zeekayandHanzo Dev
947f817b04
kms/mpc.zoo.network cut over to the zoo cluster (Traefik file-provider CM + Cloudflare DNS-01 + DNS flip to zoo LB; hanzo CR entry + ingresses removed). Verified: public kms.zoo.network health 200 + zoo-kms login 200. Zoo DAO + Z Safes deployed on 200200 (0x9011 @ live nonce 91, default salts): DAO 0x229599f227231d8C90fcF1a78589F5DC4b7A6962 (1/1 owner 0x9011) Z 0xb8BbCdde5E8713f9849D1520D71Bc08Af94E6F00 (1/1 owner 0x9011) TL 0x31C89A0509F7783b742B01Be9103c05BbF4B9510 (minDelay 86400, DAO proposer) Block-production PROVEN: 5-set produced 13348-13354, all 5 converged. (nonce-0 predictions 0x5232/0x3Be3 were unachievable; tool adapts to live nonce.) Co-authored-by: Hanzo Dev <[email protected]>
40 lines
1.3 KiB
YAML
40 lines
1.3 KiB
YAML
# kms.zoo.network -> Zoo KMS (kms:80) in the zoo cluster.
|
|
#
|
|
# REPOINT TARGET (staged): kms.zoo.network TODAY resolves to the shared HANZO KMS
|
|
# (hanzo-operator-managed `hanzo-domains-*-kms-zoo-network` Ingresses in
|
|
# do-sfo3-hanzo-k8s, backend svc kms:80 -> luxfi/kms:1.11.9). Cutover =
|
|
# 1. remove kms.zoo.network from the hanzo-domains CR (hanzo cluster), AND
|
|
# 2. apply THIS Ingress in do-sfo3-zoo-k8s, AND
|
|
# 3. move the DNS record to the zoo cluster ingress LB.
|
|
# It is a cross-cluster DNS cutover — HOLD for owner go. Backup of the current
|
|
# hanzo-side ingresses is preserved before any change. Investigation PROVED zero
|
|
# Zoo secrets live in the Hanzo KMS, so the cutover strands nothing.
|
|
# hanzoai/ingress (Traefik), class=ingress, cert-manager letsencrypt-prod.
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: zoo-kms
|
|
namespace: zoo-kms
|
|
labels:
|
|
app.kubernetes.io/part-of: kms
|
|
brand: zoo
|
|
annotations:
|
|
kubernetes.io/ingress.class: ingress
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod-cf
|
|
spec:
|
|
rules:
|
|
- host: kms.zoo.network
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: kms
|
|
port:
|
|
number: 80
|
|
tls:
|
|
- hosts:
|
|
- kms.zoo.network
|
|
secretName: zoo-kms-tls
|