Files
buzz-sheet/k8s/base/worker-deployment.yaml
gunshiz 87e6bcd96f
CI / Verify and audit (push) Successful in 2m33s
CI / Build, scan and deploy immutable images (push) Failing after 1m29s
feat : 6 astra improve it
2026-09-22 18:28:18 +07:00

80 lines
2.1 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: buzz-sheet-worker
labels:
app.kubernetes.io/name: buzz-sheet
app.kubernetes.io/component: worker
spec:
replicas: 1
revisionHistoryLimit: 3
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 1
maxUnavailable: 0
selector:
matchLabels:
app.kubernetes.io/name: buzz-sheet
app.kubernetes.io/component: worker
template:
metadata:
labels:
app.kubernetes.io/name: buzz-sheet
app.kubernetes.io/component: worker
spec:
automountServiceAccountToken: false
terminationGracePeriodSeconds: 35
nodeSelector:
kubernetes.io/arch: arm64
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
seccompProfile:
type: RuntimeDefault
containers:
- name: worker
image: buzz-sheet-app
imagePullPolicy: IfNotPresent
command: ["bun", "worker/outbox-worker.js"]
envFrom:
- configMapRef:
name: buzz-sheet-config
env:
- name: DATABASE_URL
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: DATABASE_URL
- name: REDIS_URL
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: REDIS_URL
- name: NEXT_DEPLOYMENT_ID
valueFrom:
configMapKeyRef:
name: buzz-sheet-config
key: NEXT_DEPLOYMENT_ID
resources:
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 500m
memory: 512Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
readOnlyRootFilesystem: true
volumeMounts:
- name: temporary
mountPath: /tmp
volumes:
- name: temporary
emptyDir: {}