gitea
358356a1b1
A second Conjurer bot alongside the test one, sharing librarian/musician/ radio and the API key, differing only in: * Discord token from the deploy-conjurer-netrc secret, * distinct names/labels (deploy-bot) and NodePort 32443, * /data on an NFS export (RWX) instead of a block PVC - so config/state can be uploaded while it runs (copy onto the share) and backed up concurrently. deploy-bot-backup: a daily CronJob that mirrors /data and keeps 30 days of dated snapshots of the critical small state (both memories, settings, accident log, transcripts) on NFS. Production only - the test bot's amnesia is fine. DEPLOY-BOT.md documents seeding, backup/restore, and the librarian/musician callback routing (they push to one bot; repoint CONJURER_MAIN_BOT to :32443 to feed this one). kubectl kustomize builds cleanly (10 objects). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
73 lines
3.9 KiB
YAML
73 lines
3.9 KiB
YAML
# Production ("deploy") Conjurer bot.
|
|
#
|
|
# Same infrastructure as the test `bot` (shares librarian / musician / radio and
|
|
# the CONJURER_API_KEY), with three deliberate differences:
|
|
# 1. its Discord token comes from the `deploy-conjurer-netrc` secret,
|
|
# 2. distinct names/labels so it coexists with the test bot in this namespace,
|
|
# 3. /data is an NFS volume (RWX) instead of a block PVC - so config/state can
|
|
# be uploaded while the bot runs (just copy onto the share) and backed up
|
|
# concurrently (see deploy-bot-backup.yaml). The test bot keeps its RWO PVC.
|
|
#
|
|
# ┌─ IMPORTANT: librarian & musician call ONE bot back ─────────────────────────┐
|
|
# │ The librarian (CONJURER_MAIN_BOT) and musician push search results and │
|
|
# │ "now playing" events to a SINGLE bot address - currently the test bot's │
|
|
# │ NodePort 192.168.1.73:32442. Only one bot can receive them. To make the │
|
|
# │ PRODUCTION bot the one that gets librarian results / radio events, repoint │
|
|
# │ those services' CONJURER_MAIN_BOT to this bot's NodePort (…:32443 below). │
|
|
# └─────────────────────────────────────────────────────────────────────────────┘
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: deploy-bot
|
|
namespace: conjurer
|
|
spec:
|
|
replicas: 1 # NIGDY więcej — jedna sesja gateway na token
|
|
strategy: { type: Recreate } # NIE RollingUpdate — dwa pody = wojna o sesję Discord
|
|
selector: { matchLabels: { app: deploy-bot } }
|
|
template:
|
|
metadata: { labels: { app: deploy-bot } }
|
|
spec:
|
|
imagePullSecrets: [{ name: gitea-registry }]
|
|
containers:
|
|
- name: bot
|
|
image: gitea.czernobog.pl/gitea/conjurer-bot:c8aae106
|
|
ports: [{ containerPort: 5000 }]
|
|
env:
|
|
- { name: CONJURER_DATA_DIR, value: "/data" }
|
|
- { name: CONJURER_DISCORD_HOST, value: "0.0.0.0" }
|
|
- { name: CONJURER_DISCORD_PORT, value: "5000" }
|
|
- { name: CONJURER_API_KEY, value: "d97008b3-7a5a-11f1-acd1-000b0e0f00ed" }
|
|
- { name: CONJURER_NETRC_FILE, value: "/secrets/.netrc" }
|
|
- { name: CONJURER_LIBRARIAN_SERVICE, value: "http://librarian:5001" }
|
|
- { name: CONJURER_MUSICIAN_SERVICE, value: "http://192.168.1.89:5000" }
|
|
- { name: CONJURER_RADIO_SERVICE, value: "http://192.168.1.79:5005" }
|
|
- { name: CONJURER_FILE_SERVICE, value: "http://192.168.1.89:5000" }
|
|
- { name: CONJURER_RADIO_HARBOR, value: "http://192.168.1.79:54321" }
|
|
volumeMounts:
|
|
- { name: data, mountPath: /data }
|
|
- { name: netrc, mountPath: /secrets, readOnly: true }
|
|
resources:
|
|
requests: { cpu: "200m", memory: "256Mi" }
|
|
limits: { cpu: "2", memory: "1Gi" }
|
|
volumes:
|
|
# /data on NFS (RWX): lets you seed/upload files while the bot runs (copy
|
|
# straight onto the export from the PVE box that holds /srv/data) and lets
|
|
# the backup CronJob read it concurrently. ADJUST server/path to your
|
|
# actual export - mirrors the librarian's 192.168.1.34 Tank1 layout.
|
|
- name: data
|
|
nfs:
|
|
server: 192.168.1.34
|
|
path: /mnt/Tank1/conjurer_swap/deploy-bot/data
|
|
- name: netrc
|
|
secret: { secretName: deploy-conjurer-netrc }
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata: { name: deploy-bot, namespace: conjurer }
|
|
spec:
|
|
type: NodePort # so librarian/musician COULD reach it if repointed
|
|
selector: { app: deploy-bot }
|
|
# Distinct pinned nodePort (test bot owns 32442). Point librarian/musician
|
|
# CONJURER_MAIN_BOT at 192.168.1.73:32443 to route their callbacks here.
|
|
ports: [{ port: 5000, targetPort: 5000, nodePort: 32443 }]
|