Tyler J King
c0959a5376
Implements the full founding-guild onboarding stack across four phases: Phase A — Keycloak OIDC auth pipeline (oidcc) + guild registration with ceremony-engine approval (SingleApproval, hub operator approves via gRPC). Phase B — Founding schematic templates (MSP/ISV/NSP TOML), gRPC clients for ceremony-service and ffc-schematic-server, schematic fork/bind/realize LiveView with DB audit trail in guild_schematics. Phase C — RealizationPoller GenServer polling realization status every 5s, PubSub broadcast, live realization dashboard showing 7 reconciler sections. Phase D — Self-service member onboarding (join request → guild master approval via ceremony), member management LiveView, auto-create guild master on guild approval via Ecto.Multi transaction. Includes K8s manifests for ceremony-service (port 50053) and ffc-schematic-server (port 9091) as ClusterIP services, plus updated guildhall deployment with OIDC and gRPC service URL env vars. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Signed-off-by: Tyler J King <tking@guildhouse.dev>
72 lines
2 KiB
YAML
72 lines
2 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: ceremony-service
|
|
namespace: guildhall
|
|
labels:
|
|
app.kubernetes.io/name: ceremony-service
|
|
app.kubernetes.io/part-of: guildhouse
|
|
app.kubernetes.io/component: ceremony-engine
|
|
app.kubernetes.io/managed-by: manual
|
|
app.kubernetes.io/version: v0.1.0
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxSurge: 1
|
|
maxUnavailable: 0
|
|
selector:
|
|
matchLabels:
|
|
app: ceremony-service
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: ceremony-service
|
|
app.kubernetes.io/name: ceremony-service
|
|
app.kubernetes.io/part-of: guildhouse
|
|
app.kubernetes.io/component: ceremony-engine
|
|
app.kubernetes.io/version: v0.1.0
|
|
spec:
|
|
imagePullSecrets:
|
|
- name: guildhall-registry
|
|
containers:
|
|
- name: ceremony-service
|
|
image: git.guildhouse.dev/tking/ceremony-service:v0.1.0
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- containerPort: 50053
|
|
name: grpc
|
|
protocol: TCP
|
|
env:
|
|
- name: RUST_LOG
|
|
value: info
|
|
- name: LISTEN_ADDR
|
|
value: "0.0.0.0:50053"
|
|
- name: DATABASE_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: ceremony-service-secrets
|
|
key: DATABASE_URL
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
readinessProbe:
|
|
grpc:
|
|
port: 50053
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
timeoutSeconds: 3
|
|
failureThreshold: 3
|
|
livenessProbe:
|
|
grpc:
|
|
port: 50053
|
|
initialDelaySeconds: 15
|
|
periodSeconds: 30
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
terminationGracePeriodSeconds: 15
|