24c449ecae
- Clear default passwords in all service configs, require env vars
- Add JWT auth + role middleware to WebSocket endpoints
- Add origin whitelist to WebSocket upgrader (CORS protection)
- Fix goroutine leak in WS proxy (double errCh read)
- Update docker-compose to require secrets via ${VAR:?...} syntax
- Mark deprecated k8s configmap passwords as REPLACE_AT_DEPLOY_TIME
Co-Authored-By: Claude <noreply@anthropic.com>
88 lines
1.5 KiB
YAML
88 lines
1.5 KiB
YAML
## DEPRECATED: These raw K8s manifests are superseded by iloom-deploy/charts/.
|
|
## DataSource values must be injected via Kubernetes Secrets at deploy time.
|
|
## See iloom-deploy/charts/infra/templates/secrets.yaml for the Helm-based approach.
|
|
##
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: muyu-system-config
|
|
namespace: iloom
|
|
data:
|
|
system.yaml: |
|
|
Name: system.rpc
|
|
ListenOn: 0.0.0.0:9001
|
|
|
|
Etcd:
|
|
Hosts:
|
|
- etcd:2379
|
|
Key: system.rpc
|
|
|
|
DataSource: REPLACE_AT_DEPLOY_TIME
|
|
|
|
Cache:
|
|
- Host: redis:6379
|
|
|
|
Log:
|
|
ServiceName: system-rpc
|
|
Mode: console
|
|
Level: info
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: muyu-inventory-config
|
|
namespace: iloom
|
|
data:
|
|
inventory.yaml: |
|
|
Name: inventory.rpc
|
|
ListenOn: 0.0.0.0:9002
|
|
|
|
Etcd:
|
|
Hosts:
|
|
- etcd:2379
|
|
Key: inventory.rpc
|
|
|
|
DataSource: REPLACE_AT_DEPLOY_TIME
|
|
|
|
Cache:
|
|
- Host: redis:6379
|
|
|
|
Log:
|
|
ServiceName: inventory-rpc
|
|
Mode: console
|
|
Level: info
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: muyu-gateway-config
|
|
namespace: iloom
|
|
data:
|
|
gateway.yaml: |
|
|
Name: gateway-api
|
|
Host: 0.0.0.0
|
|
Port: 8888
|
|
|
|
Auth:
|
|
AccessSecret: REPLACE_AT_DEPLOY_TIME
|
|
AccessExpire: 7200
|
|
|
|
SystemRpc:
|
|
Etcd:
|
|
Hosts:
|
|
- etcd:2379
|
|
Key: system.rpc
|
|
NonBlock: true
|
|
|
|
InventoryRpc:
|
|
Etcd:
|
|
Hosts:
|
|
- etcd:2379
|
|
Key: inventory.rpc
|
|
NonBlock: true
|
|
|
|
Log:
|
|
ServiceName: gateway-api
|
|
Mode: console
|
|
Level: info
|