f1-stream: consume Forgejo-registry image; drop in-monorepo source
The actively-developed f1-stream (infra files/ copy: 12 active extractors +
Playwright/chrome-service verifier) is now its own repo viktor/f1-stream and is
the deployed app (replacing the stale March github build).
- main.tf: image -> forgejo.viktorbarzin.me/viktor/f1-stream:${var.image_tag}
+ image_pull_secrets registry-credentials. Image stays in KEEL_IGNORE_IMAGE.
- Remove stacks/f1-stream/files/ (source now in viktor/f1-stream).
- docs/plans: extraction design + plan pair.
Applied via tg + kubectl set image to forgejo:24857a82; live /health green.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
parent
99f9bf8d89
commit
e8bfb4d06b
51 changed files with 131 additions and 9556 deletions
|
|
@ -6,6 +6,16 @@ variable "nfs_server" { type = string }
|
|||
variable "discord_f1_guild_id" { type = string }
|
||||
variable "discord_f1_channel_ids" { type = string }
|
||||
|
||||
# Image tag for the Forgejo-registry image. The app lives in its own repo
|
||||
# (viktor/f1-stream, extracted 2026-06-04). CI builds + pushes `latest` and
|
||||
# `<short-sha>`, then drives the rollout via `kubectl set image`. Keel stays
|
||||
# enrolled as a redundant net, so the running tag is managed outside Terraform
|
||||
# (see KEEL_IGNORE_IMAGE below).
|
||||
variable "image_tag" {
|
||||
type = string
|
||||
default = "latest"
|
||||
}
|
||||
|
||||
resource "kubernetes_namespace" "f1-stream" {
|
||||
metadata {
|
||||
name = "f1-stream"
|
||||
|
|
@ -13,7 +23,7 @@ resource "kubernetes_namespace" "f1-stream" {
|
|||
"istio-injection" : "disabled"
|
||||
tier = local.tiers.aux
|
||||
"chrome-service.viktorbarzin.me/client" = "true"
|
||||
"keel.sh/enrolled" = "true"
|
||||
"keel.sh/enrolled" = "true"
|
||||
}
|
||||
}
|
||||
lifecycle {
|
||||
|
|
@ -118,7 +128,7 @@ resource "kubernetes_deployment" "f1-stream" {
|
|||
}
|
||||
spec {
|
||||
container {
|
||||
image = "viktorbarzin/f1-stream:latest"
|
||||
image = "forgejo.viktorbarzin.me/viktor/f1-stream:${var.image_tag}"
|
||||
image_pull_policy = "Always"
|
||||
name = "f1-stream"
|
||||
resources {
|
||||
|
|
@ -176,6 +186,11 @@ resource "kubernetes_deployment" "f1-stream" {
|
|||
claim_name = module.nfs_data_host.claim_name
|
||||
}
|
||||
}
|
||||
# Pull the (private) Forgejo-registry image. Kyverno syncs
|
||||
# registry-credentials into every namespace.
|
||||
image_pull_secrets {
|
||||
name = "registry-credentials"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue