titan-iac/services/maintenance/node-ops/titan-24-docker-daemonset.yaml
jenkins 0da9e4c82d refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
  repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00

59 lines
1.4 KiB
YAML

# services/maintenance/node-ops/titan-24-docker-daemonset.yaml
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: titan-24-docker
namespace: maintenance
labels:
app: titan-24-docker
spec:
selector:
matchLabels:
app: titan-24-docker
updateStrategy:
type: RollingUpdate
template:
metadata:
labels:
app: titan-24-docker
spec:
hostPID: true
serviceAccountName: titan-24-docker
nodeSelector:
kubernetes.io/hostname: titan-24
tolerations:
- operator: Exists
- key: node-role.kubernetes.io/accelerator
operator: Exists
effect: NoSchedule
containers:
- name: installer
image: debian:13-slim
imagePullPolicy: IfNotPresent
command: ["/usr/bin/env", "bash"]
args: ["/scripts/titan_24_docker.sh"]
securityContext:
privileged: true
runAsUser: 0
resources:
requests:
cpu: 25m
memory: 64Mi
limits:
cpu: 500m
memory: 512Mi
volumeMounts:
- name: host-root
mountPath: /host
- name: script
mountPath: /scripts
readOnly: true
volumes:
- name: host-root
hostPath:
path: /
- name: script
configMap:
name: titan-24-docker-script
defaultMode: 0555