chore: update xline pod of ci,add probe,volume and security config.

Signed-off-by: Lan Liang <[email protected]>
xline-kv · Mar 30, 2024 · 25ee523 · 25ee523
1 parent eadf2d9
commit 25ee523
Showing 1 changed file with 41 additions and 7 deletions.
diff --git a/ci/artifacts/xline-pod.yaml b/ci/artifacts/xline-pod.yaml
@@ -6,12 +6,46 @@ metadata:
   namespace: kube-system
 spec:
   containers:
-    - name: xline
-      image: ghcr.io/xline-kv/xline:master
-      imagePullPolicy: IfNotPresent
-      command:
-        - /bin/sh
-        - -c
-        - xline --name node1 --members node1=kind-control-plane:2379 --data-dir /tmp/xline --storage-engine rocksdb --client-listen-urls=http://kind-control-plane:2379 --peer-listen-urls=http://kind-control-plane:2380,http://kind-control-plane:2381 --client-advertise-urls=http://kind-control-plane:2379 --peer-advertise-urls=http://kind-control-plane:2380,http://kind-control-plane:2381
+  - name: xline
+    image: ghcr.io/xline-kv/xline:master
+    imagePullPolicy: IfNotPresent
+    livenessProbe:
+      failureThreshold: 8
+      httpGet:
+        host: 127.0.0.1
+        path: /metrics
+        port: 9100
+        scheme: HTTP
+      initialDelaySeconds: 10
+      periodSeconds: 10
+      timeoutSeconds: 15
+    startupProbe:
+      failureThreshold: 24
+      httpGet:
+        host: 127.0.0.1
+        path: /metrics
+        port: 9100
+        scheme: HTTP
+      initialDelaySeconds: 10
+      periodSeconds: 10
+      timeoutSeconds: 15
+    volumeMounts:
+    - mountPath: /var/lib/xline
+      name: xline-data
+    command:
+    - xline 
+    - --name node1 
+    - --members node1=kind-control-plane:2379 
+    - --data-dir /var/lib/xline 
+    - --storage-engine rocksdb 
+    - --client-listen-urls=http://kind-control-plane:2379 
+    - --peer-listen-urls=http://kind-control-plane:2380,http://kind-control-plane:2381 
+    - --client-advertise-urls=http://kind-control-plane:2379 
+    - --peer-advertise-urls=http://kind-control-plane:2380,http://kind-control-plane:2381
   hostNetwork: true
+  priority: 2000001000
+  priorityClassName: system-node-critical
+  securityContext:
+    seccompProfile:
+      type: RuntimeDefault
 status: {}