Nik Afiq f2261a2676
Some checks failed
validate / lint (push) Failing after 1s
feat: add tts-gateway service, pinned to nik-gpu for GPU inference
Deploys the Go gRPC gateway and Python/libtorch inference sidecar as one
pod on nik-gpu (nodeSelector/toleration/runtimeClassName: nvidia, sidecar
requesting nvidia.com/gpu: 1), matching the existing GPU device plugin.
Model checkpoint/config are bind-mounted from /data/tts-gateway, added to
gpu-node's Ansible data_dirs for consistency with the other hosts.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-24 23:50:40 +09:00

74 lines
1.5 KiB
YAML

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: ha-gateway-tls
namespace: home-services
spec:
secretName: ha-gateway-tls
issuerRef:
name: internal-ca-issuer
kind: ClusterIssuer
commonName: ha-gateway
dnsNames:
- ha-gateway.home-services.svc.cluster.local
- ha-gateway
usages:
- server auth
- digital signature
- key encipherment
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: discord-bot-tls
namespace: home-services
spec:
secretName: discord-bot-tls
issuerRef:
name: internal-ca-issuer
kind: ClusterIssuer
commonName: discord-bot
usages:
- client auth
- digital signature
- key encipherment
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: ai-gateway-tls
namespace: home-services
spec:
secretName: ai-gateway-tls
issuerRef:
name: internal-ca-issuer
kind: ClusterIssuer
commonName: ai-gateway
dnsNames:
- ai-gateway.home-services.svc.cluster.local
- ai-gateway
usages:
- server auth
- client auth
- digital signature
- key encipherment
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: tts-gateway-tls
namespace: home-services
spec:
secretName: tts-gateway-tls
issuerRef:
name: internal-ca-issuer
kind: ClusterIssuer
commonName: tts-gateway
dnsNames:
- tts-gateway.home-services.svc.cluster.local
- tts-gateway
usages:
- server auth
- digital signature
- key encipherment