chore: establish local platform baseline

2026-08-26 06:41:54 +08:00
commit 29bdf4900f
575 changed files with 95644 additions and 0 deletions
@@ -0,0 +1,86 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: api
+  namespace: voice-platform
+spec:
+  template:
+    spec:
+      volumes:
+        - $patch: replace
+        - name: common-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-common
+        - name: api-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-api
+        - name: model-storage-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-model-storage
+        - name: device-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-devices
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: callbacks
+  namespace: voice-platform
+spec:
+  template:
+    spec:
+      volumes:
+        - $patch: replace
+        - name: common-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-common
+        - name: callbacks-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-callbacks
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: worker
+  namespace: voice-platform
+spec:
+  template:
+    spec:
+      volumes:
+        - $patch: replace
+        - name: common-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-common
+        - name: worker-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-worker
+        - name: model-storage-secrets
+          csi:
+            driver: secrets-store.csi.k8s.io
+            readOnly: true
+            volumeAttributes:
+              secretProviderClass: voice-platform-model-storage
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../production
+patches:
+  - path: csi-volumes.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: voice-platform-config
+  namespace: voice-platform
+data:
+  APP_ENV: prod
@@ -0,0 +1,49 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: voice-platform
+  namespace: voice-platform
+spec:
+  tls:
+    - hosts:
+        - voice.example.invalid
+      secretName: voice-platform-tls
+  rules:
+    - host: voice.example.invalid
+      http:
+        paths:
+          - path: /callbacks
+            pathType: Prefix
+            backend:
+              service:
+                name: callbacks
+                port:
+                  number: 8081
+          - path: /device
+            pathType: Prefix
+            backend:
+              service:
+                name: api
+                port:
+                  number: 8080
+          - path: /api
+            pathType: Prefix
+            backend:
+              service:
+                name: api
+                port:
+                  number: 8080
+          - path: /health
+            pathType: Prefix
+            backend:
+              service:
+                name: api
+                port:
+                  number: 8080
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: web
+                port:
+                  number: 8080
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+images:
+  - name: registry.example.invalid/voice-platform/backend
+    newName: registry.example.invalid/voice-platform/backend
+    newTag: production
+  - name: registry.example.invalid/voice-platform/web
+    newName: registry.example.invalid/voice-platform/web
+    newTag: production
+patches:
+  - path: config-patch.yaml
+  - path: ingress-patch.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: voice-platform-config
+  namespace: voice-platform
+data:
+  APP_ENV: stage
@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../base
+images:
+  - name: registry.example.invalid/voice-platform/backend
+    newName: registry.example.invalid/voice-platform/backend
+    newTag: staging
+  - name: registry.example.invalid/voice-platform/web
+    newName: registry.example.invalid/voice-platform/web
+    newTag: staging
+patches:
+  - path: config-patch.yaml