Message Signature #300256

Message Signature Verified.

Address Copy

Message Copy

# k8s/gaia-cluster-manager.yaml - Transposição para Kubernetes
apiVersion: apps/v1
kind: Deployment
metadata:
  name: gaia-cluster-manager
  namespace: gaia-system
spec:
  replicas: 3  # I40: TMR para alta disponibilidade
  selector:
    matchLabels:
      app: gaia-manager
  template:
    metadata:
      labels:
        app: gaia-manager
    spec:
      # I39: Segurança rigorosa
      securityContext:
        seccompProfile:
          type: RuntimeDefault
        runAsNonRoot: true
      
      containers:
      - name: gaia-manager
        image: gaia/cluster-manager:v1.0
        # I45: Limites de recursos (ATP)
        resources:
          limits:
            cpu: "2"
            memory: "4Gi"
          requests:
            cpu: "1"
            memory: "2Gi"
        
        # I16: Monitoramento de saúde
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 30
          periodSeconds: 10
        
        readinessProbe:
          exec:
            command: ["/bin/gaia-readiness-check"]
        
        # Configuração baseada em ambiente
        env:
        - name: MAX_CELLS
          value: "1024"
        - name: CELL_DEATH_THRESHOLD_MS
          value: "120000"  # 120 segundos em ms
        - name: GAIA_STRESS_THRESHOLD
          value: "0.9"
        
        # Mount do vault para secrets (I39)
        volumeMounts:
        - name: vault-secrets
          mountPath: /etc/gaia/secrets
          readOnly: true
      
      volumes:
      - name: vault-secrets
        secret:
          secretName: gaia-vault-token
      
      # I40: Distribuição em zonas diferentes
      topologySpreadConstraints:
      - maxSkew: 1
        topologyKey: topology.kubernetes.io/zone
        whenUnsatisfiable: ScheduleAnyway
        labelSelector:
          matchLabels:
            app: gaia-manager
      
      # I46: Política de restart em falha
      restartPolicy: Always
      terminationGracePeriodSeconds: 60

Signature Hash Copy

0xec450563a2f3f08db18aa7c2c5863eae093def5fe2b04ec368d17767be0d2a4a0788ac5fb076e802b93703117ff73bde3d93c8adf8d3a1140d877634777ed5601c

[ Signature Verification Module is Powered by Nethereum (Thanks @juanfranblanco) ]

Tools & Services

Message Signature #300256