1.7. パッチシステムコンポーネント
oc patch コマンドを使用してインプレースアップグレードを続行します。oc patch コマンドを使用すると、デプロイメント設定、イメージストリームおよび ConfigMap にパッチを適用できます。
このアップグレードのセクションで、システム設定マップにパッチを適用する必要があります。以下の Pod のデプロイメント設定にパッチを適用する必要もあります。
- system-app
- system-resque
- system-sidekiq
- system-sphinx
設定マップおよびデプロイメント設定にパッチを適用するには、以下の手順に従います。
systemConfigMap にパッチを適用するには、以下のoc patchコマンドを実行します。oc patch cm/system -p " data: zync.yml: | production: endpoint: 'http://zync:8080' authentication: token: \"<%= ENV.fetch('ZYNC_AUTHENTICATION_TOKEN') %>\" connect_timeout: 5 send_timeout: 5 receive_timeout: 10 root_url: rolling_updates.yml: | production: old_charts: false new_provider_documentation: false proxy_pro: false instant_bill_plan_change: false service_permissions: true async_apicast_deploy: false duplicate_application_id: true duplicate_user_key: true plan_changes_wizard: false require_cc_on_signup: false apicast_per_service: true new_notification_system: true cms_api: false apicast_v2: true forum: false published_service_plan_signup: true apicast_oidc: true policies: true"oc patch cm/system -p " data: zync.yml: | production: endpoint: 'http://zync:8080' authentication: token: \"<%= ENV.fetch('ZYNC_AUTHENTICATION_TOKEN') %>\" connect_timeout: 5 send_timeout: 5 receive_timeout: 10 root_url: rolling_updates.yml: | production: old_charts: false new_provider_documentation: false proxy_pro: false instant_bill_plan_change: false service_permissions: true async_apicast_deploy: false duplicate_application_id: true duplicate_user_key: true plan_changes_wizard: false require_cc_on_signup: false apicast_per_service: true new_notification_system: true cms_api: false apicast_v2: true forum: false published_service_plan_signup: true apicast_oidc: true policies: true"Copy to Clipboard Copied! Toggle word wrap Toggle overflow system-resqueデプロイメント設定にパッチを適用するには、以下を考慮してください。-
MASTER_USER および MASTER_PASSWORD 環境変数のデフォルト値を使用する場合は、以下の
oc patchコマンドでそれらを記述しないでください。 または、MASTER_USER および MASTER_PASSWORD の値を指定する場合は、以下の
oc patchコマンドに追加します。oc patch dc/system-resque -p " metadata: labels: app: System spec: template: spec: containers: - env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent name: system-resque resources: limits: cpu: 150m memory: 450Mi requests: cpu: 100m memory: 300Mi - env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent name: system-scheduler resources: limits: cpu: 150m memory: 250Mi requests: cpu: 50m memory: 200Mi "oc patch dc/system-resque -p " metadata: labels: app: System spec: template: spec: containers: - env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent name: system-resque resources: limits: cpu: 150m memory: 450Mi requests: cpu: 100m memory: 300Mi - env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent name: system-scheduler resources: limits: cpu: 150m memory: 250Mi requests: cpu: 50m memory: 200Mi "Copy to Clipboard Copied! Toggle word wrap Toggle overflow
-
MASTER_USER および MASTER_PASSWORD 環境変数のデフォルト値を使用する場合は、以下の
system-sidekiqデプロイメント設定にパッチを適用するには、以下を考慮してください。-
MASTER_USER および MASTER_PASSWORD 環境変数のデフォルト値を使用する場合は、以下の
oc patchコマンドでそれらを記述しないでください。 または、MASTER_USER および MASTER_PASSWORD の値を指定する場合は、以下の
oc patchコマンドに追加します。oc patch dc/system-sidekiq -p " spec: template: spec: containers: - name: system-sidekiq volumeMounts: "oc patch dc/system-sidekiq -p " spec: template: spec: containers: - name: system-sidekiq volumeMounts: "Copy to Clipboard Copied! Toggle word wrap Toggle overflow oc patch dc/system-sidekiq -p " metadata: labels: app: System spec: template: spec: containers: - env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 volumeMounts: - name: system-storage mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs - name: system-tmp mountPath: /tmp image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent name: system-sidekiq resources: limits: cpu: 1000m memory: 2Gi requests: cpu: 100m memory: 500Mi volumes: - name: system-tmp emptyDir: medium: Memory - name: system-storage persistentVolumeClaim: claimName: system-storage - name: system-config configMap: name: system items: - key: zync.yml path: zync.yml - key: rolling_updates.yml path: rolling_updates.yml "oc patch dc/system-sidekiq -p " metadata: labels: app: System spec: template: spec: containers: - env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 volumeMounts: - name: system-storage mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs - name: system-tmp mountPath: /tmp image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent name: system-sidekiq resources: limits: cpu: 1000m memory: 2Gi requests: cpu: 100m memory: 500Mi volumes: - name: system-tmp emptyDir: medium: Memory - name: system-storage persistentVolumeClaim: claimName: system-storage - name: system-config configMap: name: system items: - key: zync.yml path: zync.yml - key: rolling_updates.yml path: rolling_updates.yml "Copy to Clipboard Copied! Toggle word wrap Toggle overflow
-
MASTER_USER および MASTER_PASSWORD 環境変数のデフォルト値を使用する場合は、以下の
system-appデプロイメント設定にパッチを適用するには、以下を考慮してください。-
MASTER_USER および MASTER_PASSWORD 環境変数のデフォルト値を使用する場合は、以下の
oc patchコマンドでそれらを記述しないでください。 または、MASTER_USER および MASTER_PASSWORD の値を指定する場合は、以下の
oc patchコマンドに追加します。oc patch dc/system-app -p " spec: template: spec: containers: - name: system-provider volumeMounts: - name: system-developer volumeMounts: "oc patch dc/system-app -p " spec: template: spec: containers: - name: system-provider volumeMounts: - name: system-developer volumeMounts: "Copy to Clipboard Copied! Toggle word wrap Toggle overflow oc patch dc/system-app -p " metadata: labels: app: System spec: strategy: rollingParams: pre: execNewPod: containerName: system-master env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" command: - bash - -c - bundle exec rake boot openshift:deploy MASTER_ACCESS_TOKEN="${MASTER_ACCESS_TOKEN}" post: execNewPod: containerName: system-master template: spec: containers: - args: env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent args: [ 'env', 'TENANT_MODE=master', 'PORT=3002', 'container-entrypoint', 'bundle', 'exec', 'unicorn', '-c', 'config/unicorn.rb' ] command: name: system-master resources: limits: cpu: 1000m memory: 800Mi requests: cpu: 50m memory: 600Mi livenessProbe: timeoutSeconds: 10 initialDelaySeconds: 20 tcpSocket: port: master periodSeconds: 10 readinessProbe: httpGet: path: /check.txt port: master scheme: HTTP httpHeaders: - name: X-Forwarded-Proto value: https initialDelaySeconds: 30 timeoutSeconds: 10 periodSeconds: 30 ports: - containerPort: 3002 protocol: TCP name: master volumeMounts: - name: system-storage mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs - name: system-provider env: - name: MASTER_USER value: ${MASTER_USER} - name: MASTER_PASSWORD value: ${MASTER_PASSWORD} - name: AMP_RELEASE value: ${AMP_RELEASE} - name: APICAST_REGISTRY_URL value: ${APICAST_REGISTRY_URL} image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent resources: limits: cpu: 1000m memory: 800Mi requests: cpu: 50m memory: 600Mi command: args: [ 'env', 'TENANT_MODE=provider', 'PORT=3000', 'container-entrypoint', 'bundle', 'exec', 'unicorn', '-c', 'config/unicorn.rb' ] volumeMounts: - name: system-storage mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs - name: system-developer env: - name: MASTER_USER value: ${MASTER_USER} - name: MASTER_PASSWORD value: ${MASTER_PASSWORD} - name: AMP_RELEASE value: ${AMP_RELEASE} - name: APICAST_REGISTRY_URL value: ${APICAST_REGISTRY_URL} image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent command: args: [ 'env', 'PORT=3001', 'container-entrypoint', 'bundle', 'exec', 'unicorn', '-c', 'config/unicorn.rb' ] volumeMounts: - name: system-storage readOnly: true mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs triggers: - type: ConfigChange - type: ImageChange imageChangeParams: automatic: true containerNames: - system-provider - system-developer - system-master from: kind: ImageStreamTag name: amp-system:latest "oc patch dc/system-app -p " metadata: labels: app: System spec: strategy: rollingParams: pre: execNewPod: containerName: system-master env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" command: - bash - -c - bundle exec rake boot openshift:deploy MASTER_ACCESS_TOKEN="${MASTER_ACCESS_TOKEN}" post: execNewPod: containerName: system-master template: spec: containers: - args: env: - name: RAILS_ENV value: \"production\" - name: DATABASE_URL value: \"${DATABASE_URL}\" - name: FORCE_SSL value: \"true\" - name: THREESCALE_SUPERDOMAIN value: \"${THREESCALE_SUPERDOMAIN}\" - name: MASTER_USER value: \"${MASTER_USER}\" - name: MASTER_PASSWORD value: \"${MASTER_PASSWORD}\" - name: TENANT_NAME value: \"${TENANT_NAME}\" - name: APICAST_ACCESS_TOKEN value: \"${APICAST_ACCESS_TOKEN}\" - name: ADMIN_ACCESS_TOKEN value: \"${ADMIN_ACCESS_TOKEN}\" - name: PROVIDER_PLAN value: 'enterprise' - name: USER_LOGIN value: \"${USER_LOGIN}\" - name: USER_PASSWORD value: \"${USER_PASSWORD}\" - name: RAILS_LOG_TO_STDOUT value: \"true\" - name: RAILS_LOG_LEVEL value: \"info\" - name: THINKING_SPHINX_ADDRESS value: \"system-sphinx\" - name: THINKING_SPHINX_PORT value: \"9306\" - name: THINKING_SPHINX_CONFIGURATION_FILE value: \"/tmp/sphinx.conf\" - name: EVENTS_SHARED_SECRET value: \"${EVENTS_SHARED_SECRET}\" - name: THREESCALE_SANDBOX_PROXY_OPENSSL_VERIFY_MODE value: \"VERIFY_NONE\" - name: APICAST_BACKEND_ROOT_ENDPOINT value: \"${APICAST_BACKEND_ROOT_ENDPOINT}\" - name: CONFIG_INTERNAL_API_USER value: \"${CONFIG_INTERNAL_API_USER}\" - name: CONFIG_INTERNAL_API_PASSWORD value: \"${CONFIG_INTERNAL_API_PASSWORD}\" - name: SECRET_KEY_BASE value: \"${SECRET_KEY_BASE}\" - name: AMP_RELEASE value: \"${AMP_RELEASE}\" - name: ZYNC_AUTHENTICATION_TOKEN valueFrom: secretKeyRef: name: zync key: ZYNC_AUTHENTICATION_TOKEN - name: SMTP_ADDRESS valueFrom: configMapKeyRef: name: smtp key: address - name: SMTP_USER_NAME valueFrom: configMapKeyRef: name: smtp key: username - name: SMTP_PASSWORD valueFrom: configMapKeyRef: name: smtp key: password - name: SMTP_DOMAIN valueFrom: configMapKeyRef: name: smtp key: domain - name: SMTP_PORT valueFrom: configMapKeyRef: name: smtp key: port - name: SMTP_AUTHENTICATION valueFrom: configMapKeyRef: name: smtp key: authentication - name: SMTP_OPENSSL_VERIFY_MODE valueFrom: configMapKeyRef: name: smtp key: openssl.verify.mode - name: BACKEND_ROUTE value: \"${BACKEND_ROUTE}\" - name: SSL_CERT_DIR value: \"/etc/pki/tls/certs\" - name: APICAST_REGISTRY_URL value: \"${APICAST_REGISTRY_URL}\" image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent args: [ 'env', 'TENANT_MODE=master', 'PORT=3002', 'container-entrypoint', 'bundle', 'exec', 'unicorn', '-c', 'config/unicorn.rb' ] command: name: system-master resources: limits: cpu: 1000m memory: 800Mi requests: cpu: 50m memory: 600Mi livenessProbe: timeoutSeconds: 10 initialDelaySeconds: 20 tcpSocket: port: master periodSeconds: 10 readinessProbe: httpGet: path: /check.txt port: master scheme: HTTP httpHeaders: - name: X-Forwarded-Proto value: https initialDelaySeconds: 30 timeoutSeconds: 10 periodSeconds: 30 ports: - containerPort: 3002 protocol: TCP name: master volumeMounts: - name: system-storage mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs - name: system-provider env: - name: MASTER_USER value: ${MASTER_USER} - name: MASTER_PASSWORD value: ${MASTER_PASSWORD} - name: AMP_RELEASE value: ${AMP_RELEASE} - name: APICAST_REGISTRY_URL value: ${APICAST_REGISTRY_URL} image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent resources: limits: cpu: 1000m memory: 800Mi requests: cpu: 50m memory: 600Mi command: args: [ 'env', 'TENANT_MODE=provider', 'PORT=3000', 'container-entrypoint', 'bundle', 'exec', 'unicorn', '-c', 'config/unicorn.rb' ] volumeMounts: - name: system-storage mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs - name: system-developer env: - name: MASTER_USER value: ${MASTER_USER} - name: MASTER_PASSWORD value: ${MASTER_PASSWORD} - name: AMP_RELEASE value: ${AMP_RELEASE} - name: APICAST_REGISTRY_URL value: ${APICAST_REGISTRY_URL} image: registry.access.redhat.com/3scale-amp22/system:1.7 imagePullPolicy: IfNotPresent command: args: [ 'env', 'PORT=3001', 'container-entrypoint', 'bundle', 'exec', 'unicorn', '-c', 'config/unicorn.rb' ] volumeMounts: - name: system-storage readOnly: true mountPath: /opt/system/public/system - name: system-config mountPath: /opt/system-extra-configs triggers: - type: ConfigChange - type: ImageChange imageChangeParams: automatic: true containerNames: - system-provider - system-developer - system-master from: kind: ImageStreamTag name: amp-system:latest "Copy to Clipboard Copied! Toggle word wrap Toggle overflow
-
MASTER_USER および MASTER_PASSWORD 環境変数のデフォルト値を使用する場合は、以下の
amp-systemイメージにパッチを適用するには、以下のoc patchコマンドを実行します。oc patch is/amp-system -p " spec: tags: - name: 2.2.0 annotations: openshift.io/display-name: AMP system 2.2.0 from: kind: DockerImage name: 'registry.access.redhat.com/3scale-amp22/system:1.7' - name: latest from: kind: ImageStreamTag name: 2.2.0 "oc patch is/amp-system -p " spec: tags: - name: 2.2.0 annotations: openshift.io/display-name: AMP system 2.2.0 from: kind: DockerImage name: 'registry.access.redhat.com/3scale-amp22/system:1.7' - name: latest from: kind: ImageStreamTag name: 2.2.0 "Copy to Clipboard Copied! Toggle word wrap Toggle overflow system-sphinxデプロイメント設定にパッチを適用するには、以下のoc patchコマンドを実行します。oc patch dc/system-sphinx -p " metadata: labels: app: System spec: template: spec: containers: - imagePullPolicy: IfNotPresent image: registry.access.redhat.com/3scale-amp22/system:1.7 name: system-sphinx resources: limits: cpu: 1000m memory: 512Mi requests: cpu: 80m memory: 250Mi "oc patch dc/system-sphinx -p " metadata: labels: app: System spec: template: spec: containers: - imagePullPolicy: IfNotPresent image: registry.access.redhat.com/3scale-amp22/system:1.7 name: system-sphinx resources: limits: cpu: 1000m memory: 512Mi requests: cpu: 80m memory: 250Mi "Copy to Clipboard Copied! Toggle word wrap Toggle overflow system-redisデプロイメント設定にパッチを適用するには、以下のoc patchコマンドを実行します。oc patch dc/system-redis -p ' metadata: labels: app: System spec: template: spec: containers: - imagePullPolicy: IfNotPresent name: system-redis command: - "/opt/rh/rh-redis32/root/usr/bin/redis-server" args: - "/etc/redis.d/redis.conf" - "--daemonize" - "no" resources: limits: memory: 32Gi cpu: 500m requests: cpu: 150m memory: 256Mi volumeMounts: - name: system-redis-storage mountPath: "/var/lib/redis/data" - name: redis-config mountPath: /etc/redis.d/ 'oc patch dc/system-redis -p ' metadata: labels: app: System spec: template: spec: containers: - imagePullPolicy: IfNotPresent name: system-redis command: - "/opt/rh/rh-redis32/root/usr/bin/redis-server" args: - "/etc/redis.d/redis.conf" - "--daemonize" - "no" resources: limits: memory: 32Gi cpu: 500m requests: cpu: 150m memory: 256Mi volumeMounts: - name: system-redis-storage mountPath: "/var/lib/redis/data" - name: redis-config mountPath: /etc/redis.d/ 'Copy to Clipboard Copied! Toggle word wrap Toggle overflow system-memcacheデプロイメント設定にパッチを適用するには、以下のoc patchコマンドを実行します。oc patch dc/system-memcache -p " metadata: labels: app: System spec: template: spec: containers: - imagePullPolicy: IfNotPresent name: memcache resources: limits: cpu: 250m memory: 96Mi requests: cpu: 50m memory: 64Mi "oc patch dc/system-memcache -p " metadata: labels: app: System spec: template: spec: containers: - imagePullPolicy: IfNotPresent name: memcache resources: limits: cpu: 250m memory: 96Mi requests: cpu: 50m memory: 64Mi "Copy to Clipboard Copied! Toggle word wrap Toggle overflow