pikasTech-unidesk/config/fixtures/pikaoa-test-target.yaml

version: 1
kind: pikaoa-platform-delivery

metadata:
  id: pikaoa-enterprise-fixture
  owner: unidesk
  repository: pikainc/pikaoa
  spec: PJ2026-03

testRuntime:
  defaultTargetId: TEST01
  targets:
    TEST01:
      enabled: true
      validationOnly: true
      node: TEST01
      route: TEST01:k3s
      namespace: pikaoa-test
      ttlSeconds: 7200
      waitTimeoutSeconds: 180
      fieldManager: unidesk-pikaoa-test-target
      taskState:
        rootPath: /tmp/unidesk-pikaoa-test-target-fixture
        statusRequestTimeoutSeconds: 3
        logTailLines: 8
      cleanup:
        mode: delete-namespace
        requireOwnershipLabels: true
      source:
        mode: prebuilt-images
        repository: pikainc/pikaoa
        commitPolicy: cli-required
        branch: master
        worktreeRemote: https://github.com/pikainc/pikaoa.git
        readUrl: https://gitea.example.invalid/mirrors/pikainc-pikaoa.git
        snapshotPrefix: refs/unidesk/snapshots/gitea-actions/pikaoa-master-test01
        images:
          api: registry.invalid/pikaoa/api:${commit}
          worker: registry.invalid/pikaoa/worker:${commit}
          web: registry.invalid/pikaoa/web:${commit}
          initializer: registry.invalid/pikaoa/api:${commit}
        pullPolicy: IfNotPresent
      ci:
        lane: pikaoa-test
        namespace: pikaoa-ci
        pipeline: pikaoa-test-test01-pac
        pipelineRunPrefix: pikaoa-test-test01
        serviceAccountName: pikaoa-test-test01-tekton-runner
        workspaceSize: 1Gi
        pipelineTimeout: 20m0s
        toolsImage: registry.invalid/tools:latest
        buildkitImage: registry.invalid/buildkit:rootless
      build:
        dockerfiles:
          api: deploy/api.Dockerfile
          worker: deploy/worker.Dockerfile
          web: deploy/web.Dockerfile
        images:
          api: registry.invalid/pikaoa/api
          worker: registry.invalid/pikaoa/worker
          web: registry.invalid/pikaoa/web
        networkMode: host
      gitops:
        readUrl: https://gitea.example.invalid/mirrors/pikainc-pikaoa.git
        writeUrl: https://gitea.example.invalid/mirrors/pikainc-pikaoa.git
        branch: test01-pikaoa-test-gitops
        manifestPath: deploy/gitops/test01-test/resources.yaml
        credential:
          secretName: pac-gitea-pikaoa-test-test01
          tokenKey: token
          username: unidesk-admin
        author:
          name: PikaOA Test Fixture
          email: pikaoa-test-fixture@unidesk.local
      database:
        configRef: config/platform-db/postgres-nc01.yaml#exports.connectionStrings.pikaoa-test-database-url
        name: pikaoa_test
        username: pikaoa_test
        schema: pikaoa
        connection:
          sourceRef: ./secrets/pikaoa-test.env
          sourceKey: DATABASE_URL
          targetKey: DATABASE_URL
      runtime:
        replicas:
          api: 1
          worker: 1
          web: 1
        resources:
          api: { requests: { cpu: 100m, memory: 128Mi }, limits: { cpu: 1, memory: 512Mi } }
          worker: { requests: { cpu: 100m, memory: 128Mi }, limits: { cpu: 1, memory: 512Mi } }
          web: { requests: { cpu: 50m, memory: 64Mi }, limits: { cpu: 500m, memory: 256Mi } }
          initializer: { requests: { cpu: 100m, memory: 128Mi }, limits: { cpu: 1, memory: 512Mi } }
        secretName: pikaoa-test-runtime
        apiServiceName: pikaoa-api
        apiPort: 8080
        workerMetricsPort: 8081
        webPort: 8080
        webApiUpstreamEnv: PIKAOA_API_UPSTREAM
        attachment:
          storageRoot: /var/lib/pikaoa/attachments
          maxBytes: 104857600
          claimName: pikaoa-attachments
          storageRequest: 1Gi
          storageClassName: null
          fsGroup: 65532
          accessModes:
            - ReadWriteOnce
        workerInterval: 2s
        outbox:
          batchSize: 50
          maxAttempts: 4
          retryDelay: 2s
        sessionTTL: 8h
        shutdownTimeout: 10s
        administrator:
          username: admin
          password:
            sourceRef: ./secrets/pikaoa-test-admin-password.txt
            targetKey: PIKAOA_BOOTSTRAP_ADMIN_PASSWORD
        employee:
          username: employee
          password:
            sourceRef: ./secrets/pikaoa-test-employee-password.txt
            targetKey: PIKAOA_BOOTSTRAP_EMPLOYEE_PASSWORD
        sessionSecret:
          sourceRef: ./secrets/pikaoa-test.env
          sourceKey: PIKAOA_SESSION_SECRET
          targetKey: PIKAOA_SESSION_SECRET
        adminToken:
          sourceRef: ./secrets/pikaoa-test.env
          sourceKey: OA_ADMIN_TOKEN
          targetKey: OA_ADMIN_TOKEN
      initializer:
        mode: fresh-database-only
        jobName: pikaoa-init
        backoffLimit: 2
        command:
          - /usr/local/bin/pikaoa
          - migrate
          - up
          - --config
          - /etc/pikaoa/pikaoa.yaml
      exposure:
        serviceName: pikaoa-web
        serviceType: NodePort
        hostIP: 192.0.2.10
        port: 32080
      observability:
        otlpEndpoint: otel-collector.observability.svc.cluster.local:4317
        prometheus:
          configRef: config/platform-infra/observability.yaml#metricsBackend.discovery.labelSelector
          scrape: true
          apiPath: /metrics
          workerPath: /metrics
        exporterFailure:
          warning: true
          blocking: false
      probes:
        api:
          livenessPath: /healthz
          readinessPath: /readyz
        worker:
          livenessPath: /healthz
          readinessPath: /readyz
        web:
          livenessPath: /healthz
          readinessPath: /healthz

delivery:
  targets:
    PROD:
      namespace: pikaoa
      ci:
        namespace: pikaoa-ci