Files
universe/k8s/zoo-mpc/kustomization.yaml
zeekayandHanzo Dev 947f817b04 feat(sovereignty): Zoo repoint DONE + DAO/Z Safes DEPLOYED on 200200
kms/mpc.zoo.network cut over to the zoo cluster (Traefik file-provider CM +
Cloudflare DNS-01 + DNS flip to zoo LB; hanzo CR entry + ingresses removed).
Verified: public kms.zoo.network health 200 + zoo-kms login 200.

Zoo DAO + Z Safes deployed on 200200 (0x9011 @ live nonce 91, default salts):
  DAO  0x229599f227231d8C90fcF1a78589F5DC4b7A6962 (1/1 owner 0x9011)
  Z    0xb8BbCdde5E8713f9849D1520D71Bc08Af94E6F00 (1/1 owner 0x9011)
  TL   0x31C89A0509F7783b742B01Be9103c05BbF4B9510 (minDelay 86400, DAO proposer)
Block-production PROVEN: 5-set produced 13348-13354, all 5 converged.
(nonce-0 predictions 0x5232/0x3Be3 were unachievable; tool adapts to live nonce.)

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-14 11:53:20 -07:00

26 lines
1.0 KiB
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# Zoo MPC โ€” the one canonical Zoo threshold-signing ring: 5-node, 3-of-5
# consensus on ghcr.io/zooai/mpc (Zoo-branded lux-native mpcd), in the zoo-mpc
# namespace of do-sfo3-zoo-k8s. Crypto-sovereign to Zoo (own DKG key, own store).
#
# Bootstrap secrets (mpc-secrets: jwt-secret, mpc-password; mpc-internal-api:
# MPC_INTERNAL_API_KEY, MPC_THRESHOLD_AUTH_TOKEN) are random 32-byte values
# created IMPERATIVELY (create-if-absent, NEVER committed in plaintext) โ€” see the
# one-time bootstrap commands in LLM.md (ยง Zoo crypto-sovereignty). ingress.yaml
# is a STAGED cross-cluster repoint target โ€” HOLD for owner go.
namespace: zoo-mpc
resources:
- namespace.yaml
- statefulset.yaml
# - ingress.yaml # zoo cluster routes via Traefik file-provider (cm zoo-system/zoo-dynamic), NOT k8s Ingress; this is reference-only
labels:
- pairs:
app.kubernetes.io/part-of: mpc
app.kubernetes.io/component: mpc
brand: zoo
includeSelectors: false