chore(agentrun): declare d518 v02 yaml lane

config/agentrun.yaml

@@ -61,6 +61,9 @@ controlPlane:
     D601:
       route: D601
       kubeRoute: D601:k3s
+    D518:
+      route: D518
+      kubeRoute: D518:k3s
 
   lanes:
     v01:
@@ -525,3 +528,281 @@ controlPlane:
             namespace: agentrun-v02
             name: agentrun-v01-tool-unidesk-ssh
             key: UNIDESK_SSH_CLIENT_TOKEN
+
+    d518-v02:
+      node: D518
+      version: v0.2
+      source:
+        repository: pikasTech/agentrun
+        branch: v0.2
+        bootstrapFromBranch: v0.1
+        bootstrapTimeoutSeconds: 900
+        bootstrapPollSeconds: 15
+        remote: git@github.com:pikasTech/agentrun.git
+        workspace: /home/ubuntu/workspace/agentrun-v02
+      runtime:
+        namespace: agentrun-v02
+        managerDeployment: agentrun-mgr
+        managerService: agentrun-mgr
+        managerPort: 8080
+        internalBaseUrl: http://agentrun-mgr.agentrun-v02.svc.cluster.local:8080
+      ci:
+        namespace: agentrun-ci
+        pipeline: agentrun-d518-v02-ci-image-publish
+        pipelineRunPrefix: agentrun-d518-v02-ci
+        serviceAccountName: agentrun-d518-v02-tekton-runner
+        registryPrefix: 127.0.0.1:5000/agentrun
+        toolsImage: 127.0.0.1:5000/hwlab/hwlab-ci-node-tools:node22-alpine-bun-v1
+      gitops:
+        branch: d518-v0.2-gitops
+        path: deploy/gitops/node/d518/runtime-v02
+        argoNamespace: argocd
+        argoApplication: agentrun-d518-v02
+        repoURL: http://git-mirror-http.devops-infra.svc.cluster.local:8080/pikasTech/agentrun.git
+      deployment:
+        format: unidesk-yaml-only
+        gitopsRoot: deploy/gitops/node/d518
+        runtimeRenderDir: runtime-v02
+        artifactCatalogPath: deploy/artifact-catalog.d518-v02.json
+        argocd:
+          project: agentrun-d518-v02
+          applicationFile: application-v02.yaml
+        manager:
+          serviceAccount: agentrun-d518-v02-mgr
+          apiKeySecretRef:
+            name: agentrun-v02-api-key
+            key: HWLAB_API_KEY
+          env:
+            AGENTRUN_POSTGRES_POOL_MAX: "4"
+            AGENTRUN_MANAGER_RECONCILER_BATCH_SIZE: "20"
+            AGENTRUN_MANAGER_RECONCILER_ENABLED: "true"
+            AGENTRUN_MANAGER_RECONCILER_INTERVAL_MS: "30000"
+            OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: http://otel-collector.platform-infra.svc.cluster.local:4318/v1/traces
+            OTEL_SERVICE_NAME: agentrun-manager
+            UNIDESK_NODE_ID: D518
+            HWLAB_RUNTIME_LANE: v0.3
+          unideskSshEndpointEnv:
+            name: UNIDESK_MAIN_SERVER_IP
+            value: 74.48.78.17
+          bootRepoUrl: http://git-mirror-http.devops-infra.svc.cluster.local:8080/pikasTech/agentrun.git
+          imageBuild:
+            context: .
+            containerfile: deploy/container/Containerfile
+            repository: agentrun-mgr-env
+            network: host
+            buildArgs:
+              BUN_IMAGE: oven/bun:1-alpine
+            httpProxy: http://127.0.0.1:10808
+            httpsProxy: http://127.0.0.1:10808
+            noProxy:
+              - localhost
+              - 127.0.0.1
+              - ::1
+              - 127.0.0.1:5000
+              - localhost:5000
+              - .svc
+              - .svc.cluster.local
+              - .cluster.local
+              - hyueapi.com
+              - .hyueapi.com
+            envIdentityFiles:
+              - deploy/container/Containerfile
+              - deploy/runtime/boot/agentrun-boot.sh
+              - deploy/runtime/boot/agentrun-mgr.sh
+              - deploy/runtime/boot/agentrun-runner.sh
+              - src
+              - scripts
+              - package.json
+              - bun.lock
+              - tsconfig.json
+            timeoutSeconds: 1800
+            pollSeconds: 15
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 800m
+              memory: 1Gi
+        runner:
+          serviceAccount: agentrun-d518-v02-runner
+          jobNamePrefix: agentrun-d518-v02-runner
+          idleTimeoutMs: 600000
+          backendRetry:
+            maxAttempts: 5
+            initialBackoffMs: 1000
+            maxBackoffMs: 30000
+          apiKeySecretRef:
+            name: agentrun-v02-api-key
+            key: HWLAB_API_KEY
+          egressProxyUrl: http://sub2api-egress-proxy.platform-infra.svc.cluster.local:10808
+          noProxyExtra:
+            - sub2api-egress-proxy
+            - sub2api-egress-proxy.platform-infra
+            - sub2api-egress-proxy.platform-infra.svc
+            - sub2api-egress-proxy.platform-infra.svc.cluster.local
+          retention:
+            maxRunners: 20
+            cleanupOrder: oldest-inactive-last-active-first
+            activeHeartbeatMaxAgeMs: 900000
+            selectors:
+              matchLabels:
+                app.kubernetes.io/part-of: agentrun
+                app.kubernetes.io/name: agentrun-runner
+                app.kubernetes.io/component: runner
+              jobNamePrefixes:
+                - agentrun-d518-v02-runner
+                - agentrun-v02-runner
+                - agentrun-v01-runner
+            ageBasedCleanup:
+              enabled: false
+              maxAgeHours: 48
+          cancelLifecycle:
+            deliveryMode: manager-epoch
+            gracefulAbortMs: 15000
+            killEscalationMs: 30000
+            staleHeartbeatFencingMs: 900000
+            lateWriteFencing:
+              enabled: true
+            eventStages:
+              - accepted
+              - persisted
+              - delivered
+              - aborting
+              - terminalized
+              - fenced
+              - late-write-rejected
+        localPostgres:
+          enabled: false
+      gitMirror:
+        namespace: devops-infra
+        readService: git-mirror-http
+        readDeployment: git-mirror-http
+        writeService: git-mirror-write
+        writeDeployment: git-mirror-write
+        readUrl: http://git-mirror-http.devops-infra.svc.cluster.local:8080/pikasTech/agentrun.git
+        writeUrl: http://git-mirror-write.devops-infra.svc.cluster.local:8080/pikasTech/agentrun.git
+        cachePvc: hwlab-git-mirror-cache
+        cacheHostPath: /var/lib/rancher/k3s/storage/hwlab-d518-v03-git-mirror-cache
+        sshSecretName: git-mirror-github-ssh
+        githubProxy:
+          host: sub2api-egress-proxy.platform-infra.svc.cluster.local
+          port: 10808
+        toolsImage: 127.0.0.1:5000/hwlab/hwlab-ci-node-tools:node22-alpine-bun-v1
+        syncJobPrefix: git-mirror-agentrun-d518-v02-sync-manual
+        flushJobPrefix: git-mirror-agentrun-d518-v02-flush-manual
+        repositories:
+          - key: agentrun
+            repository: pikasTech/agentrun
+            sourceBranch: v0.2
+            gitopsBranch: d518-v0.2-gitops
+          - key: unidesk
+            repository: pikasTech/unidesk
+            sourceBranch: master
+          - key: agent_skills
+            repository: pikasTech/agent_skills
+            sourceBranch: master
+      database:
+        mode: external-postgres
+        provider: PK01
+        configRef: config/platform-db/postgres-pk01.yaml
+        database: agentrun_d518_v02
+        user: agentrun_d518_v02
+        sslmode: require
+        secretSourceRef: agentrun/d518-v02-mgr-db.env
+        secretRef:
+          name: agentrun-v02-mgr-db
+          key: DATABASE_URL
+        localPostgresExpectedAbsent: true
+      secrets:
+        - id: manager-api-key
+          sourceRef: /root/.config/hwlab-v03/master-server-admin-api-key.env
+          sourceKey: HWLAB_API_KEY
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v02-api-key
+            key: HWLAB_API_KEY
+        - id: runner-api-key-legacy-name
+          sourceRef: /root/.config/hwlab-v03/master-server-admin-api-key.env
+          sourceKey: HWLAB_API_KEY
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-api-key
+            key: HWLAB_API_KEY
+        - id: provider-codex-auth-json
+          sourceMode: file
+          sourceRef: /root/.codex/auth.json
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-codex
+            key: auth.json
+          providerCredential:
+            profile: codex
+        - id: provider-codex-config
+          sourceMode: file
+          sourceRef: agentrun/d601-v02-provider-codex-config.toml
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-codex
+            key: config.toml
+          providerCredential:
+            profile: codex
+        - id: provider-deepseek-auth-json
+          sourceMode: file
+          sourceRef: /root/.codex-deepseek-v4-pro/auth.json
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-deepseek
+            key: auth.json
+          providerCredential:
+            profile: deepseek
+        - id: provider-deepseek-config
+          sourceMode: file
+          sourceRef: agentrun/d601-v02-provider-deepseek-config.toml
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-deepseek
+            key: config.toml
+          providerCredential:
+            profile: deepseek
+        - id: provider-dsflash-go-auth-json
+          sourceMode: file
+          sourceRef: /root/.codex-opencode-go-all/auth.json
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-dsflash-go
+            key: auth.json
+          providerCredential:
+            profile: dsflash-go
+        - id: provider-dsflash-go-config
+          sourceMode: file
+          sourceRef: agentrun/d601-v02-provider-dsflash-go-config.toml
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-dsflash-go
+            key: config.toml
+          providerCredential:
+            profile: dsflash-go
+        - id: provider-dsflash-go-model-catalog
+          sourceMode: file
+          sourceRef: /root/.codex-opencode-go-all/model-catalog.json
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-provider-dsflash-go
+            key: model-catalog.json
+          providerCredential:
+            profile: dsflash-go
+        - id: tool-github-pr-token
+          sourceRef: /root/.config/unidesk/github.env
+          sourceKey: GH_TOKEN
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-tool-github-pr
+            key: GH_TOKEN
+        - id: tool-unidesk-ssh-token
+          sourceRef: /root/unidesk/.state/docker-compose.env
+          sourceKey: UNIDESK_SSH_CLIENT_TOKEN
+          targetRef:
+            namespace: agentrun-v02
+            name: agentrun-v01-tool-unidesk-ssh
+            key: UNIDESK_SSH_CLIENT_TOKEN

config/platform-db/postgres-pk01.yaml

@@ -243,6 +243,36 @@ postgres:
         user: agentrun_v02
         address: 74.48.78.17/32
         method: scram-sha-256
+      - type: hostssl
+        database: agentrun_d518_v02
+        user: agentrun_d518_v02
+        address: 10.0.8.0/22
+        method: scram-sha-256
+      - type: hostssl
+        database: postgres
+        user: agentrun_d518_v02
+        address: 10.0.8.0/22
+        method: scram-sha-256
+      - type: hostssl
+        database: agentrun_d518_v02
+        user: agentrun_d518_v02
+        address: 202.98.13.68/32
+        method: scram-sha-256
+      - type: hostssl
+        database: postgres
+        user: agentrun_d518_v02
+        address: 202.98.13.68/32
+        method: scram-sha-256
+      - type: hostssl
+        database: agentrun_d518_v02
+        user: agentrun_d518_v02
+        address: 74.48.78.17/32
+        method: scram-sha-256
+      - type: hostssl
+        database: postgres
+        user: agentrun_d518_v02
+        address: 74.48.78.17/32
+        method: scram-sha-256
       - type: hostssl
         database: hwlab_d601_v03
         user: hwlab_d601_v03_app
@@ -334,6 +364,20 @@ secrets:
           AGENTRUN_V02_DB_NAME: agentrun_v02
         randomHex:
           AGENTRUN_V02_DB_PASSWORD: 32
+    - name: agentrun-d518-v02-db-credentials
+      sourceRef: platform-db/agentrun-d518-v02-db.env
+      type: env
+      requiredKeys:
+        - AGENTRUN_D518_V02_DB_USER
+        - AGENTRUN_D518_V02_DB_PASSWORD
+        - AGENTRUN_D518_V02_DB_NAME
+      createIfMissing:
+        enabled: true
+        values:
+          AGENTRUN_D518_V02_DB_USER: agentrun_d518_v02
+          AGENTRUN_D518_V02_DB_NAME: agentrun_d518_v02
+        randomHex:
+          AGENTRUN_D518_V02_DB_PASSWORD: 32
     - name: hwlab-d601-v03-db-credentials
       sourceRef: platform-db/hwlab-d601-v03-db.env
       type: env
@@ -386,6 +430,15 @@ objects:
         createdb: false
         createrole: false
         superuser: false
+    - name: agentrun_d518_v02
+      passwordRef:
+        sourceRef: platform-db/agentrun-d518-v02-db.env
+        key: AGENTRUN_D518_V02_DB_PASSWORD
+      login: true
+      attributes:
+        createdb: false
+        createrole: false
+        superuser: false
     - name: hwlab_d601_v03_app
       passwordRef:
         sourceRef: platform-db/hwlab-d601-v03-db.env
@@ -416,6 +469,11 @@ objects:
       encoding: UTF8
       locale: C.UTF-8
       extensions: []
+    - name: agentrun_d518_v02
+      owner: agentrun_d518_v02
+      encoding: UTF8
+      locale: C.UTF-8
+      extensions: []
     - name: hwlab_d601_v03
       owner: hwlab_d601_v03_app
       encoding: UTF8
@@ -484,6 +542,21 @@ exports:
         - scope: agentrun-v02
           secret: agentrun-v02-mgr-db
           key: DATABASE_URL
+    - name: agentrun-d518-v02-database-url
+      sourceSecretRef: platform-db/agentrun-d518-v02-db.env
+      render:
+        envKey: DATABASE_URL
+        format: postgresql://$(AGENTRUN_D518_V02_DB_USER):$(AGENTRUN_D518_V02_DB_PASSWORD)@$(PGHOST):5432/$(AGENTRUN_D518_V02_DB_NAME)?sslmode=require&uselibpqcompat=true
+        variables:
+          PGHOST: 82.156.23.220
+      writeToSecretSource:
+        sourceRef: agentrun/d518-v02-mgr-db.env
+        key: DATABASE_URL
+        mode: update-or-insert
+      consumers:
+        - scope: agentrun-v02
+          secret: agentrun-v02-mgr-db
+          key: DATABASE_URL
     - name: hwlab-d601-v03-cloud-api-database-url
       sourceSecretRef: platform-db/hwlab-d601-v03-db.env
       render:
@@ -555,6 +628,9 @@ observability:
     - kind: psql-app-role
       database: agentrun_v02
       user: agentrun_v02
+    - kind: psql-app-role
+      database: agentrun_d518_v02
+      user: agentrun_d518_v02
     - kind: psql-app-role
       database: hwlab_d601_v03
       user: hwlab_d601_v03_app