terraform-contour-mirror/test-app/deployment.yaml

49 lines
1.6 KiB
YAML

# Acceptance-test deployment for the v2 secrets contract (SECRETS-CONTRACT-PLAN.md).
# Applied manually with kubectl after `live/namespace`, `live/rabbitmq` and
# `live/secrets` are applied for INFRA_ENV=brusnika-stage - not part of any
# terragrunt stack, this is a throwaway probe, not managed infrastructure.
apiVersion: apps/v1
kind: Deployment
metadata:
name: secrets-contract-probe
namespace: test-terraform
labels:
app: secrets-contract-probe
spec:
replicas: 1
selector:
matchLabels:
app: secrets-contract-probe
template:
metadata:
labels:
app: secrets-contract-probe
spec:
imagePullSecrets:
- name: regcred
containers:
- name: probe
image: cr.yandex/crp3ccidau046kdj8g9q/secrets-contract-probe:v1
env:
- name: RABBITMQ_HOST
valueFrom: { secretKeyRef: { name: rabbitmq, key: host } }
- name: RABBITMQ_PORT
valueFrom: { secretKeyRef: { name: rabbitmq, key: port } }
- name: RABBITMQ_VHOST
valueFrom: { secretKeyRef: { name: rabbitmq, key: vhost } }
- name: RABBITMQ_USERNAME
valueFrom: { secretKeyRef: { name: rabbitmq, key: username } }
- name: RABBITMQ_PASSWORD
valueFrom: { secretKeyRef: { name: rabbitmq, key: password } }
- name: PROBE_QUEUE
value: test-terraform-probe
- name: PROBE_INTERVAL_SECONDS
value: "15"
resources:
requests:
cpu: 10m
memory: 32Mi
limits:
cpu: 100m
memory: 64Mi