apiVersion: apps/v1
kind: Deployment
metadata:
  name: clinic-data-service
spec:
  progressDeadlineSeconds: 600
  replicas: 3
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: clinic-data-service
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: clinic-data-service
    spec:
      containers:
      - image: clinic/data-service:latest
        imagePullPolicy: IfNotPresent
        name: data-service
        envFrom:
          - secretRef:
              name: clinic-data-service
        ports:
        - containerPort: 8087
          name: data-service
          protocol: TCP
        readinessProbe:
          failureThreshold: 3
          httpGet:
            path: /healthz
            port: 8087
            scheme: HTTP
          initialDelaySeconds: 10
          periodSeconds: 30
          successThreshold: 1
          timeoutSeconds: 2
        livenessProbe:
          failureThreshold: 3
          initialDelaySeconds: 30
          periodSeconds: 10
          successThreshold: 1
          tcpSocket:
            port: 8087
          timeoutSeconds: 1
        resources:
          limits:
            cpu: "2"
            memory: 4Gi
          requests:
            cpu: 500m
            memory: 2Gi
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
        volumeMounts:
        - mountPath: /app/configs
          name: clinic-data-service-config
          readOnly: true
        - mountPath: /root/.config/gcloud/
          name: gcp-credentials
          readOnly: true
        - name: alicloud-token
          mountPath: /var/run/secrets/alicloud/serviceaccount
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: clinic-data-service
      serviceAccountName: clinic-data-service
      terminationGracePeriodSeconds: 30
      volumes:
      - configMap:
          defaultMode: 420
          name: clinic-data-service-config
        name: clinic-data-service-config
      - configMap:
          defaultMode: 420
          name: clinic-data-service-gcp-credentials
        name: gcp-credentials
      - name: alicloud-token
        projected:
          sources:
          - serviceAccountToken:
              path: token
              audience: sts.amazonaws.com
              expirationSeconds: 3600