-
Notifications
You must be signed in to change notification settings - Fork 11
/
statefulset.j2
100 lines (97 loc) · 2.56 KB
/
statefulset.j2
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: "{{ pair_name }}"
namespace: "{{ _amlen_namespace }}"
labels:
app: "{{ pair_name }}"
spec:
replicas: {{ ha.enabled | default(false) | ternary( 2 , 1 ) }}
selector:
matchLabels:
app: "{{ pair_name }}"
strategy:
type: RollingUpdate
ports:
- port: 9089
- port: 9087
serviceName: "{{ pair_name }}"
persistentVolumeClaimRetentionPolicy:
whenDeleted: Delete
template:
metadata:
labels:
app: "{{ pair_name }}"
annotations:
kubectl.kubernetes.io/default-logs-container: amlen
spec:
containers:
- name: amlen
image: "{{ _amlen_image }}:{{ _amlen_image_tag }}"
imagePullPolicy: Always
ports:
- containerPort: 9089
protocol: TCP
- containerPort: 9087
protocol: TCP
readinessProbe:
exec:
command:
- python3
- /usr/share/amlen-server/bin/readiness.py
initialDelaySeconds: 10
timeoutSeconds: 5
periodSeconds: 20
successThreshold: 1
failureThreshold: 3
livenessProbe:
exec:
command:
- touch
- /tmp/alive
initialDelaySeconds: 10
timeoutSeconds: 5
periodSeconds: 10
successThreshold: 1
failureThreshold: 3
resources:
requests:
cpu: "{{ _amlen_cpu_request }}"
memory: "{{ _amlen_memory_request}}"
limits:
cpu: "{{ _amlen_cpu_limit}}"
memory: "{{ _amlen_memory_limit }}"
volumeMounts:
- name: data
mountPath: /var/lib/amlen-server
- name: adminpassword
mountPath: /secrets/adminpassword
- name: device-certs
mountPath: /secrets/device_certs
- name: ha-certs
mountPath: /secrets/ha_certs
volumes:
- name: adminpassword
secret:
secretName: "{{ pair_name }}-adminpassword"
- name: device-certs
secret:
secretName: "{{pair_name}}-cert-devices"
optional: {{ not device_certs_required }}
- name: ha-certs
secret:
secretName: "{{pair_name}}-cert-ha"
optional: {{ standalone }}
volumeClaimTemplates:
- metadata:
name: data
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: "{{_amlen_volume_size}}"
serviceTemplate:
- metadata:
name: test_service
spec:
cluster: None