msk_admin/Lumina-MSK
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update the codebase poc ver1

Browse Source
This commit is contained in:
DatTT127
2026-07-07 15:54:17 +07:00
parent fed5f277f4
commit 1622dc8fc5
452 changed files with 83999 additions and 66328 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
workspace/sprint_1_2/CODEBASE/infra/spec/infra_spec.md
View File

@@ -18,9 +18,11 @@ Platform Engineering Team
- NGINX configured as ingress controller with SSL/TLS termination, path-based routing to backend services, and WebSocket support for real-time features.
- Keepalived deployed in active-passive mode across cluster nodes, assigning a virtual IP (VIP) for seamless failover.
- PostgreSQL and Redis instances are provisioned and managed via Terraform; connection details are exposed as environment variables to consuming rooms.
- Cloud LLM Gateway (FastAPI) provisioned in K3s for NFR-16a governed egress: routes to GCP Vertex AI (Gemini) and Modal (MedGemma) with mandatory redaction, consent, and audit logging.
- Foundational logging: structured JSON logs shipped to centralized observability stack (outside scope of this spec).
- Security: network policies restrict inter-room communication to declared interfaces; NGINX enforces authentication headers and rate limits.
- Security: network policies restrict inter-room communication to declared interfaces; NGINX enforces authentication headers and rate limits. All cloud egress flows through Cloud LLM Gateway — no direct client-to-cloud calls permitted.
- Observability: exposes Prometheus metrics endpoints; health checks for liveness and readiness.
- NFR-16a Cost Guard: Cloud LLM Gateway tracks MedGemma usage count against total consult sessions; alert triggers if MedGemma ratio exceeds 20% of sessions over a rolling 24h window.
## Interface Contract
See `infra/spec/interface-contract.md`.