diff --git a/openshift/settings.sandbox.sh b/openshift/settings.sandbox.sh new file mode 100755 index 00000000..6d6810cb --- /dev/null +++ b/openshift/settings.sandbox.sh @@ -0,0 +1,13 @@ +export PROJECT_NAMESPACE="bc0192" +export GIT_URI="https://github.com/bcgov/aries-endorser-service.git" +export GIT_REF="main" +export DEV='tools' +export TEST='tools' +export PROD='tools' + +SKIP_PIPELINE_PROCESSING=1 + +# The templates that should not have their GIT referances(uri and ref) over-ridden +# Templates NOT in this list will have they GIT referances over-ridden +# with the values of GIT_URI and GIT_REF +export skip_git_overrides="aries-endorser-backup-build.yaml" diff --git a/openshift/templates/aries-endorser-agent/aries-endorser-agent-deploy.sandbox.param b/openshift/templates/aries-endorser-agent/aries-endorser-agent-deploy.sandbox.param new file mode 100644 index 00000000..e93d1c79 --- /dev/null +++ b/openshift/templates/aries-endorser-agent/aries-endorser-agent-deploy.sandbox.param @@ -0,0 +1,55 @@ +#========================================================= +# OpenShift template parameters for: +# Component: . +# Template File: ../openshift/templates/aries-endorser-agent/aries-endorser-agent-deploy.yaml +#========================================================= +NAME=aries-endorser-agent +APP_GROUP=aries-endorser-service +NAMESPACE_NAME=bc0192 +APP_NAME=aries-endorser-service +SUFFIX=-sandbox +ROLE=agent +CONTROLLER_ROLE=controller +PROXY_ROLE=proxy +IMAGE_NAMESPACE=bc0192-tools +TAG_NAME=latest +ACAPY_READ_ONLY_LEDGER=false +# ADMIN_API_KEY=[a-zA-Z0-9]{32} +ACAPY_AUTO_PROVISION=true +ACAPY_EMIT_NEW_DIDCOMM_PREFIX=true +ACAPY_AUTO_PING_CONNECTION=true +ACAPY_MONITOR_PING=true +ACAPY_PUBLIC_INVITES=true +ACAPY_REQUESTS_THROUGH_PUBLIC_DID=true +ACAPY_NOTIFY_REVOCATION=true +ACAPY_MONITOR_REVOCATION_NOTIFICATION=true +AGENT_ADMIN_PORT=8051 +AGENT_HTTP_PORT=8050 +AGENT_WS_PORT=8052 +AGENT_BASE_URL=https://aries-endorser-agent-sandbox.apps.silver.devops.gov.bc.ca +AGENT_BASE_WS_URL=wss://aries-endorser-agent-sandbox.apps.silver.devops.gov.bc.ca +ACAPY_IMAGE_URL= +ACAPY_GENESIS_URL=http://test.bcovrin.vonx.io/genesis +ACAPY_ENDORSER_ROLE=endorser +ACAPY_LABEL=Government of British Columbia - Sandbox Endorser +ACAPY_WALLET_TYPE=askar +ACAPY_WALLET_STORAGE_TYPE=postgres_storage +WALLET_HOST=aries-endorser-wallet +WALLET_HOST_PORT=5432 +WALLET_STORAGE_CONFIG={\"url\":\"${POSTGRESQL_WALLET_HOST}:${POSTGRESQL_WALLET_PORT}\",\"wallet_scheme\":\"DatabasePerWallet\",\"max_connections\":5} +WALLET_STORAGE_CREDS={\"account\":\"${POSTGRESQL_WALLET_USER}\",\"password\":\"${POSTGRESQL_WALLET_PASSWORD}\",\"admin_account\":\"postgres\",\"admin_password\":\"${POSTGRESQL_WALLET_ADMIN_PASSWORD}\"} +WALLET_CREDENTIAL_STORE_NAME=aries-endorser-agent-wallet-credentials +# WALLET_KEY=[a-zA-Z0-9]{32} +# WALLET_SEED=[a-zA-Z0-9]{32} +# WALLET_DID=[a-zA-Z0-9]{16} +WALLET_SUFFIX=-sandbox +ENDORSER_SERVICE_HOST=aries-endorser-api +ENDORSER_SERVICE_PORT=5000 +CONTROLLER_WEBHOOK_URL=http://aries-endorser-api-sandbox:5000/webhook#tbd +LOG_LEVEL=INFO +MIN_REPLICAS=1 +MAX_REPLICAS=2 +CPU_REQUEST=10m +CPU_LIMIT=100m +MEMORY_REQUEST=160Mi +MEMORY_LIMIT=256Mi diff --git a/openshift/templates/aries-endorser-api/aries-endorser-api-deploy.sandbox.param b/openshift/templates/aries-endorser-api/aries-endorser-api-deploy.sandbox.param new file mode 100644 index 00000000..8e8c1229 --- /dev/null +++ b/openshift/templates/aries-endorser-api/aries-endorser-api-deploy.sandbox.param @@ -0,0 +1,37 @@ +#========================================================= +# OpenShift template parameters for: +# Component: . +# Template File: ../openshift/templates/aries-endorser-api/aries-endorser-api-deploy.yaml +#========================================================= +NAME=aries-endorser-api +APP_GROUP=aries-endorser-service +NAMESPACE_NAME=bc0192 +APP_NAME=aries-endorser-service +SUFFIX=-sandbox +ROLE=controller +AGENT_ROLE=agent +PROXY_ROLE=proxy +IMAGE_NAMESPACE=bc0192-tools +TAG_NAME=latest +WEB_CONCURRENCY=2 +ENDORSER_SERVICE_PORT=5000 +ENDORSER_API_ADMIN_USER=endorser-admin +# ENDORSER_API_ADMIN_KEY=[a-zA-Z0-9]{32} +CONTROLLER_POSTGRESQL_HOST=aries-endorser-db +CONTROLLER_POSTGRESQL_PORT=5432 +ACAPY_ADMIN_HOST=aries-endorser-agent +ACAPY_ADMIN_URL=http://aries-endorser-agent-sandbox:8051 +ENDORSER_PUBLIC_NAME=BC Endorser Sandbox Service +ENDORSER_PUBLIC_DESC=An endorser service for BC issuer agents +ENDORSER_AUTO_ACCEPT_CONNECTIONS=true +ENDORSER_AUTO_ACCEPT_AUTHORS=true +ENDORSER_AUTO_ENDORSE_REQUESTS=true +ENDORSER_AUTO_ENDORSE_TXN_TYPES= +# ACAPY_WEBHOOK_URL_API_KEY=[a-zA-Z0-9]{32} +LOG_LEVEL=INFO +MIN_REPLICAS=1 +MAX_REPLICAS=2 +CPU_REQUEST=10m +CPU_LIMIT=100m +MEMORY_REQUEST=256Mi +MEMORY_LIMIT=512Mi diff --git a/openshift/templates/aries-endorser-backup/aries-endorser-backup-deploy.sandbox.param b/openshift/templates/aries-endorser-backup/aries-endorser-backup-deploy.sandbox.param new file mode 100644 index 00000000..016af2d6 --- /dev/null +++ b/openshift/templates/aries-endorser-backup/aries-endorser-backup-deploy.sandbox.param @@ -0,0 +1,40 @@ +#========================================================= +# OpenShift template parameters for: +# Component: . +# Template File: ../openshift/templates/aries-endorser-backup/aries-endorser-backup-deploy.yaml +#========================================================= +NAME=aries-endorser-backup +ROLE=backup +SUFFIX=-sandbox +APP_NAME=aries-endorser-service +APP_GROUP=aries-endorser-service +SOURCE_IMAGE_NAME=aries-endorser-backup +IMAGE_NAMESPACE=bc0192-tools +TAG_NAME=latest +ARIES_ENDORSER_DB_HOST=aries-endorser-db +ARIES_ENDORSER_WALLET_HOST=aries-endorser-wallet +DATABASE_USER_KEY_NAME=database-user +DATABASE_PASSWORD_KEY_NAME=database-password +BACKUP_STRATEGY=rolling +WEBHOOK_URL= +ENVIRONMENT_FRIENDLY_NAME= +ENVIRONMENT_NAME= +BACKUP_DIR=/backups/ +DAILY_BACKUPS=4 +WEEKLY_BACKUPS=2 +MONTHLY_BACKUPS=0 +DATABASE_SERVER_TIMEOUT=300 +CONFIG_FILE_NAME=backup.conf +CONFIG_MAP_NAME=backup-conf +CONFIG_MOUNT_PATH=/ +BACKUP_VOLUME_NAME=aries-endorser-backup +BACKUP_VOLUME_SIZE=5Gi +BACKUP_VOLUME_CLASS=netapp-file-backup +VERIFICATION_VOLUME_NAME=aries-endorser-backup-verification +VERIFICATION_VOLUME_SIZE=1Gi +VERIFICATION_VOLUME_CLASS=netapp-file-standard +VERIFICATION_VOLUME_MOUNT_PATH=/var/lib/pgsql/data +CPU_REQUEST=0 +CPU_LIMIT=0 +MEMORY_REQUEST=0Mi +MEMORY_LIMIT=0Mi diff --git a/openshift/templates/aries-endorser-db/aries-endorser-db-deploy.sandbox.param b/openshift/templates/aries-endorser-db/aries-endorser-db-deploy.sandbox.param new file mode 100644 index 00000000..e525139e --- /dev/null +++ b/openshift/templates/aries-endorser-db/aries-endorser-db-deploy.sandbox.param @@ -0,0 +1,31 @@ +#========================================================= +# OpenShift template parameters for: +# Component: . +# Template File: ../openshift/templates/aries-endorser-db/aries-endorser-db-deploy.yaml +#========================================================= +NAME=aries-endorser-db +APP_NAME=aries-endorser-service +APP_GROUP=aries-endorser-service +NAMESPACE_NAME=bc0192 +SUFFIX=-sandbox +ROLE=db +CONTROLLER_ROLE=controller +BACKUP=true +BACKUP_ROLE=backup +IMAGE_NAMESPACE=bc0192-tools +SOURCE_IMAGE_NAME=aries-endorser-db +TAG_NAME=latest +POSTGRESQL_DATABASE_NAME=endorser_controller_db +# POSTGRESQL_USER=[a-zA-Z_][a-zA-Z0-9_]{10} +# POSTGRESQL_PASSWORD=[a-zA-Z0-9_~!@#$%^&*()-=<>,.?;:|]{16} +POSTGRESQL_ADMIN_USER=postgres +# POSTGRESQL_ADMIN_PASSWORD=[a-zA-Z0-9_~!@#$%^&*()-=<>,.?;:|]{16} +PORT=5432 +PGCRYPTO_EXTENSION=Y +MOUNT_PATH=/var/lib/pgsql/data +PERSISTENT_VOLUME_SIZE=2Gi +PERSISTENT_VOLUME_CLASS=netapp-block-standard +CPU_REQUEST=10m +CPU_LIMIT=100m +MEMORY_REQUEST=10Mi +MEMORY_LIMIT=512Mi diff --git a/openshift/templates/aries-endorser-proxy/aries-endorser-proxy-deploy.sandbox.param b/openshift/templates/aries-endorser-proxy/aries-endorser-proxy-deploy.sandbox.param new file mode 100644 index 00000000..20e82f8e --- /dev/null +++ b/openshift/templates/aries-endorser-proxy/aries-endorser-proxy-deploy.sandbox.param @@ -0,0 +1,35 @@ +#========================================================= +# OpenShift template parameters for: +# Component: . +# Template File: ../openshift/templates/aries-endorser-proxy/aries-endorser-proxy-deploy.yaml +#========================================================= +NAME=aries-endorser-proxy +APP_NAME=aries-endorser-service +ROLE=proxy +TAG_NAME=latest +NAMESPACE=bc0192 +SUFFIX=-sandbox +APP_GROUP=aries-endorser-service +IMAGE_NAMESPACE=bc0192-tools +ACAPY_AGENT_HOST=aries-endorser-agent +ENDORSER_SERVICE_HOST=aries-endorser-api +ENDORSER_SERVICE_PORT=5000 +ROUTE_TIMEOUT=60s +CADDY_CONFIG_MOUNT_PATH=/etc/caddy/ +CADDY_CONFIG_FILE_NAME=Caddyfile +CADDY_CONFIG_MAP_NAME=caddy-conf +APPLICATION_ADMIN_DOMAIN=aries-endorser-agent-admin-sandbox.apps.silver.devops.gov.bc.ca +APPLICATION_DOMAIN=aries-endorser-agent-sandbox.apps.silver.devops.gov.bc.ca +ENDORSER_SERVICE_DOMAIN=aries-endorser-service-sandbox.apps.silver.devops.gov.bc.ca +ACAPY_ADMIN_PORT=8051 +ACAPY_HTTP_PORT=8050 +ACAPY_WS_PORT=8052 +CADDY_AGENT_PORT=2015 +CADDY_AGENT_ADMIN_PORT=2016 +CADDY_ENDORSER_SERVICE_PORT=2017 +MIN_REPLICAS=1 +MAX_REPLICAS=2 +CPU_REQUEST=10m +CPU_LIMIT=300m +MEMORY_REQUEST=64Mi +MEMORY_LIMIT=128Mi diff --git a/openshift/templates/aries-endorser-wallet/aries-endorser-wallet-deploy.sandbox.param b/openshift/templates/aries-endorser-wallet/aries-endorser-wallet-deploy.sandbox.param new file mode 100644 index 00000000..bc2541f1 --- /dev/null +++ b/openshift/templates/aries-endorser-wallet/aries-endorser-wallet-deploy.sandbox.param @@ -0,0 +1,30 @@ +#========================================================= +# OpenShift template parameters for: +# Component: . +# Template File: ../openshift/templates/aries-endorser-wallet/aries-endorser-wallet-deploy.yaml +#========================================================= +NAME=aries-endorser-wallet +APP_NAME=aries-endorser-service +APP_GROUP=aries-endorser-service +NAMESPACE_NAME=bc0192 +SUFFIX=-sandbox +ROLE=wallet +AGENT_ROLE=agent +BACKUP=true +BACKUP_ROLE=backup +IMAGE_NAMESPACE=bc0192-tools +SOURCE_IMAGE_NAME=aries-endorser-db +TAG_NAME=latest +POSTGRESQL_DATABASE_NAME=default_wallet +# POSTGRESQL_USER=[a-zA-Z_][a-zA-Z0-9_]{10} +# POSTGRESQL_PASSWORD=[a-zA-Z0-9_~!@#$%^&*()-=<>,.?;:|]{16} +# POSTGRESQL_ADMIN_PASSWORD=[a-zA-Z0-9_~!@#$%^&*()-=<>,.?;:|]{16} +PORT=5432 +PGCRYPTO_EXTENSION=N +MOUNT_PATH=/var/lib/pgsql/data +PERSISTENT_VOLUME_SIZE=1Gi +PERSISTENT_VOLUME_CLASS=netapp-block-standard +CPU_REQUEST=10m +CPU_LIMIT=100m +MEMORY_REQUEST=10Mi +MEMORY_LIMIT=512Mi