github.com/mre-fog/trillianxx@v1.1.2-0.20180615153820-ae375a99d36a/examples/deployment/kubernetes/trillian-log-signer-deployment.yaml (about)

     1  apiVersion: extensions/v1beta1
     2  kind: Deployment
     3  metadata:
     4    labels:
     5      io.kompose.service: trillian-log-signer
     6    name: trillian-logsigner-deployment
     7  spec:
     8    replicas: 2
     9    strategy: {}
    10    template:
    11      metadata:
    12        creationTimestamp: null
    13        labels:
    14          io.kompose.service: trillian-log-signer
    15      spec:
    16        volumes:
    17        - name: google-cloud-key
    18          secret:
    19            secretName: trillian-key
    20        nodeSelector:
    21          cloud.google.com/gke-nodepool: signer-pool
    22        restartPolicy: Always
    23        containers:
    24        - args: [
    25          "$(STORAGE_FLAG)",
    26          "--storage_system=$(STORAGE_SYSTEM)",
    27          "--etcd_servers=trillian-etcd-cluster-client:2379",
    28          "--quota_system=etcd",
    29          "--etcd_http_service=trillian-logsigner-http",
    30          "--http_endpoint=0.0.0.0:8091",
    31          "--sequencer_guard_window=1s",
    32          "--sequencer_interval=$(SIGNER_INTERVAL)",
    33          "--num_sequencers=$(SIGNER_NUM_SEQUENCERS)",
    34          "--batch_size=$(SIGNER_BATCH_SIZE)",
    35          "--cloudspanner_dequeue_bucket_fraction=$(SIGNER_DEQUEUE_BUCKET_FRACTION)",
    36          "--resign_odds=$(SIGNER_RESIGN_ODDS)",
    37          "--alsologtostderr"
    38          ]
    39          envFrom:
    40            - configMapRef:
    41                name: deploy-config
    42          # Update this with the name of your project:
    43          image: gcr.io/${PROJECT_NAME}/log_signer:latest
    44          imagePullPolicy: Always
    45          resources:
    46            limits:
    47              cpu: "1.5"
    48            requests:
    49              cpu: "1"
    50          livenessProbe:
    51            httpGet:
    52              path: /healthz
    53              port: 8091
    54            failureThreshold: 3
    55            periodSeconds: 30
    56            timeoutSeconds: 5
    57          name: trillian-log-signer
    58          ports:
    59          - containerPort: 8091
    60          volumeMounts:
    61          - name: google-cloud-key
    62            mountPath: /var/secrets/google
    63        - name: prometheus-to-sd
    64          image: gcr.io/google-containers/prometheus-to-sd:v0.2.6
    65          ports:
    66            - name: profiler
    67              containerPort: 6060
    68          command:
    69            - /monitor
    70            - --stackdriver-prefix=custom.googleapis.com
    71            - --source=logsigner:http://localhost:8091/metrics
    72            - --pod-id=$(POD_NAME)
    73            - --namespace-id=$(POD_NAMESPACE)
    74            - --metrics-resolution=5s
    75          env:
    76            - name: POD_NAME
    77              valueFrom:
    78                fieldRef:
    79                  fieldPath: metadata.name
    80            - name: POD_NAMESPACE
    81              valueFrom:
    82                fieldRef:
    83                  fieldPath: metadata.namespace
    84  status: {}