diff --git a/docs/LOGBOOK.md b/docs/LOGBOOK.md index 4fd19309..33d65e96 100644 --- a/docs/LOGBOOK.md +++ b/docs/LOGBOOK.md @@ -6,6 +6,31 @@ --- +## 📍 當前狀態 (2026-04-11 深夜 — D1 models.json 集中化完成) + +### D1 models.json 集中化 (2026-04-11 深夜) + +ADR-067 五大 Ollama 應用 hardcode 模型名稱全部消除: + +| 服務 | 舊 hardcode | 新 purpose key | +|------|-------------|----------------| +| drift_narrator_service | qwen2.5:7b-instruct | drift_summary | +| drift_interpreter | qwen2.5:7b-instruct | drift_intent | +| log_summary_service | deepseek-r1:14b | log_anomaly | +| local_code_review_service | qwen2.5-coder:7b | code_review | +| image_analysis_service | llava:latest | image_analysis | +| decision_manager (nemoclaw) | deepseek-r1:14b | nemoclaw | +| decision_manager (playbook) | qwen2.5:7b-instruct | playbook_draft | +| embedding_service | qwen2.5:7b-instruct | embedding | +| knowledge_service | nomic-embed-text | embedding | + +models.json v1.3.0 + 9 新 purpose keys,commit f2c18c4 + +**B2 確認已在 Sprint 5 完成**(/topology + ServiceTopology.tsx),workplan 更新 +**Backlog 全清零** — 剩餘 I1/M3 tech debt 待下 Sprint + +--- + ## 📍 當前狀態 (2026-04-11 深夜 — ADR-072 Code Review 修補全完成) ### ADR-072 Code Review 修補完成 (2026-04-11 深夜) diff --git a/k8s/awoooi-prod/02-network-policy.yaml b/k8s/awoooi-prod/02-network-policy.yaml index 77373104..a9924f3c 100644 --- a/k8s/awoooi-prod/02-network-policy.yaml +++ b/k8s/awoooi-prod/02-network-policy.yaml @@ -1,8 +1,9 @@ # AWOOOI 正式環境零信任網路策略 # 負責人: CIO -# 版本: v1.3 -# 日期: 2026-04-08 +# 版本: v1.4 +# 日期: 2026-04-11 # 變更: +# - v1.4: 新增 ArgoCD MCP egress(argocd namespace port 80/443) # - v1.3: 新增 192.168.0.111 Ollama 主機 (M1 Pro),移除 188 的 Ollama port # - v1.2: 修復 DNS 規則使用 namespaceSelector (ADR-011 Appendix B) # - v1.1: 新增 Langfuse LLMOps (192.168.0.110:3100) - Phase 15.1 @@ -183,6 +184,21 @@ spec: - protocol: TCP port: 6443 + # 允許訪問 ArgoCD MCP(MCP Phase 3,2026-04-11) + # ArgoCD Server 在 argocd namespace,Pod 需要訪問其 HTTP/HTTPS API + - to: + - namespaceSelector: + matchLabels: + kubernetes.io/metadata.name: argocd + podSelector: + matchLabels: + app.kubernetes.io/name: argocd-server + ports: + - protocol: TCP + port: 80 + - protocol: TCP + port: 443 + # 允許訪問 192.168.0.121 K3s Worker (mon1) # 2026-04-09 新增: NodePort 32334(API)/32335(Web) 在 121 上,host probe 需要 - to: