chore: promote node GitOps source ccc9503

This commit is contained in:
HWLAB node GitOps Bot
2026-07-08 01:40:00 +00:00
parent 4142d87c4d
commit d01d8662f5
13 changed files with 4402 additions and 0 deletions
@@ -0,0 +1,53 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-v03-hwpod-preinstalled-specs",
"namespace": "hwlab-v03",
"labels": {
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/config-kind": "hwpod-preinstalled-specs"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/source-ref": "config/hwlab-hwpod-preinstalls/constart-71freq-c.yaml#hwpodPreinstall",
"hwlab.pikastech.local/verification-issue": "pikasTech/HWLAB#2183"
}
},
"data": {
"constart-71freq-c.yaml": "apiVersion: hwlab.dev/v0alpha1\nkind: Hwpod\nmetadata:\n uid: CONSTART-71FREQ-C\n name: constart-71freq-c\nspec:\n targetDevice:\n board: ConStart 71-FREQ Controller\n mcu: STM32H723ZGTx\n flashBase: \"0x08000000\"\n workspace:\n path: \"F:\\\\Work\\\\ConStart\"\n toolchain: keil-mdk\n projectRoot: projects/71-00075-11\n keilProject: projects/71-00075-11/FirmWare/MDK-ARM/FREQ_Controller_FW.uvprojx\n keilTarget: FREQ_Controller_FW\n hexPath: projects/71-00075-11/FirmWare/MDK-ARM/FREQ_Controller_FW/FREQ_Controller_FW.hex\n mapPath: projects/71-00075-11/FirmWare/MDK-ARM/FREQ_Controller_FW/FREQ_Controller_FW.map\n keilCliPath: \"C:\\\\Users\\\\liang\\\\.agents\\\\skills\\\\keil\\\\keil-cli.py\"\n debugProbe:\n type: cmsis-dap\n adapter: keil\n probeUid: 3FD750C63E342E24\n probeName: MicroLink CMSIS-DAP\n programBackend: keil-headless\n autoBindUvoptx: true\n ioProbe:\n uart:\n id: uart/1\n port: COM4\n baudrate: 921600\n nodeBinding:\n nodeId: node-d601-f103-v2\n nodeType: pc-host",
"constart-71freq-c.meta.json": "{\n \"contractVersion\": \"hwpod-spec-registry-v1\",\n \"source\": {\n \"kind\": \"preinstalled-yaml-first-spec\",\n \"workspaceRoot\": \"F:\\\\Work\\\\ConStart\",\n \"projectRoot\": \"projects/71-00075-11\",\n \"verificationIssue\": \"pikasTech/HWLAB#2183\",\n \"verifiedAt\": \"2026-06-26\"\n }\n}"
}
},
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-v03-project-management-bootstrap",
"namespace": "hwlab-v03",
"labels": {
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/config-kind": "project-management-bootstrap-sources"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/source-ref": "config/hwlab-project-management/constart-71freq-mdtodo.yaml#projectManagement.sources[0]",
"hwlab.pikastech.local/verification-issue": "pikasTech/HWLAB#2183"
}
},
"data": {
"sources.json": "[\n {\n \"sourceId\": \"constart-71freq-mdtodo\",\n \"sourceKind\": \"hwpod-workspace\",\n \"displayName\": \"71-FREQ MDTODO\",\n \"projectId\": \"project_constart_71freq\",\n \"hwpodId\": \"constart-71freq-c\",\n \"nodeId\": \"node-d601-f103-v2\",\n \"workspaceRootRef\": \"F:\\\\Work\\\\ConStart\",\n \"mdtodoRootRef\": \"docs/MDTODO\",\n \"maxFiles\": 300,\n \"capabilities\": [\"probe\", \"list\", \"read\", \"write\", \"reindex\"]\n }\n]"
}
}
]
}
@@ -0,0 +1,327 @@
apiVersion: v1
kind: List
items:
- apiVersion: v1
kind: ConfigMap
metadata:
name: hwlab-deepseek-proxy-config
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/monitoring: disabled
data:
render-config.sh: >
#!/bin/sh
if [ -z "${DEEPSEEK_API_KEY:-}" ] && [ -z "${OPENCODE_API_KEY:-}" ];
then
echo "at least one of DEEPSEEK_API_KEY or OPENCODE_API_KEY is required" >&2
exit 1
fi
cat > /config/config.yml <<EOF
mode: "Transform"
log:
level: "info"
format: "text"
server:
addr: "0.0.0.0:4001"
persistence:
active_provider: db_sqlite
extensions:
db_sqlite:
enabled: true
config:
path: /data/moonbridge.db
wal: true
busy_timeout_ms: 5000
max_open_conns: 1
metrics:
enabled: true
config:
default_limit: 100
max_limit: 1000
deepseek_v4:
config:
reinforce_instructions: true
reinforce_prompt: "[System Reminder]: Please pay close attention to the system instructions, AGENTS.md files, and any other context provided. Follow them carefully and completely in your response.\n[User]:"
cache:
mode: "explicit"
ttl: "5m"
prompt_caching: true
automatic_prompt_cache: false
explicit_cache_breakpoints: true
allow_retention_downgrade: false
max_breakpoints: 4
min_cache_tokens: 1024
expected_reuse: 2
minimum_value_score: 2048
min_breakpoint_tokens: 1024
defaults:
model: "deepseek-chat"
max_tokens: 8192
trace:
enabled: false
models:
deepseek-chat:
context_window: 128000
max_output_tokens: 8192
display_name: "deepseek-chat"
description: "DeepSeek via Moon Bridge"
default_reasoning_level: null
supported_reasoning_levels: []
extensions:
deepseek_v4:
enabled: true
deepseek-v4-flash:
context_window: 1000000
max_output_tokens: 384000
display_name: "DeepSeek V4 Flash via OpenCode Zen Go"
description: "DeepSeek V4 Flash through OpenCode Zen Go Chat Completions via Moon Bridge"
default_reasoning_level: "xhigh"
supported_reasoning_levels:
- effort: "high"
description: "High reasoning effort"
- effort: "xhigh"
description: "Maximum reasoning effort"
supports_reasoning_summaries: true
default_reasoning_summary: "auto"
extensions:
deepseek_v4:
enabled: true
providers:
deepseek:
base_url: "https://api.deepseek.com/anthropic"
api_key: "${DEEPSEEK_API_KEY}"
version: "2023-06-01"
user_agent: "moonbridge/1.0"
offers:
- model: deepseek-chat
opencode:
base_url: "https://opencode.ai/zen/go/v1"
api_key: "${OPENCODE_API_KEY:-}"
protocol: "openai-chat"
user_agent: "moonbridge-dsflash-go/1.0"
web_search:
support: "disabled"
offers:
- model: deepseek-v4-flash
routes:
deepseek-chat:
model: deepseek-chat
provider: deepseek
deepseek-v4-flash:
model: deepseek-v4-flash
provider: opencode
EOF
- apiVersion: apps/v1
kind: Deployment
metadata:
name: hwlab-deepseek-proxy
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/moonbridge-source-ref: 1b99888d3dae889b79ee602cb875c7907f7e76f2
hwlab.pikastech.local/bridge-service-id: hwlab-cloud-api
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/bridge-source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/bridge-image-tag: env-5294e425c43f
hwlab.pikastech.local/bridge-image: 127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
hwlab.pikastech.local/bridge-runtime-mode: env-reuse-git-mirror-checkout
hwlab.pikastech.local/bridge-boot-repo: git@github.com:pikasTech/HWLAB.git
hwlab.pikastech.local/bridge-boot-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/bridge-boot-sh: deploy/runtime/boot/hwlab-deepseek-responses-bridge.sh
hwlab.pikastech.local/bridge-environment-digest: sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/name: hwlab-deepseek-proxy
template:
metadata:
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/monitoring: disabled
hwlab.pikastech.local/bridge-source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/bridge-runtime-mode: env-reuse-git-mirror-checkout
hwlab.pikastech.local/bridge-boot-commit: ccc9503e9dac8f800c557198558d32367d598126
annotations:
hwlab.pikastech.local/bridge-service-id: hwlab-cloud-api
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/bridge-source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/bridge-image-tag: env-5294e425c43f
hwlab.pikastech.local/bridge-image: 127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
hwlab.pikastech.local/bridge-runtime-mode: env-reuse-git-mirror-checkout
hwlab.pikastech.local/bridge-boot-repo: git@github.com:pikasTech/HWLAB.git
hwlab.pikastech.local/bridge-boot-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/bridge-boot-sh: deploy/runtime/boot/hwlab-deepseek-responses-bridge.sh
hwlab.pikastech.local/bridge-environment-digest: sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
spec:
initContainers:
- name: moonbridge-config
image: 127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
imagePullPolicy: IfNotPresent
command:
- /bin/sh
- -eu
- /scripts/render-config.sh
env:
- name: DEEPSEEK_API_KEY
valueFrom:
secretKeyRef:
name: hwlab-v03-code-agent-provider
key: openai-api-key
optional: true
- name: OPENCODE_API_KEY
valueFrom:
secretKeyRef:
name: hwlab-v03-code-agent-provider
key: opencode-api-key
optional: true
volumeMounts:
- name: moonbridge-scripts
mountPath: /scripts
readOnly: true
- name: moonbridge-config
mountPath: /config
containers:
- name: responses-bridge
image: 127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
imagePullPolicy: IfNotPresent
env:
- name: PORT
value: "4000"
- name: HWLAB_COMMIT_ID
value: ccc9503e9dac8f800c557198558d32367d598126
- name: HWLAB_IMAGE
value: 127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
- name: HWLAB_IMAGE_TAG
value: env-5294e425c43f
- name: HWLAB_DEEPSEEK_BRIDGE_UPSTREAM
value: http://127.0.0.1:4001
- name: HWLAB_DEEPSEEK_BRIDGE_MODEL
value: deepseek-chat
- name: HWLAB_RUNTIME_MODE
value: env-reuse-git-mirror-checkout
- name: HWLAB_BOOT_REPO
value: git@github.com:pikasTech/HWLAB.git
- name: HWLAB_BOOT_COMMIT
value: ccc9503e9dac8f800c557198558d32367d598126
- name: HWLAB_BOOT_REF
value: v0.3
- name: HWLAB_BOOT_SH
value: deploy/runtime/boot/hwlab-deepseek-responses-bridge.sh
- name: HWLAB_BOOT_READ_URL
value: http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git
- name: HWLAB_ENVIRONMENT_IMAGE
value: 127.0.0.1:5000/hwlab/hwlab-ts-runtime-env:env-5294e425c43f
- name: HWLAB_ENVIRONMENT_DIGEST
value: sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
- name: HWLAB_ENVIRONMENT_INPUT_HASH
value: 5294e425c43f3d7905d4bdcf469944168afae18305dc487a9b913cc4a858fa88
- name: HWLAB_CODE_INPUT_HASH
value: c0574f80f2ea40565176f3ab778a749eb2cba890d3c798a2dc319693dae4b982
- name: HWLAB_IMAGE_DIGEST
value: sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967
ports:
- name: http
containerPort: 4000
readinessProbe:
httpGet:
path: /health/readiness
port: http
initialDelaySeconds: 10
periodSeconds: 10
livenessProbe:
httpGet:
path: /health/liveliness
port: http
initialDelaySeconds: 20
periodSeconds: 20
startupProbe:
httpGet:
path: /health/readiness
port: http
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 2
failureThreshold: 30
successThreshold: 1
- name: moonbridge
image: 127.0.0.1:5000/hwlab/moonbridge:1b99888d3dae
imagePullPolicy: IfNotPresent
args:
- -config
- /config/config.yml
ports:
- name: moonbridge-http
containerPort: 4001
readinessProbe:
httpGet:
path: /v1/models
port: moonbridge-http
initialDelaySeconds: 10
periodSeconds: 10
livenessProbe:
httpGet:
path: /v1/models
port: moonbridge-http
initialDelaySeconds: 20
periodSeconds: 20
volumeMounts:
- name: moonbridge-config
mountPath: /config
readOnly: true
- name: moonbridge-data
mountPath: /data
volumes:
- name: moonbridge-scripts
configMap:
name: hwlab-deepseek-proxy-config
- name: moonbridge-config
emptyDir: {}
- name: moonbridge-data
emptyDir: {}
- apiVersion: v1
kind: Service
metadata:
name: hwlab-deepseek-proxy
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-deepseek-proxy
app.kubernetes.io/part-of: hwlab
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/service-id: hwlab-deepseek-proxy
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/monitoring: disabled
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-deepseek-proxy
ports:
- name: http
port: 4000
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
@@ -0,0 +1,35 @@
apiVersion: v1
kind: List
items:
- apiVersion: v1
kind: ConfigMap
metadata:
name: hwlab-v03-health-contract
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-v03-health-contract
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
data:
endpoint: http://152.53.229.148:20666
cloud-api: GET /health/live through http://152.53.229.148:20667
cloud-api-db: DEV DB config gate requires HWLAB_CLOUD_DB_URL from Secret
hwlab-cloud-api-dev-db/database-url and HWLAB_CLOUD_DB_SSL_MODE=disable.
Runtime readiness dials the redacted host parsed from the Secret URL and
reports endpointSource=secret-url-host. cloud-api-db is an optional
desired alias only until this repo owns Service plus Endpoint or
EndpointSlice manifests and rollout/apply contract; health reports env
presence, env injection, redacted connection attempt/result, and
liveConnected without exposing secret values
cloud-web: GET /health/live on http://152.53.229.148:20666; consumes cloud-api only
agent: hwlab-cloud-api authorizes Code Agent sessions and dispatches execution
to AgentRun v0.1; no HWLAB-owned agent manager/worker service is
deployed
edge-proxy: hwlab-edge-proxy:6667 exposes /health/live and proxies DEV endpoint
traffic to hwlab-cloud-api
runtime-substitute-policy: Do not replace HWLAB runtime with UniDesk backend,
provider-gateway, or microservice proxy
@@ -0,0 +1,15 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: hwlab-v03
resources:
- namespace.yaml
- services.yaml
- health-contract.yaml
- configmaps.yaml
- workloads.yaml
- deepseek-proxy.yaml
- postgres.yaml
- workbench-redis.yaml
- openfga.yaml
- opencode.yaml
- node-frpc.yaml
@@ -0,0 +1,17 @@
{
"apiVersion": "v1",
"kind": "Namespace",
"metadata": {
"name": "hwlab-v03",
"labels": {
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/environment": "v03"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
}
}
}
@@ -0,0 +1,105 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-v03-frpc-config",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-v03-frpc",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
}
},
"data": {
"frpc.toml": "serverAddr = \"82.156.23.220\"\nserverPort = 22000\nloginFailExit = true\nauth.token = \"{{ .Envs.FRPC_AUTH_TOKEN }}\"\n\n\n[[proxies]]\nname = \"hwlab-jd01-v03-cloud-web\"\ntype = \"tcp\"\nlocalIP = \"hwlab-cloud-web.hwlab-v03.svc.cluster.local\"\nlocalPort = 8080\nremotePort = 22090\n\n[[proxies]]\nname = \"hwlab-jd01-v03-edge-proxy\"\ntype = \"tcp\"\nlocalIP = \"hwlab-edge-proxy.hwlab-v03.svc.cluster.local\"\nlocalPort = 6667\nremotePort = 22088\n"
}
},
{
"apiVersion": "apps/v1",
"kind": "Deployment",
"metadata": {
"name": "hwlab-v03-frpc",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-v03-frpc",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
}
},
"spec": {
"replicas": 1,
"selector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-v03-frpc"
}
},
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "hwlab-v03-frpc",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/config-sha256": "e989adf5399a2564"
},
"annotations": {
"hwlab.pikastech.local/config-sha256": "e989adf5399a2564ed5ea96151b4718eecb026e160b16b9eb7ad65deb555615f"
}
},
"spec": {
"hostNetwork": true,
"dnsPolicy": "ClusterFirstWithHostNet",
"containers": [
{
"name": "frpc",
"image": "fatedier/frpc:v0.68.1",
"imagePullPolicy": "IfNotPresent",
"env": [
{
"name": "FRPC_AUTH_TOKEN",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-frpc-secrets",
"key": "token"
}
}
}
],
"args": [
"-c",
"/etc/frp/frpc.toml"
],
"volumeMounts": [
{
"name": "config",
"mountPath": "/etc/frp",
"readOnly": true
}
]
}
],
"volumes": [
{
"name": "config",
"configMap": {
"name": "hwlab-v03-frpc-config"
}
}
]
}
}
}
}
]
}
@@ -0,0 +1,537 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "v1",
"kind": "ServiceAccount",
"metadata": {
"name": "opencode-server",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "opencode-server",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/component": "opencode",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/service-id": "opencode-server",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/opencode-provider-profile": "dsflash-go",
"hwlab.pikastech.local/opencode-provider-id": "dsflash-go",
"hwlab.pikastech.local/opencode-model": "deepseek-v4-flash",
"hwlab.pikastech.local/opencode-provider-base-url": "http://127.0.0.1:4097/v1",
"hwlab.pikastech.local/opencode-provider-upstream-base-url": "https://opencode.ai/zen/go/v1",
"hwlab.pikastech.local/opencode-image": "127.0.0.1:5000/hwlab/opencode:1.17.7-git",
"hwlab.pikastech.local/opencode-config-sha256": "40a92e2d93f344d7c9dbcb98bd67760078f90a0af085f83b4b5385513bb26234",
"hwlab.pikastech.local/opencode-api-key-secret-ref": "hwlab-v03-code-agent-provider/opencode-api-key",
"hwlab.pikastech.local/agentrun-provider-secret-ref": "agentrun-v02/agentrun-v01-provider-dsflash-go",
"hwlab.pikastech.local/agentrun-provider-secret-keys": "auth.json,config.toml,model-catalog.json",
"hwlab.pikastech.local/values-printed": "false",
"hwlab.pikastech.local/opencode-provider-proxy-runtime-mode": "env-reuse-git-mirror-checkout",
"hwlab.pikastech.local/opencode-provider-proxy-boot-repo": "git@github.com:pikasTech/HWLAB.git",
"hwlab.pikastech.local/opencode-provider-proxy-boot-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/opencode-provider-proxy-boot-sh": "deploy/runtime/boot/opencode-provider-proxy.sh",
"hwlab.pikastech.local/opencode-provider-proxy-environment-digest": "sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
}
}
},
{
"apiVersion": "v1",
"kind": "PersistentVolumeClaim",
"metadata": {
"name": "opencode-server-data",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "opencode-server",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/component": "opencode",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/service-id": "opencode-server",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/opencode-provider-profile": "dsflash-go",
"hwlab.pikastech.local/opencode-provider-id": "dsflash-go",
"hwlab.pikastech.local/opencode-model": "deepseek-v4-flash",
"hwlab.pikastech.local/opencode-provider-base-url": "http://127.0.0.1:4097/v1",
"hwlab.pikastech.local/opencode-provider-upstream-base-url": "https://opencode.ai/zen/go/v1",
"hwlab.pikastech.local/opencode-image": "127.0.0.1:5000/hwlab/opencode:1.17.7-git",
"hwlab.pikastech.local/opencode-config-sha256": "40a92e2d93f344d7c9dbcb98bd67760078f90a0af085f83b4b5385513bb26234",
"hwlab.pikastech.local/opencode-api-key-secret-ref": "hwlab-v03-code-agent-provider/opencode-api-key",
"hwlab.pikastech.local/agentrun-provider-secret-ref": "agentrun-v02/agentrun-v01-provider-dsflash-go",
"hwlab.pikastech.local/agentrun-provider-secret-keys": "auth.json,config.toml,model-catalog.json",
"hwlab.pikastech.local/values-printed": "false",
"hwlab.pikastech.local/opencode-provider-proxy-runtime-mode": "env-reuse-git-mirror-checkout",
"hwlab.pikastech.local/opencode-provider-proxy-boot-repo": "git@github.com:pikasTech/HWLAB.git",
"hwlab.pikastech.local/opencode-provider-proxy-boot-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/opencode-provider-proxy-boot-sh": "deploy/runtime/boot/opencode-provider-proxy.sh",
"hwlab.pikastech.local/opencode-provider-proxy-environment-digest": "sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
}
},
"spec": {
"accessModes": [
"ReadWriteOnce"
],
"resources": {
"requests": {
"storage": "8Gi"
}
}
}
},
{
"apiVersion": "v1",
"kind": "Service",
"metadata": {
"name": "opencode-server",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "opencode-server",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/component": "opencode",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/service-id": "opencode-server",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/opencode-provider-profile": "dsflash-go",
"hwlab.pikastech.local/opencode-provider-id": "dsflash-go",
"hwlab.pikastech.local/opencode-model": "deepseek-v4-flash",
"hwlab.pikastech.local/opencode-provider-base-url": "http://127.0.0.1:4097/v1",
"hwlab.pikastech.local/opencode-provider-upstream-base-url": "https://opencode.ai/zen/go/v1",
"hwlab.pikastech.local/opencode-image": "127.0.0.1:5000/hwlab/opencode:1.17.7-git",
"hwlab.pikastech.local/opencode-config-sha256": "40a92e2d93f344d7c9dbcb98bd67760078f90a0af085f83b4b5385513bb26234",
"hwlab.pikastech.local/opencode-api-key-secret-ref": "hwlab-v03-code-agent-provider/opencode-api-key",
"hwlab.pikastech.local/agentrun-provider-secret-ref": "agentrun-v02/agentrun-v01-provider-dsflash-go",
"hwlab.pikastech.local/agentrun-provider-secret-keys": "auth.json,config.toml,model-catalog.json",
"hwlab.pikastech.local/values-printed": "false",
"hwlab.pikastech.local/opencode-provider-proxy-runtime-mode": "env-reuse-git-mirror-checkout",
"hwlab.pikastech.local/opencode-provider-proxy-boot-repo": "git@github.com:pikasTech/HWLAB.git",
"hwlab.pikastech.local/opencode-provider-proxy-boot-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/opencode-provider-proxy-boot-sh": "deploy/runtime/boot/opencode-provider-proxy.sh",
"hwlab.pikastech.local/opencode-provider-proxy-environment-digest": "sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
}
},
"spec": {
"type": "ClusterIP",
"selector": {
"app.kubernetes.io/name": "opencode-server",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03"
},
"ports": [
{
"name": "http",
"port": 4096,
"targetPort": "http"
}
]
}
},
{
"apiVersion": "apps/v1",
"kind": "Deployment",
"metadata": {
"name": "opencode-server",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "opencode-server",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/component": "opencode",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/service-id": "opencode-server",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/opencode-provider-profile": "dsflash-go",
"hwlab.pikastech.local/opencode-provider-id": "dsflash-go",
"hwlab.pikastech.local/opencode-model": "deepseek-v4-flash",
"hwlab.pikastech.local/opencode-provider-base-url": "http://127.0.0.1:4097/v1",
"hwlab.pikastech.local/opencode-provider-upstream-base-url": "https://opencode.ai/zen/go/v1",
"hwlab.pikastech.local/opencode-image": "127.0.0.1:5000/hwlab/opencode:1.17.7-git",
"hwlab.pikastech.local/opencode-config-sha256": "40a92e2d93f344d7c9dbcb98bd67760078f90a0af085f83b4b5385513bb26234",
"hwlab.pikastech.local/opencode-api-key-secret-ref": "hwlab-v03-code-agent-provider/opencode-api-key",
"hwlab.pikastech.local/agentrun-provider-secret-ref": "agentrun-v02/agentrun-v01-provider-dsflash-go",
"hwlab.pikastech.local/agentrun-provider-secret-keys": "auth.json,config.toml,model-catalog.json",
"hwlab.pikastech.local/values-printed": "false",
"hwlab.pikastech.local/opencode-provider-proxy-runtime-mode": "env-reuse-git-mirror-checkout",
"hwlab.pikastech.local/opencode-provider-proxy-boot-repo": "git@github.com:pikasTech/HWLAB.git",
"hwlab.pikastech.local/opencode-provider-proxy-boot-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/opencode-provider-proxy-boot-sh": "deploy/runtime/boot/opencode-provider-proxy.sh",
"hwlab.pikastech.local/opencode-provider-proxy-environment-digest": "sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
}
},
"spec": {
"replicas": 1,
"strategy": {
"type": "Recreate"
},
"selector": {
"matchLabels": {
"app.kubernetes.io/name": "opencode-server",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03"
}
},
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "opencode-server",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/component": "opencode",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/service-id": "opencode-server",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"hwlab.pikastech.local/opencode-provider-profile": "dsflash-go",
"hwlab.pikastech.local/opencode-provider-id": "dsflash-go",
"hwlab.pikastech.local/opencode-model": "deepseek-v4-flash",
"hwlab.pikastech.local/opencode-provider-base-url": "http://127.0.0.1:4097/v1",
"hwlab.pikastech.local/opencode-provider-upstream-base-url": "https://opencode.ai/zen/go/v1",
"hwlab.pikastech.local/opencode-image": "127.0.0.1:5000/hwlab/opencode:1.17.7-git",
"hwlab.pikastech.local/opencode-config-sha256": "40a92e2d93f344d7c9dbcb98bd67760078f90a0af085f83b4b5385513bb26234",
"hwlab.pikastech.local/opencode-api-key-secret-ref": "hwlab-v03-code-agent-provider/opencode-api-key",
"hwlab.pikastech.local/agentrun-provider-secret-ref": "agentrun-v02/agentrun-v01-provider-dsflash-go",
"hwlab.pikastech.local/agentrun-provider-secret-keys": "auth.json,config.toml,model-catalog.json",
"hwlab.pikastech.local/values-printed": "false",
"hwlab.pikastech.local/opencode-provider-proxy-runtime-mode": "env-reuse-git-mirror-checkout",
"hwlab.pikastech.local/opencode-provider-proxy-boot-repo": "git@github.com:pikasTech/HWLAB.git",
"hwlab.pikastech.local/opencode-provider-proxy-boot-commit": "ccc9503e9dac8f800c557198558d32367d598126",
"hwlab.pikastech.local/opencode-provider-proxy-boot-sh": "deploy/runtime/boot/opencode-provider-proxy.sh",
"hwlab.pikastech.local/opencode-provider-proxy-environment-digest": "sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
}
},
"spec": {
"serviceAccountName": "opencode-server",
"securityContext": {
"fsGroup": 1000,
"fsGroupChangePolicy": "OnRootMismatch"
},
"initContainers": [
{
"name": "opencode-workspace-git-init",
"image": "127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967",
"imagePullPolicy": "IfNotPresent",
"command": [
"/bin/sh",
"-ec"
],
"args": [
"set -eu\nmkdir -p /workspace\nif [ ! -d /workspace/.git ]; then\n git -C /workspace init\nfi\ngit -C /workspace config user.name 'HWLAB OpenCode' || true\ngit -C /workspace config user.email 'opencode@hwlab.local' || true\nchgrp -R 1000 /workspace/.git 2>/dev/null || true\nchmod -R g+rwX /workspace/.git 2>/dev/null || true"
],
"resources": {
"requests": {
"cpu": "25m",
"memory": "64Mi"
},
"limits": {
"cpu": "250m",
"memory": "256Mi"
}
},
"volumeMounts": [
{
"name": "workspace",
"mountPath": "/workspace"
}
]
}
],
"containers": [
{
"name": "opencode-server",
"image": "127.0.0.1:5000/hwlab/opencode:1.17.7-git",
"imagePullPolicy": "IfNotPresent",
"command": [
"/bin/sh",
"-ec"
],
"args": [
"exec opencode serve --hostname 0.0.0.0 --port 4096"
],
"workingDir": "/workspace",
"env": [
{
"name": "HOME",
"value": "/workspace"
},
{
"name": "XDG_CONFIG_HOME",
"value": "/workspace/.config"
},
{
"name": "XDG_DATA_HOME",
"value": "/workspace/.local/share"
},
{
"name": "HTTP_PROXY",
"value": "http://10.42.0.1:10808"
},
{
"name": "HTTPS_PROXY",
"value": "http://10.42.0.1:10808"
},
{
"name": "http_proxy",
"value": "http://10.42.0.1:10808"
},
{
"name": "https_proxy",
"value": "http://10.42.0.1:10808"
},
{
"name": "NO_PROXY",
"value": "localhost,127.0.0.1,::1,127.0.0.1:5000,localhost:5000,.svc,.svc.cluster.local,.cluster.local,kubernetes,kubernetes.default,kubernetes.default.svc,argocd-repo-server,argocd-repo-server.argocd,argocd-redis,argocd-redis.argocd,git-mirror-http,git-mirror-http.devops-infra,git-mirror-write,git-mirror-write.devops-infra,10.0.0.0/8,10.42.0.0/16,10.43.0.0/16,172.16.0.0/12,192.168.0.0/16,152.53.229.148,152.53.229.148,hyueapi.com,.hyueapi.com"
},
{
"name": "no_proxy",
"value": "localhost,127.0.0.1,::1,127.0.0.1:5000,localhost:5000,.svc,.svc.cluster.local,.cluster.local,kubernetes,kubernetes.default,kubernetes.default.svc,argocd-repo-server,argocd-repo-server.argocd,argocd-redis,argocd-redis.argocd,git-mirror-http,git-mirror-http.devops-infra,git-mirror-write,git-mirror-write.devops-infra,10.0.0.0/8,10.42.0.0/16,10.43.0.0/16,172.16.0.0/12,192.168.0.0/16,152.53.229.148,152.53.229.148,hyueapi.com,.hyueapi.com"
},
{
"name": "OPENCODE_CONFIG_CONTENT",
"value": "{\"$schema\":\"https://opencode.ai/config.json\",\"autoupdate\":false,\"share\":\"disabled\",\"model\":\"dsflash-go/deepseek-v4-flash\",\"small_model\":\"dsflash-go/deepseek-v4-flash\",\"provider\":{\"dsflash-go\":{\"npm\":\"@ai-sdk/openai-compatible\",\"name\":\"AgentRun dsflash-go\",\"options\":{\"baseURL\":\"http://127.0.0.1:4097/v1\",\"apiKey\":\"{env:OPENCODE_DSFLASH_GO_API_KEY}\",\"timeout\":600000,\"headerTimeout\":600000,\"chunkTimeout\":300000},\"models\":{\"deepseek-v4-flash\":{\"name\":\"deepseek-v4-flash\",\"reasoning\":false,\"tool_call\":true,\"limit\":{\"context\":1000000,\"output\":384000}}}}}}"
},
{
"name": "OPENCODE_DSFLASH_GO_API_KEY",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-code-agent-provider",
"key": "opencode-api-key",
"optional": true
}
}
},
{
"name": "OPENCODE_SERVER_USERNAME",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-opencode-server-auth",
"key": "username"
}
}
},
{
"name": "OPENCODE_SERVER_PASSWORD",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-opencode-server-auth",
"key": "password"
}
}
}
],
"ports": [
{
"name": "http",
"containerPort": 4096
}
],
"startupProbe": {
"tcpSocket": {
"port": "http"
},
"periodSeconds": 5,
"failureThreshold": 60
},
"readinessProbe": {
"tcpSocket": {
"port": "http"
},
"periodSeconds": 10,
"failureThreshold": 3
},
"livenessProbe": {
"tcpSocket": {
"port": "http"
},
"periodSeconds": 20,
"failureThreshold": 3
},
"resources": {
"requests": {
"cpu": "100m",
"memory": "256Mi"
},
"limits": {
"cpu": "1",
"memory": "1Gi"
}
},
"volumeMounts": [
{
"name": "workspace",
"mountPath": "/workspace"
}
]
},
{
"name": "opencode-provider-proxy",
"image": "127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967",
"imagePullPolicy": "IfNotPresent",
"env": [
{
"name": "HWLAB_SERVICE_ID",
"value": "opencode-provider-proxy"
},
{
"name": "HWLAB_ENVIRONMENT",
"value": "v03"
},
{
"name": "HWLAB_COMMIT_ID",
"value": "ccc9503e9dac8f800c557198558d32367d598126"
},
{
"name": "HWLAB_IMAGE",
"value": "127.0.0.1:5000/hwlab/hwlab-ts-runtime-env@sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
},
{
"name": "HWLAB_IMAGE_TAG",
"value": "env-5294e425c43f"
},
{
"name": "PORT",
"value": "4097"
},
{
"name": "HWLAB_OPENCODE_PROVIDER_PROXY_UPSTREAM_BASE_URL",
"value": "https://opencode.ai/zen/go/v1"
},
{
"name": "HWLAB_OPENCODE_PROVIDER_PROXY_PUBLIC_BASE_PATH",
"value": "/v1"
},
{
"name": "HWLAB_OPENCODE_PROVIDER_PROXY_TIMEOUT_MS",
"value": "600000"
},
{
"name": "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT",
"value": "http://otel-collector.platform-infra.svc.cluster.local:4318/v1/traces"
},
{
"name": "OTEL_SERVICE_NAME",
"value": "opencode-provider-proxy"
},
{
"name": "HWLAB_RUNTIME_MODE",
"value": "env-reuse-git-mirror-checkout"
},
{
"name": "HWLAB_BOOT_REPO",
"value": "git@github.com:pikasTech/HWLAB.git"
},
{
"name": "HWLAB_BOOT_COMMIT",
"value": "ccc9503e9dac8f800c557198558d32367d598126"
},
{
"name": "HWLAB_BOOT_REF",
"value": "v0.3"
},
{
"name": "HWLAB_BOOT_SH",
"value": "deploy/runtime/boot/opencode-provider-proxy.sh"
},
{
"name": "HWLAB_BOOT_READ_URL",
"value": "http://gitea-http.devops-infra.svc.cluster.local:3000/mirrors/pikasTech-HWLAB.git"
},
{
"name": "HWLAB_ENVIRONMENT_IMAGE",
"value": "127.0.0.1:5000/hwlab/hwlab-ts-runtime-env:env-5294e425c43f"
},
{
"name": "HWLAB_ENVIRONMENT_DIGEST",
"value": "sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
},
{
"name": "HWLAB_ENVIRONMENT_INPUT_HASH",
"value": "6ef8ca3abf22d871599b06333d285bd64f105a7a799b2937bb9c8f037fc0fd93"
},
{
"name": "HWLAB_CODE_INPUT_HASH",
"value": "a30d3b6d134dd5e18879523ba0022838e879eb06f3bfb0753eca9d236d7d7780"
},
{
"name": "HWLAB_IMAGE_DIGEST",
"value": "sha256:212f1da818f32500f25c495a6a4708a4113f44f4f2718387398dd5d7cfeb2967"
}
],
"ports": [
{
"name": "provider",
"containerPort": 4097
}
],
"readinessProbe": {
"httpGet": {
"path": "/health/readiness",
"port": "provider"
},
"periodSeconds": 10,
"failureThreshold": 3
},
"livenessProbe": {
"httpGet": {
"path": "/health/live",
"port": "provider"
},
"periodSeconds": 20,
"failureThreshold": 3
},
"resources": {
"requests": {
"cpu": "25m",
"memory": "64Mi"
},
"limits": {
"cpu": "250m",
"memory": "256Mi"
}
},
"startupProbe": {
"httpGet": {
"path": "/health/readiness",
"port": "provider"
},
"periodSeconds": 10,
"failureThreshold": 30,
"timeoutSeconds": 2,
"successThreshold": 1
}
}
],
"volumes": [
{
"name": "workspace",
"persistentVolumeClaim": {
"claimName": "opencode-server-data"
}
}
]
}
}
}
}
]
}
@@ -0,0 +1,278 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "batch/v1",
"kind": "Job",
"metadata": {
"name": "hwlab-openfga-migrate",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/hook": "Sync",
"argocd.argoproj.io/sync-wave": "1",
"argocd.argoproj.io/hook-delete-policy": "BeforeHookCreation,HookSucceeded"
}
},
"spec": {
"backoffLimit": 3,
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
}
},
"spec": {
"restartPolicy": "OnFailure",
"containers": [
{
"name": "openfga-migrate",
"image": "127.0.0.1:5000/hwlab/openfga:v1.17.0",
"imagePullPolicy": "IfNotPresent",
"args": [
"migrate"
],
"env": [
{
"name": "OPENFGA_DATASTORE_ENGINE",
"value": "postgres"
},
{
"name": "OPENFGA_DATASTORE_URI",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "datastore-uri"
}
}
},
{
"name": "OPENFGA_AUTHN_METHOD",
"value": "preshared"
},
{
"name": "OPENFGA_AUTHN_PRESHARED_KEYS",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "authn-preshared-key"
}
}
},
{
"name": "OPENFGA_PLAYGROUND_ENABLED",
"value": "false"
},
{
"name": "OPENFGA_HTTP_ADDR",
"value": "0.0.0.0:8080"
},
{
"name": "OPENFGA_GRPC_ADDR",
"value": "0.0.0.0:8081"
}
]
}
]
}
}
}
},
{
"apiVersion": "apps/v1",
"kind": "Deployment",
"metadata": {
"name": "hwlab-openfga",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"replicas": 1,
"selector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-openfga"
}
},
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs"
}
},
"spec": {
"containers": [
{
"name": "openfga",
"image": "127.0.0.1:5000/hwlab/openfga:v1.17.0",
"imagePullPolicy": "IfNotPresent",
"args": [
"run"
],
"env": [
{
"name": "OPENFGA_DATASTORE_ENGINE",
"value": "postgres"
},
{
"name": "OPENFGA_DATASTORE_URI",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "datastore-uri"
}
}
},
{
"name": "OPENFGA_AUTHN_METHOD",
"value": "preshared"
},
{
"name": "OPENFGA_AUTHN_PRESHARED_KEYS",
"valueFrom": {
"secretKeyRef": {
"name": "hwlab-v03-openfga",
"key": "authn-preshared-key"
}
}
},
{
"name": "OPENFGA_PLAYGROUND_ENABLED",
"value": "false"
},
{
"name": "OPENFGA_HTTP_ADDR",
"value": "0.0.0.0:8080"
},
{
"name": "OPENFGA_GRPC_ADDR",
"value": "0.0.0.0:8081"
}
],
"ports": [
{
"name": "http",
"containerPort": 8080
},
{
"name": "grpc",
"containerPort": 8081
}
],
"readinessProbe": {
"httpGet": {
"path": "/healthz",
"port": "http"
},
"initialDelaySeconds": 3,
"periodSeconds": 10
},
"livenessProbe": {
"httpGet": {
"path": "/healthz",
"port": "http"
},
"initialDelaySeconds": 15,
"periodSeconds": 20
},
"resources": {
"requests": {
"cpu": "50m",
"memory": "128Mi"
},
"limits": {
"cpu": "500m",
"memory": "512Mi"
}
}
}
]
}
}
}
},
{
"apiVersion": "v1",
"kind": "Service",
"metadata": {
"name": "hwlab-openfga",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-openfga",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/component": "authorization",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-openfga",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"type": "ClusterIP",
"selector": {
"app.kubernetes.io/name": "hwlab-openfga"
},
"ports": [
{
"name": "http",
"port": 8080,
"targetPort": "http"
},
{
"name": "grpc",
"port": 8081,
"targetPort": "grpc"
}
]
}
}
]
}
File diff suppressed because one or more lines are too long
@@ -0,0 +1,208 @@
apiVersion: v1
kind: List
items:
- apiVersion: v1
kind: Service
metadata:
name: hwlab-cloud-api
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-cloud-api
hwlab.pikastech.local/service-id: hwlab-cloud-api
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-cloud-api
ports:
- name: http
port: 6667
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-project-management
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-project-management
hwlab.pikastech.local/service-id: hwlab-project-management
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-project-management
ports:
- name: http
port: 6672
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-workbench-runtime
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-workbench-runtime
hwlab.pikastech.local/service-id: hwlab-workbench-runtime
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-workbench-runtime
ports:
- name: http
port: 6671
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-user-billing
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-user-billing
hwlab.pikastech.local/service-id: hwlab-user-billing
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-user-billing
ports:
- name: http
port: 6670
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-cloud-web
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-cloud-web
hwlab.pikastech.local/service-id: hwlab-cloud-web
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-cloud-web
ports:
- name: http
port: 8080
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-gateway
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-gateway
hwlab.pikastech.local/service-id: hwlab-gateway
hwlab.pikastech.local/activation: manual
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-gateway
ports:
- name: http
port: 7001
targetPort: http
- apiVersion: v1
kind: Service
metadata:
name: hwlab-agent-skills
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-agent-skills
hwlab.pikastech.local/service-id: hwlab-agent-skills
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-agent-skills
ports:
- name: http
port: 7430
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
- apiVersion: v1
kind: Service
metadata:
name: hwlab-edge-proxy
namespace: hwlab-v03
labels:
app.kubernetes.io/name: hwlab-edge-proxy
hwlab.pikastech.local/service-id: hwlab-edge-proxy
hwlab.pikastech.local/gitops-target: v03
hwlab.pikastech.local/source-commit: ccc9503e9dac8f800c557198558d32367d598126
hwlab.pikastech.local/environment: v03
hwlab.pikastech.local/profile: v03
hwlab.pikastech.local/monitoring: disabled
annotations:
hwlab.pikastech.local/rendered-by: scripts/gitops-render.mjs
spec:
type: ClusterIP
selector:
app.kubernetes.io/name: hwlab-edge-proxy
ports:
- name: http
port: 6667
targetPort: http
- name: metrics
port: 9100
targetPort: metrics
@@ -0,0 +1,243 @@
{
"apiVersion": "v1",
"kind": "List",
"items": [
{
"apiVersion": "v1",
"kind": "ConfigMap",
"metadata": {
"name": "hwlab-workbench-redis-config",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"data": {
"redis.conf": "save \"\"\nappendonly no\nmaxmemory 192mb\nmaxmemory-policy allkeys-lru\n"
}
},
{
"apiVersion": "apps/v1",
"kind": "Deployment",
"metadata": {
"name": "hwlab-workbench-redis",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"replicas": 1,
"selector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-workbench-redis"
}
},
"template": {
"metadata": {
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"containers": [
{
"name": "redis",
"image": "127.0.0.1:5000/hwlab/redis:8.2.3-alpine",
"imagePullPolicy": "IfNotPresent",
"args": [
"redis-server",
"/usr/local/etc/redis/redis.conf"
],
"ports": [
{
"name": "redis",
"containerPort": 6379
}
],
"readinessProbe": {
"exec": {
"command": [
"redis-cli",
"-p",
"6379",
"ping"
]
},
"initialDelaySeconds": 3,
"periodSeconds": 10,
"timeoutSeconds": 2,
"failureThreshold": 3
},
"livenessProbe": {
"exec": {
"command": [
"redis-cli",
"-p",
"6379",
"ping"
]
},
"initialDelaySeconds": 15,
"periodSeconds": 20,
"timeoutSeconds": 3,
"failureThreshold": 3
},
"resources": {
"requests": {
"cpu": "50m",
"memory": "64Mi"
},
"limits": {
"cpu": "250m",
"memory": "256Mi"
}
},
"volumeMounts": [
{
"name": "config",
"mountPath": "/usr/local/etc/redis",
"readOnly": true
}
]
}
],
"volumes": [
{
"name": "config",
"configMap": {
"name": "hwlab-workbench-redis-config"
}
}
]
}
}
}
},
{
"apiVersion": "v1",
"kind": "Service",
"metadata": {
"name": "hwlab-workbench-redis",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"type": "ClusterIP",
"selector": {
"app.kubernetes.io/name": "hwlab-workbench-redis"
},
"ports": [
{
"name": "redis",
"port": 6379,
"targetPort": "redis",
"protocol": "TCP"
}
]
}
},
{
"apiVersion": "networking.k8s.io/v1",
"kind": "NetworkPolicy",
"metadata": {
"name": "hwlab-workbench-redis-ingress",
"namespace": "hwlab-v03",
"labels": {
"app.kubernetes.io/name": "hwlab-workbench-redis",
"app.kubernetes.io/part-of": "hwlab",
"hwlab.pikastech.local/cache-role": "workbench-derived-read",
"hwlab.pikastech.local/component": "workbench-runtime-cache",
"hwlab.pikastech.local/environment": "v03",
"hwlab.pikastech.local/gitops-target": "v03",
"hwlab.pikastech.local/profile": "v03",
"hwlab.pikastech.local/service-id": "hwlab-workbench-redis",
"hwlab.pikastech.local/source-commit": "ccc9503e9dac8f800c557198558d32367d598126"
},
"annotations": {
"hwlab.pikastech.local/rendered-by": "scripts/gitops-render.mjs",
"argocd.argoproj.io/sync-wave": "2"
}
},
"spec": {
"podSelector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-workbench-redis"
}
},
"policyTypes": [
"Ingress"
],
"ingress": [
{
"from": [
{
"podSelector": {
"matchLabels": {
"app.kubernetes.io/name": "hwlab-workbench-runtime"
}
}
}
],
"ports": [
{
"protocol": "TCP",
"port": 6379
}
]
}
]
}
}
]
}
File diff suppressed because it is too large Load Diff