what the branch says

ops/staging-deploy.tmpl.yaml

@@ -1,16 +1,26 @@
 replicaCount: 2
 
+# These values are currently in atla_digital_library
+# Do we still like these values set?
+# resources:
+# requests:
+# memory: '1Gi'
+# cpu: '250m'
+# limits:
+# memory: '2Gi'
+# cpu: '1000m'
+
 livenessProbe:
  enabled: false
 readinessProbe:
  enabled: false
 
 brandingVolume:
- storageClass: aws-efs
+ storageClass: efs-sc
 derivativesVolume:
- storageClass: aws-efs
+ storageClass: efs-sc
 uploadsVolume:
- storageClass: aws-efs
+ storageClass: efs-sc
  size: 200Gi
 
 imagePullSecrets:
@@ -63,15 +73,17 @@ extraEnvVars: &envVars
  - name: DB_ADAPTER
  value: postgresql
  - name: DB_HOST
- value: pg-postgresql.staging-postgres.svc.cluster.local
+ value: hyrax20181216.cn4nhxyoxlnu.us-west-2.rds.amazonaws.com
  - name: DB_NAME
  value: atla-hyku-staging
  - name: DB_USER
- value: postgres
+ value: hydra_user
+ - name: DISABLE_SPRING
+ value: '1'
  - name: FCREPO_BASE_PATH
- value: /atlahykustaging
+ value: /hykustage
  - name: FCREPO_HOST
- value: fcrepo.staging-fcrepo.svc.cluster.local
+ value: fcrepo.fcrepo.svc.cluster.local
  - name: FCREPO_PORT
  value: "8080"
  - name: FCREPO_REST_PATH
@@ -101,7 +113,7 @@ extraEnvVars: &envVars
  - name: PASSENGER_APP_ENV
  value: production
  - name: RAILS_CACHE_STORE_URL
- value: redis://:$REDIS_PASSWORD@atla-hyku-staging-redis-master:6379/staging
+ value: redis://:$REDIS_PASSWORD@atla-hyku-staging-redis-master:6379/hykustage
  - name: RAILS_ENV
  value: production
  - name: RAILS_LOG_TO_STDOUT
@@ -113,7 +125,7 @@ extraEnvVars: &envVars
  - name: REDIS_HOST
  value: atla-hyku-staging-redis-master
  - name: REDIS_URL
- value: redis://:$REDIS_PASSWORD@atla-hyku-staging-redis-master:6379/staging
+ value: redis://:$REDIS_PASSWORD@atla-hyku-staging-redis-master
  - name: HYRAX_ACTIVE_JOB_QUEUE
  value: sidekiq
  - name: HYRAX_ANALYTICS
@@ -134,6 +146,8 @@ extraEnvVars: &envVars
  value: "false"
  - name: HYKU_DEFAULT_HOST
  value: "%{tenant}.atla-hyku.notch8.cloud"
+ - name: HYKU_FILE_ACL
+ value: "false"
  - name: HYKU_MULTITENANT
  value: "true"
  - name: HYKU_ROOT_HOST
@@ -143,21 +157,21 @@ extraEnvVars: &envVars
  - name: NEGATIVE_CAPTCHA_SECRET
  value: $NEGATIVE_CAPTCHA_SECRET
  - name: SMTP_ADDRESS
- value: "maildev-smtp.maildev.svc.cluster.local"
+ value: email-smtp.us-east-1.amazonaws.com
  - name: SMTP_DOMAIN
- value: "maildev-smtp.maildev.svc.cluster.local"
+ value: "atla-hyku.notch8.cloud"
  - name: SMTP_ENABLED
- value: "true"
+ value: 'true'
+ - name: SMTP_PASSWORD
+ value: $SMTP_PASSWORD
  - name: SMTP_PORT
- value: "1025"
+ value: '587'
+ - name: SMTP_STARTTLS
+ value: 'true'
  - name: SMTP_TYPE
- value: "plain"
+ value: login
  - name: SMTP_USER_NAME
- value: "admin"
- - name: SMTP_STARTTLS
- value: "false"
- - name: SMTP_PASSWORD
- value: $SMTP_PASSWORD
+ value: $SMTP_USER_NAME
  - name: SOLR_ADMIN_USER
  value: admin
  - name: SOLR_ADMIN_PASSWORD
@@ -167,34 +181,33 @@ extraEnvVars: &envVars
  - name: SOLR_CONFIGSET_NAME
  value: atla-hyku-staging
  - name: SOLR_HOST
- value: solr.staging-solr
+ value: solr.solr.svc.cluster.local
  - name: SOLR_PORT
  value: "8983"
  - name: SOLR_URL
- value: http://admin:$SOLR_ADMIN_PASSWORD@solr.staging-solr:8983/solr/
+ value: http://admin:[email protected].svc.cluster.local:8983/solr/
  - name: SENTRY_DSN
  value: $SENTRY_DSN
  - name: SENTRY_ENVIRONMENT
  value: $SENTRY_ENVIRONMENT
- - name: TEST_USER_EMAIL
- value: [email protected]
- - name: TEST_USER_PASSWORD
- value: testing123
+
+securityContext: &secValues
+ readOnlyRootFilesystem: false
+ runAsNonRoot: false
+ runAsUser: 0
+podSecurityContext: &podSecValues
+ runAsNonRoot: false
+ runAsUser: 0
+ runAsGroup: 101
+ fsGroup: 101
+ fsGroupChangePolicy: 'OnRootMismatch'
 
 worker:
  replicaCount: 1
  extraVolumeMounts: *volMounts
  extraEnvVars: *envVars
- podSecurityContext:
- runAsUser: 1001
- runAsGroup: 101
- fsGroup: 101
- fsGroupChangePolicy: "OnRootMismatch"
-podSecurityContext:
- runAsUser: 1001
- runAsGroup: 101
- fsGroup: 101
- fsGroupChangePolicy: "OnRootMismatch"
+ podSecurityContext: *podSecValues
+ securityContext: *secValues
 
 embargoRelease:
  enabled: false
@@ -203,31 +216,48 @@ leaseRelease:
 
 fcrepo:
  enabled: false
+# These values are currently in atla_digital_library
+# Do we still like these values set?
+ # resources:
+ # limits:
+ # memory: '4Gi'
+ # cpu: '2'
+ # requests:
+ # memory: '2Gi'
+ # cpu: '1'
+
 postgresql:
  enabled: false
+
 redis:
+ persistence:
+ enabled: true
+ storageClass: ebs
  cluster:
  enabled: false
  password: $REDIS_PASSWORD
+
 solr:
  enabled: false
 
-externalFcrepoHost: fcrepo.staging-fcrepo.svc.cluster.local
+externalFcrepoHost: fcrepo.fcrepo.svc.cluster.local
 
 externalPostgresql:
- host: pg-postgresql.staging-postgres.svc.cluster.local
- username: postgres
+ host: hyrax20181216.cn4nhxyoxlnu.us-west-2.rds.amazonaws.com
+ username: hydra_user
  password: $POSTGRES_PASSWORD
+ database: atla-hyku-staging
 
-externalSolrHost: solr.staging-solr.svc.cluster.local
+externalSolrHost: solr.solr.svc.cluster.local
 externalSolrUser: admin
 externalSolrCollection: "atla-hyku-staging"
 externalSolrPassword: $SOLR_ADMIN_PASSWORD
 
-global:
- hyraxName: atla-hyku-staging-hyrax
+# global:
+ # hyraxName: atla-hyku-staging-hyrax
 
 nginx:
  enabled: false
  service:
  port: 80
+