diff --git a/infra/k8s/jobs/fxhnt-bybit-book-eval-job.yaml b/infra/k8s/jobs/fxhnt-bybit-book-eval-job.yaml index 83e467d..144ed6a 100644 --- a/infra/k8s/jobs/fxhnt-bybit-book-eval-job.yaml +++ b/infra/k8s/jobs/fxhnt-bybit-book-eval-job.yaml @@ -25,11 +25,6 @@ spec: restartPolicy: Never imagePullSecrets: - name: scw-registry - affinity: - podAffinity: # co-locate with dagster to read the RWO surfer-data PVC - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: { matchLabels: { app.kubernetes.io/name: dagster } } - topologyKey: kubernetes.io/hostname # read-only mount → unlock_calendar.json (own memory still bounds OOM) initContainers: - name: git-sync image: alpine/git:latest @@ -57,7 +52,6 @@ spec: - { name: FXHNT_OPERATIONAL_DSN, value: "postgresql+psycopg://foxhunt@postgres.foxhunt.svc.cluster.local:5432/fxhnt" } - name: PGPASSWORD valueFrom: { secretKeyRef: { name: db-credentials, key: password } } - - { name: FXHNT_SURFER_DATA_DIR, value: /data/surfer } # unlock_calendar.json (read-only) - { name: PYTHONUNBUFFERED, value: "1" } resources: # OWN memory so it never OOMs the daemon: 4Gi req / 6Gi limit (liquid-subset multi-symbol compute). @@ -65,11 +59,9 @@ spec: limits: { memory: "6Gi", cpu: "2" } # no PVC volumeMounts: - { name: code, mountPath: /code, readOnly: true } - - { name: surfer-data, mountPath: /data, readOnly: true } # unlock_calendar.json (read-only) volumes: - { name: code, emptyDir: {} } - { name: git-ssh-key, secret: { secretName: argo-git-ssh-key, defaultMode: 256 } } - - { name: surfer-data, persistentVolumeClaim: { claimName: fxhnt-surfer-data, readOnly: true } } --- # Egress: DNS + Postgres/Timescale (5432) + external 443 (DefiLlama unlock calendar / Binance stablecoin spot # loaders, when present) + gitea-sshd (2222, git-sync).