hanzo-dev
909d3bd962
Every file that opted in described the DigitalOcean estate, so CD applying it put a pod in front of static sites the edge already serves from disk. Automation stays per service; a file re-opts in once what it declares has been shown to run on this cluster.
111 lines
2.5 KiB
YAML
111 lines
2.5 KiB
YAML
replicas: 2
|
|
selectorLabels:
|
|
app: bridge-server
|
|
image:
|
|
repository: ghcr.io/luxfi/bridge-server
|
|
digest: sha256:b46d6d741dee8d4ee22f4aad1eb367e0fa5132384365b2b6bd105ab87575e6a9
|
|
pullPolicy: Always
|
|
env:
|
|
- name: NODE_ENV
|
|
value: production
|
|
- name: PORT
|
|
value: "3000"
|
|
- name: DATABASE_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: database-url
|
|
name: bridge-secrets
|
|
- name: NATS_URL
|
|
value: nats://nats:4222
|
|
- name: CONSUL_URL
|
|
value: http://consul:8500
|
|
- name: NODE_ID
|
|
valueFrom:
|
|
fieldRef:
|
|
apiVersion: v1
|
|
fieldPath: metadata.name
|
|
- name: MPC_THRESHOLD
|
|
value: "3"
|
|
- name: MPC_TOTAL_NODES
|
|
value: "5"
|
|
- name: MPC_KEY_PREFIX
|
|
value: bridge/mpc
|
|
- name: MPC_INITIATOR_KEY_PATH
|
|
value: /etc/mpc/initiator.key
|
|
- name: NODE_OPTIONS
|
|
value: --max-old-space-size=1536
|
|
- name: POSTGRES_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: postgres-url
|
|
name: bridge-secrets
|
|
- name: BRIDGE_FEE_COLLECTOR
|
|
value: "0xa5cd9b2b514c42a1e124d4087d1c654dad2052ad"
|
|
- name: MPC_API_URL
|
|
value: https://mpc.lux.cloud
|
|
- name: MPC_API_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: MPC_API_TOKEN
|
|
name: bridge-mpc-token
|
|
- name: MPC_WALLET_ID
|
|
value: "17727859650255619160017"
|
|
resources:
|
|
limits:
|
|
cpu: "1"
|
|
memory: 1Gi
|
|
requests:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
volumeMounts:
|
|
- mountPath: /etc/mpc/initiator.key
|
|
name: mpc-keys
|
|
readOnly: true
|
|
subPath: initiator.key
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /health
|
|
port: 3000
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 5
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
volumes:
|
|
- name: mpc-keys
|
|
secret:
|
|
items:
|
|
- key: initiator.key
|
|
path: initiator.key
|
|
secretName: mpc-identity-keys
|
|
rollingUpdate:
|
|
maxSurge: 25%
|
|
maxUnavailable: 25%
|
|
topologySpread:
|
|
enabled: false
|
|
lifecycle: null
|
|
terminationGracePeriodSeconds: 30
|
|
imagePullSecrets: []
|
|
ports:
|
|
- containerPort: 3000
|
|
name: http
|
|
protocol: TCP
|
|
livenessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /health
|
|
port: 3000
|
|
scheme: HTTP
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 1
|
|
|
|
# Enforcement switch, read by the lux-fleet ApplicationSet's templatePatch —
|
|
# not by the chart. On while this Application already read Synced, so it
|
|
# applies nothing today; what it adds is selfHeal, which returns a
|
|
# hand-edited object to what is written here. prune stays off.
|
|
cd:
|
|
automated: false
|