knowledge/deploy/deployment.yml at main · JorisJonkers-dev/knowledge · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
apiVersion: deployment.jorisjonkers.dev/v2
kind: Deployment
metadata:
  name: knowledge
  labels:
    area: knowledge
spec:
  services:
    knowledge-api:
      image: ghcr.io/jorisjonkers-dev/knowledge/knowledge-api:v0.2.0
      namespace: knowledge-system
      account: knowledge-api
      ports:
        - name: http
          containerPort: 8080
      data:
        postgres:
          claim: data.platform-postgres.knowledge-api
          database: knowledge_db
          env:
            host: DB_HOST
            port: DB_PORT
            name: DB_NAME
            user: DB_USER
            password: DB_PASSWORD
      messaging:
        rabbitmq:
          claim: data.platform-rabbitmq.knowledge-api
          exchange: knowledge
          publishRoutingKeys:
            - knowledge.lesson
            - knowledge.decision
            - knowledge.ingest
          env:
            host: RABBITMQ_HOST
            port: RABBITMQ_PORT
            user: RABBITMQ_USER
            password: RABBITMQ_PASSWORD
            vhost: RABBITMQ_VHOST
      placement:
        site: frankfurt
        nodeSelector:
          personal-stack/site: frankfurt
      autoscaling:
        minReplicas: 1
        maxReplicas: 1
      credentials:
        - name: postgres
          claim: data.platform-postgres.knowledge-api
          destinationSecret: knowledge-api-postgres
        - name: rabbitmq
          claim: data.platform-rabbitmq.knowledge-api
          destinationSecret: knowledge-api-rabbitmq
        - name: mcp-bearer
          claim: secret.knowledge-system.mcp-bearer
          destinationSecret: knowledge-api-mcp-tokens
      observability:
        metrics:
          - port: http
            path: /api/actuator/prometheus
        gatus:
          - name: readiness
            url: http://knowledge-api.knowledge-system.svc.cluster.local:8080/api/actuator/health/readiness
      routes:
        - host: kb.jorisjonkers.dev
          expose:
            tier: public-frankfurt
          rules:
            - path: /mcp
              port: http
              operation: exact
              auth:
                scope: anonymous
            - path: /mcp/
              port: http
              operation: prefix
              auth:
                scope: anonymous
            - path: /install.sh
              port: http
              operation: exact
              auth:
                scope: anonymous
            - path: /install-agents.sh
              port: http
              operation: exact
              auth:
                scope: anonymous
            - path: /
              port: http
              operation: prefix
              middleware:
                - forward-auth
              auth:
                scope: authenticated
      safety:
        gateOn:
          - parity
          - render-drift
    knowledge-ingest-worker:
      image: ghcr.io/jorisjonkers-dev/knowledge/knowledge-ingest-worker:v0.2.0
      namespace: knowledge-system
      account: knowledge-ingest-worker
      data:
        postgres:
          claim: data.platform-postgres.knowledge-ingest-worker
          database: knowledge_db
          env:
            host: DB_HOST
            port: DB_PORT
            name: DB_NAME
            user: DB_USER
            password: DB_PASSWORD
        vaultClone:
          pvc: knowledge-vault-clone
          size: 5Gi
          accessMode: ReadWriteOnce
          mountPath: /var/lib/knowledge-vault
          stateMovePlanRequired: true
      messaging:
        rabbitmq:
          claim: data.platform-rabbitmq.knowledge-ingest-worker
          queue: knowledge.ingest
          bindings:
            - exchange: knowledge
              routingKey: knowledge.*
          env:
            host: RABBITMQ_HOST
            port: RABBITMQ_PORT
            user: RABBITMQ_USER
            password: RABBITMQ_PASSWORD
            vhost: RABBITMQ_VHOST
      placement:
        site: frankfurt
        nodeSelector:
          personal-stack/site: frankfurt
      autoscaling:
        minReplicas: 1
        maxReplicas: 1
      credentials:
        - name: postgres
          claim: data.platform-postgres.knowledge-ingest-worker
          destinationSecret: knowledge-ingest-worker-postgres
        - name: rabbitmq
          claim: data.platform-rabbitmq.knowledge-ingest-worker
          destinationSecret: knowledge-ingest-worker-rabbitmq
        - name: vault-deploy-key
          claim: secret.knowledge-system.vault-deploy-key
          destinationSecret: knowledge-vault-deploy-key
      hooks:
        pre:
          - knowledge-vault-migrate-2026-05-18
      safety:
        gateOn:
          - parity
          - render-drift