mirror of
https://github.com/hanzoai/tasks.git
synced 2026-11-03 03:56:04 +00:00
zeekay
818d40ed77
Production deployment infrastructure for tasks.hanzo.ai: K8s manifests (k8s/): - deployment.yaml: tasks server (gRPC 7233) + tasks-ui (HTTP 8080) with PostgreSQL backend, KMS-managed secrets, OTEL tracing - ingress.yaml: tasks.hanzo.ai (UI) + tasks-api.hanzo.ai (gRPC) - configmap.yaml: dynamic config (30d retention, rate limits) - kms-secrets.yaml: KMSSecret CRD for POSTGRES_PASSWORD, TASKS_AUTH_SECRET, IAM_CLIENT_SECRET - init-db.yaml: one-time job to create tasks + tasks_visibility DBs - kustomization.yaml: Kustomize overlay IAM integration: - Client ID: app-tasks (matches live deployment) - OIDC callback: https://tasks.hanzo.ai/auth/sso/callback - JWT validation via hanzo.id JWKS (TEMPORAL_JWT_KEY_SOURCE1) - scripts/register-iam.sh: IAM registration instructions CI/CD (GHCR migration): - docker-bake.hcl: IMAGE_REPO -> ghcr.io/hanzoai, image names server -> tasks, admin-tools -> tasks-admin-tools - build-and-publish.yml: GHCR auth via GITHUB_TOKEN - promote-*.yml: rewritten for GHCR (was DockerHub) - docker-build-manual.yml: GHCR push support - server.Dockerfile: user temporal -> tasks, workdir /etc/tasks - admin-tools.Dockerfile: matching user/path rebrand
30 lines
901 B
YAML
30 lines
901 B
YAML
# Hanzo Tasks -- Tasks Server Configuration
|
|
#
|
|
# Non-secret configuration for tasks server and UI.
|
|
# Mounted as /etc/tasks/dynamic-config/dynamic-config.yaml in the tasks container.
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: tasks-config
|
|
namespace: hanzo
|
|
data:
|
|
# Tasks dynamic config -- tuning knobs that don't require restart
|
|
dynamic-config.yaml: |
|
|
# Multi-tenant namespace isolation
|
|
system.forceSearchAttributesCacheRefreshOnRead:
|
|
- value: true
|
|
# Retain workflow history for 30 days
|
|
history.workflowExecutionRetentionPeriod:
|
|
- value: "720h"
|
|
# Rate limits per namespace (per org)
|
|
frontend.namespaceRPS:
|
|
- value: 400
|
|
frontend.globalNamespaceRPS:
|
|
- value: 1200
|
|
# Max concurrent workflow task pollers per namespace
|
|
matching.numTaskqueueReadPartitions:
|
|
- value: 4
|
|
matching.numTaskqueueWritePartitions:
|
|
- value: 4
|