feat(deploy): register managed platform runtime components
This commit is contained in:
Codex
@@ -152,9 +152,11 @@ services:
|
||||
AI_WORKSPACE_HUB_FALLBACK_URLS: ${AI_WORKSPACE_HUB_FALLBACK_URLS:-}
|
||||
AI_WORKSPACE_ASSISTANT_ACTION_RELAY_ENABLED: ${AI_WORKSPACE_ASSISTANT_ACTION_RELAY_ENABLED:-true}
|
||||
AI_WORKSPACE_ASSISTANT_ACTION_RELAY_ID: ${AI_WORKSPACE_ASSISTANT_ACTION_RELAY_ID:-local-dev}
|
||||
AI_WORKSPACE_ONTOLOGY_MCP_ENABLED: ${AI_WORKSPACE_ONTOLOGY_MCP_ENABLED:-true}
|
||||
AI_WORKSPACE_OPS_ENTITLEMENT_URL: ${AI_WORKSPACE_OPS_ENTITLEMENT_URL:-}
|
||||
AI_WORKSPACE_OPS_ENTITLEMENT_TOKEN: ${AI_WORKSPACE_OPS_ENTITLEMENT_TOKEN:-}
|
||||
AI_WORKSPACE_OPS_ENTITLEMENT_REQUIRED: ${AI_WORKSPACE_OPS_ENTITLEMENT_REQUIRED:-false}
|
||||
AI_WORKSPACE_ENTITLEMENT_ADAPTERS_JSON: ${AI_WORKSPACE_ENTITLEMENT_ADAPTERS_JSON:-}
|
||||
AI_WORKSPACE_OPS_GATEWAY_BASE_URL: ${AI_WORKSPACE_OPS_GATEWAY_BASE_URL:-}
|
||||
AI_WORKSPACE_OPS_DEFAULT_WORKSPACE_SLUG: ${AI_WORKSPACE_OPS_DEFAULT_WORKSPACE_SLUG:-}
|
||||
AI_WORKSPACE_OPS_DEFAULT_PROJECT_ID: ${AI_WORKSPACE_OPS_DEFAULT_PROJECT_ID:-}
|
||||
@@ -168,6 +170,86 @@ services:
|
||||
ai-workspace-postgres:
|
||||
condition: service_healthy
|
||||
|
||||
ontology-core:
|
||||
image: nodedc/ontology-core:local
|
||||
build:
|
||||
context: ../services/ontology-core
|
||||
restart: unless-stopped
|
||||
environment:
|
||||
NODE_ENV: production
|
||||
PORT: 18104
|
||||
NODEDC_INTERNAL_ACCESS_TOKEN: ${NODEDC_INTERNAL_ACCESS_TOKEN:-}
|
||||
expose:
|
||||
- "18104"
|
||||
healthcheck:
|
||||
test:
|
||||
- CMD
|
||||
- node
|
||||
- -e
|
||||
- "fetch('http://127.0.0.1:18104/healthz').then((response) => process.exit(response.ok ? 0 : 1)).catch(() => process.exit(1))"
|
||||
interval: 30s
|
||||
timeout: 5s
|
||||
retries: 3
|
||||
start_period: 10s
|
||||
|
||||
# External-provider telemetry is isolated from Platform identity state. The
|
||||
# database is not published; only the Gateway is exposed on the local host
|
||||
# for operator checks and Engine development.
|
||||
gelios-postgres:
|
||||
image: ${GELIOS_TIMESCALE_IMAGE:-timescale/timescaledb-ha:pg16.14-ts2.28.2-all}
|
||||
restart: unless-stopped
|
||||
environment:
|
||||
POSTGRES_DB: ${GELIOS_PG_DB:-nodedc_gelios}
|
||||
POSTGRES_USER: ${GELIOS_PG_USER:-nodedc_gelios}
|
||||
POSTGRES_PASSWORD: ${GELIOS_PG_PASS:-change-me-generate-with-infra-scripts-init-dev-env}
|
||||
healthcheck:
|
||||
test: ["CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}"]
|
||||
interval: 30s
|
||||
timeout: 5s
|
||||
retries: 5
|
||||
start_period: 30s
|
||||
volumes:
|
||||
- gelios-database:/home/postgres/pgdata/data
|
||||
networks:
|
||||
- gelios-data
|
||||
|
||||
gelios-gateway:
|
||||
image: nodedc/gelios-gateway:local
|
||||
build:
|
||||
context: ../services/gelios-gateway
|
||||
restart: unless-stopped
|
||||
environment:
|
||||
NODE_ENV: production
|
||||
PORT: 18105
|
||||
DATABASE_URL: ${GELIOS_DATABASE_URL:-postgresql://nodedc_gelios:change-me-generate-with-infra-scripts-init-dev-env@gelios-postgres:5432/nodedc_gelios}
|
||||
NODEDC_INTERNAL_ACCESS_TOKEN: ${NODEDC_INTERNAL_ACCESS_TOKEN:-}
|
||||
GELIOS_TENANT_ID: ${GELIOS_TENANT_ID:-robot2b}
|
||||
GELIOS_CONNECTION_ID: ${GELIOS_CONNECTION_ID:-gelios-primary}
|
||||
GELIOS_UNIT_SCOPE: ${GELIOS_UNIT_SCOPE:-allowlist}
|
||||
GELIOS_ALLOWED_UNIT_IDS: ${GELIOS_ALLOWED_UNIT_IDS:-}
|
||||
GELIOS_INTAKE_ENABLED: ${GELIOS_INTAKE_ENABLED:-false}
|
||||
GELIOS_RAW_RETENTION_DAYS: ${GELIOS_RAW_RETENTION_DAYS:-14}
|
||||
expose:
|
||||
- "18105"
|
||||
ports:
|
||||
- "${GELIOS_GATEWAY_HOST_BIND:-127.0.0.1:18105}:18105"
|
||||
depends_on:
|
||||
gelios-postgres:
|
||||
condition: service_healthy
|
||||
healthcheck:
|
||||
test:
|
||||
- CMD
|
||||
- node
|
||||
- -e
|
||||
- "fetch('http://127.0.0.1:18105/healthz').then((response) => process.exit(response.ok ? 0 : 1)).catch(() => process.exit(1))"
|
||||
interval: 30s
|
||||
timeout: 5s
|
||||
retries: 3
|
||||
start_period: 15s
|
||||
networks:
|
||||
- default
|
||||
- gelios-data
|
||||
|
||||
ai-workspace-hub:
|
||||
image: nodedc/ai-workspace-hub:local
|
||||
build:
|
||||
@@ -180,10 +262,14 @@ services:
|
||||
AI_WORKSPACE_HUB_WS_PATH: /api/ai-workspace/hub
|
||||
NODEDC_INTERNAL_ACCESS_TOKEN: ${NODEDC_INTERNAL_ACCESS_TOKEN:-}
|
||||
NODEDC_AI_WORKSPACE_ASSISTANT_URL: http://ai-workspace-assistant:18082
|
||||
NODEDC_ONTOLOGY_CORE_URL: http://ontology-core:18104
|
||||
expose:
|
||||
- "18081"
|
||||
ports:
|
||||
- "${AI_WORKSPACE_HUB_HOST_BIND:-127.0.0.1:18081}:18081"
|
||||
depends_on:
|
||||
ontology-core:
|
||||
condition: service_healthy
|
||||
|
||||
map-gateway:
|
||||
image: nodedc/map-gateway:local
|
||||
@@ -194,6 +280,10 @@ services:
|
||||
NODE_ENV: production
|
||||
PORT: 18103
|
||||
CESIUM_ION_TOKEN: ${CESIUM_ION_TOKEN:-}
|
||||
# Foundry signs its private token-admin requests with the existing
|
||||
# Platform internal credential. The value stays outside this compose
|
||||
# file; this line only wires the local development runtime.
|
||||
NODEDC_INTERNAL_ACCESS_TOKEN: ${NODEDC_INTERNAL_ACCESS_TOKEN:-}
|
||||
CESIUM_ION_ASSET_ALLOWLIST: ${CESIUM_ION_ASSET_ALLOWLIST:-1,2,96188}
|
||||
MAP_GATEWAY_UPSTREAM_ALLOWLIST: ${MAP_GATEWAY_UPSTREAM_ALLOWLIST:-api.cesium.com,assets.ion.cesium.com,tile.openstreetmap.org,dev.virtualearth.net,ecn.t0.tiles.virtualearth.net,ecn.t1.tiles.virtualearth.net,ecn.t2.tiles.virtualearth.net,ecn.t3.tiles.virtualearth.net}
|
||||
# Offline access is selected explicitly with the cache profile, rather
|
||||
@@ -236,6 +326,7 @@ volumes:
|
||||
authentik-certs:
|
||||
notification-database:
|
||||
ai-workspace-database:
|
||||
gelios-database:
|
||||
caddy-data:
|
||||
caddy-config:
|
||||
# Cache data is runtime state, not Compose lifecycle state. These volumes are
|
||||
@@ -247,3 +338,7 @@ volumes:
|
||||
map-offline-snapshot:
|
||||
external: true
|
||||
name: ${NODEDC_MAP_OFFLINE_SNAPSHOT_VOLUME:-nodedc-platform_map-offline-snapshot}
|
||||
|
||||
networks:
|
||||
gelios-data:
|
||||
internal: true
|
||||
|
||||
Reference in New Issue
Block a user