姚章浩
6f16c3af20
build / build (push) Successful in 34s
上一版把 volumes 写成了重复键（compose 解析失败），并且误删了 extra_hosts/ networks。现在合并成一份挂载列表，端点别名（prod-pg/prod-es/prod-weknora） 保持不变；容器内已核对：快照目录可见、target_snapshot 配置已加载。 另新增 docs/PRODUCTION_BACKUP_RECOVERY.md：五层备份现状（PG 行级快照 / 发布前硬门禁 / ES 快照仓 + SLM / OSS 版本控制 / RDS 待确认）、RDS 控制台清单、 按事故类型的恢复路径与耗时、以及每次发布前的标准动作。
38 lines
1.7 KiB
YAML
38 lines
1.7 KiB
YAML
# 发布链路的「数据面接线」override（不含任何门禁开关）
|
|
# 用法：docker compose -f compose.yaml -f compose.release-sim.yaml up -d api release-worker
|
|
# 叠加顺序：compose.yaml → 本文件（接线）→ compose.release-gates.yaml（门禁，须人工授权）
|
|
# 作用：
|
|
# 1) api 拿到生产 WeKnora 凭据引用 →「生产知识库绑定」能读真实生产库列表
|
|
# 2) release-worker 拿到发布配置、目标端点别名、归档卷（执行门禁关闭时不加载配置）
|
|
services:
|
|
api:
|
|
environment:
|
|
# 凭据只引用 0600 文件（值不入库、不回显）；appconfig 要求两者同时给出
|
|
PRODUCTION_WEKNORA_BASE_URL: https://weknora-test.dobot.cn
|
|
PRODUCTION_WEKNORA_API_KEY_FILE: /run/release-secrets/target_weknora_api_key
|
|
volumes:
|
|
- ./secrets/release-sim:/run/release-secrets:ro
|
|
|
|
release-worker:
|
|
environment:
|
|
RELEASE_CONFIG_FILE: /run/release-sim/release.sim.json
|
|
PRODUCTION_RELEASE_AUTHORIZER_REF: yaozhanghao
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
- "prod-pg:host-gateway"
|
|
- "prod-es:host-gateway"
|
|
- "prod-weknora:host-gateway"
|
|
networks:
|
|
- default
|
|
- weknora-local
|
|
volumes:
|
|
- ./secrets/release-sim:/run/release-secrets:ro
|
|
- ./config/release.sim.json:/run/release-sim/release.sim.json:ro
|
|
- release-bundles:/var/lib/knowledge-governance/release-bundles
|
|
# 发布前快照留档目录（只读）：写目标库之前必须存在覆盖该库的新快照
|
|
- ./backups/target-kb-snapshots:/var/lib/knowledge-governance/target-kb-snapshots:ro
|
|
read_only: false
|
|
|
|
volumes:
|
|
release-bundles:
|
|
name: knowledge-governance-release-bundles |