main
{{- if .Values.apihost.enabled }}
apiVersion: apps/v1
kind: Deployment
metadata:
name: {{ printf "%s-apihost" (include "gitdata.fullname" .) }}
labels:
{{- include "gitdata.labels" . | nindent 4 }}
app.kubernetes.io/component: apihost
spec:
{{- if .Values.apihost.autoscaling.enabled }}
# 开着 HPA 时不要声明 replicas：HPA 通过 /scale 子资源写这个字段，
# kube-controller-manager 于是成为它的 manager；helm 的 server-side apply
# 再写一次就会报 conflict with "kube-controller-manager" with subresource
# "scale": .spec.replicas —— 升级直接失败；而且就算写进去，也会把已经扩上
# 去的副本数硬拉回 minReplicas。省略即让出所有权：SSA 不会因此把字段清成
# 默认值，副本数继续由 scale 子资源持有。
{{- else }}
replicas: {{ .Values.apihost.replicaCount }}
{{- end }}
revisionHistoryLimit: 3
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: {{ .Values.apihost.maxSurge }}
maxUnavailable: {{ .Values.apihost.maxUnavailable }}
selector:
matchLabels:
{{- include "gitdata.selectorLabels" . | nindent 6 }}
app.kubernetes.io/component: apihost
template:
metadata:
labels:
{{- include "gitdata.selectorLabels" . | nindent 8 }}
app.kubernetes.io/component: apihost
{{- with .Values.podLabels }}
{{- toYaml . | nindent 8 }}
{{- end }}
annotations:
checksum/env: {{ toYaml .Values.config.env | sha256sum }}
{{- with .Values.podAnnotations }}
{{- toYaml . | nindent 8 }}
{{- end }}
spec:
serviceAccountName: {{ include "gitdata.serviceAccountName" . }}
{{- include "gitdata.imagePullSecrets" . | nindent 6 }}
terminationGracePeriodSeconds: 45
securityContext:
{{- toYaml .Values.podSecurityContext | nindent 8 }}
{{- if or (eq .Values.apihost.podAntiAffinity "soft") (eq .Values.apihost.podAntiAffinity "hard") }}
affinity:
{{- include "gitdata.podAntiAffinity" (dict "ctx" . "mode" .Values.apihost.podAntiAffinity "component" "apihost") | nindent 8 }}
{{- end }}
{{- with .Values.nodeSelector }}
nodeSelector:
{{- toYaml . | nindent 8 }}
{{- end }}
{{- with .Values.tolerations }}
tolerations:
{{- toYaml . | nindent 8 }}
{{- end }}
containers:
- name: apihost
image: {{ include "gitdata.image" . }}
imagePullPolicy: {{ .Values.image.pullPolicy }}
args: ["app", "serve"]
{{- include "gitdata.envFrom" . | nindent 10 }}
env:
{{- include "gitdata.env" . | nindent 12 }}
{{- with .Values.apihost.extraEnv }}
{{- toYaml . | nindent 12 }}
{{- end }}
ports:
- name: http
containerPort: {{ .Values.apihost.port }}
- name: rpc
containerPort: {{ .Values.apihost.rpcPort }}
livenessProbe:
httpGet: { path: /healthz, port: http }
initialDelaySeconds: 10
periodSeconds: 15
timeoutSeconds: 3
readinessProbe:
httpGet: { path: /readyz, port: http }
initialDelaySeconds: 5
periodSeconds: 10
timeoutSeconds: 3
failureThreshold: 3
lifecycle:
preStop:
exec:
command: ["/bin/sh", "-c", "sleep 5"]
securityContext:
{{- toYaml .Values.securityContext | nindent 12 }}
resources:
{{- toYaml .Values.apihost.resources | nindent 12 }}
volumeMounts:
- name: repos
mountPath: {{ .Values.persistence.repos.mountPath }}
{{- if .Values.identityKey.secretName }}
- name: identity-keys
mountPath: {{ .Values.identityKey.mountPath }}
readOnly: true
{{- end }}
volumes:
{{- if .Values.identityKey.secretName }}
- name: identity-keys
secret:
secretName: {{ .Values.identityKey.secretName }}
{{- end }}
- name: repos
{{- if .Values.persistence.repos.existingClaim }}
persistentVolumeClaim:
claimName: {{ .Values.persistence.repos.existingClaim }}
{{- else if .Values.persistence.repos.enabled }}
persistentVolumeClaim:
claimName: {{ printf "%s-repos" (include "gitdata.fullname" .) }}
{{- else }}
emptyDir: {}
{{- end }}
---
apiVersion: v1
kind: Service
metadata:
name: {{ printf "%s-apihost" (include "gitdata.fullname" .) }}
labels:
{{- include "gitdata.labels" . | nindent 4 }}
app.kubernetes.io/component: apihost
spec:
type: ClusterIP
selector:
{{- include "gitdata.selectorLabels" . | nindent 4 }}
app.kubernetes.io/component: apihost
ports:
- name: http
port: {{ .Values.apihost.port }}
targetPort: http
- name: rpc
port: {{ .Values.apihost.rpcPort }}
targetPort: rpc
{{- if .Values.apihost.autoscaling.enabled }}
---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
name: {{ printf "%s-apihost" (include "gitdata.fullname" .) }}
labels:
{{- include "gitdata.labels" . | nindent 4 }}
app.kubernetes.io/component: apihost
spec:
scaleTargetRef:
apiVersion: apps/v1
kind: Deployment
name: {{ printf "%s-apihost" (include "gitdata.fullname" .) }}
minReplicas: {{ .Values.apihost.autoscaling.minReplicas }}
maxReplicas: {{ .Values.apihost.autoscaling.maxReplicas }}
metrics:
- type: Resource
resource:
name: cpu
target:
type: Utilization
averageUtilization: {{ .Values.apihost.autoscaling.targetCPUUtilizationPercentage }}
{{- if gt (int (.Values.apihost.autoscaling.targetMemoryUtilizationPercentage | default 0)) 0 }}
- type: Resource
resource:
name: memory
target:
type: Utilization
averageUtilization: {{ .Values.apihost.autoscaling.targetMemoryUtilizationPercentage }}
{{- end }}
{{- with .Values.apihost.autoscaling.behavior }}
behavior:
{{- toYaml . | nindent 4 }}
{{- end }}
{{- end }}
{{- if .Values.apihost.pdb.enabled }}
---
apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
name: {{ printf "%s-apihost" (include "gitdata.fullname" .) }}
labels:
{{- include "gitdata.labels" . | nindent 4 }}
app.kubernetes.io/component: apihost
spec:
minAvailable: {{ .Values.apihost.pdb.minAvailable }}
selector:
matchLabels:
{{- include "gitdata.selectorLabels" . | nindent 6 }}
app.kubernetes.io/component: apihost
{{- end }}
{{- end }}