# ai 服务默认值(AI 网关 - 业务领域 D6) # 副本数(生产建议 ≥ 2) replicaCount: 2 image: repository: edu/ai tag: latest # 生产请固定 tag,避免 latest pullPolicy: IfNotPresent # 服务端口 service: type: ClusterIP port: 3006 targetPort: 3006 # 命名空间(默认 edu-services,由 edu-platform chart 创建) namespace: edu-services # 探针配置 probes: liveness: path: /healthz initialDelaySeconds: 15 periodSeconds: 20 timeoutSeconds: 3 failureThreshold: 3 readiness: path: /readyz initialDelaySeconds: 5 periodSeconds: 10 timeoutSeconds: 3 failureThreshold: 2 # 资源配额 resources: requests: cpu: 250m memory: 256Mi limits: cpu: 1000m memory: 1Gi # 滚动更新策略 strategy: type: RollingUpdate maxSurge: 1 maxUnavailable: 0 # Prometheus 指标采集 metrics: enabled: true port: 3006 path: /metrics # 安全上下文 securityContext: runAsNonRoot: true runAsUser: 1000 allowPrivilegeEscalation: false capabilities: drop: ["ALL"] # 服务级 ConfigMap(非敏感配置) configMap: enabled: true data: NODE_ENV: production LOG_LEVEL: info # HPA hpa: enabled: true minReplicas: 2 maxReplicas: 10 targetCPUUtilizationPercentage: 70 targetMemoryUtilizationPercentage: 80 # 敏感配置(从 Secret 引用,Secret 由 edu-platform chart 或 ExternalSecrets 管理) secretRefs: - name: edu-platform-secret keys: - MYSQL_PASSWORD - JWT_SECRET - REDIS_PASSWORD