cyberia 2.89.2 → 2.89.45

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: dd-test-development-blue
+  namespace: default
   labels:
     app: dd-test-development-blue
 spec:
@@ -17,7 +18,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v2.89.2
+          image: localhost/rockylinux9-underpost:v2.89.45
 #          resources:
 #            requests:
 #              memory: "96294Ki"
@@ -33,18 +34,23 @@ spec:
               npm install -g underpost &&
               underpost secret underpost --create-from-file /etc/config/.env.development &&
               underpost start --build --run dd-test development
+    
           volumeMounts:
-            - name: config-volume
+            - name: config-volume-dd-test-development-blue
               mountPath: /etc/config
+    
       volumes:
-        - name: config-volume
+        - name: config-volume-dd-test-development-blue
           configMap:
             name: underpost-config
+    
+      
 ---
 apiVersion: v1
 kind: Service
 metadata:
   name: dd-test-development-blue-service
+  namespace: default
 spec:
   selector:
     app: dd-test-development-blue
@@ -90,6 +96,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: dd-test-development-green
+  namespace: default
   labels:
     app: dd-test-development-green
 spec:
@@ -104,7 +111,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v2.89.2
+          image: localhost/rockylinux9-underpost:v2.89.45
 #          resources:
 #            requests:
 #              memory: "96294Ki"
@@ -120,18 +127,23 @@ spec:
               npm install -g underpost &&
               underpost secret underpost --create-from-file /etc/config/.env.development &&
               underpost start --build --run dd-test development
+    
           volumeMounts:
-            - name: config-volume
+            - name: config-volume-dd-test-development-green
               mountPath: /etc/config
+    
       volumes:
-        - name: config-volume
+        - name: config-volume-dd-test-development-green
           configMap:
             name: underpost-config
+    
+      
 ---
 apiVersion: v1
 kind: Service
 metadata:
   name: dd-test-development-green-service
+  namespace: default
 spec:
   selector:
     app: dd-test-development-green

package/manifests/deployment/dd-test-development/proxy.yaml

@@ -4,6 +4,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: test.nexodev.org
+  namespace: default
 spec:
   virtualhost:
     fqdn: test.nexodev.org
@@ -31,6 +32,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: stagging.nexodev.org
+  namespace: default
 spec:
   virtualhost:
     fqdn: stagging.nexodev.org

package/manifests/deployment/kafka/deployment.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: kafka
-  namespace: kafka
   labels:
     app: kafka-app
 spec:
@@ -54,7 +53,6 @@ apiVersion: v1
 kind: Service
 metadata:
   name: kafka-svc
-  namespace: kafka
   labels:
     app: kafka-app
 spec:

package/manifests/deployment/spark/spark-pi-py.yaml

@@ -2,7 +2,6 @@ apiVersion: sparkoperator.k8s.io/v1beta2
 kind: SparkApplication
 metadata:
   name: spark-pi-python
-  namespace: default
 spec:
   type: Python
   pythonVersion: '3'

package/manifests/deployment/tensorflow/tf-gpu-test.yaml

@@ -3,7 +3,6 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: tf-gpu-test-script
-  namespace: default
 data:
   main_tf_gpu_test.py: |
     import os
@@ -37,7 +36,6 @@ apiVersion: v1
 kind: Pod
 metadata:
   name: tf-gpu-test-pod
-  namespace: default
 spec:
   restartPolicy: Never
   runtimeClassName: nvidia

package/manifests/envoy-service-nodeport.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     app: envoy
   name: envoy
-  namespace: projectcontour
 spec:
   externalTrafficPolicy: Cluster
   ports:

package/manifests/kubeadm-calico-config.yaml

@@ -1,119 +1,14 @@
-# This consolidated YAML file contains configurations for:
-# 1. Calico Installation (Installation and APIServer resources)
-# 2. A permissive Egress NetworkPolicy for the 'default' namespace
-#
-# These are standard Kubernetes resources that can be applied directly using 'kubectl apply'.
-# The kubeadm-specific ClusterConfiguration and InitConfiguration have been removed
-# as they are only processed by the 'kubeadm init' command, not 'kubectl apply'.
-
-# --- Calico Installation: Base configuration for Calico ---
-# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.Installation
-apiVersion: operator.tigera.io/v1
-kind: Installation
+apiVersion: crd.projectcalico.org/v1
+kind: GlobalNetworkPolicy
 metadata:
-  name: default
+  name: allow-all-egress-cluster
 spec:
-  # Configures Calico networking.
-  calicoNetwork:
-    # Note: The ipPools section cannot be modified post-install.
-    ipPools:
-      - blockSize: 26
-        cidr: 192.168.0.0/16
-        encapsulation: VXLANCrossSubnet
-        natOutgoing: Enabled
-        nodeSelector: all()
-
----
-# This section configures the Calico API server.
-# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.APIServer
-apiVersion: operator.tigera.io/v1
-kind: APIServer
-metadata:
-  name: default
-spec: {}
-
----
-# This consolidated NetworkPolicy file ensures that all pods in the specified namespaces
-# have unrestricted egress (outbound) access.
-# This is useful for troubleshooting or for environments where strict egress control
-# is not immediately required for these system/default namespaces.
-
----
-# Policy for the 'default' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-default-namespace
-  namespace: default # This policy applies to the 'default' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'kube-system' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-kube-system-namespace
-  namespace: kube-system # This policy applies to the 'kube-system' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'kube-node-lease' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-kube-node-lease-namespace
-  namespace: kube-node-lease # This policy applies to the 'kube-node-lease' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'kube-public' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-kube-public-namespace
-  namespace: kube-public # This policy applies to the 'kube-public' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'tigera-operator' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-tigera-operator-namespace
-  namespace: tigera-operator # This policy applies to the 'tigera-operator' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
+  selector: all()
+  order: 1000
+  types:
     - Egress
   egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
+    - action: Allow
+      destination:
+        nets:
+          - 0.0.0.0/0

package/manifests/letsencrypt-prod.yaml

@@ -2,7 +2,6 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod
-  namespace: cert-manager
 spec:
   acme:
     email: development@underpost.net

package/manifests/mariadb/statefulset.yaml

@@ -49,7 +49,7 @@ spec:
     - metadata:
         name: mariadb-storage
       spec:
-        accessModes: ["ReadWriteOnce"]
+        accessModes: ['ReadWriteOnce']
         storageClassName: mariadb-storage-class
         resources:
           requests:

package/manifests/mongodb/statefulset.yaml

@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
   name: mongodb # Specifies the name of the statefulset
 spec:
-  serviceName: "mongodb-service" # Specifies the service to use
+  serviceName: 'mongodb-service' # Specifies the service to use
   replicas: 2
   selector:
     matchLabels:
@@ -18,8 +18,8 @@ spec:
           image: docker.io/library/mongo:latest
           command:
             - mongod
-            - "--replSet"
-            - "rs0"
+            - '--replSet'
+            - 'rs0'
             # - '--config'
             # - '-f'
             # - '/etc/mongod.conf'
@@ -35,9 +35,9 @@ spec:
             # - '--setParameter'
             # - 'authenticationMechanisms=SCRAM-SHA-1'
             # - '--fork'
-            - "--logpath"
-            - "/var/log/mongodb/mongod.log"
-            - "--bind_ip_all"
+            - '--logpath'
+            - '/var/log/mongodb/mongod.log'
+            - '--bind_ip_all'
           # command: ['sh', '-c']
           # args:
           #   - |
@@ -99,11 +99,11 @@ spec:
                   key: password
           resources:
             requests:
-              cpu: "100m"
-              memory: "256Mi"
+              cpu: '100m'
+              memory: '256Mi'
             limits:
-              cpu: "500m"
-              memory: "512Mi"
+              cpu: '500m'
+              memory: '512Mi'
       volumes:
         - name: keyfile
           secret:
@@ -119,7 +119,7 @@ spec:
     - metadata:
         name: mongodb-storage
       spec:
-        accessModes: ["ReadWriteOnce"]
+        accessModes: ['ReadWriteOnce']
         storageClassName: mongodb-storage-class
         resources:
           requests:

package/manifests/mongodb-4.4/service-deployment.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: mongodb-deployment
-  namespace: default
 spec:
   selector:
     matchLabels:
@@ -17,7 +16,7 @@ spec:
       containers:
         - name: mongodb
           image: mongo:4.4
-          command: ["mongod", "--replSet", "rs0", "--bind_ip_all"]
+          command: ['mongod', '--replSet', 'rs0', '--bind_ip_all']
           # -- bash
           # mongo
           # use admin
@@ -43,7 +42,6 @@ apiVersion: v1
 kind: Service
 metadata:
   name: mongodb-service
-  namespace: default
 spec:
   clusterIP: None
   selector:

package/manifests/mysql/pv-pvc.yaml

@@ -12,7 +12,7 @@ spec:
   accessModes:
     - ReadWriteOnce
   hostPath:
-    path: "/mnt/data"
+    path: '/mnt/data'
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

package/manifests/mysql/statefulset.yaml

@@ -17,7 +17,7 @@ kind: StatefulSet
 metadata:
   name: mysql
 spec:
-  serviceName: "mysql"
+  serviceName: 'mysql'
   selector:
     matchLabels:
       app: mysql

package/manifests/pv-pvc-dd.yaml

@@ -0,0 +1,34 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-dd
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: manual
+  hostPath:
+    path: /home/dd
+    type: DirectoryOrCreate
+  # nodeAffinity:
+  #   required:
+  #     nodeSelectorTerms:
+  #       - matchExpressions:
+  #           - key: kubernetes.io/hostname
+  #             operator: In
+  #             values:
+  #               - localhost
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pvc-dd
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: manual
+  resources:
+    requests:
+      storage: 1Gi

package/manifests/valkey/service.yaml

@@ -2,7 +2,6 @@ apiVersion: v1
 kind: Service
 metadata:
   name: valkey-service
-  namespace: default
 spec:
   selector:
     app: valkey-service

package/manifests/valkey/statefulset.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: valkey-service
-  namespace: default
 spec:
   serviceName: valkey-service
   replicas: 1
@@ -19,8 +18,8 @@ spec:
         - name: valkey-service
           image: docker.io/valkey/valkey:latest
           imagePullPolicy: IfNotPresent
-          command: ["valkey-server"]
-          args: ["--port", "6379"]
+          command: ['valkey-server']
+          args: ['--port', '6379']
           ports:
             - containerPort: 6379
           startupProbe:

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "cyberia",
-    "version": "2.89.2",
+    "version": "2.89.45",
     "description": "Cyberia Engine - Object Layer and Assets Management Microservice",
     "scripts": {
         "start": "env-cmd -f .env.production node --max-old-space-size=8192 src/server",

package/proxy.yaml

@@ -4,6 +4,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: www.cyberiaonline.com
+  namespace: default
 spec:
   virtualhost:
     fqdn: www.cyberiaonline.com
@@ -31,6 +32,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: cyberiaonline.com
+  namespace: default
 spec:
   virtualhost:
     fqdn: cyberiaonline.com
@@ -49,6 +51,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: cryptokoyn.net
+  namespace: default
 spec:
   virtualhost:
     fqdn: cryptokoyn.net
@@ -76,6 +79,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: www.cryptokoyn.net
+  namespace: default
 spec:
   virtualhost:
     fqdn: www.cryptokoyn.net
@@ -94,6 +98,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: itemledger.com
+  namespace: default
 spec:
   virtualhost:
     fqdn: itemledger.com
@@ -121,6 +126,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: www.itemledger.com
+  namespace: default
 spec:
   virtualhost:
     fqdn: www.itemledger.com

package/scripts/device-scan.sh

@@ -1,26 +1,42 @@
 #!/usr/bin/env bash
+set -u -o pipefail
 
 for iface_path in /sys/class/net/*; do
+  [ -e "$iface_path" ] || continue
   name=$(basename "$iface_path")
-  mac=$(< "$iface_path/address")
-  ip=$(ip -4 addr show dev "$name" \
-       | grep -oP '(?<=inet\s)\d+(\.\d+){3}' || echo "—")
-  operstate=$(< "$iface_path/operstate")
-  mtu=$(< "$iface_path/mtu")
-
-  # Driver
-  if [ -L "$iface_path/device/driver" ]; then
+
+  # MAC address
+  if [ -r "$iface_path/address" ]; then
+    mac=$(< "$iface_path/address")
+  else
+    mac="—"
+  fi
+
+  # IPv4: collect all IPv4 CIDRs, strip masks, join with commas (or show —)
+  ip_info=$(ip -4 -o addr show dev "$name" 2>/dev/null | awk '{print $4}')
+  if [ -n "$ip_info" ]; then
+    # Use word-splitting intentionally to iterate lines from ip_info
+    ip=$(printf "%s\n" $ip_info | awk -F/ '{print $1}' | paste -sd, -)
+  else
+    ip="—"
+  fi
+
+  # operstate and mtu
+  operstate=$(< "$iface_path/operstate" 2>/dev/null || echo "—")
+  mtu=$(< "$iface_path/mtu" 2>/dev/null || echo "—")
+
+  # Driver (if available)
+  if [ -e "$iface_path/device/driver" ]; then
     driver=$(basename "$(readlink -f "$iface_path/device/driver")")
   else
     driver="—"
   fi
 
-  # Vendor device ID PCI
+  # PCI vendor:device (if available)
   pci_dev="$iface_path/device"
-  if [ -f "$pci_dev/vendor" ] && [ -f "$pci_dev/device" ]; then
+  if [ -r "$pci_dev/vendor" ] && [ -r "$pci_dev/device" ]; then
     vendor_id=$(< "$pci_dev/vendor")
     device_id=$(< "$pci_dev/device")
-    # parse 0x8086 to 8086, etc.
     vendor_id=${vendor_id#0x}
     device_id=${device_id#0x}
     pci="${vendor_id}:${device_id}"
@@ -28,16 +44,22 @@ for iface_path in /sys/class/net/*; do
     pci="—"
   fi
 
-  # Link Speed
+  # Link speed: only append unit if numeric
   speed=$(cat "$iface_path/speed" 2>/dev/null || echo "—")
+  if [[ "$speed" =~ ^[0-9]+$ ]]; then
+    speed_label="${speed} Mb/s"
+  else
+    speed_label="$speed"
+  fi
+
+  # Print formatted output
+  printf 'Interface: %s\n' "$name"
+  printf '  MAC:          %s\n' "$mac"
+  printf '  IPv4:         %s\n' "$ip"
+  printf '  State:        %s\n' "$operstate"
+  printf '  MTU:          %s\n' "$mtu"
+  printf '  Driver:       %s\n' "$driver"
+  printf '  PCI Vendor:Device: %s\n' "$pci"
+  printf '  Link Speed:   %s\n\n' "$speed_label"
 
-  echo "Interface: $name"
-  echo "  MAC:          $mac"
-  echo "  IPv4:         $ip"
-  echo "  State:       $operstate"
-  echo "  MTU:          $mtu"
-  echo "  Driver:       $driver"
-  echo "  PCI Vendor:Device ID: $pci"
-  echo "  Link Speed:   ${speed}Mb/s"
-  echo
 done

package/scripts/gen-fqdns.sh

@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+# gen-fqdns.sh - generate a readable plain table with FQDNs for all services and pods in the cluster
+
+set -euo pipefail
+
+CLUSTER_DOMAIN="${CLUSTER_DOMAIN:-cluster.local}"
+
+# Services: <service>.<namespace>.svc.<cluster-domain>
+kubectl get svc --all-namespaces -o custom-columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name --no-headers \
+  | awk -v cd="$CLUSTER_DOMAIN" '{printf "%-20s %-34s %-6s %s.%s.svc.%s\n", $1, $2, "svc", $2, $1, cd}'
+
+# Pods: <pod>.<namespace>.pod.<cluster-domain>
+kubectl get pods --all-namespaces -o custom-columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name --no-headers \
+  | awk -v cd="$CLUSTER_DOMAIN" '{printf "%-20s %-34s %-6s %s.%s.pod.%s\n", $1, $2, "pod", $2, $1, cd}'