|
1 | | -# Import from gitlab-org/cluster-integration/gitlab-agent/pkg/kascfg/config_example.yaml |
2 | | -# |
3 | | -# This is a sample configuration file for kas. The source of truth is pkg/kascfg/kascfg.proto. It contains documentation |
4 | | -# for all the fields. Configuration values in this file are the defaults (if set) that are used by kas. |
| 1 | +# This is a configuration file for kas that contains the default values for the settings. |
| 2 | +# It DOES NOT contain all the possible configuration knobs. |
| 3 | +# The source of truth is kascfg.proto. |
| 4 | +# It contains all the fields and documentation them. |
| 5 | +# If you are looking for a setting, start from the ConfigurationFile message in: |
| 6 | +# - the proto file kascfg.proto. |
| 7 | +# - the generated documentation in kascfg_proto_docs.md. |
| 8 | +# Correctness of this file is enforced by a unit test in kascfg_defaults_test.go. |
5 | 9 |
|
6 | | -gitlab: |
7 | | - address: http://localhost:8080{{GITLAB_RELATIVE_URL_ROOT}} # required |
8 | | - authentication_secret_file: {{GITLAB_AGENT_KAS_GITLAB_AUTHENTICATION_SECRET_FILE}} # required |
9 | | - # ca_certificate_file: /server-ca.pem |
10 | | - api_rate_limit: |
11 | | - bucket_size: 250 |
12 | | - refill_rate_per_second: 50 |
13 | 10 | agent: |
14 | | - listen: |
15 | | - network: tcp |
16 | | - address: 127.0.0.1:8150 |
17 | | - websocket: false |
18 | | - # certificate_file: /server-cert.pem |
19 | | - # key_file: /server-key.pem |
20 | | - connections_per_token_per_minute: 40000 |
21 | | - max_connection_age: "7200s" |
22 | | - listen_grace_period: "5s" |
23 | 11 | configuration: |
24 | | - poll_period: "300s" |
25 | 12 | max_configuration_file_size: 131072 |
| 13 | + poll_period: 300s |
| 14 | + info_cache_error_ttl: 60s |
| 15 | + info_cache_ttl: 300s |
26 | 16 | kubernetes_api: |
| 17 | + allowed_agent_cache_error_ttl: 10s |
| 18 | + allowed_agent_cache_ttl: 60s |
27 | 19 | listen: |
| 20 | + address: 127.0.0.1:8154 |
| 21 | + listen_grace_period: 5s |
28 | 22 | network: tcp |
29 | | - address: 0.0.0.0:8154 |
30 | | - # certificate_file: /server-cert.pem |
31 | | - # key_file: /server-key.pem |
32 | | - listen_grace_period: "5s" |
33 | | - shutdown_grace_period: "3600s" |
34 | | - url_path_prefix: / |
35 | | - allowed_agent_cache_ttl: "60s" |
36 | | - allowed_agent_cache_error_ttl: "10s" |
37 | | - info_cache_ttl: "300s" |
38 | | - info_cache_error_ttl: "60s" |
39 | | - redis_conn_info_ttl: "300s" |
40 | | - redis_conn_info_refresh: "240s" |
41 | | - redis_conn_info_gc: "600s" |
42 | | -observability: |
43 | | - usage_reporting_period: "10s" |
| 23 | + shutdown_grace_period: 3600s |
| 24 | + url_path_prefix: /{{GITLAB_RELATIVE_URL_ROOT}} |
| 25 | + websocket_token_secret_file: {{GITLAB_AGENT_KAS_WEBSOCKET_TOKEN_SECRET_FILE}} |
44 | 26 | listen: |
| 27 | + address: 127.0.0.1:8150 |
| 28 | + connections_per_token_per_minute: 40000 |
| 29 | + listen_grace_period: 5s |
| 30 | + max_connection_age: 7200s |
45 | 31 | network: tcp |
46 | | - address: 127.0.0.1:8151 |
47 | | - prometheus: |
48 | | - url_path: /metrics |
49 | | - # tracing: |
50 | | - # otlp_endpoint: "https://localhost:4317/traces/foo/bar" |
51 | | - # otlp_token_secret_file: "/some/path" |
52 | | - # otlp_ca_certificate_file: "/some/path/ca.crt" |
53 | | - sentry: |
54 | | - dsn: "" |
55 | | - environment: "" |
56 | | - logging: |
57 | | - level: info |
58 | | - grpc_level: error |
59 | | - google_profiler: |
60 | | - enabled: false |
61 | | - # project_id: "" |
62 | | - # credentials_file: /some/file |
63 | | - # debug_logging: false |
64 | | - liveness_probe: |
65 | | - url_path: /liveness |
66 | | - readiness_probe: |
67 | | - url_path: /readiness |
68 | | - event_reporting_period: "10s" |
| 32 | + websocket: true |
| 33 | + receptive_agent: |
| 34 | + poll_period: 60s |
| 35 | + redis_conn_info_gc: 600s |
| 36 | + redis_conn_info_refresh: 240s |
| 37 | + redis_conn_info_ttl: 300s |
| 38 | +api: |
| 39 | + listen: |
| 40 | + address: 127.0.0.1:8153 |
| 41 | + listen_grace_period: 5s |
| 42 | + max_connection_age: 7200s |
| 43 | + network: tcp |
| 44 | + authentication_secret_file: {{GITLAB_AGENT_KAS_API_LISTEN_AUTHENTICATION_SECRET_FILE}} # required |
69 | 45 | gitaly: |
70 | 46 | global_api_rate_limit: |
71 | | - refill_rate_per_second: 30.0 |
72 | 47 | bucket_size: 70 |
| 48 | + refill_rate_per_second: 30 |
73 | 49 | per_server_api_rate_limit: |
74 | | - refill_rate_per_second: 15.0 |
75 | 50 | bucket_size: 40 |
| 51 | + refill_rate_per_second: 15 |
| 52 | +gitlab: |
| 53 | + address: http://127.0.0.1:8080{{GITLAB_RELATIVE_URL_ROOT}} |
| 54 | + authentication_secret_file: {{GITLAB_AGENT_KAS_GITLAB_AUTHENTICATION_SECRET_FILE}} # required |
| 55 | + api_rate_limit: |
| 56 | + bucket_size: 250 |
| 57 | + refill_rate_per_second: 50 |
| 58 | +observability: |
| 59 | + event_reporting_period: 300s |
| 60 | + google_profiler: {} |
| 61 | + listen: |
| 62 | + address: 127.0.0.1:8151 |
| 63 | + network: tcp |
| 64 | + liveness_probe: |
| 65 | + url_path: /liveness |
| 66 | + logging: |
| 67 | + level: debug |
| 68 | + grpc_level: debug |
| 69 | + prometheus: |
| 70 | + url_path: /metrics |
| 71 | + readiness_probe: |
| 72 | + url_path: /readiness |
| 73 | + sentry: {} |
| 74 | + usage_reporting_period: 10s |
76 | 75 | private_api: |
77 | 76 | listen: |
| 77 | + address: 0.0.0.0:8155 |
| 78 | + listen_grace_period: 5s |
| 79 | + max_connection_age: 7200s |
78 | 80 | network: tcp |
79 | | - address: 127.0.0.1:8155 |
80 | 81 | authentication_secret_file: {{GITLAB_AGENT_KAS_PRIVATE_API_LISTEN_AUTHENTICATION_SECRET_FILE}} |
81 | | - max_connection_age: 7200s |
82 | | - listen_grace_period: "5s" |
83 | 82 | redis: |
| 83 | + dial_timeout: 5s |
| 84 | + key_prefix: gitlab-kas |
| 85 | + network: tcp |
| 86 | + write_timeout: 3s |
84 | 87 | server: |
85 | 88 | address: "{{REDIS_HOST}}:{{REDIS_PORT}}" # required |
86 | | - dial_timeout: "5s" |
87 | | - write_timeout: "3s" |
88 | | - key_prefix: gitlab-kas |
89 | | - password_file: {{GITLAB_AGENT_KAS_REDIS_PASSWORD_FILE}} |
90 | | - network: "tcp" |
91 | | -api: |
| 89 | +workspaces: |
92 | 90 | listen: |
| 91 | + address: 127.0.0.1:8160 |
| 92 | + listen_grace_period: 5s |
93 | 93 | network: tcp |
94 | | - address: 127.0.0.1:8153 |
95 | | - authentication_secret_file: {{GITLAB_AGENT_KAS_API_LISTEN_AUTHENTICATION_SECRET_FILE}} # required |
96 | | - # certificate_file: /server-cert.pem |
97 | | - # key_file: /server-key.pem |
98 | | - max_connection_age: "7200s" |
99 | | - listen_grace_period: "5s" |
| 94 | + shutdown_grace_period: 3600s |
| 95 | + |
0 commit comments