cc74ad0bd0
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
- .woodpecker.yaml: image paths -> library/autojanet-{agent,dispatcher}
- .woodpecker.yaml: secret names RS_HARBOR_USER / RS_HARBOR_PASS (global)
- container/Dockerfile: restore COPY skills/, skills/ populated from opencode config
- skills/: 84 opencode skills bundled into image
- k8s/manifests: update image refs to library/
68 lines
2.2 KiB
YAML
68 lines
2.2 KiB
YAML
---
|
|
# Dispatcher CronJob — runs every 2 minutes, claims unclaimed tasks from Vikunja
|
|
# and spawns agent Jobs for each
|
|
apiVersion: batch/v1
|
|
kind: CronJob
|
|
metadata:
|
|
name: dispatcher
|
|
namespace: autojanet
|
|
labels:
|
|
autojanet/role: dispatcher
|
|
spec:
|
|
schedule: "*/2 * * * *"
|
|
concurrencyPolicy: Forbid # never run two dispatchers simultaneously
|
|
successfulJobsHistoryLimit: 5
|
|
failedJobsHistoryLimit: 5
|
|
jobTemplate:
|
|
spec:
|
|
ttlSecondsAfterFinished: 600
|
|
template:
|
|
metadata:
|
|
labels:
|
|
autojanet/role: dispatcher
|
|
spec:
|
|
serviceAccountName: dispatcher
|
|
restartPolicy: Never
|
|
containers:
|
|
- name: dispatcher
|
|
image: registry.ctz.fyi/library/autojanet-dispatcher:latest
|
|
imagePullPolicy: Always
|
|
env:
|
|
- name: OPENBAO_ADDR
|
|
value: "http://openbao.openbao.svc.cluster.local:8200"
|
|
- name: OPENBAO_ROLE_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: dispatcher-approle
|
|
key: role_id
|
|
- name: OPENBAO_SECRET_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: dispatcher-approle
|
|
key: secret_id
|
|
- name: VIKUNJA_BASE_URL
|
|
value: "https://tasks.ctz.fyi"
|
|
- name: VIKUNJA_PROJECT_ID
|
|
value: "78"
|
|
- name: VIKUNJA_TODO_BUCKET_ID
|
|
value: "116"
|
|
- name: VIKUNJA_IN_PROGRESS_BUCKET_ID
|
|
value: "117"
|
|
- name: K8S_NAMESPACE
|
|
value: "autojanet"
|
|
- name: AGENT_IMAGE
|
|
value: "registry.ctz.fyi/library/autojanet-agent:latest"
|
|
resources:
|
|
requests:
|
|
cpu: "100m"
|
|
memory: "128Mi"
|
|
limits:
|
|
cpu: "500m"
|
|
memory: "256Mi"
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
runAsNonRoot: true
|
|
runAsUser: 1000
|
|
readOnlyRootFilesystem: true
|
|
capabilities:
|
|
drop: ["ALL"]
|