blob: ab2e7503619f91c90e5228e065230d354cd32089 [file] [log] [blame]
apiVersion: v1
kind: Service
metadata:
labels:
app: fuzzer-be
instance: "3"
name: fuzzer-be-3
spec:
ports:
- name: metrics
port: 20000
selector:
app: fuzzer-be
type: NodePort
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: fuzzer-be-3
spec:
replicas: 1
strategy:
type: RollingUpdate
template:
metadata:
labels:
app: fuzzer-be
instance: "1"
annotations:
prometheus.io.scrape: "true"
prometheus.io.port: "20000"
spec:
automountServiceAccountToken: false
securityContext:
runAsUser: 2000 # aka skia
fsGroup: 2000 # aka skia
containers:
- name: fuzzer-be
image: gcr.io/skia-public/fuzzer-be:2018-10-23T13_42_24Z-kjlubick-33a8fcc-clean
args:
- "--architecture=linux_x64"
- "--api_fuzz_processes=5"
- "--binary_fuzz_processes=5"
- "--analysis_processes=8"
- "--upload_processes=8"
- "--download_processes=15"
- "--fuzz_to_run=image_decode_incremental"
- "--fuzz_to_run=jpeg_encoder"
- "--fuzz_to_run=mock_gpu_canvas"
- "--override_hostname=skia-fuzzer-be-3"
ports:
- containerPort: 20000
volumeMounts:
- name: skia-fuzzer-be-sa
mountPath: /var/secrets/google
- name: fuzzer-be-3-storage
mountPath: /mnt/fuzzing
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /var/secrets/google/key.json
resources:
requests:
memory: "60Gi"
cpu: "15"
ephemeral-storage: "25Gi"
limits:
memory: "100Gi"
ephemeral-storage: "50Gi"
readinessProbe:
tcpSocket:
port: 20000
initialDelaySeconds: 30
periodSeconds: 3
volumes:
- name: skia-fuzzer-be-sa
secret:
secretName: skia-fuzzer-be
- name: fuzzer-be-3-storage
emptyDir: {}