-
Notifications
You must be signed in to change notification settings - Fork 24
Expand file tree
/
Copy pathinfra-managers.yaml
More file actions
112 lines (105 loc) · 3.75 KB
/
infra-managers.yaml
File metadata and controls
112 lines (105 loc) · 3.75 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# SPDX-FileCopyrightText: 2025 Intel Corporation
#
# SPDX-License-Identifier: Apache-2.0
---
import:
host-manager:
inventory:
addr: inventory.orch-infra.svc.cluster.local
image:
pullPolicy: IfNotPresent
serviceArgs:
traceURL: "orchestrator-observability-opentelemetry-collector.orch-platform.svc:4318"
traefikReverseProxy:
enabled: true
secretName: "tls-orch"
tlsOption: "gateway-tls"
oidc:
oidc_server_url: "http://platform-keycloak.orch-platform.svc/realms/master"
multiTenancy:
enforceMultiTenancy: "true"
resources: null
# https://doc.traefik.io/traefik/migrate/v2-to-v3-details/#kubernetes-crds-api-group-traefikcontainous
traefikApiGroup: "traefik.io/v1alpha1"
maintenance-manager:
inventory:
addr: inventory.orch-infra.svc.cluster.local
image:
pullPolicy: IfNotPresent
serviceArgs:
traceURL: "orchestrator-observability-opentelemetry-collector.orch-platform.svc:4318"
traefikReverseProxy:
enabled: true
secretName: "tls-orch"
tlsOption: "gateway-tls"
oidc:
oidc_server_url: "http://platform-keycloak.orch-platform.svc/realms/master"
telemetryMgrArgs:
enableVal: false # disable telemetry profile validation
multiTenancy:
enforceMultiTenancy: "true"
resources: null
mimaintmgr:
traceURL: "orchestrator-observability-opentelemetry-collector.orch-platform.svc:4318"
# https://doc.traefik.io/traefik/migrate/v2-to-v3-details/#kubernetes-crds-api-group-traefikcontainous
traefikApiGroup: "traefik.io/v1alpha1"
networking-manager:
image:
pullPolicy: IfNotPresent
serviceArgs:
inventoryAddress: "inventory.orch-infra.svc.cluster.local:50051"
traceURL: "orchestrator-observability-opentelemetry-collector.orch-platform.svc:4318"
resources: null
telemetry-manager:
image:
pullPolicy: IfNotPresent
telemetryMgrArgs:
inventoryAddress: "inventory.orch-infra.svc.cluster.local:50051"
traceURL: "orchestrator-observability-opentelemetry-collector.orch-platform.svc:4318"
traefikReverseProxy:
enabled: true
secretName: "tls-orch"
tlsOption: "gateway-tls"
oidc:
oidc_server_url: "http://platform-keycloak.orch-platform.svc/realms/master"
multiTenancy:
enforceMultiTenancy: "true"
resources: null
# https://doc.traefik.io/traefik/migrate/v2-to-v3-details/#kubernetes-crds-api-group-traefikcontainous
traefikApiGroup: "traefik.io/v1alpha1"
os-resource-manager:
managerArgs:
osProfileRevision: 0.9.8
osSecurityFeatureEnable: false
inventoryAddress: "inventory.orch-infra.svc.cluster.local:50051"
traceURL: "orchestrator-observability-opentelemetry-collector.orch-platform.svc:4318"
rsProxyRegistryAddress: "rs-proxy.orch-platform.svc.cluster.local:8081/"
rsProxyFilesAddress: "rs-proxy-files.orch-platform.svc.cluster.local:8081/"
rsEnProfileRepo: "edge-orch/en/files/os-profile/"
image:
pullPolicy: IfNotPresent
oidc:
oidc_server_url: "http://platform-keycloak.orch-platform.svc.cluster.local/realms/master"
autoProvision:
enabled: false # autoprovisioning disabled by default, can be enabled by enable-autoprovision profile
multiTenancy:
enforceMultiTenancy: "true"
resources: null
attestationstatus-manager:
inventory:
addr: inventory.orch-infra.svc.cluster.local
image:
pullPolicy: IfNotPresent
serviceArgs:
traceURL: "orchestrator-observability-opentelemetry-collector.orch-platform.svc:4318"
traefikReverseProxy:
enabled: true
secretName: "tls-orch"
tlsOption: "gateway-tls"
oidc:
oidc_server_url: "http://platform-keycloak.orch-platform.svc/realms/master"
multiTenancy:
enforceMultiTenancy: "true"
resources: null
# https://doc.traefik.io/traefik/migrate/v2-to-v3-details/#kubernetes-crds-api-group-traefikcontainous
traefikApiGroup: "traefik.io/v1alpha1"