Story Crater Bot
6506a639c9
Problem: LLM_API_URL was hardcoded to external endpoint - Uses https://api.riotpiao.com/v1/chat/completions (TLS hairpin) - Not externalizable for CI/different environments Solution: Move to encrypted ConfigMap with in-cluster endpoint - LLM_API_URL: http://api-gateway.api.svc.cluster.local:8080/v1/chat/completions - No TLS, no nginx hairpin, direct cluster communication - Encrypted with SOPS for security - CI can update values.yaml and auto-deploy Changes: - Create configmap.enc.yaml (SOPS-encrypted) - Update deployment.yaml to use configMapKeyRef - Add SOPS config to kustomization.yaml - Deployment now references portfolio-llm-config ConfigMap
14 lines
245 B
YAML
14 lines
245 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: portfolio
|
|
resources:
|
|
- namespace.yaml
|
|
- configmap.enc.yaml
|
|
- deployment.yaml
|
|
- service.yaml
|
|
- ingress.yaml
|
|
|
|
# Decrypt secrets via SOPS before applying
|
|
sops:
|
|
version: 3
|