|
| 1 | +apiVersion: apps/v1 |
| 2 | +kind: Deployment |
| 3 | +metadata: |
| 4 | + annotations: {} |
| 5 | + labels: |
| 6 | + app.kubernetes.io/instance: api |
| 7 | + app.kubernetes.io/managed-by: Helm |
| 8 | + app.kubernetes.io/name: api |
| 9 | + app.kubernetes.io/version: "1.0" |
| 10 | + argocd.argoproj.io/instance: api |
| 11 | + helm.sh/chart: api-0.35.0 |
| 12 | + name: api-app-backend |
| 13 | + namespace: default |
| 14 | +spec: |
| 15 | + replicas: 1 |
| 16 | + selector: |
| 17 | + matchLabels: |
| 18 | + app.kubernetes.io/component: app-backend |
| 19 | + app.kubernetes.io/instance: api |
| 20 | + app.kubernetes.io/name: api |
| 21 | + template: |
| 22 | + metadata: |
| 23 | + labels: |
| 24 | + app.kubernetes.io/component: app-backend |
| 25 | + app.kubernetes.io/instance: api |
| 26 | + app.kubernetes.io/name: api |
| 27 | + spec: |
| 28 | + containers: |
| 29 | + - env: |
| 30 | + - name: CONTAINER_ROLE |
| 31 | + value: app |
| 32 | + - name: ROUTES_LOAD_WEB |
| 33 | + value: "0" |
| 34 | + - name: ROUTES_LOAD_BACKEND |
| 35 | + value: "1" |
| 36 | + - name: APP_NAME |
| 37 | + value: WBaaS Localhost |
| 38 | + - name: APP_ENV |
| 39 | + value: local |
| 40 | + - name: APP_KEY |
| 41 | + valueFrom: |
| 42 | + secretKeyRef: |
| 43 | + key: api-app-key |
| 44 | + name: api-app-secrets |
| 45 | + - name: APP_DEBUG |
| 46 | + value: "true" |
| 47 | + - name: APP_URL |
| 48 | + value: https://www.wbaas.dev |
| 49 | + - name: APP_TIMEZONE |
| 50 | + value: UTC |
| 51 | + - name: WBSTACK_SUBDOMAIN_SUFFIX |
| 52 | + value: .wbaas.dev |
| 53 | + - name: WBSTACK_UI_URL |
| 54 | + value: https://wbaas.dev |
| 55 | + - name: WBSTACK_WIKI_DB_PROVISION_VERSION |
| 56 | + value: mw1.43-wbs1 |
| 57 | + - name: WBSTACK_WIKI_DB_USE_VERSION |
| 58 | + value: mw1.43-wbs1 |
| 59 | + - name: WBSTACK_SUMMARY_CREATION_RATE_RANGES |
| 60 | + value: PT24H,P30D |
| 61 | + - name: WBSTACK_SIGNUP_THROTTLING_LIMIT |
| 62 | + value: "20" |
| 63 | + - name: WBSTACK_SIGNUP_THROTTLING_RANGE |
| 64 | + value: PT24H |
| 65 | + - name: WBSTACK_QS_BATCH_PENDING_TIMEOUT |
| 66 | + value: PT300S |
| 67 | + - name: WBSTACK_QS_BATCH_MARK_FAILED_AFTER |
| 68 | + value: "3" |
| 69 | + - name: WBSTACK_CONTACT_MAIL_RECIPIENT |
| 70 | + value: someone@wikimedia.de |
| 71 | + - name: WBSTACK_CONTACT_MAIL_SENDER |
| 72 | + value: contact-<subject>@wbaas.dev |
| 73 | + - name: WBSTACK_COMPLAINT_MAIL_RECIPIENT |
| 74 | + value: someone@wikimedia.de |
| 75 | + - name: WBSTACK_COMPLAINT_MAIL_SENDER |
| 76 | + value: dsa@wbaas.dev |
| 77 | + - name: WBSTACK_ELASTICSEARCH_ENABLED_BY_DEFAULT |
| 78 | + value: "true" |
| 79 | + - name: TRUSTED_PROXY_PROXIES |
| 80 | + value: '*' |
| 81 | + - name: ELASTICSEARCH_SHARED_INDEX_HOST |
| 82 | + value: elasticsearch-2.default.svc.cluster.local:9200 |
| 83 | + - name: ELASTICSEARCH_SHARED_INDEX_PREFIX |
| 84 | + value: wiki_1 |
| 85 | + - name: QUERY_SERVICE_HOST |
| 86 | + value: queryservice.default.svc.cluster.local:9999 |
| 87 | + - name: PLATFORM_MW_BACKEND_HOST |
| 88 | + value: mediawiki-143-app-backend.default.svc.cluster.local |
| 89 | + - name: REDIS_HOST |
| 90 | + value: redis-master.default.svc.cluster.local |
| 91 | + - name: REDIS_PASSWORD |
| 92 | + valueFrom: |
| 93 | + secretKeyRef: |
| 94 | + key: password |
| 95 | + name: redis-password |
| 96 | + - name: REDIS_PORT |
| 97 | + value: "6379" |
| 98 | + - name: REDIS_DB |
| 99 | + value: "2" |
| 100 | + - name: REDIS_CACHE_DB |
| 101 | + value: "3" |
| 102 | + - name: REDIS_PREFIX |
| 103 | + value: wikibase_dev_api |
| 104 | + - name: MAIL_MAILER |
| 105 | + value: smtp |
| 106 | + - name: MAILGUN_DOMAIN |
| 107 | + value: sandbox111.mailgun.org |
| 108 | + - name: MAILGUN_SECRET |
| 109 | + value: abc123 |
| 110 | + - name: MAIL_FROM_ADDRESS |
| 111 | + value: noreply-local@fake.wikibase.dev |
| 112 | + - name: MAIL_FROM_NAME |
| 113 | + value: Wikibase-dev |
| 114 | + - name: MAIL_HOST |
| 115 | + value: mailhog |
| 116 | + - name: MAIL_PORT |
| 117 | + value: "1025" |
| 118 | + - name: MAIL_ENCRYPTION |
| 119 | + value: null |
| 120 | + - name: MAIL_USERNAME |
| 121 | + - name: MAIL_PASSWORD |
| 122 | + - name: GOOGLE_CLOUD_PROJECT_ID |
| 123 | + value: something |
| 124 | + - name: GOOGLE_CLOUD_STORAGE_BUCKET |
| 125 | + valueFrom: |
| 126 | + configMapKeyRef: |
| 127 | + key: gcs_api_static_bucket_name |
| 128 | + name: storage-bucket |
| 129 | + optional: true |
| 130 | + - name: GOOGLE_CLOUD_STORAGE_KEY_FILE |
| 131 | + value: /var/run/secret/cloud.google.com/key.json |
| 132 | + - name: LOG_CHANNEL |
| 133 | + value: stderr |
| 134 | + - name: LOG_LEVEL |
| 135 | + value: debug |
| 136 | + - name: STACKDRIVER_ENABLED |
| 137 | + value: "false" |
| 138 | + - name: STACKDRIVER_PROJECT_ID |
| 139 | + value: something |
| 140 | + - name: STACKDRIVER_LOGGING_ENABLED |
| 141 | + value: "false" |
| 142 | + - name: STACKDRIVER_TRACING_ENABLED |
| 143 | + value: "false" |
| 144 | + - name: STACKDRIVER_ERROR_REPORTING_ENABLED |
| 145 | + value: "true" |
| 146 | + - name: STACKDRIVER_KEY_FILE_PATH |
| 147 | + value: /var/run/secret/cloud.google.com/key.json |
| 148 | + - name: STACKDRIVER_ERROR_REPORTING_BATCH_ENABLED |
| 149 | + value: "false" |
| 150 | + - name: STACKDRIVER_LOGGING_BATCH_ENABLED |
| 151 | + value: "false" |
| 152 | + - name: CACHE_DRIVER |
| 153 | + value: redis |
| 154 | + - name: QUEUE_CONNECTION |
| 155 | + value: redis |
| 156 | + - name: JWT_SECRET |
| 157 | + valueFrom: |
| 158 | + secretKeyRef: |
| 159 | + key: api-app-jwt-secret |
| 160 | + name: api-app-secrets |
| 161 | + - name: DB_CONNECTION |
| 162 | + value: mysql |
| 163 | + - name: DB_HOST_READ |
| 164 | + value: sql-mariadb-secondary.default.svc.cluster.local |
| 165 | + - name: DB_HOST_WRITE |
| 166 | + value: sql-mariadb-primary.default.svc.cluster.local |
| 167 | + - name: DB_PORT |
| 168 | + value: "3306" |
| 169 | + - name: DB_DATABASE |
| 170 | + value: apidb |
| 171 | + - name: DB_USERNAME |
| 172 | + value: apiuser |
| 173 | + - name: DB_PASSWORD |
| 174 | + valueFrom: |
| 175 | + secretKeyRef: |
| 176 | + key: SQL_INIT_PASSWORD_API |
| 177 | + name: sql-secrets-init-passwords |
| 178 | + - name: PASSPORT_PUBLIC_KEY |
| 179 | + valueFrom: |
| 180 | + secretKeyRef: |
| 181 | + key: oauth-public.key |
| 182 | + name: api-passport-keys |
| 183 | + - name: PASSPORT_PRIVATE_KEY |
| 184 | + valueFrom: |
| 185 | + secretKeyRef: |
| 186 | + key: oauth-private.key |
| 187 | + name: api-passport-keys |
| 188 | + image: ghcr.io/wbstack/api:10x.18.2 |
| 189 | + imagePullPolicy: IfNotPresent |
| 190 | + livenessProbe: |
| 191 | + failureThreshold: 3 |
| 192 | + httpGet: |
| 193 | + path: /backend/healthz |
| 194 | + port: http |
| 195 | + initialDelaySeconds: 10 |
| 196 | + periodSeconds: 10 |
| 197 | + successThreshold: 1 |
| 198 | + timeoutSeconds: 2 |
| 199 | + name: api-backend |
| 200 | + ports: |
| 201 | + - containerPort: 80 |
| 202 | + name: http |
| 203 | + protocol: TCP |
| 204 | + readinessProbe: |
| 205 | + failureThreshold: 3 |
| 206 | + httpGet: |
| 207 | + path: /backend/healthz |
| 208 | + port: http |
| 209 | + initialDelaySeconds: 10 |
| 210 | + periodSeconds: 10 |
| 211 | + successThreshold: 1 |
| 212 | + timeoutSeconds: 2 |
| 213 | + resources: |
| 214 | + limits: |
| 215 | + cpu: 1000m |
| 216 | + memory: 600Mi |
| 217 | + requests: |
| 218 | + cpu: 200m |
| 219 | + memory: 300Mi |
0 commit comments