This is an automated email from the ASF dual-hosted git repository.
zhongxjian pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-kubernetes.git
The following commit(s) were added to refs/heads/master by this push:
new fe9a2927 [charts] Registry consolidation team (#477)
fe9a2927 is described below
commit fe9a2927737dde19473e8369b24b71de3f9234d9
Author: mfordjody <[email protected]>
AuthorDate: Tue Oct 22 07:49:50 2024 +0800
[charts] Registry consolidation team (#477)
---
manifests/charts/admin/templates/NOTES.txt | 10 +-
.../charts/admin/templates/modular/_extras.tpl | 4 +-
.../charts/admin/templates/modular/_labels.tpl | 4 +-
.../charts/admin/templates/modular/_matches.tpl | 4 +-
.../templates/register/nacos/nacos-configmap.yaml | 2 +-
.../templates/register/nacos/nacos-service.yaml | 2 +-
.../register/nacos/nacos-statefulset.yaml | 2 +-
.../register/zookeeper/zookeeper-configmap.yaml | 2 +-
.../register/zookeeper/zookeeper-service.yaml | 4 +-
.../register/zookeeper/zookeeper-statefulset.yaml | 6 +-
manifests/charts/admin/values.yaml | 706 +++++++++++----------
11 files changed, 374 insertions(+), 372 deletions(-)
diff --git a/manifests/charts/admin/templates/NOTES.txt
b/manifests/charts/admin/templates/NOTES.txt
index 02c5c911..f177446a 100644
--- a/manifests/charts/admin/templates/NOTES.txt
+++ b/manifests/charts/admin/templates/NOTES.txt
@@ -5,24 +5,24 @@ Version: {{ .Values.image.tag }}
🔄 Please wait a few minutes for other dependent components to finish deploying.
-{{- if .Values.zookeeper.enabled }}
+{{- if .Values.registerCentre.zookeeper.enabled }}
Dependency: ZooKeeper
-Version: {{ .Values.zookeeper.image.tag }}
+Version: {{ .Values.registerCentre.zookeeper.image.tag }}
🚨 If you are using the Nacos registry, Please disable Zookeeper and enable
Nacos.
Otherwise, Zookeeper is used by default.
🎊 You have enabled the internal Register Center.
-{{- else if .Values.nacos.enabled }}
+{{- else if .Values.registerCentre.nacos.enabled }}
Dependency: Nacos
-Version: {{ .Values.nacos.image.tag }}
+Version: {{ .Values.registerCentre.nacos.image.tag }}
🎊 You have enabled the internal Register Center.
{{- end }}
-{{- if and (eq .Values.zookeeper.enabled false) (eq .Values.nacos.enabled
false) }}
+{{- if and (eq .Values.registerCentre.zookeeper.enabled false) (eq
.Values.registerCentre.nacos.enabled false) }}
Dependency: ❎
🚫 You have disabled the internal Register Center.
diff --git a/manifests/charts/admin/templates/modular/_extras.tpl
b/manifests/charts/admin/templates/modular/_extras.tpl
index 32a5c605..c7b6ddb5 100644
--- a/manifests/charts/admin/templates/modular/_extras.tpl
+++ b/manifests/charts/admin/templates/modular/_extras.tpl
@@ -2,7 +2,7 @@
Return the ZooKeeper client-server authentication credentials secret.
*/}}
{{- define "zoo.client.secretName" -}}
-{{- $zoo := .Values.zookeeper -}}
+{{- $zoo := .Values.registerCentre.zookeeper -}}
{{- if $zoo.auth.client.existingSecret -}}
{{- printf "%s" (tpl $zoo.auth.client.existingSecret $) -}}
{{- else -}}
@@ -14,7 +14,7 @@ Return the ZooKeeper client-server authentication credentials
secret.
Return the ZooKeeper server-server authentication credentials secret.
*/}}
{{- define "zoo.quorum.secretName" -}}
-{{- $zoo := .Values.zookeeper -}}
+{{- $zoo := .Values.registerCentre.zookeeper -}}
{{- if $zoo.auth.quorum.existingSecret -}}
{{- printf "%s" (tpl $zoo.auth.quorum.existingSecret $) -}}
{{- else -}}
diff --git a/manifests/charts/admin/templates/modular/_labels.tpl
b/manifests/charts/admin/templates/modular/_labels.tpl
index 0a70f49c..832c14f6 100644
--- a/manifests/charts/admin/templates/modular/_labels.tpl
+++ b/manifests/charts/admin/templates/modular/_labels.tpl
@@ -15,7 +15,7 @@ Return ZooKeeper Labels to use.
{{- define "zoo.labels" -}}
app: {{ template "zoo.name" . }}
app.kubernetes.io/name: {{ template "zoo.name" . }}
-helm.sh/chart: {{ include "zoo.name" . }}-{{ .Values.zookeeper.image.tag }}
+helm.sh/chart: {{ include "zoo.name" . }}-{{
.Values.registerCentre.zookeeper.image.tag }}
app.kubernetes.io/instance: {{ template "zoo.name" . }}
app.kubernetes.io/component: {{ template "zoo.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
@@ -27,7 +27,7 @@ Return Nacos Labels to use.
{{- define "nacos.labels" -}}
app: {{ template "nacos.name" . }}
app.kubernetes.io/name: {{ template "nacos.name" . }}
-helm.sh/chart: {{ include "nacos.name" . }}-{{ .Values.nacos.image.tag }}
+helm.sh/chart: {{ include "nacos.name" . }}-{{
.Values.registerCentre.nacos.image.tag }}
app.kubernetes.io/instance: {{ template "nacos.name" . }}
app.kubernetes.io/component: {{ template "nacos.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
diff --git a/manifests/charts/admin/templates/modular/_matches.tpl
b/manifests/charts/admin/templates/modular/_matches.tpl
index b8d4252a..2e5abe8c 100644
--- a/manifests/charts/admin/templates/modular/_matches.tpl
+++ b/manifests/charts/admin/templates/modular/_matches.tpl
@@ -13,7 +13,7 @@ Return ZooKeeper matchLabels to use.
*/}}
{{- define "zoo.matchLabels" -}}
app.kubernetes.io/name: {{ template "zoo.name" . }}
-helm.sh/chart: {{ include "zoo.name" . }}-{{ .Values.zookeeper.image.tag }}
+helm.sh/chart: {{ include "zoo.name" . }}-{{
.Values.registerCentre.zookeeper.image.tag }}
app.kubernetes.io/instance: {{ template "zoo.name" . }}
app.kubernetes.io/component: {{ template "zoo.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
@@ -24,7 +24,7 @@ Return Nacos matchLabels to use.
*/}}
{{- define "nacos.matchLabels" -}}
app.kubernetes.io/name: {{ template "nacos.name" . }}
-helm.sh/chart: {{ include "nacos.name" . }}-{{ .Values.nacos.image.tag }}
+helm.sh/chart: {{ include "nacos.name" . }}-{{
.Values.registerCentre.nacos.image.tag }}
app.kubernetes.io/instance: {{ template "nacos.name" . }}
app.kubernetes.io/component: {{ template "nacos.name" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
diff --git
a/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
b/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
index a5268eb8..7720b68c 100644
--- a/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
+++ b/manifests/charts/admin/templates/register/nacos/nacos-configmap.yaml
@@ -1,4 +1,4 @@
-{{- $nacos := .Values.nacos -}}
+{{- $nacos := .Values.registerCentre.nacos -}}
{{- if and $nacos.enabled (eq $nacos.storage.type "mysql") }}
apiVersion: v1
kind: ConfigMap
diff --git a/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
b/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
index c8fb4a0f..ee06f1a1 100644
--- a/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
+++ b/manifests/charts/admin/templates/register/nacos/nacos-service.yaml
@@ -1,4 +1,4 @@
-{{- $nacos := .Values.nacos -}}
+{{- $nacos := .Values.registerCentre.nacos -}}
{{- $service := $nacos.service -}}
{{- if $nacos.enabled }}
apiVersion: v1
diff --git
a/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
b/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
index 30bcde0f..b61cb9d1 100644
--- a/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
+++ b/manifests/charts/admin/templates/register/nacos/nacos-statefulset.yaml
@@ -1,4 +1,4 @@
-{{- $nacos := .Values.nacos -}}
+{{- $nacos := .Values.registerCentre.nacos -}}
{{- if $nacos.enabled }}
apiVersion: {{ template "apiVersion" . }}
kind: StatefulSet
diff --git
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
index 6ccbdb4d..1d7f1bae 100644
---
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
+++
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-configmap.yaml
@@ -1,4 +1,4 @@
-{{- $zoo := .Values.zookeeper -}}
+{{- $zoo := .Values.registerCentre.zookeeper -}}
{{- if $zoo.enabled }}
apiVersion: v1
kind: ConfigMap
diff --git
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
index 158844da..386755c5 100644
--- a/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
+++ b/manifests/charts/admin/templates/register/zookeeper/zookeeper-service.yaml
@@ -1,6 +1,6 @@
-{{- $zoo := .Values.zookeeper -}}
+{{- $zoo := .Values.registerCentre.zookeeper -}}
{{- $service := $zoo.service -}}
-{{- if .Values.zookeeper.enabled }}
+{{- if .Values.registerCentre.zookeeper.enabled }}
apiVersion: v1
kind: Service
metadata:
diff --git
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
index 41746289..8164ac59 100644
---
a/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
+++
b/manifests/charts/admin/templates/register/zookeeper/zookeeper-statefulset.yaml
@@ -1,4 +1,4 @@
-{{- $zoo := .Values.zookeeper -}}
+{{- $zoo := .Values.registerCentre.zookeeper -}}
{{- if $zoo.enabled }}
apiVersion: {{ template "apiVersion" . }}
kind: StatefulSet
@@ -15,7 +15,7 @@ metadata:
{{- toYaml . | nindent 4 }}
{{- end }}
spec:
- replicas: {{ .Values.replicas }}
+ replicas: {{ $zoo.replicas }}
selector:
matchLabels:
{{- include "zoo.matchLabels" . | nindent 6 }}
@@ -73,7 +73,7 @@ spec:
- name: ZOO_MAX_SESSION_TIMEOUT
value: {{ $zoo.maxSessionTimeout | quote }}
{{- $zooName := include "zoo.name" . }}
- {{- $zooReplicas := int .Values.zookeeper.replicas }}
+ {{- $zooReplicas := int $zoo.replicas }}
{{- $zooHeadless := printf "%s-%s" $zooName "headless" | trunc 63 }}
{{- $zooNamespace := include "admin.namespace" . }}
{{- $zooDomain := $zoo.clusterDomain }}
diff --git a/manifests/charts/admin/values.yaml
b/manifests/charts/admin/values.yaml
index be8982dc..4745acad 100644
--- a/manifests/charts/admin/values.yaml
+++ b/manifests/charts/admin/values.yaml
@@ -467,358 +467,360 @@ jaeger:
## Whether to enable the jaeger.
enabled: false
-zookeeper:
- ## Whether to enable the zookeeper.
- enabled: true
-
- ## Override the namespace where the resource is deployed.
- namespaceOverride: ~
-
- ## Labels to attach to the resource.
- labels: ~
-
- ## Annotations to attach to the resource.
- annotations: ~
-
- ## Specifies the cluster's domain name for DNS resolution.
- clusterDomain: cluster.local
-
- ## Number of replicas for the Deployment.
- replicas: 1
-
- image:
- # Source of the container image.
- registry: docker.io/bitnami/zookeeper
- # Version tag of the container image.
- tag: 3.9-debian-12
- # Image pull policy, available options are: Always, IfNotPresent, Never.
- pullPolicy: IfNotPresent
- # Set to 'true' to enable debug mode for the image.
- debug: false
-
- securityContext:
- # Whether to enable the security context.
+registerCentre:
+ enabled: false
+ zookeeper:
+ ## Whether to enable the zookeeper.
enabled: true
- # Defines the POSIX group ID that owns the pod's volumes.
- fsGroup: 1001
- containerSecurityContext:
- # Whether to enable the container security context.
- enabled: true
- # Specifies the user ID under which the container should run.
- runAsUser: 1001
- # Set to 'true' to run the container as a non-root user.
- runAsNonRoot: true
- # Set to 'false' to disallow privilege escalation for the container.
- allowPrivilegeEscalation: false
+ ## Override the namespace where the resource is deployed.
+ namespaceOverride: ~
- service:
- # Labels to be applied to the service.
+ ## Labels to attach to the resource.
labels: ~
- # Annotations to be added to the service.
+
+ ## Annotations to attach to the resource.
annotations: ~
- # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
- type: ClusterIP
- # Specifies the ClusterIP for the service, or use "~" to auto-assign.
- clusterIP: ~
- # List of external IPs to associate with the service.
- externalIPs: ~
- # Specifies the IP address for a LoadBalancer service.
- loadBalancerIP: ~
- # Restrict access to the LoadBalancer by IP ranges.
- loadBalancerSourceRanges: ~
- # Specifies the LoadBalancer class (if applicable).
- loadBalancerClass: ~
- # Specifies the session affinity mode (None, ClientIP)
- sessionAffinity: None
- # Set to 'true' to publish endpoints for not-ready pods.
- publishNotReadyAddresses: true
- resources:
- # Maximum CPU and memory resources allowed for the container.
- limits:
- # CPU usage limit.
- cpu: 250m
- # Memory usage limit.
- memory: 256Mi
- # Initial CPU and memory resource requests for the container.
- requests:
- # CPU usage request.
- cpu: 250m
- # Memory usage request.
- memory: 256Mi
+ ## Specifies the cluster's domain name for DNS resolution.
+ clusterDomain: cluster.local
- startupProbe:
- # Number of consecutive failures before marking the container as unhealthy.
- failureThreshold: 6
- # Delay before the probe is initiated.
- initialDelaySeconds: 5
- # How often to perform the probe.
- periodSeconds: 10
- # Minimum consecutive successes for the probe to be considered successful.
- successThreshold: 1
- # Time to wait for the probe to complete.
- timeoutSeconds: 5
- exec:
- # Run the specified command to check.
- command: [ '/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2 localhost
2181 | grep imok' ]
+ ## Number of replicas for the Deployment.
+ replicas: 1
- readinessProbe:
- # Number of consecutive failures before marking the container as unhealthy.
- failureThreshold: 6
- # Delay before the probe is initiated.
- initialDelaySeconds: 5
- # How often to perform the probe.
- periodSeconds: 10
- # Minimum consecutive successes for the probe to be considered successful.
- successThreshold: 1
- # Time to wait for the probe to complete.
- timeoutSeconds: 5
- exec:
- # Run the specified command to check.
- command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep error | grep null' ]
+ image:
+ # Source of the container image.
+ registry: docker.io/bitnami/zookeeper
+ # Version tag of the container image.
+ tag: 3.9-debian-12
+ # Image pull policy, available options are: Always, IfNotPresent, Never.
+ pullPolicy: IfNotPresent
+ # Set to 'true' to enable debug mode for the image.
+ debug: false
+
+ securityContext:
+ # Whether to enable the security context.
+ enabled: true
+ # Defines the POSIX group ID that owns the pod's volumes.
+ fsGroup: 1001
+
+ containerSecurityContext:
+ # Whether to enable the container security context.
+ enabled: true
+ # Specifies the user ID under which the container should run.
+ runAsUser: 1001
+ # Set to 'true' to run the container as a non-root user.
+ runAsNonRoot: true
+ # Set to 'false' to disallow privilege escalation for the container.
+ allowPrivilegeEscalation: false
+
+ service:
+ # Labels to be applied to the service.
+ labels: ~
+ # Annotations to be added to the service.
+ annotations: ~
+ # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
+ type: ClusterIP
+ # Specifies the ClusterIP for the service, or use "~" to auto-assign.
+ clusterIP: ~
+ # List of external IPs to associate with the service.
+ externalIPs: ~
+ # Specifies the IP address for a LoadBalancer service.
+ loadBalancerIP: ~
+ # Restrict access to the LoadBalancer by IP ranges.
+ loadBalancerSourceRanges: ~
+ # Specifies the LoadBalancer class (if applicable).
+ loadBalancerClass: ~
+ # Specifies the session affinity mode (None, ClientIP)
+ sessionAffinity: None
+ # Set to 'true' to publish endpoints for not-ready pods.
+ publishNotReadyAddresses: true
+
+ resources:
+ # Maximum CPU and memory resources allowed for the container.
+ limits:
+ # CPU usage limit.
+ cpu: 250m
+ # Memory usage limit.
+ memory: 256Mi
+ # Initial CPU and memory resource requests for the container.
+ requests:
+ # CPU usage request.
+ cpu: 250m
+ # Memory usage request.
+ memory: 256Mi
+
+ startupProbe:
+ # Number of consecutive failures before marking the container as
unhealthy.
+ failureThreshold: 6
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 5
+ # How often to perform the probe.
+ periodSeconds: 10
+ # Minimum consecutive successes for the probe to be considered
successful.
+ successThreshold: 1
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 5
+ exec:
+ # Run the specified command to check.
+ command: [ '/bin/bash', '-c', 'echo "ruok" | timeout 2 nc -w 2
localhost 2181 | grep imok' ]
+
+ readinessProbe:
+ # Number of consecutive failures before marking the container as
unhealthy.
+ failureThreshold: 6
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 5
+ # How often to perform the probe.
+ periodSeconds: 10
+ # Minimum consecutive successes for the probe to be considered
successful.
+ successThreshold: 1
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 5
+ exec:
+ # Run the specified command to check.
+ command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep error | grep null' ]
+
+ livenessProbe:
+ # Number of consecutive failures before marking the container as
unhealthy.
+ failureThreshold: 6
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 30
+ # How often to perform the probe.
+ periodSeconds: 10
+ # Minimum consecutive successes for the probe to be considered
successful.
+ successThreshold: 1
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 5
+ exec:
+ # Run the specified command to check.
+ command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep ruok' ]
+
+ # This allows a dedicated log device to be used, and helps avoid
competition between logging and snapshots.
+ dataLogDir: ""
+ # tickTime Basic time unit (in milliseconds) used by ZooKeeper for
heartbeats.
+ tickTime: 2000
+ # initLimit ZooKeeper uses to limit the length of time the ZooKeeper
servers in quorum have to connect to a leader.
+ initLimit: 10
+ # syncLimit How far out of date a server can be from a leader.
+ syncLimit: 5
+ # preAllocSize Block size for transaction log file.
+ preAllocSize: 65536
+ # snapCount The number of transactions recorded in the transaction log
before a snapshot can be taken (and the transaction log rolled).
+ snapCount: 100000
+ # fourlwCommandsWhitelist A list of comma separated Four Letter Words
commands that can be executed.
+ fourlwCommandsWhitelist: srvr, mntr, ruok
+ # listenOnAllIPs Allow ZooKeeper to listen for connections from its peers
on all available IP addresses.
+ listenOnAllIPs: false
+ # Ongoing data directory cleanup configuration
+ autopurge:
+ # snapRetainCount The most recent snapshots amount (and corresponding
transaction logs) to retain.
+ snapRetainCount: 3
+ # purgeInterval The time interval (in hours) for which the purge task
has to be triggered.
+ purgeInterval: 0
+ # maxClientCnxns Limits the number of concurrent connections that a single
client may make to a single member of the ZooKeeper ensemble.
+ maxClientCnxns: 60
+ # maxSessionTimeout Maximum session timeout (in milliseconds) that the
server will allow the client to negotiate.
+ maxSessionTimeout: 40000
+ # heapSize Size (in MB) for the Java Heap options (Xmx and Xms).
+ heapSize: 1024
+ # logLevel Log level for the ZooKeeper server. ERROR by default.
+ logLevel: ERROR
+ # authentication parameters.
+ auth:
+ # authentication client settings.
+ client:
+ # auth.client.enabled Enable ZooKeeper client-server authentication.
It uses SASL/Digest-MD5.
+ enabled: false
+ # auth.client.clientUser User that will use ZooKeeper clients to auth.
+ clientUser: ""
+ # auth.client.clientPassword Password that will use ZooKeeper clients
to auth.
+ clientPassword: ""
+ # auth.client.serverUsers Comma, semicolon or whitespace separated
list of user to be created.
+ serverUsers: ""
+ # auth.client.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
+ serverPasswords: ""
+ # auth.client.existingSecret Use existing secret (ignores previous
passwords).
+ existingSecret: ""
+ # authentication quorum settings.
+ quorum:
+ # auth.quorum.enabled Enable ZooKeeper server-server authentication.
It uses SASL/Digest-MD5.
+ enabled: false
+ # auth.quorum.learnerUser User that the ZooKeeper quorumLearner will
use to authenticate to quorumServers.
+ learnerUser: ""
+ # auth.quorum.learnerPassword Password that the ZooKeeper
quorumLearner will use to authenticate to quorumServers.
+ learnerPassword: ""
+ # auth.quorum.serverUsers Comma, semicolon or whitespace separated
list of users for the quorumServers.
+ serverUsers: ""
+ # auth.quorum.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
+ serverPasswords: ""
+ # auth.quorum.existingSecret Use existing secret (ignores previous
passwords).
+ existingSecret: ""
+
+ nacos:
+ ## Whether to enable the nacos.
+ enabled: false
- livenessProbe:
- # Number of consecutive failures before marking the container as unhealthy.
- failureThreshold: 6
- # Delay before the probe is initiated.
- initialDelaySeconds: 30
- # How often to perform the probe.
- periodSeconds: 10
- # Minimum consecutive successes for the probe to be considered successful.
- successThreshold: 1
- # Time to wait for the probe to complete.
- timeoutSeconds: 5
- exec:
- # Run the specified command to check.
- command: [ '/bin/bash', '-c', 'curl -s -m 2
http://localhost:8080/commands/ruok | grep ruok' ]
-
- # This allows a dedicated log device to be used, and helps avoid competition
between logging and snapshots.
- dataLogDir: ""
- # tickTime Basic time unit (in milliseconds) used by ZooKeeper for
heartbeats.
- tickTime: 2000
- # initLimit ZooKeeper uses to limit the length of time the ZooKeeper servers
in quorum have to connect to a leader.
- initLimit: 10
- # syncLimit How far out of date a server can be from a leader.
- syncLimit: 5
- # preAllocSize Block size for transaction log file.
- preAllocSize: 65536
- # snapCount The number of transactions recorded in the transaction log
before a snapshot can be taken (and the transaction log rolled).
- snapCount: 100000
- # fourlwCommandsWhitelist A list of comma separated Four Letter Words
commands that can be executed.
- fourlwCommandsWhitelist: srvr, mntr, ruok
- # listenOnAllIPs Allow ZooKeeper to listen for connections from its peers on
all available IP addresses.
- listenOnAllIPs: false
- # Ongoing data directory cleanup configuration
- autopurge:
- # snapRetainCount The most recent snapshots amount (and corresponding
transaction logs) to retain.
- snapRetainCount: 3
- # purgeInterval The time interval (in hours) for which the purge task has
to be triggered.
- purgeInterval: 0
- # maxClientCnxns Limits the number of concurrent connections that a single
client may make to a single member of the ZooKeeper ensemble.
- maxClientCnxns: 60
- # maxSessionTimeout Maximum session timeout (in milliseconds) that the
server will allow the client to negotiate.
- maxSessionTimeout: 40000
- # heapSize Size (in MB) for the Java Heap options (Xmx and Xms).
- heapSize: 1024
- # logLevel Log level for the ZooKeeper server. ERROR by default.
- logLevel: ERROR
- # authentication parameters.
- auth:
- # authentication client settings.
- client:
- # auth.client.enabled Enable ZooKeeper client-server authentication. It
uses SASL/Digest-MD5.
- enabled: false
- # auth.client.clientUser User that will use ZooKeeper clients to auth.
- clientUser: ""
- # auth.client.clientPassword Password that will use ZooKeeper clients to
auth.
- clientPassword: ""
- # auth.client.serverUsers Comma, semicolon or whitespace separated list
of user to be created.
- serverUsers: ""
- # auth.client.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
- serverPasswords: ""
- # auth.client.existingSecret Use existing secret (ignores previous
passwords).
- existingSecret: ""
- # authentication quorum settings.
- quorum:
- # auth.quorum.enabled Enable ZooKeeper server-server authentication. It
uses SASL/Digest-MD5.
- enabled: false
- # auth.quorum.learnerUser User that the ZooKeeper quorumLearner will use
to authenticate to quorumServers.
- learnerUser: ""
- # auth.quorum.learnerPassword Password that the ZooKeeper quorumLearner
will use to authenticate to quorumServers.
- learnerPassword: ""
- # auth.quorum.serverUsers Comma, semicolon or whitespace separated list
of users for the quorumServers.
- serverUsers: ""
- # auth.quorum.serverPasswords Comma, semicolon or whitespace separated
list of passwords to assign to users when created.
- serverPasswords: ""
- # auth.quorum.existingSecret Use existing secret (ignores previous
passwords).
- existingSecret: ""
-
-nacos:
- ## Whether to enable the nacos.
- enabled: false
+ ## Specifies the mode in which nacos is running (standalone, cluster,
etc.).
+ mode: standalone
- ## Specifies the mode in which nacos is running (standalone, cluster, etc.).
- mode: standalone
+ ## Override the namespace where the resource is deployed.
+ namespaceOverride: ~
- ## Override the namespace where the resource is deployed.
- namespaceOverride: ~
+ ## Labels to attach to the resource.
+ labels: ~
- ## Labels to attach to the resource.
- labels: ~
+ ## Annotations to attach to the resource.
+ annotations: ~
- ## Annotations to attach to the resource.
- annotations: ~
+ ## Specifies the cluster's domain name for DNS resolution.
+ clusterDomain: cluster.local
- ## Specifies the cluster's domain name for DNS resolution.
- clusterDomain: cluster.local
+ ## Number of replicas for the Deployment.
+ replicas: 1
- ## Number of replicas for the Deployment.
- replicas: 1
+ plugin:
+ # Whether to enable the plugin.
+ enabled: true
+ # Configure the container image for the plugin.
+ image:
+ # Docker registry where the plugin image is hosted.
+ registry: nacos/nacos-peer-finder-plugin
+ # Specifies the image tag to use.
+ tag: 1.1
+ # Image pull policy (IfNotPresent, Always, Never).
+ pullPolicy: IfNotPresent
- plugin:
- # Whether to enable the plugin.
- enabled: true
- # Configure the container image for the plugin.
image:
- # Docker registry where the plugin image is hosted.
- registry: nacos/nacos-peer-finder-plugin
- # Specifies the image tag to use.
- tag: 1.1
- # Image pull policy (IfNotPresent, Always, Never).
+ # Source of the container image.
+ registry: docker.io/nacos/nacos-server
+ # Version tag of the container image.
+ tag: v2.2.3
+ # Image pull policy, available options are: Always, IfNotPresent, Never.
pullPolicy: IfNotPresent
- image:
- # Source of the container image.
- registry: docker.io/nacos/nacos-server
- # Version tag of the container image.
- tag: v2.2.3
- # Image pull policy, available options are: Always, IfNotPresent, Never.
- pullPolicy: IfNotPresent
-
- securityContext:
- # Whether to enable the security context.
- enabled: true
- # Defines the POSIX group ID that owns the pod's volumes.
- fsGroup: 1001
-
- containerSecurityContext:
- # Whether to enable the container security context.
- enabled: true
- # Specifies the user ID under which the container should run.
- runAsUser: 1001
- # Set to 'true' to run the container as a non-root user.
- runAsNonRoot: true
- # Set to 'false' to disallow privilege escalation for the container.
- allowPrivilegeEscalation: false
-
- service:
- # Labels to be applied to the service.
- labels: ~
- # Annotations to be added to the service.
- annotations: ~
- # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
- type: NodePort
- # Specifies the ClusterIP for the service, or use "~" to auto-assign.
- clusterIP: ~
- # List of external IPs to associate with the service.
- externalIPs: ~
- # Specifies the IP address for a LoadBalancer service.
- loadBalancerIP: ~
- # Restrict access to the LoadBalancer by IP ranges.
- loadBalancerSourceRanges: ~
- # Specifies the LoadBalancer class (if applicable).
- loadBalancerClass: ~
- # Specifies the session affinity mode (None, ClientIP)
- sessionAffinity: None
- # Set to 'true' to publish endpoints for not-ready pods.
- publishNotReadyAddresses: true
-
- startupProbe:
- # Delay before the probe is initiated.
- initialDelaySeconds: 180
- # How often to perform the probe.
- periodSeconds: 5
- # Time to wait for the probe to complete.
- timeoutSeconds: 10
- # Perform an HTTP GET request to check.
- httpGet:
- # The protocol used for the HTTP GET request (HTTP, HTTPS).
- scheme: HTTP
- # The port on which the HTTP GET request will be made.
- port: 8848
- # The path to use for the HTTP GET request.
- path: /nacos/v1/console/health/readiness
-
- readinessProbe:
- # Delay before the probe is initiated.
- initialDelaySeconds: 10
- # How often to perform the probe.
- periodSeconds: 5
- # Time to wait for the probe to complete.
- timeoutSeconds: 10
- # Perform an HTTP GET request to check.
- httpGet:
- # The protocol used for the HTTP GET request (HTTP, HTTPS).
- scheme: HTTP
- # The port on which the HTTP GET request will be made.
- port: 8848
- # The path to use for the HTTP GET request.
- path: /nacos/v1/console/health/readiness
-
- livenessProbe:
- # Delay before the probe is initiated.
- initialDelaySeconds: 10
- # How often to perform the probe.
- periodSeconds: 5
- # Time to wait for the probe to complete.
- timeoutSeconds: 10
- # Perform an HTTP GET request to check.
- httpGet:
- # The protocol used for the HTTP GET request (HTTP, HTTPS).
- scheme: HTTP
- # The port on which the HTTP GET request will be made.
- port: 8848
- # The path to use for the HTTP GET request.
- path: /nacos/v1/console/health/liveness
-
- resources:
- # Maximum CPU and memory resources allowed for the container.
- limits:
- # CPU usage limit.
- cpu: ~
- # Memory usage limit.
- memory: ~
- # Initial CPU and memory resource requests for the container.
- requests:
- # CPU usage request.
- cpu: ~
- # Memory usage request.
- memory: ~
-
- # Specifies the port on which the server should run.
- serverPort: 8848
-
- # Specifies the preferred host mode (e.g., 'hostname').
- preferhostmode: ~
-
- storage:
- # Specifies the storage type (embedded, mysql, etc.).
- type: embedded
- # For MySQL storage, you need to change the "embedded" to "mysql" before
you can use the db configuration.
- db:
- # Specifies the database host.
- host: localhost
- # Specifies the database name.
- name: nacos
- # Specifies the database port.
- port: 3306
- # Specifies the database username.
- username: mysql
- # Specifies the database password.
- password: passw0rd
- # Additional database connection parameters (if needed).
- param: ""
+ securityContext:
+ # Whether to enable the security context.
+ enabled: true
+ # Defines the POSIX group ID that owns the pod's volumes.
+ fsGroup: 1001
+
+ containerSecurityContext:
+ # Whether to enable the container security context.
+ enabled: true
+ # Specifies the user ID under which the container should run.
+ runAsUser: 1001
+ # Set to 'true' to run the container as a non-root user.
+ runAsNonRoot: true
+ # Set to 'false' to disallow privilege escalation for the container.
+ allowPrivilegeEscalation: false
+
+ service:
+ # Labels to be applied to the service.
+ labels: ~
+ # Annotations to be added to the service.
+ annotations: ~
+ # Specifies the service type (ClusterIP, NodePort, LoadBalancer, etc.).
+ type: NodePort
+ # Specifies the ClusterIP for the service, or use "~" to auto-assign.
+ clusterIP: ~
+ # List of external IPs to associate with the service.
+ externalIPs: ~
+ # Specifies the IP address for a LoadBalancer service.
+ loadBalancerIP: ~
+ # Restrict access to the LoadBalancer by IP ranges.
+ loadBalancerSourceRanges: ~
+ # Specifies the LoadBalancer class (if applicable).
+ loadBalancerClass: ~
+ # Specifies the session affinity mode (None, ClientIP)
+ sessionAffinity: None
+ # Set to 'true' to publish endpoints for not-ready pods.
+ publishNotReadyAddresses: true
+
+ startupProbe:
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 180
+ # How often to perform the probe.
+ periodSeconds: 5
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 10
+ # Perform an HTTP GET request to check.
+ httpGet:
+ # The protocol used for the HTTP GET request (HTTP, HTTPS).
+ scheme: HTTP
+ # The port on which the HTTP GET request will be made.
+ port: 8848
+ # The path to use for the HTTP GET request.
+ path: /nacos/v1/console/health/readiness
+
+ readinessProbe:
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 10
+ # How often to perform the probe.
+ periodSeconds: 5
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 10
+ # Perform an HTTP GET request to check.
+ httpGet:
+ # The protocol used for the HTTP GET request (HTTP, HTTPS).
+ scheme: HTTP
+ # The port on which the HTTP GET request will be made.
+ port: 8848
+ # The path to use for the HTTP GET request.
+ path: /nacos/v1/console/health/readiness
+
+ livenessProbe:
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 10
+ # How often to perform the probe.
+ periodSeconds: 5
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 10
+ # Perform an HTTP GET request to check.
+ httpGet:
+ # The protocol used for the HTTP GET request (HTTP, HTTPS).
+ scheme: HTTP
+ # The port on which the HTTP GET request will be made.
+ port: 8848
+ # The path to use for the HTTP GET request.
+ path: /nacos/v1/console/health/liveness
+
+ resources:
+ # Maximum CPU and memory resources allowed for the container.
+ limits:
+ # CPU usage limit.
+ cpu: ~
+ # Memory usage limit.
+ memory: ~
+ # Initial CPU and memory resource requests for the container.
+ requests:
+ # CPU usage request.
+ cpu: ~
+ # Memory usage request.
+ memory: ~
+
+ # Specifies the port on which the server should run.
+ serverPort: 8848
+
+ # Specifies the preferred host mode (e.g., 'hostname').
+ preferhostmode: ~
+
+ storage:
+ # Specifies the storage type (embedded, mysql, etc.).
+ type: embedded
+ # For MySQL storage, you need to change the "embedded" to "mysql" before
you can use the db configuration.
+ db:
+ # Specifies the database host.
+ host: localhost
+ # Specifies the database name.
+ name: nacos
+ # Specifies the database port.
+ port: 3306
+ # Specifies the database username.
+ username: mysql
+ # Specifies the database password.
+ password: passw0rd
+ # Additional database connection parameters (if needed).
+ param: ""
ingress:
## Whether to enable the ingress.
@@ -878,25 +880,25 @@ ingress:
# The protocol used for the HTTP GET request (HTTP, HTTPS).
scheme: HTTP
- livenessProbe:
- # Number of consecutive failures before marking the container as unhealthy.
- failureThreshold: 3
- # Delay before the probe is initiated.
- initialDelaySeconds: 2
- # How often to perform the probe.
- periodSeconds: 10
- # Minimum consecutive successes for the probe to be considered successful.
- successThreshold: 1
- # Time to wait for the probe to complete.
- timeoutSeconds: 2
- # Perform an HTTP GET request to check.
- httpGet:
- # The path to use for the HTTP GET request.
- path: /ping
- # The port on which the HTTP GET request will be made.
- port: 9000
- # The protocol used for the HTTP GET request (HTTP, HTTPS).
- scheme: HTTP
+ livenessProbe:
+ # Number of consecutive failures before marking the container as
unhealthy.
+ failureThreshold: 3
+ # Delay before the probe is initiated.
+ initialDelaySeconds: 2
+ # How often to perform the probe.
+ periodSeconds: 10
+ # Minimum consecutive successes for the probe to be considered
successful.
+ successThreshold: 1
+ # Time to wait for the probe to complete.
+ timeoutSeconds: 2
+ # Perform an HTTP GET request to check.
+ httpGet:
+ # The path to use for the HTTP GET request.
+ path: /ping
+ # The port on which the HTTP GET request will be made.
+ port: 9000
+ # The protocol used for the HTTP GET request (HTTP, HTTPS).
+ scheme: HTTP
strategy:
# Additional configuration for the RollingUpdate strategy can be specified
here.
