feat(dify): 新增dify配置

apps/infra/data/cloudnative-pg/cnpg17-cluster-hk.yaml

@@ -22,6 +22,9 @@ spec:
   postgresql:
     parameters:
       archive_timeout: 30min
+    # 启用向量扩展
+    shared_preload_libraries:
+      - "vectors.so"
   backup:
     retentionPolicy: "7d"
     barmanObjectStore:

apps/infra/data/postgresql-ha/configmap-pgpool-script.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: postgresql-ha-pgpool-script
-  namespace: infra-data
-data:
-  latency_test.sh: |-
-    #!/bin/bash
-    
-    install_packages ping
-    
-    # 读取环境变量
-    nodes=$PGPOOL_BACKEND_NODES
-    
-    echo $nodes

apps/infra/data/postgresql-ha/helmchart.yaml

@@ -1,85 +0,0 @@
-apiVersion: helm.cattle.io/v1
-kind: HelmChart
-metadata:
-  name: postgresql-ha
-  namespace: infra-data
-spec:
-  chart: oci://registry-1.docker.io/bitnamicharts/postgresql-ha
-  targetNamespace: infra-data
-  version: 14.3.1
-  valuesContent: |-
-    diagnosticMode:
-      enabled: false
-    postgresql:
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - podAffinityTerm:
-                labelSelector:
-                  matchLabels:
-                    app.kubernetes.io/name: postgresql-ha
-                    app.kubernetes.io/component: postgresql
-                topologyKey: kubernetes.io/hostname
-              weight: 1
-            - podAffinityTerm:
-                labelSelector:
-                  matchLabels:
-                    app.kubernetes.io/name: postgresql-ha
-                    app.kubernetes.io/component: postgresql
-                topologyKey: topology.kubernetes.io/region
-              weight: 1
-      tolerations:
-        - key: "node-role.kubernetes.io/control-plane"
-          operator: "Exists"
-          effect: "NoSchedule"
-      image:
-        debug: true
-      username: rohow
-      password: L#GRtTR2QuL@20pm6+c~
-      postgresPassword: L#GRtTR2QuL@20pm6+c~
-      repmgrPassword: yAn0l2eiLw
-    pgpool:
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - podAffinityTerm:
-                labelSelector:
-                  matchLabels:
-                    app.kubernetes.io/name: postgresql-ha
-                    app.kubernetes.io/component: pgpool
-                topologyKey: kubernetes.io/hostname
-              weight: 1
-            - podAffinityTerm:
-                labelSelector:
-                  matchLabels:
-                    app.kubernetes.io/name: postgresql-ha
-                    app.kubernetes.io/component: pgpool
-                topologyKey: topology.kubernetes.io/region
-              weight: 1
-        podAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - podAffinityTerm:
-                labelSelector:
-                  matchLabels:
-                    app.kubernetes.io/name: postgresql-ha
-                    app.kubernetes.io/component: pgpool
-                topologyKey: kubernetes.io/hostname
-              weight: 1
-      tolerations:
-        - key: "node-role.kubernetes.io/control-plane"
-          operator: "Exists"
-          effect: "NoSchedule"
-      replicaCount: 1
-      containerSecurityContext:
-        runAsUser: 0
-        runAsGroup: 0
-        runAsNonRoot: false
-        readOnlyRootFilesystem: false
-        privileged: true
-        allowPrivilegeEscalation: true
-      image:
-        debug: true
-      adminPassword: wc8FVC55JX
-    volumePermissions:
-      enabled: true
-

apps/infra/data/postgresql-ha/loadbalancer.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: postgresql-ha-lb
-  namespace: infra-data
-spec:
-  selector:
-    app.kubernetes.io/instance: postgresql-ha
-    app.kubernetes.io/name: postgresql-ha
-    app.kubernetes.io/component: pgpool
-  ports:
-    - protocol: TCP
-      port: 65432
-      targetPort: 5432
-  type: LoadBalancer

apps/infra/devops/gitea/helmchart.yaml

@@ -36,7 +36,7 @@ spec:
     postgresql-ha:
       enabled: false
     image:
-      tag: 1.23.7
+      tag: 1.23.8
     ingress:
       enabled: true
       className: nginx

apps/infra/monitor/prometheus/helmchart.yaml

@@ -7,7 +7,7 @@ spec:
   repo: https://prometheus-community.github.io/helm-charts
   chart: kube-prometheus-stack
   targetNamespace: infra-monitor
-  version: 72.0.1
+  version: 72.6.3
   valuesContent: |-
     kubeControllerManager:
       enabled: false

apps/infra/net/nginx/helmchart.yaml

@@ -35,6 +35,9 @@ spec:
         ssl-redirect: "true"
         # 自定义错误页面
         custom-http-errors: "403,404,502,503"
+        # 全局限速配置
+        limit-req-status-code: "429"
+        limit-conn-status-code: "429"
         http-snippet: |
           # lua插件配置
           lua_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
@@ -43,15 +46,12 @@ spec:
           proxy_cache_key $uri$is_args$args;
           proxy_cache_lock on;
           proxy_cache_use_stale updating;
-          # 限速配置
-          limit_req_zone $binary_remote_addr zone=global_limit:10m rate=10r/s;
+          # 全局限速配置
+          limit_req_zone $binary_remote_addr zone=global_limit:20m rate=20r/s;
+          limit_req zone=global_limit burst=50 nodelay;
         server-snippet: |
           # dns配置 配置在http块下会出现重复配置 所以配置在server块下
           resolver 169.254.20.10 10.43.0.10 ipv6=off;
-        location-snippet: |
-          # 限速配置
-          limit_req zone=global_limit burst=30 nodelay;
-          limit_req_status 429;
         # 启用geoip2模块
         use-geoip: "false"
         use-geoip2: "true"