root
/
devops
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

updated: 2025-02-24 17:14:25

This commit is contained in:
qxsugar 2025-02-24 17:14:25 +08:00
parent 0cf91b5873
commit 21693a0bb9
7 changed files with 80 additions and 104 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

97
README.md
View File

@ -3,48 +3,58 @@ JUNO DEVOPS配置信息
## 组件 ## 组件
| 组件名称 | 访问url | 帐号 | 密码 | 备注 | | 组件名称 | 访问url | 帐号 | 密码 | 备注 |
|:------------|:--------------------------|:------|:-------------|:--------------| |:------------|:----------------------------------|:------|:-------------|:----------|
| jenkins | | admin | U!fM2g2* | 已废弃 | | drone | https://drone.lingpaike.com | * | * | gitea授权登陆 |
| drone | drone.lingpaike.com | | | gitea授权登陆 | | gitea | https://gitea.lingpaike.com | root | GB2yN264aEXZ | 仓库管理 |
| gitea | gitea.lingpaike.com | root | GB2yN264aEXZ | 仓库管理 | | minio-admin | https://minio-admin.lingpaike.com | admin | hEWDoUr6iAwP | 存储管理 |
| minio-admin | minio-admin.lingpaike.com | admin | hEWDoUr6iAwP | 存储管理 |
## 机器 ## 机器
| ip | 用户名 | 密码 | 备注 |
|:----------------|:-------|:-----------------|:---------------------|
| 43.143.113.34 | root | qwer123#@!M | juno-base（⚠️废） |
| 106.54.25.21 | ubuntu | 7088588822a9d2E4 | juno-uat（⚠️废） |
| 124.221.245.182 | root | 7088588822a9d2E4 | 正式环境-数据 |
| 124.221.225.216 | ubuntu | 7088588822a9d2E4 | 正式环境-服务 |
| 114.117.250.235 | ubuntu | 7088588822a9d2E4 | 测试环境-服务 |
| 114.117.244.62 | ubuntu | 7088588822a9d2E4 | 测试环境-数据，基础组件 |
| ip | 用户名 | 密码 | 备注 |
|:----------------|:-------|:-----------------|:-------------|
| 124.221.245.182 | root | 7088588822a9d2E4 | 正式环境-数据 |
| 124.221.225.216 | ubuntu | 7088588822a9d2E4 | 正式环境-服务 |
| 114.117.250.235 | ubuntu | 7088588822a9d2E4 | 测试环境-服务 |
| 114.117.244.62 | ubuntu | 7088588822a9d2E4 | 测试环境-数据，基础组件 |
## 腾讯云帐号 ## 腾讯云帐号
| 登陆地址 | 子帐户id | 用户名 | 密码 | 备注 | | 登陆地址 | 子帐户id | 用户名 | 密码 | 备注 |
|:-------------------------------------------|:-------------|:-------------|:----------------------------------|:----| |:--------------------------------|:-------------|:----|:---|:-------|
| https://cloud.tencent.com/login/subAccount | 100035811614 | huangjingkai | 7z8CH57%j8X9HTgptDkehuYJWnUiJz^pj | ⚠️废 | | https://cloud.tencent.com/login | 100030605182 | * | * | 微信扫码登录 |
| https://cloud.tencent.com/login/subAccount | 100030605182 | mingtao | qwer123#@!M | |
## 腾讯云docker hub ## 腾讯云docker hub
| repo | namespace | user | pwd | 备注 | | repo | namespace | user | pwd | 备注 |
|:-----------------------|:----------|:-------------|:-------------|:--------------------| |:-----------------------|:----------|:-------------|:-------------|:-----------------|
| ccr.ccs.tencentyun.com | juno | 100030649327 | DRn2Vg6iPubd | 所属帐号100030605182 | | ccr.ccs.tencentyun.com | juno | 100030649327 | DRn2Vg6iPubd | 所属帐号100030605182 |
## drone 配置 ## drone 配置
```yaml
appid: 197ba424-cf07-41be-9b66-f561e71f5293 | app_id | secret | callback |
secret: gto_dtdbc5cjfd3dztzfa3qay3nqulp7ifppkzam52ghftv43o6leqia |--------------------------------------|----------------------------------------------------------|-----------------------------------|
callback: https://gitea.lingpaike.com/login | 197ba424-cf07-41be-9b66-f561e71f5293 | gto_dtdbc5cjfd3dztzfa3qay3nqulp7ifppkzam52ghftv43o6leqia | https://gitea.lingpaike.com/login |
```
### kibana 账号配置 ### kibana 账号配置
```text
#### 账号密码原始信息
| 用户 | 密码 |
|----------------|--------------|
| sugar | meimima |
| liumingtao | TjvRST44Dbkf |
| huminghui | VeND2m24AGUv |
| dufeng | 24ouCHrmJSeJ |
| huangrongzhi | Xwmicej2zduS |
| zhouxiangguang | e4K42UQjjtDG |
| zhangzhe | RJZtEpdADo8w |
#### 加密
```text
# htpasswd -nb $user $password 生成hash
sugar:$apr1$D/xE.jx6$ryMsW4q.rzrHXIXymhQM41 sugar:$apr1$D/xE.jx6$ryMsW4q.rzrHXIXymhQM41
liumingtao:$apr1$mm.Ip3e4$XNiiVWak8a9IfdEcZZrLD. liumingtao:$apr1$mm.Ip3e4$XNiiVWak8a9IfdEcZZrLD.
huminghui:$apr1$gHrCGuVZ$yJk4AMsHzyIyMvbastxSb0 huminghui:$apr1$gHrCGuVZ$yJk4AMsHzyIyMvbastxSb0
@ -53,30 +63,25 @@ huangrongzhi:$apr1$HEnEkVDJ$nuBWbzlre.7C7rkGQOGgm1
zhouxiangguang:$apr1$o5vsfIN4$4xQCR9zrxsnyRlbjHjl2p/ zhouxiangguang:$apr1$o5vsfIN4$4xQCR9zrxsnyRlbjHjl2p/
zhangzhe:$apr1$f.WACNwQ$Eg7yuapzsvziLU6iCclep0 zhangzhe:$apr1$f.WACNwQ$Eg7yuapzsvziLU6iCclep0
## 上面的文本base64后丢到k8s的secrets # 上面的文本base64后丢到k8s的secrets
## htpasswd -nb $user $password 生成密码
## 数据源
sugar:meimima
liumingtao:TjvRST44Dbkf
huminghui:VeND2m24AGUv
dufeng:24ouCHrmJSeJ
huangrongzhi:Xwmicej2zduS
zhouxiangguang:e4K42UQjjtDG
zhangzhe:RJZtEpdADo8w
``` ```
```yaml ## 文件存储配置
### minio 配置
admin-web: https://minio-admin.lingpaike.com
user: admin
password: hEWDoUr6iAwP
### 服务配置
| 后台访问地址 | 账号 | 密码 |
|-----------------------------------|-------|--------------|
| https://minio-admin.lingpaike.com | admin | hEWDoUr6iAwP |
### API配置
```yaml
### 访问配置 ### 访问配置
endpoint: minio.lingpaike.com endpoint: minio.lingpaike.com
buckets: buckets:
- uat # 测试环境 - uat # 测试环境
- product # 正式环境 - product # 正式环境
uat: uat:
key: WnNnehJLuSaPVRizxXCm key: WnNnehJLuSaPVRizxXCm

1
devops/docker/daemon.json
View File

@ -1,6 +1,7 @@
{ {
"metrics-addr" : "0.0.0.0:9323", "metrics-addr" : "0.0.0.0:9323",
"registry-mirrors": [ "registry-mirrors": [
"http://dr.ppapi.cn",
"https://registry.docker-cn.com" "https://registry.docker-cn.com"
], ],
"log-driver": "json-file", "log-driver": "json-file",

3
devops/drone/docker-compose.yaml
View File

@ -4,7 +4,8 @@ services:
container_name: drone-server container_name: drone-server
image: dr.ppapi.cn/drone/drone:2 image: dr.ppapi.cn/drone/drone:2
environment: environment:
DRONE_SERVER_HOST: drone2.lingpaike.com DRONE_LOGS_DEBUG: true
DRONE_SERVER_HOST: drone.lingpaike.com
DRONE_SERVER_PROTO: https DRONE_SERVER_PROTO: https
DRONE_RPC_SECRET: bf5f296c-3e53-40da-94ee-f171fbb33fac DRONE_RPC_SECRET: bf5f296c-3e53-40da-94ee-f171fbb33fac
DRONE_GITEA_CLIENT_ID: 197ba424-cf07-41be-9b66-f561e71f5293 DRONE_GITEA_CLIENT_ID: 197ba424-cf07-41be-9b66-f561e71f5293

25
devops/drone/ingress.yaml
View File

@ -1,3 +1,28 @@
# drone2.lingpaike.com
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: juno2-drone
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
tls:
- hosts:
- drone2.lingpaike.com
secretName: drone2.lingpaike.com
rules:
- host: drone2.lingpaike.com
http:
paths:
- pathType: Prefix
path: "/"
backend:
service:
name: juno-drone
port:
number: 80
---
# drone.lingpaike.com
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
metadata: metadata:

22
devops/drone/ingress2.yaml
View File

@ -1,22 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: juno2-drone
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
tls:
- hosts:
- drone2.lingpaike.com
secretName: drone2.lingpaike.com
rules:
- host: drone2.lingpaike.com
http:
paths:
- pathType: Prefix
path: "/"
backend:
service:
name: juno-drone
port:
number: 80

2
devops/monitor-docker/main.go
View File

@ -17,7 +17,7 @@ var args string
var tag string var tag string
func sendFeedback(msg string) error { func sendFeedback(msg string) error {
url := fmt.Sprintf("https://api.day.app/tFaz24oYAmdzLbJhpnoZCG/%s?group=juno-monitor", msg) url := fmt.Sprintf("https://api.day.app/a85GpPHGzVMvG8rB5q8FLP/%s?group=juno-monitor", msg)
_, err := http.Get(url) _, err := http.Get(url)
return err return err
} }

34
迁移进度.md
View File

@ -1,34 +0,0 @@
## cronjob
* * * * * DOCKER_API_VERSION=1.39 /juno/monitor -args juno-minio,kibana,logstash,elasticsearch,drone-runner-2,drone-server-2,mysql,gitea,postgres,redis -tag juno-basic
## docker 服务
- [x] drone
- [x] gitea
- [x] elk
- [x] minio
- [x] mysql
- [x] pg
- [x] redis(有问题)
- [x] api服务
juno.dev.data
公网ip：114.117.244.62
内网ip：172.30.0.15
juno.dev.svc
公网ip：114.117.250.235
内网ip: 172.30.0.3
# 服务情人
- [x] drone2.lingpaike.com
- [x] drone.lingpaike.com
- [x] admin.qa.lingpaike.com
- [x] gitea.lingpaike.com
- [x] minio-admin.lingpaike.com
- [x] minio.lingpaike.com
- [ ] file.qa.lingpaike.com
- [ ] kibana.lingpaike.com
- [x] miniapp.qa.lingpaike.com
- [x] saas.qa.lingpaike.com
- [x] www.qa.lingpaike.com