fix: 将 production release 归并回 v0.3 单线历史

2026-07-18 12:46:15 +02:00
parent 818e8dcbb1 502dadb98f
commit cbf38e2c5d
19 changed files with 1761 additions and 121 deletions
@@ -85,6 +85,9 @@ nodes:
    gitopsRoot: deploy/gitops/node
    sourceRepo: git@github.com:pikasTech/HWLAB.git
    publicHost: 74.48.78.17
+  NC01:
+    gitopsRoot: deploy/gitops/node/nc01
+    sourceRepo: git@github.com:pikasTech/HWLAB.git
 lanes:
  v02:
    name: v0.2
@@ -501,7 +504,7 @@ lanes:
            livenessFailure: false
            readMode: db-or-degraded
            fallbackStateSource: false
-    envReuseServices:
+    envReuseServices: &v03EnvReuseServices
      - hwlab-cloud-api
      - hwlab-workbench-runtime
      - hwlab-user-billing
@@ -516,7 +519,7 @@ lanes:
      - hwlab-gateway
      - hwlab-edge-proxy
      - hwlab-agent-skills
-    bootScripts:
+    bootScripts: &v03BootScripts
      hwlab-cloud-api: deploy/runtime/boot/hwlab-cloud-api.sh
      hwlab-workbench-runtime: deploy/runtime/boot/hwlab-workbench-runtime.sh
      hwlab-user-billing: deploy/runtime/boot/hwlab-user-billing.sh
@@ -531,7 +534,7 @@ lanes:
      hwlab-gateway: deploy/runtime/boot/hwlab-gateway.sh
      hwlab-edge-proxy: deploy/runtime/boot/hwlab-edge-proxy.sh
      hwlab-agent-skills: deploy/runtime/boot/hwlab-agent-skills.sh
-    serviceDeclarations:
+    serviceDeclarations: &v03ServiceDeclarations
      hwlab-cloud-api:
        runtimeKind: bun-command
        entrypoint: cmd/hwlab-cloud-api/main.ts
@@ -816,7 +819,7 @@ lanes:
        env:
          TZ: Asia/Shanghai
        observable: true
-    envRecipe:
+    envRecipe: &v03EnvRecipe
      osPackages:
        - ca-certificates
        - git
@@ -854,7 +857,7 @@ lanes:
          script: tools/hwpod-ctl.ts
        - command: hwpod-compiler
          script: tools/hwpod-compiler-cli.ts
-    bootConfig:
+    bootConfig: &v03BootConfig
      template: default
      overrides: {}
    configMaps:
@@ -1158,6 +1161,143 @@ lanes:
          WORKBENCH_ACTIVITY_RETRY_MAXIMUM_INTERVAL_MS: "30000"
          WORKBENCH_ACTIVITY_RETRY_MAXIMUM_ATTEMPTS: "5"
          OTEL_SERVICE_NAME: hwlab-workbench-worker
+  production:
+    name: Production
+    node: NC01
+    sourceBranch: release
+    gitopsBranch: release-gitops
+    gitReadUrl: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
+    gitWriteUrl: http://git-mirror-write.devops-infra.svc.cluster.local:8080/pikasTech/HWLAB.git
+    artifactCatalog: deploy/artifact-catalog.nc01-production.json
+    runtimePath: runtime-production
+    namespace: hwlab-production
+    imageTagMode: full
+    endpoint: https://lab.hwpod.com
+    publicEndpoints:
+      frontend: https://lab.hwpod.com
+      api: https://lab.hwpod.com
+    publicServices:
+      nodes:
+        NC01:
+          - name: hwlab-cloud-web-public
+            selector:
+              app.kubernetes.io/name: hwlab-cloud-web
+            port: 80
+            targetPort: 8080
+            nodePort: 32010
+    frp:
+      enabled: false
+    externalPostgres:
+      enabled: true
+      serviceName: nc01-host-postgres
+      endpointAddress: 10.42.0.1
+      port: 5432
+      migrationSecretName: hwlab-cloud-api-production-db
+      migrationSecretKey: migration-database-url
+    workbench:
+      rawHwlabEventWindow:
+        enabled: true
+        maxEntries: 200
+        maxRetainedBytes: 1048576
+    envReuseServices: *v03EnvReuseServices
+    bootScripts: *v03BootScripts
+    serviceDeclarations: *v03ServiceDeclarations
+    services:
+      - serviceId: hwlab-cloud-api
+        shutdownDrain:
+          enabled: true
+          path: /v1/internal/workbench/drain
+          sleepSeconds: 3
+          timeoutMs: 2500
+        env:
+          HWLAB_METRICS_NAMESPACE: hwlab-production
+          HWLAB_CLOUD_DB_URL: secretRef:hwlab-cloud-api-production-db/database-url
+          HWLAB_CLOUD_DB_SSL_MODE: require
+          HWLAB_CLOUD_DB_CONTRACT: production-redacted-presence-only
+          HWLAB_ACCESS_CONTROL_REQUIRED: "1"
+          HWLAB_SESSION_COOKIE_SAMESITE: None
+          HWLAB_BOOTSTRAP_ADMIN_ID: usr_production_admin
+          HWLAB_BOOTSTRAP_ADMIN_USERNAME: admin
+          HWLAB_BOOTSTRAP_ADMIN_DISPLAY_NAME: HWLAB Production Admin
+          HWLAB_BOOTSTRAP_ADMIN_PASSWORD_HASH: secretRef:hwlab-production-bootstrap-admin/password-hash
+          HWLAB_BOOTSTRAP_ADMIN_API_KEY_ID: key_master_server_admin
+          HWLAB_BOOTSTRAP_ADMIN_API_KEY: secretRef:hwlab-production-master-server-admin-api-key/api-key
+          HWLAB_USER_BILLING_URL: http://hwlab-user-billing.hwlab-production.svc.cluster.local:6670
+          HWLAB_WORKBENCH_RUNTIME_URL: http://hwlab-workbench-runtime.hwlab-production.svc.cluster.local:6671
+          HWLAB_PROJECT_MANAGEMENT_URL: http://hwlab-project-management.hwlab-production.svc.cluster.local:6672
+          HWLAB_TASKTREE_URL: http://hwlab-tasktree-api.hwlab-production.svc.cluster.local:6673
+          HWLAB_USER_BILLING_LOGIN_RETRY_ATTEMPTS: "2"
+          HWLAB_USER_BILLING_LOGIN_RETRY_DELAY_MS: "250"
+          HWLAB_USER_BILLING_CODE_AGENT_ENABLED: "1"
+          HWLAB_USER_BILLING_CODE_AGENT_ESTIMATED_CREDITS: "1"
+          HWLAB_USER_BILLING_CODE_AGENT_USED_CREDITS: "1"
+          OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: http://otel-collector.platform-infra.svc.cluster.local:4318/v1/traces
+          OTEL_SERVICE_NAME: hwlab-cloud-api
+      - serviceId: hwlab-cloud-web
+        env:
+          HWLAB_CLOUD_WEB_OPENCODE_UPSTREAM_URL: http://opencode-server.hwlab-production.svc.cluster.local:4096
+      - serviceId: hwlab-workbench-runtime
+        env:
+          HWLAB_WORKBENCH_RUNTIME_DB_URL: secretRef:hwlab-cloud-api-production-db/database-url
+          HWLAB_WORKBENCH_RUNTIME_PORT: "6671"
+          OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: http://otel-collector.platform-infra.svc.cluster.local:4318/v1/traces
+          OTEL_SERVICE_NAME: hwlab-workbench-runtime
+      - serviceId: hwlab-user-billing
+        env:
+          HWLAB_USER_BILLING_DB_URL: secretRef:hwlab-cloud-api-production-db/database-url
+          HWLAB_USER_BILLING_DB_POOL_MAX: "2"
+          HWLAB_USER_BILLING_MIGRATION_TIMEOUT_SECONDS: "180"
+          HWLAB_USER_BILLING_BOOTSTRAP_TIMEOUT_SECONDS: "60"
+          HWLAB_BOOTSTRAP_ADMIN_ID: usr_production_admin
+          HWLAB_BOOTSTRAP_ADMIN_USERNAME: admin
+          HWLAB_BOOTSTRAP_ADMIN_DISPLAY_NAME: HWLAB Production Admin
+          HWLAB_BOOTSTRAP_ADMIN_PASSWORD_HASH: secretRef:hwlab-production-bootstrap-admin/password-hash
+          HWLAB_USER_BILLING_STATE_AUTHORITY: nc01-postgres
+          HWLAB_USER_BILLING_EXTERNAL_DB_LABEL: nc01-external-postgres
+          HWLAB_USER_BILLING_PORT: "6670"
+          HWLAB_USER_BILLING_REGISTRATION_ENABLED: "1"
+          HWLAB_USER_BILLING_INITIAL_CREDITS: "0"
+          HWLAB_USER_BILLING_CREDIT_PER_1K_TOKENS: "1"
+          HWLAB_USER_BILLING_MIGRATE_ON_START: "1"
+          HWLAB_USER_BILLING_REDIS_URL: redis://hwlab-user-billing-redis.hwlab-production.svc.cluster.local:6379/0
+          OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: http://otel-collector.platform-infra.svc.cluster.local:4318/v1/traces
+          OTEL_SERVICE_NAME: hwlab-user-billing
+      - serviceId: hwlab-project-management
+        replicas: 1
+        env:
+          HWLAB_PROJECT_MANAGEMENT_DB_URL: secretRef:hwlab-cloud-api-production-db/database-url
+          HWLAB_PROJECT_MANAGEMENT_DB_CONNECT_TIMEOUT_MS: "5000"
+          HWLAB_PROJECT_MANAGEMENT_PORT: "6672"
+          HWLAB_PROJECT_MANAGEMENT_SOURCE_ROOT: /workspace/hwlab-boot/repo
+          HWLAB_PROJECT_MANAGEMENT_SOURCE_ID: hwlab-production-mdtodo
+          HWLAB_PROJECT_MANAGEMENT_SOURCE_NAME: HWLAB Production MDTODO
+          HWLAB_PROJECT_MANAGEMENT_PROJECT_ID: project_hwlab_production
+          HWLAB_PROJECT_MANAGEMENT_MDTODO_TASK_DEFAULT_LIMIT: "200"
+          HWLAB_PROJECT_MANAGEMENT_MDTODO_TASK_MAX_LIMIT: "500"
+          HWLAB_PROJECT_MANAGEMENT_HWPOD_NODE_OPS_URL: http://hwlab-cloud-api.hwlab-production.svc.cluster.local:6667/v1/hwpod-node-ops
+          HWLAB_PROJECT_MANAGEMENT_HWPOD_NODE_OPS_API_KEY: secretRef:hwlab-production-master-server-admin-api-key/api-key
+          OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: http://otel-collector.platform-infra.svc.cluster.local:4318/v1/traces
+          OTEL_SERVICE_NAME: hwlab-project-management
+      - serviceId: hwlab-tasktree-api
+        replicas: 1
+        env:
+          TASKTREE_DATABASE_URL: secretRef:hwlab-tasktree-db/database-url
+          TASKTREE_TEMPORAL_ADDRESS: temporal-frontend.temporal.svc.cluster.local:7233
+          TASKTREE_TEMPORAL_NAMESPACE: unidesk
+          TASKTREE_TEMPORAL_TASK_QUEUE: hwlab-production-tasktree
+          TASKTREE_API_PORT: "6673"
+          OTEL_SERVICE_NAME: hwlab-tasktree-api
+      - serviceId: hwlab-tasktree-worker
+        replicas: 1
+        env:
+          TASKTREE_DATABASE_URL: secretRef:hwlab-tasktree-db/database-url
+          TASKTREE_TEMPORAL_ADDRESS: temporal-frontend.temporal.svc.cluster.local:7233
+          TASKTREE_TEMPORAL_NAMESPACE: unidesk
+          TASKTREE_TEMPORAL_TASK_QUEUE: hwlab-production-tasktree
+          TASKTREE_WORKER_HEALTH_PORT: "6674"
+          OTEL_SERVICE_NAME: hwlab-tasktree-worker
+    envRecipe: *v03EnvRecipe
+    bootConfig: *v03BootConfig
 services:
  - serviceId: hwlab-harnessrl-api
    namespace: hwlab-dev