version: 1
kind: platform-infra-sub2rank

metadata:
  id: sub2rank-public
  owner: unidesk
  relatedIssues: []

defaults:
  targetId: NC01

application:
  repository: pikasTech/sub2rank
  remote: https://github.com/pikasTech/sub2rank.git
  branch: master
  sourceRoot: /root/sub2rank
  configRef: /root/sub2rank/config/sub2rank.yaml
  sourceConfigPath: config/sub2rank.yaml
  dockerfile: Dockerfile
  runtimeTarget: k8s

image:
  repository: 127.0.0.1:5000/sub2rank/sub2rank
  pullPolicy: IfNotPresent

delivery:
  enabled: true
  pipeline:
    namespace: devops-infra
    name: platform-infra-sub2rank-nc01-pac
    runPrefix: sub2rank-nc01
    serviceAccountName: sub2rank-nc01-tekton-runner
    timeout: 600s
    workspaceSize: 4Gi
    toolsImage: 127.0.0.1:5000/hwlab/hwlab-ci-node-tools:node22-alpine-bun-v1
    buildkitImage: 127.0.0.1:5000/hwlab/buildkit:rootless
    sourceSnapshotPrefix: refs/unidesk/snapshots/gitea-actions/sub2rank-master-nc01
  build:
    networkMode: host
    proxy:
      http: http://127.0.0.1:10808
      https: http://127.0.0.1:10808
      all: http://127.0.0.1:10808
      noProxy:
        - localhost
        - 127.0.0.1
        - "::1"
        - 127.0.0.1:5000
        - localhost:5000
        - .svc
        - .svc.cluster.local
        - .cluster.local
        - hyueapi.com
        - .hyueapi.com
  gitops:
    readUrl: http://git-mirror-http.devops-infra.svc.cluster.local:8080/pikasTech/unidesk.git
    writeUrl: http://git-mirror-write.devops-infra.svc.cluster.local:8080/pikasTech/unidesk.git
    branch: unidesk-host-gitops
    manifestPath: deploy/gitops/platform-infra/sub2rank-nc01/resources.yaml
    releaseStatePath: deploy/gitops-state/platform-infra/sub2rank-nc01.json
    maxPushAttempts: 3
    author:
      name: UniDesk Sub2Rank CI
      email: sub2rank-ci@unidesk.local
    application:
      name: sub2rank-nc01
      namespace: argocd
      project: default
      path: deploy/gitops/platform-infra/sub2rank-nc01
      destinationNamespace: platform-infra
      automated: true

targets:
  - id: NC01
    route: NC01:k3s
    namespace: platform-infra
    enabled: true
    replicas: 1
    publicExposure:
      enabled: true
      publicBaseUrl: https://rank.pikapython.com
      dns:
        hostname: rank.pikapython.com
        expectedA: 82.156.23.220
        resolvers:
          - 1.1.1.1
          - 8.8.8.8
          - 223.5.5.5
          - 114.114.114.114
      frpc:
        deploymentName: sub2rank-frpc
        configMapName: sub2rank-frpc-config
        configKey: frpc.toml
        image: 127.0.0.1:5000/hwlab/frpc:v0.68.1
        serverAddr: 82.156.23.220
        serverPort: 22000
        proxyName: platform-infra-sub2rank-nc01-web
        remotePort: 22095
        localIP: sub2rank.platform-infra.svc.cluster.local
        localPort: 8080
        tokenEnvName: FRP_TOKEN
        tokenTargetKey: FRP_TOKEN
      pk01:
        route: PK01
        caddyConfigPath: /etc/caddy/Caddyfile
        caddyServiceName: caddy
        responseHeaderTimeoutSeconds: 60

runtime:
  sharedNetworkPolicyRef:
    name: allow-all
    managedBySub2Rank: false
  service:
    name: sub2rank
    port: 8080
  configMap:
    name: sub2rank-config
    key: sub2rank.yaml
    mountPath: /etc/sub2rank/sub2rank.yaml
  command:
    - bun
    - src/server.ts
    - --config
    - /etc/sub2rank/sub2rank.yaml
    - --runtime
    - k8s
  storage:
    claimName: sub2rank-data
    size: 1Gi
    mountPath: /var/lib/sub2rank
  secret:
    configRef: config/secrets-distribution.yaml
    declarationId: sub2rank-runtime
    requiredTargetKeys:
      - SUB2RANK_ADMIN_TOKEN
      - SUB2API_ADMIN_EMAIL
      - SUB2API_ADMIN_PASSWORD
      - FRP_TOKEN
    appEnvTargetKeys:
      - SUB2RANK_ADMIN_TOKEN
      - SUB2API_ADMIN_EMAIL
      - SUB2API_ADMIN_PASSWORD
  probes:
    healthPath: /health
    initialDelaySeconds: 3
    periodSeconds: 10
    timeoutSeconds: 3
    failureThreshold: 6
  rollout:
    fieldManager: unidesk-platform-sub2rank
    waitTimeoutSeconds: 180