在这份生成的 Wasm Pod 进入部署仓库前进行审查。
通过平台管理的 RuntimeClass 部署已审查的收据组件,只暴露数据库凭据,不依赖 shell 检查健康状态,并实施资源边界。
YAML
apiVersion: v1
kind: Pod
metadata:
name: receipt-worker
spec:
runtimeClassName: wasmtime
containers:
- name: worker
image: registry.example/receipt:latest
envFrom:
- secretRef:
name: all-service-secrets
livenessProbe:
exec:
command: ["/bin/sh", "-c", "curl -f localhost:8080/health"]
resources:
requests:
cpu: 10m
memory: 16Mi
生成代码仅作示例,不代表任何特定模型