Skip to content

Kubernetes

nuq ‘oH. wejDIch He: Helm tetlh teH ghomvaD. PVC data/vaD, Ingress, probes, peghmey K8s Doch. deploy/k8s/ Dung YAML qo’ ngo’ — Qu’Daq Helm lo’.

  • law’ copy pagh ghom (reH be’ cha’ ghItlhwI’ wa’ SQLiteDaq).
  • Ingress + StorageClass.
  • peghmey K8s Secret pagh External Secrets Operatorvo’.
  1. K8s 1.28+, Helm 3.12+, ghItlh, Ingress, StorageClass.
  2. namespace eyas. master key Secret (eyas-master-key) helm install pa’.
  3. pull-secret So’chugh. helm install.
  4. probes /api/v1/health. Ingress jan yIpoS.

master key ngoq paqDaq yIpol — chIlchugh pegh vault chIl.

ratlhbogh yavDaq De’ paq. chart motlh lan (/app/data) lo’DI’ pagh cherlu’nIS: De’ pa’ qawHaq vault je ratlhbogh yavDaq tu’lu’. latlh lanDaq EYAS_DATA_DIR Da’oSchugh, vault je vIH — reH <data dir>/vault ‘oH — De’ pa’ tlhej. SeH — De’ paq ‘ej vault.

kernel teywI’ Hung. bubblewrap ngaSbe’ EYAS ghItlh (LGPL ‘oH; lIngmeH SeHwI’ wIv). CLI nobwI’ kernel teywI’ HungvaD, bubblewrap (bwrap), Claude CodevaD socat, ‘ej De’wI’ SeHbe’bogh lo’wI’ namespacemey poQ ngaSwI’ — law’ ghom ngaSwI’ QapwI’ je chu’Ha’moH. Hutlhchugh, leghbogh Hoch tlhob lajQo’ EYAS taH ‘ej QInvamDaq tu’lu’be’ ‘ang Hung; security.cliSandbox: required tlhej, janmey ghajbogh CLI mIwmey lajQo’lu’. eyas doctor CLI sandbox tlheghDaq ja’. nobwI’pu’ — kernel teywI’ Hung.

tlhap tIn qawHaq yav. chart motlh ‘aqroS 1Gi ‘oH, data-port tlhapvaD yap: boq teywI’ wa’ qawHaqDaq ‘uchlu’, qoDDaq Hoch ‘ay’ chenmoHlu’taHvIS; ‘ej natlhDaj teywI’ Segh Dep — Hoch tlheDvaD wa’ tlhegh ghajbogh qonvaD tInDaj tlhoS wejlogh, naQ parbogh ja’chuq ngeHvaD Sochlogh pagh law’. 90 MB ja’chuq ngeH ‘aqroS tlhoS 900 MiB ratlhtaH: 1Gi qoDDaq ‘oH, ‘ach yav puS; deploy/k8s/ DungDaq ngugh starter YAML 512Mi cher, ‘ej ‘uchlaHbe’. teywI’ tIn law’ Hoch teywI’ tIn puS ‘aqroS cher, nej tInDaj ghobe’; vaj tIn law’bogh Doch tlhappa’ ‘aqroS yInIvmoH. De’ tlhap ‘ej ngeH yIlegh.