diff --git a/services/veles/backend-deployment.yaml b/services/veles/backend-deployment.yaml index a3a356587..f0eb9e5b1 100644 --- a/services/veles/backend-deployment.yaml +++ b/services/veles/backend-deployment.yaml @@ -17,7 +17,7 @@ spec: labels: app: veles-backend annotations: - veles.bstein.dev/redeploy: "2026-06-28-0.4.5-public-feedback-replay" + veles.bstein.dev/redeploy: "2026-06-29-0.4.10-replay-compression" vault.hashicorp.com/agent-inject: "true" vault.hashicorp.com/agent-init-first: "true" vault.hashicorp.com/agent-pre-populate-only: "true" @@ -58,7 +58,7 @@ spec: type: RuntimeDefault initContainers: - name: database-init - image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.4.10 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: @@ -80,7 +80,7 @@ spec: memory: 512Mi containers: - name: backend - image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.4.10 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: Always command: ["/bin/sh", "-c"] args: diff --git a/services/veles/configmap.yaml b/services/veles/configmap.yaml index c9c159b27..0e0c230b3 100644 --- a/services/veles/configmap.yaml +++ b/services/veles/configmap.yaml @@ -18,7 +18,7 @@ data: VELES_OIDC_REQUIRED_GROUPS: alpha,veles-tester,admin VELES_OIDC_ADMIN_GROUPS: admin VELES_NAMESPACE: veles - VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.4.5 # {"$imagepolicy": "veles:veles-sim-worker"} + VELES_SIM_IMAGE: registry.bstein.dev/veles/veles-sim-worker:0.4.10 # {"$imagepolicy": "veles:veles-sim-worker"} VELES_SIM_SERVICE_ACCOUNT: veles-sim VELES_SIM_PRIORITY_CLASS: veles-sim VELES_SIM_NODE_SELECTOR: veles.bstein.dev/node-pool=oceanus,kubernetes.io/arch=amd64 diff --git a/services/veles/feedback-mirror-cronjob.yaml b/services/veles/feedback-mirror-cronjob.yaml deleted file mode 100644 index 8873c9c54..000000000 --- a/services/veles/feedback-mirror-cronjob.yaml +++ /dev/null @@ -1,84 +0,0 @@ -# services/veles/feedback-mirror-cronjob.yaml -apiVersion: batch/v1 -kind: CronJob -metadata: - name: veles-feedback-mirror - namespace: veles - labels: - app: veles-feedback-mirror -spec: - schedule: "*/15 * * * *" - concurrencyPolicy: Forbid - successfulJobsHistoryLimit: 1 - failedJobsHistoryLimit: 3 - jobTemplate: - spec: - template: - metadata: - labels: - app: veles-feedback-mirror - spec: - restartPolicy: Never - serviceAccountName: veles-feedback-mirror - automountServiceAccountToken: false - priorityClassName: veles-core - nodeSelector: - veles.bstein.dev/node-pool: oceanus - kubernetes.io/arch: amd64 - tolerations: - - key: veles.bstein.dev/simulation - operator: Equal - value: "true" - effect: NoSchedule - securityContext: - fsGroup: 10001 - fsGroupChangePolicy: OnRootMismatch - seccompProfile: - type: RuntimeDefault - containers: - - name: mirror - image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"} - imagePullPolicy: IfNotPresent - command: ["/bin/sh", "-c"] - args: - - | - set -eu - if [ -z "${GITEA_TOKEN:-}" ]; then - echo "No GITEA_TOKEN configured for feedback mirror; leaving existing mirror untouched." - exit 0 - fi - exec veles-feedback-mirror \ - --api-base-url "${VELES_FEEDBACK_GITEA_API_URL:-https://scm.bstein.dev/api/v1}" \ - --repo "${VELES_FEEDBACK_REPO:-veles-alpha/feedback}" \ - --output "${VELES_FEEDBACK_MIRROR_PATH:-/data/veles-artifacts/artifacts/feedback/issues.json}" - envFrom: - - configMapRef: - name: veles-config - env: - - name: GITEA_TOKEN - valueFrom: - secretKeyRef: - name: veles-feedback-mirror - key: GITEA_TOKEN - optional: true - volumeMounts: - - name: artifacts - mountPath: /data/veles-artifacts - resources: - requests: - cpu: 25m - memory: 128Mi - limits: - cpu: 200m - memory: 384Mi - securityContext: - runAsNonRoot: true - runAsUser: 10001 - runAsGroup: 10001 - allowPrivilegeEscalation: false - capabilities: - drop: ["ALL"] - volumes: - - name: artifacts - persistentVolumeClaim: - claimName: veles-artifacts diff --git a/services/veles/frontend-deployment.yaml b/services/veles/frontend-deployment.yaml index c28049d94..a5da7cc34 100644 --- a/services/veles/frontend-deployment.yaml +++ b/services/veles/frontend-deployment.yaml @@ -48,7 +48,7 @@ spec: type: RuntimeDefault containers: - name: frontend - image: registry.bstein.dev/veles/veles-frontend:0.4.5 # {"$imagepolicy": "veles:veles-frontend"} + image: registry.bstein.dev/veles/veles-frontend:0.4.10 # {"$imagepolicy": "veles:veles-frontend"} imagePullPolicy: Always ports: - name: http diff --git a/services/veles/kustomization.yaml b/services/veles/kustomization.yaml index dd4fa3481..764438c1e 100644 --- a/services/veles/kustomization.yaml +++ b/services/veles/kustomization.yaml @@ -18,7 +18,6 @@ resources: - backend-deployment.yaml - frontend-deployment.yaml - retention-cronjob.yaml - - feedback-mirror-cronjob.yaml - image.yaml - ingress.yaml - oneoffs/veles-secrets-ensure-job.yaml diff --git a/services/veles/retention-cronjob.yaml b/services/veles/retention-cronjob.yaml index 5dbc7e6f1..f533cd0f8 100644 --- a/services/veles/retention-cronjob.yaml +++ b/services/veles/retention-cronjob.yaml @@ -37,7 +37,7 @@ spec: type: RuntimeDefault containers: - name: retention - image: registry.bstein.dev/veles/veles-backend:0.4.5 # {"$imagepolicy": "veles:veles-backend"} + image: registry.bstein.dev/veles/veles-backend:0.4.10 # {"$imagepolicy": "veles:veles-backend"} imagePullPolicy: IfNotPresent command: ["veles-hygiene"] args: ["--prune-artifacts"] diff --git a/services/veles/serviceaccounts.yaml b/services/veles/serviceaccounts.yaml index 54b360c0c..c14ff0f8d 100644 --- a/services/veles/serviceaccounts.yaml +++ b/services/veles/serviceaccounts.yaml @@ -35,15 +35,6 @@ imagePullSecrets: --- apiVersion: v1 kind: ServiceAccount -metadata: - name: veles-feedback-mirror - namespace: veles -automountServiceAccountToken: false -imagePullSecrets: - - name: harbor-regcred ---- -apiVersion: v1 -kind: ServiceAccount metadata: name: veles-vault-sync namespace: veles