7a55b259bf
Three fenced worker Pods claim Hermes Kanban runs through a coordinator that owns every state transition, with per-ordinal HMAC authority, a mediated broker-only SCM path, and durable per-ordinal workspaces. Content is the reviewed head of PR #18 (689bcb6e) with PR 16's and PR 19's contributions removed: they were merged in only to validate co-existence and are not prerequisites, so this branch no longer carries them as ancestors. Only PR 14 and PR 15 remain, because the broker boundary and the cli_lane_* decomposition are load-bearing for two of the fixed P0 boundaries. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
69 lines
1.6 KiB
YAML
69 lines
1.6 KiB
YAML
# clusters/atlas/flux-system/applications/hermes/kustomization.yaml
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: hermes
|
|
namespace: flux-system
|
|
annotations:
|
|
kustomize.toolkit.fluxcd.io/ssa: Merge
|
|
spec:
|
|
interval: 10m
|
|
path: ./services/hermes
|
|
targetNamespace: hermes
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: flux-system
|
|
namespace: flux-system
|
|
wait: false
|
|
timeout: 10m
|
|
healthChecks:
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: hermes-model-gate
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: hermes-switchyard
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: hermes-agent
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
name: hermes-execution-worker
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
name: hermes-node-ssh-access
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: hermes
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
name: hermes-chat-tenant
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: hermes-chat-router
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: oauth2-proxy-hermes-chat
|
|
namespace: hermes
|
|
- apiVersion: apps/v1
|
|
kind: Deployment
|
|
name: oauth2-proxy-hermes-triage
|
|
namespace: hermes
|
|
dependsOn:
|
|
- name: cert-manager
|
|
- name: core
|
|
- name: keycloak
|
|
- name: longhorn
|
|
- name: vault
|
|
- name: hermes-scm-broker
|
|
- name: hermes-observer-rbac
|