aiops/deploy/kubernetes/quick-deploy.yaml

# quick-deploy.yaml — AIOps 单容器快速部署
# 部署: kubectl apply -f quick-deploy.yaml
# 此文件为开发演示模板；生产请使用 deployment.yaml + Secret + PVC + NetworkPolicy。 // Logan.Li
#
# 两种模式:
#   远程模式 (默认): MODE=release, 连接外部 MySQL + Redis
#   本地模式: MODE=local, 自动 SQLite (sqlite3.db) + redka (redka.db)，与二进制同级 /app/
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: aiops-config
  namespace: devops
data:
  config.yaml: |
    mode: local
    port: "8080"
    log_level: info

    database:
      driver: sqlite
      dbname: sqlite3.db

    redis:
      driver: redka

---
# 仅为模板占位符，部署前必须替换为随机值，禁止提交真实生产密钥。 // Logan.Li
apiVersion: v1
kind: Secret
metadata:
  name: aiops-secret
  namespace: devops
type: Opaque
stringData:
  jwt-secret: "REPLACE_WITH_RANDOM_JWT_SECRET_AT_LEAST_32_BYTES"
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: aiops
  namespace: devops
  labels:
    app.kubernetes.io/name: aiops
    app.kubernetes.io/component: app
spec:
  replicas: 1
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  selector:
    matchLabels:
      app.kubernetes.io/name: aiops
      app.kubernetes.io/component: app
  template:
    metadata:
      labels:
        app.kubernetes.io/name: aiops
        app.kubernetes.io/component: app
    spec:
      dnsPolicy: ClusterFirst
      enableServiceLinks: false
      automountServiceAccountToken: false
      securityContext:
        fsGroup: 10001
        fsGroupChangePolicy: OnRootMismatch
        seccompProfile:
          type: RuntimeDefault
      initContainers:
        - name: init-local-db
          image: busybox:1.36
          securityContext:
            runAsUser: 0
            runAsGroup: 0
            allowPrivilegeEscalation: false
            capabilities:
              drop: ["ALL"]
            seccompProfile:
              type: RuntimeDefault
          command:
            - sh
            - -c
            - |
              if [ -f /vol/data/sqlite3.db ] && [ ! -f /vol/sqlite3.db ]; then
                cp /vol/data/sqlite3.db /vol/sqlite3.db
              fi
              if [ -f /vol/data/redka/redka.db ] && [ ! -f /vol/redka.db ]; then
                cp /vol/data/redka/redka.db /vol/redka.db
              fi
              [ -f /vol/sqlite3.db ] || install -m 660 /dev/null /vol/sqlite3.db
              [ -f /vol/redka.db ] || install -m 660 /dev/null /vol/redka.db
              chown 10001:10001 /vol/sqlite3.db /vol/redka.db
          volumeMounts:
            - name: data
              mountPath: /vol
      containers:
        - name: aiops
          image: lghost/aiops:v0.1.1
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8080
          env:
            # 运行模式: local=SQLite+redka, release=需配置外部DB/Redis
            - name: MODE
              value: "local"
            - name: TZ
              value: Asia/Shanghai
            - name: JWT_SECRET
              valueFrom:
                secretKeyRef:
                  name: aiops-secret
                  key: jwt-secret
            # 集群模式 (MODE=release) 时取消注释:
            # - name: DATABASE_DRIVER
            #   value: mysql
            # - name: DATABASE_HOST
            #   value: "10.10.10.75"
            # - name: REDIS_DRIVER
            #   value: redis
            # - name: REDIS_HOST
            #   value: "10.10.10.75"
          volumeMounts:
            - name: config
              mountPath: /app/config.yaml
              subPath: config.yaml
              readOnly: true
            - name: data
              mountPath: /app/sqlite3.db
              subPath: sqlite3.db
            - name: data
              mountPath: /app/redka.db
              subPath: redka.db
            - name: uploads
              mountPath: /app/uploads
          securityContext:
            runAsNonRoot: true
            runAsUser: 10001
            runAsGroup: 10001
            allowPrivilegeEscalation: false
            capabilities:
              drop: ["ALL"]
            seccompProfile:
              type: RuntimeDefault
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
            limits:
              cpu: "1"
              memory: 1Gi
      volumes:
        - name: config
          configMap:
            name: aiops-config
        - name: data
          persistentVolumeClaim:
            claimName: aiops-data
        - name: uploads
          persistentVolumeClaim:
            claimName: aiops-uploads
---
apiVersion: v1
kind: Service
metadata:
  name: aiops
  namespace: devops
spec:
  type: NodePort
  selector:
    app.kubernetes.io/name: aiops
  ports:
    - port: 8080
      targetPort: 8080
      nodePort: 30080