mirror of
https://github.com/trailofbits/buttercup
synced 2026-06-21 14:11:39 +00:00
3fd777063b
* Test configuration for Azure deployment * ci: re-enable docker build/push * ci: docker push labeled PRs * Use `make deploy` for both local and azure deployments * doc: update AKS_DEPLOYMENT doc * add confirmation in Makefile * Make resource group location configurable
284 lines
4.9 KiB
Plaintext
284 lines
4.9 KiB
Plaintext
global:
|
|
environment: "aks"
|
|
orchestratorImage:
|
|
tag: "latest"
|
|
fuzzerImage:
|
|
tag: "latest"
|
|
seedGenImage:
|
|
tag: "latest"
|
|
patcherImage:
|
|
tag: "latest"
|
|
programModelImage:
|
|
tag: "latest"
|
|
|
|
langfuse:
|
|
enabled: ${LANGFUSE_ENABLED}
|
|
host: "${LANGFUSE_HOST}"
|
|
publicKey: "${LANGFUSE_PUBLIC_KEY}"
|
|
secretKey: "${LANGFUSE_SECRET_KEY}"
|
|
|
|
signoz:
|
|
deployed: ${DEPLOY_SIGNOZ}
|
|
|
|
crs:
|
|
api_key_id: ${CRS_KEY_ID}
|
|
api_key_token: ${CRS_KEY_TOKEN}
|
|
api_key_token_hash: "${CRS_KEY_TOKEN_HASH}"
|
|
api_url: "${CRS_URL}"
|
|
hostname: "${CRS_API_HOSTNAME}"
|
|
competition_api_key_id: ${COMPETITION_API_KEY_ID}
|
|
competition_api_key_token: ${COMPETITION_API_KEY_TOKEN}
|
|
competition_api_url: "ui"
|
|
|
|
otel:
|
|
endpoint: "${OTEL_ENDPOINT}"
|
|
token: "${OTEL_TOKEN}"
|
|
protocol: "${OTEL_PROTOCOL}"
|
|
|
|
queueTimeouts:
|
|
buildTaskTimeoutMs: 1200000
|
|
buildOutputTaskTimeoutMs: 120000
|
|
downloadTaskTimeoutMs: 720000
|
|
readyTaskTimeoutMs: 120000
|
|
deleteTaskTimeoutMs: 120000
|
|
crashTaskTimeoutMs: 900000
|
|
patchTaskTimeoutMs: 120000
|
|
confirmedVulnerabilitiesTaskTimeoutMs: 1800000
|
|
indexTaskTimeoutMs: 800000
|
|
indexOutputTaskTimeoutMs: 120000
|
|
tracedVulnerabilitiesTaskTimeoutMs: 120000
|
|
|
|
volumes:
|
|
tasks_storage:
|
|
storageClass: "azurefile-csi-nfs-crs"
|
|
size: "10Gi"
|
|
crs_scratch:
|
|
storageClass: "azurefile-csi-nfs-crs"
|
|
size: "100Gi"
|
|
|
|
# Dind daemon chart configuration
|
|
dind-daemon:
|
|
enabled: true
|
|
resources:
|
|
limits:
|
|
cpu: 16000m
|
|
memory: 32Gi
|
|
requests:
|
|
cpu: 1000m
|
|
memory: 6Gi
|
|
|
|
redis:
|
|
master:
|
|
persistence:
|
|
enabled: true
|
|
size: 10Gi
|
|
resources:
|
|
limits:
|
|
cpu: 8000m
|
|
memory: 32Gi
|
|
requests:
|
|
cpu: 1000m
|
|
memory: 12Gi
|
|
|
|
litellm:
|
|
masterKey: "${LITELLM_MASTER_KEY}"
|
|
maxBudget: "${LITELLM_MAX_BUDGET}"
|
|
azure:
|
|
apiBase: "${AZURE_API_BASE}"
|
|
apiKey: "${AZURE_API_KEY}"
|
|
openai:
|
|
apiKey: "${OPENAI_API_KEY}"
|
|
anthropic:
|
|
apiKey: "${ANTHROPIC_API_KEY}"
|
|
gemini:
|
|
apiKey: "${GEMINI_API_KEY}"
|
|
|
|
litellm-helm:
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 8Gi
|
|
requests:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
|
|
postgresql:
|
|
primary:
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 8Gi
|
|
requests:
|
|
cpu: 500m
|
|
memory: 1Gi
|
|
|
|
ui:
|
|
enabled: true
|
|
|
|
competition-api:
|
|
enabled: false
|
|
|
|
image-preloader:
|
|
baseImages:
|
|
- gcr.io/oss-fuzz/base-runner
|
|
- gcr.io/oss-fuzz/base-builder
|
|
- gcr.io/oss-fuzz/base-image
|
|
- gcr.io/oss-fuzz/base-clang
|
|
- gcr.io/oss-fuzz/base-runner-debug
|
|
- gcr.io/oss-fuzz-base/base-builder-jvm
|
|
- gcr.io/oss-fuzz-base/base-builder-ruby
|
|
- gcr.io/oss-fuzz-base/base-builder-go
|
|
- gcr.io/oss-fuzz-base/base-builder-python
|
|
- gcr.io/oss-fuzz-base/base-builder-rust
|
|
versions:
|
|
- latest
|
|
|
|
signoz:
|
|
enabled: ${DEPLOY_SIGNOZ}
|
|
|
|
registry-cache:
|
|
enabled: true
|
|
persistence:
|
|
enabled: true
|
|
size: 50Gi
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 8Gi
|
|
requests:
|
|
cpu: 500m
|
|
memory: 2Gi
|
|
|
|
task-server:
|
|
enabled: true
|
|
resources:
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 1Gi
|
|
|
|
task-downloader:
|
|
enabled: true
|
|
replicaCount: 1
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 8Gi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
|
|
scheduler:
|
|
enabled: true
|
|
patchRequestsPerVulnerability: 1
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 3Gi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 1Gi
|
|
|
|
program-model:
|
|
enabled: true
|
|
replicaCount: 1
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 4Gi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
|
|
build-bot:
|
|
enabled: true
|
|
replicaCount: 3
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 4Gi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 512Mi
|
|
|
|
fuzzer-bot:
|
|
enabled: true
|
|
replicaCount: 4
|
|
resources:
|
|
limits:
|
|
cpu: 16000m
|
|
memory: 32Gi
|
|
requests:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
|
|
merger-bot:
|
|
enabled: true
|
|
resources:
|
|
limits:
|
|
cpu: 8000m
|
|
memory: 16Gi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 1Gi
|
|
|
|
coverage-bot:
|
|
enabled: true
|
|
replicaCount: 2
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 32Gi
|
|
requests:
|
|
cpu: 250m
|
|
memory: 1Gi
|
|
|
|
tracer-bot:
|
|
enabled: true
|
|
replicaCount: 1
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 4Gi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 1Gi
|
|
|
|
pov-reproducer:
|
|
enabled: true
|
|
replicaCount: 2
|
|
resources:
|
|
limits:
|
|
cpu: 4000m
|
|
memory: 2Gi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 1Gi
|
|
|
|
seed-gen:
|
|
enabled: true
|
|
replicaCount: 5
|
|
resources:
|
|
limits:
|
|
cpu: 2000m
|
|
memory: 4Gi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 1Gi
|
|
|
|
patcher:
|
|
enabled: true
|
|
replicaCount: 2
|
|
maxPatchRetries: 10
|
|
maxContextRetrieverRecursionLimit: 100
|
|
maxMinutesRunPOVs: 30
|
|
resources:
|
|
limits:
|
|
cpu: 2000m
|
|
memory: 3Gi
|
|
requests:
|
|
cpu: 200m
|
|
memory: 1Gi
|