infra: book-eval Job back to no-PVC — unlock calendar now read from DB (networked, node-agnostic)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
jgrusewski
2026-06-24 09:50:54 +02:00
parent 7d61452979
commit 2ccb41ead3

View File

@@ -25,11 +25,6 @@ spec:
restartPolicy: Never
imagePullSecrets:
- name: scw-registry
affinity:
podAffinity: # co-locate with dagster to read the RWO surfer-data PVC
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector: { matchLabels: { app.kubernetes.io/name: dagster } }
topologyKey: kubernetes.io/hostname # read-only mount → unlock_calendar.json (own memory still bounds OOM)
initContainers:
- name: git-sync
image: alpine/git:latest
@@ -57,7 +52,6 @@ spec:
- { name: FXHNT_OPERATIONAL_DSN, value: "postgresql+psycopg://foxhunt@postgres.foxhunt.svc.cluster.local:5432/fxhnt" }
- name: PGPASSWORD
valueFrom: { secretKeyRef: { name: db-credentials, key: password } }
- { name: FXHNT_SURFER_DATA_DIR, value: /data/surfer } # unlock_calendar.json (read-only)
- { name: PYTHONUNBUFFERED, value: "1" }
resources:
# OWN memory so it never OOMs the daemon: 4Gi req / 6Gi limit (liquid-subset multi-symbol compute).
@@ -65,11 +59,9 @@ spec:
limits: { memory: "6Gi", cpu: "2" } # no PVC
volumeMounts:
- { name: code, mountPath: /code, readOnly: true }
- { name: surfer-data, mountPath: /data, readOnly: true } # unlock_calendar.json (read-only)
volumes:
- { name: code, emptyDir: {} }
- { name: git-ssh-key, secret: { secretName: argo-git-ssh-key, defaultMode: 256 } }
- { name: surfer-data, persistentVolumeClaim: { claimName: fxhnt-surfer-data, readOnly: true } }
---
# Egress: DNS + Postgres/Timescale (5432) + external 443 (DefiLlama unlock calendar / Binance stablecoin spot
# loaders, when present) + gitea-sshd (2222, git-sync).