66d6d0f2a5
Remove from workspace members, delete K8s deployment, remove nginx routing. Training metrics and system health now served directly by API Gateway. Changes: - Cargo.toml: remove services/monitoring_service from workspace members - services/monitoring_service/: deleted entirely (6 files) - infra/k8s/services/monitoring-service.yaml: deleted - infra/k8s/network-policies/monitoring-service.yaml: deleted - infra/k8s/network-policies/api-gateway.yaml: remove egress rule to monitoring-service - infra/k8s/network-policies/web-gateway.yaml: remove egress rule to monitoring-service - infra/k8s/services/api-gateway.yaml: remove stale MONITORING_SERVICE_URL env var - infra/k8s/gitlab/tailscale-proxy.yaml: redirect monitor.fxhnt.ai to api-gateway:50051 - .gitlab-ci.yml: remove monitoring_service from compile, copy, and deploy loops - services/trading_service/src/services/monitoring.rs: update stale comments to reference api_gateway (not monitoring_service) as training metrics host Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
70 lines
1.6 KiB
YAML
70 lines
1.6 KiB
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: web-gateway
|
|
namespace: foxhunt
|
|
spec:
|
|
podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: web-gateway
|
|
policyTypes:
|
|
- Ingress
|
|
- Egress
|
|
ingress:
|
|
- from:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: api-gateway
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: tailscale-gitlab-proxy
|
|
ports:
|
|
- protocol: TCP
|
|
port: 3000
|
|
egress:
|
|
# api-gateway gRPC upstream
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: api-gateway
|
|
ports:
|
|
- protocol: TCP
|
|
port: 50051
|
|
# Direct gRPC to downstream services
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: backtesting-service
|
|
ports:
|
|
- protocol: TCP
|
|
port: 50053
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: ml-training-service
|
|
ports:
|
|
- protocol: TCP
|
|
port: 50053
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: trading-agent-service
|
|
ports:
|
|
- protocol: TCP
|
|
port: 50055
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: broker-gateway
|
|
ports:
|
|
- protocol: TCP
|
|
port: 50056
|
|
# Minio (initContainer binary fetch)
|
|
- to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: minio
|
|
ports:
|
|
- protocol: TCP
|
|
port: 9000
|