feat: add Redpanda and wp-deploy-coordinator to Legion

- Redpanda single-node StatefulSet in platform namespace - wp-coordinator deployment consuming wp.deploy topic - RBAC for coordinator to exec into harmonic-wordpress pods - R2 credentials via ExternalSecret (no SSH key needed on coordinator) - Sites config as ConfigMap — add new WP sites without code changes
2026-04-04 10:18:09 -05:00
parent 6a9db2094e
commit 82ed0eb10b
9 changed files with 309 additions and 0 deletions
@@ -0,0 +1,64 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: wp-coordinator
+  namespace: platform
+  labels:
+    app: wp-coordinator
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: wp-coordinator
+  template:
+    metadata:
+      labels:
+        app: wp-coordinator
+    spec:
+      serviceAccountName: wp-coordinator
+      containers:
+        - name: wp-coordinator
+          image: registry.neuralplatform.ai/neural-platform/wp-deploy-coordinator:latest
+          imagePullPolicy: Always
+          env:
+            - name: REDPANDA_BROKERS
+              value: redpanda.platform.svc.cluster.local:9092
+            - name: DEPLOY_TOPIC
+              value: wp.deploy
+            - name: CONSUMER_GROUP
+              value: wp-coordinator
+            - name: GITEA_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: wp-coordinator-secrets
+                  key: gitea_token
+            - name: R2_ENDPOINT
+              value: https://651161e0a3d321561b4c90b5bcd5f15b.r2.cloudflarestorage.com
+            - name: R2_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: wp-coordinator-secrets
+                  key: r2_access_key
+            - name: R2_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: wp-coordinator-secrets
+                  key: r2_secret_key
+            - name: R2_BUCKET
+              value: wp-deploys
+            - name: SITES_CONFIG
+              value: /config/sites.yaml
+          volumeMounts:
+            - name: config
+              mountPath: /config
+          resources:
+            requests:
+              memory: 128Mi
+              cpu: 50m
+            limits:
+              memory: 256Mi
+              cpu: 200m
+      volumes:
+        - name: config
+          configMap:
+            name: wp-coordinator-sites