truss-cli/bootstrap-templates/spin-kz/modules/{{ .Params.name }}-{{ .Params.role }}/kustomize/deployment/deployment.yaml at ddf908ce5862164f30d3cef3c2551085b08da87d · get-bridge/truss-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
apiVersion: apps/v1
kind: Deployment
metadata:
  name: "{{ .Params.name }}-{{ .Params.role }}"
  annotations:
    traffic.spinnaker.io/load-balancers: '["service {{ .Params.name }}-{{ .Params.role }}"]'
  labels:
    version: "${trigger['parameters']['sha']}"
spec:
  replicas: 2
  revisionHistoryLimit: 2
  selector:
    matchLabels:
      service-role: "{{ .Params.role }}"
  template:
    metadata:
      labels:
        version: "${trigger['parameters']['sha']}"
      annotations:
        sidecar.istio.io/rewriteAppHTTPProbers: "true"
        traffic.sidecar.istio.io/excludeOutboundPorts: "8200"
        vault.security.banzaicloud.io/vault-addr: "https://vault.vault.svc.cluster.local:8200"
        vault.security.banzaicloud.io/vault-path: kubernetes
        vault.security.banzaicloud.io/vault-skip-verify: "true"
        # ad.datadoghq.com/{{ .Params.name }}-{{ .Params.role }}.check_names: '["openmetrics"]'
        # ad.datadoghq.com/{{ .Params.name }}-{{ .Params.role }}.init_configs: "[{}]"
        # ad.datadoghq.com/{{ .Params.name }}-{{ .Params.role }}.instances: "[{}]"
    spec:
      containers:
        - envFrom:
            - configMapRef:
                name: "{{ .Params.name }}-{{ .Params.role }}"
          name: "{{ .Params.name }}-{{ .Params.role }}"
          image: "{{ .Params.image }}:${trigger['parameters']['sha']}"
          imagePullPolicy: Always
          ports:
            - containerPort: {{ .Params.httpPort }}
              name: http
              protocol: TCP

          livenessProbe:
            failureThreshold: 3
            httpGet:
              httpHeaders: []
              path: /health-check
              port: http
            initialDelaySeconds: 60
            periodSeconds: 15
          readinessProbe:
            failureThreshold: 3
            httpGet:
              httpHeaders: []
              path: /health-check
              port: http
            initialDelaySeconds: 60
            periodSeconds: 15
          resources:
            limits:
              cpu: 100m
              memory: 100Mi
            requests:
              cpu: 100m
              memory: 100Mi
      imagePullSecrets:
        - name: starlord