erda.yml

version: "2.0"
meta:
  ERDA_COMPONENT: ""
values:
  production:
    nfs_root: "<%$.Storage.MountPoint%>"
    gittar_root: "<%$.Storage.GittarDataPath%>"
    replicas: 2
    request_cpu: 0.1
    request_mem: 128
envs:
  ETCDCTL_API: "3"
  MONITOR_ADDR: monitor:7096
  COLLECTOR_ADDR: collector:7076
  PIPELINE_ADDR: pipeline:3081
  ADMIN_ADDR: admin:9095
  MSP_ADDR: msp:8080
  DOP_ADDR: dop:9527
  CORE_SERVICES_ADDR: core-services:9526
  OPENAPI_ADDR: openapi:9529
  CMP_ADDR: cmp:9027
  ORCHESTRATOR_ADDR: orchestrator:8081
services:
  action-runner-scheduler:
    cmd: "/app/action-runner-scheduler"
    ports:
      - port: 9500
        protocol: "TCP"
        l4_protocol: "TCP"
    resources:
      cpu: ${request_cpu:0.3}
      max_cpu: 0.3
      mem: 128
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "devops"
    health_check:
      http:
        port: 9500
        path: "/healthz"
        duration: 120
      exec: { }
    expose: [ ]
    hosts: [ ]
    envs: { }
  dop:
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    cmd: /app/dop
    deployments:
      labels:
        GROUP: "devops"
      replicas: ${replicas:1}
    envs:
      DEBUG: "true"
      GOLANG_PROTOBUF_REGISTRATION_CONFLICT: "ignore"
    health_check:
      exec: { }
      http:
        duration: 120
        path: /_api/health
        port: 9527
    ports:
      - port: 9527 # http port
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9529 # grpc port
        protocol: "TCP"
        l4_protocol: "TCP"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:2048}
      max_mem: 2048
      network:
        mode: container
  admin:
    cmd: "/app/admin"
    envs:
      DEBUG: "false"
    ports:
      - port: 9095
        protocol: TCP
        l4_protocol: TCP
      - port: 9096
        protocol: TCP
        l4_protocol: TCP
      - port: 8096
        protocol: TCP
        l4_protocol: TCP
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: ${request_mem:128}
      max_mem: 256
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9095
        path: "/api/healthy"
        duration: 120
      exec: { }
  core-services:
    cmd: "/app/core-services"
    ports:
      - port: 9526
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9536 # new http port
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9537 # new grpc port
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      AVATAR_STORAGE_URL: "file:///avatars"
      CMDB_CONTAINER_TOPIC: "spot-metaserver_container"
      CMDB_GROUP: "spot_cmdb_group"
      CMDB_HOST_TOPIC: "spot-metaserver_host"
      DEBUG: "false"
      LICENSE_KEY: "XWoPm8I3FZuDclhuOhZ+qRPVHjXKCwSgZEOTyrMgtJg6f0Kz7QR0CyVN1ZWgbiou/OyABe7HyK1yVxDdeP1JuXcfOoGOdChTyiQfP5sdXUbferq5UkK7S44lMjNmzURlbdX8smSa13+8FQyDqz2BpDcBKMRfn2kKuF4n6n9Ls7HyVV7oWSKreEyIH3991Ug2grNEpcKip3ISVY7eGJ3uoahC9zs4fla1dzR47e5dgppHtf5WBjFgiSS+5qRi2mYa"
      LISTEN_ADDR: ":9526"
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
      CREATE_ORG_ENABLED: "false"
    resources:
      cpu: ${request_cpu:0.3}
      max_cpu: 0.3
      mem: ${request_mem:512}
      max_mem: 512
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
      - "${nfs_root:/netdata}/avatars:/avatars:rw"
      - "${nfs_root:/netdata}/dice/cmdb/files:/files:rw"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9526
        path: "/_api/health"
        duration: 120
      exec: { }
  cluster-manager:
    cmd: "/app/cluster-manager"
    ports:
      - port: 9094
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: ${request_mem:256}
      max_mem: 256
      network:
        mode: "container"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "dice"
    health_check:
      http: { }
      exec: { }
  cluster-dialer:
    cmd: "/app/cluster-dialer"
    expose:
      - 80
    ports:
      - port: 80
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:2}
      max_cpu: 2
      mem: ${request_mem:2048}
      max_mem: 2048
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: { }
      exec: { }
  cluster-agent:
    cmd: "/app/cluster-agent"
    ports: [ ]
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:1024}
      max_mem: 1024
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: { }
      exec:
        cmd: "ls"
    k8s_snippet:
      container:
        securityContext:
          privileged: true
  collector:
    labels:
      cpu_bound: "true"
    cmd: "/app/collector"
    ports:
      - port: 7076
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
      - port: 7098
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      COLLECTOR_BROWSER_SAMPLING_RATE: "100"
      COLLECTOR_ENABLE: "true"
    resources:
      cpu: ${request_cpu:1}
      mem: ${request_mem:1024}
      max_cpu: 1
      max_mem: 1024
      network:
        mode: "container"
    deployments:
      replicas: ${replicas:2}
      labels:
        GROUP: "spot-v2"
    expose:
      - 7076
    health_check:
      http:
        port: 7076
        path: "/api/health"
        duration: 120
      exec: { }
    hosts: [ ]
    binds: [ ]
  dicehub:
    cmd: "/app/dicehub"
    ports:
      - port: 10000
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      EXTENSION_MENU: "{\"流水线任务\":[\"source_code_management:代码管理\",\"build_management:构建管理\",\"deploy_management:部署管理\",\"version_management:版本管理\",\"test_management:测试管理\",\"data_management:数据治理\",\"custom_task:自定义任务\"],\"扩展服务\":[\"database:存储\",\"distributed_cooperation:分布式协作\",\"search:搜索\",\"message:消息\",\"content_management:内容管理\",\"security:安全\",\"traffic_load:流量负载\",\"monitoring&logging:监控&日志\",\"content:文本处理\",\"image_processing:图像处理\",\"document_processing:文件处理\",\"sound_processing:音频处理\",\"custom:自定义\",\"general_ability:通用能力\",\"new_retail:新零售能力\",\"srm:采供能力\",\"solution:解决方案\"]}"
      RELEASE_GC_SWITCH: "true"
      RELEASE_MAX_TIME_RESERVED: "72"
    resources:
      cpu: ${request_cpu:0.15}
      max_cpu: 0.15
      mem: ${request_mem:1024}
      max_mem: 1024
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 10000
        path: "/healthz"
        duration: 120
      exec: { }
  eventbox:
    cmd: "/app/eventbox"
    ports:
      - port: 9528
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:2}
      max_cpu: 2
      mem: ${request_mem:2560}
      max_mem: 2560
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9528
        path: "/api/dice/eventbox/version"
        duration: 120
      exec: { }
  gittar:
    cmd: "/app/gittar"
    ports:
      - port: 5566
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
    envs:
      GITTAR_BRANCH_FILTER: "master,develop,feature/*,support/*,release/*,hotfix/*"
      GITTAR_PORT: "5566"
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:1536}
      max_mem: 1536
      network:
        mode: "container"
    binds:
      - "${gittar_root:/netdata/dice/gittar}:/repository:rw"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "devops"
    expose:
      - 5566
    health_check:
      http: { }
      exec: { }
  hepa:
    cmd: "/app/hepa"
    ports:
      - port: 8080
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
    resources:
      cpu: ${request_cpu:0.5}
      mem: 512
      max_cpu: 0.5
      network:
        mode: "container"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "addons"
    expose:
      - 8080
    health_check:
      http:
        port: 8080
        path: "/health"
        duration: 120
      exec: { }
  monitor:
    cmd: "/app/monitor"
    ports:
      - port: 7096
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7098
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7080
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      LOG_LEVEL: INFO
    resources:
      cpu: ${request_cpu:0.5}
      mem: ${request_mem:512}
      max_cpu: 1
      max_mem: 1024
      network:
        mode: "container"
    deployments:
      replicas: ${replicas:2}
      labels:
        GROUP: "spot-v2"
    health_check:
      http:
        port: 7096
        path: "/api/health"
        duration: 120
      exec: { }
    expose: [ ]
    hosts: [ ]
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
  msp:
    cmd: "/app/msp"
    ports:
      - port: 8080
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7080
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9080
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      GOLANG_PROTOBUF_REGISTRATION_CONFLICT: "ignore"
    resources:
      cpu: ${request_cpu:1}
      mem: ${request_mem:512}
      max_cpu: 1
      max_mem: 1024
      network:
        mode: "container"
    deployments:
      replicas: ${replicas:2}
      labels:
        GROUP: "msp"
    health_check:
      http:
        port: 8080
        path: "/health"
        duration: 120
      exec: { }
    expose: [ ]
    hosts: [ ]
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
  openapi:
    cmd: "/app/openapi"
    ports:
      - port: 9529
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
      - port: 9432
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9431
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      CREATE_ORG_ENABLED: "false"
      GOLANG_PROTOBUF_REGISTRATION_CONFLICT: "ignore"
    resources:
      cpu: ${request_cpu:0.5}
      max_cpu: 0.5
      mem: ${request_mem:512}
      max_mem: 512
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "dice"
    expose:
      - 9529
    health_check:
      http:
        port: 9529
        path: "/health"
        duration: 120
      exec: { }
  ecp:
    cmd: "/app/ecp"
    ports:
      - port: 9029
        protocol: "TCP"
        l4_protocol: "TCP"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: 128
      network:
        mode: "container"
    deployments:
      replicas: 1
      labels:
        GROUP: "dice"
    health_check:
      http: { }
      exec: { }
  cmp:
    cmd: "/app/cmp"
    envs:
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
      ERDA_NAMESPACE: "default"
      ERDA_HELM_CHART_VERSION: "1.1.0"
    ports:
      - port: 9027
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9028
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 9029
        protocol: "TCP"
        l4_protocol: "TCP"
    resources:
      cpu: ${request_cpu:2}
      max_cpu: 2
      mem: ${request_mem:6144}
      max_mem: 6144
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "dice"
    health_check:
      http: { }
      exec: { }
  orchestrator:
    cmd: "/app/orchestrator"
    ports:
      - port: 8081
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7080
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
      TENANT_GROUP_KEY: "58dcbf490ef3"
      MSP_ADDR: "msp:8080"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:256}
      max_mem: 256
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 8081
        path: "/info"
        duration: 120
      exec: { }
  pipeline:
    cmd: "/app/pipeline"
    ports:
      - port: 3081
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 30810
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      DEBUG: "false"
      PIPELINE_STORAGE_URL: "file:///devops/storage"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:1536}
      max_mem: 1536
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "devops"
    health_check:
      http:
        port: 3081
        path: "/ping"
        duration: 120
      exec: { }
  scheduler:
    cmd: "/app/scheduler"
    ports:
      - port: 9091
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      CMDB_CONTAINER_TOPIC: "spot-metaserver_container"
      CMDB_GROUP: "spot_cmdb_group2"
      DEBUG: "false"
    resources:
      cpu: ${request_cpu:1}
      max_cpu: 1
      mem: ${request_mem:2048}
      max_mem: 2048
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: ${replicas:1}
      labels:
        GROUP: "dice"
    health_check:
      http:
        port: 9091
        path: "/info"
        duration: 120
      exec: { }
  streaming:
    labels:
      cpu_bound: "true"
    cmd: "/app/streaming"
    ports:
      - port: 7091
        protocol: "TCP"
        l4_protocol: "TCP"
      - port: 7098
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      BROWSER_ENABLE: "true"
      BROWSER_GROUP_ID: "spot-monitor-browser"
      LOG_GROUP_ID: "spot-monitor-log"
      LOG_STORE_ENABLE: "true"
      LOG_TTL: "168h"
      METRIC_ENABLE: "true"
      METRIC_GROUP_ID: "spot-monitor-metrics"
      METRIC_INDEX_TTL: "192h"
      TRACE_ENABLE: "true"
      TRACE_GROUP_ID: "spot-monitor-trace"
      TRACE_TTL: "168h"
      LOG_LEVEL: INFO
    resources:
      cpu: ${request_cpu:0.5}
      mem: ${request_mem:1024}
      max_cpu: 1.5
      max_mem: 1024
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: ${replicas:2}
      labels:
        GROUP: "spot-v2"
    health_check:
      http:
        port: 7091
        path: "/api/health"
        duration: 120
      exec: { }
  log-service:
    cmd: "/app/log-service"
    ports:
      - port: 7099
        protocol: "TCP"
        l4_protocol: "TCP"
    envs:
      LOG_SERVICE_INSTANCE_ID: "30563290-f3a8-4f8f-b42b-cc5d3b8ac7c7"
      LOG_KAFKA_TOPICS: "spot-container-log"
      LOG_TOPICS: "spot-container-log"
      LOG_METRICS_GROUP_ID: "spot-log-metrics"
      #LOGS_ES_URL: ""
      #LOGS_ES_SECURITY_ENABLE: "false"
      #LOGS_ES_SECURITY_USERNAME: ""
      #LOGS_ES_SECURITY_PASSWORD: ""
    resources:
      cpu: ${request_cpu:1}
      mem: ${request_mem:1024}
      max_cpu: 1.5
      max_mem: 1024
      network:
        mode: "container"
    deployments:
      replicas: 0
      labels:
        GROUP: "spot-v2"
    health_check:
      http:
        port: 7099
        path: "/api/health"
        duration: 120
      exec: { }
  uc-adaptor:
    cmd: "/app/uc-adaptor"
    ports:
      - port: 12580
        protocol: "TCP"
        l4_protocol: "TCP"
        expose: true
    envs:
      DEBUG: "false"
      LISTEN_ADDR: ":12580"
      UC_AUDITOR_CRON: "0 */1 * * * ?"
      UC_AUDITOR_PULL_SIZE: "30"
      UC_CLIENT_ID: "dice"
      UC_CLIENT_SECRET: "secret"
    resources:
      cpu: ${request_cpu:0.2}
      max_cpu: 0.2
      mem: 64
      network:
        mode: "container"
    binds:
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-ca.pem:/certs/etcd-ca.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client.pem:/certs/etcd-client.pem:ro"
      - "${nfs_root:/netdata}/dice-ops/dice-config/certificates/etcd-client-key.pem:/certs/etcd-client-key.pem:ro"
    deployments:
      replicas: 1
      labels:
        GROUP: "devops"
    expose:
      - 12580
    health_check:
      http:
        port: 12580
        path: "/healthy"
        duration: 120
      exec: { }
addons:
  infos:
    plan: "custom:basic"
    options:
      version: "1.0.0"
  mysql:
    plan: "mysql:basic"
    options:
      version: "5.7.29"