blob: 2d2c312bca489f3903ffbb2a07656bf510be1d80 [file] [log] [blame]
apiVersion: v1
kind: Service
metadata:
labels:
app: fuzzer-be
instance: "0"
name: fuzzer-be-0
spec:
ports:
- name: metrics
port: 20000
selector:
app: fuzzer-be
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: fuzzer-be-0
spec:
replicas: 1
strategy:
type: RollingUpdate
template:
metadata:
labels:
app: fuzzer-be
instance: "1"
annotations:
prometheus.io.scrape: "true"
prometheus.io.port: "20000"
spec:
automountServiceAccountToken: false
securityContext:
runAsUser: 2000 # aka skia
fsGroup: 2000 # aka skia
containers:
- name: fuzzer-be
image: gcr.io/skia-public/fuzzer-be:2018-10-23T13_42_24Z-kjlubick-33a8fcc-clean
args:
- "--architecture=linux_x64"
- "--api_fuzz_processes=4"
- "--binary_fuzz_processes=4"
- "--analysis_processes=8"
- "--upload_processes=8"
- "--download_processes=15"
- "--fuzz_to_run=android_codec"
- "--fuzz_to_run=api_draw_functions"
- "--fuzz_to_run=api_gradient"
- "--fuzz_to_run=api_image_filter"
- "--override_hostname=skia-fuzzer-be-0"
ports:
- containerPort: 20000
volumeMounts:
- name: skia-fuzzer-be-sa
mountPath: /var/secrets/google
- name: fuzzer-be-0-storage
mountPath: /mnt/fuzzing
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /var/secrets/google/key.json
resources:
requests:
memory: "80Gi"
cpu: "17"
ephemeral-storage: "80Gi"
limits:
memory: "100Gi"
ephemeral-storage: "90Gi"
readinessProbe:
tcpSocket:
port: 20000
initialDelaySeconds: 30
periodSeconds: 3
volumes:
- name: skia-fuzzer-be-sa
secret:
secretName: skia-fuzzer-be
- name: fuzzer-be-0-storage
emptyDir: {}