Files
Will Anderson 84688aec9d restore Always pull policy for engram-server: registry image now works
The registry image now compiles with -rdynamic/-ldl so dlsym can find
handle_request at runtime. IfNotPresent workaround no longer needed.
2026-05-04 11:43:52 -05:00

104 lines
2.4 KiB
YAML

---
# engram-server — graph memory substrate for DHARMA registry.
# Provides the HTTP API that dharma's EngramDB client talks to.
# Routes: GET/POST /nodes, POST /edges, GET /nodes/list, POST /search, etc.
apiVersion: apps/v1
kind: Deployment
metadata:
name: engram-server
namespace: neuron-prod
labels:
app: engram-server
env: prod
spec:
replicas: 1
selector:
matchLabels:
app: engram-server
template:
metadata:
labels:
app: engram-server
env: prod
spec:
securityContext:
runAsNonRoot: true
runAsUser: 1001
fsGroup: 1001
seccompProfile:
type: RuntimeDefault
containers:
- name: engram-server
image: registry.neuralplatform.ai/neuron-technologies/engram-server:latest
imagePullPolicy: Always
ports:
- name: http
containerPort: 8742
env:
- name: ENGRAM_BIND
value: ":8742"
- name: ENGRAM_DATA_DIR
value: "/data"
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
runAsNonRoot: true
capabilities:
drop: ["ALL"]
volumeMounts:
- name: data
mountPath: /data
resources:
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 500m
memory: 512Mi
livenessProbe:
httpGet:
path: /health
port: 8742
initialDelaySeconds: 10
periodSeconds: 30
failureThreshold: 3
readinessProbe:
httpGet:
path: /health
port: 8742
initialDelaySeconds: 5
periodSeconds: 10
failureThreshold: 3
volumes:
- name: data
persistentVolumeClaim:
claimName: engram-data
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: engram-data
namespace: neuron-prod
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 2Gi
---
apiVersion: v1
kind: Service
metadata:
name: engram-server
namespace: neuron-prod
labels:
app: engram-server
spec:
selector:
app: engram-server
ports:
- name: http
port: 8742
targetPort: 8742
type: ClusterIP