17,17 +20,16 @@ data:
WORKDIR=$(dirname "$0")
WORKDIR=$(cd "$WORKDIR"; pwd)
-
+ {{- if .Values.jaeger.enabled }}
JAEGER="https://raw.githubusercontent.com/istio/istio/release-1.23/samples/addons/jaeger.yaml";
-
- kubectl get namespace istio-system >/dev/null 2>&1 || kubectl create
namespace istio-system
-
kubectl apply -f $JAEGER
-
+ {{- end }}
+ kubectl get namespace istio-system >/dev/null 2>&1 || kubectl create
namespace istio-system
+ {{- end }}
helm.sh: |-
#!/bin/bash
set -eux
- ISTIO="https://istio-release.storage.googleapis.com/charts";
+ {{- if (eq $prom.enabled true) }}
PROMETHEUS="https://prometheus-community.github.io/helm-charts";
helm pull "{{ include "prom.stack.name" . }}" --repo "$PROMETHEUS"
--version "{{ $prom.image.tag }}" --untar
@@ -40,7 +42,6 @@ data:
sleep 2
fi
done
-
cp -r "/files/dashboards/dubbo-resources-metrics.yaml" "{{ include
"prom.stack.name" . }}/templates/{{ include "grafana.name" . }}/dashboards-{{
$prom.dashboardsVersion }}"
ls -la "{{ include "prom.stack.name" . }}/templates/{{ include
"grafana.name" . }}/dashboards-{{ $prom.dashboardsVersion }}"
@@ -49,11 +50,14 @@ data:
else
helm install {{ include "prom.name" . }} "./{{ include "prom.stack.name" .
}}/"
fi
+ {{- end }}
+ {{- if (eq $mesh true) }}
+ ISTIO="https://istio-release.storage.googleapis.com/charts";
helm repo add istio "$ISTIO" && \
helm repo update && \
helm install istio-base istio/base -n istio-system --set
defaultRevision=default && \
helm install istiod istio/istiod -n istio-system
-
+ {{- end }}
dubbo-resources-metrics.yaml: |-
{{- .Files.Get "files/dashboards/dubbo-resources-metrics.yaml" | nindent 4
}}
---
diff --git a/manifests/charts/admin/templates/modular/_labels.tpl
b/manifests/charts/admin/templates/modular/_labels.tpl
index 832c14f6..0a70f49c 100644
--- a/manifests/charts/admin/templates/modular/_labels.tpl
+++ b/manifests/charts/admin/templates/modular/_labels.tpl
@@ -15,7 +15,7 @@ Return ZooKeeper Labels to use.
{{- define "zoo.labels" -}}
app: {{ template "zoo.name" . }}
app.kubernetes.io/name: {{ template "zoo.name" . }}
-helm.sh/chart: {{ include "zoo.name" . }}-{{
.Values.registerCentre.zookeeper.image.tag }}
+helm.sh/chart: {{ include "zoo.name" . }}-{{ .Values.zookeeper.image.tag }}
app.kubernetes.io/instance: {{ template "zoo.name" . }}
app.kubernetes.io/component: {{ template "zoo.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
@@ -27,7 +27,7 @@ Return Nacos Labels to use.
{{- define "nacos.labels" -}}
app: {{ template "nacos.name" . }}
app.kubernetes.io/name: {{ template "nacos.name" . }}
-helm.sh/chart: {{ include "nacos.name" . }}-{{
.Values.registerCentre.nacos.image.tag }}
+helm.sh/chart: {{ include "nacos.name" . }}-{{ .Values.nacos.image.tag }}
app.kubernetes.io/instance: {{ template "nacos.name" . }}
app.kubernetes.io/component: {{ template "nacos.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
diff --git a/manifests/charts/admin/templates/modular/_matches.tpl
b/manifests/charts/admin/templates/modular/_matches.tpl
index 2e5abe8c..b8d4252a 100644
--- a/manifests/charts/admin/templates/modular/_matches.tpl
+++ b/manifests/charts/admin/templates/modular/_matches.tpl
@@ -13,7 +13,7 @@ Return ZooKeeper matchLabels to use.
*/}}
{{- define "zoo.matchLabels" -}}
app.kubernetes.io/name: {{ template "zoo.name" . }}
-helm.sh/chart: {{ include "zoo.name" . }}-{{
.Values.registerCentre.zookeeper.image.tag }}
+helm.sh/chart: {{ include "zoo.name" . }}-{{ .Values.zookeeper.image.tag }}
app.kubernetes.io/instance: {{ template "zoo.name" . }}
app.kubernetes.io/component: {{ template "zoo.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
@@ -24,7 +24,7 @@ Return Nacos matchLabels to use.
*/}}
{{- define "nacos.matchLabels" -}}
app.kubernetes.io/name: {{ template "nacos.name" . }}
-helm.sh/chart: {{ include "nacos.name" . }}-{{
.Values.registerCentre.nacos.image.tag }}
+helm.sh/chart: {{ include "nacos.name" . }}-{{ .Values.nacos.image.tag }}
app.kubernetes.io/instance: {{ template "nacos.name" . }}
app.kubernetes.io/component: {{ template "nacos.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
diff --git
a/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
b/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
index 7720b68c..a5268eb8 100644
--- a/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
+++ b/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
@@ -1,4 +1,4 @@
-{{- $nacos := .Values.registerCentre.nacos -}}
+{{- $nacos := .Values.nacos -}}
{{- if and $nacos.enabled (eq $nacos.storage.type "mysql") }}
apiVersion: v1
kind: ConfigMap
diff --git a/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
b/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
index ee06f1a1..2940deaf 100644
--- a/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
+++ b/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
@@ -1,4 +1,4 @@
-{{- $nacos := .Values.registerCentre.nacos -}}
+{{- $nacos := .Values.nacos -}}
{{- $service := $nacos.service -}}
{{- if $nacos.enabled }}
apiVersion: v1
@@ -50,7 +50,7 @@ spec:
selector:
app: {{ template "nacos.selector" . }}
---
-{{- if and (eq .Values.nacos.mode "cluster") }}
+{{- if and (eq $nacos.mode "cluster") }}
apiVersion: v1
kind: Service
metadata:
diff --git
a/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
b/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
index b61cb9d1..30bcde0f 100644
--- a/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
+++ b/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
@@ -1,4 +1,4 @@
-{{- $nacos := .Values.registerCentre.nacos -}}
+{{- $nacos := .Values.nacos -}}
{{- if $nacos.enabled }}
apiVersion: {{ template "apiVersion" . }}
kind: StatefulSet
diff --git
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
index 1d7f1bae..6ccbdb4d 100644
---
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
+++
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
@@ -1,4 +1,4 @@
-{{- $zoo := .Values.registerCentre.zookeeper -}}
+{{- $zoo := .Values.zookeeper -}}
{{- if $zoo.enabled }}
apiVersion: v1
kind: ConfigMap
diff --git
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
index 386755c5..158844da 100644
--- a/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
+++ b/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
@@ -1,6 +1,6 @@
-{{- $zoo := .Values.registerCentre.zookeeper -}}
+{{- $zoo := .Values.zookeeper -}}
{{- $service := $zoo.service -}}
-{{- if .Values.registerCentre.zookeeper.enabled }}
+{{- if .Values.zookeeper.enabled }}
apiVersion: v1
kind: Service
metadata:
diff --git
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
index 8164ac59..f5a806dd 100644
---
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
+++
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
@@ -1,4 +1,4 @@
-{{- $zoo := .Values.registerCentre.zookeeper -}}
+{{- $zoo := .Values.zookeeper -}}
{{- if $zoo.enabled }}
apiVersion: {{ template "apiVersion" . }}
kind: StatefulSet
diff --git a/manifests/charts/admin/values.yaml
b/manifests/charts/admin/values.yaml
index 4745acad..f5ba1973 100644
--- a/manifests/charts/admin/values.yaml
+++ b/manifests/charts/admin/values.yaml
@@ -463,364 +463,365 @@ kubePrometheus:
dashboardsVersion: 1.14
+register: false
+
+mesh: true
+
jaeger:
- ## Whether to enable the jaeger.
- enabled: false
+ enabled: true
-registerCentre:
+zookeeper:
+ ## Whether to enable the zookeeper.
enabled: false
- zookeeper:
- ## Whether to enable the zookeeper.
- enabled: true
- ## Override the namespace where the resource is deployed.
- namespaceOverride: ~
+ ## Override the namespace where the resource is deployed.
+ namespaceOverride: ~
- ## Labels to attach to the resource.
- labels: ~
+ ## Labels to attach to the resource.
+ labels: ~
- ## Annotations to attach to the resource.
- annotations: ~
+ ## Annotations to attach to the resource.
+ annotations: ~
- ## Specifies the cluster's domain name for DNS resolution.
- clusterDomain: cluster.local
+ ## Specifies the cluster's domain name for DNS resolution.
+ clusterDomain: cluster.local
- ## Number of replicas for the Deployment.
- replicas: 1
+ ## Number of replicas for the Deployment.
+ replicas: 1
- image:
- # Source of the container image.
- registry: docker.io/bitnami/zookeeper
- # Version tag of the container image.
- tag: 3.9-debian-12
- # Image pull policy, available options are: Always, IfNotPresent, Never.
- pullPolicy: IfNotPresent
- # Set to 'true' to enable debug mode for the image.
- debug: false
-
- securityContext:
- # Whether to enable the security context.
- enabled: true
- # Defines the POSIX group ID that owns the pod's volumes.
- fsGroup: 1001
-
- containerSecurityContext:
- # Whether to enable the container security context.
- enabled: true
- # Specifies the user ID under which the container should run.
- runAsUser: 1001
- # Set to 'true' to run the container as a non-root user.
- runAsNonRoot: true
- # Set to 'false' to disallow privilege escalation for the container.
- allowPrivilegeEscalation: false
-
- service:
- # Labels to be applied to the service.
- labels: ~
- # Annotations to be added to the service.
- annotations: ~
- # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
- type: ClusterIP
- # Specifies the ClusterIP for the service, or use "~" to auto-assign.
- clusterIP: ~
- # List of external IPs to associate with the service.
- externalIPs: ~
- # Specifies the IP address for a LoadBalancer service.
- loadBalancerIP: ~
- # Restrict access to the LoadBalancer by IP ranges.
- loadBalancerSourceRanges: ~
- # Specifies the LoadBalancer class (if applicable).
- loadBalancerClass: ~
- # Specifies the session affinity mode (None, ClientIP)
- sessionAffinity: None
- # Set to 'true' to publish endpoints for not-ready pods.
- publishNotReadyAddresses: true
-
- resources:
- # Maximum CPU and memory resources allowed for the container.
- limits:
- # CPU usage limit.
- cpu: 250m
- # Memory usage limit.
- memory: 256Mi
- # Initial CPU and memory resource requests for the container.
- requests:
- # CPU usage request.
- cpu: 250m
- # Memory usage request.
- memory: 256Mi
-
- startupProbe:
- # Number of consecutive failures before marking the container as
unhealthy.
- failureThreshold: 6
- # Delay before the probe is initiated.
- initialDelaySeconds: 5
- # How often to perform the probe.
- periodSeconds: 10
- # Minimum consecutive successes for the probe to be considered
successful.
- successThreshold: 1
- # Time to wait for the probe to complete.
- timeoutSeconds: 5
- exec:
- # Run the specified command to check.
- command: [ '/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2
localhost 2181 | grep imok' ]
+ image:
+ # Source of the container image.
+ registry: docker.io/bitnami/zookeeper
+ # Version tag of the container image.
+ tag: 3.9-debian-12
+ # Image pull policy, available options are: Always, IfNotPresent, Never.
+ pullPolicy: IfNotPresent
+ # Set to 'true' to enable debug mode for the image.
+ debug: false
- readinessProbe:
- # Number of consecutive failures before marking the container as
unhealthy.
- failureThreshold: 6
- # Delay before the probe is initiated.
- initialDelaySeconds: 5
- # How often to perform the probe.
- periodSeconds: 10
- # Minimum consecutive successes for the probe to be considered
successful.
- successThreshold: 1
- # Time to wait for the probe to complete.
- timeoutSeconds: 5
- exec:
- # Run the specified command to check.
- command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep error | grep null' ]
+ securityContext:
+ # Whether to enable the security context.
+ enabled: true
+ # Defines the POSIX group ID that owns the pod's volumes.
+ fsGroup: 1001
- livenessProbe:
- # Number of consecutive failures before marking the container as
unhealthy.
- failureThreshold: 6
- # Delay before the probe is initiated.
- initialDelaySeconds: 30
- # How often to perform the probe.
- periodSeconds: 10
- # Minimum consecutive successes for the probe to be considered
successful.
- successThreshold: 1
- # Time to wait for the probe to complete.
- timeoutSeconds: 5
- exec:
- # Run the specified command to check.
- command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep ruok' ]
-
- # This allows a dedicated log device to be used, and helps avoid
competition between logging and snapshots.
- dataLogDir: ""
- # tickTime Basic time unit (in milliseconds) used by ZooKeeper for
heartbeats.
- tickTime: 2000
- # initLimit ZooKeeper uses to limit the length of time the ZooKeeper
servers in quorum have to connect to a leader.
- initLimit: 10
- # syncLimit How far out of date a server can be from a leader.
- syncLimit: 5
- # preAllocSize Block size for transaction log file.
- preAllocSize: 65536
- # snapCount The number of transactions recorded in the transaction log
before a snapshot can be taken (and the transaction log rolled).
- snapCount: 100000
- # fourlwCommandsWhitelist A list of comma separated Four Letter Words
commands that can be executed.
- fourlwCommandsWhitelist: srvr, mntr, ruok
- # listenOnAllIPs Allow ZooKeeper to listen for connections from its peers
on all available IP addresses.
- listenOnAllIPs: false
- # Ongoing data directory cleanup configuration
- autopurge:
- # snapRetainCount The most recent snapshots amount (and corresponding
transaction logs) to retain.
- snapRetainCount: 3
- # purgeInterval The time interval (in hours) for which the purge task
has to be triggered.
- purgeInterval: 0
- # maxClientCnxns Limits the number of concurrent connections that a single
client may make to a single member of the ZooKeeper ensemble.
- maxClientCnxns: 60
- # maxSessionTimeout Maximum session timeout (in milliseconds) that the
server will allow the client to negotiate.
- maxSessionTimeout: 40000
- # heapSize Size (in MB) for the Java Heap options (Xmx and Xms).
- heapSize: 1024
- # logLevel Log level for the ZooKeeper server. ERROR by default.
- logLevel: ERROR
- # authentication parameters.
- auth:
- # authentication client settings.
- client:
- # auth.client.enabled Enable ZooKeeper client-server authentication.
It uses SASL/Digest-MD5.
- enabled: false
- # auth.client.clientUser User that will use ZooKeeper clients to auth.
- clientUser: ""
- # auth.client.clientPassword Password that will use ZooKeeper clients
to auth.
- clientPassword: ""
- # auth.client.serverUsers Comma, semicolon or whitespace separated
list of user to be created.
- serverUsers: ""
- # auth.client.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
- serverPasswords: ""
- # auth.client.existingSecret Use existing secret (ignores previous
passwords).
- existingSecret: ""
- # authentication quorum settings.
- quorum:
- # auth.quorum.enabled Enable ZooKeeper server-server authentication.
It uses SASL/Digest-MD5.
- enabled: false
- # auth.quorum.learnerUser User that the ZooKeeper quorumLearner will
use to authenticate to quorumServers.
- learnerUser: ""
- # auth.quorum.learnerPassword Password that the ZooKeeper
quorumLearner will use to authenticate to quorumServers.
- learnerPassword: ""
- # auth.quorum.serverUsers Comma, semicolon or whitespace separated
list of users for the quorumServers.
- serverUsers: ""
- # auth.quorum.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
- serverPasswords: ""
- # auth.quorum.existingSecret Use existing secret (ignores previous
passwords).
- existingSecret: ""
-
- nacos:
- ## Whether to enable the nacos.
- enabled: false
+ containerSecurityContext:
+ # Whether to enable the container security context.
+ enabled: true
+ # Specifies the user ID under which the container should run.
+ runAsUser: 1001
+ # Set to 'true' to run the container as a non-root user.
+ runAsNonRoot: true
+ # Set to 'false' to disallow privilege escalation for the container.
+ allowPrivilegeEscalation: false
- ## Specifies the mode in which nacos is running (standalone, cluster,
etc.).
- mode: standalone
+ service:
+ # Labels to be applied to the service.
+ labels: ~
+ # Annotations to be added to the service.
+ annotations: ~
+ # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
+ type: ClusterIP
+ # Specifies the ClusterIP for the service, or use "~" to auto-assign.
+ clusterIP: ~
+ # List of external IPs to associate with the service.
+ externalIPs: ~
+ # Specifies the IP address for a LoadBalancer service.
+ loadBalancerIP: ~
+ # Restrict access to the LoadBalancer by IP ranges.
+ loadBalancerSourceRanges: ~
+ # Specifies the LoadBalancer class (if applicable).
+ loadBalancerClass: ~
+ # Specifies the session affinity mode (None, ClientIP)
+ sessionAffinity: None
+ # Set to 'true' to publish endpoints for not-ready pods.
+ publishNotReadyAddresses: true
- ## Override the namespace where the resource is deployed.
- namespaceOverride: ~
+ resources:
+ # Maximum CPU and memory resources allowed for the container.
+ limits:
+ # CPU usage limit.
+ cpu: 250m
+ # Memory usage limit.
+ memory: 256Mi
+ # Initial CPU and memory resource requests for the container.
+ requests:
+ # CPU usage request.
+ cpu: 250m
+ # Memory usage request.
+ memory: 256Mi
- ## Labels to attach to the resource.
- labels: ~
+ startupProbe:
+ # Number of consecutive failures before marking the container as unhealthy.
+ failureThreshold: 6
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 5
+ # How often to perform the probe.
+ periodSeconds: 10
+ # Minimum consecutive successes for the probe to be considered successful.
+ successThreshold: 1
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 5
+ exec:
+ # Run the specified command to check.
+ command: [ '/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2 localhost
2181 | grep imok' ]
- ## Annotations to attach to the resource.
- annotations: ~
+ readinessProbe:
+ # Number of consecutive failures before marking the container as unhealthy.
+ failureThreshold: 6
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 5
+ # How often to perform the probe.
+ periodSeconds: 10
+ # Minimum consecutive successes for the probe to be considered successful.
+ successThreshold: 1
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 5
+ exec:
+ # Run the specified command to check.
+ command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep error | grep null' ]
+
+ livenessProbe:
+ # Number of consecutive failures before marking the container as unhealthy.
+ failureThreshold: 6
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 30
+ # How often to perform the probe.
+ periodSeconds: 10
+ # Minimum consecutive successes for the probe to be considered successful.
+ successThreshold: 1
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 5
+ exec:
+ # Run the specified command to check.
+ command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep ruok' ]
+
+ # This allows a dedicated log device to be used, and helps avoid competition
between logging and snapshots.
+ dataLogDir: ""
+ # tickTime Basic time unit (in milliseconds) used by ZooKeeper for
heartbeats.
+ tickTime: 2000
+ # initLimit ZooKeeper uses to limit the length of time the ZooKeeper servers
in quorum have to connect to a leader.
+ initLimit: 10
+ # syncLimit How far out of date a server can be from a leader.
+ syncLimit: 5
+ # preAllocSize Block size for transaction log file.
+ preAllocSize: 65536
+ # snapCount The number of transactions recorded in the transaction log
before a snapshot can be taken (and the transaction log rolled).
+ snapCount: 100000
+ # fourlwCommandsWhitelist A list of comma separated Four Letter Words
commands that can be executed.
+ fourlwCommandsWhitelist: srvr, mntr, ruok
+ # listenOnAllIPs Allow ZooKeeper to listen for connections from its peers on
all available IP addresses.
+ listenOnAllIPs: false
+ # Ongoing data directory cleanup configuration
+ autopurge:
+ # snapRetainCount The most recent snapshots amount (and corresponding
transaction logs) to retain.
+ snapRetainCount: 3
+ # purgeInterval The time interval (in hours) for which the purge task has
to be triggered.
+ purgeInterval: 0
+ # maxClientCnxns Limits the number of concurrent connections that a single
client may make to a single member of the ZooKeeper ensemble.
+ maxClientCnxns: 60
+ # maxSessionTimeout Maximum session timeout (in milliseconds) that the
server will allow the client to negotiate.
+ maxSessionTimeout: 40000
+ # heapSize Size (in MB) for the Java Heap options (Xmx and Xms).
+ heapSize: 1024
+ # logLevel Log level for the ZooKeeper server. ERROR by default.
+ logLevel: ERROR
+ # authentication parameters.
+ auth:
+ # authentication client settings.
+ client:
+ # auth.client.enabled Enable ZooKeeper client-server authentication. It
uses SASL/Digest-MD5.
+ enabled: false
+ # auth.client.clientUser User that will use ZooKeeper clients to auth.
+ clientUser: ""
+ # auth.client.clientPassword Password that will use ZooKeeper clients to
auth.
+ clientPassword: ""
+ # auth.client.serverUsers Comma, semicolon or whitespace separated list
of user to be created.
+ serverUsers: ""
+ # auth.client.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
+ serverPasswords: ""
+ # auth.client.existingSecret Use existing secret (ignores previous
passwords).
+ existingSecret: ""
+ # authentication quorum settings.
+ quorum:
+ # auth.quorum.enabled Enable ZooKeeper server-server authentication. It
uses SASL/Digest-MD5.
+ enabled: false
+ # auth.quorum.learnerUser User that the ZooKeeper quorumLearner will use
to authenticate to quorumServers.
+ learnerUser: ""
+ # auth.quorum.learnerPassword Password that the ZooKeeper quorumLearner
will use to authenticate to quorumServers.
+ learnerPassword: ""
+ # auth.quorum.serverUsers Comma, semicolon or whitespace separated list
of users for the quorumServers.
+ serverUsers: ""
+ # auth.quorum.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
+ serverPasswords: ""
+ # auth.quorum.existingSecret Use existing secret (ignores previous
passwords).
+ existingSecret: ""
+
+nacos:
+ ## Whether to enable the nacos.
+ enabled: true
+
+ ## Specifies the mode in which nacos is running (standalone, cluster, etc.).
+ mode: standalone
+
+ ## Override the namespace where the resource is deployed.
+ namespaceOverride: ~
+
+ ## Labels to attach to the resource.
+ labels: ~
- ## Specifies the cluster's domain name for DNS resolution.
- clusterDomain: cluster.local
+ ## Annotations to attach to the resource.
+ annotations: ~
- ## Number of replicas for the Deployment.
- replicas: 1
+ ## Specifies the cluster's domain name for DNS resolution.
+ clusterDomain: cluster.local
- plugin:
- # Whether to enable the plugin.
- enabled: true
- # Configure the container image for the plugin.
- image:
- # Docker registry where the plugin image is hosted.
- registry: nacos/nacos-peer-finder-plugin
- # Specifies the image tag to use.
- tag: 1.1
- # Image pull policy (IfNotPresent, Always, Never).
- pullPolicy: IfNotPresent
+ ## Number of replicas for the Deployment.
+ replicas: 1
+ plugin:
+ # Whether to enable the plugin.
+ enabled: true
+ # Configure the container image for the plugin.
image:
- # Source of the container image.
- registry: docker.io/nacos/nacos-server
- # Version tag of the container image.
- tag: v2.2.3
- # Image pull policy, available options are: Always, IfNotPresent, Never.
+ # Docker registry where the plugin image is hosted.
+ registry: nacos/nacos-peer-finder-plugin
+ # Specifies the image tag to use.
+ tag: 1.1
+ # Image pull policy (IfNotPresent, Always, Never).
pullPolicy: IfNotPresent
- securityContext:
- # Whether to enable the security context.
- enabled: true
- # Defines the POSIX group ID that owns the pod's volumes.
- fsGroup: 1001
-
- containerSecurityContext:
- # Whether to enable the container security context.
- enabled: true
- # Specifies the user ID under which the container should run.
- runAsUser: 1001
- # Set to 'true' to run the container as a non-root user.
- runAsNonRoot: true
- # Set to 'false' to disallow privilege escalation for the container.
- allowPrivilegeEscalation: false
-
- service:
- # Labels to be applied to the service.
- labels: ~
- # Annotations to be added to the service.
- annotations: ~
- # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
- type: NodePort
- # Specifies the ClusterIP for the service, or use "~" to auto-assign.
- clusterIP: ~
- # List of external IPs to associate with the service.
- externalIPs: ~
- # Specifies the IP address for a LoadBalancer service.
- loadBalancerIP: ~
- # Restrict access to the LoadBalancer by IP ranges.
- loadBalancerSourceRanges: ~
- # Specifies the LoadBalancer class (if applicable).
- loadBalancerClass: ~
- # Specifies the session affinity mode (None, ClientIP)
- sessionAffinity: None
- # Set to 'true' to publish endpoints for not-ready pods.
- publishNotReadyAddresses: true
-
- startupProbe:
- # Delay before the probe is initiated.
- initialDelaySeconds: 180
- # How often to perform the probe.
- periodSeconds: 5
- # Time to wait for the probe to complete.
- timeoutSeconds: 10
- # Perform an HTTP GET request to check.
- httpGet:
- # The protocol used for the HTTP GET request (HTTP, HTTPS).
- scheme: HTTP
- # The port on which the HTTP GET request will be made.
- port: 8848
- # The path to use for the HTTP GET request.
- path: /nacos/v1/console/health/readiness
+ image:
+ # Source of the container image.
+ registry: docker.io/nacos/nacos-server
+ # Version tag of the container image.
+ tag: v2.2.3
+ # Image pull policy, available options are: Always, IfNotPresent, Never.
+ pullPolicy: IfNotPresent
- readinessProbe:
- # Delay before the probe is initiated.
- initialDelaySeconds: 10
- # How often to perform the probe.
- periodSeconds: 5
- # Time to wait for the probe to complete.
- timeoutSeconds: 10
- # Perform an HTTP GET request to check.
- httpGet:
- # The protocol used for the HTTP GET request (HTTP, HTTPS).
- scheme: HTTP
- # The port on which the HTTP GET request will be made.
- port: 8848
- # The path to use for the HTTP GET request.
- path: /nacos/v1/console/health/readiness
+ securityContext:
+ # Whether to enable the security context.
+ enabled: true
+ # Defines the POSIX group ID that owns the pod's volumes.
+ fsGroup: 1001
- livenessProbe:
- # Delay before the probe is initiated.
- initialDelaySeconds: 10
- # How often to perform the probe.
- periodSeconds: 5
- # Time to wait for the probe to complete.
- timeoutSeconds: 10
- # Perform an HTTP GET request to check.
- httpGet:
- # The protocol used for the HTTP GET request (HTTP, HTTPS).
- scheme: HTTP
- # The port on which the HTTP GET request will be made.
- port: 8848
- # The path to use for the HTTP GET request.
- path: /nacos/v1/console/health/liveness
-
- resources:
- # Maximum CPU and memory resources allowed for the container.
- limits:
- # CPU usage limit.
- cpu: ~
- # Memory usage limit.
- memory: ~
- # Initial CPU and memory resource requests for the container.
- requests:
- # CPU usage request.
- cpu: ~
- # Memory usage request.
- memory: ~
-
- # Specifies the port on which the server should run.
- serverPort: 8848
-
- # Specifies the preferred host mode (e.g., 'hostname').
- preferhostmode: ~
-
- storage:
- # Specifies the storage type (embedded, mysql, etc.).
- type: embedded
- # For MySQL storage, you need to change the "embedded" to "mysql" before
you can use the db configuration.
- db:
- # Specifies the database host.
- host: localhost
- # Specifies the database name.
- name: nacos
- # Specifies the database port.
- port: 3306
- # Specifies the database username.
- username: mysql
- # Specifies the database password.
- password: passw0rd
- # Additional database connection parameters (if needed).
- param: ""
+ containerSecurityContext:
+ # Whether to enable the container security context.
+ enabled: true
+ # Specifies the user ID under which the container should run.
+ runAsUser: 1001
+ # Set to 'true' to run the container as a non-root user.
+ runAsNonRoot: true
+ # Set to 'false' to disallow privilege escalation for the container.
+ allowPrivilegeEscalation: false
+
+ service:
+ # Labels to be applied to the service.
+ labels: ~
+ # Annotations to be added to the service.
+ annotations: ~
+ # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
+ type: NodePort
+ # Specifies the ClusterIP for the service, or use "~" to auto-assign.
+ clusterIP: ~
+ # List of external IPs to associate with the service.
+ externalIPs: ~
+ # Specifies the IP address for a LoadBalancer service.
+ loadBalancerIP: ~
+ # Restrict access to the LoadBalancer by IP ranges.
+ loadBalancerSourceRanges: ~
+ # Specifies the LoadBalancer class (if applicable).
+ loadBalancerClass: ~
+ # Specifies the session affinity mode (None, ClientIP)
+ sessionAffinity: None
+ # Set to 'true' to publish endpoints for not-ready pods.
+ publishNotReadyAddresses: true
+
+ startupProbe:
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 180
+ # How often to perform the probe.
+ periodSeconds: 5
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 10
+ # Perform an HTTP GET request to check.
+ httpGet:
+ # The protocol used for the HTTP GET request (HTTP, HTTPS).
+ scheme: HTTP
+ # The port on which the HTTP GET request will be made.
+ port: 8848
+ # The path to use for the HTTP GET request.
+ path: /nacos/v1/console/health/readiness
+
+ readinessProbe:
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 10
+ # How often to perform the probe.
+ periodSeconds: 5
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 10
+ # Perform an HTTP GET request to check.
+ httpGet:
+ # The protocol used for the HTTP GET request (HTTP, HTTPS).
+ scheme: HTTP
+ # The port on which the HTTP GET request will be made.
+ port: 8848
+ # The path to use for the HTTP GET request.
+ path: /nacos/v1/console/health/readiness
+
+ livenessProbe:
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 10
+ # How often to perform the probe.
+ periodSeconds: 5
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 10
+ # Perform an HTTP GET request to check.
+ httpGet:
+ # The protocol used for the HTTP GET request (HTTP, HTTPS).
+ scheme: HTTP
+ # The port on which the HTTP GET request will be made.
+ port: 8848
+ # The path to use for the HTTP GET request.
+ path: /nacos/v1/console/health/liveness
+
+ resources:
+ # Maximum CPU and memory resources allowed for the container.
+ limits:
+ # CPU usage limit.
+ cpu: ~
+ # Memory usage limit.
+ memory: ~
+ # Initial CPU and memory resource requests for the container.
+ requests:
+ # CPU usage request.
+ cpu: ~
+ # Memory usage request.
+ memory: ~
+
+ # Specifies the port on which the server should run.
+ serverPort: 8848
+
+ # Specifies the preferred host mode (e.g., 'hostname').
+ preferhostmode: ~
+
+ storage:
+ # Specifies the storage type (embedded, mysql, etc.).
+ type: embedded
+ # For MySQL storage, you need to change the "embedded" to "mysql" before
you can use the db configuration.
+ db:
+ # Specifies the database host.
+ host: localhost
+ # Specifies the database name.
+ name: nacos
+ # Specifies the database port.
+ port: 3306
+ # Specifies the database username.
+ username: mysql
+ # Specifies the database password.
+ password: passw0rd
+ # Additional database connection parameters (if needed).
+ param: ""
ingress:
## Whether to enable the ingress.
