b31329931f
- Remove all HTTPS/TLS from MinIO (plain HTTP for internal cluster traffic) - Fix sccache 0% cache hit rate (rustls rejected self-signed MinIO cert) - Remove hardcoded URLs from k8s_dispatcher.rs (S3_ENDPOINT, TRAINING_RUNTIME_IMAGE, CALLBACK_ENDPOINT now required env vars) - Update GitLab registry S3 credentials to HTTP endpoint - Fix PVC manifest (20Gi → 100Gi to match cluster) - Fix nodeSelector: infra/foxhunt → platform (match actual node pool) - Fix rclone trailing backslash causing chmod to be parsed as rclone args - Remove minio-ca-cert ConfigMap references from all manifests - Update trading-service GPU overlay to l40s pool 20 files changed, -118 lines net Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
113 lines
2.8 KiB
YAML
113 lines
2.8 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: ib-gateway
|
|
namespace: foxhunt
|
|
labels:
|
|
app: ib-gateway
|
|
app.kubernetes.io/part-of: foxhunt
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
app: ib-gateway
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: ib-gateway
|
|
app.kubernetes.io/part-of: foxhunt
|
|
spec:
|
|
securityContext:
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
imagePullSecrets:
|
|
- name: gitlab-registry
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: platform
|
|
containers:
|
|
- name: ib-gateway
|
|
image: ghcr.io/gnzsnz/ib-gateway:stable
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
ports:
|
|
- name: tws-api
|
|
containerPort: 4002
|
|
protocol: TCP
|
|
- name: tws-api-socat
|
|
containerPort: 4004
|
|
protocol: TCP
|
|
- name: vnc
|
|
containerPort: 5900
|
|
protocol: TCP
|
|
env:
|
|
- name: TWS_USERID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ibkr-credentials
|
|
key: username
|
|
- name: TWS_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ibkr-credentials
|
|
key: password
|
|
- name: TRADING_MODE
|
|
value: "paper"
|
|
- name: TWS_ACCEPT_INCOMING
|
|
value: "accept"
|
|
- name: READ_ONLY_API
|
|
value: "no"
|
|
- name: TWOFA_TIMEOUT_ACTION
|
|
value: "restart"
|
|
- name: EXISTING_SESSION_DETECTED_ACTION
|
|
value: "primaryoverride"
|
|
- name: VNC_SERVER_PASSWORD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ibkr-credentials
|
|
key: vnc-password
|
|
optional: true
|
|
resources:
|
|
requests:
|
|
memory: "1Gi"
|
|
cpu: "500m"
|
|
limits:
|
|
memory: "2Gi"
|
|
cpu: "1000m"
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: 4002
|
|
initialDelaySeconds: 90
|
|
periodSeconds: 10
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: 4002
|
|
initialDelaySeconds: 120
|
|
periodSeconds: 30
|
|
failureThreshold: 5
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: ib-gateway
|
|
namespace: foxhunt
|
|
labels:
|
|
app: ib-gateway
|
|
spec:
|
|
selector:
|
|
app: ib-gateway
|
|
ports:
|
|
- name: tws-api
|
|
port: 4002
|
|
targetPort: 4002
|
|
- name: tws-api-socat
|
|
port: 4004
|
|
targetPort: 4004
|
|
- name: vnc
|
|
port: 5900
|
|
targetPort: 5900
|
|
type: ClusterIP
|