Files
deploy/manifests/base/notification/hanzocd-notifications-controller-deployment.yaml
zeekayandHanzo Dev 1ab6e799c1 cd: the module is github.com/hanzoai/cd, where it is actually hosted
go.mod still declared `module github.com/hanzoai/deploy` after the repo was
renamed. A Go module path is not cosmetic — it is the resolvable location. So
`go get github.com/hanzoai/cd` could not work, and anything importing this
module had to spell a name that no longer exists at that address. The build log
of v3.6.0 is where it surfaced: the compiler was still emitting
github.com/hanzoai/deploy/cmd/cd/commands.

3541 import paths across 690 .go, 19 .proto, 4 .yaml, 3 .sh, 2 .mod, Procfile
and Makefile. Plus the 62 ghcr.io/hanzoai/deploy image references, moved to
ghcr.io/hanzoai/cd to match hanzo.yml's build target — a distinct string from
the module path, replaced separately so neither could clobber the other.

go mod tidy clean, CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build ./... clean.

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-28 21:16:24 -07:00

137 lines
4.8 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app.kubernetes.io/component: notifications-controller
app.kubernetes.io/name: hanzocd-notifications-controller
app.kubernetes.io/part-of: hanzocd
name: hanzocd-notifications-controller
spec:
strategy:
type: Recreate
selector:
matchLabels:
app.kubernetes.io/name: hanzocd-notifications-controller
template:
metadata:
labels:
app.kubernetes.io/name: hanzocd-notifications-controller
spec:
volumes:
- name: tls-certs
configMap:
name: hanzocd-tls-certs-cm
- name: hanzocd-repo-server-tls
secret:
secretName: hanzocd-repo-server-tls
optional: true
items:
- key: tls.crt
path: tls.crt
- key: tls.key
path: tls.key
- key: ca.crt
path: ca.crt
- name: hanzocd-repo-server-mtls
secret:
secretName: hanzocd-repo-server-mtls
optional: true
items:
- key: client.crt
path: client.crt
- key: client.key
path: client.key
- key: server-ca.crt
path: server-ca.crt
containers:
- args:
- /usr/local/bin/hanzocd-notifications
env:
- name: CD_NOTIFICATIONS_CONTROLLER_LOGFORMAT
valueFrom:
configMapKeyRef:
key: notificationscontroller.log.format
name: hanzocd-cmd-params-cm
optional: true
- name: CD_NOTIFICATIONS_CONTROLLER_LOGLEVEL
valueFrom:
configMapKeyRef:
key: notificationscontroller.log.level
name: hanzocd-cmd-params-cm
optional: true
- name: CD_NOTIFICATION_CONTROLLER_PROCESSORS_COUNT
valueFrom:
configMapKeyRef:
key: notificationscontroller.processors.count
name: hanzocd-cmd-params-cm
optional: true
- name: CD_LOG_FORMAT_TIMESTAMP
valueFrom:
configMapKeyRef:
name: hanzocd-cmd-params-cm
key: log.format.timestamp
optional: true
- name: CD_APPLICATION_NAMESPACES
valueFrom:
configMapKeyRef:
key: application.namespaces
name: hanzocd-cmd-params-cm
optional: true
- name: CD_NOTIFICATION_CONTROLLER_SELF_SERVICE_NOTIFICATION_ENABLED
valueFrom:
configMapKeyRef:
key: notificationscontroller.selfservice.enabled
name: hanzocd-cmd-params-cm
optional: true
- name: CD_NOTIFICATION_CONTROLLER_REPO_SERVER_PLAINTEXT
valueFrom:
configMapKeyRef:
key: notificationscontroller.repo.server.plaintext
name: hanzocd-cmd-params-cm
optional: true
- name: CD_NOTIFICATION_CONTROLLER_REPO_SERVER_CA_CERT_PATH
valueFrom:
configMapKeyRef:
key: notificationscontroller.repo.server.ca.cert.path
name: hanzocd-cmd-params-cm
optional: true
- name: CD_NOTIFICATION_CONTROLLER_REPO_SERVER_CLIENT_CERT_PATH
valueFrom:
configMapKeyRef:
key: notificationscontroller.repo.server.client.cert.path
name: hanzocd-cmd-params-cm
optional: true
- name: CD_NOTIFICATION_CONTROLLER_REPO_SERVER_CLIENT_CERT_KEY_PATH
valueFrom:
configMapKeyRef:
key: notificationscontroller.repo.server.client.cert.key.path
name: hanzocd-cmd-params-cm
optional: true
workingDir: /app
livenessProbe:
tcpSocket:
port: 9001
image: ghcr.io/hanzoai/cd:latest
imagePullPolicy: Always
name: hanzocd-notifications-controller
volumeMounts:
- name: tls-certs
mountPath: /app/config/tls
- name: hanzocd-repo-server-tls
mountPath: /app/config/reposerver/tls
- name: hanzocd-repo-server-mtls
mountPath: /app/config/reposerver/mtls
securityContext:
capabilities:
drop:
- ALL
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
serviceAccountName: hanzocd-notifications-controller
securityContext:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
nodeSelector:
kubernetes.io/os: linux