Files
wild-directory/ushahidi/versions/5/deployment-worker.yaml
2026-06-19 21:33:30 +00:00

84 lines
2.3 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: ushahidi-worker
namespace: ushahidi
spec:
replicas: 1
selector:
matchLabels:
component: worker
template:
metadata:
labels:
component: worker
spec:
securityContext:
runAsUser: 0
runAsNonRoot: false
seccompProfile:
type: RuntimeDefault
containers:
- name: ushahidi-worker
image: ghcr.io/ushahidi/platform:v2025.04.1
env:
- name: APP_ENV
value: production
- name: APP_DEBUG
value: "false"
- name: APP_KEY
valueFrom:
secretKeyRef:
name: ushahidi-secrets
key: appKey
- name: ENABLE_NGINX
value: "false"
- name: ENABLE_PHPFPM
value: "false"
- name: ENABLE_PLATFORM_TASKS
value: "true"
- name: ENABLE_QUEUE_LISTEN
value: "true"
- name: TASK_RUN_PERIOD_SECS
value: "30"
- name: RUN_PLATFORM_MIGRATIONS
value: "false"
- name: DB_MIGRATIONS_HANDLED
value: "true"
- name: DB_CONNECTION
value: mysql
- name: DB_HOST
value: {{ .db.host }}
- name: DB_PORT
value: "{{ .db.port }}"
- name: DB_DATABASE
value: {{ .db.name }}
- name: DB_USERNAME
value: {{ .db.user }}
- name: DB_PASSWORD
valueFrom:
secretKeyRef:
name: ushahidi-secrets
key: dbPassword
- name: REDIS_HOST
value: {{ .redis.host }}
- name: REDIS_PORT
value: "{{ .redis.port }}"
- name: CACHE_DRIVER
value: redis
- name: QUEUE_DRIVER
value: redis
resources:
limits:
cpu: "1"
ephemeral-storage: 1Gi
memory: 512Mi
requests:
cpu: 50m
ephemeral-storage: 100Mi
memory: 128Mi
securityContext:
allowPrivilegeEscalation: true
readOnlyRootFilesystem: false
restartPolicy: Always