feat(ql3): establish 3.0 incubation baseline

2026-09-23 03:18:09 +08:00 · 2026-08-12 00:25:26 +08:00
parent 4bf92dcfeb
commit c699c32461
2817 changed files with 779642 additions and 653 deletions
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+patches:
+  - path: postgres-runtime-patch.yaml
+
+images:
+  - name: qinglong3-cluster-control
+    newName: registry.example.com/qinglong/qinglong3-cluster-control
+    # Fail closed until the independently verified release digest is supplied.
+    digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
@@ -0,0 +1,65 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ql3-cluster-control
+spec:
+  template:
+    spec:
+      containers:
+        - name: cluster-control
+          env:
+            - name: QL3_POSTGRES_RUNTIME_URL
+              $patch: delete
+            - name: QL3_POSTGRES_RUNTIME_HOST
+              value: ql3-postgres-rw.qinglong3-system.svc
+            - name: QL3_POSTGRES_RUNTIME_PORT
+              value: '5432'
+            - name: QL3_POSTGRES_RUNTIME_DATABASE
+              value: qinglong
+            - name: QL3_POSTGRES_RUNTIME_USER
+              valueFrom:
+                secretKeyRef:
+                  name: ql3-postgres-runtime-auth
+                  key: username
+            - name: QL3_POSTGRES_RUNTIME_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: ql3-postgres-runtime-auth
+                  key: password
+            - name: QL3_POSTGRES_TLS_SERVERNAME
+              value: ql3-postgres-rw.qinglong3-system.svc
+              valueFrom: null
+            - name: QL3_POSTGRES_WORKER_INGRESS_URL
+              $patch: delete
+            - name: QL3_POSTGRES_WORKER_INGRESS_HOST
+              value: ql3-postgres-rw.qinglong3-system.svc
+            - name: QL3_POSTGRES_WORKER_INGRESS_PORT
+              value: '5432'
+            - name: QL3_POSTGRES_WORKER_INGRESS_DATABASE
+              value: qinglong
+            - name: QL3_POSTGRES_WORKER_INGRESS_USER
+              valueFrom:
+                secretKeyRef:
+                  name: ql3-postgres-worker-ingress-auth
+                  key: username
+            - name: QL3_POSTGRES_WORKER_INGRESS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: ql3-postgres-worker-ingress-auth
+                  key: password
+            - name: QL3_WORKER_INGRESS_POSTGRES_TLS_SERVERNAME
+              value: ql3-postgres-rw.qinglong3-system.svc
+              valueFrom: null
+      volumes:
+        - name: postgres-runtime-ca
+          secret:
+            secretName: ql3-postgres-ca
+            items:
+              - key: ca.crt
+                path: ca.crt
+        - name: postgres-worker-ingress-ca
+          secret:
+            secretName: ql3-postgres-ca
+            items:
+              - key: ca.crt
+                path: ca.crt
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+components:
+  - ../../components/cluster-ai
+
+images:
+  - name: qinglong3-cluster-control-ai
+    newName: registry.example.com/qinglong/qinglong3-cluster-control-ai
+    # Fail closed until the independently verified runtime-ai digest is supplied.
+    digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
@@ -0,0 +1,16 @@
+# Example only. Copy into a private overlay, provision the Secret out of band,
+# and replace the digest with the independently verified runtime-ai image digest.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+components:
+  - ../../components/cluster-ai
+  - ../../components/cluster-ai-prompt-output
+
+images:
+  - name: qinglong3-cluster-control-ai
+    newName: registry.example.com/qinglong/qinglong3-cluster-control-ai
+    digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base
+
+images:
+  - name: qinglong3-cluster-control
+    newName: registry.example.com/qinglong/qinglong3-cluster-control
+    newTag: 3.0.0-alpha.0