apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    buildtag: "20240105_181008"
    imagetag: latest
  labels:
    app: frontend
  name: frontend
spec:
  replicas: 320
  selector:
    matchLabels:
      app: frontend
  strategy:
    rollingUpdate:
      maxSurge: 64
      maxUnavailable: 0
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: frontend
    spec:
      containers:
      - command:
        - /opt/goma/bin/frontend
        - --trace-project-id=fuchsia-infra-goma-prod
        - -auth-addr=passthrough:///auth-server:5050
        - |-
          --backend-config=local <
               exec_addr: "passthrough:///exec-server:5050"
               file_addr: "passthrough:///file-server:5050"
               execlog_addr: "passthrough:///execlog-server:5050"
               enable_bytestream: true
               trace_option <
                 cluster: "rbe-prod1"
               >
            >
        - --gport=5050
        - --port=80
        image: gcr.io/fuchsia-toolchain-images-gcr/frontend@sha256:81d6cefe6bef9223ef5a3f6b69519bf6f46db592a4d04726f1e6a1e92ce08a30
        livenessProbe:
          failureThreshold: 20
          httpGet:
            path: /healthz
            port: 8081
            scheme: HTTP
          initialDelaySeconds: 15
          periodSeconds: 15
          timeoutSeconds: 5
        name: frontend
        ports:
        - containerPort: 5050
          protocol: TCP
        - containerPort: 8081
          protocol: TCP
        - containerPort: 80
          protocol: TCP
        readinessProbe:
          failureThreshold: 4
          httpGet:
            path: /healthz
            port: 8081
            scheme: HTTP
          initialDelaySeconds: 15
          periodSeconds: 15
          timeoutSeconds: 5
        resources:
          limits:
            cpu: 800m
            memory: 1024Mi
          requests:
            cpu: 400m
            memory: 512Mi
      - args:
        - --ssl_port=9000
        - --service=rbe-prod1.endpoints.fuchsia-infra-goma-prod.cloud.goog
        - --rollout_strategy=managed
        - --backend=grpc://127.0.0.1:5050
        - '--healthz= '
        image: gcr.io/endpoints-release/endpoints-runtime:1
        name: esp
        ports:
        - containerPort: 9000
          protocol: TCP
        resources:
          limits:
            cpu: 100m
            memory: 128Mi
          requests:
            cpu: 50m
            memory: 64Mi
        volumeMounts:
        - mountPath: /etc/nginx/ssl
          name: nginx-ssl
          readOnly: true
        - mountPath: /var/lib/nginx/extra
          name: nginx-extra-conf
          readOnly: true
      terminationGracePeriodSeconds: 300
      volumes:
      - name: nginx-ssl
        secret:
          secretName: nginx-ssl
      - configMap:
          defaultMode: 420
          name: nginx-extra-conf
        name: nginx-extra-conf