Files
infrastructure/servers/legion/k8s/neuron-technologies/daemon/statefulset.yaml

89 lines
2.2 KiB
YAML

apiVersion: apps/v1
kind: StatefulSet
metadata:
name: neuron-daemon
namespace: neuron-prod
labels:
app: neuron-daemon
env: prod
spec:
serviceName: neuron-daemon
replicas: 2
selector:
matchLabels:
app: neuron-daemon
template:
metadata:
labels:
app: neuron-daemon
env: prod
spec:
securityContext:
runAsNonRoot: true
runAsUser: 1001
fsGroup: 1001
seccompProfile:
type: RuntimeDefault
containers:
- name: neuron-daemon
image: registry.neuralplatform.ai/neuron-technologies/neuron-daemon:0f5dbd6a
imagePullPolicy: Always
command:
- neuron
args:
- "--data-dir"
- "/data"
- "--api-url"
- "http://neuron-rest.neuron-prod.svc.cluster.local:8081"
ports:
- name: ws
containerPort: 7749
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
runAsNonRoot: true
capabilities:
drop: ["ALL"]
env:
- name: NEURON_LLM_PROVIDER
value: anthropic
- name: NEURON_LLM_MODEL
value: claude-haiku-4-5
- name: NEURON_DATA_DIR
value: /data
envFrom:
- secretRef:
name: neuron-daemon-secrets
volumeMounts:
- name: data
mountPath: /data
resources:
requests:
cpu: 500m
memory: 1Gi
limits:
cpu: 2000m
memory: 2Gi
livenessProbe:
httpGet:
path: /health
port: 7749
initialDelaySeconds: 30
periodSeconds: 30
failureThreshold: 3
readinessProbe:
httpGet:
path: /health
port: 7749
initialDelaySeconds: 20
periodSeconds: 10
failureThreshold: 3
volumeClaimTemplates:
- metadata:
name: data
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 5Gi