iloom/k8s/30-iloom/auth-service.yaml

apiVersion: v1
kind: Service
metadata:
  name: iloom-auth-service
  namespace: iloom
spec:
  type: ClusterIP
  ports:
    - port: 8081
      targetPort: 8081
  selector:
    app: iloom-auth-service
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: iloom-auth-service
  namespace: iloom
spec:
  replicas: 1
  selector:
    matchLabels:
      app: iloom-auth-service
  template:
    metadata:
      labels:
        app: iloom-auth-service
    spec:
      imagePullSecrets:
        - name: harbor-pull-secret
      initContainers:
        - name: wait-mysql
          image: harbor-in-k3s.cheverjohn.me/iloom/busybox:1.36
          command: ['sh', '-c', 'until nc -z mysql 3306; do sleep 2; done']
        - name: wait-muyu-system
          image: harbor-in-k3s.cheverjohn.me/iloom/busybox:1.36
          command: ['sh', '-c', 'until nc -z muyu-system-rpc 9001; do sleep 2; done']
      containers:
        - name: auth-service
          image: harbor-in-k3s.cheverjohn.me/iloom/iloom-auth-service:v1
          ports:
            - containerPort: 8081
          env:
            - name: PORT
              value: "8081"
            - name: DB_DSN
              valueFrom:
                secretKeyRef:
                  name: db-secret
                  key: DB_DSN
            - name: JWT_SECRET
              valueFrom:
                secretKeyRef:
                  name: app-secret
                  key: JWT_SECRET
            - name: JWT_REFRESH_SECRET
              valueFrom:
                secretKeyRef:
                  name: app-secret
                  key: JWT_REFRESH_SECRET
            - name: MUYU_SYSTEM_RPC_ADDR
              value: "muyu-system-rpc:9001"
            - name: MINIO_ENDPOINT
              value: "minio:9000"
            - name: MINIO_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: minio-secret
                  key: MINIO_ROOT_USER
            - name: MINIO_SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: minio-secret
                  key: MINIO_ROOT_PASSWORD
            - name: MINIO_BUCKET
              value: "iloom-uploads"
          resources:
            requests:
              cpu: 50m
              memory: 64Mi
            limits:
              cpu: 250m
              memory: 128Mi
          readinessProbe:
            httpGet:
              path: /health
              port: 8081
            initialDelaySeconds: 10
            periodSeconds: 10
          livenessProbe:
            httpGet:
              path: /health
              port: 8081
            initialDelaySeconds: 20
            periodSeconds: 30