apiVersion: apps/v1
kind: Deployment
metadata:
  name: search-rpc
  namespace: juwan
  labels:
    app: search-rpc
spec:
  replicas: 3
  revisionHistoryLimit: 5
  selector:
    matchLabels:
      app: search-rpc
  template:
    metadata:
      labels:
        app: search-rpc
    spec:
      serviceAccountName: find-endpoints
      containers:
        - name: search-rpc
          image: 103.236.53.208:4418/juwan/search-rpc:latest
          imagePullPolicy: Always
          ports:
            - containerPort: 8080
            - containerPort: 4001
          env:
            - name: DB_PORT
              valueFrom:
                secretKeyRef:
                  name: search-db-app
                  key: port
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: search-db-app
                  key: password
            - name: PD_USERNAME
              valueFrom:
                secretKeyRef:
                  name: search-db-app
                  key: username
            - name: DB_NAME
              valueFrom:
                secretKeyRef:
                  name: search-db-app
                  key: dbname
            - name: REDIS_M_HOST
              value: "search-redis-master.juwan:6379"
            - name: REDIS_S_HOST
              value: "search-redis-replica.juwan:6379"
            - name: REDIS_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: search-redis
                  key: password
          readinessProbe:
            tcpSocket:
              port: 8080
            initialDelaySeconds: 5
            periodSeconds: 10
          livenessProbe:
            tcpSocket:
              port: 8080
            initialDelaySeconds: 15
            periodSeconds: 20
          resources:
            requests:
              cpu: 50m
              memory: 128Mi
            limits:
              cpu: 1000m
              memory: 1024Mi
          volumeMounts:
            - name: timezone
              mountPath: /etc/localtime
      volumes:
        - name: timezone
          hostPath:
            path: /usr/share/zoneinfo/Asia/Shanghai

---
apiVersion: v1
kind: Service
metadata:
  name: search-rpc-svc
  namespace: juwan
  annotations:
    prometheus.io/scrape: "true"
    prometheus.io/port: "4001"
    prometheus.io/path: "/metrics"
spec:
  ports:
    - name: rpc
      port: 8080
      targetPort: 8080
    - name: metrics
      port: 4001
      targetPort: 4001
  selector:
    app: search-rpc

---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: search-rpc-hpa-c
  namespace: juwan
  labels:
    app: search-rpc-hpa-c
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: search-rpc
  minReplicas: 3
  maxReplicas: 10
  metrics:
    - type: Resource
      resource:
        name: cpu
        target:
          type: Utilization
          averageUtilization: 80

---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: search-rpc-hpa-m
  namespace: juwan
  labels:
    app: search-rpc-hpa-m
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: search-rpc
  minReplicas: 3
  maxReplicas: 10
  metrics:
    - type: Resource
      resource:
        name: memory
        target:
          type: Utilization
          averageUtilization: 80

---
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  namespace: juwan
  name: search-db
spec:
  instances: 3
  primaryUpdateStrategy: unsupervised
  bootstrap:
    initdb:
      database: app
      owner: app
      postInitSQL:
        - CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
  backup:
    barmanObjectStore:
      destinationPath: s3://juwan-dev-pg-backups-zj/pg-data/
      endpointURL: https://cn-nb1.rains3.com
      s3Credentials:
        accessKeyId:
          name: rc-creds
          key: ACCESS_KEY_ID
        secretAccessKey:
          name: rc-creds
          key: SECRET_ACCESS_KEY
      wal:
        compression: gzip
  storage:
    size: 1Gi
  monitoring:
    enablePodMonitor: true

---
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
  name: search-redis
  namespace: juwan
spec:
  clusterSize: 3
  kubernetesConfig:
    image: quay.io/opstree/redis:v7.0.12
    imagePullPolicy: IfNotPresent
    resources:
      requests:
        cpu: 100m
        memory: 128Mi
      limits:
        cpu: 50m
        memory: 128Mi
    redisSecret:
      name: search-redis
      key: password
  redisExporter:
    enabled: true
    image: quay.io/opstree/redis-exporter:latest
    imagePullPolicy: Always
  podSecurityContext:
    runAsUser: 1000
    fsGroup: 1000
  storage:
    volumeClaimTemplate:
      spec:
        accessModes: ["ReadWriteOnce"]
        resources:
          requests:
            storage: 1Gi

---
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisSentinel
metadata:
  name: search-redis-sentinel
  namespace: juwan
spec:
  clusterSize: 3
  kubernetesConfig:
    image: quay.io/opstree/redis-sentinel:v7.0.12
    imagePullPolicy: IfNotPresent
    resources:
      requests:
        cpu: 100m
        memory: 128Mi
      limits:
        cpu: 50m
        memory: 128Mi
  podSecurityContext:
    runAsUser: 1000
    fsGroup: 1000
  redisSentinelConfig:
    redisReplicationName: search-redis
    masterGroupName: mymaster
    redisPort: "6379"
    quorum: "2"
    downAfterMilliseconds: "5000"
    failoverTimeout: "10000"
    parallelSyncs: "1"