dw-authz-server ConfigMap for Identity Authorization Server

apiVersion: v1 kind: ConfigMap metadata: name: dw-authz-server data: app.yml: |- debug: false server: error: includeStacktrace: ON_TRACE_PARAM port: 19999 servlet: context-path: /authz compression: enabled: true tomcat: accesslog: buffered: true directory: /var/log/epic/dw-authz enabled: true prefix: authz_access_log rename-on-rotate: true request-attributes-enabled: true

spring:
  jmx:
    enabled: false
  datasource:
    url: jdbc:mysql://100.71.8.94:3306/identity?useUnicode=true&characterEncoding=utf8&useSSL=false&allowMultiQueries=true
    #url: jdbc:mysql://100.71.8.95:3306/identity?useUnicode=true&characterEncoding=UTF-8&zeroDateTimeBehavior=convertToNull&allowMultiQueries=true
    username: root
    password: Nz_2@sMw6P
    type: com.zaxxer.hikari.HikariDataSource
    driverClassName: com.mysql.jdbc.Driver
    hikari:
      connection-timeout: 30000
      idle-timeout: 60000
      driver-class-name: com.mysql.jdbc.Driver
    ext:
      health:
        enabled: true
        manualTableInfo:
          identity:
            - oauth_access_token
            - oauth_refresh_token

  redis:
    timeout: 30s
    password: U4tmN2R*gf3k
    cluster:
      nodes: 100.71.8.94:7001,100.71.8.94:7000,100.71.8.95:7001,100.71.8.95:7000,100.71.8.50:7001,100.71.8.50:7000
      max-redirects: 3
    cluster-ext:
      enabled: true
    jedis:
      pool:
        maxIdle: 128
        minIdle: 0
        maxActive: 128
        maxWait: 60000ms      
security:
  oauth2:
    client:
      clientId: CLIENT
      clientSecret: SECRET
      authorizedGrantTypes:
        - refresh_token
        - password
      accessTokenValiditySeconds: 18000

info:
  contributors:
    - zhengyang

logging:
  level:
    com:
      chinamobile:
        deepwatch:
          identity:
            authzserver: debug
    org:
      springframework:
        security: trace

configs:
  com:
    cmss:
      dw:
        # common config
        common:
          webmvc:
            response:
              unified:
                enabled: false
          security:
            crypto:
              enabled: true
              rsa:
                publicKey: MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQChCr04exCD4dsDiGGzD3UFxr0OwlO23BEhcSVSc7ogtdK9qioufP4Gpb7AyTIYQu7W9MjcB7Hu+oXR1aiiAtt0Jlmuq6JnZ8qOyKdzdoOwPP1/O0UEzObL3yZZ61+lXfztFgJWRIWmSufdqvUS4FKjIqGv9AzbEQu3XtU234ZVswIDAQAB
                privateKey: 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
            oauth2:
              enabled: false
            ignored: /mgmt/**,/oauth/revoke_token
        # app config
        authz-server:
          tokenStore:
            type: jdbc
            exp: 60

apiVersion: v1 kind: Service metadata: name: dw-authz labels: app: dw spec: ports: - port: 19999 targetPort: 19999 protocol: TCP nodePort: 30109 name: http-port type: NodePort selector: app: dw tier: authz

apiVersion: apps/v1 kind: Deployment metadata: name: dw-authz labels: app: dw spec: selector: matchLabels: app: dw tier: authz replicas: 1 strategy: type: Recreate template: metadata: labels: app: dw tier: authz spec: nodeName: yunwang-ityun-k8s01 serviceAccountName: dw-configmap containers: - image: registry.paas/cmss/identity-authz-server:2023-09-05-14-1693893750 #- image: registry.paas/cmss/identity-authz-server:2023-07-20-20-1689854962 name: dw-authz env: - name: current_namespace valueFrom: fieldRef: fieldPath: metadata.namespace ports: - containerPort: 19999 name: authz volumeMounts: - mountPath: /var/log/epic name: authz-log subPath: dw-authz-server - mountPath: /data name: authz-share subPath: authz volumes: - name: authz-log hostPath: path: /apps/docs - name: authz-share hostPath: path: /apps/logs