311 lines
11 KiB
YAML
Executable File
311 lines
11 KiB
YAML
Executable File
global:
|
|
dockerRegistryPrefix: "registry.co-work.ru/"
|
|
infrastructure:
|
|
general:
|
|
enabled: true
|
|
tenant_id: "85ce40de-3cdd-4fb5-8a71-8b7b65ed95d6"
|
|
sticker_base_url: "https://store-p001.cw.ngcloud.ru:9000"
|
|
recording_folder: "livekit"
|
|
deeplink_domain: "https://96nyc.app.link"
|
|
swagger_host: "localhost"
|
|
swagger_port: 8080
|
|
workspace_host: "workspace-app"
|
|
workspace_port: 9090
|
|
user_host: "user-app"
|
|
user_port: 9090
|
|
admin_host: "admin-app"
|
|
admin_port: 9090
|
|
device_host: "devices-app"
|
|
device_port: 9090
|
|
auth_host: "auth-app"
|
|
auth_port: 9090
|
|
license_host: "license-app"
|
|
license_port: 9090
|
|
keycloak_url: "https://iam.nubes.ru/realms/co-work-client-2"
|
|
deeplink_tenant: "preprod-co-work.ru"
|
|
|
|
auth:
|
|
enabled: true
|
|
cert_alias: nubes
|
|
adminClientId: "admin-cli"
|
|
adminRealm: "master"
|
|
adminUrl: "https://iam.nubes.ru/admin/realms/co-work-client-2"
|
|
adminUsername: "admin"
|
|
clientId: "gem-auth-client"
|
|
clientIssuerIri: "https://iam.nubes.ru/realms/co-work-client-2"
|
|
clientRealm: "co-work-client-2"
|
|
realm: "co-work-client-2"
|
|
securityAdminRealm: "master"
|
|
securityOauth2ClientIssuerUri: "https://iam.nubes.ru/realms"
|
|
|
|
call:
|
|
enabled: true
|
|
livekit_apiHost: https://av-p002.cw.ngcloud.ru
|
|
recording_endpoint: https://store-p001.cw.ngcloud.ru:9000
|
|
recording_region: us-east-2
|
|
recording_bucket: livekit
|
|
|
|
callevent:
|
|
enabled: true
|
|
livekit_apiHost: https://av-p002.cw.ngcloud.ru
|
|
recording_endpoint: https://store-p001.cw.ngcloud.ru:9000
|
|
recording_region: us-east-2
|
|
recording_bucket: livekit
|
|
|
|
kafka:
|
|
enabled: true
|
|
server: "kafka:9092,kafka:9092,kafka:9092"
|
|
port: 9092
|
|
secret: "kafka-static-user-passwords"
|
|
username: "admin"
|
|
passwordKey: "client-passwords"
|
|
|
|
redis:
|
|
enabled: true
|
|
host: "redis-master"
|
|
port: 6379
|
|
|
|
cassandra:
|
|
enabled: true
|
|
host: "cassandra"
|
|
contactPoint: "cassandra"
|
|
datacenter: "datacenter1"
|
|
secret: "cassandra-static-user-passwords"
|
|
usernameKey: "username"
|
|
passwordKey: "cassandra-password"
|
|
port: "9042"
|
|
|
|
keycloak:
|
|
url: "https://iam.nubes.ru/realms/co-work-client-2"
|
|
|
|
livekit:
|
|
secret: "livekit-secret"
|
|
apiKeyKey: "api-key"
|
|
secretKey: "secret"
|
|
|
|
postgres:
|
|
enabled: true
|
|
host: "postgresql-ha-pgpool"
|
|
port: 5432
|
|
secret: "pg-ha-creds"
|
|
username: "postgres"
|
|
passwordKey: "password"
|
|
|
|
s3:
|
|
enabled: true
|
|
endpoint: https://store-p001.cw.ngcloud.ru:9000
|
|
secret: "s3-static-secret"
|
|
accessKey: "access-key"
|
|
secretKey: "secret-key"
|
|
|
|
s3_upload:
|
|
enabled: true
|
|
endpoint: https://store-p001.cw.ngcloud.ru:9000
|
|
secret: "s3-static-secret"
|
|
accessKey: "access-key"
|
|
secretKey: "secret-key"
|
|
|
|
services:
|
|
chat:
|
|
host: "chat-app"
|
|
port: 9090
|
|
user:
|
|
host: "user-app"
|
|
port: 9090
|
|
message:
|
|
host: "message-app"
|
|
port: 9090
|
|
deeplink:
|
|
host: "deeplink-app"
|
|
port: 9090
|
|
|
|
secrets:
|
|
branchio:
|
|
secret: "deeplink-secret"
|
|
keys: &branchio-keys
|
|
access: "branchio-access"
|
|
appid: "branchio-appid"
|
|
defaultUrl: "branchio-default-url"
|
|
key: "branchio-key"
|
|
secret: "branchio-secret"
|
|
url: "branchio-url"
|
|
|
|
recording:
|
|
secret: "recording-secret"
|
|
keys:
|
|
access: "access-key"
|
|
secret: "secret"
|
|
|
|
upload:
|
|
secret: "upload-app-s3"
|
|
keys:
|
|
access: "access-key"
|
|
secret: "secret-key"
|
|
|
|
cert_alias: nubes
|
|
|
|
|
|
envTemplates:
|
|
general: &general-env
|
|
- name: TENANT_ID
|
|
value: "{{ .Values.global.infrastructure.general.tenant_id }}"
|
|
- name: STICKER_BASE_URL
|
|
value: "{{ .Values.global.infrastructure.general.sticker_base_url }}"
|
|
- name: RECORDING_FOLDER
|
|
value: "{{ .Values.global.infrastructure.general.recording_folder }}"
|
|
- name: DEEPLINK_DOMAIN
|
|
value: "{{ .Values.global.infrastructure.general.deeplink_domain }}"
|
|
- name: SWAGGER_HOST
|
|
value: "{{ .Values.global.infrastructure.general.swagger_host }}"
|
|
- name: SWAGGER_PORT
|
|
value: "{{ .Values.global.infrastructure.general.swagger_port }}"
|
|
- name: WORKSPACE_HOST
|
|
value: "{{ .Values.global.infrastructure.general.workspace_host }}"
|
|
- name: WORKSPACE_PORT
|
|
value: "{{ .Values.global.infrastructure.general.workspace_port }}"
|
|
- name: USER_HOST
|
|
value: "{{ .Values.global.infrastructure.general.user_host }}"
|
|
- name: USER_PORT
|
|
value: "{{ .Values.global.infrastructure.general.user_port }}"
|
|
- name: ADMIN_HOST
|
|
value: "{{ .Values.global.infrastructure.general.admin_host }}"
|
|
- name: ADMIN_PORT
|
|
value: "{{ .Values.global.infrastructure.general.admin_port }}"
|
|
- name: DEVICE_HOST
|
|
value: "{{ .Values.global.infrastructure.general.device_host }}"
|
|
- name: DEVICE_PORT
|
|
value: "{{ .Values.global.infrastructure.general.device_port }}"
|
|
- name: AUTH_HOST
|
|
value: "{{ .Values.global.infrastructure.general.auth_host }}"
|
|
- name: AUTH_PORT
|
|
value: "{{ .Values.global.infrastructure.general.auth_port }}"
|
|
- name: LICENSE_HOST
|
|
value: "{{ .Values.global.infrastructure.general.license_host }}"
|
|
- name: LICENSE_PORT
|
|
value: "{{ .Values.global.infrastructure.general.license_port }}"
|
|
- name: KEYCLOAK_URL
|
|
value: "{{ .Values.global.infrastructure.general.keycloak_url }}"
|
|
- name: DEEPLINK_TENANT
|
|
value: "{{ .Values.global.infrastructure.general.deeplink_tenant }}"
|
|
|
|
call: &call-env
|
|
- name: RECORDING_API_HOST
|
|
value: "{{ .Values.global.infrastructure.call.livekit_apiHost }}"
|
|
- name: RECORDING_BUCKET
|
|
value: "{{ .Values.global.infrastructure.call.recording_bucket }}"
|
|
- name: RECORDING_ENDPOINT
|
|
value: "{{ .Values.global.infrastructure.call.recording_endpoint }}"
|
|
- name: RECORDING_REGION
|
|
value: "{{ .Values.global.infrastructure.call.recording_region }}"
|
|
|
|
callevent: &callevent-env
|
|
- name: RECORDING_API_HOST
|
|
value: "{{ .Values.global.infrastructure.call.recording_endpoint }}"
|
|
- name: RECORDING_BUCKET
|
|
value: "{{ .Values.global.infrastructure.call.recording_bucket }}"
|
|
- name: RECORDING_ENDPOINT
|
|
value: "{{ .Values.global.infrastructure.call.recording_endpoint }}"
|
|
- name: RECORDING_REGION
|
|
value: "{{ .Values.global.infrastructure.call.recording_region }}"
|
|
|
|
auth: &auth-env
|
|
- name: CERT_ALIAS
|
|
value: "{{ .Values.global.infrastructure.auth.cert_alias }}"
|
|
- name: ADMIN_CLIENT_ID
|
|
value: "{{ .Values.global.infrastructure.auth.adminClientId }}"
|
|
- name: ADMIN_REALM
|
|
value: "{{ .Values.global.infrastructure.auth.adminRealm }}"
|
|
- name: ADMIN_URL
|
|
value: "{{ .Values.global.infrastructure.auth.adminUrl }}"
|
|
- name: ADMIN_USERNAME
|
|
value: "{{ .Values.global.infrastructure.auth.adminUsername }}"
|
|
- name: CLIENT_ID
|
|
value: "{{ .Values.global.infrastructure.auth.clientId }}"
|
|
- name: CLIENT_ISSUER_IRI
|
|
value: "{{ .Values.global.infrastructure.auth.clientIssuerIri }}"
|
|
- name: CLIENT_REALM
|
|
value: "{{ .Values.global.infrastructure.auth.clientRealm }}"
|
|
- name: REALM
|
|
value: "{{ .Values.global.infrastructure.auth.realm }}"
|
|
- name: SECURITY_ADMIN_REALM
|
|
value: "{{ .Values.global.infrastructure.auth.securityAdminRealm }}"
|
|
- name: SECURITY_OAUTH2_CLIENT_ISSUER_URI
|
|
value: "{{ .Values.global.infrastructure.auth.securityOauth2ClientIssuerUri }}"
|
|
|
|
kafka: &kafka-env
|
|
- name: KAFKA
|
|
value: "{{ .Values.global.infrastructure.kafka.server }}"
|
|
- name: KAFKA_SERVER
|
|
value: "{{ .Values.global.infrastructure.kafka.server }}"
|
|
- name: KAFKA_USERNAME
|
|
value: "{{ .Values.global.infrastructure.kafka.username }}"
|
|
- name: KAFKA_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.kafka.secret }}"
|
|
key: "{{ .Values.global.infrastructure.kafka.passwordKey }}"
|
|
|
|
redis: &redis-env
|
|
- name: REDIS_HOST
|
|
value: "{{ .Values.global.infrastructure.redis.host }}"
|
|
- name: REALTIME_REDIS_HOST
|
|
value: "{{ .Values.global.infrastructure.redis.host }}"
|
|
- name: REDIS_PORT
|
|
value: "{{ .Values.global.infrastructure.redis.port }}"
|
|
|
|
cassandra: &cassandra-env
|
|
- name: CASSANDRA_CONTACTPOINT
|
|
value: "{{ .Values.global.infrastructure.cassandra.contactPoint }}"
|
|
- name: CASSANDRA_HOST
|
|
value: "{{ .Values.global.infrastructure.cassandra.host }}"
|
|
- name: CASSANDRA_DATACENTER
|
|
value: "{{ .Values.global.infrastructure.cassandra.datacenter }}"
|
|
- name: CASSANDRA_USERNAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.cassandra.secret }}"
|
|
key: "{{ .Values.global.infrastructure.cassandra.usernameKey }}"
|
|
- name: CASSANDRA_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.cassandra.secret }}"
|
|
key: "{{ .Values.global.infrastructure.cassandra.passwordKey }}"
|
|
- name: CASSANDRA_PORT
|
|
value: "{{ .Values.global.infrastructure.cassandra.port }}"
|
|
|
|
postgres: &postgres-env
|
|
- name: POSTGRES_USERNAME
|
|
value: "{{ .Values.global.infrastructure.postgres.username }}"
|
|
- name: POSTGRES_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.postgres.secret }}"
|
|
key: "{{ .Values.global.infrastructure.postgres.passwordKey }}"
|
|
s3: &s3-env
|
|
- name: S3_ENDPOINT
|
|
value: "{{ .Values.global.infrastructure.s3.endpoint }}"
|
|
- name: S3_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.s3.secret }}"
|
|
key: "{{ .Values.global.infrastructure.s3.accessKey }}"
|
|
- name: S3_SECRET_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.s3.secret }}"
|
|
key: "{{ .Values.global.infrastructure.s3.secretKey }}"
|
|
|
|
s3_upload: &s3_upload-env
|
|
- name: S3_ENDPOINT
|
|
value: "{{ .Values.global.infrastructure.s3_upload.endpoint }}"
|
|
- name: S3_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.s3_upload.secret }}"
|
|
key: "{{ .Values.global.infrastructure.s3_upload.accessKey }}"
|
|
- name: S3_SECRET_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: "{{ .Values.global.infrastructure.s3_upload.secret }}"
|
|
key: "{{ .Values.global.infrastructure.s3_upload.secretKey }}"
|