Merge pull request #5 from lsst-uk/rsptest

Test config

applications/argocd/values-rsptest.yaml

@@ -0,0 +1,23 @@
+argo-cd:
+  configs:
+    cm:
+      url: "https://rsp-test.lsst.ac.uk/argo-cd"
+    secret:
+      createSecret: true
+
+  server:
+    ingress:
+      hostname: "rsp-test.lsst.ac.uk"
+    tls: false
+# argo-cd:
+#   server:
+#     ingress:
+#       hosts:
+#         - "rsp-test.lsst.ac.uk"
+
+#     config:
+#       url: "https://rsp-test.lsst.ac.uk/argo-cd"
+
+#   configs:
+#     secret:
+#       createSecret: true

applications/cert-manager/values-rsptest.yaml

@@ -0,0 +1,7 @@
+config:
+  createIssuer: false
+# config:
+#   email: "[email protected]"
+#   route53:
+#     awsAccessKeyId: "AKIAQSJOS2SFL5I4TYND"
+#     hostedZone: "Z0567328105IEHEMIXLCO"

applications/exposurelog/values-rsptest.yaml

@@ -0,0 +1,8 @@
+config:
+  # WARNING: this is a "playground" deployment
+  # using exposurelog's built-in test butler registries.
+  site_id: test
+  # Use the test butler registries.
+  # Note: exposurelog's Dockerfile copies the test repos to the top of the container
+  butler_uri_1: LSSTCam
+  butler_uri_2: LATISS

applications/gafaelfawr/values-rsptest.yaml

@@ -0,0 +1,58 @@
+redis:
+  persistence:
+    enabled: false
+
+config:
+  updateSchema: false
+  internalDatabase: true
+  #databaseUrl: "postgresql://[email protected]/gafaelfawr"
+
+  github:
+    clientId: "c4a5727c5788cc2d346e"
+
+  # Allow access by GitHub team.
+  groupMapping:
+    "exec:admin":
+      - github:
+          organization: "lsp-uk"
+          team: "dev"
+    "exec:notebook":
+      - github:
+          organization: "lsp-uk"
+          team: "dev"
+    "exec:internal-tools":
+      - github:
+          organization: "lsp-uk"
+          team: "dev"
+    "exec:portal":
+      - github:
+          organization: "lsp-uk"
+          team: "dev"
+    # "exec:user":
+    #   - github:
+    #       organization: "lsp-uk"
+    #       team: "dev"
+    # "read:workspace":
+    #   - github:
+    #       organization: "lsp-uk"
+    #       team: "dev"
+    # "read:workspace/user":
+    #   - github:
+    #       organization: "lsp-uk"
+    #       team: "dev"
+    # "write:workspace/user":
+    #   - github:
+    #       organization: "lsp-uk"
+    #       team: "dev"
+    "read:image":
+      - github:
+          organization: "lsp-uk"
+          team: "dev"
+    "read:tap":
+      - github:
+          organization: "lsp-uk"
+          team: "dev"
+
+  initialAdmins:
+    - "gpfrancis"
+    - "aibsen"

applications/ingress-nginx/values-rsptest.yaml

@@ -0,0 +1,17 @@
+ingress-nginx:
+  controller:
+    kind: DaemonSet
+    config:
+      large-client-header-buffers: "4 64k"
+      proxy-buffer-size: "64k"
+      use-proxy-protocol: "false"
+      enable-health-monitor: "false"
+    service:
+      loadBalancerIP: "192.41.122.55"
+      annotations:
+        kubernetes.io/ingress.class: "openstack"
+        loadbalancer.openstack.org/enable-health-monitor: "false"
+    extraArgs:
+      default-ssl-certificate: ingress-nginx/ingress-certificate
+vaultCertificate:
+  enabled: true

applications/mobu/values-rsptest.yaml

@@ -0,0 +1,48 @@
+# config:
+#   autostart:
+#     - name: "firefighter"
+#       count: 1
+#       users:
+#         - username: "bot-mobu-recommended"
+#           uidnumber: 74768
+#           gidnumber: 74768
+#       scopes: ["exec:notebook", "exec:portal", "read:image", "read:tap"]
+#       business:
+#         type: "NotebookRunner"
+#         options:
+#           repo_url: "https://github.com/lsst-sqre/system-test.git"
+#           repo_branch: "prod"
+#           max_executions: 1
+#         restart: true
+#     - name: "weekly"
+#       count: 1
+#       users:
+#         - username: "bot-mobu-weekly"
+#           uidnumber: 74769
+#           gidnumber: 74769
+#       scopes: ["exec:notebook", "exec:portal", "read:image", "read:tap"]
+#       business:
+#         type: "NotebookRunner"
+#         options:
+#           image:
+#             image_class: "latest-weekly"
+#           repo_url: "https://github.com/lsst-sqre/system-test.git"
+#           repo_branch: "prod"
+#         restart: true
+config:
+  autostart:
+    - name: "tap"
+      count: 1
+      users:
+        - username: "bot-mobu-tap"
+          uidnumber: 74768
+          gidnumber: 74768
+      scopes: ["read:tap"]
+      business:
+        type: "TAPQueryRunner"
+        options:
+          queries:
+            - "SELECT TOP 10 * FROM  video.hsc_g_f"
+            - "SELECT TOP 10 * FROM  TAP_SCHEMA.tables"
+            - "SELECT TOP 10 * FROM  viking.hsc_g_f"
+        restart: true

applications/nublado/values-rsptest.yaml

@@ -0,0 +1,61 @@
+controller:
+  config:
+    images:
+      source:
+        type: "docker"
+        registry: "registry.hub.docker.com"
+        repository: "lsstsqre/sciplat-lab"
+    lab:
+      env:
+        AUTO_REPO_URLS: "https://github.com/lsst-uk/rsp-uk-notebooks"
+        AUTO_REPO_BRANCH: "main"
+        AUTO_REPO_SPECS: "https://github.com/lsst-uk/rsp-uk-notebooks@main"
+      initContainers:
+        - name: "inithome"
+          image:
+            repository: "ghcr.io/lsst-sqre/nublado-inithome"
+            tag: "4.0.2"
+          privileged: true
+          volumeMounts:
+            - containerPath: "/home"
+              volumeName: "home"
+      pullSecret: "pull-secret"
+      volumes:
+        - name: "data"
+          source:
+            serverPath: "/data"
+            server: "192.41.122.94"
+            type: "nfs"
+        - name: "home"
+          source:
+            serverPath: "/jhome"
+            server: "192.41.122.94"
+            type: "nfs"
+        - name: "datasets"
+          source:
+            serverPath: "/datasets"
+            server: "192.41.122.94"
+            type: "nfs"
+      volumeMounts:
+        - containerPath: "/data"
+          volumeName: "data"
+        - containerPath: "/home"
+          volumeName: "home"
+        - containerPath: "/datasets"
+          volumeName: "datasets"
+
+proxy:
+  ingress:
+    annotations:
+      nginx.ingress.kubernetes.io/proxy-connect-timeout: "50s"
+      nginx.ingress.kubernetes.io/proxy-read-timeout: "50s"
+      nginx.ingress.kubernetes.io/client-max-body-size: "50m"
+
+jupyterhub:
+  hub:
+    db:
+      upgrade: true
+  cull:
+    timeout: 432000
+    every: 300
+    maxAge: 2160000

applications/portal/values-rsptest.yaml

@@ -0,0 +1,8 @@
+replicaCount: 2
+
+resources:
+  limits:
+    memory: "8Gi"
+
+config:
+  hipsUrl: "http://thisdoesntexist.org"

applications/postgres/values-rsptest.yaml

@@ -0,0 +1,10 @@
+jupyterhub_db:
+  user: "jovyan"
+  db: "jupyterhub"
+nublado3_db:
+  user: 'nublado3'
+  db: 'nublado3'
+gafaelfawr_db:
+  user: "gafaelfawr"
+  db: "gafaelfawr"
+postgresStorageClass: "standard"

applications/semaphore/values-rsptest.yaml

@@ -0,0 +1,11 @@
+image:
+  pullPolicy: Always
+config:
+  github_app_id: "1452049"
+  enable_github_app: "True"
+  phalanx_env: "rsptest"
+  log_level: "DEBUG"
+
+pull-secret:
+  enabled: true
+  path: secret/k8s_operator/rsptest/pull-secret

applications/squareone/values-rsptest.yaml

@@ -0,0 +1,6 @@
+config:
+  siteName: "Rubin Science Platform"
+  semaphoreUrl: "https://rsp-test.lsst.ac.uk/semaphore"
+
+ingress:
+  tls: false

applications/tap/values-rsptest.yaml

@@ -0,0 +1,10 @@
+config:
+  gcsBucket: "async-test"
+  gcsBucketUrl: "https://somerville.ed.ac.uk:6780"
+  gcsBucketType: "S3"
+  jvmMaxHeapSize: "31G"
+
+qserv:
+  host: "192.41.122.79:30040"
+  mock:
+    enabled: false

applications/vault-secrets-operator/values-rsptest.yaml

@@ -0,0 +1,28 @@
+# vault-secrets-operator:
+#   environmentVars:
+#     - name: VAULT_TOKEN
+#       valueFrom:
+#         secretKeyRef:
+#           name: vault-secrets-operator
+#           key: VAULT_TOKEN
+#     - name: VAULT_TOKEN_LEASE_DURATION
+#       valueFrom:
+#         secretKeyRef:
+#           name: vault-secrets-operator
+#           key: VAULT_TOKEN_LEASE_DURATION
+#   vault:
+#     address: "https://vault.lsst.ac.uk"
+vault-secrets-operator:
+  environmentVars:
+    - name: VAULT_ROLE_ID
+      valueFrom:
+        secretKeyRef:
+          name: vault-credentials
+          key: VAULT_ROLE_ID
+    - name: VAULT_SECRET_ID
+      valueFrom:
+        secretKeyRef:
+          name: vault-credentials
+          key: VAULT_SECRET_ID
+  vault:
+    authMethod: approle

environments/values-rsptest.yaml

@@ -0,0 +1,16 @@
+name: "rsptest"
+fqdn: "rsp-test.lsst.ac.uk"
+appOfAppsName: "science-platform"
+vaultUrl: "https://vault.lsst.ac.uk"
+vaultPathPrefix: kv-v2/k8s_operator/rsptest
+
+applications:
+  # cert-manager: false
+  # ingress-nginx: true
+  mobu: true
+  nublado: true
+  portal: true
+  postgres: true
+  squareone: true
+  tap: true
+