blob: b6f4ed60db6be13cf56a2f683442bbde3b34438f [file] [log] [blame]
apiVersion: v1
kind: Service
metadata:
name: gold-{{.INSTANCE_ID}}-skiacorrectness
annotations:
beta.cloud.google.com/backend-config: '{"ports": {"8000":"skia-default-backendconfig"}}'
spec:
ports:
- name: metrics
port: 20000
- name: http
port: 8000
selector:
app: gold-{{.INSTANCE_ID}}-skiacorrectness
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: gold-{{.INSTANCE_ID}}-skiacorrectness
spec:
replicas: 1
selector:
matchLabels:
app: gold-{{.INSTANCE_ID}}-skiacorrectness
strategy:
type: RollingUpdate
template:
metadata:
labels:
app: gold-{{.INSTANCE_ID}}-skiacorrectness
appgroup: gold-{{.INSTANCE_ID}}
annotations:
prometheus.io.scrape: "true"
prometheus.io.port: "20000"
spec:
automountServiceAccountToken: false
securityContext:
runAsUser: 2000 # aka skia
fsGroup: 2000 # aka skia
containers:
- name: gold-{{.INSTANCE_ID}}-skiacorrectness
image: {{.SKIACORRECTNESS_IMAGE}}
args:
- "--logtostderr=true"
- "--app_title={{.SKCORR_TITLE}}"
- "--baseline_gs_path=skia-gold-{{.INSTANCE_ID}}/baselines"
- "--cache_size=0"
- "--default_corpus={{.SKCORR_DEFAULT_CORPUS}}"
- "--diff_server_grpc=gold-{{.INSTANCE_ID}}-diffserver:8000"
- "--diff_server_http=gold-{{.INSTANCE_ID}}-diffserver:8001"
- "--ds_namespace=gold-{{.INSTANCE_ID}}"
- "--event_topic=gold-{{.INSTANCE_ID}}-eventbus"
- "--fs_namespace={{.INSTANCE_ID}}"
- "--fs_project_id={{.FIRESTORE_PROJECT}}"
- "--force_login={{.FORCE_LOGIN}}"
- "--gerrit_url={{.GERRIT_URL}}"
- "--git_bt_instance={{.GIT_BT_INSTANCE}}"
- "--git_bt_table=git-repos"
- "--git_repo_dir=/data/ci-repo"
- "--git_repo_url={{.GITREPO_URL}}"
- "--gs_buckets=skia-gold-{{.INSTANCE_ID}}"
- "--hashes_gs_path=skia-gold-{{.INSTANCE_ID}}/hash_files/gold-{{.INSTANCE_ID}}-hashes.txt"
- "--image_dir=/data/imagediffs"
- "--n_commits={{.N_COMMITS}}"
- "--no_cloud_log=true"
- "--port=:8000"
- "--project_id={{.PROJECT_ID}}"
- "--prom_port=:20000"
- "--public_whitelist=all"
- "--redirect_url={{.SITE_URL}}/oauth2callback/"
- "--resources_dir=/usr/local/share/skiacorrectness/frontend"
- "--service_account_file=/var/secrets/google/service-account.json"
- "--site_url={{.SITE_URL}}"
- "--show_bot_progress=false"
- "--sparse={{.SPARSE}}"
- "--trace_service=gold-{{.INSTANCE_ID}}-traceservice:9090"
ports:
- containerPort: 8000
name: http
- containerPort: 20000
name: prom
volumeMounts:
- name: gold-service-account-secrets
mountPath: /var/secrets/google/
- name: skia-org-legacy-login-secrets
mountPath: /etc/skia.org/
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /var/secrets/google/service-account.json
resources:
requests:
memory: "4Gi"
cpu: "2"
readinessProbe:
httpGet:
path: /healthz
port: 8000
initialDelaySeconds: 30
periodSeconds: 10
failureThreshold: 6
volumes:
- name: gold-service-account-secrets
secret:
secretName: gold-service-account-secrets
- name: skia-org-legacy-login-secrets
secret:
secretName: skia-org-legacy-login-secrets