From ea533923a9360acf4e94d24824009b7c2ddce0de Mon Sep 17 00:00:00 2001
From: liuyang <yang_liu0418@163.com>
Date: Mon, 20 Nov 2023 20:20:27 +0800
Subject: [PATCH] deploy opengauss oneid server

---
 deploy/opengauss-oneid-server/deployment.yaml | 55 +++++++++++++++++++
 .../opengauss-oneid-server/kustomization.yaml | 13 +++++
 deploy/opengauss-oneid-server/secret.yaml     | 24 ++++++++
 deploy/opengauss-oneid-server/service.yaml    | 16 ++++++
 4 files changed, 108 insertions(+)
 create mode 100644 deploy/opengauss-oneid-server/deployment.yaml
 create mode 100644 deploy/opengauss-oneid-server/kustomization.yaml
 create mode 100644 deploy/opengauss-oneid-server/secret.yaml
 create mode 100644 deploy/opengauss-oneid-server/service.yaml

diff --git a/deploy/opengauss-oneid-server/deployment.yaml b/deploy/opengauss-oneid-server/deployment.yaml
new file mode 100644
index 00000000..182b0d53
--- /dev/null
+++ b/deploy/opengauss-oneid-server/deployment.yaml
@@ -0,0 +1,55 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: oneid-server
+  namespace: opengauss-oneid-server
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 2
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: oneid-server
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: oneid-server
+    spec:
+      containers:
+      - env:
+        - name: APPLICATION_PATH
+          value: /var/lib/oneid-server/application.yaml
+        image: swr.cn-north-4.myhuaweicloud.com/opensourceway/openeuler/openeuler-usercenter-server:c4cf00e56d2ed372eefa841959f19d219ec9ce9e
+        imagePullPolicy: IfNotPresent
+        name: oneid-server
+        ports:
+        - containerPort: 8080
+          name: http
+          protocol: TCP
+        resources:
+          limits:
+            cpu: 500m
+            memory: 500Mi
+          requests:
+            cpu: 500m
+            memory: 500Mi
+        volumeMounts:
+        - mountPath: /var/lib/oneid-server/application.yaml
+          name: secret
+          subPath: application-yaml
+      dnsPolicy: ClusterFirst
+      imagePullSecrets:
+      - name: huawei-swr-image-pull-secret
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      volumes:
+      - name: secret
+        secret:
+          defaultMode: 420
+          secretName: oneid-server-secrets
diff --git a/deploy/opengauss-oneid-server/kustomization.yaml b/deploy/opengauss-oneid-server/kustomization.yaml
new file mode 100644
index 00000000..136a88c9
--- /dev/null
+++ b/deploy/opengauss-oneid-server/kustomization.yaml
@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: opengauss-oneid-server
+commonAnnotations:
+  kubernetes.ops.cluster: mindspore-cn1-cluster
+  kubernetes.ops.email: ""
+  kubernetes.ops.os.base: ubuntu
+  kubernetes.ops.owner: wangweifeng
+  kubernetes.ops.region: beijing
+resources:
+- service.yaml
+- deployment.yaml
+- secret.yaml
diff --git a/deploy/opengauss-oneid-server/secret.yaml b/deploy/opengauss-oneid-server/secret.yaml
new file mode 100644
index 00000000..0b2d1666
--- /dev/null
+++ b/deploy/opengauss-oneid-server/secret.yaml
@@ -0,0 +1,24 @@
+---
+apiVersion: secrets-manager.tuenti.io/v1alpha1
+kind: SecretDefinition
+metadata:
+  name: oneid-server-secrets
+  namespace: opengauss-oneid-server
+spec:
+  keysMap:
+    DEFAULT_AVATAR:
+      key: DEFAULT_AVATAR
+      path: secrets/data/opengauss/oneid-server
+    application-yaml:
+      key: application-yaml
+      path: secrets/data/opengauss/oneid-server
+    dbpassword:
+      key: dbpassword
+      path: secrets/data/opengauss/oneid-server
+    dburl:
+      key: dburl
+      path: secrets/data/opengauss/oneid-server
+    dbusername:
+      key: dbusername
+      path: secrets/data/opengauss/oneid-server
+  name: oneid-server-secrets
diff --git a/deploy/opengauss-oneid-server/service.yaml b/deploy/opengauss-oneid-server/service.yaml
new file mode 100644
index 00000000..aa807da2
--- /dev/null
+++ b/deploy/opengauss-oneid-server/service.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: oneid-server-service
+  namespace: opengauss-oneid-server
+spec:
+  ports:
+  - name: https-port
+    port: 80
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app: oneid-server
+  sessionAffinity: None
+  type: ClusterIP
\ No newline at end of file
-- 
Gitee