admin/ircs-prod-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: restore independent prod gitops config

Browse Source
This commit is contained in:
Prodiglagla
2026-06-15 17:26:52 +08:00
parent c86deb5e12
commit 9e326c375a
40 changed files with 215 additions and 207 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ircs-prod/core/00-namespace.yaml
+1 -1
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: Namespace
metadata:
name: ircs-prod
ircs-prod/core/01-app-config.yaml
+1 -1
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: ConfigMap
metadata:
name: ircs-prod-app-config
ircs-prod/core/02-resource-quota.yaml
+1 -1
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: ResourceQuota
metadata:
name: ircs-prod-quota
ircs-prod/core/kustomization.yaml
+1 -2
View File
@@ -1,4 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- 00-namespace.yaml
@@ -29,4 +29,3 @@ resources:
- manifests/storage-service.yaml
- manifests/task-service.yaml
- manifests/valkey.yaml
ircs-prod/core/manifests/aggregation-worker.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-aggregation-worker@sha256:659fd4e8e59dde4263b9710c5edd132e34d656aa9b58fe489ae1cac83fb28c14
image: registry.mnnu.eu.org/ircs/ircs-aggregation-worker:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -99,4 +99,3 @@ spec:
limits:
cpu: 250m
memory: 512Mi
ircs-prod/core/manifests/catalog-service.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-catalog-service@sha256:c460196c3fba553431fb0642d22995f389577628dee445e1397dcd5e7e8b4dc0
image: registry.mnnu.eu.org/ircs/ircs-catalog-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -99,4 +99,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/config-service.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-config-service@sha256:f09efcc3c57412ef4a5c879a93a67ce00aa022ef4178ba73ac757434b3f77a76
image: registry.mnnu.eu.org/ircs/ircs-config-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -107,4 +107,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/content-service.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-content-service@sha256:b0761d6b17f95b87528e494b23bc4c09e8fee5dc0917724809d1108223f32bf0
image: registry.mnnu.eu.org/ircs/ircs-content-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -125,4 +125,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/credential-service.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-credential-service@sha256:749095ecaad722df22b593163bc1ed643861592a4160384b7365e6337a7741d8
image: registry.mnnu.eu.org/ircs/ircs-credential-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -110,4 +110,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/elasticsearch.yaml
+4 -4
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: Service
metadata:
name: elasticsearch-svc
@@ -40,7 +40,6 @@ spec:
type: RollingUpdate
rollingUpdate:
partition: 0
maxUnavailable: 1
selector:
matchLabels:
app: elasticsearch
@@ -54,7 +53,9 @@ spec:
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
terminationGracePeriodSeconds: 30
initContainers:
- name: install-plugins
@@ -173,4 +174,3 @@ spec:
resources:
requests:
storage: 5Gi
ircs-prod/core/manifests/frontend-bff.yaml
+4 -5
View File
@@ -27,10 +27,10 @@ spec:
ircs.prodigalgal.com/config-version: "bff-prod-targets-20260614-1"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-portal-bff@sha256:4d3f2b8115635b111ec14cf5ac501707eb29b207487ce2317db117032b939e56
image: registry.mnnu.eu.org/ircs/ircs-portal-bff:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -140,10 +140,10 @@ spec:
ircs.prodigalgal.com/config-version: "bff-prod-targets-20260614-1"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-admin-bff@sha256:e043f6a537aea4e02572e93766212bf4dc4465359ed1dbd255ae5b365fc9ca23
image: registry.mnnu.eu.org/ircs/ircs-admin-bff:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -232,4 +232,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/frontend-portal-admin.yaml
+5 -6
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: ConfigMap
metadata:
name: ircs-frontend-gateway-nginx
@@ -308,10 +308,10 @@ spec:
ircs.prodigalgal.com/config-version: "bff-20260606-1"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: huawai
image: harbor.mnnu.eu.org/ircs/huawai@sha256:a411c3498cd2871093953b570616a6e89b3f0d1621308e175692dffd109b2751
image: registry.mnnu.eu.org/ircs/ircs-huawai-frontend:sha-fbd4430f6682
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -369,10 +369,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: ircs-admin-frontend
image: harbor.mnnu.eu.org/ircs/ircs-frontend@sha256:132b7d3bb073734ab8072769521e94885b25f8e9e319253e7c1c433d87c91302
image: registry.mnnu.eu.org/ircs/ircs-admin-frontend:sha-7a74ebb402ab
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -465,4 +465,3 @@ spec:
- name: nginx-config
configMap:
name: ircs-frontend-gateway-nginx
ircs-prod/core/manifests/identity-service.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-identity-service@sha256:f055eeda67241fffde05adcd90904a9f92000910a182401c6f1f375f09db0777
image: registry.mnnu.eu.org/ircs/ircs-identity-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -146,4 +146,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/ingestion-worker.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-ingestion-worker@sha256:600b2f614b204a01d0dfd6565e87619f73bd5bc136f58ee92d12dee24c77ed8d
image: registry.mnnu.eu.org/ircs/ircs-ingestion-worker:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -93,4 +93,3 @@ spec:
limits:
cpu: 250m
memory: 512Mi
ircs-prod/core/manifests/interaction-service.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-interaction-service@sha256:77477b1dd77eb41752d8971c5a961b3903c44d87d74b34017f682c07fd52b7a4
image: registry.mnnu.eu.org/ircs/ircs-interaction-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -118,4 +118,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/magnet-service.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-magnet-service@sha256:88783970566a3f9aa2667fe6001af5f9ccc3882d965f425d715cf4b0f4146bb0
image: registry.mnnu.eu.org/ircs/ircs-magnet-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -103,4 +103,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/metadata-worker.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-metadata-worker@sha256:c8389f1bd63d7d9b663ff434ed90bb87e2dfd6caa735148c6521b6eb44ea3189
image: registry.mnnu.eu.org/ircs/ircs-metadata-worker:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -113,4 +113,3 @@ spec:
limits:
cpu: 250m
memory: 512Mi
ircs-prod/core/manifests/migrator-job.yaml
-53
View File
@@ -1,53 +0,0 @@
apiVersion: batch/v1
kind: Job
metadata:
name: ircs-migrator
namespace: ircs-prod
labels:
app: ircs-migrator
app.kubernetes.io/part-of: ircs
environment: prod
spec:
backoffLimit: 0
ttlSecondsAfterFinished: 300
template:
metadata:
labels:
app: ircs-migrator
app.kubernetes.io/part-of: ircs
environment: prod
spec:
restartPolicy: Never
imagePullSecrets:
- name: harbor-secret
containers:
- name: migrator
image: harbor.mnnu.eu.org/ircs/ircs-migrator@sha256:64223fa99f7c2793b0145cc539bafa4b0c70fa3cc0af0e9059a2fed3bf7a2437
imagePullPolicy: IfNotPresent
env:
- name: SPRING_DATASOURCE_URL
valueFrom:
configMapKeyRef:
name: ircs-prod-app-config
key: DB_URL
- name: SPRING_DATASOURCE_USERNAME
value: postgres
- name: SPRING_DATASOURCE_PASSWORD
valueFrom:
secretKeyRef:
name: ircs-prod-secrets
key: DB_PASSWORD
- name: SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE
value: "2"
- name: SPRING_DATASOURCE_HIKARI_MINIMUM_IDLE
value: "0"
- name: SPRING_DATASOURCE_HIKARI_IDLE_TIMEOUT
value: "30000"
resources:
requests:
cpu: 25m
memory: 128Mi
limits:
cpu: 250m
memory: 512Mi
ircs-prod/core/manifests/normalization-worker.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-normalization-worker@sha256:1f82b17374a8c3e2307bbdd406a106587b5bacc28db4a3e6386a435fbcd8d697
image: registry.mnnu.eu.org/ircs/ircs-normalization-worker:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -124,4 +124,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/notification-worker.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-notification-worker@sha256:46f41e02c0c76de3e1497ad1c1eaf554f72e0f6a47dfc3a56c798c5e6fc4cf82
image: registry.mnnu.eu.org/ircs/ircs-notification-worker:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -135,4 +135,3 @@ spec:
limits:
cpu: 250m
memory: 512Mi
ircs-prod/core/manifests/observability-monitoring.yaml
+1 -2
View File
@@ -1,4 +1,4 @@
apiVersion: monitoring.coreos.com/v1
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: ircs-prod-service-monitor
@@ -67,4 +67,3 @@ spec:
interval: 30s
scrapeTimeout: 10s
honorLabels: true
ircs-prod/core/manifests/ops-service.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-ops-service@sha256:12bf1e9983f92145f318ad370370ef7ae27fdb68cd3f05c72b281cac94e761ce
image: registry.mnnu.eu.org/ircs/ircs-ops-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -138,4 +138,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/portal-service.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-portal-service@sha256:c4270d97a20098164c5b68cec1fcad99a4e56f99f1493aa78683afd5395bb33e
image: registry.mnnu.eu.org/ircs/ircs-portal-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -116,4 +116,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/postgres.yaml
+1 -3
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: Service
metadata:
name: postgres-svc
@@ -37,7 +37,6 @@ spec:
type: RollingUpdate
rollingUpdate:
partition: 0
maxUnavailable: 1
selector:
matchLabels:
app: postgres
@@ -121,4 +120,3 @@ spec:
resources:
requests:
storage: 2Gi
ircs-prod/core/manifests/rabbitmq.yaml
+1 -3
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: Service
metadata:
name: rabbitmq-svc
@@ -40,7 +40,6 @@ spec:
type: RollingUpdate
rollingUpdate:
partition: 0
maxUnavailable: 1
selector:
matchLabels:
app: rabbitmq
@@ -123,4 +122,3 @@ spec:
resources:
requests:
storage: 1Gi
ircs-prod/core/manifests/scraper-service.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-scraper-service@sha256:2a48db6d3df769248bf174129c534361be1303e1d7d7a87b973504ba29b82731
image: registry.mnnu.eu.org/ircs/ircs-scraper-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -130,4 +130,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/search-service.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-search-service@sha256:a7d4173655f20e7796b46bbc0cfe940c178d8f970d8b55f0b43e3f8b4e6fcfbf
image: registry.mnnu.eu.org/ircs/ircs-search-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -146,4 +146,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/storage-service.yaml
+2 -3
View File
@@ -22,10 +22,10 @@ spec:
environment: prod
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-storage-service@sha256:df6bfcdeb3a285e8b3842b0c0d99da2312b8f755c5fb1f49d35b0ccac8369749
image: registry.mnnu.eu.org/ircs/ircs-storage-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -144,4 +144,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/task-service.yaml
+2 -3
View File
@@ -24,10 +24,10 @@ spec:
ircs.prodigalgal.com/no-public-route: "true"
spec:
imagePullSecrets:
- name: harbor-secret
- name: registry-secret
containers:
- name: app
image: harbor.mnnu.eu.org/ircs/ircs-task-service@sha256:b1897407cca7efa0223e0beceb0e03826940d7f694e2b5d7071f8b3ddba4ed5b
image: registry.mnnu.eu.org/ircs/ircs-task-service:sha-de9957f9ced5
imagePullPolicy: IfNotPresent
ports:
- name: http
@@ -149,4 +149,3 @@ spec:
- name: http
port: 8080
targetPort: http
ircs-prod/core/manifests/valkey.yaml
+1 -2
View File
@@ -1,4 +1,4 @@
apiVersion: v1
apiVersion: v1
kind: Service
metadata:
name: valkey-svc
@@ -74,4 +74,3 @@ spec:
limits:
cpu: 250m
memory: 256Mi