- K2.4 NPD: Node Problem Detector (DaemonSet) - K2.3 VPA: 3 Vertical Pod Autoscaler (Off 模式) - K2.1 ArgoCD: v3.3.6 @ :30443 (GitOps) - K2.2 Sealed Secrets: v0.26.0 (加密 Secrets) 新增檔案: - k8s/npd/node-problem-detector.yaml - k8s/awoooi-prod/11-vpa.yaml Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
162 lines
5.8 KiB
Markdown
162 lines
5.8 KiB
Markdown
# AWOOOI 服務端點參考
|
||
|
||
> **版本**: v1.0
|
||
> **建立日期**: 2026-03-29
|
||
> **負責人**: 首席架構師
|
||
> **用途**: 統一管理所有服務 IP:Port,避免文檔分散
|
||
|
||
---
|
||
|
||
## 五主機架構總覽
|
||
|
||
```
|
||
┌─────────────────────────────────────────────────────────────────┐
|
||
│ AWOOOI 生產環境拓撲 │
|
||
├─────────────────────────────────────────────────────────────────┤
|
||
│ │
|
||
│ ┌──────────────┐ VIP 192.168.0.125 │
|
||
│ │ DevOps 110 │ ↓ │
|
||
│ │ Harbor/Sentry│ ┌───────┴───────┐ │
|
||
│ │ Langfuse/GHR │ │ │ │
|
||
│ └──────────────┘ 120 (Master) 121 (Backup) │
|
||
│ K3s Server K3s Server │
|
||
│ ┌──────────────┐ keepalived keepalived │
|
||
│ │ Security 112 │ │
|
||
│ │ Kali Scanner │ │
|
||
│ └──────────────┘ ↓ Datastore │
|
||
│ ┌──────────────┐ │
|
||
│ │ AI/Web 188 │ │
|
||
│ │ PostgreSQL │ │
|
||
│ │ Ollama │ │
|
||
│ │ OpenClaw │ │
|
||
│ │ Redis/SignOz │ │
|
||
│ └──────────────┘ │
|
||
└─────────────────────────────────────────────────────────────────┘
|
||
```
|
||
|
||
---
|
||
|
||
## 服務端點清單
|
||
|
||
### K3s 叢集 (透過 VIP 存取)
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **K3s API** | `192.168.0.125:6443` | kubectl 存取點 (VIP) |
|
||
| **AWOOOI API** | `192.168.0.125:32334` | `/api/v1/*` NodePort |
|
||
| **AWOOOI Web** | `192.168.0.125:32335` | Next.js 前端 NodePort |
|
||
|
||
### AI 服務 (192.168.0.188)
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **Ollama** | `192.168.0.188:11434` | LLM 推理 (llama3.2:3b, qwen2.5:7b) |
|
||
| **OpenClaw** | `192.168.0.188:8089` | AI 代理 (決策中心) - 2026-03-28 端口統一 |
|
||
|
||
### 資料庫 (192.168.0.188)
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **PostgreSQL** | `192.168.0.188:5432` | AWOOOI DB + K3s Datastore |
|
||
| **Redis** | `192.168.0.188:6380` | 快取 (DB 10-15 為 AWOOOI) |
|
||
|
||
### 可觀測性
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **SignOz Web** | `192.168.0.188:3301` | APM Dashboard |
|
||
| **OTEL gRPC** | `192.168.0.188:24317` | Traces (gRPC) |
|
||
| **OTEL HTTP** | `192.168.0.188:24318` | Traces (HTTP) |
|
||
| **ClickHouse** | `192.168.0.188:8123` | Metrics 查詢 |
|
||
| **Sentry** | `192.168.0.110:9000` | Error Tracking |
|
||
| **Langfuse** | `192.168.0.110:3100` | LLMOps |
|
||
| **Prometheus** | `192.168.0.188:9090` | Metrics |
|
||
| **Alertmanager** | `192.168.0.188:9093` | 告警路由 |
|
||
|
||
### DevOps (192.168.0.110)
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **Harbor** | `192.168.0.110:5000` | Container Registry |
|
||
| **GitHub Runner** | - | Self-hosted (awoooi-runner) |
|
||
|
||
### K3s 叢集管理
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **ArgoCD** | `192.168.0.125:30443` | GitOps UI (admin / fSCLMBhtpRxhbRxw) |
|
||
|
||
### 備份 (192.168.0.188)
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **MinIO API** | `192.168.0.188:9000` | Velero 備份儲存 |
|
||
| **MinIO Console** | `192.168.0.188:9001` | Web 管理介面 |
|
||
|
||
### 安全 (192.168.0.112)
|
||
|
||
| 服務 | 端點 | 說明 |
|
||
|------|------|------|
|
||
| **Kali Scanner** | `192.168.0.112:8080` | 安全掃描 API |
|
||
|
||
---
|
||
|
||
## 健康檢查端點
|
||
|
||
```bash
|
||
# AWOOOI API (完整健康檢查)
|
||
curl http://192.168.0.125:32334/api/v1/health
|
||
|
||
# Ollama (模型列表)
|
||
curl http://192.168.0.188:11434/api/tags
|
||
|
||
# OpenClaw
|
||
curl http://192.168.0.188:8089/health
|
||
|
||
# SignOz ClickHouse
|
||
curl http://192.168.0.188:8123 -d "SELECT 1"
|
||
|
||
# Prometheus
|
||
curl http://192.168.0.188:9090/-/ready
|
||
|
||
# Alertmanager
|
||
curl http://192.168.0.188:9093/-/ready
|
||
```
|
||
|
||
---
|
||
|
||
## 環境變數範本
|
||
|
||
```bash
|
||
# === K3s VIP ===
|
||
KUBECONFIG_SERVER=https://192.168.0.125:6443
|
||
|
||
# === AI 服務 ===
|
||
OLLAMA_URL=http://192.168.0.188:11434
|
||
OPENCLAW_URL=http://192.168.0.188:8089
|
||
|
||
# === 資料庫 ===
|
||
DATABASE_URL=postgresql+asyncpg://user:pass@192.168.0.188:5432/awoooi
|
||
REDIS_URL=redis://192.168.0.188:6380/10
|
||
|
||
# === 可觀測性 ===
|
||
OTEL_EXPORTER_OTLP_ENDPOINT=http://192.168.0.188:24318 # HTTP
|
||
SIGNOZ_URL=http://192.168.0.188:3301
|
||
SENTRY_URL=http://192.168.0.110:9000
|
||
LANGFUSE_URL=http://192.168.0.110:3100
|
||
|
||
# === DevOps ===
|
||
HARBOR_URL=http://192.168.0.110:5000
|
||
```
|
||
|
||
---
|
||
|
||
## 變更歷史
|
||
|
||
| 日期 | 版本 | 變更 | 作者 |
|
||
|------|------|------|------|
|
||
| 2026-03-28 | v1.3 | K2 完成 - ArgoCD/VPA/NPD/Sealed Secrets | Claude Code |
|
||
| 2026-03-28 | v1.2 | K1 Velero 備份系統完成,MinIO 端點已記錄 | Claude Code |
|
||
| 2026-03-28 | v1.1 | OpenClaw 端口 8088→8089 統一,移除 legacy 引用 | Claude Code |
|
||
| 2026-03-28 | v1.0 | 初版建立 (K-HA 完成後) | 首席架構師 |
|