Files
zeekay 37225b81ae infra: import lux-targeted manifests from hanzo universe
Per separation-of-concerns: hanzo universe was holding 11 manifests
that target lux-k8s. Moved them here where they belong.

Imported into k8s/lux-k8s/:
  - agnost/, api-gateway/, bootnode-lux/, bridge/, exchange/,
    explorer/, operator/  (unique to hanzo universe, fresh copies)
  - gateway/  (hanzo had newer pins than lux's local copy)

Skipped: validators/ — lux universe already has the newer
(luxd v1.27.4) version. Hanzo's older v1.23.31 copy is being
dropped, not merged.

Imported into k8s/:
  - status/{deployment,configmap,ingressroute}.yaml
    (Hanzo status SPA in lux-system ns on lux-k8s)
  - nchain/crs/mainnet.yaml
    (Network CR for lux-mainnet ns on lux-k8s)
2026-05-22 20:36:19 -07:00

184 lines
3.8 KiB
YAML

# Agnost GitOps Platform on lux-k8s
# Manages ops.cloud.lux.network
---
apiVersion: v1
kind: Namespace
metadata:
name: agnost
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: platform
namespace: agnost
labels:
app: platform
spec:
replicas: 1
selector:
matchLabels:
app: platform
template:
metadata:
labels:
app: platform
spec:
imagePullSecrets:
- name: ghcr-secret
containers:
- name: platform
image: ghcr.io/hanzoai/gitops-platform:0.0.1
imagePullPolicy: Always
ports:
- containerPort: 4000
env:
- name: CACHE_HOSTNAME
valueFrom:
secretKeyRef:
name: redis
key: hostname
- name: CACHE_PWD
valueFrom:
secretKeyRef:
name: redis
key: password
- name: CLUSTER_DB_URI
valueFrom:
secretKeyRef:
name: mongodb
key: databaseURI
- name: CLUSTER_DB_USER
valueFrom:
secretKeyRef:
name: mongodb
key: username
- name: CLUSTER_DB_PWD
valueFrom:
secretKeyRef:
name: mongodb
key: password
- name: PASSPHRASE
valueFrom:
secretKeyRef:
name: agnost-config
key: passPhrase
- name: CLUSTER_ACCESS_TOKEN
valueFrom:
secretKeyRef:
name: agnost-config
key: clusterAccessToken
- name: MASTER_TOKEN
valueFrom:
secretKeyRef:
name: agnost-config
key: masterToken
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: sync
namespace: agnost
labels:
app: sync
spec:
replicas: 1
selector:
matchLabels:
app: sync
template:
metadata:
labels:
app: sync
spec:
imagePullSecrets:
- name: ghcr-secret
containers:
- name: sync
image: ghcr.io/hanzoai/gitops-sync:0.0.1
imagePullPolicy: Always
ports:
- containerPort: 4000
env:
- name: CACHE_HOSTNAME
valueFrom:
secretKeyRef:
name: redis
key: hostname
- name: CACHE_PWD
valueFrom:
secretKeyRef:
name: redis
key: password
resources:
requests:
cpu: 50m
memory: 128Mi
limits:
cpu: 200m
memory: 256Mi
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: agnost-webhook
namespace: agnost
labels:
app: agnost-webhook
spec:
replicas: 1
selector:
matchLabels:
app: agnost-webhook
template:
metadata:
labels:
app: agnost-webhook
spec:
imagePullSecrets:
- name: ghcr-secret
containers:
- name: agnost-webhook
image: ghcr.io/hanzoai/gitops-webhook:0.0.1
imagePullPolicy: Always
ports:
- containerPort: 443
resources:
requests:
cpu: 50m
memory: 64Mi
limits:
cpu: 200m
memory: 128Mi
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: agnost-platform
namespace: agnost
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
ingressClassName: ingress
tls:
- hosts:
- ops.cloud.lux.network
secretName: ops-cloud-lux-network-tls
rules:
- host: ops.cloud.lux.network
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: platform
port:
number: 4000