Test
fde949ad5d
- Binary path: /app/worker (not /app/workflows) ✅ - Env var: TEMPORAL_HOSTPORT (not TEMPORAL_HOST) ✅ - ConfigMap key: temporal-hostport (not temporal-host) ✅ - Add temporal-namespace to ConfigMap - Separate server (HTTP) and worker (Temporal activities) containers - Fix health check endpoints
113 lines
3.0 KiB
YAML
113 lines
3.0 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: poimen-workflows
|
|
namespace: poimen
|
|
labels:
|
|
app.kubernetes.io/name: poimen
|
|
app.kubernetes.io/component: worker
|
|
spec:
|
|
replicas: 2
|
|
selector:
|
|
matchLabels:
|
|
app: poimen-workflows
|
|
app.kubernetes.io/name: poimen
|
|
app.kubernetes.io/component: worker
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: poimen-workflows
|
|
app.kubernetes.io/name: poimen
|
|
app.kubernetes.io/component: worker
|
|
spec:
|
|
imagePullSecrets:
|
|
- name: poimen-registry
|
|
containers:
|
|
# Workflows server (HTTP, health checks)
|
|
- name: workflows-server
|
|
image: forgejo.riotpiao.com/rock/poimen-workflows:latest
|
|
imagePullPolicy: Always
|
|
command: ["/app/worker", "server"]
|
|
ports:
|
|
- containerPort: 8080
|
|
name: http
|
|
env:
|
|
- name: DATABASE_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: poimen-db-credentials
|
|
key: workflows-url
|
|
- name: TEMPORAL_HOSTPORT
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: poimen-config
|
|
key: temporal-hostport
|
|
- name: TEMPORAL_NAMESPACE
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: poimen-config
|
|
key: temporal-namespace
|
|
- name: MEMORY_SERVICE_URL
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: poimen-config
|
|
key: memory-service-url
|
|
- name: JWT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: poimen-secrets
|
|
key: jwt-secret
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /health
|
|
port: 8080
|
|
initialDelaySeconds: 10
|
|
periodSeconds: 10
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /ready
|
|
port: 8080
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 5
|
|
resources:
|
|
requests:
|
|
memory: "256Mi"
|
|
cpu: "250m"
|
|
limits:
|
|
memory: "1Gi"
|
|
cpu: "1000m"
|
|
|
|
# Temporal worker (activity executor)
|
|
- name: workflows-worker
|
|
image: forgejo.riotpiao.com/rock/poimen-workflows:latest
|
|
imagePullPolicy: Always
|
|
command: ["/app/worker"]
|
|
env:
|
|
- name: DATABASE_URL
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: poimen-db-credentials
|
|
key: workflows-url
|
|
- name: TEMPORAL_HOSTPORT
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: poimen-config
|
|
key: temporal-hostport
|
|
- name: TEMPORAL_NAMESPACE
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: poimen-config
|
|
key: temporal-namespace
|
|
- name: MEMORY_SERVICE_URL
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: poimen-config
|
|
key: memory-service-url
|
|
resources:
|
|
requests:
|
|
memory: "512Mi"
|
|
cpu: "500m"
|
|
limits:
|
|
memory: "2Gi"
|
|
cpu: "2000m"
|