zeekayandHanzo Dev
e4d0e884a8
Every image in zoo-mainnet except consul and the ingress is published for linux/amd64 alone, and none of these files said so. Unpinned, the scheduler is free to place them on spark, where the kubelet refuses the pull with `no match for platform in manifest` -- which reads as a broken image and is a misplaced pod. zoo-ui, zoo-gym, zoo-bot and zoo-build had been sitting in ImagePullBackOff there. The pin follows the artifact: an image that exists for one architecture may only be scheduled where that architecture is. consul and the ingress are multi-arch and stay free to land anywhere. Co-authored-by: Hanzo Dev <[email protected]>
70 lines
2.1 KiB
YAML
70 lines
2.1 KiB
YAML
# Generated from the live zoo-mainnet/zoo-bot Deployment on do-sfo3-zoo-k8s
|
|
# by hack/live2values.py. Live is the source: a repo of hand-applied
|
|
# manifests has unknown currency, the running fleet does not.
|
|
replicas: 1
|
|
selectorLabels:
|
|
app: zoo-bot
|
|
containerName: spa
|
|
image:
|
|
repository: ghcr.io/zooai/zoo-bot
|
|
tag: 0.1.0
|
|
digest: sha256:575114a9feaa80bfaf9ec939dac7cc32419a5937d0123582cf2547ac8f684927
|
|
pullPolicy: IfNotPresent
|
|
labels:
|
|
app.kubernetes.io/cluster: zoo-k8s
|
|
app.kubernetes.io/env: mainnet
|
|
resources:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 32Mi
|
|
livenessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /health
|
|
port: 3000
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 30
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /health
|
|
port: 3000
|
|
scheme: HTTP
|
|
initialDelaySeconds: 2
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
ports:
|
|
- containerPort: 3000
|
|
# ghcr-zooai, because that is the name this namespace has. `ghcr-luxfi` does
|
|
# not exist in zoo-mainnet -- a pod naming it gets no credential at all and the
|
|
# kubelet falls back to anonymous, which GHCR answers 403/NotFound for a private
|
|
# package. That reads as a missing image and is a missing secret. Verified
|
|
# 2026-09-09: ghcr-zooai pulls every repo this namespace references, zooai/* and
|
|
# the luxfi/* ones alike.
|
|
imagePullSecrets:
|
|
- name: ghcr-zooai
|
|
rollingUpdate:
|
|
maxSurge: 25%
|
|
maxUnavailable: 25%
|
|
topologySpread:
|
|
enabled: false
|
|
lifecycle: null
|
|
terminationGracePeriodSeconds: 30
|
|
|
|
# The image for this workload is published for linux/amd64 only, and this
|
|
# cluster has an arm64 node. Unpinned, the scheduler is free to place it on
|
|
# spark, where the kubelet refuses the pull with `no match for platform in
|
|
# manifest` -- which reads as a broken image and is a misplaced pod. Measured
|
|
# 2026-09-09: zoo-ui, zoo-gym, zoo-bot and zoo-build had all been sitting in
|
|
# ImagePullBackOff on spark. Pin follows the artifact: an image that exists for
|
|
# one architecture may only be scheduled where that architecture is.
|
|
nodeSelector:
|
|
kubernetes.io/arch: amd64
|