erda.yml

version: "2.0"
meta:
  ERDA_COMPONENT: ""
values:
  production:
    nfs_root: "<%$.Storage.MountPoint%>"
    gittar_root: "<%$.Storage.GittarDataPath%>"
    replicas: 1
    request_cpu: 0.1
    request_mem: 128
envs:
  ETCDCTL_API: "3"
  MONITOR_ADDR: monitor:7096
  COLLECTOR_ADDR: collector:7076
  PIPELINE_ADDR: pipeline:3081
  ADMIN_ADDR: admin:9095
services:
  action-runner-scheduler:
    cmd: "/app/action-runner-scheduler"
    ports:
      - port: 9500
        protocol: "TCP"
        l4_protocol: "TCP"
    resources:
      cpu: ${request_cpu:0.3}
      max_cpu: 0.3
      mem: 128
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "devops"
    health_check:
      http:
        port: 9500
        path: "/healthz"
        duration: 120
      exec: {}
    expose: []
    hosts: []
    envs: {}
  dop:
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    cmd: /app/dop
    deployments:
      labels:
        GROUP: "devops"
      replicas: 1
    envs:
      DEBUG: "true"
      MONITOR_ADDR: monitor:7096
    health_check:
      exec: {}
      http:
        duration: 120
        path: /_api/health
        port: 9527
    ports:
      - default: false
        expose: false
        l4_protocol: TCP
        port: 9527
        protocol: TCP
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:2048}
      max_mem: 2048
      network:
        mode: container
  admin:
    cmd: "/app/admin"
    envs:
      DEBUG: "false"
    ports:
      - port: 9095
        protocol: TCP
        l4_protocol: TCP
      - port: 9096
        protocol: TCP
        l4_protocol: TCP
      - port: 8096
        protocol: TCP
        l4_protocol: TCP
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: ${request_mem:128}
      max_mem: 256
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9095
        path: "/api/healthy"
        duration: 120
      exec: {}
  core-services:
    cmd: "/app/core-services"
    ports:
      - port: 9526
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      AVATAR_STORAGE_URL: "file:///avatars"
      CMDB_CONTAINER_TOPIC: "spot-metaserver_container"
      CMDB_GROUP: "spot_cmdb_group"
      CMDB_HOST_TOPIC: "spot-metaserver_host"
      DEBUG: "false"
      LICENSE_KEY: "XWoPm8I3FZuDclhuOhZ+qRPVHjXKCwSgZEOTyrMgtJg6f0Kz7QR0CyVN1ZWgbiou/OyABe7HyK1yVxDdeP1JuXcfOoGOdChTyiQfP5sdXUbferq5UkK7S44lMjNmzURlbdX8smSa13+8FQyDqz2BpDcBKMRfn2kKuF4n6n9Ls7HyVV7oWSKreEyIH3991Ug2grNEpcKip3ISVY7eGJ3uoahC9zs4fla1dzR47e5dgppHtf5WBjFgiSS+5qRi2mYa"
      LISTEN_ADDR: ":9526"
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
      CREATE_ORG_ENABLED: "false"
    resources:
      cpu: ${request_cpu:0.3}
      max_cpu: 0.3
      mem: ${request_mem:512}
      max_mem: 512
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
      - "${nfs_root:/netdata}/avatars:/avatars:rw"
      - "${nfs_root:/netdata}/dice/cmdb/files:/files:rw"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9526
        path: "/_api/health"
        duration: 120
      exec: { }
  cluster-manager:
    cmd: "/app/cluster-manager"
    ports:
      - port: 9094
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: ${request_mem:256}
      max_mem: 256
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: {}
      exec: {}
  cluster-dialer:
    cmd: "/app/cluster-dialer"
    expose:
      - 80
    ports:
      - port: 80
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:2}
      max_cpu: 2
      mem: ${request_mem:2048}
      max_mem: 2048
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: {}
      exec: {}
  cluster-agent:
    cmd: "/app/cluster-agent"
    ports: []
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:1024}
      max_mem: 1024
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: {}
      exec:
        cmd: "ls"
  collector:
    cmd: "/app/collector"
    ports:
      - port: 7076
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
      - port: 7098
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      COLLECTOR_BROWSER_SAMPLING_RATE: "100"
      COLLECTOR_ENABLE: "true"
    resources:
      cpu: ${request_cpu:1}
      mem: ${request_mem:1024}
      max_cpu: 1
      max_mem: 1024
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "spot-v2"
    expose:
      - 7076
    health_check:
      http:
        port: 7076
        path: "/api/health"
        duration: 120
      exec: {}
    hosts: []
    binds: []
  dicehub:
    cmd: "/app/dicehub"
    ports:
      - port: 10000
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      EXTENSION_MENU: "{\"流水线任务\":[\"source_code_management:代码管理\",\"build_management:构建管理\",\"deploy_management:部署管理\",\"version_management:版本管理\",\"test_management:测试管理\",\"data_management:数据治理\",\"custom_task:自定义任务\"],\"扩展服务\":[\"database:存储\",\"distributed_cooperation:分布式协作\",\"search:搜索\",\"message:消息\",\"content_management:内容管理\",\"security:安全\",\"traffic_load:流量负载\",\"monitoring&logging:监控&日志\",\"content:文本处理\",\"image_processing:图像处理\",\"document_processing:文件处理\",\"sound_processing:音频处理\",\"custom:自定义\",\"general_ability:通用能力\",\"new_retail:新零售能力\",\"srm:采供能力\",\"solution:解决方案\"]}"
      RELEASE_GC_SWITCH: "true"
      RELEASE_MAX_TIME_RESERVED: "72"
    resources:
      cpu: ${request_cpu:0.15}
      max_cpu: 0.15
      mem: ${request_mem:1024}
      max_mem: 1024
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 10000
        path: "/healthz"
        duration: 120
      exec: {}
  eventbox:
    cmd: "/app/eventbox"
    ports:
      - port: 9528
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:2}
      max_cpu: 2
      mem: ${request_mem:2560}
      max_mem: 2560
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9528
        path: "/api/dice/eventbox/version"
        duration: 120
      exec: {}
  gittar:
    cmd: "/app/gittar"
    ports:
      - port: 5566
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
    envs:
      GIT_INNER_USER_NAME: "18000000000"
      GIT_INNER_USER_PASSWORD: "123456"
      GITTAR_BRANCH_FILTER: "master,develop,feature/*,support/*,release/*,hotfix/*"
      GITTAR_PORT: "5566"
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:1536}
      max_mem: 1536
      network:
        mode: "container"
    binds:
      - "${gittar_root:/netdata/dice/gittar}:/repository:rw"
    deployments:
      replicas: 1
      labels:
        GROUP: "devops"
    expose:
      - 5566
    health_check:
      http: {}
      exec: {}
  hepa:
    cmd: "/app/hepa"
    ports:
      - port: 8080
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
    resources:
      cpu: ${request_cpu:0.5}
      mem: 512
      max_cpu: 0.5
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "addons"
    expose:
      - 8080
    health_check:
      http:
        port: 8080
        path: "/api/gateway/health/check"
        duration: 120
      exec: {}
  monitor:
    cmd: "/app/monitor"
    ports:
      - port: 7096
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7098
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7080
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      LOG_LEVEL: INFO
    resources:
      cpu: ${request_cpu:1}
      mem: ${request_mem:512}
      max_cpu: 1
      max_mem: 512
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "spot-v2"
    health_check:
      http:
        port: 7096
        path: "/api/health"
        duration: 120
      exec: {}
    expose: []
    hosts: []
    binds: []
  msp:
    cmd: "/app/msp"
    ports:
      - port: 8080
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7080
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9080
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      GOLANG_PROTOBUF_REGISTRATION_CONFLICT: "ignore"
    resources:
      cpu: ${request_cpu:1}
      mem: ${request_mem:512}
      max_cpu: 1
      max_mem: 512
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "msp"
    health_check:
      http:
        port: 8080
        path: "/health"
        duration: 120
      exec: {}
    expose: []
    hosts: []
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
  openapi:
    cmd: "/app/openapi"
    ports:
      - port: 9529
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
    envs:
      CREATE_ORG_ENABLED: "false"
    resources:
      cpu: ${request_cpu:0.5}
      max_cpu: 0.5
      mem: ${request_mem:512}
      max_mem: 512
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    expose:
      - 9529
    health_check:
      http:
        port: 9529
        path: "/api/openapi/version"
        duration: 120
      exec: {}
  ecp:
    cmd: "/app/ecp"
    ports:
      - port: 9029
        protocol: "TCP"
        l4_protocol: "TCP"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: 128
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: {}
      exec: {}
  cmp:
    cmd: "/app/cmp"
    envs:
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
      ERDA_NAMESPACE: "default"
      ERDA_HELM_CHART_VERSION: "1.1.0"
    ports:
      - port: 9027
        protocol: "TCP"
        l4_protocol: "TCP"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: 128
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: {}
      exec: {}
  orchestrator:
    cmd: "/app/orchestrator"
    ports:
      - port: 8081
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
      TENANT_GROUP_KEY: "58dcbf490ef3"
      MSP_ADDR: "msp:8080"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:256}
      max_mem: 256
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 8081
        path: "/info"
        duration: 120
      exec: {}
  pipeline:
    cmd: "/app/pipeline"
    ports:
      - port: 3081
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 30810
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
      GIT_INNER_USER_NAME: "18000000000"
      GIT_INNER_USER_PASSWORD: "123456"
      PIPELINE_STORAGE_URL: "file:///devops/storage"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:1536}
      max_mem: 1536
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "devops"
    health_check:
      http:
        port: 3081
        path: "/ping"
        duration: 120
      exec: {}
  scheduler:
    cmd: "/app/scheduler"
    ports:
      - port: 9091
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      CMDB_CONTAINER_TOPIC: "spot-metaserver_container"
      CMDB_GROUP: "spot_cmdb_group2"
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:2048}
      max_mem: 2048
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9091
        path: "/info"
        duration: 120
      exec: {}
  streaming:
    cmd: "/app/streaming"
    ports:
      - port: 7091
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7098
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      BROWSER_ENABLE: "true"
      BROWSER_GROUP_ID: "spot-monitor-browser"
      LOG_GROUP_ID: "spot-monitor-log"
      LOG_STORE_ENABLE: "true"
      LOG_TTL: "168h"
      METRIC_ENABLE: "true"
      METRIC_GROUP_ID: "spot-monitor-metrics"
      METRIC_INDEX_TTL: "192h"
      TRACE_ENABLE: "true"
      TRACE_GROUP_ID: "spot-monitor-trace"
      TRACE_TTL: "168h"
      LOG_LEVEL: INFO
    resources:
      cpu: ${request_cpu:1.5}
      mem: ${request_mem:1024}
      max_cpu: 1.5
      max_mem: 1024
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "spot-v2"
    health_check:
      http:
        port: 7091
        path: "/api/health"
        duration: 120
      exec: {}
  uc-adaptor:
    cmd: "/app/uc-adaptor"
    ports:
      - port: 12580
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
    envs:
      DEBUG: "false"
      LISTEN_ADDR: ":12580"
      UC_AUDITOR_CRON: "0 */1 * * * ?"
      UC_AUDITOR_PULL_SIZE: "30"
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: 64
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "devops"
    expose:
      - 12580
    health_check:
      http:
        port: 12580
        path: "/healthy"
        duration: 120
      exec: {}
addons:
  infos:
    plan: "custom:basic"
    options:
      version: "1.0.0"
  mysql:
    plan: "mysql:basic"
    options:
      version: "5.7.29"