Compare commits
1 Commits
sprint39/c
...
sprint41/c
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
0a20f05525 |
@@ -1,13 +1,10 @@
|
|||||||
# FlowerCore Remote Desktop — TLS + Ingress
|
# FlowerCore Remote Desktop — TLS + Ingress
|
||||||
#
|
#
|
||||||
# Source-of-truth split:
|
# Source-of-truth split:
|
||||||
# - bluejay-infra OWNS: Certificate, IngressRoute, all NetworkPolicies,
|
# - bluejay-infra OWNS: Certificate, IngressRoute, all NetworkPolicies
|
||||||
# and the explicit RemoteDesktopPoolCrd warm-pool intent in
|
|
||||||
# remotedesktop-pools.yaml.
|
|
||||||
# (see network-policies.yaml in this directory).
|
# (see network-policies.yaml in this directory).
|
||||||
# - FlowerCore.RemoteDesktop OWNS: CRD definition/operator Deployment and
|
# - FlowerCore.RemoteDesktop scripts/deploy-web.sh OWNS: Deployment +
|
||||||
# scripts/deploy-web.sh Deployment + Service. Reason: image refs like
|
# Service. Reason: image refs like `localhost/fc-desktop:linux-xfce`
|
||||||
# `localhost/fc-desktop:linux-xfce`
|
|
||||||
# only exist on each node's containerd after a manual import, so a
|
# only exist on each node's containerd after a manual import, so a
|
||||||
# Deployment manifest in bluejay-infra would race the image-import
|
# Deployment manifest in bluejay-infra would race the image-import
|
||||||
# step and crash-loop.
|
# step and crash-loop.
|
||||||
|
|||||||
@@ -1,101 +0,0 @@
|
|||||||
# FlowerCore RemoteDesktop warm-pool intent.
|
|
||||||
#
|
|
||||||
# These CRDs are deliberately explicit. The RemoteDesktop warmup loop no
|
|
||||||
# longer scans template defaults to decide what to warm; every enabled pool
|
|
||||||
# here represents operator/GitOps intent and prevents a repeat of the
|
|
||||||
# orphan-pool leak from 2026-05-08.
|
|
||||||
---
|
|
||||||
apiVersion: flowercore.io/v1
|
|
||||||
kind: RemoteDesktopPoolCrd
|
|
||||||
metadata:
|
|
||||||
name: browser-lab-pool
|
|
||||||
namespace: fc-desktop
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: remotedesktop-pool
|
|
||||||
app.kubernetes.io/part-of: flowercore-remotedesktop
|
|
||||||
app.kubernetes.io/managed-by: bluejay-infra
|
|
||||||
spec:
|
|
||||||
templateSlug: browser-only
|
|
||||||
desiredSize: 1
|
|
||||||
enabled: true
|
|
||||||
reconcileNow: true
|
|
||||||
---
|
|
||||||
apiVersion: flowercore.io/v1
|
|
||||||
kind: RemoteDesktopPoolCrd
|
|
||||||
metadata:
|
|
||||||
name: opensuse-xfce-pool
|
|
||||||
namespace: fc-desktop
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: remotedesktop-pool
|
|
||||||
app.kubernetes.io/part-of: flowercore-remotedesktop
|
|
||||||
app.kubernetes.io/managed-by: bluejay-infra
|
|
||||||
spec:
|
|
||||||
templateSlug: opensuse-xfce
|
|
||||||
desiredSize: 1
|
|
||||||
enabled: true
|
|
||||||
userVolumeMode: LateAttach
|
|
||||||
reconcileNow: true
|
|
||||||
---
|
|
||||||
apiVersion: flowercore.io/v1
|
|
||||||
kind: RemoteDesktopPoolCrd
|
|
||||||
metadata:
|
|
||||||
name: dev-workstation-pool
|
|
||||||
namespace: fc-desktop
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: remotedesktop-pool
|
|
||||||
app.kubernetes.io/part-of: flowercore-remotedesktop
|
|
||||||
app.kubernetes.io/managed-by: bluejay-infra
|
|
||||||
spec:
|
|
||||||
templateSlug: dev-workstation
|
|
||||||
desiredSize: 1
|
|
||||||
enabled: true
|
|
||||||
userVolumeMode: LateAttach
|
|
||||||
reconcileNow: true
|
|
||||||
---
|
|
||||||
apiVersion: flowercore.io/v1
|
|
||||||
kind: RemoteDesktopPoolCrd
|
|
||||||
metadata:
|
|
||||||
name: ai-station-pool
|
|
||||||
namespace: fc-desktop
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: remotedesktop-pool
|
|
||||||
app.kubernetes.io/part-of: flowercore-remotedesktop
|
|
||||||
app.kubernetes.io/managed-by: bluejay-infra
|
|
||||||
spec:
|
|
||||||
templateSlug: ai-station
|
|
||||||
desiredSize: 1
|
|
||||||
enabled: true
|
|
||||||
userVolumeMode: LateAttach
|
|
||||||
reconcileNow: true
|
|
||||||
---
|
|
||||||
apiVersion: flowercore.io/v1
|
|
||||||
kind: RemoteDesktopPoolCrd
|
|
||||||
metadata:
|
|
||||||
name: linux-xfce-pool
|
|
||||||
namespace: fc-desktop
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: remotedesktop-pool
|
|
||||||
app.kubernetes.io/part-of: flowercore-remotedesktop
|
|
||||||
app.kubernetes.io/managed-by: bluejay-infra
|
|
||||||
spec:
|
|
||||||
templateSlug: linux-xfce
|
|
||||||
desiredSize: 1
|
|
||||||
enabled: true
|
|
||||||
userVolumeMode: LateAttach
|
|
||||||
reconcileNow: true
|
|
||||||
---
|
|
||||||
apiVersion: flowercore.io/v1
|
|
||||||
kind: RemoteDesktopPoolCrd
|
|
||||||
metadata:
|
|
||||||
name: linux-xfce-rdp-pool
|
|
||||||
namespace: fc-desktop
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: remotedesktop-pool
|
|
||||||
app.kubernetes.io/part-of: flowercore-remotedesktop
|
|
||||||
app.kubernetes.io/managed-by: bluejay-infra
|
|
||||||
spec:
|
|
||||||
templateSlug: linux-xfce-rdp
|
|
||||||
desiredSize: 1
|
|
||||||
enabled: true
|
|
||||||
userVolumeMode: LateAttach
|
|
||||||
reconcileNow: true
|
|
||||||
@@ -208,6 +208,9 @@ data:
|
|||||||
vlan: "home"
|
vlan: "home"
|
||||||
arch: "arm64"
|
arch: "arm64"
|
||||||
role: "relay-controller"
|
role: "relay-controller"
|
||||||
|
maintenance_state: "planned-offline"
|
||||||
|
maintenance_ticket: "Q-SP41-PIRELAY"
|
||||||
|
maintenance_reason: "traffic-light-rig-awaiting-power"
|
||||||
|
|
||||||
# =======================================================================
|
# =======================================================================
|
||||||
# PiManager Application Metrics (relay states, temps, automation)
|
# PiManager Application Metrics (relay states, temps, automation)
|
||||||
@@ -229,6 +232,9 @@ data:
|
|||||||
service: "pimanager"
|
service: "pimanager"
|
||||||
vlan: "home"
|
vlan: "home"
|
||||||
device: "pi3-ks0212"
|
device: "pi3-ks0212"
|
||||||
|
maintenance_state: "planned-offline"
|
||||||
|
maintenance_ticket: "Q-SP41-PIRELAY"
|
||||||
|
maintenance_reason: "traffic-light-rig-awaiting-power"
|
||||||
|
|
||||||
# Epson ET-3750 EcoTank Printer SNMP
|
# Epson ET-3750 EcoTank Printer SNMP
|
||||||
- job_name: "snmp-printer"
|
- job_name: "snmp-printer"
|
||||||
|
|||||||
@@ -387,38 +387,6 @@ public sealed class FleetManifestLintTests
|
|||||||
violations.Should().BeEmpty();
|
violations.Should().BeEmpty();
|
||||||
}
|
}
|
||||||
|
|
||||||
[Fact]
|
|
||||||
public void RemoteDesktopPoolCrds_MustExplicitlyOptInHookReadyTemplates()
|
|
||||||
{
|
|
||||||
var expectedModes = new Dictionary<string, string?>(StringComparer.Ordinal)
|
|
||||||
{
|
|
||||||
["browser-only"] = null,
|
|
||||||
["opensuse-xfce"] = "LateAttach",
|
|
||||||
["dev-workstation"] = "LateAttach",
|
|
||||||
["ai-station"] = "LateAttach",
|
|
||||||
["linux-xfce"] = "LateAttach",
|
|
||||||
["linux-xfce-rdp"] = "LateAttach",
|
|
||||||
};
|
|
||||||
|
|
||||||
var pools = Inventory.Documents
|
|
||||||
.Where(document => document.Kind == "RemoteDesktopPoolCrd")
|
|
||||||
.Where(document => document.RelativePath == "fc-desktop/remotedesktop-pools.yaml")
|
|
||||||
.ToDictionary(
|
|
||||||
document => document.Scalar("spec", "templateSlug") ?? string.Empty,
|
|
||||||
StringComparer.Ordinal);
|
|
||||||
|
|
||||||
pools.Keys.Should().BeEquivalentTo(expectedModes.Keys);
|
|
||||||
foreach (var expected in expectedModes)
|
|
||||||
{
|
|
||||||
var pool = pools[expected.Key];
|
|
||||||
pool.Namespace.Should().Be("fc-desktop");
|
|
||||||
pool.Scalar("spec", "desiredSize").Should().Be("1");
|
|
||||||
pool.Scalar("spec", "enabled").Should().Be("true");
|
|
||||||
pool.Scalar("spec", "reconcileNow").Should().Be("true");
|
|
||||||
pool.Scalar("spec", "userVolumeMode").Should().Be(expected.Value);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
[Fact]
|
[Fact]
|
||||||
public void PublicEgressDeployments_MustOptOutOfIamworkinLanSearchSuffixes()
|
public void PublicEgressDeployments_MustOptOutOfIamworkinLanSearchSuffixes()
|
||||||
{
|
{
|
||||||
|
|||||||
Reference in New Issue
Block a user