apiVersion: apps/v1
kind: Deployment
metadata:
  name: jump-gateway
spec:
  replicas: 1
  selector:
    matchLabels:
      app: jump-gateway
  template:
    metadata:
      labels:
        app: jump-gateway
    spec:
      serviceAccountName: jump-gateway-sa
      containers:
      - name: jump-gateway
        image: pingcap/jump-gateway-image:latest
        command:
          - /jump-gateway
          - --config=/etc/config/config.yaml
        volumeMounts:
          - name: config
            mountPath: /etc/config
          - name: external-logs
            mountPath: /var/log/jump-gateway
        resources:
          limits:
            cpu: 100m
            memory: 500Mi
          requests:
            cpu: 50m
            memory: 100Mi
      - name: access-log-tailer
        image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
        command:
          - /bin/sh
          - -c
          - tail -F /var/log/jump-gateway/access.log 2>/dev/null
        volumeMounts:
          - name: external-logs
            mountPath: /var/log/jump-gateway
        resources:
          limits:
            cpu: 50m
            memory: 50Mi
      volumes:
        - name: config
          configMap:
            name: jump-gateway-config
        - name: external-logs
          emptyDir: {}
      securityContext:
        fsGroup: 65534