110 lines
2.9 KiB
JSON
110 lines
2.9 KiB
JSON
{
|
|
"multiuser_mode": {
|
|
"authentication": {
|
|
"auth_type": "token",
|
|
"ssh_key_storage": "local",
|
|
"token_config": {
|
|
"expiry_seconds": 86400,
|
|
"refresh_enabled": true,
|
|
"token_format": "jwt",
|
|
"token_path": "~/.provisioning/tokens/auth"
|
|
}
|
|
},
|
|
"description": "Team collaboration with shared services",
|
|
"extensions": {
|
|
"oci_registry": {
|
|
"auth_token_path": "~/.provisioning/tokens/oci",
|
|
"cache_dir": "~/.provisioning/oci-cache",
|
|
"enabled": true,
|
|
"endpoint": "harbor.company.local",
|
|
"namespace": "provisioning-extensions",
|
|
"tls_enabled": true,
|
|
"verify_ssl": true
|
|
},
|
|
"source": "oci"
|
|
},
|
|
"mode_name": "multi_user",
|
|
"resource_limits": {
|
|
"max_cpu_cores_per_user": 32,
|
|
"max_memory_gb_per_user": 128,
|
|
"max_servers_per_user": 10,
|
|
"max_storage_gb_per_user": 500,
|
|
"max_total_cpu_cores": 320,
|
|
"max_total_memory_gb": 1024,
|
|
"max_total_servers": 100
|
|
},
|
|
"security": {
|
|
"audit_log_path": "/var/log/provisioning/audit.log",
|
|
"audit_logging": true,
|
|
"dns_modification": "coredns",
|
|
"encryption_at_rest": false,
|
|
"encryption_in_transit": true,
|
|
"network_isolation": false,
|
|
"secret_provider": {
|
|
"provider": "sops"
|
|
}
|
|
},
|
|
"services": {
|
|
"control_center": {
|
|
"deployment": "remote",
|
|
"remote_config": {
|
|
"endpoint": "control.company.local",
|
|
"port": 8081,
|
|
"tls_enabled": true
|
|
}
|
|
},
|
|
"coredns": {
|
|
"deployment": "remote",
|
|
"remote_config": {
|
|
"endpoint": "dns.company.local",
|
|
"port": 53,
|
|
"tls_enabled": false
|
|
}
|
|
},
|
|
"gitea": {
|
|
"deployment": "remote",
|
|
"remote_config": {
|
|
"endpoint": "git.company.local",
|
|
"port": 443,
|
|
"tls_enabled": true
|
|
}
|
|
},
|
|
"oci_registry": {
|
|
"auth_required": true,
|
|
"deployment": "remote",
|
|
"endpoint": "harbor.company.local",
|
|
"namespaces": {
|
|
"extensions": "provisioning-extensions",
|
|
"kcl_packages": "provisioning-kcl",
|
|
"platform_images": "provisioning-platform",
|
|
"test_images": "provisioning-test"
|
|
},
|
|
"remote": {
|
|
"retries": 3,
|
|
"timeout": 30,
|
|
"verify_ssl": true
|
|
},
|
|
"tls_enabled": true,
|
|
"type": "harbor"
|
|
},
|
|
"orchestrator": {
|
|
"deployment": "remote",
|
|
"remote_config": {
|
|
"endpoint": "orchestrator.company.local",
|
|
"port": 8080,
|
|
"retries": 3,
|
|
"timeout": 30,
|
|
"tls_enabled": true,
|
|
"verify_ssl": true
|
|
}
|
|
}
|
|
},
|
|
"workspaces": {
|
|
"git_integration": "required",
|
|
"isolation": "user",
|
|
"lock_provider": "gitea",
|
|
"locking": "enabled",
|
|
"max_workspaces_per_user": 5
|
|
}
|
|
}
|
|
}
|