Update Keycloak probe/realm import behavior and authority config so auth services start reliably on the dev cluster, while keeping CD deployment steps aligned with the actual Kubernetes overlay behavior.
80 lines
1.9 KiB
YAML
80 lines
1.9 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: workclub-api
|
|
labels:
|
|
app: workclub-api
|
|
component: backend
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: workclub-api
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: workclub-api
|
|
component: backend
|
|
spec:
|
|
containers:
|
|
- name: api
|
|
image: 192.168.241.13:8080/workclub-api:latest
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- name: http
|
|
containerPort: 8080
|
|
protocol: TCP
|
|
startupProbe:
|
|
httpGet:
|
|
path: /health/startup
|
|
port: http
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 60
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health/live
|
|
port: http
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 15
|
|
timeoutSeconds: 5
|
|
failureThreshold: 3
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /health/ready
|
|
port: http
|
|
initialDelaySeconds: 60
|
|
periodSeconds: 15
|
|
timeoutSeconds: 5
|
|
failureThreshold: 10
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 768Mi
|
|
|
|
env:
|
|
- name: ASPNETCORE_ENVIRONMENT
|
|
value: "Development"
|
|
- name: ASPNETCORE_URLS
|
|
value: "http://+:8080"
|
|
- name: ConnectionStrings__DefaultConnection
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: workclub-secrets
|
|
key: database-connection-string
|
|
- name: Keycloak__Authority
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: workclub-config
|
|
key: keycloak-authority
|
|
- name: Keycloak__Audience
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: workclub-config
|
|
key: keycloak-audience
|