titan-iac/services/veles/configmap.yaml

# services/veles/configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: veles-config
  namespace: veles
data:
  VELES_PROFILE: cluster
  VELES_AUTH_MODE: oidc
  VELES_SIM_RUNNER: kubernetes-job
  VELES_PUBLIC_URL: https://veles.bstein.dev
  VELES_PUBLIC_BASE_URL: https://veles.bstein.dev
  VELES_ALPHA_LABEL: ALPHA
  VELES_OIDC_ISSUER_URL: https://sso.bstein.dev/realms/veles
  VELES_OIDC_ISSUER: https://sso.bstein.dev/realms/veles
  VELES_OIDC_CLIENT_ID: veles-web
  VELES_OIDC_ALLOWED_GROUPS: alpha,veles-tester,admin
  VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin
  VELES_OIDC_ADMIN_GROUPS: admin
  VELES_NAMESPACE: veles
  VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.6.96 # {"$imagepolicy": "veles:veles-sim-worker"}
  VELES_SIM_WORKER_VERSION: "0.6.96"
  VELES_SIM_SERVICE_ACCOUNT: veles-sim
  VELES_SIM_PRIORITY_CLASS: veles-sim
  VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64
  VELES_SIM_TOLERATIONS: veles.bstein.dev/simulation=true:NoSchedule
  VELES_SIM_ACTIVE_DEADLINE_SECONDS: "7200"
  VELES_SIM_TTL_SECONDS: "3600"
  VELES_SIM_CPU_REQUEST: 500m
  VELES_SIM_CPU_LIMIT: "2"
  VELES_SIM_MEMORY_REQUEST: 1Gi
  VELES_SIM_MEMORY_LIMIT: 4Gi
  VELES_SIM_FS_GROUP: "10001"
  VELES_MAX_ACTIVE_SIMS_PER_USER: "32"
  VELES_MAX_ACTIVE_SIMS_GLOBAL: "32"
  VELES_RETENTION_DAYS: "30"
  VELES_LOG_ROOT: /data/veles-artifacts/logs
  VELES_REPORT_ROOT: /data/veles-artifacts/reports
  VELES_ARTIFACT_ROOT: /data/veles-artifacts/artifacts
  VELES_SIM_ARTIFACT_PVC: veles-artifacts
  VELES_SIM_ARTIFACT_MOUNT_PATH: /data/veles-artifacts
  VELES_SIM_CODEX_CLI_SECRET_PROVIDER_CLASS: veles-codex-cli
  VELES_SIM_CODEX_CLI_MOUNT_PATH: /var/run/veles-codex-cli
  VELES_SIM_CODEX_CLI_HOME: /home/veles/.codex