chore: promote node GitOps source f672255

2026-06-23 00:43:06 +00:00
parent 5967748771
commit b9efe5e199
6 changed files with 209 additions and 90 deletions
@@ -1,51 +0,0 @@
-apiVersion: v1
-kind: List
-items:
-  - apiVersion: v1
-    kind: Service
-    metadata:
-      name: pk01-platform-postgres
-      namespace: hwlab-v03
-      labels:
-        app.kubernetes.io/name: pk01-platform-postgres
-        app.kubernetes.io/part-of: hwlab
-        hwlab.pikastech.local/component: platform-db-bridge
-        hwlab.pikastech.local/environment: v03
-        hwlab.pikastech.local/gitops-target: v03
-        hwlab.pikastech.local/profile: v03
-        hwlab.pikastech.local/source-commit: f672255aca87d4bcfbe3939fa247cff4685cc28e
-      annotations:
-        hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
-    spec:
-      type: ClusterIP
-      ports:
-        - name: postgres
-          port: 5432
-          targetPort: 5432
-          protocol: TCP
-  - apiVersion: discovery.k8s.io/v1
-    kind: EndpointSlice
-    metadata:
-      name: pk01-platform-postgres-host
-      namespace: hwlab-v03
-      labels:
-        app.kubernetes.io/name: pk01-platform-postgres
-        app.kubernetes.io/part-of: hwlab
-        hwlab.pikastech.local/component: platform-db-bridge
-        hwlab.pikastech.local/environment: v03
-        hwlab.pikastech.local/gitops-target: v03
-        hwlab.pikastech.local/profile: v03
-        hwlab.pikastech.local/source-commit: f672255aca87d4bcfbe3939fa247cff4685cc28e
-        kubernetes.io/service-name: pk01-platform-postgres
-      annotations:
-        hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
-    addressType: IPv4
-    ports:
-      - name: postgres
-        port: 5432
-        protocol: TCP
-    endpoints:
-      - addresses:
-          - 82.156.23.220
-        conditions:
-          ready: true
@@ -1,35 +1,27 @@
-apiVersion: v1
-kind: List
-items:
-  - apiVersion: v1
-    kind: ConfigMap
-    metadata:
-      name: hwlab-v03-health-contract
-      namespace: hwlab-v03
-      labels:
-        app.kubernetes.io/name: hwlab-v03-health-contract
-        hwlab.pikastech.local/profile: v03
-        hwlab.pikastech.local/gitops-target: v03
-        hwlab.pikastech.local/source-commit: f672255aca87d4bcfbe3939fa247cff4685cc28e
-        hwlab.pikastech.local/environment: v03
-      annotations:
-        hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
-    data:
-      endpoint: https://hwlab.pikapython.com
-      cloud-api: GET /health/live through https://hwlab.pikapython.com
-      cloud-api-db: DEV DB config gate requires HWLAB_CLOUD_DB_URL from Secret
-        hwlab-cloud-api-dev-db/database-url and HWLAB_CLOUD_DB_SSL_MODE=require.
-        Runtime readiness dials the redacted host parsed from the Secret URL and
-        reports endpointSource=secret-url-host. cloud-api-db is an optional
-        desired alias only until this repo owns Service plus Endpoint or
-        EndpointSlice manifests and rollout/apply contract; health reports env
-        presence, env injection, redacted connection attempt/result, and
-        liveConnected without exposing secret values
-      cloud-web: GET /health/live on https://hwlab.pikapython.com; consumes cloud-api only
-      agent: hwlab-cloud-api authorizes Code Agent sessions and dispatches execution
-        to AgentRun v0.1; no HWLAB-owned agent manager/worker service is
-        deployed
-      edge-proxy: hwlab-edge-proxy:6667 exposes /health/live and proxies DEV endpoint
-        traffic to hwlab-cloud-api
-      runtime-substitute-policy: Do not replace HWLAB runtime with UniDesk backend,
-        provider-gateway, or microservice proxy
+{
+  "apiVersion": "v1",
+  "kind": "ConfigMap",
+  "metadata": {
+    "name": "hwlab-v03-health-contract",
+    "namespace": "hwlab-v03",
+    "labels": {
+      "app.kubernetes.io/name": "hwlab-v03-health-contract",
+      "hwlab.pikastech.local/profile": "v03",
+      "hwlab.pikastech.local/gitops-target": "v03",
+      "hwlab.pikastech.local/source-commit": "f672255aca87d4bcfbe3939fa247cff4685cc28e",
+      "hwlab.pikastech.local/environment": "v03"
+    },
+    "annotations": {
+      "hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
+    }
+  },
+  "data": {
+    "endpoint": "https://hwlab.pikapython.com",
+    "cloud-api": "GET /health/live through https://hwlab.pikapython.com",
+    "cloud-api-db": "DEV DB config gate requires HWLAB_CLOUD_DB_URL from Secret hwlab-cloud-api-dev-db/database-url and HWLAB_CLOUD_DB_SSL_MODE=disable. Runtime readiness dials the redacted host parsed from the Secret URL and reports endpointSource=secret-url-host. cloud-api-db is an optional desired alias only until this repo owns Service plus Endpoint or EndpointSlice manifests and rollout/apply contract; health reports env presence, env injection, redacted connection attempt/result, and liveConnected without exposing secret values",
+    "cloud-web": "GET /health/live on https://hwlab.pikapython.com; consumes cloud-api only",
+    "agent": "hwlab-cloud-api authorizes Code Agent sessions and dispatches execution to AgentRun v0.1; no HWLAB-owned agent manager/worker service is deployed",
+    "edge-proxy": "hwlab-edge-proxy:6667 exposes /health/live and proxies DEV endpoint traffic to hwlab-cloud-api",
+    "runtime-substitute-policy": "Do not replace HWLAB runtime with UniDesk backend, provider-gateway, or microservice proxy"
+  }
+}
@@ -7,7 +7,7 @@ resources:
  - health-contract.yaml
  - workloads.yaml
  - deepseek-proxy.yaml
-  - external-postgres.yaml
+  - postgres.yaml
  - workbench-redis.yaml
  - openfga.yaml
  - node-frpc.yaml
@@ -290,7 +290,7 @@ items:
                      key: database-url
                      optional: true
                - name: HWLAB_CLOUD_DB_SSL_MODE
-                  value: require
+                  value: disable
                - name: HWLAB_CLOUD_DB_CONTRACT
                  value: v03-redacted-presence-only
                - name: HWLAB_CLOUD_RUNTIME_ADAPTER
@@ -557,7 +557,7 @@ items:
                      key: database-url
                      optional: true
                - name: HWLAB_CLOUD_DB_SSL_MODE
-                  value: require
+                  value: disable
                - name: HWLAB_CLOUD_DB_CONTRACT
                  value: v03-redacted-presence-only
                - name: HWLAB_CLOUD_RUNTIME_ADAPTER