107 lines
2.2 KiB
YAML
107 lines
2.2 KiB
YAML
# Production environment values for api7ee
|
|
# This file contains production-specific configuration overrides
|
|
|
|
global:
|
|
imageRegistry: "git.commandware.com"
|
|
imagePullSecrets:
|
|
- name: registry-secret
|
|
|
|
web:
|
|
replicaCount: 3
|
|
|
|
image:
|
|
tag: "v1.0.0" # Use specific version in production
|
|
pullPolicy: Always
|
|
|
|
resources:
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
|
|
autoscaling:
|
|
enabled: true
|
|
minReplicas: 3
|
|
maxReplicas: 15
|
|
|
|
api:
|
|
replicaCount: 5
|
|
|
|
image:
|
|
tag: "v1.0.0" # Use specific version in production
|
|
pullPolicy: Always
|
|
|
|
resources:
|
|
limits:
|
|
cpu: 2000m
|
|
memory: 2Gi
|
|
requests:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
|
|
autoscaling:
|
|
enabled: true
|
|
minReplicas: 5
|
|
maxReplicas: 30
|
|
|
|
env:
|
|
- name: LOG_LEVEL
|
|
value: "warn"
|
|
- name: ENVIRONMENT
|
|
value: "production"
|
|
|
|
ingress:
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/rate-limit: "100"
|
|
nginx.ingress.kubernetes.io/ssl-protocols: "TLSv1.2 TLSv1.3"
|
|
nginx.ingress.kubernetes.io/ssl-ciphers: "HIGH:!aNULL:!MD5"
|
|
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
minAvailable: 2
|
|
|
|
metrics:
|
|
enabled: true
|
|
serviceMonitor:
|
|
enabled: true
|
|
interval: 15s
|
|
|
|
networkPolicy:
|
|
enabled: true
|
|
|
|
# API7 configuration for production
|
|
api7:
|
|
enabled: true
|
|
gateway:
|
|
adminUrl: http://api7ee3-0-1759339083-dp-manager.api7ee.svc.cluster.local:7900
|
|
adminKey: "${API7_ADMIN_KEY}" # Should be provided via secret in production
|
|
gatewayService: gateway-0-1759393614-gateway
|
|
hosts:
|
|
- commandware.it
|
|
- api7-demo.commandware.com # Additional production domain
|
|
tls:
|
|
enabled: true
|
|
certManager:
|
|
enabled: true
|
|
issuer: cloudflare-acme-prod
|
|
plugins:
|
|
rateLimit:
|
|
enabled: true
|
|
count: 1000 # Higher limits for production
|
|
timeWindow: 60
|
|
apiCount: 10000 # Much higher for API endpoints
|
|
cors:
|
|
enabled: true
|
|
allowOrigins:
|
|
["https://commandware.it", "https://api7-demo.commandware.com"]
|
|
allowCredentials: true
|
|
auth:
|
|
enabled: true # Enable auth in production
|
|
prometheus:
|
|
enabled: true
|
|
logging:
|
|
enabled: true
|
|
endpoint: http://logging-service.monitoring:8080/logs
|