Refactor: Remove deprecated gRPC service files and implement new API structure

- Deleted old gRPC service definitions in `game_grpc.pb.go` and `public.go`.
- Added new API server implementations for objectstory, player, and shop services.
- Introduced configuration files for new APIs in `etc/*.yaml`.
- Created main entry points for each service in `objectstory.go`, `player.go`, and `shop.go`.
- Removed unused user update handler and user API files.
- Added utility functions for context management and HTTP header parsing.
- Introduced PostgreSQL backup configuration in `backup/postgreSql.yaml`.

deploy/k8s/envoy/envoy.yaml

@@ -131,11 +131,21 @@ data:
                                 timeout: 30s
 
                             # ===== 未来按服务拆分路由（服务未落地前先注释） =====
-                            # - match:
-                            #     prefix: /api/v1/games
-                            #   route:
-                            #     cluster: game_api_cluster
-                            #     timeout: 30s
+                            - match:
+                                prefix: /api/v1/games
+                              route:
+                                cluster: game_api_cluster
+                                timeout: 30s
+                            - match:
+                                prefix: /api/v1/players
+                              route:
+                                  cluster: player_api_cluster
+                                  timeout: 30s
+                           # - match:
+                           #     prefix: /api/v1/shop
+                           #   route:
+                           #     cluster: player_api_cluster
+                           #     timeout: 30s
                             # - match:
                             #     prefix: /api/v1/orders
                             #   route:
@@ -551,35 +561,93 @@ data:
                         socket_address:
                           address: email-api-svc.juwan.svc.cluster.local
                           port_value: 8888
-
+                          
+        - name: player_api_cluster
+          connect_timeout: 2s
+          type: STRICT_DNS
+          lb_policy: ROUND_ROBIN
+          load_assignment:
+            cluster_name: player_api_cluster
+            endpoints:
+              - lb_endpoints:
+                  - endpoint:
+                      address:
+                        socket_address:
+                          address: player-api-svc.juwan.svc.cluster.local
+                          port_value: 8888
+                          
+        - name: game_api_cluster
+          connect_timeout: 2s
+          type: STRICT_DNS
+          lb_policy: ROUND_ROBIN
+          load_assignment:
+            cluster_name: game_api_cluster
+            endpoints:
+              - lb_endpoints:
+                 - endpoint:
+                     address:
+                       socket_address:
+                         address: game-api-svc.juwan.svc.cluster.local
+                         port_value: 8888
+                         
+        - name: objectstory_api_cluster
+          connect_timeout: 2s
+          type: STRICT_DNS
+          lb_policy: ROUND_ROBIN
+          load_assignment:
+            cluster_name: objectstory_api_cluster
+            endpoints:
+              - lb_endpoints:
+                  - endpoint:
+                      address:
+                        socket_address:
+                          address: objectstory-api-svc.juwan.svc.cluster.local
+                          port_value: 8888
+                          
+        - name: wallet_api_cluster
+          connect_timeout: 2s
+          type: STRICT_DNS
+          lb_policy: ROUND_ROBIN
+          load_assignment:
+           cluster_name: wallet_api_cluster
+           endpoints:
+             - lb_endpoints:
+                 - endpoint:
+                     address:
+                       socket_address:
+                         address: wallet-api-svc.juwan.svc.cluster.local
+                         port_value: 8888
+                           
+        - name: shop_api_cluster
+          connect_timeout: 2s
+          type: STRICT_DNS
+          lb_policy: ROUND_ROBIN
+          load_assignment:
+            cluster_name: shop_api_cluster
+            endpoints:
+              - lb_endpoints:
+                  - endpoint:
+                      address:
+                        socket_address:
+                          address: shop-api-svc.juwan.svc.cluster.local
+                          port_value: 8888
+                          
+        - name: community_api_cluster
+          connect_timeout: 2s
+          type: STRICT_DNS
+          lb_policy: ROUND_ROBIN
+          load_assignment:
+           cluster_name: community_api_cluster
+           endpoints:
+             - lb_endpoints:
+                 - endpoint:
+                     address:
+                       socket_address:
+                         address: community-api-svc.juwan.svc.cluster.local
+                         port_value: 8888
+                          
         # ===== 未来服务集群预留（当前未实现，先注释） =====
-        # - name: game_api_cluster
-        #   connect_timeout: 2s
-        #   type: STRICT_DNS
-        #   lb_policy: ROUND_ROBIN
-        #   load_assignment:
-        #     cluster_name: game_api_cluster
-        #     endpoints:
-        #       - lb_endpoints:
-        #           - endpoint:
-        #               address:
-        #                 socket_address:
-        #                   address: game-api-svc.juwan.svc.cluster.local
-        #                   port_value: 8888
         #
-        # - name: objectstory_api_cluster
-        #   connect_timeout: 2s
-        #   type: STRICT_DNS
-        #   lb_policy: ROUND_ROBIN
-        #   load_assignment:
-        #     cluster_name: objectstory_api_cluster
-        #     endpoints:
-        #       - lb_endpoints:
-        #           - endpoint:
-        #               address:
-        #                 socket_address:
-        #                   address: objectstory-api-svc.juwan.svc.cluster.local
-        #                   port_value: 8888
         #
         # - name: order_api_cluster
         #   connect_timeout: 2s
@@ -595,19 +663,6 @@ data:
         #                   address: order-api-svc.juwan.svc.cluster.local
         #                   port_value: 8888
         #
-        # - name: player_api_cluster
-        #   connect_timeout: 2s
-        #   type: STRICT_DNS
-        #   lb_policy: ROUND_ROBIN
-        #   load_assignment:
-        #     cluster_name: player_api_cluster
-        #     endpoints:
-        #       - lb_endpoints:
-        #           - endpoint:
-        #               address:
-        #                 socket_address:
-        #                   address: player-api-svc.juwan.svc.cluster.local
-        #                   port_value: 8888
         #
         # - name: shop_api_cluster
         #   connect_timeout: 2s

deploy/k8s/postgreSql.yaml

@@ -1,22 +0,0 @@
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  namespace: juwan
-  name: cluster-example
-spec:
-  instances: 3
-  backup:
-    barmanObjectStore:
-      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
-      endpointURL: https://cn-nb1.rains3.com
-      s3Credentials:
-        accessKeyId:
-          name: rc-creds
-          key: ACCESS_KEY_ID
-        secretAccessKey:
-          name: rc-creds
-          key: SECRET_ACCESS_KEY
-      wal:
-        compression: gzip
-  storage:
-    size: 1Gi

deploy/k8s/service/game/game-api.yaml

@@ -0,0 +1,121 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: game-api
+  namespace: juwan
+  labels:
+    app: game-api
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: game-api
+  template:
+    metadata:
+      labels:
+        app: game-api
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: game-api
+        image: game-api:latest
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8888
+        - containerPort: 4001 # 暴露端口
+        readinessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: game-api-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8888
+      targetPort: 8888
+  selector:
+    app: game-api
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: game-api-hpa-c
+  namespace: juwan
+  labels:
+    app: game-api-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: game-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: game-api-hpa-m
+  namespace: juwan
+  labels:
+    app: game-api-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: game-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+

deploy/k8s/service/game/game-rpc.yaml

@@ -0,0 +1,254 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: game-rpc
+  namespace: juwan
+  labels:
+    app: game-rpc
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: game-rpc
+  template:
+    metadata:
+      labels:
+        app: game-rpc
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: game-rpc
+        image: game-rpc:latest
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+        - containerPort: 4001 # 暴露端口
+        env:
+          - name: DB_PORT
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: port
+          - name: DB_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: password
+          - name: PD_USERNAME
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: username
+          - name: DB_NAME
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: dbname
+          - name: REDIS_M_HOST
+            value: "user-redis-master.juwan:6379"
+          - name: REDIS_S_HOST
+            value: "user-redis-replica.juwan:6379"
+          - name: REDIS_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: user-redis
+                key: password
+        readinessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: game-rpc-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8080
+      targetPort: 8080
+  selector:
+    app: game-rpc
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: game-rpc-hpa-c
+  namespace: juwan
+  labels:
+    app: game-rpc-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: game-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: game-rpc-hpa-m
+  namespace: juwan
+  labels:
+    app: game-rpc-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: game-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+#---
+## Redis 主从复制
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisReplication
+#metadata:
+#  name: game-redis
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#    redisSecret: # 记得创建密码
+#      name: game-redis
+#      key: password
+#
+#  redisExporter:
+#    enabled: true
+#    image: quay.io/opstree/redis-exporter:latest
+#    imagePullPolicy: Always
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  storage:
+#    volumeClaimTemplate:
+#      spec:
+#        accessModes: ["ReadWriteOnce"]
+#        resources:
+#          requests:
+#            storage: 1Gi
+#
+#---
+## Sentinel 监控
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisSentinel
+#metadata:
+#  name: game-rpc-redis-sentinel
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis-sentinel:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  redisSentinelConfig:
+#    redisReplicationName: game-redis
+#    masterGroupName: mymaster
+#    redisPort: "6379"
+#    quorum: "2"
+#    downAfterMilliseconds: "5000"
+#    failoverTimeout: "10000"
+#    parallelSyncs: "1"
+#
+#---
+## PostgreSQL 集群
+#apiVersion: postgresql.cnpg.io/v1
+#kind: Cluster
+#metadata:
+#  namespace: juwan
+#  name: game-db
+#spec:
+#  instances: 3
+#  primaryUpdateStrategy: unsupervised
+#  bootstrap:
+#    initdb:
+#      database: app
+#      owner: app
+#      # 只在 PVC 为空时初始化
+#      postInitSQL:
+#        - CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
+#  backup:
+#    barmanObjectStore:
+#      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
+#      endpointURL: https://cn-nb1.rains3.com
+#      s3Credentials:
+#        accessKeyId:
+#          name: rc-creds
+#          key: ACCESS_KEY_ID
+#        secretAccessKey:
+#          name: rc-creds
+#          key: SECRET_ACCESS_KEY
+#      wal:
+#        compression: gzip
+#  storage:
+#    size: 1Gi
+#  monitoring:
+#    enablePodMonitor: true

deploy/k8s/service/objectStorge/s3storge-api.yaml

@@ -0,0 +1,120 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: s3storge-api
+  namespace: juwan
+  labels:
+    app: s3storge-api
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: s3storge-api
+  template:
+    metadata:
+      labels:
+        app: s3storge-api
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: s3storge-api
+        image: s3storge-api:latest
+        ports:
+          - containerPort: 8888
+          - containerPort: 4001 # 暴露端口
+        readinessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: s3storge-api-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8888
+      targetPort: 8888
+  selector:
+    app: s3storge-api
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: s3storge-api-hpa-c
+  namespace: juwan
+  labels:
+    app: s3storge-api-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: s3storge-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: s3storge-api-hpa-m
+  namespace: juwan
+  labels:
+    app: s3storge-api-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: s3storge-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+

deploy/k8s/service/objectStorge/s3storge-rpc.yaml

@@ -0,0 +1,119 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: s3storge-rpc
+  namespace: juwan
+  labels:
+    app: s3storge-rpc
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: s3storge-rpc
+  template:
+    metadata:
+      labels:
+        app: s3storge-rpc
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: s3storge-rpc
+        image: s3storge-rpc:latest
+        ports:
+        - containerPort: 8080
+        - containerPort: 4001 # 暴露端口
+        readinessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: s3storge-rpc-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+  - port: 8080
+    targetPort: 8080
+  selector:
+    app: s3storge-rpc
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: s3storge-rpc-hpa-c
+  namespace: juwan
+  labels:
+    app: s3storge-rpc-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: s3storge-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: s3storge-rpc-hpa-m
+  namespace: juwan
+  labels:
+    app: s3storge-rpc-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: s3storge-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+

deploy/k8s/service/player/player-api.yaml

@@ -0,0 +1,116 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: player-api
+  namespace: juwan
+  labels:
+    app: player-api
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: player-api
+  template:
+    metadata:
+      labels:
+        app: player-api
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+        - name: player-api
+          image: player-api:latest
+          ports:
+            - containerPort: 8888
+            - containerPort: 4001 # 暴露端口
+          readinessProbe:
+            tcpSocket:
+              port: 8888
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          livenessProbe:
+            tcpSocket:
+              port: 8888
+            initialDelaySeconds: 15
+            periodSeconds: 20
+          resources:
+            requests:
+              cpu: 500m
+              memory: 512Mi
+            limits:
+              cpu: 1000m
+              memory: 1024Mi
+          volumeMounts:
+            - name: timezone
+              mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: player-api-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8888
+      targetPort: 8888
+  selector:
+    app: player-api
+
+---
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: player-api-hpa-c
+  namespace: juwan
+  labels:
+    app: player-api-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: player-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+    - type: Resource
+      resource:
+        name: cpu
+        target:
+          type: Utilization
+          averageUtilization: 80
+
+---
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: player-api-hpa-m
+  namespace: juwan
+  labels:
+    app: player-api-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: player-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+    - type: Resource
+      resource:
+        name: memory
+        target:
+          type: Utilization
+          averageUtilization: 80

deploy/k8s/service/player/player-rpc.yaml

@@ -0,0 +1,254 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: player-rpc
+  namespace: juwan
+  labels:
+    app: player-rpc
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: player-rpc
+  template:
+    metadata:
+      labels:
+        app: player-rpc
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+        - name: player-rpc
+          image: player-rpc:latest
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8080
+            - containerPort: 4001 # 暴露端口
+          env:
+            - name: DB_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-app
+                  key: port
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-app
+                  key: password
+            - name: PD_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-app
+                  key: username
+            - name: DB_NAME
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-app
+                  key: dbname
+            - name: REDIS_M_HOST
+              value: "user-redis-master.juwan:6379"
+            - name: REDIS_S_HOST
+              value: "user-redis-replica.juwan:6379"
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: user-redis
+                  key: password
+          readinessProbe:
+            tcpSocket:
+              port: 8080
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          livenessProbe:
+            tcpSocket:
+              port: 8080
+            initialDelaySeconds: 15
+            periodSeconds: 20
+          resources:
+            requests:
+              cpu: 500m
+              memory: 512Mi
+            limits:
+              cpu: 1000m
+              memory: 1024Mi
+          volumeMounts:
+          - name: timezone
+            mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: player-rpc-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8080
+      targetPort: 8080
+  selector:
+    app: player-rpc
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: player-rpc-hpa-c
+  namespace: juwan
+  labels:
+    app: player-rpc-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: player-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: player-rpc-hpa-m
+  namespace: juwan
+  labels:
+    app: player-rpc-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: player-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+#---
+## Redis 主从复制
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisReplication
+#metadata:
+#  name: player-rpc-redis
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#    redisSecret: # 记得创建密码
+#      name: player-rpc-redis
+#      key: password
+#
+#  redisExporter:
+#    enabled: true
+#    image: quay.io/opstree/redis-exporter:latest
+#    imagePullPolicy: Always
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  storage:
+#    volumeClaimTemplate:
+#      spec:
+#        accessModes: ["ReadWriteOnce"]
+#        resources:
+#          requests:
+#            storage: 1Gi
+#
+#---
+## Sentinel 监控
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisSentinel
+#metadata:
+#  name: player-rpc-redis-sentinel
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis-sentinel:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  redisSentinelConfig:
+#    redisReplicationName: player-rpc-redis
+#    masterGroupName: mymaster
+#    redisPort: "6379"
+#    quorum: "2"
+#    downAfterMilliseconds: "5000"
+#    failoverTimeout: "10000"
+#    parallelSyncs: "1"
+#
+#---
+## PostgreSQL 集群
+#apiVersion: postgresql.cnpg.io/v1
+#kind: Cluster
+#metadata:
+#  namespace: juwan
+#  name: player-rpc-db
+#spec:
+#  instances: 3
+#  primaryUpdateStrategy: unsupervised
+#  bootstrap:
+#    initdb:
+#      database: app
+#      owner: app
+#      # 只在 PVC 为空时初始化
+#      postInitSQL:
+#        - CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
+#  backup:
+#    barmanObjectStore:
+#      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
+#      endpointURL: https://cn-nb1.rains3.com
+#      s3Credentials:
+#        accessKeyId:
+#          name: rc-creds
+#          key: ACCESS_KEY_ID
+#        secretAccessKey:
+#          name: rc-creds
+#          key: SECRET_ACCESS_KEY
+#      wal:
+#        compression: gzip
+#  storage:
+#    size: 1Gi
+#  monitoring:
+#    enablePodMonitor: true

deploy/k8s/service/shop/shop-api.yaml

@@ -0,0 +1,120 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: shop-api
+  namespace: juwan
+  labels:
+    app: shop-api
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: shop-api
+  template:
+    metadata:
+      labels:
+        app: shop-api
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: shop-api
+        image: shop-api:latest
+        ports:
+        - containerPort: 8888
+        - containerPort: 4001 # 暴露端口
+        readinessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: shop-api-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8888
+      targetPort: 8888
+  selector:
+    app: shop-api
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: shop-api-hpa-c
+  namespace: juwan
+  labels:
+    app: shop-api-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: shop-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: shop-api-hpa-m
+  namespace: juwan
+  labels:
+    app: shop-api-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: shop-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+

deploy/k8s/service/shop/shop-rpc.yaml

@@ -0,0 +1,253 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: shop-rpc
+  namespace: juwan
+  labels:
+    app: shop-rpc
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: shop-rpc
+  template:
+    metadata:
+      labels:
+        app: shop-rpc
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: shop-rpc
+        image: shop-rpc:latest
+        ports:
+        - containerPort: 8080
+        - containerPort: 4001 # 暴露端口
+        env:
+          - name: DB_PORT
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: port
+          - name: DB_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: password
+          - name: PD_USERNAME
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: username
+          - name: DB_NAME
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: dbname
+          - name: REDIS_M_HOST
+            value: "user-redis-master.juwan:6379"
+          - name: REDIS_S_HOST
+            value: "user-redis-replica.juwan:6379"
+          - name: REDIS_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: user-redis
+                key: password
+        readinessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: shop-rpc-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8080
+      targetPort: 8080
+  selector:
+    app: shop-rpc
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: shop-rpc-hpa-c
+  namespace: juwan
+  labels:
+    app: shop-rpc-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: shop-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: shop-rpc-hpa-m
+  namespace: juwan
+  labels:
+    app: shop-rpc-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: shop-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+#---
+## Redis 主从复制
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisReplication
+#metadata:
+#  name: shop-rpc-redis
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#    redisSecret: # 记得创建密码
+#      name: shop-rpc-redis
+#      key: password
+#
+#  redisExporter:
+#    enabled: true
+#    image: quay.io/opstree/redis-exporter:latest
+#    imagePullPolicy: Always
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  storage:
+#    volumeClaimTemplate:
+#      spec:
+#        accessModes: ["ReadWriteOnce"]
+#        resources:
+#          requests:
+#            storage: 1Gi
+#
+#---
+## Sentinel 监控
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisSentinel
+#metadata:
+#  name: shop-rpc-redis-sentinel
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis-sentinel:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  redisSentinelConfig:
+#    redisReplicationName: shop-rpc-redis
+#    masterGroupName: mymaster
+#    redisPort: "6379"
+#    quorum: "2"
+#    downAfterMilliseconds: "5000"
+#    failoverTimeout: "10000"
+#    parallelSyncs: "1"
+#
+#---
+## PostgreSQL 集群
+#apiVersion: postgresql.cnpg.io/v1
+#kind: Cluster
+#metadata:
+#  namespace: juwan
+#  name: shop-rpc-db
+#spec:
+#  instances: 3
+#  primaryUpdateStrategy: unsupervised
+#  bootstrap:
+#    initdb:
+#      database: app
+#      owner: app
+#      # 只在 PVC 为空时初始化
+#      postInitSQL:
+#        - CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
+#  backup:
+#    barmanObjectStore:
+#      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
+#      endpointURL: https://cn-nb1.rains3.com
+#      s3Credentials:
+#        accessKeyId:
+#          name: rc-creds
+#          key: ACCESS_KEY_ID
+#        secretAccessKey:
+#          name: rc-creds
+#          key: SECRET_ACCESS_KEY
+#      wal:
+#        compression: gzip
+#  storage:
+#    size: 1Gi
+#  monitoring:
+#    enablePodMonitor: true

deploy/k8s/service/wallet/wallet-api.yaml

@@ -0,0 +1,120 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: wallet-api
+  namespace: juwan
+  labels:
+    app: wallet-api
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: wallet-api
+  template:
+    metadata:
+      labels:
+        app: wallet-api
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: wallet-api
+        image: wallet-api:latest
+        ports:
+        - containerPort: 8888
+        - containerPort: 4001 # 暴露端口
+        readinessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8888
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: wallet-api-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8888
+      targetPort: 8888
+  selector:
+    app: wallet-api
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: wallet-api-hpa-c
+  namespace: juwan
+  labels:
+    app: wallet-api-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: wallet-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: wallet-api-hpa-m
+  namespace: juwan
+  labels:
+    app: wallet-api-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: wallet-api
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+        

deploy/k8s/service/wallet/wallet-rpc.yaml

@@ -0,0 +1,253 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: wallet-rpc
+  namespace: juwan
+  labels:
+    app: wallet-rpc
+spec:
+  replicas: 3
+  revisionHistoryLimit: 5
+  selector:
+    matchLabels:
+      app: wallet-rpc
+  template:
+    metadata:
+      labels:
+        app: wallet-rpc
+    spec:
+      serviceAccountName: find-endpoints
+      containers:
+      - name: wallet-rpc
+        image: wallet-rpc:latest
+        ports:
+        - containerPort: 8080
+        - containerPort: 4001 # 暴露端口
+        env:
+          - name: DB_PORT
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: port
+          - name: DB_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: password
+          - name: PD_USERNAME
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: username
+          - name: DB_NAME
+            valueFrom:
+              secretKeyRef:
+                name: user-db-app
+                key: dbname
+          - name: REDIS_M_HOST
+            value: "user-redis-master.juwan:6379"
+          - name: REDIS_S_HOST
+            value: "user-redis-replica.juwan:6379"
+          - name: REDIS_PASSWORD
+            valueFrom:
+              secretKeyRef:
+                name: user-redis
+                key: password
+        readinessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        livenessProbe:
+          tcpSocket:
+            port: 8080
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        resources:
+          requests:
+            cpu: 500m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1024Mi
+        volumeMounts:
+        - name: timezone
+          mountPath: /etc/localtime
+      volumes:
+        - name: timezone
+          hostPath:
+            path: /usr/share/zoneinfo/Asia/Shanghai
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  name: wallet-rpc-svc
+  namespace: juwan
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "4001"
+    prometheus.io/path: "/metrics"
+spec:
+  ports:
+    - name: metrics
+      port: 4001
+      targetPort: 4001
+    - name: http
+      port: 8080
+      targetPort: 8080
+  selector:
+    app: wallet-rpc
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: wallet-rpc-hpa-c
+  namespace: juwan
+  labels:
+    app: wallet-rpc-hpa-c
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: wallet-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: cpu
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+---
+
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: wallet-rpc-hpa-m
+  namespace: juwan
+  labels:
+    app: wallet-rpc-hpa-m
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: wallet-rpc
+  minReplicas: 3
+  maxReplicas: 10
+  metrics:
+  - type: Resource
+    resource:
+      name: memory
+      target:
+        type: Utilization
+        averageUtilization: 80
+
+#---
+## Redis 主从复制
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisReplication
+#metadata:
+#  name: wallet-rpc-redis
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#    redisSecret: # 记得创建密码
+#      name: wallet-rpc-redis
+#      key: password
+#
+#  redisExporter:
+#    enabled: true
+#    image: quay.io/opstree/redis-exporter:latest
+#    imagePullPolicy: Always
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  storage:
+#    volumeClaimTemplate:
+#      spec:
+#        accessModes: ["ReadWriteOnce"]
+#        resources:
+#          requests:
+#            storage: 1Gi
+#
+#---
+## Sentinel 监控
+#apiVersion: redis.redis.opstreelabs.in/v1beta2
+#kind: RedisSentinel
+#metadata:
+#  name: wallet-rpc-redis-sentinel
+#  namespace: juwan
+#spec:
+#  clusterSize: 3
+#  kubernetesConfig:
+#    image: quay.io/opstree/redis-sentinel:v7.0.12
+#    imagePullPolicy: IfNotPresent
+#    resources:
+#      requests:
+#        cpu: 100m
+#        memory: 128Mi
+#      limits:
+#        cpu: 500m
+#        memory: 512Mi
+#  podSecurityContext:
+#    runAsUser: 1000
+#    fsGroup: 1000
+#  redisSentinelConfig:
+#    redisReplicationName: wallet-rpc-redis
+#    masterGroupName: mymaster
+#    redisPort: "6379"
+#    quorum: "2"
+#    downAfterMilliseconds: "5000"
+#    failoverTimeout: "10000"
+#    parallelSyncs: "1"
+#
+#---
+## PostgreSQL 集群
+#apiVersion: postgresql.cnpg.io/v1
+#kind: Cluster
+#metadata:
+#  namespace: juwan
+#  name: wallet-rpc-db
+#spec:
+#  instances: 3
+#  primaryUpdateStrategy: unsupervised
+#  bootstrap:
+#    initdb:
+#      database: app
+#      owner: app
+#      # 只在 PVC 为空时初始化
+#      postInitSQL:
+#        - CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
+#  backup:
+#    barmanObjectStore:
+#      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
+#      endpointURL: https://cn-nb1.rains3.com
+#      s3Credentials:
+#        accessKeyId:
+#          name: rc-creds
+#          key: ACCESS_KEY_ID
+#        secretAccessKey:
+#          name: rc-creds
+#          key: SECRET_ACCESS_KEY
+#      wal:
+#        compression: gzip
+#  storage:
+#    size: 1Gi
+#  monitoring:
+#    enablePodMonitor: true