fluxcdbot
77441c87df
dcr.trinitysan.by/infra/cursor-agent-api-proxy:latest -> dcr.trinitysan.by/infra/cursor-agent-api-proxy:1-52c45e48f8f4a2c0b1a3c29c08d39a3a88e1c2d4
146 lines
3.9 KiB
YAML
146 lines
3.9 KiB
YAML
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: cursor-agent-state
|
|
namespace: cursor-agent-api
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
storageClassName: local-storage
|
|
resources:
|
|
requests:
|
|
storage: 1Gi
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: cursor-agent-api
|
|
namespace: cursor-agent-api
|
|
labels:
|
|
app: cursor-agent-api
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
app: cursor-agent-api
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: cursor-agent-api
|
|
spec:
|
|
imagePullSecrets:
|
|
- name: dcr-registry-auth-ro
|
|
initContainers:
|
|
- name: bootstrap-cursor
|
|
image: dcr.trinitysan.by/infra/cursor-agent-api-proxy:1-52c45e48f8f4a2c0b1a3c29c08d39a3a88e1c2d4 # {"$imagepolicy": "flux-system:cursor-agent-api-proxy"}
|
|
imagePullPolicy: IfNotPresent
|
|
env:
|
|
- name: CURSOR_API_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: cursor-auth
|
|
key: CURSOR_API_KEY
|
|
command:
|
|
- /app/scripts/bootstrap-cursor.sh
|
|
volumeMounts:
|
|
- name: cursor-state
|
|
mountPath: /home/nobody/.cursor
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: true
|
|
runAsUser: 65534
|
|
runAsGroup: 65534
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65534
|
|
runAsGroup: 65534
|
|
fsGroup: 65534
|
|
fsGroupChangePolicy: OnRootMismatch
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
containers:
|
|
- name: proxy
|
|
image: dcr.trinitysan.by/infra/cursor-agent-api-proxy:1-52c45e48f8f4a2c0b1a3c29c08d39a3a88e1c2d4 # {"$imagepolicy": "flux-system:cursor-agent-api-proxy"}
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- name: http
|
|
containerPort: 4646
|
|
env:
|
|
- name: CURSOR_API_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: cursor-auth
|
|
key: CURSOR_API_KEY
|
|
- name: PORT
|
|
value: "4646"
|
|
- name: PROXY_SESSION_TTL_MS
|
|
value: "120000"
|
|
- name: PROXY_MAX_CONCURRENT_SESSIONS
|
|
value: "4"
|
|
- name: ACP_REQUEST_TIMEOUT_MS
|
|
value: "300000"
|
|
- name: PROXY_INTERNAL_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: cursor-proxy-internal-token
|
|
key: PROXY_INTERNAL_TOKEN
|
|
volumeMounts:
|
|
- name: cursor-state
|
|
mountPath: /home/nobody/.cursor
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: http
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 30
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: http
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 2Gi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
volumes:
|
|
- name: cursor-state
|
|
persistentVolumeClaim:
|
|
claimName: cursor-agent-state
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: cursor-agent-api
|
|
namespace: cursor-agent-api
|
|
annotations:
|
|
service.kubernetes.io/topology-mode: Auto
|
|
spec:
|
|
selector:
|
|
app: cursor-agent-api
|
|
ports:
|
|
- name: http
|
|
port: 4646
|
|
targetPort: http
|
|
---
|
|
apiVersion: multicluster.x-k8s.io/v1alpha1
|
|
kind: ServiceExport
|
|
metadata:
|
|
name: cursor-agent-api
|
|
namespace: cursor-agent-api
|