upgrade-legacy.yaml

---
# 创建配置文件
apiVersion: v1
data:
  config.ini: |-
    [mysql]
    host = {{dongtai-mysql}}
    port = {{3306}}
    name = {{dongtai_webapi}}
    user = {{root}}
    password = {{dongtai-iast}}

    [redis]
    host = {{dongtai-redis}}
    port = {{6379}}
    password = {{123456}} 
    db = 0

    [engine]
    url = http://dongtai-engine-svc:80

    [apiserver]
    url = http://dongtai-server-svc:80

    [security]
    csrf_trust_origins = .example.com
    secret_key = vbjlvbxfvazjfprywuxgyclmvhtmselddsefxxlcixovmqfpgy

    [smtp]
    server = smtp_server
    user = smtp_user
    password = smtp_password
    from_addr = from_addr
    ssl = False
    cc_addr = cc_addr
    port = 25

    [sca]
    base_url = https://iast.huoxian.cn/openapi/sca/v1

kind: ConfigMap
metadata:
  name: dongtai-iast-config.ini
  namespace: {{CHANGE_THIS_NAMESPACE}}
---
# dongtai-server服务
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dongtai-server
  namespace: {{CHANGE_THIS_NAMESPACE}}
  annotations:
    kubesphere.io/description: dongtai-server
  labels:
    app: dongtai-server
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dongtai-server
  template:
    metadata:
      labels:
        app: dongtai-server
    spec:
      containers:
        - name: dongtai-server-container
          image: registry.cn-beijing.aliyuncs.com/huoxian_pub/dongtai-server:{{CHANGE_THIS_VERSION}}
          imagePullPolicy: Always
          volumeMounts:
            - name: configfile
              mountPath: /opt/dongtai/webapi/conf/config.ini
              subPath: config.ini
          resources:
            limits:
              cpu: "500m"
              memory: 1000Mi
            requests:
              cpu: "500m"
              memory: 1000Mi
      volumes:
        - name: configfile
          configMap:
            name: dongtai-iast-config.ini
---
# dongtai-web服务
apiVersion: v1
kind: Service
metadata:
  name: dongtai-server-svc
  namespace: {{CHANGE_THIS_NAMESPACE}}
spec:
  ports:
    - port: 80
      protocol: TCP
      targetPort: 8000
  selector:
    app: dongtai-server
  type: ClusterIP
---
# 创建nginx.conf配置
apiVersion: v1
data:
  nginx.conf: |-
    #user  nobody;
     worker_processes  1;
     events {
         worker_connections  1024;
     }
     http {
         include       mime.types;
         default_type  application/octet-stream;
         sendfile        on;
         keepalive_timeout  65;

         #gzip  on;
         gzip on;
         gzip_min_length  5k;
         gzip_buffers     4 16k;
         #gzip_http_version 1.0;
         gzip_comp_level 3;
         gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
         gzip_vary on;

         server {
             listen  80;
             server_name 127.0.0.1;
             client_max_body_size 100M;
             location / {
                 root /usr/share/nginx/html;   #站点目录
                 index index.html index.htm;   #添加属性。
                 try_files $uri $uri/ /index.html;
             }

               location /api/ {
                 proxy_read_timeout 60;
                 proxy_pass http://dongtai-server-svc:80/api/;
               }

               location /upload/ {
                 proxy_pass http://dongtai-server-svc:80/upload/;
               }

               location /openapi/ {
                proxy_set_header X-real-ip $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header User-Agent $http_user_agent;
                proxy_set_header X-Host $http_x_forwarded_host;
                proxy_read_timeout 60;
                proxy_pass http://dongtai-server-svc:80/;
               }

             location = /50x.html {
                 root   /usr/share/nginx/html;
             }
         }
     }
kind: ConfigMap
metadata:
  name: dongtai-web-nginx-conf
  namespace: {{CHANGE_THIS_NAMESPACE}}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dongtai-web
  namespace: {{CHANGE_THIS_NAMESPACE}}
  annotations:
    kubesphere.io/description: dongtai前端项目
  labels:
    app: dongtai-web
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dongtai-web
  template:
    metadata:
      labels:
        app: dongtai-web
    spec:
      containers:
        - name: dongtai-web-container
          image: registry.cn-beijing.aliyuncs.com/huoxian_pub/dongtai-web:{{CHANGE_THIS_VERSION}}
          imagePullPolicy: Always
          volumeMounts:
            - name: configfile
              mountPath: /etc/nginx/nginx.conf
              subPath: nginx.conf
          resources:
            limits:
              cpu: "500m"
              memory: 1000Mi
            requests:
              cpu: "500m"
              memory: 1000Mi
      volumes:
        - name: configfile
          configMap:
            name: dongtai-web-nginx-conf
---
# dongtai-engine服务
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dongtai-engine
  namespace: {{CHANGE_THIS_NAMESPACE}}
  annotations:
    kubesphere.io/description: dongtai-engine
  labels:
    app: dongtai-engine
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dongtai-engine
  template:
    metadata:
      labels:
        app: dongtai-engine
    spec:
      containers:
        - name: dongtai-engine-container
          image: registry.cn-beijing.aliyuncs.com/huoxian_pub/dongtai-server:{{CHANGE_THIS_VERSION}}
          command: ["/bin/sh", "/opt/dongtai/webapi/docker/entrypoint.sh"]
          args: ["worker"]
          imagePullPolicy: Always
          volumeMounts:
            - name: configfile
              mountPath: /opt/dongtai/webapi/conf/config.ini
              subPath: config.ini
          resources:
            limits:
              cpu: "500m"
              memory: 1000Mi
            requests:
              cpu: "500m"
              memory: 1000Mi
      volumes:
        - name: configfile
          configMap:
            name: dongtai-iast-config.ini
---
apiVersion: v1
kind: Service
metadata:
  name: dongtai-engine-svc
  namespace: {{CHANGE_THIS_NAMESPACE}}
spec:
  ports:
    - port: 80
      protocol: TCP
      targetPort: 8000
  selector:
    app: dongtai-engine
  type: ClusterIP
---
#dongtai-engine-task服务
apiVersion: apps/v1
kind: Deployment
metadata:
  name: dongtai-engine-task
  namespace: {{CHANGE_THIS_NAMESPACE}}
  annotations:
    kubesphere.io/description: dongtai-engine-task
  labels:
    app: dongtai-engine-task
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dongtai-engine-task
  template:
    metadata:
      labels:
        app: dongtai-engine-task
    spec:
      containers:
        - name: dongtai-engine-task-container
          image: registry.cn-beijing.aliyuncs.com/huoxian_pub/dongtai-server:{{CHANGE_THIS_VERSION}}
          command: ["/bin/bash", "/opt/dongtai/webapi/docker/entrypoint.sh"]
          args: ["beat"]
          imagePullPolicy: Always
          volumeMounts:
            - name: configfile
              mountPath: /opt/dongtai/webapi/conf/config.ini
              subPath: config.ini
          resources:
            limits:
              cpu: "500m"
              memory: 1000Mi
            requests:
              cpu: "500m"
              memory: 1000Mi
      volumes:
        - name: configfile
          configMap:
            name: dongtai-iast-config.ini