-
Notifications
You must be signed in to change notification settings - Fork 9
/
podman.yml
197 lines (197 loc) · 6.8 KB
/
podman.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
apiVersion: v1
kind: Pod
metadata:
labels:
app: cft
name: cft-pod
spec:
containers:
- name: cft
network-alias: cft-pod
image: docker.repository.axway.com/transfercft-docker-prod/3.10/cft:3.10.2206
args:
- ./start.sh
restart: unless-stopped
livenessProbe:
exec:
command:
- ". /opt/axway/data/runtime/profile && copstatus"
periodSeconds: 10
failureThreshold: 3
initialDelaySeconds: 10
ports:
- name: restapi
hostPort: 1768
containerPort: 1768
protocol: tcp
- name: pesit
hostPort: 1761
containerPort: 1761
protocol: tcp
- name: pesitssl
hostPort: 1762
containerPort: 1762
protocol: tcp
- name: sftp
hostPort: 1763
containerPort: 1763
protocol: tcp
- name: copilot
hostPort: 1766
containerPort: 1766
protocol: tcp
- name: copilotcg
hostPort: 1767
containerPort: 1767
protocol: tcp
env:
## Set parameter to yes if you accept the applicable General Terms and Conditions,
## located at https://www.axway.com/en/legal/contract-documents
- name: ACCEPT_GENERAL_CONDITIONS
value: "NO"
- name: CFT_FQDN
value: cft-pod
## Uncomment the next four lines if necessary when using load balancer in multinode environment
#- name: CFT_LOAD_BALANCER_HOST
# value: cft-pod
#- name: CFT_LOAD_BALANCER_PORT
# value: 1767
- name: CFT_INSTANCE_ID
value: container0_cft
- name: CFT_INSTANCE_GROUP
value: dev.container
- name: CFT_CATALOG_SIZE
value: 1000
- name: CFT_COM_SIZE
value: 1000
- name: CFT_KEY
value: "base64 -d /run/cft_secrets/cft.key"
- name: CFT_CFTDIRRUNTIME
value: "/opt/axway/data/runtime"
- name: CFT_PESIT_PORT
value: 1761
- name: CFT_PESITSSL_PORT
value: 1762
- name: CFT_SFTP_PORT
value: 1763
- name: CFT_COMS_PORT
value: 1765
- name: CFT_COPILOT_PORT
value: 1766
- name: CFT_COPILOT_CG_PORT
value: 1767
## Uncomment the next two lines if necessary to set an external port to be used by Central Governance to connect to Transfer CFT UI server
#- name: CFT_COPILOT_CG_PORT_EXPOSED
# value: 1767
- name: CFT_RESTAPI_PORT
value: 1768
- name: CFT_CG_ENABLE
value: "NO"
- name: CFT_CG_HOST
value: fm
- name: CFT_CG_PORT
value: 8081
- name: CFT_CG_POLICY
value: ""
- name: CFT_CG_PERIODICITY
value: ""
- name: CFT_CG_AGENT_NAME
value: ""
## Uncomment the next two lines to customize the CG CA certificate. See also secrets sections.
#- name: USER_CG_CA_CERT
# value: "/run/secrets/cg_ca_cert.pem"
## Uncomment the next two lines to customize the CG shared secret. See also secrets sections.
#- name: CFT_CG_SHARED_SECRET
# value: "base64 -d /run/cft_secrets/shared_secret"
- name: CFT_SENTINEL_ENABLE
value: "NO"
- name: CFT_SENTINEL_HOST
value: sentinel
- name: CFT_SENTINEL_PORT
value: 1305
- name: CFT_SENTINEL_SSL
value: "NO"
- name: CFT_SENTINEL_LOG_FILTER
value: EF
- name: CFT_SENTINEL_TRANSFER_FILTER
value: ALL
## Uncomment the next two lines to customize the Sentinel CA certificate. See also secrets sections.
#- name: USER_SENTINEL_CA_CERT
# value: "/run/secrets/sentinel_ca_cert.pem"
- name: CFT_MULTINODE_ENABLE
value: "NO"
- name: CFT_MULTINODE_NUMBER
value: 1
- name: CFT_MULTINODE_NODE_PER_HOST
value: 1
- name: CFT_JVM
value: 1024
## Uncomment the next four lines to customize the Copilot server certificate. See also secrets sections.
## The certificate must refer to a PKCS12 certificate.
#- name: USER_COPILOT_CERT
# value: "/run/secrets/copilot.p12"
#- name: USER_COPILOT_CERT_PASSWORD
# value: "base64 -d /run/cft_secrets/copilot_p12.pwd"
## Uncomment the next four lines to create a XFBADM user. See also secrets sections.
#- name: USER_XFBADM_LOGIN
# value: "admin"
#- name: USER_XFBADM_PASSWORD
# value: "base64 -d /run/cft_secrets/xfbadm.pwd"
## Interval in seconds between two checks of Passport access management updates.
- name: CFT_AM_PASSPORT_PERSISTENCY_CHECK_INTERVAL
value: 60
## Script executed at container initialization
#- name: USER_SCRIPT_INIT
# value: "/opt/app/custom/init.sh"
## Script executed at each container start-up
#- name: USER_SCRIPT_START
# value: "/opt/app/custom/startup.sh"
volumeMounts:
- name: cft_data-pvc
mountPath: /opt/axway/data
- name: cft_secrets
readOnly: true
mountPath: /run/cft_secrets
## Uncomment the next two lines to use a script for initialization or start-up.
#- name: custom
# mountPath: /opt/app/custom/
## Uncomment the next three lines to customize the CG CA certificate.
#- name: cg_ca_cert.pem
# readOnly: true
# mountPath: /run/secrets/cg_ca_cert.pem
## Uncomment the next three lines to customize the Sentinel CA certificate.
#- name: sentinel_ca_cert.pem
# readOnly: true
# mountPath: /run/secrets/sentinel_ca_cert.pem
## Uncomment the next three lines to customize the Copilot server certificate.
#- name: copilot.p12
# readOnly: true
# mountPath: /run/secrets/copilot.p12
volumes:
- name: cft_data-pvc
persistentVolumeClaim:
claimName: cft_data
- name: cft_secrets
secret:
secretName: cft_secrets
optional: false
## Uncomment the next four lines to customize the CG CA certificate.
#- name: cg_ca_cert.pem
# hostPath:
# path: ./conf/cg_ca_cert.pem
# type: File
## Uncomment the next four lines to customize the Sentinel CA certificate.
#- name: sentinel_ca_cert.pem
# hostPath:
# path: ./conf/sentinel_ca_cert.pem
# type: File
## Uncomment the next four lines to customize the Copilot server certificate.
#- name: copilot.p12
# hostPath:
# path: ./conf/copilot.p12
# type: File
## Uncomment the next four lines to use a script for initialization of start-up.
#- name: custom
# hostPath:
# path: ./custom
# type: Directory