version: 1
kind: HwlabWebProbeSentinelPublicExposure
metadata:
  id: d601-v03-web-probe-sentinel-auth-session-switch-public-exposure
  owner: UniDesk
  specRef: PJ2026-01060508
sentinel:
  publicExposure:
    enabled: true
    mode: pk01-caddy-frp-path
    publicBaseUrl: https://monitor.pikapython.com/sentinels/workbench-auth-session-switch-2users
    hostname: monitor.pikapython.com
    routePrefix: /sentinels/workbench-auth-session-switch-2users
    expectedA: 82.156.23.220
    frpc:
      deploymentName: hwlab-web-probe-sentinel-auth-switch-frpc
      image: 127.0.0.1:5000/hwlab/frpc:v0.68.1
      serverAddr: 82.156.23.220
      serverPort: 22000
      tokenSourceRef: platform-infra/pk01-frp.env
      tokenSourceKey: FRP_TOKEN
      secretName: hwlab-web-probe-sentinel-auth-switch-frpc
      secretKey: frpc.toml
      tokenKey: token
      httpProxy:
        name: hwlab-d601-v03-web-probe-sentinel-auth-switch
        remotePort: 22091
        localIP: hwlab-web-probe-sentinel-auth-switch.hwlab-v03.svc.cluster.local
        localPort: 8080
    caddy:
      route: PK01
      configPath: /etc/caddy/Caddyfile
      serviceName: caddy
      email: ops@pikapython.com
      tls: auto
      responseHeaderTimeoutSeconds: 600
      managedBlockOwner: hwlab-web-probe-sentinel-auth-switch-d601-v03