Files
buzz-sheet/k8s/base/discord-worker-deployment.yaml
T
gunshiz 87e6bcd96f
CI / Verify and audit (push) Successful in 2m33s
CI / Build, scan and deploy immutable images (push) Failing after 1m29s
feat : 6 astra improve it
2026-09-22 18:28:18 +07:00

114 lines
3.3 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: buzz-sheet-discord-worker
labels:
app.kubernetes.io/name: buzz-sheet
app.kubernetes.io/component: discord-worker
spec:
replicas: 1
revisionHistoryLimit: 3
strategy:
type: Recreate
selector:
matchLabels:
app.kubernetes.io/name: buzz-sheet
app.kubernetes.io/component: discord-worker
template:
metadata:
labels:
app.kubernetes.io/name: buzz-sheet
app.kubernetes.io/component: discord-worker
spec:
automountServiceAccountToken: false
terminationGracePeriodSeconds: 60
nodeSelector:
kubernetes.io/arch: arm64
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
seccompProfile:
type: RuntimeDefault
containers:
- name: discord-worker
image: buzz-sheet-app
imagePullPolicy: IfNotPresent
command: ["bun", "worker/discord.js"]
envFrom:
- configMapRef:
name: buzz-sheet-config
env:
- name: DATABASE_URL
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: DATABASE_URL
- name: REDIS_URL
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: REDIS_URL
- name: S3_ENDPOINT
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: S3_ENDPOINT
- name: S3_PUBLIC_URL
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: S3_PUBLIC_URL
- name: S3_BUCKET
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: S3_BUCKET
- name: S3_ACCESS_KEY_ID
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: S3_ACCESS_KEY_ID
- name: S3_SECRET_ACCESS_KEY
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: S3_SECRET_ACCESS_KEY
- name: DISCORD_BOT_TOKEN
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: DISCORD_BOT_TOKEN
- name: DISCORD_CHANNEL_ID
valueFrom:
secretKeyRef:
name: buzz-sheet-env
key: DISCORD_CHANNEL_ID
- name: NEXT_DEPLOYMENT_ID
valueFrom:
configMapKeyRef:
name: buzz-sheet-config
key: NEXT_DEPLOYMENT_ID
- name: DISCORD_LOG_CHANNEL_ID
value: "1547193755772125184"
resources:
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 500m
memory: 512Mi
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
readOnlyRootFilesystem: true
volumeMounts:
- name: temporary
mountPath: /tmp
volumes:
- name: temporary
emptyDir: {}