add dirll services

trainer-env/elastic/elasticsearch.yml

@@ -1,56 +0,0 @@
----
-apiVersion: elasticsearch.k8s.elastic.co/v1
-kind: Elasticsearch
-metadata:
-  name: bfs-elasticsearch
-spec:
-  version: 8.8.0
-  volumeClaimDeletePolicy: DeleteOnScaledownOnly
-  nodeSets:
-  - name: all-In-one
-    count: 3
-    config:
-      node.roles: ["master", "data", "ingest", "ml"]
-    podTemplate:
-      spec:
-        affinity:
-          podAntiAffinity:
-            requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchLabels:
-                  elasticsearch.k8s.elastic.co/cluster-name: bfs-trainer
-              topologyKey: kubernetes.io/hostname
-        containers:
-        - name: elasticsearch
-          env:
-          - name: ES_JAVA_OPTS
-            value: -Xms2g -Xmx2g
-          resources:
-            requests:
-              memory: 128Mi
-              cpu: 100m
-            limits:
-              memory: 8Gi
-              cpu: 2
-          volumeMounts:
-            - name: elasticsearch-data
-              mountPath: /usr/share/elasticsearch/data
-    volumeClaimTemplates:
-    - metadata:
-        name: elasticsearch-data
-      spec:
-        accessModes:
-        - ReadWriteOnce
-        resources:
-          requests:
-            storage: 50Gi
-        storageClassName: local-elastic
-        
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: local-elastic
-provisioner: openebs.io/local
-allowVolumeExpansion: true
-volumeBindingMode: WaitForFirstConsumer

trainer-env/elastic/kibana.yaml

@@ -1,27 +0,0 @@
-apiVersion: kibana.k8s.elastic.co/v1
-kind: Kibana
-metadata:
-  name: bfs-kibana
-spec:
-  version: 8.8.0
-  count: 1
-  elasticsearchRef:
-    name: "bfs-elasticsearch"
-  podTemplate:
-    spec:
-      containers:
-      - name: kibana
-        env:
-          - name: NODE_OPTIONS
-            value: "--max-old-space-size=2048"
-        resources:
-          requests:
-            memory: 256Mi
-            cpu: 0.1
-          limits:
-            memory: 2.5Gi
-            cpu: 2
-  http:
-    tls:
-      selfSignedCertificate:
-        disabled: true

trainer-env/elastic/operator.yaml

@@ -1,745 +0,0 @@
-# Source: eck-operator/templates/operator-namespace.yaml
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: elastic-system
-  labels:
-    name: elastic-system
----
-# Source: eck-operator/templates/service-account.yaml
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: elastic-operator
-  namespace: elastic-system
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
----
-# Source: eck-operator/templates/webhook.yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  name: elastic-webhook-server-cert
-  namespace: elastic-system
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
----
-# Source: eck-operator/templates/configmap.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: elastic-operator
-  namespace: elastic-system
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-data:
-  eck.yaml: "log-verbosity: 0\nmetrics-port: 0\ncontainer-registry: docker.elastic.co\ncontainer-suffix: \nmax-concurrent-reconciles: 3\nca-cert-validity: 8760h\nca-cert-rotate-before: 24h\ncert-validity: 8760h\ncert-rotate-before: 24h\nexposed-node-labels: [topology.kubernetes.io/.*,failure-domain.beta.kubernetes.io/.*]\nset-default-security-context: auto-detect\nkube-client-timeout: 60s\nelasticsearch-client-timeout: 180s\ndisable-telemetry: false\ndistribution-channel: all-in-one\nvalidate-storage-class: true\nenable-webhook: true\nwebhook-name: elastic-webhook.k8s.elastic.co\nenable-leader-election: true\nelasticsearch-observation-interval: 10s"
----
-# Source: eck-operator/templates/cluster-roles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: elastic-operator
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-rules:
-- apiGroups:
-  - "authorization.k8s.io"
-  resources:
-  - subjectaccessreviews
-  verbs:
-  - create
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - create
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  resourceNames:
-  - elastic-operator-leader
-  verbs:
-  - get
-  - watch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  - events
-  - persistentvolumeclaims
-  - secrets
-  - services
-  - configmaps
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
-- apiGroups:
-  - apps
-  resources:
-  - deployments
-  - statefulsets
-  - daemonsets
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
-- apiGroups:
-  - policy
-  resources:
-  - poddisruptionbudgets
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
-- apiGroups:
-  - elasticsearch.k8s.elastic.co
-  resources:
-  - elasticsearches
-  - elasticsearches/status
-  - elasticsearches/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - autoscaling.k8s.elastic.co
-  resources:
-  - elasticsearchautoscalers
-  - elasticsearchautoscalers/status
-  - elasticsearchautoscalers/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - kibana.k8s.elastic.co
-  resources:
-  - kibanas
-  - kibanas/status
-  - kibanas/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - apm.k8s.elastic.co
-  resources:
-  - apmservers
-  - apmservers/status
-  - apmservers/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - enterprisesearch.k8s.elastic.co
-  resources:
-  - enterprisesearches
-  - enterprisesearches/status
-  - enterprisesearches/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - beat.k8s.elastic.co
-  resources:
-  - beats
-  - beats/status
-  - beats/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - agent.k8s.elastic.co
-  resources:
-  - agents
-  - agents/status
-  - agents/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - maps.k8s.elastic.co
-  resources:
-  - elasticmapsservers
-  - elasticmapsservers/status
-  - elasticmapsservers/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - stackconfigpolicy.k8s.elastic.co
-  resources:
-  - stackconfigpolicies
-  - stackconfigpolicies/status
-  - stackconfigpolicies/finalizers # needed for ownerReferences with blockOwnerDeletion on OCP
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - validatingwebhookconfigurations
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
----
-# Source: eck-operator/templates/cluster-roles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: "elastic-operator-view"
-  labels:
-    rbac.authorization.k8s.io/aggregate-to-view: "true"
-    rbac.authorization.k8s.io/aggregate-to-edit: "true"
-    rbac.authorization.k8s.io/aggregate-to-admin: "true"
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-rules:
-- apiGroups: ["elasticsearch.k8s.elastic.co"]
-  resources: ["elasticsearches"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["autoscaling.k8s.elastic.co"]
-  resources: ["elasticsearchautoscalers"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["apm.k8s.elastic.co"]
-  resources: ["apmservers"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["kibana.k8s.elastic.co"]
-  resources: ["kibanas"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["enterprisesearch.k8s.elastic.co"]
-  resources: ["enterprisesearches"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["beat.k8s.elastic.co"]
-  resources: ["beats"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["agent.k8s.elastic.co"]
-  resources: ["agents"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["maps.k8s.elastic.co"]
-  resources: ["elasticmapsservers"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["stackconfigpolicy.k8s.elastic.co"]
-  resources: ["stackconfigpolicies"]
-  verbs: ["get", "list", "watch"]
----
-# Source: eck-operator/templates/cluster-roles.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: "elastic-operator-edit"
-  labels:
-    rbac.authorization.k8s.io/aggregate-to-edit: "true"
-    rbac.authorization.k8s.io/aggregate-to-admin: "true"
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-rules:
-- apiGroups: ["elasticsearch.k8s.elastic.co"]
-  resources: ["elasticsearches"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["autoscaling.k8s.elastic.co"]
-  resources: ["elasticsearchautoscalers"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["apm.k8s.elastic.co"]
-  resources: ["apmservers"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["kibana.k8s.elastic.co"]
-  resources: ["kibanas"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["enterprisesearch.k8s.elastic.co"]
-  resources: ["enterprisesearches"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["beat.k8s.elastic.co"]
-  resources: ["beats"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["agent.k8s.elastic.co"]
-  resources: ["agents"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["maps.k8s.elastic.co"]
-  resources: ["elasticmapsservers"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
-- apiGroups: ["stackconfigpolicy.k8s.elastic.co"]
-  resources: ["stackconfigpolicies"]
-  verbs: ["create", "delete", "deletecollection", "patch", "update"]
----
-# Source: eck-operator/templates/role-bindings.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: elastic-operator
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: elastic-operator
-subjects:
-- kind: ServiceAccount
-  name: elastic-operator
-  namespace: elastic-system
----
-# Source: eck-operator/templates/webhook.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  name: elastic-webhook-server
-  namespace: elastic-system
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-spec:
-  ports:
-  - name: https
-    port: 443
-    targetPort: 9443
-  selector:
-    control-plane: elastic-operator
----
-# Source: eck-operator/templates/statefulset.yaml
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: elastic-operator
-  namespace: elastic-system
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-spec:
-  selector:
-    matchLabels:
-      control-plane: elastic-operator
-  serviceName: elastic-operator
-  replicas: 1
-  template:
-    metadata:
-      annotations:
-        # Rename the fields "error" to "error.message" and "source" to "event.source"
-        # This is to avoid a conflict with the ECS "error" and "source" documents.
-        "co.elastic.logs/raw": "[{\"type\":\"container\",\"json.keys_under_root\":true,\"paths\":[\"/var/log/containers/*${data.kubernetes.container.id}.log\"],\"processors\":[{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"error\",\"to\":\"_error\"}]}},{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"_error\",\"to\":\"error.message\"}]}},{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"source\",\"to\":\"_source\"}]}},{\"convert\":{\"mode\":\"rename\",\"ignore_missing\":true,\"fields\":[{\"from\":\"_source\",\"to\":\"event.source\"}]}}]}]"
-        "checksum/config": e58cbb3b8467599c33d5c3a30c38d480d0c47cc783fd2fcbe33c08441312d93e
-      labels:
-        control-plane: elastic-operator
-    spec:
-      terminationGracePeriodSeconds: 10
-      serviceAccountName: elastic-operator
-      securityContext:
-        runAsNonRoot: true
-      containers:
-      - image: "docker.elastic.co/eck/eck-operator:2.7.0"
-        imagePullPolicy: IfNotPresent
-        name: manager
-        args:
-        - "manager"
-        - "--config=/conf/eck.yaml"
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsNonRoot: true
-        env:
-        - name: OPERATOR_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        - name: POD_IP
-          valueFrom:
-            fieldRef:
-              fieldPath: status.podIP
-        - name: WEBHOOK_SECRET
-          value: elastic-webhook-server-cert
-        resources:
-          limits:
-            cpu: 1
-            memory: 1Gi
-          requests:
-            cpu: 100m
-            memory: 150Mi
-        ports:
-        - containerPort: 9443
-          name: https-webhook
-          protocol: TCP
-        volumeMounts:
-        - mountPath: "/conf"
-          name: conf
-          readOnly: true
-        - mountPath: /tmp/k8s-webhook-server/serving-certs
-          name: cert
-          readOnly: true
-      volumes:
-      - name: conf
-        configMap:
-          name: elastic-operator
-      - name: cert
-        secret:
-          defaultMode: 420
-          secretName: elastic-webhook-server-cert
----
-# Source: eck-operator/templates/webhook.yaml
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: elastic-webhook.k8s.elastic.co
-  labels:
-    control-plane: elastic-operator
-    app.kubernetes.io/version: "2.7.0"
-webhooks:
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-agent-k8s-elastic-co-v1alpha1-agent
-  failurePolicy: Ignore
-  name: elastic-agent-validation-v1alpha1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - agent.k8s.elastic.co
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - agents
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-apm-k8s-elastic-co-v1-apmserver
-  failurePolicy: Ignore
-  name: elastic-apm-validation-v1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - apm.k8s.elastic.co
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - apmservers
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-apm-k8s-elastic-co-v1beta1-apmserver
-  failurePolicy: Ignore
-  name: elastic-apm-validation-v1beta1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - apm.k8s.elastic.co
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - apmservers
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-beat-k8s-elastic-co-v1beta1-beat
-  failurePolicy: Ignore
-  name: elastic-beat-validation-v1beta1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - beat.k8s.elastic.co
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - beats
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-enterprisesearch-k8s-elastic-co-v1-enterprisesearch
-  failurePolicy: Ignore
-  name: elastic-ent-validation-v1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - enterprisesearch.k8s.elastic.co
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - enterprisesearches
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-enterprisesearch-k8s-elastic-co-v1beta1-enterprisesearch
-  failurePolicy: Ignore
-  name: elastic-ent-validation-v1beta1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - enterprisesearch.k8s.elastic.co
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - enterprisesearches
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-elasticsearch-k8s-elastic-co-v1-elasticsearch
-  failurePolicy: Ignore
-  name: elastic-es-validation-v1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - elasticsearch.k8s.elastic.co
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - elasticsearches
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-elasticsearch-k8s-elastic-co-v1beta1-elasticsearch
-  failurePolicy: Ignore
-  name: elastic-es-validation-v1beta1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - elasticsearch.k8s.elastic.co
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - elasticsearches
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-ems-k8s-elastic-co-v1alpha1-mapsservers
-  failurePolicy: Ignore
-  name: elastic-ems-validation-v1alpha1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - maps.k8s.elastic.co
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - mapsservers
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-kibana-k8s-elastic-co-v1-kibana
-  failurePolicy: Ignore
-  name: elastic-kb-validation-v1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - kibana.k8s.elastic.co
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - kibanas
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-kibana-k8s-elastic-co-v1beta1-kibana
-  failurePolicy: Ignore
-  name: elastic-kb-validation-v1beta1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - kibana.k8s.elastic.co
-    apiVersions:
-    - v1beta1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - kibanas
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-autoscaling-k8s-elastic-co-v1alpha1-elasticsearchautoscaler
-  failurePolicy: Ignore
-  name: elastic-esa-validation-v1alpha1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - autoscaling.k8s.elastic.co
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - elasticsearchautoscalers
-- clientConfig:
-    caBundle: Cg==
-    service:
-      name: elastic-webhook-server
-      namespace: elastic-system
-      path: /validate-scp-k8s-elastic-co-v1alpha1-stackconfigpolicies
-  failurePolicy: Ignore
-  name: elastic-scp-validation-v1alpha1.k8s.elastic.co
-  matchPolicy: Exact
-  admissionReviewVersions: [v1, v1beta1]
-  sideEffects: None
-  rules:
-  - apiGroups:
-    - stackconfigpolicy.k8s.elastic.co
-    apiVersions:
-    - v1alpha1
-    operations:
-    - CREATE
-    - UPDATE
-    resources:
-    - stackconfigpolicies
-

trainer-env/kafka/confluent-platform.yaml

@@ -1,187 +0,0 @@
-# deployment
----
-apiVersion: platform.confluent.io/v1beta1
-kind: Zookeeper
-metadata:
-  name: zookeeper
-  namespace: basic
-spec:
-  replicas: 3
-  podTemplate:
-    affinity:
-      podAntiAffinity:
-        requiredDuringSchedulingIgnoredDuringExecution:
-          - labelSelector:
-              matchExpressions:
-              - key: app
-                operator: In
-                values:
-                - zookeeper
-            topologyKey: kubernetes.io/hostname
-  image:
-    application: confluentinc/cp-zookeeper:7.4.0
-    init: confluentinc/confluent-init-container:2.6.0
-  dataVolumeCapacity: 10Gi
-  logVolumeCapacity: 10Gi
-  storageClass:
-    name: kafka-local
----
-apiVersion: platform.confluent.io/v1beta1
-kind: Kafka
-metadata:
-  name: kafka
-  namespace: basic
-spec:
-  replicas: 3
-  configOverrides:
-    server:
-      - auto.create.topics.enable=true
-      - default.replication.factor=3
-  podTemplate:
-    affinity:
-      podAntiAffinity:
-        requiredDuringSchedulingIgnoredDuringExecution:
-          - labelSelector:
-              matchExpressions:
-              - key: app
-                operator: In
-                values:
-                - kafka
-            topologyKey: kubernetes.io/hostname
-  image:
-    application: confluentinc/cp-server:7.4.0
-    init: confluentinc/confluent-init-container:2.6.0
-  dataVolumeCapacity: 20Gi
-  storageClass:
-    name: kafka-local
-  metricReporter:
-    enabled: true
-  dependencies:
-    zookeeper:
-      endpoint: zookeeper.basic.svc.cluster.local:2181
----
-apiVersion: platform.confluent.io/v1beta1
-kind: Connect
-metadata:
-  name: connect
-  namespace: basic
-spec:
-  replicas: 1
-  podTemplate:
-    affinity:
-      nodeAffinity:
-        requiredDuringSchedulingIgnoredDuringExecution:
-          nodeSelectorTerms: 
-            - matchExpressions: 
-                - key: kubernetes.io/hostname
-                  operator: In
-                  values: 
-                    - bfs-k8snode-10-2-1-7.hetzner.base.beaconfireinc.com
-  image:
-    application: confluentinc/cp-server-connect:7.4.0
-    init: confluentinc/confluent-init-container:2.6.0
-  dependencies:
-    kafka:
-      bootstrapEndpoint: kafka:9071
----
-apiVersion: platform.confluent.io/v1beta1
-kind: KsqlDB
-metadata:
-  name: ksqldb
-  namespace: basic
-spec:
-  replicas: 1
-  podTemplate:
-    affinity:
-      nodeAffinity:
-        requiredDuringSchedulingIgnoredDuringExecution:
-          nodeSelectorTerms: 
-            - matchExpressions: 
-                - key: kubernetes.io/hostname
-                  operator: In
-                  values: 
-                    - bfs-k8snode-10-2-1-6.hetzner.base.beaconfireinc.com
-  image:
-    application: confluentinc/cp-ksqldb-server:7.4.0
-    init: confluentinc/confluent-init-container:2.6.0
-  dataVolumeCapacity: 10Gi
-  storageClass:
-    name: kafka-local
----
-apiVersion: platform.confluent.io/v1beta1
-kind: ControlCenter
-metadata:
-  name: controlcenter
-  namespace: basic
-spec:
-  replicas: 1
-  podTemplate:
-    affinity:
-      nodeAffinity:
-        requiredDuringSchedulingIgnoredDuringExecution:
-          nodeSelectorTerms: 
-            - matchExpressions: 
-                - key: kubernetes.io/hostname
-                  operator: In
-                  values: 
-                    - bfs-k8snode-10-2-1-8.hetzner.base.beaconfireinc.com
-  image:
-    application: confluentinc/cp-enterprise-control-center:7.4.0
-    init: confluentinc/confluent-init-container:2.6.0
-  dataVolumeCapacity: 10Gi
-  storageClass:
-    name: kafka-local
-  dependencies:
-    schemaRegistry:
-      url: http://schemaregistry.basic.svc.cluster.local:8081
-    ksqldb:
-    - name: ksqldb
-      url: http://ksqldb.basic.svc.cluster.local:8088
-    connect:
-    - name: connect
-      url: http://connect.basic.svc.cluster.local:8083
----
-apiVersion: platform.confluent.io/v1beta1
-kind: SchemaRegistry
-metadata:
-  name: schemaregistry
-  namespace: basic
-spec:
-  replicas: 3
-  podTemplate:
-    affinity:
-      podAntiAffinity:
-        requiredDuringSchedulingIgnoredDuringExecution:
-          - labelSelector:
-              matchExpressions:
-              - key: app
-                operator: In
-                values:
-                - schemaregistry
-            topologyKey: kubernetes.io/hostname
-  image:
-    application: confluentinc/cp-schema-registry:7.4.0
-    init: confluentinc/confluent-init-container:2.6.0
----
-apiVersion: platform.confluent.io/v1beta1
-kind: KafkaRestProxy
-metadata:
-  name: kafkarestproxy
-  namespace: basic
-spec:
-  replicas: 1
-  image:
-    application: confluentinc/cp-kafka-rest:7.4.0
-    init: confluentinc/confluent-init-container:2.6.0
-  dependencies:
-    schemaRegistry:
-      url: http://schemaregistry.basic.svc.cluster.local:8081
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: kafka-local
-provisioner: openebs.io/local
-reclaimPolicy: Retain
-allowVolumeExpansion: true
-volumeBindingMode: WaitForFirstConsumer

trainer-env/kafka/producer-app-data.yaml

@@ -1,71 +0,0 @@
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: kafka-client-config
-  namespace: basic
-type: Opaque
-data:
-  # base64 decode, then connect address
-  kafka.properties: Ym9vdHN0cmFwLnNlcnZlcnM9a2Fma2EuYmFzaWMuc3ZjLmNsdXN0ZXIubG9jYWw6OTA3MQpzZWN1cml0eS5wcm90b2NvbD1QTEFJTlRFWFQ=
----
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: elastic
-  namespace: basic
-spec:
-  serviceName: elastic
-  podManagementPolicy: Parallel
-  replicas: 1
-  selector:
-    matchLabels:
-      app: elastic
-  template:
-    metadata:
-      labels:
-        app: elastic
-    spec:
-      containers:
-      - name: elastic
-        image: confluentinc/cp-kafka:latest
-        command:
-        - /bin/sh
-        - -c
-        - |
-          kafka-producer-perf-test \
-            --topic elastic-0  \
-            --record-size 64 \
-            --throughput 1 \
-            --producer.config /mnt/kafka.properties \
-            --num-records 230400
-        volumeMounts:
-        - name: kafka-properties
-          mountPath: /mnt
-          readOnly: true
-        resources:
-          requests:
-            memory: 512Mi # 768Mi
-            cpu: 500m # 1000m
-      volumes:
-        - name: kafka-properties # Create secret with name `kafka-client-config` with client configurations
-          secret:
-            secretName: kafka-client-config
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: elastic
-spec:
-  clusterIP: None
----
-apiVersion: platform.confluent.io/v1beta1
-kind: KafkaTopic
-metadata:
-  name: elastic-0
-  namespace: basic
-spec:
-  replicas: 3
-  # partitionCount: 3
-  configs:
-    cleanup.policy: "delete"

trainer-env/mongodb/mongodb.yaml

@@ -1,98 +0,0 @@
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: mongodb-local
-provisioner: kubernetes.io/no-provisioner
-volumeBindingMode: WaitForFirstConsumer
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: mongodb-pvc-local
-spec:
-  storageClassName: mongodb-local
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 3Gi
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: mongodb-pv-local
-  labels:
-    type: local
-spec:
-  storageClassName: mongodb-local
-  claimRef:
-    name: mongodb-pvc-local
-    # ref: PersistentVolumeClaim
-    namespace: basic
-  capacity:
-    storage: 20Gi
-  accessModes:
-    - ReadWriteOnce
-  local:
-    path: /data/mongodb
-  nodeAffinity:
-    required:
-      nodeSelectorTerms:
-      - matchExpressions:
-        - key: kubernetes.io/hostname
-          operator: In
-          values:
-          - bfs-k8snode-10-2-1-8.hetzner.base.beaconfireinc.com
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: mongodb
-spec:
-  selector:
-    app: mongodb
-  ports:
-    - name: mongodb
-      protocol: TCP
-      port: 27017
-      targetPort: 27017
-      nodePort: 30018
-  type: NodePort
-
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: mongodb
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: mongodb
-  template:
-    metadata:
-      labels:
-        app: mongodb
-    spec:
-      containers:
-        - name: mongodbs
-          image: mongo:4.4
-          imagePullPolicy: IfNotPresent
-          env:
-            - name: MONGO_INITDB_ROOT_USERNAME
-              value: root
-            - name: MONGO_INITDB_ROOT_PASSWORD
-              value: 'root@123'
-          ports:
-            - containerPort: 27017
-          volumeMounts:
-            - name: mongodb-data
-              mountPath: /data/db
-      volumes:
-        - name: mongodb-data
-          persistentVolumeClaim:
-            claimName: mongodb-pvc-local

trainer-env/mysql-k8s/mysql-local-staff-axon.yaml

@@ -1,60 +0,0 @@
-apiVersion: v1
-kind: ReplicationController
-metadata:
-  name: axon-mysql
-  namespace: basic
-  labels:
-    name: axon-mysql
-spec:
-  replicas: 1
-  selector:
-    name: axon-mysql
-  template:
-    metadata:
-      labels:
-        name: axon-mysql
-    spec:
-      containers:
-      - name: axon-mysql
-        image: mysql:8.0.33
-        ports:
-        - containerPort: 3306
-        volumeMounts:
-        - name: mysql-data-staff-axon
-          mountPath: /var/lib/mysql
-        env:
-        - name: MYSQL_ROOT_PASSWORD
-          value: "Beaconfire@2099"
-        - name: MYSQL_DATABASE
-          value: "event_store"
-      volumes:
-      - name: mysql-data-staff-axon
-        hostPath:
-          path: /data/staff-axon/mysql
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                - key: "kubernetes.io/hostname"
-                  operator: In
-                  values:
-                  - bfs-k8snode-10-2-1-6.hetzner.base.beaconfireinc.com
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: axon-mysql
-  namespace: basic
-  labels:
-    name: axon-mysql
-spec:
-  ports:
-  - protocol: TCP
-    port: 3306
-    targetPort: 3306
-    nodePort: 30016
-  selector:
-    name: axon-mysql
-  type: NodePort

trainer-env/mysql-k8s/mysql-local-staff-drill.yaml

@@ -1,59 +0,0 @@
-apiVersion: v1
-kind: ReplicationController
-metadata:
-  name: drill-mysql
-  namespace: basic
-  labels:
-    name: drill-mysql
-spec:
-  replicas: 1
-  selector:
-    name: drill-mysql
-  template:
-    metadata:
-      labels:
-        name: drill-mysql
-    spec:
-      containers:
-      - name: drill-mysql
-        image: mysql:8.0.33
-        ports:
-        - containerPort: 3306
-        volumeMounts:
-        - name: mysql-data-staff-axon
-          mountPath: /var/lib/mysql
-        env:
-        - name: MYSQL_ROOT_PASSWORD
-          value: "Beaconfire@2099"
-        - name: MYSQL_DATABASE
-          value: "drill"
-      volumes:
-      - name: mysql-data-staff-axon
-        hostPath:
-          path: /data/staff-axon/mysql
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                - key: "kubernetes.io/hostname"
-                  operator: In
-                  values:
-                  - bfs-k8snode-10-2-1-8.hetzner.base.beaconfireinc.com
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: drill-mysql
-  namespace: basic
-  labels:
-    name: drill-mysql
-spec:
-  ports:
-  - protocol: TCP
-    port: 3306
-    targetPort: 3306
-    nodePort: 30017
-  selector:
-    name: drill-mysql
-  type: NodePort

trainer-upgrade/service_group/auth-service.yaml

@@ -0,0 +1,67 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: auth
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: auth
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: auth
+  template:
+    metadata:
+      labels:
+        app: auth
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: auth
+          image: beaconfireiic/auth:1.1.1-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "auth"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/auth
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: auth
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: auth

trainer-upgrade/service_group/batch-service.yaml

@@ -0,0 +1,136 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: batch-command
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: batch-command
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: batch-command
+  template:
+    metadata:
+      labels:
+        app: batch-command
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: batch-command
+          image: beaconfireiic/batch-command:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "batch-command"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/batch-command
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: batch-command
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: batch-command
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: batch-query
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: batch-query
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: batch-query
+  template:
+    metadata:
+      labels:
+        app: batch-query
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: batch-query
+          image: beaconfireiic/batch-query:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "batch-query"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/batch-query
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: batch-query
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: batch-query

trainer-upgrade/service_group/company-service.yaml

@@ -0,0 +1,136 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: company-command
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: company-command
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: company-command
+  template:
+    metadata:
+      labels:
+        app: company-command
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: company-command
+          image: beaconfireiic/company-command:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "company-command"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/company-command
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: company-command
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: company-command
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: company-query
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: company-query
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: company-query
+  template:
+    metadata:
+      labels:
+        app: company-query
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: company-query
+          image: beaconfireiic/company-query:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "company-query"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/company-query
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: company-query
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: company-query

trainer-upgrade/service_group/discover-service.yaml

@@ -0,0 +1,142 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: discovery-service
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: discovery-service
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: discovery-service
+  template:
+    metadata:
+      labels:
+        app: discovery-service
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: discovery-service
+          image: beaconfireiic/discovery-service:1.1.0
+          ports:
+            - name: http
+              containerPort: 8761
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "EUREKA_INSTANCE_HOSTNAME"
+              value: "discovery-service"
+            - name: "SERVER_PORT"
+              value: "8761"
+            - name: "LOG_APP-NAME"
+              value: "discovery-service"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/discovery-service
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: discovery-service
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8761
+      targetPort: http
+  selector:
+    app: discovery-service
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: gateway
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: gateway
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: gateway
+  template:
+    metadata:
+      labels:
+        app: gateway
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: gateway
+          image: beaconfireiic/gateway:1.1.0
+          ports:
+            - name: http
+              containerPort: 8761
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "EUREKA_INSTANCE_HOSTNAME"
+              value: "discovery-service"
+            - name: "SERVER_PORT"
+              value: "9090"
+            - name: "EUREKA_CLIENT_SERVICE-URL_DEFAULT-ZONE"
+              value: "http://discovery-service:8761/eureka/"
+            - name: "LOG_APP-NAME"
+              value: "gateway"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/gateway
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: gateway
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 9090
+      targetPort: http
+  selector:
+    app: gateway

trainer-upgrade/service_group/email-service.yaml

@@ -0,0 +1,136 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: email-query
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: email-query
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: email-query
+  template:
+    metadata:
+      labels:
+        app: email-query
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: email-query
+          image: beaconfireiic/email-query:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "email-query"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/email-query
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: email-query
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: email-query
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: email-config
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: email-config
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: email-config
+  template:
+    metadata:
+      labels:
+        app: email-config
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: email-config
+          image: beaconfireiic/email-config:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "email-config"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/email-config
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: email-config
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: email-config

trainer-upgrade/service_group/kpi-service.yaml

@@ -0,0 +1,136 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: kpi-command
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kpi-command
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: kpi-command
+  template:
+    metadata:
+      labels:
+        app: kpi-command
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: kpi-command
+          image: beaconfireiic/kpi-command:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "kpi-command"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/kpi-command
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kpi-command
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: kpi-command
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: kpi-query
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kpi-query
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: kpi-query
+  template:
+    metadata:
+      labels:
+        app: kpi-query
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: kpi-query
+          image: beaconfireiic/kpi-query:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "kpi-query"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/kpi-query
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kpi-query
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: kpi-query

trainer-upgrade/service_group/question-service.yaml

@@ -0,0 +1,136 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: question-command
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: question-command
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: question-command
+  template:
+    metadata:
+      labels:
+        app: question-command
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: question-command
+          image: beaconfireiic/question-command:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "question-command"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/question-command
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: question-command
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: question-command
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: question-query
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: question-query
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: question-query
+  template:
+    metadata:
+      labels:
+        app: question-query
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: question-query
+          image: beaconfireiic/question-query:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "question-query"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/question-query
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: question-query
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: question-query

trainer-upgrade/service_group/subscription-service.yaml

@@ -0,0 +1,136 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: subscription-command
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: subscription-command
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: subscription-command
+  template:
+    metadata:
+      labels:
+        app: subscription-command
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: subscription-command
+          image: beaconfireiic/subscription-command:1.1.1-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "subscription-command"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/subscription-command
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: subscription-command
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: subscription-command
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: subscription-query
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: subscription-query
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: subscription-query
+  template:
+    metadata:
+      labels:
+        app: subscription-query
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: subscription-query
+          image: beaconfireiic/subscription-query:1.1.1-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "subscription-query"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "prod"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/subscription-query
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: subscription-query
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: subscription-query

trainer-upgrade/service_group/user-service.yaml

@@ -0,0 +1,136 @@
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: user-query
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: user-query
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: user-query
+  template:
+    metadata:
+      labels:
+        app: user-query
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: user-query
+          image: beaconfireiic/user-query:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "user-query"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "sdet"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/user-query
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: user-query
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: user-query
+
+---
+# apiVersion: v1
+# kind: ConfigMap
+# metadata:
+#   name: user-command
+# data:
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: user-command
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: user-command
+  template:
+    metadata:
+      labels:
+        app: user-command
+    spec:
+      imagePullSecrets:
+        - name: docker-regcred
+      containers:
+        - name: user-command
+          image: beaconfireiic/user-command:1.1.0-sdet
+          ports:
+            - name: http
+              containerPort: 8888
+              protocol: TCP
+          env:
+            - name: "LOGGING_LEVEL_ROOT"
+              value: "info"
+            - name: "SERVER_PORT"
+              value: "8888"
+            - name: "LOG_APP-NAME"
+              value: "user-command"
+            - name: "SPRING_PROFILES_ACTIVE"
+              value:  "sdet"
+          volumeMounts:
+            - name: app-logs
+              mountPath: /logs
+          resources: 
+            requests:
+              cpu: 0.1
+              memory: 128Mi
+            limits:
+              cpu: 1
+              memory: 2Gi
+      volumes:
+        - name: app-logs
+          hostPath:
+            path: /data/app_logs/user-command
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: user-command
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 8888
+      targetPort: http
+  selector:
+    app: user-command