6bcb6fa93f
CRITICAL FIXES: ✅ Add PersistentVolumeClaims for all stateful services - PostgreSQL: 20Gi PVC on nfs-emporium (data persistence) - Redis: 10Gi PVC on nfs-emporium (cache and queue) - RabbitMQ: 5Gi PVC on nfs-emporium (message queue) ✅ Pin all image versions (no more 'latest' tags) - Firecrawl API/Worker: v1.0.0 - Playwright Service: v1.0.0 - PostgreSQL (nuq-postgres): v1.0.0 - Redis: 7.4.1-alpine - RabbitMQ: 3.13.7-management-alpine ✅ Convert raw manifests to proper Helm chart - Template-based configuration - Centralized values.yaml - Proper Helm helpers and labels - Easy configuration management WHAT CHANGED: - Created chart/ directory with full Helm chart structure - Moved old manifests to old-manifests/ for reference - Updated ArgoCD Application to use Helm chart source - Added comprehensive README and MIGRATION docs - All services now use nfs-emporium storage class - Redis configured with AOF persistence - Proper resource limits and health checks - Gateway/HTTPRoute configs integrated into chart DEPLOYMENT: ArgoCD will automatically sync and apply changes. Old ephemeral data will be lost (fresh start with persistence). Resolves data loss issues and brings deployment to production standards.
88 lines
2.2 KiB
YAML
88 lines
2.2 KiB
YAML
# ------------------------------------------------------------------------------
|
|
# HTTPRoute — Firecrawl via Cilium Gateway
|
|
# Both primary (spaceship-earth) and secondary (firecrawl) DNS names
|
|
# ------------------------------------------------------------------------------
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: spaceship-earth-tls
|
|
namespace: firecrawl
|
|
spec:
|
|
secretName: spaceship-earth-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- spaceship-earth.local.mk-labs.cloud
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: firecrawl-tls
|
|
namespace: firecrawl
|
|
spec:
|
|
secretName: firecrawl-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
dnsNames:
|
|
- firecrawl.local.mk-labs.cloud
|
|
---
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: spaceship-earth
|
|
namespace: firecrawl
|
|
annotations:
|
|
external-dns.alpha.kubernetes.io/hostname: spaceship-earth.local.mk-labs.cloud
|
|
external-dns.alpha.kubernetes.io/target: "10.1.71.90"
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: fastpass-gateway
|
|
namespace: gateway
|
|
sectionName: https
|
|
hostnames:
|
|
- spaceship-earth.local.mk-labs.cloud
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
backendRefs:
|
|
- group: ""
|
|
kind: Service
|
|
name: firecrawl-api
|
|
port: 3002
|
|
weight: 1
|
|
---
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: firecrawl
|
|
namespace: firecrawl
|
|
annotations:
|
|
external-dns.alpha.kubernetes.io/hostname: firecrawl.local.mk-labs.cloud
|
|
external-dns.alpha.kubernetes.io/target: "10.1.71.90"
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: fastpass-gateway
|
|
namespace: gateway
|
|
sectionName: https
|
|
hostnames:
|
|
- firecrawl.local.mk-labs.cloud
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
backendRefs:
|
|
- group: ""
|
|
kind: Service
|
|
name: firecrawl-api
|
|
port: 3002
|
|
weight: 1
|