add: user auth accomplished

2026-02-26 02:17:07 +08:00
parent 300058ad01
commit 60b6f40f9f
54 changed files with 1601 additions and 2303 deletions
@@ -6,7 +6,7 @@ metadata:
  labels:
    app: user-rpc
 spec:
-  replicas: 3
+  replicas: 1
  revisionHistoryLimit: 5
  selector:
    matchLabels:
@@ -29,7 +29,7 @@ spec:
            ]
      containers:
        - name: user-rpc
-          image: 103.236.53.208:4418/library/user-rpc@sha256:57746256905acb5757153aef536ebfd19338b7f935f01ba1f538fbfd0a12f6f5
+          image: 103.236.53.208:4418/library/user-rpc@sha256:3d1d3cc02188a9b1a29a308a4867638b25b6e480e5a6bdaeb938f262f53969b7
          ports:
            - containerPort: 9001
            - containerPort: 4001
@@ -114,143 +114,151 @@ spec:
  selector:
    app: user-rpc

---
-apiVersion: autoscaling/v2
-kind: HorizontalPodAutoscaler
-metadata:
-  name: user-rpc-hpa-c
-  namespace: juwan
-  labels:
-    app: user-rpc-hpa-c
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: user-rpc
-  minReplicas: 3
-  maxReplicas: 10
-  metrics:
-    - type: Resource
-      resource:
-        name: cpu
-        target:
-          type: Utilization
-          averageUtilization: 80
-
---
-apiVersion: autoscaling/v2
-kind: HorizontalPodAutoscaler
-metadata:
-  name: user-rpc-hpa-m
-  namespace: juwan
-  labels:
-    app: user-rpc-hpa-m
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: user-rpc
-  minReplicas: 3
-  maxReplicas: 10
-  metrics:
-    - type: Resource
-      resource:
-        name: memory
-        target:
-          type: Utilization
-          averageUtilization: 80
---
-# Redis 主从复制
-apiVersion: redis.redis.opstreelabs.in/v1beta2
-kind: RedisReplication
-metadata:
-  name: user-redis
-  namespace: juwan
-spec:
-  clusterSize: 3
-  kubernetesConfig:
-    image: quay.io/opstree/redis:v7.0.12
-    imagePullPolicy: IfNotPresent
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
-      limits:
-        cpu: 500m
-        memory: 512Mi
-    redisSecret:
-      name: user-redis
-      key: password
-
-  redisExporter:
-    enabled: true
-    image: quay.io/opstree/redis-exporter:latest
-    imagePullPolicy: Always
-  podSecurityContext:
-    runAsUser: 1000
-    fsGroup: 1000
-  storage:
-    volumeClaimTemplate:
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        resources:
-          requests:
-            storage: 1Gi
-
---
-# Sentinel 监控
-apiVersion: redis.redis.opstreelabs.in/v1beta2
-kind: RedisSentinel
-metadata:
-  name: user-redis-sentinel
-  namespace: juwan
-spec:
-  clusterSize: 3
-  kubernetesConfig:
-    image: quay.io/opstree/redis-sentinel:v7.0.12
-    imagePullPolicy: IfNotPresent
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
-      limits:
-        cpu: 500m
-        memory: 512Mi
-  podSecurityContext:
-    runAsUser: 1000
-    fsGroup: 1000
-  redisSentinelConfig:
-    redisReplicationName: user-redis
-    masterGroupName: mymaster
-    redisPort: "6379"
-    quorum: "2"
-    downAfterMilliseconds: "5000"
-    failoverTimeout: "10000"
-    parallelSyncs: "1"
-
---
-# PostgreSQL 集群
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  namespace: juwan
-  name: user-db
-spec:
-  instances: 3
-  backup:
-    barmanObjectStore:
-      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
-      endpointURL: https://cn-nb1.rains3.com
-      s3Credentials:
-        accessKeyId:
-          name: rc-creds
-          key: SOucqRaJr4OyfcIu
-        secretAccessKey:
-          name: rc-creds
-          key: tn2Agj9EowMwuPA9y7TdSL0AXKsMEz
-      wal:
-        compression: gzip
-  storage:
-    size: 1Gi
-  monitoring:
-    enablePodMonitor: true
+#---
+#apiVersion: autoscaling/v2
+#kind: HorizontalPodAutoscaler
+#metadata:
+#  name: user-rpc-hpa-c
+#  namespace: juwan
+#  labels:
+#    app: user-rpc-hpa-c
+#spec:
+#  scaleTargetRef:
+#    apiVersion: apps/v1
+#    kind: Deployment
+#    name: user-rpc
+#  minReplicas: 3
+#  maxReplicas: 10
+#  metrics:
+#    - type: Resource
+#      resource:
+#        name: cpu
+#        target:
+#          type: Utilization
+#          averageUtilization: 80
+#
+#---
+#apiVersion: autoscaling/v2
+#kind: HorizontalPodAutoscaler
+#metadata:
+#  name: user-rpc-hpa-m
+#  namespace: juwan
+#  labels:
+#    app: user-rpc-hpa-m
+#spec:
+#  scaleTargetRef:
+#    apiVersion: apps/v1
+#    kind: Deployment
+#    name: user-rpc
+#  minReplicas: 3
+#  maxReplicas: 10
+#  metrics:
+#    - type: Resource
+#      resource:
+#        name: memory
+#        target:
+#          type: Utilization
+#          averageUtilization: 80
+#---
+## Redis 主从复制
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisReplication
+#metadata:
+#  name: user-redis
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#    redisSecret:
+#      name: user-redis
+#      key: password
+#
+#  redisExporter:
+#    enabled: true
+#    image: quay.io/opstree/redis-exporter:latest
+#    imagePullPolicy: Always
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  storage:
+#    volumeClaimTemplate:
+#      spec:
+#        accessModes: ["ReadWriteOnce"]
+#        resources:
+#          requests:
+#            storage: 1Gi
+#
+#---
+## Sentinel 监控
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisSentinel
+#metadata:
+#  name: user-redis-sentinel
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis-sentinel:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  redisSentinelConfig:
+#    redisReplicationName: user-redis
+#    masterGroupName: mymaster
+#    redisPort: "6379"
+#    quorum: "2"
+#    downAfterMilliseconds: "5000"
+#    failoverTimeout: "10000"
+#    parallelSyncs: "1"
+#
+#---
+## PostgreSQL 集群
+#apiVersion: postgresql.cnpg.io/v1
+#kind: Cluster
+#metadata:
+#  namespace: juwan
+#  name: user-db
+#spec:
+#  instances: 3
+#  primaryUpdateStrategy: unsupervised
+#  bootstrap:
+#    initdb:
+#      database: app
+#      owner: app
+#      # 只在 PVC 为空时初始化
+#      postInitSQL:
+#        - CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
+#  backup:
+#    barmanObjectStore:
+#      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
+#      endpointURL: https://cn-nb1.rains3.com
+#      s3Credentials:
+#        accessKeyId:
+#          name: rc-creds
+#          key: SOucqRaJr4OyfcIu
+#        secretAccessKey:
+#          name: rc-creds
+#          key: tn2Agj9EowMwuPA9y7TdSL0AXKsMEz
+#      wal:
+#        compression: gzip
+#  storage:
+#    size: 1Gi
+#  monitoring:
+#    enablePodMonitor: true