chore: promote node GitOps source 367affe

This commit is contained in:
HWLAB node GitOps Bot
2026-06-27 13:06:04 +00:00
parent 0db8e53f75
commit 39306e30d0
13 changed files with 3854 additions and 0 deletions
@@ -0,0 +1,53 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-v03-hwpod-preinstalled-specs",
"namespace": "hwlab-v03",
"labels": {
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/config-kind": "hwpod-preinstalled-specs"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/source-ref": "config/hwlab-hwpod-preinstalls/constart-71freq-c.yaml#hwpodPreinstall",
"hwlab.pikastech.local/verification-issue": "pikasTech/HWLAB#2183"
}
},
"data": {
"constart-71freq-c.yaml": "apiVersion: hwlab.dev/v0alpha1\nkind: Hwpod\nmetadata:\n uid: CONSTART-71FREQ-C\n name: constart-71freq-c\nspec:\n targetDevice:\n board: ConStart 71-FREQ Controller\n mcu: STM32H723ZGTx\n flashBase: \"0x08000000\"\n workspace:\n path: \"F:\\\\Work\\\\ConStart\"\n toolchain: keil-mdk\n projectRoot: projects/71-00075-11\n keilProject: projects/71-00075-11/FirmWare/MDK-ARM/FREQ_Controller_FW.uvprojx\n keilTarget: FREQ_Controller_FW\n hexPath: projects/71-00075-11/FirmWare/MDK-ARM/FREQ_Controller_FW/FREQ_Controller_FW.hex\n mapPath: projects/71-00075-11/FirmWare/MDK-ARM/FREQ_Controller_FW/FREQ_Controller_FW.map\n keilCliPath: \"C:\\\\Users\\\\liang\\\\.agents\\\\skills\\\\keil\\\\keil-cli.py\"\n debugProbe:\n type: cmsis-dap\n adapter: keil\n probeUid: 3FD750C63E342E24\n probeName: MicroLink CMSIS-DAP\n programBackend: keil-headless\n autoBindUvoptx: true\n ioProbe:\n uart:\n id: uart/1\n port: COM4\n baudrate: 921600\n nodeBinding:\n nodeId: node-d601-f103-v2\n nodeType: pc-host",
"constart-71freq-c.meta.json": "{\n \"contractVersion\": \"hwpod-spec-registry-v1\",\n \"source\": {\n \"kind\": \"preinstalled-yaml-first-spec\",\n \"workspaceRoot\": \"F:\\\\Work\\\\ConStart\",\n \"projectRoot\": \"projects/71-00075-11\",\n \"verificationIssue\": \"pikasTech/HWLAB#2183\",\n \"verifiedAt\": \"2026-06-26\"\n }\n}"
}
},
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-v03-project-management-bootstrap",
"namespace": "hwlab-v03",
"labels": {
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/config-kind": "project-management-bootstrap-sources"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/source-ref": "config/hwlab-project-management/constart-71freq-mdtodo.yaml#projectManagement.sources[0]",
"hwlab.pikastech.local/verification-issue": "pikasTech/HWLAB#2183"
}
},
"data": {
"sources.json": "[\n {\n \"sourceId\": \"constart-71freq-mdtodo\",\n \"sourceKind\": \"hwpod-workspace\",\n \"displayName\": \"71-FREQ MDTODO\",\n \"projectId\": \"project_constart_71freq\",\n \"hwpodId\": \"constart-71freq-c\",\n \"nodeId\": \"node-d601-f103-v2\",\n \"workspaceRootRef\": \"F:\\\\Work\\\\ConStart\",\n \"mdtodoRootRef\": \"docs/MDTODO\",\n \"maxFiles\": 300,\n \"capabilities\": [\"probe\", \"list\", \"read\", \"write\", \"reindex\"]\n }\n]"
}
}
]
}
@@ -0,0 +1,327 @@
apiVersion: v1
kind: List
items:
- apiVersion: v1
kind: ConfigMap
metadata:
name: hwlab-deepseek-proxy-config
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/monitoring: disabled
data:
render-config.sh: >
#!/bin/sh
if [ -z "${DEEPSEEK_API_KEY:-}" ] && [ -z "${OPENCODE_API_KEY:-}" ];
then
echo "at least one of DEEPSEEK_API_KEY or OPENCODE_API_KEY is required" >&2
exit 1
fi
cat > /config/config.yml <<EOF
mode: "Transform"
log:
level: "info"
format: "text"
server:
addr: "0.0.0.0:4001"
persistence:
active_provider: db_sqlite
extensions:
db_sqlite:
enabled: true
config:
path: /data/moonbridge.db
wal: true
busy_timeout_ms: 5000
max_open_conns: 1
metrics:
enabled: true
config:
default_limit: 100
max_limit: 1000
deepseek_v4:
config:
reinforce_instructions: true
reinforce_prompt: "[System Reminder]: Please pay close attention to the system instructions, AGENTS.md files, and any other context provided. Follow them carefully and completely in your response.\n[User]:"
cache:
mode: "explicit"
ttl: "5m"
prompt_caching: true
automatic_prompt_cache: false
explicit_cache_breakpoints: true
allow_retention_downgrade: false
max_breakpoints: 4
min_cache_tokens: 1024
expected_reuse: 2
minimum_value_score: 2048
min_breakpoint_tokens: 1024
defaults:
model: "deepseek-chat"
max_tokens: 8192
trace:
enabled: false
models:
deepseek-chat:
context_window: 128000
max_output_tokens: 8192
display_name: "deepseek-chat"
description: "DeepSeek via Moon Bridge"
default_reasoning_level: null
supported_reasoning_levels: []
extensions:
deepseek_v4:
enabled: true
deepseek-v4-flash:
context_window: 1000000
max_output_tokens: 384000
display_name: "DeepSeek V4 Flash via OpenCode Zen Go"
description: "DeepSeek V4 Flash through OpenCode Zen Go Chat Completions via Moon Bridge"
default_reasoning_level: "xhigh"
supported_reasoning_levels:
- effort: "high"
description: "High reasoning effort"
- effort: "xhigh"
description: "Maximum reasoning effort"
supports_reasoning_summaries: true
default_reasoning_summary: "auto"
extensions:
deepseek_v4:
enabled: true
providers:
deepseek:
base_url: "https://api.deepseek.com/anthropic"
api_key: "${DEEPSEEK_API_KEY}"
version: "2023-06-01"
user_agent: "moonbridge/1.0"
offers:
- model: deepseek-chat
opencode:
base_url: "https://opencode.ai/zen/go/v1"
api_key: "${OPENCODE_API_KEY:-}"
protocol: "openai-chat"
user_agent: "moonbridge-dsflash-go/1.0"
web_search:
support: "disabled"
offers:
- model: deepseek-v4-flash
routes:
deepseek-chat:
model: deepseek-chat
provider: deepseek
deepseek-v4-flash:
model: deepseek-v4-flash
provider: opencode
EOF
- apiVersion: apps/v1
kind: Deployment
metadata:
name: hwlab-deepseek-proxy
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/moonbridge-source-ref: 1b99888d3dae889b79ee602cb875c7907f7e76f2
hwlab.pikastech.local/bridge-service-id: hwlab-cloud-api
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/bridge-source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/bridge-image-tag: env-bb377a5d3729
hwlab.pikastech.local/bridge-image: 127.0.0.1:5000/hwlab/hwlab-cloud-api-env@sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
hwlab.pikastech.local/bridge-runtime-mode: env-reuse-git-mirror-checkout
hwlab.pikastech.local/bridge-boot-repo: git@github.com:pikasTech/HWLAB.git
hwlab.pikastech.local/bridge-boot-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/bridge-boot-sh: deploy/runtime/boot/hwlab-deepseek-responses-bridge.sh
hwlab.pikastech.local/bridge-environment-digest: sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/name: hwlab-deepseek-proxy
template:
metadata:
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/monitoring: disabled
hwlab.pikastech.local/bridge-source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/bridge-runtime-mode: env-reuse-git-mirror-checkout
hwlab.pikastech.local/bridge-boot-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
annotations:
hwlab.pikastech.local/bridge-service-id: hwlab-cloud-api
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/bridge-source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/bridge-image-tag: env-bb377a5d3729
hwlab.pikastech.local/bridge-image: 127.0.0.1:5000/hwlab/hwlab-cloud-api-env@sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
hwlab.pikastech.local/bridge-runtime-mode: env-reuse-git-mirror-checkout
hwlab.pikastech.local/bridge-boot-repo: git@github.com:pikasTech/HWLAB.git
hwlab.pikastech.local/bridge-boot-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/bridge-boot-sh: deploy/runtime/boot/hwlab-deepseek-responses-bridge.sh
hwlab.pikastech.local/bridge-environment-digest: sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
spec:
initContainers:
- name: moonbridge-config
image: 127.0.0.1:5000/hwlab/hwlab-cloud-api-env@sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
imagePullPolicy: IfNotPresent
command:
- /bin/sh
- -eu
- /scripts/render-config.sh
env:
- name: DEEPSEEK_API_KEY
valueFrom:
secretKeyRef:
name: hwlab-v03-code-agent-provider
key: openai-api-key
optional: true
- name: OPENCODE_API_KEY
valueFrom:
secretKeyRef:
name: hwlab-v03-code-agent-provider
key: opencode-api-key
optional: true
volumeMounts:
- name: moonbridge-scripts
mountPath: /scripts
readOnly: true
- name: moonbridge-config
mountPath: /config
containers:
- name: responses-bridge
image: 127.0.0.1:5000/hwlab/hwlab-cloud-api-env@sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
imagePullPolicy: IfNotPresent
env:
- name: PORT
value: "4000"
- name: HWLAB_COMMIT_ID
value: 367affeabb6862e18c3cb74e2baefdbbefdd6217
- name: HWLAB_IMAGE
value: 127.0.0.1:5000/hwlab/hwlab-cloud-api-env@sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
- name: HWLAB_IMAGE_TAG
value: env-bb377a5d3729
- name: HWLAB_DEEPSEEK_BRIDGE_UPSTREAM
value: http://127.0.0.1:4001
- name: HWLAB_DEEPSEEK_BRIDGE_MODEL
value: deepseek-chat
- name: HWLAB_RUNTIME_MODE
value: env-reuse-git-mirror-checkout
- name: HWLAB_BOOT_REPO
value: git@github.com:pikasTech/HWLAB.git
- name: HWLAB_BOOT_COMMIT
value: 367affeabb6862e18c3cb74e2baefdbbefdd6217
- name: HWLAB_BOOT_REF
value: v0.3
- name: HWLAB_BOOT_SH
value: deploy/runtime/boot/hwlab-deepseek-responses-bridge.sh
- name: HWLAB_BOOT_READ_URL
value: http://git-mirror-http.devops-infra.svc.cluster.local:8080/pikasTech/HWLAB.git
- name: HWLAB_ENVIRONMENT_IMAGE
value: 127.0.0.1:5000/hwlab/hwlab-cloud-api-env:env-bb377a5d3729
- name: HWLAB_ENVIRONMENT_DIGEST
value: sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
- name: HWLAB_ENVIRONMENT_INPUT_HASH
value: bb377a5d37292accab4658f0b2711cfdf914801364787627d2aed6533acdf3da
- name: HWLAB_CODE_INPUT_HASH
value: a9a2df3c8fd943e1119c7f7225b3ffa4ab32f306b6ce86bc739103a197fbda10
- name: HWLAB_IMAGE_DIGEST
value: sha256:2d00fa536eee7fa81bcfbd7aa2370fbd1781afa4fc265433cfb8568e82ac21c3
ports:
- name: http
containerPort: 4000
readinessProbe:
httpGet:
path: /health/readiness
port: http
initialDelaySeconds: 10
periodSeconds: 10
livenessProbe:
httpGet:
path: /health/liveliness
port: http
initialDelaySeconds: 20
periodSeconds: 20
startupProbe:
httpGet:
path: /health/readiness
port: http
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 2
failureThreshold: 30
successThreshold: 1
- name: moonbridge
image: 127.0.0.1:5000/hwlab/moonbridge:1b99888d3dae
imagePullPolicy: IfNotPresent
args:
- -config
- /config/config.yml
ports:
- name: moonbridge-http
containerPort: 4001
readinessProbe:
httpGet:
path: /v1/models
port: moonbridge-http
initialDelaySeconds: 10
periodSeconds: 10
livenessProbe:
httpGet:
path: /v1/models
port: moonbridge-http
initialDelaySeconds: 20
periodSeconds: 20
volumeMounts:
- name: moonbridge-config
mountPath: /config
readOnly: true
- name: moonbridge-data
mountPath: /data
volumes:
- name: moonbridge-scripts
configMap:
name: hwlab-deepseek-proxy-config
- name: moonbridge-config
emptyDir: {}
- name: moonbridge-data
emptyDir: {}
- apiVersion: v1
kind: Service
metadata:
name: hwlab-deepseek-proxy
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/monitoring: disabled
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-deepseek-proxy
ports:
- name: http
port: 4000
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
@@ -0,0 +1,48 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "external-secrets.io/v1",
"kind": "ExternalSecret",
"metadata": {
"name": "hwlab-secret-plane-smoke",
"namespace": "hwlab-v03",
"labels": {
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"app.kubernetes.io/name": "hwlab-secret-plane-smoke",
"app.kubernetes.io/component": "external-secret",
"hwlab.pikastech.local/secret-plane": "pikasTech/HWLAB#2234"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/source-ref": "hwlab-secret-plane/poc",
"hwlab.pikastech.local/values-printed": "false"
}
},
"spec": {
"refreshInterval": "1m",
"secretStoreRef": {
"name": "hwlab-secret-plane-vault-cluster",
"kind": "ClusterSecretStore"
},
"target": {
"name": "hwlab-secret-plane-smoke",
"creationPolicy": "Owner"
},
"data": [
{
"secretKey": "password",
"remoteRef": {
"key": "hwlab-secret-plane/poc",
"property": "password"
}
}
]
}
}
]
}
@@ -0,0 +1,27 @@
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-v03-health-contract",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-v03-health-contract",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217",
"hwlab.pikastech.local/environment": "v03"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
}
},
"data": {
"endpoint": "https://hwlab.pikapython.com",
"cloud-api": "GET /health/live through https://hwlab.pikapython.com",
"cloud-api-db": "DEV DB config gate requires HWLAB_CLOUD_DB_URL from Secret hwlab-cloud-api-dev-db/database-url and HWLAB_CLOUD_DB_SSL_MODE=disable. Runtime readiness dials the redacted host parsed from the Secret URL and reports endpointSource=secret-url-host. cloud-api-db is an optional desired alias only until this repo owns Service plus Endpoint or EndpointSlice manifests and rollout/apply contract; health reports env presence, env injection, redacted connection attempt/result, and liveConnected without exposing secret values",
"cloud-web": "GET /health/live on https://hwlab.pikapython.com; consumes cloud-api only",
"agent": "hwlab-cloud-api authorizes Code Agent sessions and dispatches execution to AgentRun v0.1; no HWLAB-owned agent manager/worker service is deployed",
"edge-proxy": "hwlab-edge-proxy:6667 exposes /health/live and proxies DEV endpoint traffic to hwlab-cloud-api",
"runtime-substitute-policy": "Do not replace HWLAB runtime with UniDesk backend, provider-gateway, or microservice proxy"
}
}
@@ -0,0 +1,15 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: hwlab-v03
resources:
- namespace.yaml
- services.yaml
- health-contract.yaml
- configmaps.yaml
- external-secrets.yaml
- workloads.yaml
- deepseek-proxy.yaml
- postgres.yaml
- workbench-redis.yaml
- openfga.yaml
- node-frpc.yaml
@@ -0,0 +1,17 @@
{
"apiVersion": "v1",
"kind": "Namespace",
"metadata": {
"name": "hwlab-v03",
"labels": {
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217",
"hwlab.pikastech.local/environment": "v03"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
}
}
}
@@ -0,0 +1,89 @@
apiVersion: v1
kind: List
items:
- apiVersion: v1
kind: ConfigMap
metadata:
name: hwlab-v03-frpc-config
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-v03-frpc
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
data:
frpc.toml: |
serverAddr = "82.156.23.220"
serverPort = 22000
loginFailExit = true
auth.token = "{{ .Envs.HWLAB_FRP_TOKEN }}"
[[proxies]]
name = "hwlab-d518-v03-cloud-web"
type = "tcp"
localIP = "hwlab-cloud-web.hwlab-v03.svc.cluster.local"
localPort = 8080
remotePort = 22196
[[proxies]]
name = "hwlab-d518-v03-edge-proxy"
type = "tcp"
localIP = "hwlab-edge-proxy.hwlab-v03.svc.cluster.local"
localPort = 6667
remotePort = 22195
- apiVersion: apps/v1
kind: Deployment
metadata:
name: hwlab-v03-frpc
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-v03-frpc
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/name: hwlab-v03-frpc
template:
metadata:
labels:
app.kubernetes.io/name: hwlab-v03-frpc
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/config-sha256: ce6c82e15b128572
annotations:
hwlab.pikastech.local/config-sha256: ce6c82e15b12857248f574b624109aae09b0489b990a252c4955d57567dd2ac2
spec:
hostNetwork: true
dnsPolicy: ClusterFirstWithHostNet
containers:
- name: frpc
image: 127.0.0.1:5000/hwlab/frpc:v0.68.1
imagePullPolicy: IfNotPresent
args:
- -c
- /etc/frp/frpc.toml
volumeMounts:
- name: config
mountPath: /etc/frp
readOnly: true
env:
- name: HWLAB_FRP_TOKEN
valueFrom:
secretKeyRef:
name: hwlab-v03-frpc-secrets
key: token
volumes:
- name: config
configMap:
name: hwlab-v03-frpc-config
strategy:
type: Recreate
@@ -0,0 +1,278 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "batch/v1",
"kind": "Job",
"metadata": {
"name": "hwlab-openfga-migrate",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/hook": "Sync",
"argocd.argoproj.io/sync-wave": "1",
"argocd.argoproj.io/hook-delete-policy": "BeforeHookCreation,HookSucceeded"
}
},
"spec": {
"backoffLimit": 3,
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
}
},
"spec": {
"restartPolicy": "OnFailure",
"containers": [
{
"name": "openfga-migrate",
"image": "127.0.0.1:5000/hwlab/openfga:v1.17.0",
"imagePullPolicy": "IfNotPresent",
"args": [
"migrate"
],
"env": [
{
"name": "OPENFGA_DATASTORE_ENGINE",
"value": "postgres"
},
{
"name": "OPENFGA_DATASTORE_URI",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "datastore-uri"
}
}
},
{
"name": "OPENFGA_AUTHN_METHOD",
"value": "preshared"
},
{
"name": "OPENFGA_AUTHN_PRESHARED_KEYS",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "authn-preshared-key"
}
}
},
{
"name": "OPENFGA_PLAYGROUND_ENABLED",
"value": "false"
},
{
"name": "OPENFGA_HTTP_ADDR",
"value": "0.0.0.0:8080"
},
{
"name": "OPENFGA_GRPC_ADDR",
"value": "0.0.0.0:8081"
}
]
}
]
}
}
}
},
{
"apiVersion": "apps/v1",
"kind": "Deployment",
"metadata": {
"name": "hwlab-openfga",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"replicas": 1,
"selector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-openfga"
}
},
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
}
},
"spec": {
"containers": [
{
"name": "openfga",
"image": "127.0.0.1:5000/hwlab/openfga:v1.17.0",
"imagePullPolicy": "IfNotPresent",
"args": [
"run"
],
"env": [
{
"name": "OPENFGA_DATASTORE_ENGINE",
"value": "postgres"
},
{
"name": "OPENFGA_DATASTORE_URI",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "datastore-uri"
}
}
},
{
"name": "OPENFGA_AUTHN_METHOD",
"value": "preshared"
},
{
"name": "OPENFGA_AUTHN_PRESHARED_KEYS",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "authn-preshared-key"
}
}
},
{
"name": "OPENFGA_PLAYGROUND_ENABLED",
"value": "false"
},
{
"name": "OPENFGA_HTTP_ADDR",
"value": "0.0.0.0:8080"
},
{
"name": "OPENFGA_GRPC_ADDR",
"value": "0.0.0.0:8081"
}
],
"ports": [
{
"name": "http",
"containerPort": 8080
},
{
"name": "grpc",
"containerPort": 8081
}
],
"readinessProbe": {
"httpGet": {
"path": "/healthz",
"port": "http"
},
"initialDelaySeconds": 3,
"periodSeconds": 10
},
"livenessProbe": {
"httpGet": {
"path": "/healthz",
"port": "http"
},
"initialDelaySeconds": 15,
"periodSeconds": 20
},
"resources": {
"requests": {
"cpu": "50m",
"memory": "128Mi"
},
"limits": {
"cpu": "500m",
"memory": "512Mi"
}
}
}
]
}
}
}
},
{
"apiVersion": "v1",
"kind": "Service",
"metadata": {
"name": "hwlab-openfga",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"type": "ClusterIP",
"selector": {
"app.kubernetes.io/name": "hwlab-openfga"
},
"ports": [
{
"name": "http",
"port": 8080,
"targetPort": "http"
},
{
"name": "grpc",
"port": 8081,
"targetPort": "grpc"
}
]
}
}
]
}
File diff suppressed because one or more lines are too long
@@ -0,0 +1,208 @@
apiVersion: v1
kind: List
items:
- apiVersion: v1
kind: Service
metadata:
name: hwlab-cloud-api
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-cloud-api
hwlab.pikastech.local/service-id: hwlab-cloud-api
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-cloud-api
ports:
- name: http
port: 6667
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-project-management
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-project-management
hwlab.pikastech.local/service-id: hwlab-project-management
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-project-management
ports:
- name: http
port: 6672
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-workbench-runtime
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-workbench-runtime
hwlab.pikastech.local/service-id: hwlab-workbench-runtime
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-workbench-runtime
ports:
- name: http
port: 6671
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-user-billing
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-user-billing
hwlab.pikastech.local/service-id: hwlab-user-billing
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-user-billing
ports:
- name: http
port: 6670
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-cloud-web
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-cloud-web
hwlab.pikastech.local/service-id: hwlab-cloud-web
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-cloud-web
ports:
- name: http
port: 8080
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-gateway
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-gateway
hwlab.pikastech.local/service-id: hwlab-gateway
hwlab.pikastech.local/activation: manual
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-gateway
ports:
- name: http
port: 7001
targetPort: http
- apiVersion: v1
kind: Service
metadata:
name: hwlab-agent-skills
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-agent-skills
hwlab.pikastech.local/service-id: hwlab-agent-skills
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-agent-skills
ports:
- name: http
port: 7430
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-edge-proxy
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-edge-proxy
hwlab.pikastech.local/service-id: hwlab-edge-proxy
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: 367affeabb6862e18c3cb74e2baefdbbefdd6217
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-edge-proxy
ports:
- name: http
port: 6667
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
@@ -0,0 +1,243 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-workbench-redis-config",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"data": {
"redis.conf": "save \"\"\nappendonly no\nmaxmemory 192mb\nmaxmemory-policy allkeys-lru\n"
}
},
{
"apiVersion": "apps/v1",
"kind": "Deployment",
"metadata": {
"name": "hwlab-workbench-redis",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"replicas": 1,
"selector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-workbench-redis"
}
},
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"containers": [
{
"name": "redis",
"image": "127.0.0.1:5000/hwlab/redis:8.2.3-alpine",
"imagePullPolicy": "IfNotPresent",
"args": [
"redis-server",
"/usr/local/etc/redis/redis.conf"
],
"ports": [
{
"name": "redis",
"containerPort": 6379
}
],
"readinessProbe": {
"exec": {
"command": [
"redis-cli",
"-p",
"6379",
"ping"
]
},
"initialDelaySeconds": 3,
"periodSeconds": 10,
"timeoutSeconds": 2,
"failureThreshold": 3
},
"livenessProbe": {
"exec": {
"command": [
"redis-cli",
"-p",
"6379",
"ping"
]
},
"initialDelaySeconds": 15,
"periodSeconds": 20,
"timeoutSeconds": 3,
"failureThreshold": 3
},
"resources": {
"requests": {
"cpu": "50m",
"memory": "64Mi"
},
"limits": {
"cpu": "250m",
"memory": "256Mi"
}
},
"volumeMounts": [
{
"name": "config",
"mountPath": "/usr/local/etc/redis",
"readOnly": true
}
]
}
],
"volumes": [
{
"name": "config",
"configMap": {
"name": "hwlab-workbench-redis-config"
}
}
]
}
}
}
},
{
"apiVersion": "v1",
"kind": "Service",
"metadata": {
"name": "hwlab-workbench-redis",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"type": "ClusterIP",
"selector": {
"app.kubernetes.io/name": "hwlab-workbench-redis"
},
"ports": [
{
"name": "redis",
"port": 6379,
"targetPort": "redis",
"protocol": "TCP"
}
]
}
},
{
"apiVersion": "networking.k8s.io/v1",
"kind": "NetworkPolicy",
"metadata": {
"name": "hwlab-workbench-redis-ingress",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "367affeabb6862e18c3cb74e2baefdbbefdd6217"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"podSelector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-workbench-redis"
}
},
"policyTypes": [
"Ingress"
],
"ingress": [
{
"from": [
{
"podSelector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-workbench-runtime"
}
}
}
],
"ports": [
{
"protocol": "TCP",
"port": 6379
}
]
}
]
}
}
]
}
File diff suppressed because it is too large Load Diff