will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rename inference endpoint to neuron.neurontechnologies.ai, add wildcard DNS for customer orgs

Browse Source
This commit is contained in:
Will Anderson
2026-04-28 11:15:11 -05:00
parent 9e2646701c
commit 1a8e039ecf
15 changed files with 166 additions and 294 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/neuron-technologies/dev/externalsecret.yaml
+4
View File
@@ -16,3 +16,7 @@ spec:
remoteRef:
key: secret/data/neuron-technologies/dev
property: gitea_webhook_secret
- secretKey: MARKETPLACE_DB_PASSWORD
remoteRef:
key: secret/data/legion-db
property: postgres_password
servers/legion/k8s/neuron-technologies/stage/externalsecret.yaml
+4
View File
@@ -16,3 +16,7 @@ spec:
remoteRef:
key: secret/data/neuron-technologies/stage
property: gitea_webhook_secret
- secretKey: MARKETPLACE_DB_PASSWORD
remoteRef:
key: secret/data/legion-db
property: postgres_password
servers/legion/k8s/neuron-technologies/swarm/externalsecrets.yaml
+12
View File
@@ -51,6 +51,10 @@ spec:
remoteRef:
key: secret/data/r2
property: neuron_bucket
- secretKey: MARKETPLACE_DB_PASSWORD
remoteRef:
key: secret/data/legion-db
property: postgres_password
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
@@ -102,6 +106,10 @@ spec:
remoteRef:
key: secret/data/r2
property: neuron_bucket
- secretKey: MARKETPLACE_DB_PASSWORD
remoteRef:
key: secret/data/legion-db
property: postgres_password
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
@@ -153,3 +161,7 @@ spec:
remoteRef:
key: secret/data/r2
property: neuron_bucket
- secretKey: MARKETPLACE_DB_PASSWORD
remoteRef:
key: secret/data/legion-db
property: postgres_password
servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-alpha.yaml
+1 -13
View File
@@ -26,19 +26,6 @@ spec:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
initContainers:
- name: wait-for-sqlite-clone
image: busybox:1.36
command: ["sh", "-c", "until [ -f /data/neuron.db ]; do echo 'waiting for SQLite clone...'; sleep 2; done; echo 'SQLite ready'"]
volumeMounts:
- name: data
mountPath: /data
securityContext:
runAsNonRoot: true
runAsUser: 1001
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
containers:
- name: neuron-mcp
# Image is updated by swarm CI on each loop iteration
@@ -51,6 +38,7 @@ spec:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
runAsNonRoot: true
runAsUser: 1000
capabilities:
drop: ["ALL"]
env:
servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-beta.yaml
+1 -13
View File
@@ -26,19 +26,6 @@ spec:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
initContainers:
- name: wait-for-sqlite-clone
image: busybox:1.36
command: ["sh", "-c", "until [ -f /data/neuron.db ]; do echo 'waiting for SQLite clone...'; sleep 2; done; echo 'SQLite ready'"]
volumeMounts:
- name: data
mountPath: /data
securityContext:
runAsNonRoot: true
runAsUser: 1001
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
containers:
- name: neuron-mcp
image: registry.neuralplatform.ai/neuron-technologies/neuron-mcp:v0.18.14
@@ -50,6 +37,7 @@ spec:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
runAsNonRoot: true
runAsUser: 1000
capabilities:
drop: ["ALL"]
env:
servers/legion/k8s/neuron-technologies/swarm/mcp-deployment-gamma.yaml
+1 -13
View File
@@ -26,19 +26,6 @@ spec:
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
initContainers:
- name: wait-for-sqlite-clone
image: busybox:1.36
command: ["sh", "-c", "until [ -f /data/neuron.db ]; do echo 'waiting for SQLite clone...'; sleep 2; done; echo 'SQLite ready'"]
volumeMounts:
- name: data
mountPath: /data
securityContext:
runAsNonRoot: true
runAsUser: 1001
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
containers:
- name: neuron-mcp
image: registry.neuralplatform.ai/neuron-technologies/neuron-mcp:v0.18.14
@@ -50,6 +37,7 @@ spec:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
runAsNonRoot: true
runAsUser: 1000
capabilities:
drop: ["ALL"]
env: