apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    buildtag: "20240105_173459"
    imagetag: latest
  labels:
    app: auth-server
  name: auth-server
spec:
  replicas: 1
  selector:
    matchLabels:
      app: auth-server
  strategy:
    rollingUpdate:
      maxSurge: 2
      maxUnavailable: 0
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: auth-server
    spec:
      containers:
      - command:
        - /opt/goma/bin/auth_server
        - --project-id=fuchsia-infra-goma-dev
        - --auth-db-addr=https://cxx-compiler-service.appspot.com/authdb/checkMembership
        - --acl-file=/etc/goma/acl/acl
        - --service-account-json-dir=/etc/goma/service-accounts
        - --remoteexec-addr=remotebuildexecution.googleapis.com:443
        - --remote-instance-name=projects/fuchsia-infra-goma-dev/instances/default_instance
        image: gcr.io/fuchsia-toolchain-images-gcr/auth-server@sha256:ab5d0da6effd1db29d6873929100ddb1bb15a52035f53148c14e3fba0bd011aa
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8081
            scheme: HTTP
          initialDelaySeconds: 5
          periodSeconds: 5
        name: auth-server
        ports:
        - containerPort: 5050
          protocol: TCP
        - containerPort: 8081
          protocol: TCP
        readinessProbe:
          httpGet:
            path: /healthz
            port: 8081
            scheme: HTTP
          initialDelaySeconds: 5
          periodSeconds: 5
        resources:
          limits:
            cpu: 50m
            memory: 64Mi
          requests:
            cpu: 25m
            memory: 32Mi
        volumeMounts:
        - mountPath: /etc/goma/acl
          name: acl
      volumes:
      - configMap:
          defaultMode: 420
          name: acl
        name: acl