Hungerdream
f0c1b38c5b
Introduce a compensating workflow that launches the dedicated AWX rollback template when a deployment cannot be started or fails midway. - add task states: rollback_pending, rolling_back, rolled_back, rollback_failed, rollback_acknowledged - add RollbackJob model to track the compensating AWX run separately from the deploy run, preserving both job IDs for audit - hold resource reservations in 'rollback' status until cleanup succeeds so a failed cleanup cannot be masked by a later delivery - poll rollback jobs with a 2-minute launch timeout; an unknown launch result surfaces as a recoverable failure instead of re-launching - protect finished/register_failed/rolled-back tasks from rollback; register_failed keeps the healthy instance and its resource usage - add DELIVERY_ROLLBACK_TEMPLATE_ID config; without it, failures are marked rollback_failed and require manual cleanup - use unique pending-<task_id> placeholder for executor job IDs
49 lines
1.7 KiB
Bash
49 lines
1.7 KiB
Bash
APP_ENV=dev
|
|
HTTP_ADDR=:8080
|
|
PUBLIC_BASE_URL=http://localhost:8080
|
|
OIDC_ISSUER=http://localhost:8080/auth
|
|
OIDC_AUTHORIZATION_ENDPOINT=http://localhost:8080/auth/oauth/authorize
|
|
OIDC_TOKEN_ENDPOINT=http://localhost:8080/auth/oauth/token
|
|
OIDC_USERINFO_ENDPOINT=http://localhost:8080/auth/oauth/userinfo
|
|
OIDC_JWKS_URI=http://localhost:8080/auth/oauth/jwks
|
|
CLOUDDM_TARGET_URL=http://authserver-nginx/internal/clouddm
|
|
WAYNE_API_BASE_URL=http://wayne-backend:8080
|
|
WAYNE_ADMIN_USERNAME=admin
|
|
WAYNE_ADMIN_PASSWORD=change-this-wayne-admin-password
|
|
WAYNE_TOKEN_TTL_MINUTES=1440
|
|
|
|
MYSQL_DSN=auth:auth@tcp(127.0.0.1:3000)/authserver?charset=utf8mb4&parseTime=True&loc=Local
|
|
AUTO_MIGRATE=true
|
|
|
|
# MySQL service delivery (AWX is required when the scheduler is enabled)
|
|
DELIVERY_SCHEDULER_ENABLED=false
|
|
DELIVERY_POLL_SECONDS=5
|
|
DELIVERY_RESERVATION_TTL_MINUTES=120
|
|
DELIVERY_GLOBAL_LIMIT=2
|
|
DELIVERY_TARGET_LIMIT=2
|
|
DELIVERY_BUSINESS_LIMIT=1
|
|
# 单机 MySQL 实例数上限（同机多实例，容量由配额 + playbook 实机守卫兜底）
|
|
DELIVERY_HOST_INSTANCE_LIMIT=4
|
|
# 数据盘挂载点白名单（逗号分隔，第一项为默认值）
|
|
DELIVERY_DATA_DISKS=/data
|
|
AWX_BASE_URL=
|
|
AWX_TOKEN=
|
|
AWX_USERNAME=
|
|
AWX_PASSWORD=
|
|
# AWX Job Template ID for ansible/mysql-rollback.yml; required for automatic cleanup
|
|
DELIVERY_ROLLBACK_TEMPLATE_ID=0
|
|
DELIVERY_SERVICE_TOKEN=
|
|
CLOUDDM_REGISTER_URL=
|
|
CLOUDDM_API_TOKEN=
|
|
|
|
JWT_SECRET=change-this-secret
|
|
JWT_ISSUER=authserver
|
|
JWT_TTL_MINUTES=120
|
|
|
|
SAML_ENTITY_ID=http://localhost:8080/api/v1/saml/metadata
|
|
SAML_ACS_URL=http://localhost:8080/api/v1/saml/acs
|
|
SAML_IDP_METADATA_URL=http://sso-internal.dev.qiniu.io/saml2/meta
|
|
SAML_LOGOUT_URL=http://sso-internal.dev.qiniu.io/signout
|
|
SAML_SP_CERT_FILE=certs/sp.crt
|
|
SAML_SP_KEY_FILE=certs/sp.key
|