skia-perf-ct.yaml

apiVersion: v1
kind: Service
metadata:
  labels:
    app: skiaperf-ct
  name: skiaperf-ct
  annotations:
    beta.cloud.google.com/backend-config: '{"ports": {"8000":"skia-default-backendconfig"}}'
    skia.org.domain: ct-perf.skia.org
spec:
  ports:
    - name: metrics
      port: 20000
    - name: http
      port: 8000
  selector:
    app: skiaperf-ct
  type: NodePort
---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
  name: skiaperf-ct
spec:
  replicas: 1
  strategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: skiaperf-ct
        appgroup: perf
      annotations:
        prometheus.io.scrape: "true"
        prometheus.io.port: "20000"
    spec:
      automountServiceAccountToken: false
      securityContext:
        runAsUser: 2000 # aka skia
        fsGroup: 2000   # aka skia
      containers:
        - name: skiaperf-ct
          image: gcr.io/skia-public/skiaperf:2019-10-07T16_37_10Z-jcgregorio-221c9d1-clean
          args:
            - --algo=stepfit
            - --big_table_config=ct-prod
            - --dataframe_size=256
            - --default_sparse=true
            - --email_client_secret_file=/etc/perf-email-secrets/client_secret.json
            - --email_token_cache_file=/etc/perf-email-secrets/client_token.json
            - --git_repo_dir=/tmp/skiaperf/repo
            - --interesting=25
            - --internal_only
            - --logtostderr
            - --namespace=perf-ct
            - --num_continuous=300
            - --num_shift=50
            - --port=:8000
            - --project_name=skia-public
            - --prom_port=:20000
            - --radius=11
            - --resources_dir=/usr/local/share/skiaperf/
            - --subdomain=ct-perf
            - --num_continuous_parallel=1
          ports:
            - containerPort: 20000
            - containerPort:  8000
          volumeMounts:
            - name: skia-public-auth
              mountPath: /var/secrets/skia-public-auth
            - name: skia-perf-sa
              mountPath: /var/secrets/google
            - name: csrf-salt
              mountPath: /var/skia/
            - name: skia-org-legacy-login-secrets
              mountPath: /etc/skia.org/
            - name: perf-alertserver-skia-org-secrets
              mountPath: /etc/perf-email-secrets
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /var/secrets/google/key.json
          resources:
            requests:
              memory: "200Mi"
              cpu: "0.1"
          livenessProbe:
            httpGet:
              path: /healthz
              port: 8000
            initialDelaySeconds: 30
            periodSeconds: 30
            failureThreshold: 20
          readinessProbe:
            httpGet:
              path: /healthz
              port: 8000
            initialDelaySeconds: 1
            periodSeconds: 3
      volumes:
        - name: skia-public-auth
          secret:
            secretName: skia-public-auth
        - name: skia-perf-sa
          secret:
            secretName: skia-perf
        - name: csrf-salt
          secret:
            secretName: csrf-salt
        - name: skia-org-legacy-login-secrets
          secret:
            secretName: skia-org-legacy-login-secrets
        - name: perf-alertserver-skia-org-secrets
          secret:
            secretName: perf-alertserver-skia-org-secrets