1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
# This is a sample configuration file for kas. The source of truth is pkg/kascfg/kascfg.proto. It contains documentation
# for all the fields. Configuration values in this file are the defaults (if set) that are used by kas.
gitlab:
address: http://localhost:8080 # required
authentication_secret_file: /some/file # required
# ca_certificate_file: /server-ca.pem
api_rate_limit:
refill_rate_per_second: 10.0
bucket_size: 50
agent:
listen:
network: tcp
address: 127.0.0.1:8150
websocket: false
# certificate_file: /server-cert.pem
# key_file: /server-key.pem
connections_per_token_per_minute: 40000
max_connection_age: "1800s"
listen_grace_period: "5s"
configuration:
poll_period: "20s"
max_configuration_file_size: 131072
gitops:
poll_period: "20s"
project_info_cache_ttl: "300s"
project_info_cache_error_ttl: "60s"
max_manifest_file_size: 5242880
max_total_manifest_file_size: 20971520
max_number_of_paths: 100
max_number_of_files: 1000
kubernetes_api:
listen:
network: tcp
address: 0.0.0.0:8154
# certificate_file: /server-cert.pem
# key_file: /server-key.pem
listen_grace_period: "5s"
shutdown_grace_period: "3600s"
url_path_prefix: /
allowed_agent_cache_ttl: "60s"
allowed_agent_cache_error_ttl: "10s"
info_cache_ttl: "300s"
info_cache_error_ttl: "60s"
redis_conn_info_ttl: "300s"
redis_conn_info_refresh: "240s"
redis_conn_info_gc: "600s"
observability:
usage_reporting_period: "60s"
listen:
network: tcp
address: 127.0.0.1:8151
prometheus:
url_path: /metrics
# tracing:
# otlp_endpoint: "https://localhost:4317/traces/foo/bar"
# otlp_token_secret_file: "/some/path"
# otlp_ca_certificate_file: "/some/path/ca.crt"
sentry:
dsn: ""
environment: ""
logging:
level: info
grpc_level: error
google_profiler:
enabled: false
# project_id: ""
# credentials_file: /some/file
# debug_logging: false
liveness_probe:
url_path: /liveness
readiness_probe:
url_path: /readiness
gitaly:
global_api_rate_limit:
refill_rate_per_second: 30.0
bucket_size: 70
per_server_api_rate_limit:
refill_rate_per_second: 15.0
bucket_size: 40
private_api:
listen:
network: tcp
address: 127.0.0.1:8155
authentication_secret_file: /some/file
max_connection_age: 1800s
listen_grace_period: "5s"
redis:
server:
address: "localhost:6380" # required
dial_timeout: "5s"
write_timeout: "3s"
key_prefix: gitlab-kas
password_file: /some/file
network: "tcp"
api:
listen:
network: tcp
address: 127.0.0.1:8153
authentication_secret_file: /some/file # required
# certificate_file: /server-cert.pem
# key_file: /server-key.pem
max_connection_age: "1800s"
listen_grace_period: "5s"
|
