ci(staging): deploy makai 5b60b5ed-debug

Reviewed-on: #265

charts/atlantis/Chart.yaml

@@ -4,10 +4,10 @@ description: Atlantis map and simulation service
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v2.24.1
+version: v2.24.7
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v2.24.1
+appVersion: v2.24.7
 dependencies:
   - name: diagrid-dashboard
     version: "0.1.0"

charts/atlantis/values.yaml

@@ -4,7 +4,7 @@
 replicaCount: 1
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/atlantis
-  tag: v2.24.1
+  tag: v2.24.7
   pullPolicy: IfNotPresent
 init:
   enabled: false

charts/codex/Chart.yaml

@@ -13,9 +13,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: v2.24.1
+version: v2.24.7
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v2.24.1"
+appVersion: "v2.24.7"

charts/codex/values.yaml

@@ -10,7 +10,7 @@ image:
   # This sets the pull policy for images.
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  tag: v2.24.1
+  tag: v2.24.7
 # This is for the secrets for pulling an image from a private repository more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
 imagePullSecrets:
   - name: gitlab-pull-secret

charts/proteus/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/proteus/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: proteus
+description: A Helm chart for Kubernetes
+type: application
+version: v2.24.7
+appVersion: "v2.24.7"

charts/proteus/templates/autoscaling.yaml

@@ -0,0 +1,69 @@
+{{- if eq .Values.environment "prod" }}
+apiVersion: temporal.io/v1alpha1
+kind: WorkerResourceTemplate
+metadata:
+  name: proteus-prod-hpa
+  namespace: proteus
+spec:
+  workerDeploymentRef:
+    name: proteus-prod
+  template:
+    apiVersion: autoscaling/v2
+    kind: HorizontalPodAutoscaler
+    spec:
+      scaleTargetRef: {} # NOTE: controller injects the versioned Deployment
+      minReplicas: 2
+      maxReplicas: 10
+      metrics:
+        - type: External
+          external:
+            metric:
+              name: temporal_approximate_backlog_count
+              selector:
+                matchLabels:
+                  task_type: "Activity"
+            target:
+              type: AverageValue
+              averageValue: "2"
+        - type: Resource
+          resource:
+            name: cpu
+            target:
+              type: Utilization
+              averageUtilization: 70
+{{- end }}
+---
+{{- if eq .Values.environment "beta" }}
+apiVersion: temporal.io/v1alpha1
+kind: WorkerResourceTemplate
+metadata:
+  name: proteus-beta-hpa
+  namespace: proteus
+spec:
+  workerDeploymentRef:
+    name: proteus-beta
+  template:
+    apiVersion: autoscaling/v2
+    kind: HorizontalPodAutoscaler
+    spec:
+      scaleTargetRef: {}
+      minReplicas: 1
+      maxReplicas: 2
+      metrics:
+        - type: External
+          external:
+            metric:
+              name: temporal_approximate_backlog_count
+              selector:
+                matchLabels:
+                  task_type: "Activity"
+            target:
+              type: AverageValue
+              averageValue: "2"
+        - type: Resource
+          resource:
+            name: cpu
+            target:
+              type: Utilization
+              averageUtilization: 70
+{{- end }}

charts/proteus/templates/connection.yaml

@@ -1,3 +1,4 @@
+{{- if eq .Values.environment "prod" }}
 apiVersion: temporal.io/v1alpha1
 kind: Connection
 metadata:
@@ -5,3 +6,4 @@ metadata:
   namespace: proteus
 spec:
   hostPort: temporal-frontend.temporal:7233
+{{- end }}

charts/proteus/templates/pvc.yaml

@@ -1,3 +1,4 @@
+{{- if eq .Values.environment "prod" }}
 apiVersion: v1
 kind: PersistentVolume
 metadata:
@@ -35,3 +36,4 @@ spec:
   storageClassName: ""
   volumeMode: Filesystem
   volumeName: pv-proteus-ceph-archives
+{{- end }}

charts/proteus/templates/workerdeployment.yaml

@@ -0,0 +1,204 @@
+{{- if eq .Values.environment "prod" }}
+apiVersion: temporal.io/v1alpha1
+kind: WorkerDeployment
+metadata:
+  name: proteus-prod
+  namespace: proteus
+spec:
+  replicas: 2
+  workerOptions:
+    temporalNamespace: prod-atlantis
+    connectionRef:
+      name: temporal
+  rollout:
+    strategy: AllAtOnce
+  sunset: {}
+  template:
+    spec:
+      securityContext:
+        runAsUser: 0
+        runAsGroup: 0
+      volumes:
+        - name: archives
+          persistentVolumeClaim:
+            claimName: proteus-ceph-archives
+      containers:
+        - name: proteus
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          resources:
+            requests:
+              cpu: "1"
+              memory: 1Gi
+            limits:
+              cpu: "2"
+              memory: 4Gi
+          env:
+            - name: TEMPORAL_TASK_QUEUES
+              value: plume,xtract
+            - name: TEMPORAL_NAMESPACE
+              value: prod-atlantis
+            - name: APP_ENV
+              value: prod
+            - name: ARCHIVE_PVC
+              value: prod-queue-ceph-archives
+            - name: MAX_CONCURRENT_ACTIVITIES
+              value: "2"
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: http://10.255.241.12:4317
+          volumeMounts:
+            - name: archives
+              mountPath: /data
+          ports:
+            - name: health
+              containerPort: 8080
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: health
+            initialDelaySeconds: 20
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 6
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: health
+            initialDelaySeconds: 5
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 3
+{{- end }}
+---
+{{- if eq .Values.environment "beta" }}
+apiVersion: temporal.io/v1alpha1
+kind: WorkerDeployment
+metadata:
+  name: proteus-beta
+  namespace: proteus
+spec:
+  replicas: 1
+  workerOptions:
+    temporalNamespace: beta-atlantis
+    connectionRef:
+      name: temporal
+  rollout:
+    strategy: AllAtOnce
+  sunset: {}
+  template:
+    spec:
+      securityContext:
+        runAsUser: 0
+        runAsGroup: 0
+      volumes:
+        - name: archives
+          persistentVolumeClaim:
+            claimName: proteus-ceph-archives
+      containers:
+        - name: proteus
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          resources:
+            requests:
+              cpu: 250m
+              memory: 256Mi
+          env:
+            - name: TEMPORAL_TASK_QUEUES
+              value: plume,xtract
+            - name: TEMPORAL_NAMESPACE
+              value: beta-atlantis
+            - name: APP_ENV
+              value: beta
+            - name: ARCHIVE_PVC
+              value: prod-queue-ceph-archives
+            - name: MAX_CONCURRENT_ACTIVITIES
+              value: "2"
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: http://10.255.241.12:4317
+          volumeMounts:
+            - name: archives
+              mountPath: /data
+          ports:
+            - name: health
+              containerPort: 8080
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: health
+            initialDelaySeconds: 20
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 6
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: health
+            initialDelaySeconds: 5
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 3
+{{- end }}
+---
+{{- if eq .Values.environment "staging" }}
+apiVersion: temporal.io/v1alpha1
+kind: WorkerDeployment
+metadata:
+  name: proteus-staging
+  namespace: proteus
+spec:
+  replicas: 1
+  workerOptions:
+    temporalNamespace: staging-atlantis
+    connectionRef:
+      name: temporal
+  rollout:
+    strategy: AllAtOnce
+  sunset: {}
+  template:
+    spec:
+      securityContext:
+        runAsUser: 0
+        runAsGroup: 0
+      volumes:
+        - name: archives
+          persistentVolumeClaim:
+            claimName: proteus-ceph-archives
+      containers:
+        - name: proteus
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          resources:
+            requests:
+              cpu: 250m
+              memory: 256Mi
+            limits:
+              memory: 1Gi
+          env:
+            - name: TEMPORAL_TASK_QUEUES
+              value: plume,xtract
+            - name: TEMPORAL_NAMESPACE
+              value: staging-atlantis
+            - name: MAX_CONCURRENT_ACTIVITIES
+              value: "10"
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: http://10.255.241.12:4317
+          volumeMounts:
+            - name: archives
+              mountPath: /data
+          ports:
+            - name: health
+              containerPort: 8080
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: health
+            initialDelaySeconds: 20
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 6
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: health
+            initialDelaySeconds: 5
+            periodSeconds: 15
+            timeoutSeconds: 5
+            failureThreshold: 3
+{{- end }}

charts/proteus/values.yaml

@@ -0,0 +1,12 @@
+# Default values for proteus.
+# This chart is installed three times, like atlantis: "proteus" (environment: prod, this
+# file's defaults), "proteus-staging" (environment: staging, values-staging.yaml), and
+# "proteus-beta" (environment: beta, values-beta.yaml). Each release has its own Values scope,
+# so all three can use the plain `image` key without colliding — the publish-container CI action
+# bumps .image.tag here directly on a tagged release (same convention as charts/atlantis/values.yaml)
+# and bumps values-staging.yaml's .image.tag on every merge to main. Beta's tag is manually pinned,
+# same as atlantis's values-beta.yaml.gotmpl.
+image:
+  repository: git.oceanbox.io/oceanbox/poseidon/proteus
+  tag: "v2.24.7"
+environment: prod

charts/sorcerer/Chart.yaml

@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes
 type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: v2.24.1
+version: v2.24.7
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v2.24.1
+appVersion: v2.24.7
 dependencies:
   - name: diagrid-dashboard
     version: "0.1.0"

charts/sorcerer/values.yaml

@@ -5,7 +5,7 @@
 replicaCount: 1
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
-  tag: v2.24.1
+  tag: v2.24.7
   pullPolicy: IfNotPresent
 init:
   enabled: false

helmfile.d/argo.yaml.gotmpl

@@ -43,7 +43,7 @@ releases:
 - name: argo-workflows
   namespace: argocd
   chart: argo/argo-workflows
-  version: 1.0.19
+  version: 1.0.23
   condition: argo.workflows.enabled
   missingFileHandler: Info
 - name: manifests

helmfile.d/proteus.yaml.gotmpl

@@ -5,6 +5,27 @@ commonLabels:
   tier: system
 
 releases:
+- name: proteus
+  namespace: proteus
+  chart: ../charts/proteus
+  condition: proteus.enabled
+  values:
+  - ../values/proteus/values/values-prod.yaml
+  missingFileHandler: Info
+- name: proteus-staging
+  namespace: proteus
+  chart: ../charts/proteus
+  condition: proteus.enabled
+  values:
+  - ../values/proteus/values/values-staging.yaml
+  missingFileHandler: Info
+- name: proteus-beta
+  namespace: proteus
+  chart: ../charts/proteus
+  condition: proteus.enabled
+  values:
+  - ../values/proteus/values/values-beta.yaml
+  missingFileHandler: Info
 - name: manifests
   namespace: proteus
   chart: manifests
@@ -15,7 +36,6 @@ releases:
   - ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
   - ../values/proteus/env.yaml.gotmpl
   - ../values/proteus/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
-  - ../values/proteus/values/values-staging.yaml
   hooks:
   - events: [ prepare, cleanup ]
     showlogs: true

helmfile.d/spegel.yaml.gotmpl

@@ -13,7 +13,7 @@ releases:
 - name: spegel
   namespace: spegel
   chart: spegel/spegel
-  version: 0.7.3
+  version: 0.7.4
   condition: spegel.enabled
   values:
   - ../values/spegel/values/spegel.yaml.gotmpl

helmfile.d/temporal.yaml.gotmpl

@@ -12,7 +12,7 @@ releases:
 - name: temporal
   namespace: temporal
   chart: temporal/temporal
-  version: 1.5.0
+  version: 1.6.0
   condition: temporal.enabled
   missingFileHandler: Info
   values:

values/atlantis/kustomize/beta/actor-config.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: beta-atlantis-actor-config
-data:
-  KUEUE_NAMESPACE: "prod-queue"
-  XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.5.3"
-  XTRACT_QUEUE: "prod-queue"
-  PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.5.3"
-  PLUME_QUEUE: "prod-queue"

values/atlantis/kustomize/beta/deployment_patch.yaml

@@ -12,4 +12,4 @@
   path: /spec/template/spec/containers/0/envFrom/-
   value:
     configMapRef:
-      name: beta-atlantis-actor-config
+      name: beta-atlantis-temporal-config

values/atlantis/kustomize/beta/kustomization.yaml

@@ -14,7 +14,7 @@ patches:
 resources:
   - ../base
   - rbac.yaml
-  - actor-config.yaml
+  - temporal-config.yaml
   - tracing.yaml
   - bindings.yaml
   - pubsub.yaml

values/atlantis/kustomize/beta/rbac.yaml

@@ -8,7 +8,7 @@ rules:
   - ""
   resourceNames:
   - beta-atlantis-appsettings
-  - beta-atlantis-actor-config
+  - beta-atlantis-temporal-config
   resources:
   - configmaps
   verbs:

values/atlantis/kustomize/beta/temporal-config.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: beta-atlantis-temporal-config
+data:
+  TEMPORAL_ADDRESS: "temporal-grpc.ekman.oceanbox.io:443"
+  TEMPORAL_TLS: "true"
+  TEMPORAL_NAMESPACE: "beta-atlantis"

values/atlantis/kustomize/staging/deployment_patch.yaml

@@ -12,4 +12,4 @@
   path: /spec/template/spec/containers/0/envFrom/-
   value:
     configMapRef:
-      name: staging-atlantis-actor-config
+      name: staging-atlantis-temporal-config

values/atlantis/kustomize/staging/kustomization.yaml

@@ -14,7 +14,7 @@ resources:
   - ../base
   - rbac.yaml
   - secrets.yaml
-  - actor-config.yaml
+  - temporal-config.yaml
   - tracing.yaml
   - bindings.yaml
   - pubsub.yaml

values/atlantis/kustomize/staging/rbac.yaml

@@ -8,7 +8,7 @@ rules:
   - ""
   resourceNames:
   - staging-atlantis-appsettings
-  - staging-atlantis-actor-config
+  - staging-atlantis-temporal-config
   resources:
   - configmaps
   verbs:

values/atlantis/kustomize/staging/temporal-config.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: staging-atlantis-actor-config
+  name: staging-atlantis-temporal-config
 data:
   TEMPORAL_ADDRESS: "temporal-grpc.ekman.oceanbox.io:443"
   TEMPORAL_TLS: "true"

values/atlantis/values/values-beta.yaml.gotmpl

@@ -2,7 +2,7 @@ replicaCount: 1
 
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/atlantis
-  tag: v2.17.0
+  tag: v2.24.3
 
 podAnnotations:
   dapr.io/app-id: "beta-atlantis"
@@ -11,7 +11,7 @@ env:
   - name: APP_NAMESPACE
     value: beta-atlantis
   - name: APP_VERSION
-    value: "2.17.0-beta"
+    value: "2.24.3-beta"
   - name: LOG_LEVEL
     value: "1"
   - name: ANALYTICS_WEB_ID

values/atlantis/values/values-staging.yaml.gotmpl

@@ -1,7 +1,7 @@
 replicaCount: 1
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/atlantis
-  tag: 506ec0b2-debug
+  tag: b549e69d-debug
 podAnnotations:
   dapr.io/app-id: "staging-atlantis"
 env:

values/makai/values/values.yaml

@@ -1,6 +1,6 @@
 replicaCount: 1
 image:
-  tag: "53080907-debug"
+  tag: "5b60b5ed-debug"
 env:
   - name: APP_VERSION
     value: "0.0.0"

values/proteus/manifests/workerdeployment.yaml

@@ -1,170 +0,0 @@
-# apiVersion: temporal.io/v1alpha1
-# kind: WorkerDeployment
-# metadata:
-#   name: proteus-prod
-#   namespace: proteus
-# spec:
-#   replicas: 2
-#   workerOptions:
-#     temporalNamespace: prod-atlantis
-#     connectionRef:
-#       name: temporal
-#   rollout:
-#     strategy: AllAtOnce
-#   sunset: {}
-#   template:
-#     spec:
-#       securityContext:
-#         runAsUser: 0
-#         runAsGroup: 0
-#       volumes:
-#         - name: archives
-#           persistentVolumeClaim:
-#             claimName: proteus-ceph-archives
-#       containers:
-#         - name: proteus
-#           image: git.oceanbox.io/oceanbox/poseidon/proteus:v2.17.0
-#           resources:
-#             requests:
-#               cpu: "1"
-#               memory: 1Gi
-#             limits:
-#               cpu: "2"
-#               memory: 4Gi
-#           env:
-#             - name: TEMPORAL_TASK_QUEUES
-#               value: plume,xtract
-#             - name: TEMPORAL_NAMESPACE
-#               value: prod-atlantis
-#             - name: APP_ENV
-#               value: prod
-#             - name: ARCHIVE_PVC
-#               value: prod-queue-ceph-archives
-#             - name: MAX_CONCURRENT_ACTIVITIES
-#               value: "2"
-#             - name: OTEL_EXPORTER_OTLP_ENDPOINT
-#               value: http://10.255.241.12:4317
-#           volumeMounts:
-#             - name: archives
-#               mountPath: /data
-#           ports:
-#             - name: health
-#               containerPort: 8080
-#           livenessProbe:
-#             httpGet:
-#               path: /healthz
-#               port: health
-#             initialDelaySeconds: 20
-#             periodSeconds: 15
-#             timeoutSeconds: 5
-#             failureThreshold: 6
-#           readinessProbe:
-#             httpGet:
-#               path: /readyz
-#               port: health
-#             initialDelaySeconds: 5
-#             periodSeconds: 15
-#             timeoutSeconds: 5
-#             failureThreshold: 3
-# ---
-# apiVersion: temporal.io/v1alpha1
-# kind: WorkerDeployment
-# metadata:
-#   name: proteus-beta
-#   namespace: proteus
-# spec:
-#   replicas: 1
-#   workerOptions:
-#     temporalNamespace: beta-atlantis
-#     connectionRef:
-#       name: temporal
-#   rollout:
-#     strategy: AllAtOnce
-#   sunset: {}
-#   template:
-#     spec:
-#       securityContext:
-#         runAsUser: 0
-#         runAsGroup: 0
-#       containers:
-#         - name: proteus
-#           image: git.oceanbox.io/oceanbox/poseidon/proteus:CHANGEME
-#           resources:
-#             requests:
-#               memory: 256Mi
-#             limits:
-#               memory: 1Gi
-#           env:
-#             - name: TEMPORAL_TASK_QUEUES
-#               value: plume,xtract
-#             - name: TEMPORAL_NAMESPACE
-#               value: beta-atlantis
-#             - name: APP_ENV
-#               value: beta
-#             - name: ARCHIVE_PVC
-#               value: prod-queue-ceph-archives
----
-apiVersion: temporal.io/v1alpha1
-kind: WorkerDeployment
-metadata:
-  name: proteus-staging
-  namespace: proteus
-spec:
-  replicas: 1
-  workerOptions:
-    temporalNamespace: staging-atlantis
-    connectionRef:
-      name: temporal
-  rollout:
-    strategy: AllAtOnce
-  sunset: {}
-  template:
-    spec:
-      securityContext:
-        runAsUser: 0
-        runAsGroup: 0
-      volumes:
-        - name: archives
-          persistentVolumeClaim:
-            claimName: proteus-ceph-archives
-      containers:
-        - name: proteus
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          resources:
-            requests:
-              cpu: 500m
-              memory: 1Gi
-            limits:
-              cpu: "2"
-              memory: 4Gi
-          env:
-            - name: TEMPORAL_TASK_QUEUES
-              value: plume,xtract
-            - name: TEMPORAL_NAMESPACE
-              value: staging-atlantis
-            - name: MAX_CONCURRENT_ACTIVITIES
-              value: "10"
-            - name: OTEL_EXPORTER_OTLP_ENDPOINT
-              value: http://10.255.241.12:4317
-          volumeMounts:
-            - name: archives
-              mountPath: /data
-          ports:
-            - name: health
-              containerPort: 8080
-          livenessProbe:
-            httpGet:
-              path: /healthz
-              port: health
-            initialDelaySeconds: 20
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 6
-          readinessProbe:
-            httpGet:
-              path: /readyz
-              port: health
-            initialDelaySeconds: 5
-            periodSeconds: 15
-            timeoutSeconds: 5
-            failureThreshold: 3

values/proteus/values/values-beta.yaml

@@ -0,0 +1,4 @@
+image:
+  repository: git.oceanbox.io/oceanbox/poseidon/proteus
+  tag: v2.24.2
+environment: beta

values/proteus/values/values-prod.yaml

@@ -0,0 +1 @@
+environment: prod

values/proteus/values/values-staging.yaml

@@ -1,3 +1,4 @@
 image:
   repository: git.oceanbox.io/oceanbox/poseidon/proteus
   tag: 7a4a367d-debug
+environment: staging

values/sorcerer/kustomize/beta-ekman/deployment_patch.yaml

@@ -22,9 +22,4 @@
   value:
     secretRef:
       name: beta-sorcerer-env
-- op: add
-  path: /spec/template/spec/containers/0/envFrom/-
-  value:
-    configMapRef:
-      name: beta-sorcerer-kueue-config
 

values/sorcerer/kustomize/beta-ekman/kueue-config.yaml

@@ -1,7 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: beta-sorcerer-kueue-config
-data:
-  KUEUE_NAMESPACE: "prod-queue"
-  KUEUE_ARCHIVE_PVC: "prod-queue-ceph-archives"

values/sorcerer/kustomize/beta-ekman/kustomization.yaml

@@ -19,7 +19,6 @@ resources:
 - configurations.yaml
 - keyvault.yaml
 - rbac.yaml
-- kueue-config.yaml
 - secretstore.yaml
 - statestore.yaml
 - tracing.yaml

values/sorcerer/kustomize/beta-ekman/rbac.yaml

@@ -8,7 +8,6 @@ rules:
   - ""
   resourceNames:
   - beta-sorcerer-appsettings
-  - beta-sorcerer-kueue-config
   resources:
   - configmaps
   verbs:
@@ -24,24 +23,6 @@ rules:
   verbs:
   - get
   - watch
-- apiGroups:
-  - jobset.x-k8s.io
-  resources:
-  - jobsets
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  - pods/log
-  verbs:
-  - get
-  - list
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding