initial: yandex-prod gitops infrastructure
Gitea + ArgoCD + cert-manager + Traefik + CNPG + monitoring + loki + alloy matrix homeservers for mrt0rtikize.ru, t0rt1k.tech, roglog.space
This commit is contained in:
Alexander Rogov
103
argocd/apps/alloy.yaml
Normal file
103
argocd/apps/alloy.yaml
Normal file
@@ -0,0 +1,103 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: alloy
|
||||
namespace: argocd
|
||||
annotations:
|
||||
argocd.argoproj.io/sync-wave: "0"
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://grafana.github.io/helm-charts
|
||||
chart: alloy
|
||||
targetRevision: ">=1.5.0"
|
||||
helm:
|
||||
values: |
|
||||
alloy:
|
||||
configMap:
|
||||
content: |-
|
||||
// Discover Kubernetes pods
|
||||
discovery.kubernetes "pods" {
|
||||
role = "pod"
|
||||
}
|
||||
|
||||
// Relabel pods to intelligently map existing Kubernetes labels to service/component
|
||||
discovery.relabel "pods" {
|
||||
targets = discovery.kubernetes.pods.targets
|
||||
|
||||
// Create service label - try multiple sources in priority order
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_name"]
|
||||
regex = "(.+)"
|
||||
replacement = "${1}"
|
||||
target_label = "service"
|
||||
}
|
||||
// 2. Second priority: app label
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_pod_label_app", "service"]
|
||||
regex = "^(.+);$"
|
||||
replacement = "${1}"
|
||||
target_label = "service"
|
||||
}
|
||||
// 3. Third priority: extract from pod name (remove hash suffix)
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_pod_name", "service"]
|
||||
regex = "^([a-z0-9-]+?)(?:-[a-f0-9]{5,10})?;$"
|
||||
replacement = "${1}"
|
||||
target_label = "service"
|
||||
}
|
||||
|
||||
// Create component label from app.kubernetes.io/component or component label
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_component"]
|
||||
regex = ".+"
|
||||
target_label = "component"
|
||||
}
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_pod_label_component"]
|
||||
regex = ".+"
|
||||
target_label = "component"
|
||||
}
|
||||
|
||||
// Drop pods that we still can't identify
|
||||
rule {
|
||||
source_labels = ["service"]
|
||||
regex = "^$"
|
||||
action = "drop"
|
||||
}
|
||||
|
||||
// Map standard Kubernetes metadata to Loki labels
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_namespace"]
|
||||
target_label = "namespace"
|
||||
}
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_pod_name"]
|
||||
target_label = "pod"
|
||||
}
|
||||
rule {
|
||||
source_labels = ["__meta_kubernetes_pod_container_name"]
|
||||
target_label = "container"
|
||||
}
|
||||
}
|
||||
|
||||
// Collect logs from Kubernetes pods using the Kubernetes API
|
||||
loki.source.kubernetes "pods" {
|
||||
targets = discovery.relabel.pods.output
|
||||
forward_to = [loki.write.loki.receiver]
|
||||
}
|
||||
|
||||
// Write logs to Loki
|
||||
loki.write "loki" {
|
||||
endpoint {
|
||||
url = "http://loki.metrics.svc.cluster.local:3100/loki/api/v1/push"
|
||||
}
|
||||
}
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: metrics
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
@@ -10,8 +10,8 @@ metadata:
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: http://gitea.gitea.svc.cluster.local:3000/gitea/yandex-prod.git
|
||||
targetRevision: main
|
||||
repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
|
||||
targetRevision: master
|
||||
path: manifests/cert-manager
|
||||
directory:
|
||||
recurse: true
|
||||
@@ -19,7 +19,4 @@ spec:
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: cert-manager
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncPolicy: {}
|
||||
|
||||
@@ -10,8 +10,8 @@ metadata:
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: http://gitea.gitea.svc.cluster.local:3000/gitea/yandex-prod.git
|
||||
targetRevision: main
|
||||
repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
|
||||
targetRevision: master
|
||||
path: manifests/cnpg
|
||||
directory:
|
||||
recurse: true
|
||||
@@ -20,8 +20,5 @@ spec:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: cnpg
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
|
||||
@@ -17,3 +17,4 @@ spec:
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ServerSideApply=true
|
||||
|
||||
@@ -16,25 +16,61 @@ spec:
|
||||
helm:
|
||||
values: |
|
||||
deploymentMode: SingleBinary
|
||||
|
||||
write:
|
||||
replicas: 0
|
||||
read:
|
||||
replicas: 0
|
||||
backend:
|
||||
replicas: 0
|
||||
|
||||
loki:
|
||||
auth_enabled: false
|
||||
commonConfig:
|
||||
replication_factor: 1
|
||||
storage:
|
||||
bucketNames:
|
||||
chunks: chunks
|
||||
ruler: ruler
|
||||
admin: admin
|
||||
type: filesystem
|
||||
schemaConfig:
|
||||
configs:
|
||||
- from: "2025-01-01"
|
||||
store: tsdb
|
||||
objectStore: filesystem
|
||||
schema: v13
|
||||
index:
|
||||
prefix: index_
|
||||
period: 24h
|
||||
limits_config:
|
||||
retention_period: 30d
|
||||
reject_old_samples: true
|
||||
reject_old_samples_max_age: 168h
|
||||
filesystem:
|
||||
chunks_directory: /var/loki/chunks
|
||||
rules_directory: /var/loki/rules
|
||||
structuredConfig:
|
||||
auth_enabled: false
|
||||
|
||||
server:
|
||||
http_listen_port: 3100
|
||||
grpc_listen_port: 9095
|
||||
|
||||
common:
|
||||
path_prefix: /var/loki
|
||||
replication_factor: 1
|
||||
|
||||
schema_config:
|
||||
configs:
|
||||
- from: "2025-01-01"
|
||||
store: tsdb
|
||||
object_store: filesystem
|
||||
schema: v13
|
||||
index:
|
||||
prefix: index_
|
||||
period: 24h
|
||||
|
||||
limits_config:
|
||||
retention_period: 30d
|
||||
reject_old_samples: true
|
||||
reject_old_samples_max_age: 168h
|
||||
|
||||
chunksCache:
|
||||
enabled: false
|
||||
resultsCache:
|
||||
enabled: false
|
||||
gateway:
|
||||
enabled: false
|
||||
test:
|
||||
enabled: false
|
||||
lokiCanary:
|
||||
enabled: false
|
||||
|
||||
singleBinary:
|
||||
replicas: 1
|
||||
|
||||
89
argocd/apps/matrix-mrt0rtikize.yaml
Normal file
89
argocd/apps/matrix-mrt0rtikize.yaml
Normal file
@@ -0,0 +1,89 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: matrix-mrt0rtikize
|
||||
namespace: argocd
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
project: default
|
||||
sources:
|
||||
- repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
|
||||
targetRevision: master
|
||||
path: manifests/matrix-mrt0rtikize
|
||||
directory:
|
||||
recurse: true
|
||||
include: "*.yaml"
|
||||
- repoURL: ghcr.io
|
||||
chart: element-hq/ess-helm/matrix-stack
|
||||
targetRevision: 26.6.1
|
||||
helm:
|
||||
values: |
|
||||
serverName: mrt0rtikize.ru
|
||||
|
||||
certManager:
|
||||
clusterIssuer: letsencrypt-production
|
||||
|
||||
ingress:
|
||||
className: traefik
|
||||
|
||||
postgres:
|
||||
enabled: false
|
||||
|
||||
synapse:
|
||||
postgres:
|
||||
host: shared-pg-rw.cnpg.svc.cluster.local
|
||||
database: synapse_mrt0rtikize
|
||||
user: synapse_mrt0rtikize
|
||||
password:
|
||||
secret: pg-creds
|
||||
secretKey: synapse
|
||||
media:
|
||||
storage:
|
||||
size: 10Gi
|
||||
ingress:
|
||||
host: matrix.mrt0rtikize.ru
|
||||
|
||||
matrixAuthenticationService:
|
||||
postgres:
|
||||
host: shared-pg-rw.cnpg.svc.cluster.local
|
||||
database: mas_mrt0rtikize
|
||||
user: mas_mrt0rtikize
|
||||
password:
|
||||
secret: pg-creds
|
||||
secretKey: mas
|
||||
ingress:
|
||||
host: account.mrt0rtikize.ru
|
||||
|
||||
elementWeb:
|
||||
ingress:
|
||||
host: chat.mrt0rtikize.ru
|
||||
|
||||
elementAdmin:
|
||||
ingress:
|
||||
host: admin.mrt0rtikize.ru
|
||||
|
||||
matrixRTC:
|
||||
ingress:
|
||||
host: mrtc.mrt0rtikize.ru
|
||||
sfu:
|
||||
manualIP: "81.26.181.240"
|
||||
useStunToDiscoverPublicIP: false
|
||||
exposedServices:
|
||||
rtcTcp:
|
||||
port: 30009
|
||||
portType: NodePort
|
||||
nodePort: ""
|
||||
rtcMuxedUdp:
|
||||
port: 30008
|
||||
portType: NodePort
|
||||
nodePort: ""
|
||||
|
||||
hookshot:
|
||||
enabled: true
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: matrix-mrt0rtikize
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
89
argocd/apps/matrix-roglog.yaml
Normal file
89
argocd/apps/matrix-roglog.yaml
Normal file
@@ -0,0 +1,89 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: matrix-roglog
|
||||
namespace: argocd
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
project: default
|
||||
sources:
|
||||
- repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
|
||||
targetRevision: master
|
||||
path: manifests/matrix-roglog
|
||||
directory:
|
||||
recurse: true
|
||||
include: "*.yaml"
|
||||
- repoURL: ghcr.io
|
||||
chart: element-hq/ess-helm/matrix-stack
|
||||
targetRevision: 26.6.1
|
||||
helm:
|
||||
values: |
|
||||
serverName: roglog.space
|
||||
|
||||
certManager:
|
||||
clusterIssuer: letsencrypt-production
|
||||
|
||||
ingress:
|
||||
className: traefik
|
||||
|
||||
postgres:
|
||||
enabled: false
|
||||
|
||||
synapse:
|
||||
postgres:
|
||||
host: shared-pg-rw.cnpg.svc.cluster.local
|
||||
database: synapse_roglog
|
||||
user: synapse_roglog
|
||||
password:
|
||||
secret: pg-creds
|
||||
secretKey: synapse
|
||||
media:
|
||||
storage:
|
||||
size: 10Gi
|
||||
ingress:
|
||||
host: matrix.roglog.space
|
||||
|
||||
matrixAuthenticationService:
|
||||
postgres:
|
||||
host: shared-pg-rw.cnpg.svc.cluster.local
|
||||
database: mas_roglog
|
||||
user: mas_roglog
|
||||
password:
|
||||
secret: pg-creds
|
||||
secretKey: mas
|
||||
ingress:
|
||||
host: auth.roglog.space
|
||||
|
||||
elementWeb:
|
||||
ingress:
|
||||
host: chat.roglog.space
|
||||
|
||||
elementAdmin:
|
||||
ingress:
|
||||
host: admin.roglog.space
|
||||
|
||||
matrixRTC:
|
||||
ingress:
|
||||
host: rtc.roglog.space
|
||||
sfu:
|
||||
manualIP: "81.26.181.240"
|
||||
useStunToDiscoverPublicIP: false
|
||||
exposedServices:
|
||||
rtcTcp:
|
||||
port: 30005
|
||||
portType: NodePort
|
||||
nodePort: ""
|
||||
rtcMuxedUdp:
|
||||
port: 30004
|
||||
portType: NodePort
|
||||
nodePort: ""
|
||||
|
||||
hookshot:
|
||||
enabled: true
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: matrix-roglog
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
160
argocd/apps/matrix-t0rt1k.yaml
Normal file
160
argocd/apps/matrix-t0rt1k.yaml
Normal file
@@ -0,0 +1,160 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: matrix-t0rt1k
|
||||
namespace: argocd
|
||||
finalizers:
|
||||
- resources-finalizer.argocd.argoproj.io
|
||||
spec:
|
||||
project: default
|
||||
sources:
|
||||
- repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
|
||||
targetRevision: master
|
||||
path: manifests/matrix-t0rt1k
|
||||
directory:
|
||||
recurse: true
|
||||
include: "*.yaml"
|
||||
- repoURL: ghcr.io
|
||||
chart: element-hq/ess-helm/matrix-stack
|
||||
targetRevision: 26.6.1
|
||||
helm:
|
||||
values: |
|
||||
serverName: t0rt1k.tech
|
||||
|
||||
certManager:
|
||||
clusterIssuer: letsencrypt-production
|
||||
|
||||
ingress:
|
||||
className: traefik
|
||||
|
||||
postgres:
|
||||
enabled: false
|
||||
|
||||
synapse:
|
||||
postgres:
|
||||
host: shared-pg-rw.cnpg.svc.cluster.local
|
||||
database: synapse_t0rt1k
|
||||
user: synapse_t0rt1k
|
||||
password:
|
||||
secret: pg-creds
|
||||
secretKey: synapse
|
||||
media:
|
||||
storage:
|
||||
size: 10Gi
|
||||
ingress:
|
||||
host: matrix.t0rt1k.tech
|
||||
resources:
|
||||
requests:
|
||||
memory: 256Mi
|
||||
cpu: 100m
|
||||
limits:
|
||||
memory: 1.5Gi
|
||||
workers:
|
||||
federation-sender:
|
||||
enabled: true
|
||||
resources:
|
||||
requests:
|
||||
memory: 192Mi
|
||||
cpu: 50m
|
||||
limits:
|
||||
memory: 256Mi
|
||||
federation-reader:
|
||||
enabled: true
|
||||
resources:
|
||||
requests:
|
||||
memory: 128Mi
|
||||
cpu: 50m
|
||||
limits:
|
||||
memory: 256Mi
|
||||
client-reader:
|
||||
enabled: true
|
||||
replicas: 1
|
||||
resources:
|
||||
requests:
|
||||
memory: 128Mi
|
||||
cpu: 50m
|
||||
limits:
|
||||
memory: 256Mi
|
||||
initial-synchrotron:
|
||||
enabled: true
|
||||
resources:
|
||||
requests:
|
||||
memory: 128Mi
|
||||
cpu: 50m
|
||||
limits:
|
||||
memory: 256Mi
|
||||
synchrotron:
|
||||
enabled: true
|
||||
replicas: 1
|
||||
resources:
|
||||
requests:
|
||||
memory: 128Mi
|
||||
cpu: 50m
|
||||
limits:
|
||||
memory: 256Mi
|
||||
additional:
|
||||
0-federation-retry:
|
||||
config: |
|
||||
destination_min_retry_interval: "1m"
|
||||
destination_retry_multiplier: 1.5
|
||||
destination_max_retry_interval: "1d"
|
||||
|
||||
matrixAuthenticationService:
|
||||
postgres:
|
||||
host: shared-pg-rw.cnpg.svc.cluster.local
|
||||
database: mas_t0rt1k
|
||||
user: mas_t0rt1k
|
||||
password:
|
||||
secret: pg-creds
|
||||
secretKey: mas
|
||||
ingress:
|
||||
host: auth.t0rt1k.tech
|
||||
resources:
|
||||
limits:
|
||||
memory: 128Mi
|
||||
|
||||
elementWeb:
|
||||
ingress:
|
||||
host: chat.t0rt1k.tech
|
||||
|
||||
elementAdmin:
|
||||
ingress:
|
||||
host: admin.t0rt1k.tech
|
||||
|
||||
matrixRTC:
|
||||
ingress:
|
||||
host: rtc.t0rt1k.tech
|
||||
sfu:
|
||||
manualIP: "81.26.181.240"
|
||||
useStunToDiscoverPublicIP: false
|
||||
exposedServices:
|
||||
rtcTcp:
|
||||
port: 30007
|
||||
portType: NodePort
|
||||
nodePort: ""
|
||||
rtcMuxedUdp:
|
||||
port: 30006
|
||||
portType: NodePort
|
||||
nodePort: ""
|
||||
resources:
|
||||
requests:
|
||||
memory: 64Mi
|
||||
cpu: 50m
|
||||
limits:
|
||||
memory: 512Mi
|
||||
|
||||
hookshot:
|
||||
enabled: true
|
||||
resources:
|
||||
limits:
|
||||
memory: 256Mi
|
||||
ingress:
|
||||
host: hookshot.t0rt1k.tech
|
||||
className: traefik
|
||||
tlsEnabled: true
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: matrix-t0rt1k
|
||||
syncPolicy:
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
@@ -10,6 +10,13 @@ metadata:
|
||||
spec:
|
||||
project: default
|
||||
sources:
|
||||
- repoURL: http://gitea.gitea.svc.cluster.local:3000/admin/main.git
|
||||
targetRevision: master
|
||||
path: manifests/metrics/grafana
|
||||
directory:
|
||||
recurse: true
|
||||
include: "*.yaml"
|
||||
|
||||
- repoURL: https://victoriametrics.github.io/helm-charts/
|
||||
chart: victoria-metrics-k8s-stack
|
||||
targetRevision: ">=0.30.0"
|
||||
@@ -18,6 +25,19 @@ spec:
|
||||
fullnameOverride: vm-k8s-stack
|
||||
namespaceOverride: metrics
|
||||
|
||||
victoria-metrics-operator:
|
||||
resources:
|
||||
requests:
|
||||
memory: 128Mi
|
||||
cpu: 25m
|
||||
limits:
|
||||
memory: 256Mi
|
||||
|
||||
defaultDashboards:
|
||||
dashboards:
|
||||
node-exporter-full:
|
||||
enabled: false
|
||||
|
||||
vmsingle:
|
||||
enabled: true
|
||||
spec:
|
||||
@@ -101,19 +121,22 @@ spec:
|
||||
kubeEtcd:
|
||||
enabled: false
|
||||
|
||||
- repoURL: http://gitea.gitea.svc.cluster.local:3000/gitea/yandex-prod.git
|
||||
targetRevision: main
|
||||
path: manifests/metrics/grafana
|
||||
directory:
|
||||
recurse: true
|
||||
include: "*.yaml"
|
||||
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: argocd
|
||||
namespace: metrics
|
||||
ignoreDifferences:
|
||||
- group: operator.victoriametrics.com
|
||||
kind: VMAlertmanager
|
||||
jsonPointers:
|
||||
- /spec/config
|
||||
- kind: Secret
|
||||
name: monitoring-victoria-metrics-operator-validation
|
||||
jsonPointers:
|
||||
- /data
|
||||
- kind: ValidatingWebhookConfiguration
|
||||
name: monitoring-victoria-metrics-operator-admission
|
||||
jsonPointers:
|
||||
- /webhooks/0/clientConfig/caBundle
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
|
||||
@@ -17,6 +17,9 @@ spec:
|
||||
values: |
|
||||
deployment:
|
||||
kind: DaemonSet
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "9100"
|
||||
|
||||
ingressClass:
|
||||
enabled: true
|
||||
@@ -27,6 +30,13 @@ spec:
|
||||
- "--ping=true"
|
||||
- "--metrics.prometheus=true"
|
||||
- "--metrics.prometheus.entrypoint=metrics"
|
||||
- "--entryPoints.ssh.address=:2222/tcp"
|
||||
- "--entryPoints.rtc-tcp-mrt0rtikize.address=:30009/tcp"
|
||||
- "--entryPoints.rtc-udp-mrt0rtikize.address=:30008/udp"
|
||||
- "--entryPoints.rtc-tcp-t0rt1k.address=:30007/tcp"
|
||||
- "--entryPoints.rtc-udp-t0rt1k.address=:30006/udp"
|
||||
- "--entryPoints.rtc-tcp-roglog.address=:30005/tcp"
|
||||
- "--entryPoints.rtc-udp-roglog.address=:30004/udp"
|
||||
- "--providers.kubernetesingress.ingressclass=traefik"
|
||||
- "--providers.kubernetesingress.ingressendpoint.publishedservice=traefik/traefik"
|
||||
- "--accesslog=true"
|
||||
@@ -36,16 +46,65 @@ spec:
|
||||
web:
|
||||
port: 8080
|
||||
exposedPort: 80
|
||||
redirectTo: websecure
|
||||
http:
|
||||
redirections:
|
||||
entryPoint:
|
||||
to: websecure
|
||||
scheme: https
|
||||
permanent: true
|
||||
websecure:
|
||||
port: 8443
|
||||
exposedPort: 443
|
||||
ssh:
|
||||
port: 2222
|
||||
exposedPort: 22
|
||||
protocol: TCP
|
||||
expose:
|
||||
default: true
|
||||
rtc-tcp-mrt0rtikize:
|
||||
port: 30009
|
||||
exposedPort: 30009
|
||||
protocol: TCP
|
||||
expose:
|
||||
default: true
|
||||
rtc-udp-mrt0rtikize:
|
||||
port: 30008
|
||||
exposedPort: 30008
|
||||
protocol: UDP
|
||||
expose:
|
||||
default: true
|
||||
rtc-tcp-t0rt1k:
|
||||
port: 30007
|
||||
exposedPort: 30007
|
||||
protocol: TCP
|
||||
expose:
|
||||
default: true
|
||||
rtc-udp-t0rt1k:
|
||||
port: 30006
|
||||
exposedPort: 30006
|
||||
protocol: UDP
|
||||
expose:
|
||||
default: true
|
||||
rtc-tcp-roglog:
|
||||
port: 30005
|
||||
exposedPort: 30005
|
||||
protocol: TCP
|
||||
expose:
|
||||
default: true
|
||||
rtc-udp-roglog:
|
||||
port: 30004
|
||||
exposedPort: 30004
|
||||
protocol: UDP
|
||||
expose:
|
||||
default: true
|
||||
metrics:
|
||||
port: 9100
|
||||
expose: false
|
||||
expose:
|
||||
default: false
|
||||
traefik:
|
||||
port: 9000
|
||||
expose: false
|
||||
expose:
|
||||
default: false
|
||||
|
||||
service:
|
||||
type: LoadBalancer
|
||||
@@ -54,10 +113,6 @@ spec:
|
||||
service.beta.kubernetes.io/yandex-load-balancer-specification: '{"type": "network-load-balancer"}'
|
||||
service.beta.kubernetes.io/yandex-load-balancer-type: external
|
||||
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: "true"
|
||||
prometheus.io/port: "9100"
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
|
||||
Reference in New Issue
Block a user