Kubernetes
nuq ‘oH. wejDIch He: Helm tetlh teH ghomvaD. PVC data/vaD, Ingress, probes, peghmey K8s Doch. deploy/k8s/ Dung YAML qo’ ngo’ — Qu’Daq Helm lo’.
ghorgh yIlo’
Section titled “ghorgh yIlo’”- law’ copy pagh ghom (reH be’ cha’ ghItlhwI’ wa’ SQLiteDaq).
- Ingress + StorageClass.
- peghmey K8s Secret pagh External Secrets Operatorvo’.
motlh mIw
Section titled “motlh mIw”- K8s 1.28+, Helm 3.12+, ghItlh, Ingress, StorageClass.
- namespace
eyas. master key Secret (eyas-master-key)helm installpa’. - pull-secret So’chugh.
helm install. - probes
/api/v1/health. Ingress jan yIpoS.
master key ngoq paqDaq yIpol — chIlchugh pegh vault chIl.
ratlhbogh yavDaq De’ paq. chart motlh lan (/app/data) lo’DI’ pagh cherlu’nIS: De’ pa’ qawHaq vault je ratlhbogh yavDaq tu’lu’. latlh lanDaq EYAS_DATA_DIR Da’oSchugh, vault je vIH — reH <data dir>/vault ‘oH — De’ pa’ tlhej. SeH — De’ paq ‘ej vault.
kernel teywI’ Hung. bubblewrap ngaSbe’ EYAS ghItlh (LGPL ‘oH; lIngmeH SeHwI’ wIv). CLI nobwI’ kernel teywI’ HungvaD, bubblewrap (bwrap), Claude CodevaD socat, ‘ej De’wI’ SeHbe’bogh lo’wI’ namespacemey poQ ngaSwI’ — law’ ghom ngaSwI’ QapwI’ je chu’Ha’moH. Hutlhchugh, leghbogh Hoch tlhob lajQo’ EYAS taH ‘ej QInvamDaq tu’lu’be’ ‘ang Hung; security.cliSandbox: required tlhej, janmey ghajbogh CLI mIwmey lajQo’lu’. eyas doctor CLI sandbox tlheghDaq ja’. nobwI’pu’ — kernel teywI’ Hung.
tlhap tIn qawHaq yav. chart motlh ‘aqroS 1Gi ‘oH, data-port tlhapvaD yap: boq teywI’ wa’ qawHaqDaq ‘uchlu’, qoDDaq Hoch ‘ay’ chenmoHlu’taHvIS; ‘ej natlhDaj teywI’ Segh Dep — Hoch tlheDvaD wa’ tlhegh ghajbogh qonvaD tInDaj tlhoS wejlogh, naQ parbogh ja’chuq ngeHvaD Sochlogh pagh law’. 90 MB ja’chuq ngeH ‘aqroS tlhoS 900 MiB ratlhtaH: 1Gi qoDDaq ‘oH, ‘ach yav puS; deploy/k8s/ DungDaq ngugh starter YAML 512Mi cher, ‘ej ‘uchlaHbe’. teywI’ tIn law’ Hoch teywI’ tIn puS ‘aqroS cher, nej tInDaj ghobe’; vaj tIn law’bogh Doch tlhappa’ ‘aqroS yInIvmoH. De’ tlhap ‘ej ngeH yIlegh.