wangbo
971540a2a4
新增 WireGuard 全互联、三 server embedded-etcd K3s、CloudNativePG 双实例、Barman OSS 备份、双 NGINX、Kubernetes Secret/RBAC 与本地旧文件按严格 24 小时清理。 新增维护窗口数据迁移、digest 固定滚动发布、应用回滚、跨节点文件 E2E、节点和数据库故障演练、CNPG 恢复与 etcd 快照验收脚本；洛杉矶仅作为带 NoSchedule 污点的仲裁节点。 所有生产 Secret 只在执行时从 0600 本地环境和旧生产容器导入，仓库不保存凭据；公网入口保持人工 DNS 故障切换边界。 验证：bash -n、ShellCheck、kubectl kustomize、Node 语法检查、Secret 扫描、OSS put/head/delete 实测。
40 lines
1.6 KiB
YAML
40 lines
1.6 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: easyai-ai-gateway-config
|
|
labels:
|
|
app.kubernetes.io/part-of: easyai-ai-gateway
|
|
data:
|
|
APP_ENV: production
|
|
HTTP_ADDR: ":8088"
|
|
IDENTITY_MODE: hybrid
|
|
IDENTITY_SECRET_STORE: kubernetes
|
|
IDENTITY_KUBERNETES_NAMESPACE: easyai
|
|
IDENTITY_KUBERNETES_SECRET_NAME: easyai-gateway-security-events
|
|
IDENTITY_SECURITY_EVENTS_HEARTBEAT_INTERVAL_SECONDS: "60"
|
|
IDENTITY_SECURITY_EVENTS_STALE_AFTER_SECONDS: "180"
|
|
IDENTITY_SECURITY_EVENTS_CLOCK_SKEW_SECONDS: "60"
|
|
SERVER_MAIN_BASE_URL: http://10.77.0.1:3000
|
|
TASK_PROGRESS_CALLBACK_ENABLED: "true"
|
|
TASK_PROGRESS_CALLBACK_URL: http://10.77.0.1:3000/internal/platform/task-progress-callbacks
|
|
TASK_PROGRESS_CALLBACK_TIMEOUT_MS: "5000"
|
|
TASK_PROGRESS_CALLBACK_MAX_ATTEMPTS: "10"
|
|
AI_GATEWAY_TASK_CLEANUP_ENABLED: "false"
|
|
AI_GATEWAY_TASK_RETENTION_DAYS: "30"
|
|
AI_GATEWAY_TASK_ANALYSIS_RETENTION_DAYS: "7"
|
|
AI_GATEWAY_TASK_CLEANUP_INTERVAL_SECONDS: "300"
|
|
AI_GATEWAY_TASK_CLEANUP_BATCH_SIZE: "1000"
|
|
CORS_ALLOWED_ORIGIN: https://ai.51easyai.com
|
|
AI_GATEWAY_PUBLIC_BASE_URL: https://ai.51easyai.com
|
|
AI_GATEWAY_WEB_BASE_URL: https://ai.51easyai.com
|
|
AI_GATEWAY_GENERATED_STORAGE_DIR: /app/data/static/generated
|
|
AI_GATEWAY_UPLOADED_STORAGE_DIR: /app/data/static/uploaded
|
|
AI_GATEWAY_LOCAL_TEMP_ASSET_TTL_HOURS: "24"
|
|
AI_GATEWAY_LOCAL_RESULT_TTL_HOURS: "24"
|
|
AI_GATEWAY_LOCAL_RESULT_MIN_FREE_BYTES: "10737418240"
|
|
AI_GATEWAY_LOCAL_RESULT_MAX_BYTES: "268435456"
|
|
AI_GATEWAY_LOCAL_RESULT_MAX_TASK_BYTES: "536870912"
|
|
AI_GATEWAY_ASYNC_QUEUE_WORKER_ENABLED: "true"
|
|
AI_GATEWAY_ASYNC_WORKER_HARD_LIMIT: "2048"
|
|
AI_GATEWAY_ASYNC_WORKER_REFRESH_INTERVAL_SECONDS: "5"
|