blob: a36f59f7c7b0e8d10ec75d3d2eae4898eab1a986 [file] [log] [blame]
apiVersion: v1
kind: Service
metadata:
labels:
app: gold-{{.INSTANCE_ID}}-diffcalculator
name: gold-{{.INSTANCE_ID}}-diffcalculator
spec:
ports:
- name: metrics
port: 20000
selector:
app: gold-{{.INSTANCE_ID}}-diffcalculator
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: gold-{{.INSTANCE_ID}}-diffcalculator
spec:
replicas: {{.K8S_REPLICAS}}
selector:
matchLabels:
app: gold-{{.INSTANCE_ID}}-diffcalculator
strategy:
type: RollingUpdate
template:
metadata:
labels:
app: gold-{{.INSTANCE_ID}}-diffcalculator
appgroup: gold-{{.INSTANCE_ID}}
date: "{{.NOW}}" # Forces a re-deploy even if just the config file changes.
annotations:
prometheus.io.scrape: "true"
prometheus.io.port: "20000"
spec:
affinity:
nodeAffinity: # Schedule these pods to a specific set of nodes.
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
# The following label/key will be available in 1.17
# "node.kubernetes.io/instance-type": "n1-standard-16"
- matchExpressions:
- key: "{{.K8S_NODE_SELECTOR_KEY}}"
operator: In
values: # Either of these two values are fine.
- "{{.K8S_NODE_SELECTOR_VALUE1}}"
- "{{.K8S_NODE_SELECTOR_VALUE2}}"
automountServiceAccountToken: false
securityContext:
runAsUser: 2000 # aka skia
fsGroup: 2000 # aka skia
containers:
- name: gold-{{.INSTANCE_ID}}-diffcalculator
image: {{.DIFFCALCULATOR_IMAGE}}
args:
- "--common_instance_config=/etc/gold-config/{{.INSTANCE_ID}}.json5"
- "--config=/etc/gold-config/{{.INSTANCE_ID}}-diffcalculator.json5"
- "--logtostderr"
ports:
- containerPort: 20000
name: prom
volumeMounts:
- name: gold-{{.INSTANCE_ID}}-config-volume
mountPath: /etc/gold-config/
- name: gold-service-account-secrets
mountPath: /etc/gold-secrets/
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/gold-secrets/service-account.json
- name: K8S_POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
resources:
requests:
memory: "20Gi" # 16 Gig for full cache in diff/worker.go + 25% for burst
cpu: "4" # 4 diff goroutines in diff/worker.go
readinessProbe:
httpGet:
path: /healthz
port: 8000
initialDelaySeconds: 5
periodSeconds: 3
volumes:
- name: gold-{{.INSTANCE_ID}}-config-volume
configMap:
defaultMode: 400
name: gold-{{.INSTANCE_ID}}-config
- name: gold-service-account-secrets
secret:
secretName: gold-service-account-secrets