add redpanda to legion cluster

Deploy single-broker Redpanda in dedicated namespace with 20Gi storage,
1 CPU / 2Gi memory limits, and a one-shot topic init job for neuron.swarm,
neuron.ci, neuron.vcs, and neuron.webhooks with appropriate retention.

servers/legion/k8s/redpanda/deployment.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: redpanda
-  namespace: platform
+  namespace: redpanda
   labels:
     app: redpanda
 spec:
@@ -24,13 +24,13 @@ spec:
             - redpanda
             - start
             - --smp=1
-            - --memory=512M
+            - --memory=1536M
             - --reserve-memory=0M
             - --overprovisioned
             - --kafka-addr=INTERNAL://0.0.0.0:9092,EXTERNAL://0.0.0.0:9093
-            - --advertise-kafka-addr=INTERNAL://redpanda.platform.svc.cluster.local:9092,EXTERNAL://100.64.0.1:30094
+            - --advertise-kafka-addr=INTERNAL://redpanda.redpanda.svc.cluster.local:9092,EXTERNAL://100.64.0.1:30094
             - --pandaproxy-addr=0.0.0.0:8082
-            - --advertise-pandaproxy-addr=redpanda.platform.svc.cluster.local:8082
+            - --advertise-pandaproxy-addr=redpanda.redpanda.svc.cluster.local:8082
           ports:
             - name: kafka-internal
               containerPort: 9092
@@ -48,8 +48,8 @@ spec:
               memory: 512Mi
               cpu: 100m
             limits:
-              memory: 1Gi
-              cpu: 500m
+              memory: 2Gi
+              cpu: "1"
           readinessProbe:
             exec:
               command: ["rpk", "cluster", "info", "--brokers=localhost:9092"]
@@ -60,12 +60,12 @@ spec:
           persistentVolumeClaim:
             claimName: redpanda-data
 ---
-# Internal ClusterIP — for in-cluster services (coordinator, CI jobs)
+# Internal ClusterIP — for in-cluster services
 apiVersion: v1
 kind: Service
 metadata:
   name: redpanda
-  namespace: platform
+  namespace: redpanda
 spec:
   selector:
     app: redpanda
@@ -81,12 +81,12 @@ spec:
       targetPort: 8082
   type: ClusterIP
 ---
-# NodePort — for external access via Tailscale (100.64.0.1:30093)
+# NodePort — external access via Tailscale (100.64.0.1:30093/30094)
 apiVersion: v1
 kind: Service
 metadata:
   name: redpanda-external
-  namespace: platform
+  namespace: redpanda
 spec:
   selector:
     app: redpanda
@@ -101,7 +101,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: redpanda-console
-  namespace: platform
+  namespace: redpanda
   labels:
     app: redpanda-console
 spec:
@@ -121,7 +121,7 @@ spec:
             - containerPort: 8080
           env:
             - name: KAFKA_BROKERS
-              value: redpanda.platform.svc.cluster.local:9092
+              value: redpanda.redpanda.svc.cluster.local:9092
           resources:
             requests:
               memory: 64Mi
@@ -134,7 +134,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: redpanda-console
-  namespace: platform
+  namespace: redpanda
 spec:
   selector:
     app: redpanda-console
@@ -147,7 +147,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: redpanda-console
-  namespace: platform
+  namespace: redpanda
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
     cert-manager.io/cluster-issuer: letsencrypt-prod