apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: neuron-daemon
  namespace: neuron-prod
  labels:
    app: neuron-daemon
    env: prod
spec:
  serviceName: neuron-daemon
  replicas: 2
  selector:
    matchLabels:
      app: neuron-daemon
  template:
    metadata:
      labels:
        app: neuron-daemon
        env: prod
    spec:
      securityContext:
        runAsNonRoot: true
        runAsUser: 1001
        fsGroup: 1001
        seccompProfile:
          type: RuntimeDefault
      containers:
        - name: neuron-daemon
          image: registry.neuralplatform.ai/neuron-technologies/neuron-daemon:0f5dbd6a
          imagePullPolicy: Always
          command:
            - neuron
          args:
            - "--data-dir"
            - "/data"
            - "--api-url"
            - "http://neuron-rest.neuron-prod.svc.cluster.local:8081"
          ports:
            - name: ws
              containerPort: 7749
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: false
            runAsNonRoot: true
            capabilities:
              drop: ["ALL"]
          env:
            - name: NEURON_LLM_PROVIDER
              value: anthropic
            - name: NEURON_LLM_MODEL
              value: claude-haiku-4-5
            - name: NEURON_DATA_DIR
              value: /data
          envFrom:
            - secretRef:
                name: neuron-daemon-secrets
          volumeMounts:
            - name: data
              mountPath: /data
          resources:
            requests:
              cpu: 500m
              memory: 1Gi
            limits:
              cpu: 2000m
              memory: 2Gi
          livenessProbe:
            httpGet:
              path: /health
              port: 7749
            initialDelaySeconds: 30
            periodSeconds: 30
            failureThreshold: 3
          readinessProbe:
            httpGet:
              path: /health
              port: 7749
            initialDelaySeconds: 20
            periodSeconds: 10
            failureThreshold: 3
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: ["ReadWriteOnce"]
        resources:
          requests:
            storage: 5Gi