bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(veles): deploy 0.6.82 bootstrap hardening

Browse Source
This commit is contained in:
jenkins 2026-07-14 19:56:14 -03:00
parent dad4448ebb
commit 5776f86952
4 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
services/veles/backend-deployment.yaml
View File

@ -22,7 +22,7 @@ spec:
labels: labels:
app: veles-backend app: veles-backend
annotations: annotations:
veles.bstein.dev/redeploy: "2026-07-14-0.6.81-payoff-exposure-hardening" veles.bstein.dev/redeploy: "2026-07-14-0.6.82-bootstrap-hardening"
vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-init-first: "true"
vault.hashicorp.com/agent-pre-populate-only: "true" vault.hashicorp.com/agent-pre-populate-only: "true"
@ -63,7 +63,7 @@ spec:
type: RuntimeDefault type: RuntimeDefault
initContainers: initContainers:
- name: database-init - name: database-init
image: registry.bstein.dev/veles/veles-backend:0.6.81 # {"$imagepolicy": "veles:veles-backend"} image: registry.bstein.dev/veles/veles-backend:0.6.82 # {"$imagepolicy": "veles:veles-backend"}
imagePullPolicy: Always imagePullPolicy: Always
command: ["/bin/sh", "-c"] command: ["/bin/sh", "-c"]
args: args:
@ -85,7 +85,7 @@ spec:
memory: 512Mi memory: 512Mi
containers: containers:
- name: backend - name: backend
image: registry.bstein.dev/veles/veles-backend:0.6.81 # {"$imagepolicy": "veles:veles-backend"} image: registry.bstein.dev/veles/veles-backend:0.6.82 # {"$imagepolicy": "veles:veles-backend"}
imagePullPolicy: Always imagePullPolicy: Always
command: ["/bin/sh", "-c"] command: ["/bin/sh", "-c"]
args: args:
@ -108,19 +108,21 @@ spec:
port: http port: http
initialDelaySeconds: 5 initialDelaySeconds: 5
periodSeconds: 10 periodSeconds: 10
timeoutSeconds: 3
livenessProbe: livenessProbe:
httpGet: httpGet:
path: /api/v1/live path: /api/v1/live
port: http port: http
initialDelaySeconds: 20 initialDelaySeconds: 20
periodSeconds: 20 periodSeconds: 20
timeoutSeconds: 3
resources: resources:
requests: requests:
cpu: 250m cpu: 250m
memory: 1Gi memory: 2Gi
limits: limits:
cpu: "1" cpu: "1"
memory: 4Gi memory: 8Gi
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 10001 runAsUser: 10001

4
services/veles/configmap.yaml
View File

@ -18,8 +18,8 @@ data:
VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin
VELES_OIDC_ADMIN_GROUPS: admin VELES_OIDC_ADMIN_GROUPS: admin
VELES_NAMESPACE: veles VELES_NAMESPACE: veles
VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.6.81 # {"$imagepolicy": "veles:veles-sim-worker"} VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.6.82 # {"$imagepolicy": "veles:veles-sim-worker"}
VELES_SIM_WORKER_VERSION: "0.6.81" VELES_SIM_WORKER_VERSION: "0.6.82"
VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_SERVICE_ACCOUNT: veles-sim
VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim
VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64

2
services/veles/frontend-deployment.yaml
View File

@ -48,7 +48,7 @@ spec:
type: RuntimeDefault type: RuntimeDefault
containers: containers:
- name: frontend - name: frontend
image: registry.bstein.dev/veles/veles-frontend:0.6.81 # {"$imagepolicy": "veles:veles-frontend"} image: registry.bstein.dev/veles/veles-frontend:0.6.82 # {"$imagepolicy": "veles:veles-frontend"}
imagePullPolicy: Always imagePullPolicy: Always
ports: ports:
- name: http - name: http

2
services/veles/retention-cronjob.yaml
View File

@ -37,7 +37,7 @@ spec:
type: RuntimeDefault type: RuntimeDefault
containers: containers:
- name: retention - name: retention
image: registry.bstein.dev/veles/veles-backend:0.6.81 # {"$imagepolicy": "veles:veles-backend"} image: registry.bstein.dev/veles/veles-backend:0.6.82 # {"$imagepolicy": "veles:veles-backend"}
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command: ["veles-hygiene"] command: ["veles-hygiene"]
args: ["--prune-artifacts"] args: ["--prune-artifacts"]