cyberia 3.2.5 → 3.2.12

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -20,7 +20,8 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v3.2.5
+          image: underpost/underpost-engine:v3.2.12
+          imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:
                 name: underpost-config
@@ -29,12 +30,11 @@ spec:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 &&
-              npm install -g underpost &&
               underpost secret underpost --create-from-env &&
               underpost start --build --run dd-test development
 
 
+
 ---
 apiVersion: v1
 kind: Service
@@ -45,50 +45,86 @@ spec:
   selector:
     app: dd-test-development-blue
   ports:
-    - name: 'tcp-4046'
+    - name: 'tcp-4033'
+      protocol: TCP
+      port: 4033
+      targetPort: 4033
+    - name: 'udp-4033'
+      protocol: UDP
+      port: 4033
+      targetPort: 4033
+
+    - name: 'tcp-4034'
+      protocol: TCP
+      port: 4034
+      targetPort: 4034
+    - name: 'udp-4034'
+      protocol: UDP
+      port: 4034
+      targetPort: 4034
+
+    - name: 'tcp-4035'
+      protocol: TCP
+      port: 4035
+      targetPort: 4035
+    - name: 'udp-4035'
+      protocol: UDP
+      port: 4035
+      targetPort: 4035
+
+    - name: 'tcp-4036'
+      protocol: TCP
+      port: 4036
+      targetPort: 4036
+    - name: 'udp-4036'
+      protocol: UDP
+      port: 4036
+      targetPort: 4036
+
+    - name: 'tcp-4037'
       protocol: TCP
-      port: 4046
-      targetPort: 4046
-    - name: 'udp-4046'
+      port: 4037
+      targetPort: 4037
+    - name: 'udp-4037'
       protocol: UDP
-      port: 4046
-      targetPort: 4046
+      port: 4037
+      targetPort: 4037
 
-    - name: 'tcp-4047'
+    - name: 'tcp-4038'
       protocol: TCP
-      port: 4047
-      targetPort: 4047
-    - name: 'udp-4047'
+      port: 4038
+      targetPort: 4038
+    - name: 'udp-4038'
       protocol: UDP
-      port: 4047
-      targetPort: 4047
+      port: 4038
+      targetPort: 4038
 
-    - name: 'tcp-4048'
+    - name: 'tcp-4039'
       protocol: TCP
-      port: 4048
-      targetPort: 4048
-    - name: 'udp-4048'
+      port: 4039
+      targetPort: 4039
+    - name: 'udp-4039'
       protocol: UDP
-      port: 4048
-      targetPort: 4048
+      port: 4039
+      targetPort: 4039
 
-    - name: 'tcp-4049'
+    - name: 'tcp-4040'
       protocol: TCP
-      port: 4049
-      targetPort: 4049
-    - name: 'udp-4049'
+      port: 4040
+      targetPort: 4040
+    - name: 'udp-4040'
       protocol: UDP
-      port: 4049
-      targetPort: 4049
+      port: 4040
+      targetPort: 4040
 
-    - name: 'tcp-4050'
+    - name: 'tcp-4041'
       protocol: TCP
-      port: 4050
-      targetPort: 4050
-    - name: 'udp-4050'
+      port: 4041
+      targetPort: 4041
+    - name: 'udp-4041'
       protocol: UDP
-      port: 4050
-      targetPort: 4050
+      port: 4041
+      targetPort: 4041
   type: LoadBalancer
 ---
 apiVersion: apps/v1
@@ -112,7 +148,8 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v3.2.5
+          image: underpost/underpost-engine:v3.2.12
+          imagePullPolicy: IfNotPresent
           envFrom:
             - secretRef:
                 name: underpost-config
@@ -121,12 +158,11 @@ spec:
             - /bin/sh
             - -c
             - >
-              npm install -g npm@11.2.0 &&
-              npm install -g underpost &&
               underpost secret underpost --create-from-env &&
               underpost start --build --run dd-test development
 
 
+
 ---
 apiVersion: v1
 kind: Service
@@ -137,48 +173,84 @@ spec:
   selector:
     app: dd-test-development-green
   ports:
-    - name: 'tcp-4046'
+    - name: 'tcp-4033'
+      protocol: TCP
+      port: 4033
+      targetPort: 4033
+    - name: 'udp-4033'
+      protocol: UDP
+      port: 4033
+      targetPort: 4033
+
+    - name: 'tcp-4034'
+      protocol: TCP
+      port: 4034
+      targetPort: 4034
+    - name: 'udp-4034'
+      protocol: UDP
+      port: 4034
+      targetPort: 4034
+
+    - name: 'tcp-4035'
+      protocol: TCP
+      port: 4035
+      targetPort: 4035
+    - name: 'udp-4035'
+      protocol: UDP
+      port: 4035
+      targetPort: 4035
+
+    - name: 'tcp-4036'
+      protocol: TCP
+      port: 4036
+      targetPort: 4036
+    - name: 'udp-4036'
+      protocol: UDP
+      port: 4036
+      targetPort: 4036
+
+    - name: 'tcp-4037'
       protocol: TCP
-      port: 4046
-      targetPort: 4046
-    - name: 'udp-4046'
+      port: 4037
+      targetPort: 4037
+    - name: 'udp-4037'
       protocol: UDP
-      port: 4046
-      targetPort: 4046
+      port: 4037
+      targetPort: 4037
 
-    - name: 'tcp-4047'
+    - name: 'tcp-4038'
       protocol: TCP
-      port: 4047
-      targetPort: 4047
-    - name: 'udp-4047'
+      port: 4038
+      targetPort: 4038
+    - name: 'udp-4038'
       protocol: UDP
-      port: 4047
-      targetPort: 4047
+      port: 4038
+      targetPort: 4038
 
-    - name: 'tcp-4048'
+    - name: 'tcp-4039'
       protocol: TCP
-      port: 4048
-      targetPort: 4048
-    - name: 'udp-4048'
+      port: 4039
+      targetPort: 4039
+    - name: 'udp-4039'
       protocol: UDP
-      port: 4048
-      targetPort: 4048
+      port: 4039
+      targetPort: 4039
 
-    - name: 'tcp-4049'
+    - name: 'tcp-4040'
       protocol: TCP
-      port: 4049
-      targetPort: 4049
-    - name: 'udp-4049'
+      port: 4040
+      targetPort: 4040
+    - name: 'udp-4040'
       protocol: UDP
-      port: 4049
-      targetPort: 4049
+      port: 4040
+      targetPort: 4040
 
-    - name: 'tcp-4050'
+    - name: 'tcp-4041'
       protocol: TCP
-      port: 4050
-      targetPort: 4050
-    - name: 'udp-4050'
+      port: 4041
+      targetPort: 4041
+    - name: 'udp-4041'
       protocol: UDP
-      port: 4050
-      targetPort: 4050
+      port: 4041
+      targetPort: 4041
   type: LoadBalancer

package/manifests/deployment/dd-test-development/proxy.yaml

@@ -15,7 +15,7 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4046
+          port: 4033
           weight: 100
     
     - conditions:
@@ -24,7 +24,7 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4047
+          port: 4034
           weight: 100
     
     - conditions:
@@ -33,7 +33,43 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4048
+          port: 4035
+          weight: 100
+    
+    - conditions:
+        - prefix: /r1
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4036
+          weight: 100
+    
+    - conditions:
+        - prefix: /r1/peer
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4037
+          weight: 100
+    
+    - conditions:
+        - prefix: /r2
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4038
+          weight: 100
+    
+    - conditions:
+        - prefix: /r2/peer
+      
+      enableWebsockets: true
+      services:
+        - name: dd-test-development-blue-service
+          port: 4039
           weight: 100
     
 ---
@@ -52,7 +88,7 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4049
+          port: 4040
           weight: 100
     
     - conditions:
@@ -61,6 +97,6 @@ spec:
       enableWebsockets: true
       services:
         - name: dd-test-development-blue-service
-          port: 4050
+          port: 4041
           weight: 100
     

package/manifests/kind-config-dev.yaml

@@ -1,8 +1,16 @@
 kind: Cluster
 apiVersion: kind.x-k8s.io/v1alpha4
+networking:
+  ipFamily: ipv4
 nodes:
   - role: control-plane
+    extraMounts:
+      - hostPath: /data/mongodb
+        containerPath: /data/mongodb
   - role: worker
+    extraMounts:
+      - hostPath: /data/mongodb
+        containerPath: /data/mongodb
     # extraPortMappings:
     # - containerPort: 80
     #   hostPort: 80

package/manifests/lxd/lxd-admin-profile.yaml

@@ -1,13 +1,22 @@
 config:
-  limits.cpu: "2"
+  limits.cpu: '2'
   limits.memory: 4GB
-description: vm nat network
+  # Host-safety hardening:
+  #   boot.autostart=false  → the LXD daemon will NOT start any VM created with
+  #     this profile when the host boots. The user explicitly brings VMs up
+  #     after the host is verified healthy. Prevents a broken VM from blocking
+  #     boot via snap.lxd.daemon.
+  #   boot.host_shutdown_timeout=60 → bound the time the daemon waits for this
+  #     VM to stop when the host is going down. Prevents an unresponsive VM
+  #     from holding the host in an indefinite shutdown.
+  boot.autostart: 'false'
+  boot.host_shutdown_timeout: '60'
+description: vm nat network (host-safe defaults)
 devices:
   eth0:
     name: eth0
     network: lxdbr0
     type: nic
-    ipv4.address: 10.250.250.100
   root:
     path: /
     pool: local # lxc storage list

package/manifests/mongodb/pv-pvc.yaml

@@ -1,23 +1,59 @@
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: mongodb-pv
+  name: mongodb-pv-0
+  labels:
+    app: mongodb
 spec:
   capacity:
     storage: 5Gi
   accessModes:
     - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: mongodb-storage-class
+  claimRef:
+    namespace: default
+    name: mongodb-storage-mongodb-0
   hostPath:
-    path: /data/mongodb
+    path: /data/mongodb/v0
+    type: DirectoryOrCreate
 ---
 apiVersion: v1
-kind: PersistentVolumeClaim
+kind: PersistentVolume
+metadata:
+  name: mongodb-pv-1
+  labels:
+    app: mongodb
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: mongodb-storage-class
+  claimRef:
+    namespace: default
+    name: mongodb-storage-mongodb-1
+  hostPath:
+    path: /data/mongodb/v1
+    type: DirectoryOrCreate
+---
+apiVersion: v1
+kind: PersistentVolume
 metadata:
-  name: mongodb-pvc
+  name: mongodb-pv-2
+  labels:
+    app: mongodb
 spec:
-  storageClassName: ''
+  capacity:
+    storage: 5Gi
   accessModes:
     - ReadWriteOnce
-  resources:
-    requests:
-      storage: 5Gi
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: mongodb-storage-class
+  claimRef:
+    namespace: default
+    name: mongodb-storage-mongodb-2
+  hostPath:
+    path: /data/mongodb/v2
+    type: DirectoryOrCreate

package/manifests/mongodb/statefulset.yaml

@@ -4,7 +4,8 @@ metadata:
   name: mongodb # Specifies the name of the statefulset
 spec:
   serviceName: 'mongodb-service' # Specifies the service to use
-  replicas: 2
+  podManagementPolicy: OrderedReady # or Parallel
+  replicas: 3
   selector:
     matchLabels:
       app: mongodb
@@ -13,80 +14,58 @@ spec:
       labels:
         app: mongodb
     spec:
+      subdomain: mongodb-service
+      securityContext:
+        fsGroup: 999
+      initContainers:
+        - name: internal-keyfile-provisioner
+          image: docker.io/library/mongo:latest
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
+          command:
+            - sh
+            - -c
+            - |
+              set -ex
+              mkdir -p /opt/mongodb
+              cp /tmp/raw-keyfile/mongodb-keyfile /opt/mongodb/mongodb-keyfile
+              chmod 400 /opt/mongodb/mongodb-keyfile
+              chown -R 999:999 /opt/mongodb
+              chown -R 999:999 /data/db
+              rm -f /data/db/mongod.lock
+          volumeMounts:
+            - name: raw-secret-keyfile-volume
+              mountPath: /tmp/raw-keyfile
+            - name: isolated-runtime-keyfile-volume
+              mountPath: /opt/mongodb
+            - name: mongodb-storage
+              mountPath: /data/db
       containers:
         - name: mongodb
           image: docker.io/library/mongo:latest
           command:
             - mongod
+          args:
             - '--replSet'
             - 'rs0'
-            # - '--config'
-            # - '-f'
-            # - '/etc/mongod.conf'
-            # - '--auth'
-            # - '--clusterAuthMode'
-            # - 'keyFile'
-            # - '--keyFile'
-            # - '/etc/mongodb-keyfile'
-            # - '--interleave'
-            # - 'all'
-            # - '--wiredTigerCacheSizeGB'
-            # - '0.25'
-            # - '--setParameter'
-            # - 'authenticationMechanisms=SCRAM-SHA-1'
-            # - '--fork'
-            - '--logpath'
-            - '/var/log/mongodb/mongod.log'
+            - '--auth'
+            - '--clusterAuthMode'
+            - 'keyFile'
+            - '--keyFile'
+            - '/opt/mongodb/mongodb-keyfile'
             - '--bind_ip_all'
-          # command: ['sh', '-c']
-          # args:
-          #   - |
-          #     mongod --replSet rs0 --bind_ip_all &
-          #     sleep 1000
-          #     if mongosh --host mongodb-0.mongodb-service:27017 --eval "rs.status()" | grep -q "not yet initialized"; then
-          #       mongosh --host mongodb-0.mongodb-service:27017 <<EOF
-          #       use admin;
-          #       rs.initiate({
-          #         _id: "rs0",
-          #         members: [
-          #           { _id: 0, host: "mongodb-0.mongodb-service:27017", priority: 1 },
-          #           { _id: 1, host: "mongodb-1.mongodb-service:27017", priority: 1 }
-          #         ]
-          #       });
-          #       db.getSiblingDB("admin").createUser({
-          #         user: process.env.MONGO_INITDB_ROOT_USERNAME,
-          #         pwd: process.env.MONGO_INITDB_ROOT_PASSWORD,
-          #         roles: [{ role: "userAdminAnyDatabase", db: "admin" }]
-          #       });
-          #       use default;
-          #       db.createUser(
-          #         {
-          #           user: process.env.MONGO_INITDB_ROOT_USERNAME,
-          #           pwd: process.env.MONGO_INITDB_ROOT_PASSWORD,
-          #           roles: [
-          #             { role: "read", db: "test" },
-          #             { role: "readWrite", db: "default" }
-          #           ]
-          #         }
-          #       );
-          #       EOF
-          #     fi
-          #     wait
+
           ports:
             - containerPort: 27017
           volumeMounts:
+            - name: isolated-runtime-keyfile-volume
+              mountPath: /opt/mongodb
             - name: mongodb-storage
               mountPath: /data/db
-            - name: keyfile
-              mountPath: /etc/mongodb-keyfile
-              readOnly: true
-            # - name: mongodb-configuration-file
-            #   mountPath: /etc/mongod.conf
-            #   subPath: mongod.conf
-            #   readOnly: true
-            # - name: mongodb-config
-            #   mountPath: /config
           env:
+            - name: MONGO_REPLICA_SET_NAME
+              value: rs0
             - name: MONGO_INITDB_ROOT_USERNAME
               valueFrom:
                 secretKeyRef:
@@ -97,6 +76,18 @@ spec:
                 secretKeyRef:
                   name: mongodb-secret
                   key: password
+          readinessProbe:
+            tcpSocket:
+              port: 27017
+            initialDelaySeconds: 15
+            periodSeconds: 10
+            timeoutSeconds: 5
+          livenessProbe:
+            tcpSocket:
+              port: 27017
+            initialDelaySeconds: 30
+            periodSeconds: 20
+            timeoutSeconds: 5
           resources:
             requests:
               cpu: '100m'
@@ -105,16 +96,12 @@ spec:
               cpu: '500m'
               memory: '512Mi'
       volumes:
-        - name: keyfile
+        - name: raw-secret-keyfile-volume
           secret:
             secretName: mongodb-keyfile
             defaultMode: 0400
-        # - name: mongodb-configuration-file
-        #   configMap:
-        #     name: mongodb-config-file
-        # - name: mongodb-config
-        #   configMap:
-        #     name: mongodb-config
+        - name: isolated-runtime-keyfile-volume
+          emptyDir: {}
   volumeClaimTemplates:
     - metadata:
         name: mongodb-storage

package/manifests/mongodb-4.4/headless-service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongodb-service
+spec:
+  clusterIP: None
+  selector:
+    app: mongodb
+  ports:
+    - port: 27017

package/manifests/mongodb-4.4/kustomization.yaml

@@ -4,4 +4,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - pv-pvc.yaml
-  - service-deployment.yaml
+  - storage-class.yaml
+  - headless-service.yaml
+  - statefulset.yaml

package/manifests/mongodb-4.4/mongodb-nodeport.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mongodb-nodeport
+  labels:
+    app: mongodb
+spec:
+  type: NodePort
+  externalTrafficPolicy: Cluster
+  selector:
+    app: mongodb
+  ports:
+    - name: mongodb
+      protocol: TCP
+      port: 27017
+      targetPort: 27017
+      nodePort: 32017