wrongmove/k8s/api-deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: "125"
  labels:
    app: realestate-crawler-api
    tier: 4-aux
  name: realestate-crawler-api
  namespace: realestate-crawler
spec:
  progressDeadlineSeconds: 600
  replicas: 2
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: realestate-crawler-api
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: realestate-crawler-api
        kubernetes.io/cluster-service: "true"
    spec:
      automountServiceAccountToken: true
      securityContext:
        runAsUser: 1000
        runAsGroup: 1000
        fsGroup: 1000
      initContainers:
      # One-shot chown so existing NFS-backed listing dirs (mode 775, owned
      # by various historical UIDs) become writable by the new uid=1000
      # appuser.  Idempotent: chown of already-owned files is a no-op.
      - name: fix-data-permissions
        image: busybox:1.36
        command:
          - sh
          - -c
          - |
            chown -R 1000:1000 /app/data || true
            chmod -R u+rwX,g+rwX /app/data || true
        securityContext:
          runAsUser: 0
        volumeMounts:
        - mountPath: /app/data
          name: data
      containers:
      - env:
        - name: ENV
          value: prod
        - name: DB_CONNECTION_STRING
          value: mysql://wrongmove:N5uy5v4wntXStCOvBlY7V@mysql.dbaas.svc.cluster.local:3306/wrongmove
        - name: CELERY_BROKER_URL
          value: redis://redis.redis.svc.cluster.local:6379/0
        - name: CELERY_RESULT_BACKEND
          value: redis://redis.redis.svc.cluster.local:6379/1
        - name: UVICORN_LOG_LEVEL
          value: debug
        - name: OSRM_FOOT_URL
          value: http://osrm-foot.osm-routing.svc.cluster.local:5000
        - name: OSRM_BICYCLE_URL
          value: http://osrm-bicycle.osm-routing.svc.cluster.local:5000
        - name: OTP_URL
          value: http://otp.osm-routing.svc.cluster.local:8080
        - name: SLACK_WEBHOOK_URL
          value: https://hooks.slack.com/services/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
        - name: WEBAUTHN_RP_ID
          value: wrongmove.viktorbarzin.me
        - name: WEBAUTHN_ORIGIN
          value: https://wrongmove.viktorbarzin.me
        image: viktorbarzin/realestatecrawler:350
        imagePullPolicy: Always
        name: realestate-crawler-api
        ports:
        - containerPort: 5001
          name: http
          protocol: TCP
        resources:
          requests:
            cpu: "50m"
            memory: "128Mi"
          limits:
            cpu: "2000m"
            memory: "1Gi"
        volumeMounts:
        - mountPath: /app/data
          mountPropagation: None
          name: data
      dnsConfig:
        options:
        - name: ndots
          value: "2"
      dnsPolicy: ClusterFirst
      enableServiceLinks: true
      priorityClassName: tier-4-aux
      restartPolicy: Always
      schedulerName: default-scheduler
      terminationGracePeriodSeconds: 30
      volumes:
      - name: data
        nfs:
          path: /mnt/main/real-estate-crawler
          server: 10.0.10.15