zeekayandHanzo Dev
947f817b04
kms/mpc.zoo.network cut over to the zoo cluster (Traefik file-provider CM + Cloudflare DNS-01 + DNS flip to zoo LB; hanzo CR entry + ingresses removed). Verified: public kms.zoo.network health 200 + zoo-kms login 200. Zoo DAO + Z Safes deployed on 200200 (0x9011 @ live nonce 91, default salts): DAO 0x229599f227231d8C90fcF1a78589F5DC4b7A6962 (1/1 owner 0x9011) Z 0xb8BbCdde5E8713f9849D1520D71Bc08Af94E6F00 (1/1 owner 0x9011) TL 0x31C89A0509F7783b742B01Be9103c05BbF4B9510 (minDelay 86400, DAO proposer) Block-production PROVEN: 5-set produced 13348-13354, all 5 converged. (nonce-0 predictions 0x5232/0x3Be3 were unachievable; tool adapts to live nonce.) Co-authored-by: Hanzo Dev <[email protected]>
25 lines
981 B
YAML
25 lines
981 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
# Zoo KMS โ Zoo's own Go-native KMS (ghcr.io/zooai/kms), zoo-kms namespace,
|
|
# do-sfo3-zoo-k8s. Mirrors lux-kms-go. White-labelled to Zoo by domain + org.
|
|
#
|
|
# Bootstrap secrets (kms-secrets: master-key-b64, encryption-key-b64; zoo-kms-oidc:
|
|
# client-secret, state-secret) are created IMPERATIVELY (create-if-absent, NEVER
|
|
# committed in plaintext) โ see the one-time bootstrap commands in LLM.md
|
|
# (ยง Zoo crypto-sovereignty). BACK UP encryption-key-b64 (store unreadable without
|
|
# it). ingress.yaml is a STAGED cross-cluster repoint target โ HOLD for owner go.
|
|
namespace: zoo-kms
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- statefulset.yaml
|
|
# - ingress.yaml # zoo cluster routes via Traefik file-provider (cm zoo-system/zoo-dynamic), NOT k8s Ingress; this is reference-only
|
|
|
|
labels:
|
|
- pairs:
|
|
app.kubernetes.io/part-of: kms
|
|
app.kubernetes.io/component: kms
|
|
brand: zoo
|
|
includeSelectors: false
|