-
Notifications
You must be signed in to change notification settings - Fork 31
Expand file tree
/
Copy pathapp-env.yaml
More file actions
132 lines (116 loc) 路 6.83 KB
/
Copy pathapp-env.yaml
File metadata and controls
132 lines (116 loc) 路 6.83 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
{{- if empty .Values.external_secrets.app_env_existingSecret}}
apiVersion: v1
kind: Secret
type: Opaque
metadata:
namespace: {{ .Release.Namespace }}
name: {{ .Release.Name }}-app-secrets
stringData:
SECRET_KEY: {{ .Values.env.secret_key | default "60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b5" | quote }}
AES_SECRET_KEY: {{ .Values.env.silo_envs.aes_secret_key | default "dsOdt7YrvxsTIFJ37pOaEVvLxN8KGBCr" | quote }}
LIVE_SERVER_SECRET_KEY: {{ .Values.env.live_server_secret_key | default "htbqvBJAgpm9bzvf3r4urJer0ENReatceh" | quote }}
PI_INTERNAL_SECRET: {{ .Values.env.pi_envs.internal_secret | default "tyfvfqvBJAgpm9bzvf3r4urJer0Ehfdubk" | quote }}
# AWS Secrets Manager ARNs (consumed by workloads via envFrom plane-app-secrets)
{{- if and (not (empty .Values.env.apiSecrets.amazonmq_secret_arn)) (not (empty .Values.env.rabbitmq_user_key)) (not (empty .Values.env.rabbitmq_password_key)) }}
AMAZONMQ_SECRET_ARN: {{ .Values.env.apiSecrets.amazonmq_secret_arn | quote }}
{{- end }}
{{- if and (not (empty .Values.env.apiSecrets.elasticache_secret_arn)) (not (empty .Values.env.redis_auth_token_key)) }}
ELASTICACHE_SECRET_ARN: {{ .Values.env.apiSecrets.elasticache_secret_arn | quote }}
{{- end }}
{{- if and (not (empty .Values.env.apiSecrets.rds_secret_arn)) (not (empty .Values.env.rds_db_host_key)) (not (empty .Values.env.rds_db_name_key)) (not (empty .Values.env.rds_db_password_key)) (not (empty .Values.env.rds_db_port_key)) (not (empty .Values.env.rds_db_username_key)) }}
RDS_SECRET_ARN: {{ .Values.env.apiSecrets.rds_secret_arn | quote }}
{{- end }}
{{- if .Values.services.redis.local_setup }}
REDIS_URL: "redis://{{ .Release.Name }}-redis.{{ .Release.Namespace }}.svc.cluster.local:6379/"
{{- else }}
REDIS_URL: {{ .Values.env.remote_redis_url | default "" | quote }}
{{- end }}
{{ if .Values.services.postgres.local_setup }}
DATABASE_URL: "postgresql://{{ .Values.env.pgdb_username }}:{{ .Values.env.pgdb_password }}@{{ .Release.Name }}-pgdb.{{ .Release.Namespace }}.svc.cluster.local/{{ .Values.env.pgdb_name }}"
{{ else if .Values.env.pgdb_remote_url }}
DATABASE_URL: {{ .Values.env.pgdb_remote_url}}
{{ else }}
DATABASE_URL: ""
{{ end }}
{{- if .Values.services.rabbitmq.local_setup }}
AMQP_URL: "amqp://{{ .Values.services.rabbitmq.default_user}}:{{ .Values.services.rabbitmq.default_password}}@{{ .Release.Name }}-rabbitmq.{{ .Release.Namespace }}.svc.{{ .Values.env.default_cluster_domain | default "cluster.local" }}/"
{{- else if .Values.services.rabbitmq.external_rabbitmq_url }}
AMQP_URL: {{ .Values.services.rabbitmq.external_rabbitmq_url}}
{{- else }}
AMQP_URL: ""
{{ end }}
{{- if include "plane.s3CAEnabled" . }}
AWS_CA_BUNDLE: "/etc/ssl/certs/ca-certificates.crt"
{{- end }}
{{- end }}
---
apiVersion: v1
kind: ConfigMap
metadata:
namespace: {{ .Release.Namespace }}
name: {{ .Release.Name }}-app-vars
data:
PRIME_HOST: {{ .Values.license.licenseServer | quote }}
MACHINE_SIGNATURE: {{ include "hashString" . | quote }}
APP_DOMAIN: {{ .Values.license.licenseDomain | quote }}
APP_VERSION: {{ .Values.planeVersion | quote }}
PAYMENT_SERVER_BASE_URL: "http://{{ .Release.Name }}-monitor.{{ .Release.Namespace }}.svc.cluster.local:8080/"
FEATURE_FLAG_SERVER_BASE_URL: "http://{{ .Release.Name }}-monitor.{{ .Release.Namespace }}.svc.cluster.local:8080/"
API_KEY_RATE_LIMIT: {{ .Values.env.api_key_rate_limit | default "60/minute" | quote }}
MINIO_ENDPOINT_SSL: {{ .Values.services.minio.env.minio_endpoint_ssl | default false | ternary "1" "0" | quote }}
USE_STORAGE_PROXY: {{ .Values.env.use_storage_proxy | default false | ternary "1" "0" | quote }}
ALLOW_ALL_ATTACHMENT_TYPES: {{ .Values.env.allow_all_attachment_types | default false | ternary "1" "0" | quote }}
INTAKE_EMAIL_DOMAIN: {{ .Values.env.email_service_envs.smtp_domain | default "" | quote }}
SENTRY_DSN: {{ .Values.env.sentry_dsn | default "" | quote}}
SENTRY_ENVIRONMENT: {{ .Values.env.sentry_environment | default "" | quote}}
DEBUG: "0"
DOCKERIZED: "1"
GUNICORN_WORKERS: "1"
{{- if .Values.env.web_url}}
WEB_URL: {{ .Values.env.web_url | default "" | quote }}
{{- else if or .Values.ssl.tls_secret_name (and .Values.ssl.createIssuer .Values.ssl.generateCerts) }}
WEB_URL: "https://{{ .Values.license.licenseDomain }}"
{{- else }}
WEB_URL: "http://{{ .Values.license.licenseDomain }}"
{{- end }}
LIVE_BASE_URL: "http://{{ .Release.Name }}-live.{{ .Release.Namespace }}.svc.cluster.local:3000/"
LIVE_BASE_PATH: "/live"
{{- if or .Values.ssl.tls_secret_name (and .Values.ssl.createIssuer .Values.ssl.generateCerts) }}
PI_BASE_URL: "https://{{ .Values.license.licenseDomain }}/pi"
{{- else }}
PI_BASE_URL: "http://{{ .Values.license.licenseDomain }}/pi"
{{- end }}
PI_BASE_PATH: "/pi"
{{- if .Values.airgapped.enabled }}
IS_AIRGAPPED: "1"
{{- end }}
{{- if eq .Values.env.cors_allowed_origins "*"}}
CORS_ALLOWED_ORIGINS: "*"
{{- else if .Values.env.cors_allowed_origins }}
CORS_ALLOWED_ORIGINS: "http://{{ .Values.license.licenseDomain }},https://{{ .Values.license.licenseDomain }},{{ .Values.env.cors_allowed_origins }}"
{{- else}}
CORS_ALLOWED_ORIGINS: "http://{{ .Values.license.licenseDomain }},https://{{ .Values.license.licenseDomain }}"
{{- end }}
# Secret cache TTL for the credentials provider used by the app.
AWS_SECRET_CACHE_TTL: {{ .Values.env.aws_secret_cache_ttl | default "300" | quote }}
# Runner base URL used by the automation runner integration.
{{- if .Values.env.runner_base_url }}
RUNNER_BASE_URL: {{ .Values.env.runner_base_url | quote }}
{{- else }}
RUNNER_BASE_URL: "http://plane-node-runner.{{ .Release.Namespace }}.svc.cluster.local:3000"
{{- end }}
# AWS Secrets Manager key mappings (key names, not the secret ARNs).
{{- if and (not (empty .Values.env.apiSecrets.elasticache_secret_arn)) (not (empty .Values.env.redis_auth_token_key)) }}
REDIS_AUTH_TOKEN_KEY: {{ .Values.env.redis_auth_token_key | quote }}
{{- end }}
{{- if and (not (empty .Values.env.apiSecrets.amazonmq_secret_arn)) (not (empty .Values.env.rabbitmq_user_key)) (not (empty .Values.env.rabbitmq_password_key)) }}
RABBITMQ_USER_KEY: {{ .Values.env.rabbitmq_user_key | quote }}
RABBITMQ_PASSWORD_KEY: {{ .Values.env.rabbitmq_password_key | quote }}
{{- end }}
{{- if and (not (empty .Values.env.apiSecrets.rds_secret_arn)) (not (empty .Values.env.rds_db_host_key)) (not (empty .Values.env.rds_db_name_key)) (not (empty .Values.env.rds_db_password_key)) (not (empty .Values.env.rds_db_port_key)) (not (empty .Values.env.rds_db_username_key)) }}
RDS_DB_HOST_KEY: {{ .Values.env.rds_db_host_key | quote }}
RDS_DB_NAME_KEY: {{ .Values.env.rds_db_name_key | quote }}
RDS_DB_PASSWORD_KEY: {{ .Values.env.rds_db_password_key | quote }}
RDS_DB_PORT_KEY: {{ .Values.env.rds_db_port_key | quote }}
RDS_DB_USERNAME_KEY: {{ .Values.env.rds_db_username_key | quote }}
{{- end }}