blob: d2885b8da86fcf32dbe1e3f76c155fb161625f74 [file] [log] [blame]
apiVersion: v1
kind: Service
metadata:
labels:
app: fuzzer-be
instance: "8"
name: fuzzer-be-8
spec:
ports:
- name: metrics
port: 20000
selector:
app: fuzzer-be
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: fuzzer-be-8
spec:
replicas: 1
strategy:
type: RollingUpdate
template:
metadata:
labels:
app: fuzzer-be
instance: "1"
annotations:
prometheus.io.scrape: "true"
prometheus.io.port: "20000"
spec:
automountServiceAccountToken: false
securityContext:
runAsUser: 2000 # aka skia
fsGroup: 2000 # aka skia
containers:
- name: fuzzer-be
image: gcr.io/skia-public/fuzzer-be:2018-10-23T13_42_24Z-kjlubick-33a8fcc-clean
args:
- "--architecture=linux_x64"
- "--api_fuzz_processes=5"
- "--binary_fuzz_processes=5"
- "--analysis_processes=8"
- "--upload_processes=8"
- "--download_processes=15"
- "--fuzz_to_run=sksl2glsl"
- "--fuzz_to_run=skottie_json"
- "--fuzz_to_run=skp"
- "--override_hostname=skia-fuzzer-be-8"
ports:
- containerPort: 20000
volumeMounts:
- name: skia-fuzzer-be-sa
mountPath: /var/secrets/google
- name: fuzzer-be-8-storage
mountPath: /mnt/fuzzing
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /var/secrets/google/key.json
resources:
requests:
memory: "60Gi"
cpu: "15"
ephemeral-storage: "20Gi"
limits:
memory: "100Gi"
ephemeral-storage: "50Gi"
readinessProbe:
tcpSocket:
port: 20000
initialDelaySeconds: 30
periodSeconds: 3
volumes:
- name: skia-fuzzer-be-sa
secret:
secretName: skia-fuzzer-be
- name: fuzzer-be-8-storage
emptyDir: {}