Files
vm/k8s/deployment.yaml
zooqueenandHanzo Dev a121f8d0d0 refactor: rebrand from casvisor to hanzoai/visor, remove hardcoded credentials
- Rename Go module from github.com/casvisor/casvisor to github.com/hanzoai/visor
- Update all copyright headers from casbin to Hanzo Industries Inc
- Remove all hardcoded passwords and credentials from config files
- All credentials now sourced from environment variables / Hanzo KMS
- Switch default database from MySQL to PostgreSQL (matching production)
- Rename binary output from server/casvisor to visor
- Update Dockerfile, build.sh, docker-compose.yml, docker-entrypoint.sh
- Replace casdoor* config key references with iam* equivalents
- Update CI to use PostgreSQL service and mark CI-only test password
- Add visor and casvisor binaries to .gitignore
- Add envFrom secretRef for visor-env in K8s deployment
- Add ExternalSecret template for Hanzo KMS credential provisioning

Co-authored-by: Hanzo Dev <[email protected]>
2026-02-21 00:04:31 -08:00

68 lines
1.5 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: visor
namespace: hanzo
labels:
app: visor
spec:
replicas: 2
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 1
maxUnavailable: 0
selector:
matchLabels:
app: visor
template:
metadata:
labels:
app: visor
spec:
serviceAccountName: visor
imagePullSecrets:
- name: ghcr-secret
containers:
- name: visor
image: ghcr.io/hanzoai/visor:latest
ports:
- containerPort: 19000
protocol: TCP
env:
- name: RUNNING_IN_DOCKER
value: "true"
envFrom:
- secretRef:
name: visor-env
optional: true
volumeMounts:
- name: config
mountPath: /conf/app.conf
subPath: app.conf
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: "1"
memory: 1Gi
livenessProbe:
httpGet:
path: /api/health
port: 19000
initialDelaySeconds: 15
periodSeconds: 30
timeoutSeconds: 5
readinessProbe:
httpGet:
path: /api/health
port: 19000
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 5
volumes:
- name: config
secret:
secretName: visor-config