blob: a7f61c4519145a39783666a734c574e8c9c128f0 [file] [log] [blame]
# Copyright 2022 Go Authors All rights reserved.
# Use of this source code is governed by a BSD-style
# license that can be found in the LICENSE file.
apiVersion: apps/v1
kind: Deployment
metadata:
namespace: prod
name: devapp-deployment
spec:
replicas: 2
selector:
matchLabels:
app: devapp
template:
metadata:
labels:
app: devapp
annotations:
container.seccomp.security.alpha.kubernetes.io/devapp: docker/default
container.apparmor.security.beta.kubernetes.io/devapp: runtime/default
spec:
serviceAccountName: devapp
containers:
- name: devapp
image: gcr.io/symbolic-datum-552/devapp:latest
imagePullPolicy: Always
command: ["/devapp", "-listen-https-selfsigned=:444"]
readinessProbe:
httpGet:
path: /healthz
port: 444
scheme: HTTPS
ports:
- containerPort: 444
resources:
requests:
cpu: "1"
memory: "12Gi"
ephemeral-storage: "16Gi"
limits:
memory: "16Gi"
ephemeral-storage: "32Gi"
---
apiVersion: v1
kind: Service
metadata:
namespace: prod
name: devapp-internal-iap
annotations:
cloud.google.com/backend-config: '{"default": "build-ingress-iap-backend"}'
cloud.google.com/neg: '{"ingress": false}'
cloud.google.com/app-protocols: '{"https":"HTTP2"}'
spec:
ports:
- port: 444
targetPort: 444
name: https
selector:
app: devapp
type: NodePort
---
apiVersion: v1
kind: Service
metadata:
namespace: prod
name: devapp-internal
annotations:
cloud.google.com/neg: '{"ingress": false}'
cloud.google.com/app-protocols: '{"https":"HTTP2"}'
spec:
ports:
- port: 444
targetPort: 444
name: https
selector:
app: devapp
type: NodePort