35 lines
913 B
YAML
35 lines
913 B
YAML
# AWOOOI 正式環境 Kustomization
|
||
# 負責人: CIO
|
||
# 版本: v1.0
|
||
# 日期: 2026-03-20
|
||
#
|
||
# ⚠️ 鐵律: 禁止在此檔案寫 newTag，Tag 由 CI 動態注入
|
||
|
||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||
kind: Kustomization
|
||
|
||
namespace: awoooi-prod
|
||
|
||
# 通用標籤
|
||
commonLabels:
|
||
system: awoooi
|
||
environment: prod
|
||
|
||
resources:
|
||
- 01-namespace-quota.yaml
|
||
- 02-network-policy.yaml
|
||
# 03-secrets.yaml 不納入，由 CI/CD 單獨處理
|
||
- 04-configmap.yaml
|
||
- 05-deployment-web.yaml
|
||
- 06-deployment-api.yaml
|
||
- 07-rbac.yaml # Phase 7: K8sExecutor 最小權限 RBAC
|
||
- 08-deployment-worker.yaml # Phase 6.5: Signal Worker
|
||
|
||
# 映像配置 (Tag 由 CI 動態注入)
|
||
# Harbor 金庫: 110 主機 (192.168.0.110:5000)
|
||
images:
|
||
- name: 192.168.0.110:5000/library/web
|
||
# newTag: 由 CI 注入，禁止在此寫死
|
||
- name: 192.168.0.110:5000/library/api
|
||
# newTag: 由 CI 注入，禁止在此寫死
|