Files
Riccardo Schirone 3fd777063b Test and improve AKS deployment (#336)
* Test configuration for Azure deployment
* ci: re-enable docker build/push
* ci: docker push labeled PRs
* Use `make deploy` for both local and azure deployments
* doc: update AKS_DEPLOYMENT doc
* add confirmation in Makefile
* Make resource group location configurable
2025-09-08 16:57:08 +02:00

284 lines
4.9 KiB
Plaintext

global:
environment: "aks"
orchestratorImage:
tag: "latest"
fuzzerImage:
tag: "latest"
seedGenImage:
tag: "latest"
patcherImage:
tag: "latest"
programModelImage:
tag: "latest"
langfuse:
enabled: ${LANGFUSE_ENABLED}
host: "${LANGFUSE_HOST}"
publicKey: "${LANGFUSE_PUBLIC_KEY}"
secretKey: "${LANGFUSE_SECRET_KEY}"
signoz:
deployed: ${DEPLOY_SIGNOZ}
crs:
api_key_id: ${CRS_KEY_ID}
api_key_token: ${CRS_KEY_TOKEN}
api_key_token_hash: "${CRS_KEY_TOKEN_HASH}"
api_url: "${CRS_URL}"
hostname: "${CRS_API_HOSTNAME}"
competition_api_key_id: ${COMPETITION_API_KEY_ID}
competition_api_key_token: ${COMPETITION_API_KEY_TOKEN}
competition_api_url: "ui"
otel:
endpoint: "${OTEL_ENDPOINT}"
token: "${OTEL_TOKEN}"
protocol: "${OTEL_PROTOCOL}"
queueTimeouts:
buildTaskTimeoutMs: 1200000
buildOutputTaskTimeoutMs: 120000
downloadTaskTimeoutMs: 720000
readyTaskTimeoutMs: 120000
deleteTaskTimeoutMs: 120000
crashTaskTimeoutMs: 900000
patchTaskTimeoutMs: 120000
confirmedVulnerabilitiesTaskTimeoutMs: 1800000
indexTaskTimeoutMs: 800000
indexOutputTaskTimeoutMs: 120000
tracedVulnerabilitiesTaskTimeoutMs: 120000
volumes:
tasks_storage:
storageClass: "azurefile-csi-nfs-crs"
size: "10Gi"
crs_scratch:
storageClass: "azurefile-csi-nfs-crs"
size: "100Gi"
# Dind daemon chart configuration
dind-daemon:
enabled: true
resources:
limits:
cpu: 16000m
memory: 32Gi
requests:
cpu: 1000m
memory: 6Gi
redis:
master:
persistence:
enabled: true
size: 10Gi
resources:
limits:
cpu: 8000m
memory: 32Gi
requests:
cpu: 1000m
memory: 12Gi
litellm:
masterKey: "${LITELLM_MASTER_KEY}"
maxBudget: "${LITELLM_MAX_BUDGET}"
azure:
apiBase: "${AZURE_API_BASE}"
apiKey: "${AZURE_API_KEY}"
openai:
apiKey: "${OPENAI_API_KEY}"
anthropic:
apiKey: "${ANTHROPIC_API_KEY}"
gemini:
apiKey: "${GEMINI_API_KEY}"
litellm-helm:
resources:
limits:
cpu: 4000m
memory: 8Gi
requests:
cpu: 1000m
memory: 1Gi
postgresql:
primary:
resources:
limits:
cpu: 4000m
memory: 8Gi
requests:
cpu: 500m
memory: 1Gi
ui:
enabled: true
competition-api:
enabled: false
image-preloader:
baseImages:
- gcr.io/oss-fuzz/base-runner
- gcr.io/oss-fuzz/base-builder
- gcr.io/oss-fuzz/base-image
- gcr.io/oss-fuzz/base-clang
- gcr.io/oss-fuzz/base-runner-debug
- gcr.io/oss-fuzz-base/base-builder-jvm
- gcr.io/oss-fuzz-base/base-builder-ruby
- gcr.io/oss-fuzz-base/base-builder-go
- gcr.io/oss-fuzz-base/base-builder-python
- gcr.io/oss-fuzz-base/base-builder-rust
versions:
- latest
signoz:
enabled: ${DEPLOY_SIGNOZ}
registry-cache:
enabled: true
persistence:
enabled: true
size: 50Gi
resources:
limits:
cpu: 4000m
memory: 8Gi
requests:
cpu: 500m
memory: 2Gi
task-server:
enabled: true
resources:
limits:
cpu: 1000m
memory: 1Gi
requests:
cpu: 250m
memory: 1Gi
task-downloader:
enabled: true
replicaCount: 1
resources:
limits:
cpu: 4000m
memory: 8Gi
requests:
cpu: 250m
memory: 512Mi
scheduler:
enabled: true
patchRequestsPerVulnerability: 1
resources:
limits:
cpu: 4000m
memory: 3Gi
requests:
cpu: 250m
memory: 1Gi
program-model:
enabled: true
replicaCount: 1
resources:
limits:
cpu: 4000m
memory: 4Gi
requests:
cpu: 250m
memory: 512Mi
build-bot:
enabled: true
replicaCount: 3
resources:
limits:
cpu: 4000m
memory: 4Gi
requests:
cpu: 250m
memory: 512Mi
fuzzer-bot:
enabled: true
replicaCount: 4
resources:
limits:
cpu: 16000m
memory: 32Gi
requests:
cpu: 500m
memory: 512Mi
merger-bot:
enabled: true
resources:
limits:
cpu: 8000m
memory: 16Gi
requests:
cpu: 250m
memory: 1Gi
coverage-bot:
enabled: true
replicaCount: 2
resources:
limits:
cpu: 4000m
memory: 32Gi
requests:
cpu: 250m
memory: 1Gi
tracer-bot:
enabled: true
replicaCount: 1
resources:
limits:
cpu: 4000m
memory: 4Gi
requests:
cpu: 200m
memory: 1Gi
pov-reproducer:
enabled: true
replicaCount: 2
resources:
limits:
cpu: 4000m
memory: 2Gi
requests:
cpu: 200m
memory: 1Gi
seed-gen:
enabled: true
replicaCount: 5
resources:
limits:
cpu: 2000m
memory: 4Gi
requests:
cpu: 200m
memory: 1Gi
patcher:
enabled: true
replicaCount: 2
maxPatchRetries: 10
maxContextRetrieverRecursionLimit: 100
maxMinutesRunPOVs: 30
resources:
limits:
cpu: 2000m
memory: 3Gi
requests:
cpu: 200m
memory: 1Gi