deploy: configure NC01 HWLAB monitor exposure

2026-07-08 05:34:11 +02:00
parent 5dfb78f000
commit a328aa909e
41 changed files with 2522 additions and 110 deletions
@@ -0,0 +1,93 @@
+version: 1
+kind: UniDeskHostK8sDeployment
+metadata:
+  name: unidesk-host
+  owner: unidesk
+
+target:
+  id: NC01
+  kubeContext: local-k3s
+  namespace: unidesk
+
+runtime:
+  environment: prod
+  deployRef: config/unidesk-host-k8s.yaml
+  repository: https://github.com/pikasTech/unidesk
+  commit: local-host-k8s
+  publicHost: 152.53.229.148
+  noProxy: localhost,127.0.0.1,::1,.svc,.svc.cluster.local,hyueapi.com,.hyueapi.com
+
+images:
+  postgres: postgres:16-alpine
+  backendCore: unidesk-backend-core:host-k8s
+  frontend: unidesk-frontend:host-k8s
+
+database:
+  mode: host-native
+  host: 10.42.0.1
+  serviceName: database
+  pvcName: unidesk-postgres-data
+  storageSize: 15Gi
+  storageClassName: local-path
+  port: 5432
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+    limits:
+      cpu: 500m
+      memory: 512Mi
+
+services:
+  backendCore:
+    deploymentName: backend-core
+    serviceName: backend-core
+    providerPublicServiceName: backend-core-provider
+    containerPort: 8080
+    providerPort: 8081
+    providerDataPort: 8082
+    providerPublicPort: 18082
+    providerDataPublicPort: 18084
+    logFile: /var/log/unidesk/backend-core.jsonl
+    resources:
+      requests:
+        cpu: 100m
+        memory: 192Mi
+      limits:
+        memory: 768Mi
+  frontend:
+    deploymentName: frontend
+    serviceName: frontend
+    containerPort: 8080
+    publicPort: 18081
+    logFile: /var/log/unidesk/frontend.jsonl
+    resources:
+      requests:
+        cpu: 80m
+        memory: 128Mi
+      limits:
+        memory: 512Mi
+
+runtimeConfig:
+  heartBeatTimeoutMs: "30000"
+  taskPendingTimeoutMs: "600000"
+  databasePoolMax: "4"
+  sessionTtlSeconds: "28800"
+  authUsername: admin
+  sshClientRouteAllowlist: NC01,NC01:*,JD01,JD01:*,PK01,PK01:*
+  microservicesJson: "[]"
+
+runtimeSecrets:
+  sourceRef:
+    path: .state/secrets/unidesk-host-k8s.env
+  target:
+    name: unidesk-runtime-secrets
+    keys:
+      postgresUser: POSTGRES_USER
+      postgresPassword: POSTGRES_PASSWORD
+      postgresDb: POSTGRES_DB
+      databaseUrl: DATABASE_URL
+      providerToken: PROVIDER_TOKEN
+      sshClientToken: UNIDESK_SSH_CLIENT_TOKEN
+      authPassword: AUTH_PASSWORD
+      sessionSecret: SESSION_SECRET