zeekayandHanzo Dev
425b96f66e
Every provenance line and manifest still named a DigitalOcean context, and the ARC values described a pool that died with it. A cluster gets a name here; the address it answers on belongs to the private record. Co-authored-by: Hanzo Dev <[email protected]>
86 lines
2.0 KiB
YAML
86 lines
2.0 KiB
YAML
# Generated from the live lux-explorer/lux-faucet Deployment on lux-k8s
|
|
# by hack/live2values.py. Live is the source: a repo of hand-applied
|
|
# manifests has unknown currency, the running fleet does not.
|
|
replicas: 1
|
|
selectorLabels:
|
|
app: lux-faucet
|
|
containerName: faucet
|
|
image:
|
|
repository: ghcr.io/luxfi/faucet
|
|
tag: v1.0.1
|
|
digest: sha256:325a83ccdf406459cdce870a8d2fd1c8d34c274811fa77568b0bf92905e68e56
|
|
pullPolicy: IfNotPresent
|
|
command:
|
|
- node
|
|
args:
|
|
- build/server.js
|
|
env:
|
|
- name: PK
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: PK
|
|
name: lux-faucet-key
|
|
envFrom:
|
|
- configMapRef:
|
|
name: faucet-config
|
|
resources:
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
livenessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /health
|
|
port: http
|
|
scheme: HTTP
|
|
initialDelaySeconds: 30
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
timeoutSeconds: 5
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: /health
|
|
port: http
|
|
scheme: HTTP
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 5
|
|
successThreshold: 1
|
|
timeoutSeconds: 3
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
runAsNonRoot: true
|
|
runAsUser: 1001
|
|
ports:
|
|
- containerPort: 3000
|
|
name: http
|
|
imagePullSecrets:
|
|
- name: ghcr-luxfi
|
|
rollingUpdate:
|
|
maxSurge: 25%
|
|
maxUnavailable: 25%
|
|
topologySpread:
|
|
enabled: false
|
|
lifecycle: null
|
|
terminationGracePeriodSeconds: 30
|
|
ingress:
|
|
enabled: true
|
|
hosts:
|
|
- faucet.lux-test.network
|
|
tls: true
|
|
# The live certificate lives in this Secret. The chart would default to
|
|
# <release>-tls, and cert-manager would then issue into a NEW empty Secret
|
|
# while the host serves no cert at all until it succeeds.
|
|
secretName: faucet-lux-test-network-tls
|
|
className: ingress
|
|
|
|
# Enforcement switch, read by the lux-fleet ApplicationSet's templatePatch —
|
|
# not by the chart. On while this Application already read Synced, so it
|
|
# applies nothing today; what it adds is selfHeal, which returns a
|
|
# hand-edited object to what is written here. prune stays off.
|
|
cd:
|
|
automated: false
|