/
deployment-cleanup.template.yaml
149 lines (131 loc) · 4.38 KB
/
deployment-cleanup.template.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
apiVersion: batch/v1beta1
kind: CronJob
metadata:
name: web-deployment-cleanup
spec:
schedule: "*/15 * * * *"
successfulJobsHistoryLimit: 1
failedJobsHistoryLimit: 3
jobTemplate:
spec:
template:
spec:
serviceAccountName: web
containers:
- name: web-deployment-cleanup
image: # Uses web image and is filled in with script.
command: ["/bin/bash", "-c"]
# Creates a main-terminated file on exit.
# Sleeps 10 seconds to make sure that the proxy started.
# Runs the manage.py command.
args:
- |
trap "touch /tmp/pod/main-terminated" EXIT;
sleep 10;
python manage.py rm_stale_deployments --stale-after 1800
volumeMounts:
- mountPath: /tmp/pod
name: tmp-pod
resources:
requests:
memory: 0.5G
cpu: "0.5"
limits:
memory: 0.5G
cpu: "0.5"
env:
- name: PORT
value: "8000"
- name: DB_HOST
valueFrom:
secretKeyRef:
name: web-db-secret
key: host
- name: DB_USER
valueFrom:
secretKeyRef:
name: web-db-secret
key: username
- name: DB_PASS
valueFrom:
secretKeyRef:
name: web-db-secret
key: password
- name: DB_NAME
valueFrom:
secretKeyRef:
name: web-db-secret
key: database
- name: DEBUG
valueFrom:
configMapKeyRef:
name: web-configmap
key: DEBUG
optional: true
- name: LOCAL
valueFrom:
configMapKeyRef:
name: web-configmap
key: LOCAL
optional: true
- name: BUCKET
valueFrom:
configMapKeyRef:
name: web-configmap
key: BUCKET
- name: DEFAULT_CLUSTER_USER
valueFrom:
configMapKeyRef:
name: web-configmap
key: DEFAULT_CLUSTER_USER
- name: DEFAULT_VIZ_HOST
valueFrom:
configMapKeyRef:
name: web-configmap
key: DEFAULT_VIZ_HOST
- name: DJANGO_SECRET_KEY
valueFrom:
secretKeyRef:
name: web-secret
key: DJANGO_SECRET_KEY
- name: CS_CRYPT_KEY
valueFrom:
secretKeyRef:
name: web-secret
key: WEB_CS_CRYPT_KEY
- name: USE_STRIPE
valueFrom:
configMapKeyRef:
name: web-configmap
key: USE_STRIPE
- name: STRIPE_SECRET
valueFrom:
secretKeyRef:
name: web-secret
key: STRIPE_SECRET
optional: true
- name: WEBHOOK_SECRET
valueFrom:
secretKeyRef:
name: web-secret
key: WEBHOOK_SECRET
optional: true
- name: MAILGUN_API_KEY
valueFrom:
secretKeyRef:
name: web-secret
key: MAILGUN_API_KEY
optional: true
- name: SENTRY_API_DSN
valueFrom:
secretKeyRef:
name: web-secret
key: SENTRY_API_DSN
optional: true
nodeSelector:
component: web
restartPolicy: Never
volumes:
- emptyDir: {}
name: tmp-pod
backoffLimit: 1