| apiVersion: v1 |
| kind: Service |
| metadata: |
| name: caller |
| labels: |
| app: caller |
| component: kitchen |
| domain: prod |
| spec: |
| ports: |
| - port: 8080 |
| targetPort: 8080 |
| protocol: TCP |
| name: client |
| selector: |
| app: caller |
| domain: prod |
| --- |
| apiVersion: apps/v1 |
| kind: Deployment |
| metadata: |
| name: caller |
| spec: |
| replicas: 3 |
| template: |
| metadata: |
| labels: |
| app: caller |
| component: kitchen |
| domain: prod |
| annotations: |
| prometheus.io.scrape: "true" |
| spec: |
| volumes: |
| - name: ssd-caller |
| gcePersistentDisk: |
| # This disk must already exist. |
| pdName: ssd-caller |
| fsType: ext4 |
| - name: secret-caller |
| secret: |
| secretName: caller-secrets |
| - name: secret-ssh-key |
| secret: |
| secretName: secrets |
| containers: |
| - name: caller |
| image: gcr.io/myproj/caller:v0.20.14 |
| volumeMounts: |
| - name: ssd-caller |
| mountPath: /logs |
| - mountPath: /etc/certs |
| name: secret-caller |
| readOnly: true |
| - mountPath: /sslcerts |
| name: secret-ssh-key |
| readOnly: true |
| ports: |
| - containerPort: 8080 |
| args: [ |
| "-env=prod", |
| "-key=/etc/certs/client.key", |
| "-cert=/etc/certs/client.pem", |
| "-ca=/etc/certs/servfx.ca", |
| "-ssh-tunnel-key=/sslcerts/tunnel-private.pem", |
| "-logdir=/logs", |
| "-event-server=events:7788", |
| ] |
| livenessProbe: |
| httpGet: |
| path: /debug/health |
| port: 8080 |
| initialDelaySeconds: 40 |
| periodSeconds: 3 |