kms/mpc.zoo.network cut over to the zoo cluster (Traefik file-provider CM + Cloudflare DNS-01 + DNS flip to zoo LB; hanzo CR entry + ingresses removed). Verified: public kms.zoo.network health 200 + zoo-kms login 200. Zoo DAO + Z Safes deployed on 200200 (0x9011 @ live nonce 91, default salts): DAO 0x229599f227231d8C90fcF1a78589F5DC4b7A6962 (1/1 owner 0x9011) Z 0xb8BbCdde5E8713f9849D1520D71Bc08Af94E6F00 (1/1 owner 0x9011) TL 0x31C89A0509F7783b742B01Be9103c05BbF4B9510 (minDelay 86400, DAO proposer) Block-production PROVEN: 5-set produced 13348-13354, all 5 converged. (nonce-0 predictions 0x5232/0x3Be3 were unachievable; tool adapts to live nonce.) Co-authored-by: Hanzo Dev <[email protected]>
26 lines
1.0 KiB
YAML
26 lines
1.0 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
# Zoo MPC โ the one canonical Zoo threshold-signing ring: 5-node, 3-of-5
|
|
# consensus on ghcr.io/zooai/mpc (Zoo-branded lux-native mpcd), in the zoo-mpc
|
|
# namespace of do-sfo3-zoo-k8s. Crypto-sovereign to Zoo (own DKG key, own store).
|
|
#
|
|
# Bootstrap secrets (mpc-secrets: jwt-secret, mpc-password; mpc-internal-api:
|
|
# MPC_INTERNAL_API_KEY, MPC_THRESHOLD_AUTH_TOKEN) are random 32-byte values
|
|
# created IMPERATIVELY (create-if-absent, NEVER committed in plaintext) โ see the
|
|
# one-time bootstrap commands in LLM.md (ยง Zoo crypto-sovereignty). ingress.yaml
|
|
# is a STAGED cross-cluster repoint target โ HOLD for owner go.
|
|
namespace: zoo-mpc
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- statefulset.yaml
|
|
# - ingress.yaml # zoo cluster routes via Traefik file-provider (cm zoo-system/zoo-dynamic), NOT k8s Ingress; this is reference-only
|
|
|
|
labels:
|
|
- pairs:
|
|
app.kubernetes.io/part-of: mpc
|
|
app.kubernetes.io/component: mpc
|
|
brand: zoo
|
|
includeSelectors: false
|