planetary-computer-apis/deployment/helm/deploy-values.template.yaml at 455ca44cc7f566c1a5ccbd32b7e90b8c6fe62c03 · microsoft/planetary-computer-apis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
environment: "{{ tf.environment }}"
namespace: "pc"

stac:
  enabled: true
  image:
    repository: "{{ env.ACR_STAC_REPO }}"
    tag: "{{ env.IMAGE_TAG }}"
    pullPolicy: Always

  server:
    minDbConnections: "1"
    maxDbConnections: "1"
    webConcurrency: "1"
    request_timeout: 30

  rate_limit:
    collections: 500
    collection: 500
    items: 100
    item: 500
    search: 100

  back_pressure:
    collections:
      req_per_sec: 100
      inc_ms: 10
    collection:
      req_per_sec: 100
      inc_ms: 10
    items:
      req_per_sec: 100
      inc_ms: 10
    item:
      req_per_sec: 100
      inc_ms: 10
    search:
      req_per_sec: 100
      inc_ms: 10

  deploy:
    replicaCount: "{{ tf.stac_replica_count }}"
    podAnnotations:
      "pc/gitsha": "{{ env.GIT_COMMIT }}"

  appRootPath: "/stac"
  port: "80"
  debug: "TRUE"

  tiler_href: data/

tiler:
  enabled: true
  image:
    repository: "{{ env.ACR_TILER_REPO }}"
    tag: "{{ env.IMAGE_TAG }}"
    pullPolicy: Always

  server:
    minDbConnections: "1"
    maxDbConnections: "1"
    webConcurrency: "1"
    request_timeout: 30

  deploy:
    replicaCount: "{{ tf.tiler_replica_count }}"
    podAnnotations:
      "pc/gitsha": "{{ env.GIT_COMMIT }}"

  default_max_items_per_tile: 5
  appRootPath: "/data"
  port: "80"

  stac_api_url: http://planetary-computer-stac.pc.svc.cluster.local
  stac_api_href: stac/
  # PCT sas needs to be accessed through api management
  pc_sdk_sas_url: https://pct-sas-westeurope-staging-apim.azure-api.net/sas/token
  pc_sdk_subscription_key: "{{ tf.pc_sdk_subscription_key }}"
  vectortile_sa_base_url: https://pcvectortiles.blob.core.windows.net

storage:
  account_name: "{{ tf.storage_account_name }}"
  account_key: "{{ tf.storage_account_key }}"
  collection_config_table_name: "{{ tf.collection_config_table_name }}"
  container_config_table_name: "{{ tf.container_config_table_name }}"
  ip_exception_config_table_name: "{{ tf.ip_exception_config_table_name }}"
  table_value_ttl: 1

redis:
  host: "{{ tf.redis_host }}"
  password: "{{ tf.redis_password }}"
  port: "{{ tf.redis_port }}"
  ttl: 60
  ssl: true

metrics:
  instrumentationKey: "{{ tf.instrumentation_key }}"

pcingress:
  services:
    stac:
      path: "/stac(/|$)(.*)"
      name: "planetary-computer-stac"
      port: "80"
      blockMetrics: true
    tiler:
      path: "/data(/|$)(.*)"
      name: "planetary-computer-tiler"
      port: "80"
      blockMetrics: true

  cert:
    secretName: "pqe-tls-secret"

  certIssuer:
    enabled: true
    privateKeySecretRef: "{{ tf.cluster_cert_issuer }}"
    server: "{{ tf.cluster_cert_server }}"
    issuerEmail: "planetarycomputer@microsoft.com"
    secretName: "pqe-tls-secret"

  ingress:
    enabled: true
    tlsHost: "{{ tf.dns_label }}.{{ tf.location }}.cloudapp.azure.com"
    hosts:
      - "{{ tf.dns_label }}.{{ tf.location }}.cloudapp.azure.com"
      - "planetarycomputer-test.microsoft.com"
    annotations:
      kubernetes.io/ingress.class: nginx
      cert-manager.io/cluster-issuer: "{{ tf.cluster_cert_issuer }}-pcingress"
      nginx.ingress.kubernetes.io/rewrite-target: /$2
      nginx.ingress.kubernetes.io/use-regex: "true"
      nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
      nginx.ingress.kubernetes.io/proxy-buffers-number: "8"

      # Enable CORS
      nginx.ingress.kubernetes.io/enable-cors: "true"
      nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS"
      nginx.ingress.kubernetes.io/cors-allow-origin: "*"
      nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
      nginx.ingress.kubernetes.io/cors-allow-headers: "X-PC-Request-Entity,DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization"

migrations:
  enabled: false

postgres:
  serverName: "{{ tf.pg_host }}"
  user: "{{ tf.pg_user }}"
  password: "{{ tf.pg_password }}"
  dbName: "{{ tf.pg_database }}"